@openclaw/gateway-client 2026.9.5 → 2026.9.7

package/dist/{protocol-client-DZ7F1DIs.d.mts → protocol-client-DT451Msj.d.mts}

@@ -1,4 +1,5 @@
-import { n as GatewayProtocolRequestOptions, t as GatewayProtocolRequestError } from "./protocol-request-B5gBmLgq.mjs";
+import { n as GatewayProtocolRequestOptions, t as GatewayProtocolRequestError } from "./protocol-request-CtVhe3Bj.mjs";
+import { GatewayClientMode, GatewayClientName } from "@openclaw/gateway-protocol/client-info";
 import { ErrorShape, EventFrame, HelloOk } from "@openclaw/gateway-protocol";
 //#region packages/gateway-client/src/pending-request.d.ts
 type GatewayProtocolRequestTiming = {
@@ -12,6 +13,20 @@ type GatewayProtocolRequestTiming = {
 };
 //#endregion
 //#region packages/gateway-client/src/protocol-client-contract.d.ts
+type GatewayClientCloseInfo = {
+  phase: "pre-hello" | "post-hello";
+  socketOpened: boolean;
+  transportValidated: boolean;
+  connectRequestSent?: boolean;
+  transientPreHelloCleanClose: boolean;
+  connectError?: Error;
+};
+type GatewayClientConnectionMetadata = {
+  clientName?: GatewayClientName;
+  hasDeviceIdentity: boolean;
+  mode?: GatewayClientMode;
+  preauthHandshakeTimeoutMs?: number;
+};
 type GatewayProtocolSocket = {
   isOpen: () => boolean;
   send: (data: string) => void;
@@ -91,6 +106,7 @@ type GatewayProtocolClientOptions<TPlan> = {
   onConnectError?: (error: Error) => void;
   onSocketFactoryError?: (error: Error) => void;
   onReconnectStopped?: (error: Error) => void;
+  onReconnectScheduled?: (delayMs: number, signal: AbortSignal) => void;
   onParseError?: (error: unknown) => void;
   onEvent?: (event: EventFrame) => void;
   onGap?: (info: {
@@ -166,6 +182,7 @@ declare class GatewayProtocolClient<TPlan> {
   private handleConnectPlanError;
   private sendConnectPlan;
   private handleMessage;
+  private dispatchEvent;
   private handleClose;
   private handleSocketError;
   private scheduleReconnect;
@@ -178,4 +195,4 @@ declare class GatewayProtocolClient<TPlan> {
   private invoke;
 }
 //#endregion
-export { GatewayProtocolSocketHandlers as a, GatewayProtocolSocket as i, GatewayProtocolCloseContext as n, GatewayProtocolTiming as o, GatewayProtocolConnectAuthority as r, GatewayProtocolRequestTiming as s, GatewayProtocolClient as t };
+export { GatewayProtocolConnectAuthority as a, GatewayProtocolTiming as c, GatewayProtocolCloseContext as i, GatewayProtocolRequestTiming as l, GatewayClientCloseInfo as n, GatewayProtocolSocket as o, GatewayClientConnectionMetadata as r, GatewayProtocolSocketHandlers as s, GatewayProtocolClient as t };

package/dist/{protocol-request-B5gBmLgq.d.mts → protocol-request-CtVhe3Bj.d.mts}

@@ -5,7 +5,7 @@ declare function isGatewayProtocolResponseError(error: unknown): error is Gatewa
 type GatewayProtocolRequestOptions = {
   timeoutMs?: number | null;
   expectFinal?: boolean;
-  onSent?: () => void;
+  onSent?: (requestId: string) => void;
   onAccepted?: (payload: unknown) => void;
   signal?: AbortSignal;
 };

