@openclaw/gateway-protocol 2026.8.1-beta.2 → 2026.8.1-beta.3

package/CHANGELOG.md

@@ -14,6 +14,7 @@ version and the additive schema surface. Dates are authoring dates (2026).
 - Slim worker and session-catalog payloads to the active wire contract.
 - Remove dead protocol surfaces and add since-vintage metadata to retained schemas and methods.
 - Add optional `step` on `SystemAgentChatResult` carrying the full awaited wizard step.
+- Project plugin tab `placement` in `hello-ok` so active plugins can target native Control UI routes.
 
 ## Protocol v4 (current)
 

package/dist/client-info.mjs

@@ -1,4 +1,4 @@
-import { i as normalizeOptionalProtocolString } from "./protocol-value-normalization-Bexl3yr1.mjs";
+import { n as normalizeOptionalProtocolString } from "./protocol-value-normalization-DcAoxLUs.mjs";
 //#region src/client-info.ts
 /**
 * Shared gateway client identity contract.

package/dist/connect-error-details.d.mts

@@ -17,6 +17,7 @@ declare const ConnectErrorDetailCodes: {
   readonly AUTH_TAILSCALE_PROXY_MISSING: "AUTH_TAILSCALE_PROXY_MISSING";
   readonly AUTH_TAILSCALE_WHOIS_FAILED: "AUTH_TAILSCALE_WHOIS_FAILED";
   readonly AUTH_TAILSCALE_IDENTITY_MISMATCH: "AUTH_TAILSCALE_IDENTITY_MISMATCH";
+  readonly AUTH_IDENTITY_HEADER_REQUIRED: "AUTH_IDENTITY_HEADER_REQUIRED";
   readonly CONTROL_UI_BUILD_MISMATCH: "CONTROL_UI_BUILD_MISMATCH";
   readonly CONTROL_UI_ORIGIN_NOT_ALLOWED: "CONTROL_UI_ORIGIN_NOT_ALLOWED";
   readonly PROTOCOL_MISMATCH: "PROTOCOL_MISMATCH";
@@ -115,6 +116,10 @@ declare function classifyGatewayConnectFailure(input: {
   kind: "pairing-required";
   userMessage: string;
   remediation: string;
+} | {
+  kind: "identity-proxy";
+  userMessage: string;
+  remediation: string;
 } | {
   remediation?: string | undefined;
   kind: "device-identity-required" | "scope-mismatch" | "rate-limited" | "auth-rejected" | "gateway-rejected" | "unreachable";