package/dist/{readiness-B99dV5nY.d.mts → readiness-Cj5C24o2.d.mts}

@@ -1,7 +1,8 @@
-import { n as GatewayProtocolRequestOptions, r as GatewayProtocolRequestTimeoutError, t as GatewayProtocolRequestError } from "./protocol-request-B5gBmLgq.mjs";
-import "./protocol-client-DZ7F1DIs.mjs";
+import { n as GatewayProtocolRequestOptions, r as GatewayProtocolRequestTimeoutError, t as GatewayProtocolRequestError } from "./protocol-request-CtVhe3Bj.mjs";
+import { l as GatewayProtocolRequestTiming, n as GatewayClientCloseInfo, r as GatewayClientConnectionMetadata } from "./protocol-client-DT451Msj.mjs";
 import { ConnectParams, ErrorShape, EventFrame, HelloOk } from "@openclaw/gateway-protocol/frame-guards";
 import { GatewayClientMode, GatewayClientName } from "@openclaw/gateway-protocol/client-info";
+import "ws";
 //#region packages/gateway-client/src/client-device-auth.d.ts
 type DeviceAuthTokenRecord = {
   token?: string;
@@ -34,6 +35,14 @@ type GatewayClientDeviceAuthStorage = {
   }) => unknown;
 };
 //#endregion
+//#region packages/gateway-client/src/websocket.d.ts
+type GatewayWebSocketTargetOptions = {
+  url?: string;
+  tlsFingerprint?: string;
+  /** Original TLS peer hostname or IP when the transport endpoint is translated. */
+  tlsServerName?: string;
+};
+//#endregion
 //#region packages/gateway-client/src/request-error.d.ts
 declare class GatewayClientRequestError extends GatewayProtocolRequestError {
   constructor(error: Partial<ErrorShape>);
@@ -63,14 +72,6 @@ type GatewayReconnectPausedInfo = {
   reason: string;
   detailCode: string | null;
 };
-type GatewayClientCloseInfo = {
-  phase: "pre-hello" | "post-hello";
-  socketOpened: boolean;
-  transportValidated: boolean;
-  connectRequestSent?: boolean;
-  transientPreHelloCleanClose: boolean;
-  connectError?: Error;
-};
 declare class GatewayClientRequestTimeoutError extends GatewayProtocolRequestTimeoutError {
   constructor(params: {
     method: string;
@@ -78,8 +79,7 @@ declare class GatewayClientRequestTimeoutError extends GatewayProtocolRequestTim
     requestSent: boolean;
   });
 }
-type GatewayClientOptions = {
-  url?: string;
+type GatewayClientOptions = GatewayWebSocketTargetOptions & {
   origin?: string;
   /** Already-resolved edge-proxy auth headers (identity-aware proxy in front of the Gateway). */
   edgeAuthHeaders?: Readonly<Record<string, string>>;
@@ -124,7 +124,6 @@ type GatewayClientOptions = {
   hostDeps?: GatewayClientHostDeps;
   minProtocol?: number;
   maxProtocol?: number;
-  tlsFingerprint?: string;
   onEvent?: (evt: EventFrame) => void;
   onHelloOk?: (hello: HelloOk) => void;
   onConnectError?: (err: Error) => void;
@@ -136,12 +135,7 @@ type GatewayClientOptions = {
     expected: number;
     received: number;
   }) => void;
-};
-type GatewayClientConnectionMetadata = {
-  clientName?: GatewayClientName;
-  hasDeviceIdentity: boolean;
-  mode?: GatewayClientMode;
-  preauthHandshakeTimeoutMs?: number;
+  onRequestTiming?: (timing: GatewayProtocolRequestTiming) => void;
 };
 declare class GatewayClient {
   private readonly protocol;
@@ -189,8 +183,7 @@ declare class GatewayClient {
   private logError;
   private assembleConnectParams;
   private shouldNegotiateLegacyNodeProtocol;
-  private shouldRetryWithLegacyNodeProtocol;
-  private shouldRetryWithCurrentNodeProtocol;
+  private shouldRetryWithAlternateNodeProtocol;
   private buildDeviceConnectParams;
   private handleConnectHello;
   private completeConnectHello;
@@ -202,8 +195,7 @@ declare class GatewayClient {
   private clearDeviceToken;
   private notifyConnectError;
   private notifyReconnectPaused;
-  private shouldRetryWithoutApprovalRuntimeToken;
-  private shouldFailClosedForUnsupportedAgentRuntimeIdentity;
+  private isUnsupportedConnectAuthField;
   private isTrustedDeviceRetryEndpoint;
   private selectConnectAuth;
   private startTickWatch;
@@ -247,4 +239,4 @@ declare function startGatewayClientWithReadinessWait(waitForReady: EventLoopRead
 /** Starts a gateway client after the default event-loop readiness probe succeeds. */
 declare function startGatewayClientWhenEventLoopReady(client: GatewayClientStartable, options?: GatewayClientStartReadinessOptions): Promise<EventLoopReadyResult>;
 //#endregion
-export { GatewayReconnectPausedInfo as _, startGatewayClientWithReadinessWait as a, DeviceAuthTokenRecord as b, waitForEventLoopReady as c, GatewayClientCloseInfo as d, GatewayClientConnectionMetadata as f, GatewayClientRequestTimeoutError as g, GatewayClientRequestOptions as h, startGatewayClientWhenEventLoopReady as i, DeviceIdentity as l, GatewayClientOptions as m, GatewayClientStartReadinessOptions as n, EventLoopReadyOptions as o, GatewayClientHostDeps as p, GatewayClientStartable as r, EventLoopReadyResult as s, EventLoopReadyWaiter as t, GatewayClient as u, GatewayClientRequestError as v, isGatewayConnectAssemblyError as y };
+export { isGatewayConnectAssemblyError as _, startGatewayClientWithReadinessWait as a, waitForEventLoopReady as c, GatewayClientHostDeps as d, GatewayClientOptions as f, GatewayClientRequestError as g, GatewayReconnectPausedInfo as h, startGatewayClientWhenEventLoopReady as i, DeviceIdentity as l, GatewayClientRequestTimeoutError as m, GatewayClientStartReadinessOptions as n, EventLoopReadyOptions as o, GatewayClientRequestOptions as p, GatewayClientStartable as r, EventLoopReadyResult as s, EventLoopReadyWaiter as t, GatewayClient as u, DeviceAuthTokenRecord as v };

package/dist/readiness.d.mts

@@ -1,2 +1,2 @@
-import { a as startGatewayClientWithReadinessWait, i as startGatewayClientWhenEventLoopReady, n as GatewayClientStartReadinessOptions, r as GatewayClientStartable, t as EventLoopReadyWaiter } from "./readiness-B99dV5nY.mjs";
+import { a as startGatewayClientWithReadinessWait, i as startGatewayClientWhenEventLoopReady, n as GatewayClientStartReadinessOptions, r as GatewayClientStartable, t as EventLoopReadyWaiter } from "./readiness-Cj5C24o2.mjs";
 export { EventLoopReadyWaiter, GatewayClientStartReadinessOptions, GatewayClientStartable, startGatewayClientWhenEventLoopReady, startGatewayClientWithReadinessWait };

package/dist/scope-upgrade.d.mts

@@ -1,5 +1,5 @@
 import { a as GatewayBrowserDeviceTokenStore } from "./browser-device-auth-DoPo-sPB.mjs";
-import { n as GatewayProtocolRequestOptions } from "./protocol-request-B5gBmLgq.mjs";
+import { n as GatewayProtocolRequestOptions } from "./protocol-request-CtVhe3Bj.mjs";
 //#region packages/gateway-client/src/scope-upgrade.d.ts
 export type ScopeUpgradeBinding = {
   clientId: string;
@@ -32,5 +32,6 @@ export declare class GatewayScopeUpgrade {
   requestScopeUpgrade(options: ScopeUpgradeOptions): Promise<ScopeUpgradeOutcome>;
   cancelScopeUpgrade(): void;
   private runUpgrade;
+  private assertCurrent;
 }
 //#endregion