package/dist/connect-error-details.mjs

@@ -1,4 +1,5 @@
-import { i as normalizeOptionalProtocolString } from "./protocol-value-normalization-Bexl3yr1.mjs";
+import { n as isRecord } from "./record-coerce-BKHrZ46I.mjs";
+import { n as normalizeOptionalProtocolString } from "./protocol-value-normalization-DcAoxLUs.mjs";
 //#region src/connect-error-details.ts
 /**
 * Shared gateway connect-error detail helpers.
@@ -29,6 +30,7 @@ const ConnectErrorDetailCodes = {
 	AUTH_TAILSCALE_PROXY_MISSING: "AUTH_TAILSCALE_PROXY_MISSING",
 	AUTH_TAILSCALE_WHOIS_FAILED: "AUTH_TAILSCALE_WHOIS_FAILED",
 	AUTH_TAILSCALE_IDENTITY_MISMATCH: "AUTH_TAILSCALE_IDENTITY_MISMATCH",
+	AUTH_IDENTITY_HEADER_REQUIRED: "AUTH_IDENTITY_HEADER_REQUIRED",
 	CONTROL_UI_BUILD_MISMATCH: "CONTROL_UI_BUILD_MISMATCH",
 	CONTROL_UI_ORIGIN_NOT_ALLOWED: "CONTROL_UI_ORIGIN_NOT_ALLOWED",
 	PROTOCOL_MISMATCH: "PROTOCOL_MISMATCH",
@@ -95,6 +97,7 @@ const CONNECT_PAIRING_REQUIRED_MESSAGE_BY_REASON = {
 };
 /** Maps internal auth failure reasons to public connect-error detail codes. */
 function resolveAuthConnectErrorDetailCode(reason) {
+	if (reason?.startsWith("trusted_proxy_missing_header_")) return ConnectErrorDetailCodes.AUTH_IDENTITY_HEADER_REQUIRED;
 	switch (reason) {
 		case "token_missing": return ConnectErrorDetailCodes.AUTH_TOKEN_MISSING;
 		case "token_mismatch": return ConnectErrorDetailCodes.AUTH_TOKEN_MISMATCH;
@@ -128,13 +131,14 @@ function resolveDeviceAuthConnectErrorDetailCode(reason) {
 }
 /** Reads a non-empty detail code from an untrusted error details payload. */
 function readConnectErrorDetailCode(details) {
-	if (!details || typeof details !== "object" || Array.isArray(details)) return null;
+	if (!isRecord(details)) return null;
 	const code = details.code;
 	return typeof code === "string" && code.trim().length > 0 ? code.trim() : null;
 }
 /** Read the exact target artifact from an untrusted reload-required rejection. */
 function readControlUiBuildMismatchId(details) {
-	if (readConnectErrorDetailCode(details) !== ConnectErrorDetailCodes.CONTROL_UI_BUILD_MISMATCH) return null;
+	const code = readConnectErrorDetailCode(details);
+	if (code !== ConnectErrorDetailCodes.PROTOCOL_MISMATCH && code !== ConnectErrorDetailCodes.CONTROL_UI_BUILD_MISMATCH) return null;
 	const raw = details;
 	const gatewayBuildId = normalizeOptionalProtocolString(raw.gatewayBuildId);
 	if (!gatewayBuildId || gatewayBuildId.length > 96 || raw.reloadRequired !== true) return null;
@@ -142,7 +146,7 @@ function readControlUiBuildMismatchId(details) {
 }
 /** Extracts normalized retry advice from untrusted connect-error details. */
 function readConnectErrorRecoveryAdvice(details) {
-	if (!details || typeof details !== "object" || Array.isArray(details)) return {};
+	if (!isRecord(details)) return {};
 	const raw = details;
 	const canRetryWithDeviceToken = typeof raw.canRetryWithDeviceToken === "boolean" ? raw.canRetryWithDeviceToken : void 0;
 	const normalizedNextStep = normalizeOptionalProtocolString(raw.recommendedNextStep) ?? "";
@@ -226,7 +230,7 @@ function buildPairingConnectCloseReason(params) {
 /** Reads and backfills pairing-required details from an untrusted details object. */
 function readPairingConnectErrorDetails(details) {
 	if (readConnectErrorDetailCode(details) !== ConnectErrorDetailCodes.PAIRING_REQUIRED) return null;
-	if (!details || typeof details !== "object" || Array.isArray(details)) return null;
+	if (!isRecord(details)) return null;
 	const raw = details;
 	const reason = normalizePairingConnectReason(raw.reason);
 	const requestId = normalizePairingConnectRequestId(raw.requestId);
@@ -275,7 +279,29 @@ const DEVICE_TOKEN_REMEDIATION = "Rotate the paired-device token with `openclaw
 const SHARED_TOKEN_REMEDIATION = "Verify `gateway.remote.token` matches `gateway.auth.token`. If a paired-device token is stale, rotate it with `openclaw devices rotate --device <deviceId> --role operator`, then reconnect.";
 const SCOPE_MISMATCH_REMEDIATION = "Review approved scopes with `openclaw devices list`; if an upgrade is pending, preview it with `openclaw devices approve --latest`, approve the printed request, then reconnect.";
 const RATE_LIMITED_REMEDIATION = "Wait for the temporary authentication lockout to expire, then retry.";
+const IDENTITY_PROXY_REMEDIATION = "An identity-aware proxy rejected the WebSocket upgrade. Configure gateway.remote.edgeAuth for the configured Gateway origin, then reconnect. See https://docs.openclaw.ai/gateway/remote#gateway-behind-an-identity-aware-proxy.";
+const CLOUDFLARE_ACCESS_REMEDIATION = "Cloudflare Access detected: configure its token header or service-token headers in gateway.remote.edgeAuth.";
+const IDENTITY_PROXY_HTTP_STATUSES = /* @__PURE__ */ new Set([
+	301,
+	302,
+	303,
+	307,
+	308,
+	401,
+	403
+]);
 const GATEWAY_CLOSED_MESSAGE_PATTERN = /\bgateway closed \(\d+\):/i;
+function readIdentityProxyRejection(details) {
+	if (!isRecord(details)) return null;
+	if (details.reason !== "websocket-upgrade-rejected" || typeof details.httpStatus !== "number" || !IDENTITY_PROXY_HTTP_STATUSES.has(details.httpStatus)) return null;
+	const location = normalizeOptionalProtocolString(details.location);
+	if (!location) return { cloudflareAccess: false };
+	try {
+		return { cloudflareAccess: new URL(location).hostname.toLowerCase().replace(/\.+$/u, "").endsWith(".cloudflareaccess.com") };
+	} catch {
+		return { cloudflareAccess: false };
+	}
+}
 /** Classifies Gateway connect failures from structured details, with one legacy text fallback. */
 function classifyGatewayConnectFailure(input) {
 	const code = readConnectErrorDetailCode(input.details);
@@ -290,6 +316,12 @@ function classifyGatewayConnectFailure(input) {
 		userMessage: code === ConnectErrorDetailCodes.PAIRING_REQUIRED ? formatConnectPairingRequiredMessage(input.details) : userMessage ?? "device pairing required",
 		remediation: PAIRING_APPROVAL_REMEDIATION
 	};
+	const identityProxy = readIdentityProxyRejection(input.details);
+	if (identityProxy) return {
+		kind: "identity-proxy",
+		userMessage: userMessage ?? "identity-aware proxy rejected websocket upgrade",
+		remediation: identityProxy.cloudflareAccess ? `${IDENTITY_PROXY_REMEDIATION}\n${CLOUDFLARE_ACCESS_REMEDIATION}` : IDENTITY_PROXY_REMEDIATION
+	};
 	const deviceIdentityRequired = code === ConnectErrorDetailCodes.DEVICE_IDENTITY_REQUIRED || code === ConnectErrorDetailCodes.CONTROL_UI_DEVICE_IDENTITY_REQUIRED || normalized.includes("device identity required");
 	const scopeMismatch = code === ConnectErrorDetailCodes.AUTH_SCOPE_MISMATCH || normalized.includes("scope mismatch");
 	const rateLimited = code === ConnectErrorDetailCodes.AUTH_RATE_LIMITED || !code && normalized.includes("too many failed authentication attempts");