package/dist/scope-upgrade.mjs

@@ -46,14 +46,20 @@ var GatewayScopeUpgrade = class {
 		operation?.controller.abort();
 	}
 	async runUpgrade(operation, options) {
-		const requestId = readRequestId(await this.deps.request("device.scopes.requestUpgrade", { scopes: [...options.scopes] }, { signal: operation.controller.signal }));
+		const registration = await this.deps.request("device.scopes.requestUpgrade", { scopes: [...options.scopes] }, { signal: operation.controller.signal });
+		this.assertCurrent(operation);
+		const requestId = readRequestId(registration);
 		operation.requestId = requestId;
 		options.onPending?.(requestId);
+		this.assertCurrent(operation);
 		const result = readUpgradeResult(await this.deps.request("device.scopes.waitUpgrade", { requestId }, {
 			timeoutMs: null,
 			signal: operation.controller.signal
 		}), requestId);
-		if (result.status !== "approved") return result;
+		if (result.status !== "approved") {
+			this.assertCurrent(operation);
+			return result;
+		}
 		await this.deps.tokenStore.store({
 			clientId: options.binding.clientId,
 			deviceId: options.binding.deviceId,
@@ -61,6 +67,7 @@ var GatewayScopeUpgrade = class {
 			token: result.deviceToken,
 			scopes: result.scopes
 		});
+		this.assertCurrent(operation);
 		this.deps.reconnect();
 		return {
 			status: "approved",
@@ -68,6 +75,9 @@ var GatewayScopeUpgrade = class {
 			scopes: result.scopes
 		};
 	}
+	assertCurrent(operation) {
+		if (this.active !== operation) throw new DOMException("scope upgrade cancelled", "AbortError");
+	}
 };
 //#endregion
 export { GatewayScopeUpgrade };

package/dist/{session-subscriptions-yRMtCvZZ.d.mts → session-subscriptions-Bcq6_wtR.d.mts}