package/dist/frame-guards.d.mts

@@ -1,4 +1,4 @@
-import { a as EventFrame, c as GatewayFrame, f as RequestFrame, m as ResponseFrame, r as ErrorShape, t as ConnectParams, u as HelloOk } from "./frames-B9De7i2H.mjs";
+import { a as EventFrame, c as GatewayFrame, f as RequestFrame, m as ResponseFrame, r as ErrorShape, t as ConnectParams, u as HelloOk } from "./frames-BKvowx_k.mjs";
 
 //#region src/frame-guards.d.ts
 declare function isGatewayEventFrame(value: unknown): value is EventFrame;

package/dist/frame-guards.mjs

@@ -1,20 +1,21 @@
-import { n as isNonEmptyProtocolString, r as isProtocolRecord } from "./protocol-value-normalization-Bexl3yr1.mjs";
+import { n as isRecord } from "./record-coerce-BKHrZ46I.mjs";
+import { t as isNonEmptyProtocolString } from "./protocol-value-normalization-DcAoxLUs.mjs";
 //#region src/frame-guards.ts
 function isNonNegativeInteger(value) {
 	return typeof value === "number" && Number.isInteger(value) && value >= 0;
 }
 function isGatewayErrorShape(value) {
-	if (!isProtocolRecord(value)) return false;
+	if (!isRecord(value)) return false;
 	if (!isNonEmptyProtocolString(value.code) || !isNonEmptyProtocolString(value.message)) return false;
 	if (value.retryable !== void 0 && typeof value.retryable !== "boolean") return false;
 	return value.retryAfterMs === void 0 || isNonNegativeInteger(value.retryAfterMs);
 }
 function isGatewayEventFrame(value) {
-	if (!isProtocolRecord(value) || value.type !== "event" || !isNonEmptyProtocolString(value.event)) return false;
+	if (!isRecord(value) || value.type !== "event" || !isNonEmptyProtocolString(value.event)) return false;
 	return value.seq === void 0 || isNonNegativeInteger(value.seq);
 }
 function isGatewayResponseFrame(value) {
-	if (!isProtocolRecord(value) || value.type !== "res" || !isNonEmptyProtocolString(value.id) || typeof value.ok !== "boolean") return false;
+	if (!isRecord(value) || value.type !== "res" || !isNonEmptyProtocolString(value.id) || typeof value.ok !== "boolean") return false;
 	return value.error === void 0 || isGatewayErrorShape(value.error);
 }
 //#endregion