@@ -1,4 +1,4 @@
-import { n as GatewayProtocolRequestOptions } from "./protocol-request-B5gBmLgq.mjs";
+import { n as GatewayProtocolRequestOptions } from "./protocol-request-CtVhe3Bj.mjs";
 //#region packages/gateway-client/src/device-auth.d.ts
 declare function normalizeDeviceMetadataForAuth(value?: string | null): string;
 type DeviceAuthPayloadParams = {
@@ -18,6 +18,14 @@ type DeviceAuthPayloadV3Params = DeviceAuthPayloadParams & {
 declare function buildDeviceAuthPayload(params: DeviceAuthPayloadParams): string;
 declare function buildDeviceAuthPayloadV3(params: DeviceAuthPayloadV3Params): string;
 //#endregion
+//#region packages/gateway-client/src/chat-stream-message.d.ts
+/** A snapshot includes its delta; append-only frames require an existing baseline. */
+declare function mergeChatStreamMessage(previous: unknown, payload: {
+  message?: unknown;
+  deltaText?: unknown;
+  replace?: unknown;
+}): unknown;
+//#endregion
 //#region packages/gateway-client/src/gateway-origin-scope.d.ts
 /** Normalizes the gateway URL scope used for origin-bound device tokens. */
 declare function gatewayOriginScope(gatewayUrl: string): string;
@@ -83,6 +91,8 @@ type SessionProjectionGatewayRunEvent = {
   state?: unknown;
   yielded?: unknown;
   seq?: unknown;
+  deltaText?: unknown;
+  replace?: unknown;
 } & Partial<Record<"runId" | "message" | "stopReason" | "errorKind" | "errorMessage", unknown>>;
 type SessionProjectionRunTransition = {
   projection: SessionProjectionState;
@@ -93,6 +103,8 @@ type SessionProjectionRunTransition = {
 declare function reduceSessionProjectionRunEvent(projection: SessionProjectionState, event: SessionProjectionGatewayRunEvent, scope?: SessionProjectionScope): SessionProjectionRunTransition | null;
 //#endregion
 //#region packages/gateway-client/src/session-projection-message-content.d.ts
+/** Status notices remain visible but do not define the terminal reply they accompany. */
+declare function projectSessionTerminalReplyMessage(message: unknown): unknown;
 /** Diagnostic-only error projections can be retired when their run resumes. */
 declare function isSessionProjectionErrorMessage(message: unknown, errorMessage?: string): boolean;
 //#endregion
@@ -182,19 +194,21 @@ type GatewaySessionMessageRequestClient = {
 type GatewaySessionMessageSubscription = {
   key: string;
   agentId?: string | null;
+  mode?: "narration";
   includeApprovals?: true;
   approvalReplay?: unknown;
 };
 type GatewaySessionMessageSubscriptionOptions = {
   agentId?: string | null;
+  mode?: "narration";
   includeApprovals?: boolean;
 };
 type GatewaySessionMessageSubscriptionCoordinatorOptions = {
   keysEquivalent?: (left: string, right: string) => boolean;
 };
 /**
- * One Gateway connection owns one targeted observer per canonical session.
- * Approval delivery is an upgrade of that observer, never a second observer.
+ * Shared leases retain one wire observer ID. The Gateway combines independently
+ * addressed observers; approval delivery upgrades the same owner.
  */
 declare class GatewaySessionMessageSubscriptionCoordinator {
   #private;
@@ -209,4 +223,4 @@ declare function getGatewaySessionMessageSubscriptionCoordinator(client: Gateway
 declare function resetGatewaySessionMessageSubscriptionCoordinator(client: GatewaySessionMessageRequestClient): void;
 declare function releaseGatewaySessionMessageSubscription(subscription: GatewaySessionMessageSubscription): Promise<void>;
 //#endregion
-export { readAssistantStreamSegmentIdentity as A, hasSessionProjectionAcceptedFinal as C, SessionProjectionEntry as D, SessionMessageIdentity as E, buildDeviceAuthPayload as F, buildDeviceAuthPayloadV3 as I, normalizeDeviceMetadataForAuth as L, readSessionMessageSequence as M, gatewayCredentialScope as N, isLocallyOptimisticSessionMessage as O, gatewayOriginScope as P, reduceSessionProjectionRunEvent as S, SessionMessageEnvelope as T, reconcileSessionProjectionSnapshot as _, GatewaySessionMessageSubscriptionOptions as a, SessionProjectionGatewayRunEvent as b, resetGatewaySessionMessageSubscriptionCoordinator as c, SessionProjectionRunStatus as d, SessionProjectionScope as f, projectLiveSessionMessage as g, createSessionProjection as h, GatewaySessionMessageSubscriptionCoordinatorOptions as i, readSessionMessageIdentity as j, normalizeSessionProjectionRunId as k, SessionProjectionEvent as l, SessionProjectionState as m, GatewaySessionMessageSubscription as n, getGatewaySessionMessageSubscriptionCoordinator as o, SessionProjectionSnapshotOptions as p, GatewaySessionMessageSubscriptionCoordinator as r, releaseGatewaySessionMessageSubscription as s, GatewaySessionMessageRequestClient as t, SessionProjectionRun as u, reduceSessionProjection as v, readSessionProjectionFinalMessageIdentity as w, SessionProjectionRunTransition as x, isSessionProjectionErrorMessage as y };
+export { normalizeSessionProjectionRunId as A, reduceSessionProjectionRunEvent as C, SessionMessageIdentity as D, SessionMessageEnvelope as E, gatewayOriginScope as F, mergeChatStreamMessage as I, buildDeviceAuthPayload as L, readSessionMessageIdentity as M, readSessionMessageSequence as N, SessionProjectionEntry as O, gatewayCredentialScope as P, buildDeviceAuthPayloadV3 as R, SessionProjectionRunTransition as S, readSessionProjectionFinalMessageIdentity as T, reconcileSessionProjectionSnapshot as _, GatewaySessionMessageSubscriptionOptions as a, projectSessionTerminalReplyMessage as b, resetGatewaySessionMessageSubscriptionCoordinator as c, SessionProjectionRunStatus as d, SessionProjectionScope as f, projectLiveSessionMessage as g, createSessionProjection as h, GatewaySessionMessageSubscriptionCoordinatorOptions as i, readAssistantStreamSegmentIdentity as j, isLocallyOptimisticSessionMessage as k, SessionProjectionEvent as l, SessionProjectionState as m, GatewaySessionMessageSubscription as n, getGatewaySessionMessageSubscriptionCoordinator as o, SessionProjectionSnapshotOptions as p, GatewaySessionMessageSubscriptionCoordinator as r, releaseGatewaySessionMessageSubscription as s, GatewaySessionMessageRequestClient as t, SessionProjectionRun as u, reduceSessionProjection as v, hasSessionProjectionAcceptedFinal as w, SessionProjectionGatewayRunEvent as x, isSessionProjectionErrorMessage as y, normalizeDeviceMetadataForAuth as z };