package/dist/{frames-B9De7i2H.d.mts → frames-BKvowx_k.d.mts}

@@ -4,6 +4,9 @@ import { Static, Type } from "typebox";
 declare const GATEWAY_SERVER_CAPS: {
   readonly BOARD_WIDGET_PUT_CANVAS_DOC: "board-widget-put-canvas-doc";
   readonly CHAT_SEND_ROUTING_CONTRACT: "chat-send-routing-contract";
+  readonly GATEWAY_RESTART_TARGET_SAFE: "gateway-restart-target-safe-v1";
+  readonly NODE_WORKER_BUNDLE_RETENTION: "node-worker-bundle-retention-v1";
+  readonly NODE_WORKER_BUNDLE_STATUS: "node-worker-bundle-status-v1";
   readonly SYSTEM_AGENT_WIZARD_CANCEL: "openclaw-chat-wizard-cancel";
   readonly SYSTEM_AGENT_SETUP_MODEL_REF: "openclaw-setup-model-ref";
   readonly TASK_SUGGESTIONS_ACCEPT_MODES: "taskSuggestions.acceptModes";
@@ -40,11 +43,12 @@ declare const ConnectParamsSchema: Type.TObject<{
   }>;
   caps: Type.TOptional<Type.TArray<Type.TString>>;
   commands: Type.TOptional<Type.TArray<Type.TString>>; /** Additive Computer Use declaration; the owning core contract validates its bounded shape. */
-  computerUse: Type.TOptional<Type.TUnknown>; /** Additive node-local worker build identity; presence advertises session hosting. */
+  computerUse: Type.TOptional<Type.TUnknown>; /** @deprecated Accepted for the shipped v1 node-host envelope; current hosts use runner inventory. */
   workerRuns: Type.TOptional<Type.TObject<{
     bundleHash: Type.TString;
     openclawVersion: Type.TString;
     protocolFeatures: Type.TArray<Type.TString>;
+    bundlePrewarm: Type.TOptional<Type.TInteger>;
   }>>;
   permissions: Type.TOptional<Type.TRecord<"^.*$", Type.TBoolean>>;
   pathEnv: Type.TOptional<Type.TString>;
@@ -238,6 +242,7 @@ declare const HelloOkSchema: Type.TObject<{
     stateDir: Type.TOptional<Type.TString>;
     sessionDefaults: Type.TOptional<Type.TObject<{
       defaultAgentId: Type.TString;
+      modelConfigured: Type.TOptional<Type.TBoolean>;
       ownership: Type.TOptional<Type.TUnion<[Type.TLiteral<"sole">, Type.TLiteral<"legacy">, Type.TLiteral<"explicit">]>>;
       selectionRequired: Type.TOptional<Type.TBoolean>;
       mainKey: Type.TString;
@@ -322,6 +327,7 @@ declare const HelloOkSchema: Type.TObject<{
     description: Type.TOptional<Type.TString>;
     icon: Type.TOptional<Type.TString>;
     path: Type.TOptional<Type.TString>;
+    placement: Type.TOptional<Type.TString>;
     requiresGatewayAuth: Type.TOptional<Type.TBoolean>;
     group: Type.TOptional<Type.TUnion<[Type.TLiteral<"control">, Type.TLiteral<"agent">]>>;
     order: Type.TOptional<Type.TNumber>;
@@ -332,9 +338,6 @@ declare const HelloOkSchema: Type.TObject<{
     label: Type.TString;
   }>>>;
   pluginSurfaceUrls: Type.TOptional<Type.TRecord<"^.*$", Type.TString>>;
-  deviceAuthMigration: Type.TOptional<Type.TObject<{
-    pending: Type.TLiteral<true>;
-  }>>;
   auth: Type.TObject<{
     deviceToken: Type.TOptional<Type.TString>;
     recoveryMigrationAllowed: Type.TOptional<Type.TLiteral<true>>;

package/dist/{gateway-error-details-BXoMHq1i.d.mts → gateway-error-details-DR-CyzeW.d.mts}

@@ -13,14 +13,22 @@ declare const ErrorCodes: {
 type ErrorCode = (typeof ErrorCodes)[keyof typeof ErrorCodes];
 /** Stable discriminants for structured method-level failures. */
 declare const GatewayErrorDetailCodes: {
+  readonly CRON_JOB_NOT_FOUND: "CRON_JOB_NOT_FOUND";
   readonly MISSING_SCOPE: "MISSING_SCOPE";
   readonly MCP_APP_VIEW_EXPIRED: "MCP_APP_VIEW_EXPIRED";
+  readonly OUTBOUND_DELIVERY_QUEUED: "OUTBOUND_DELIVERY_QUEUED";
   readonly USER_PREFS_LIMIT_EXCEEDED: "USER_PREFS_LIMIT_EXCEEDED";
   readonly SESSION_COMPANION_BUSY: "SESSION_COMPANION_BUSY";
+  readonly SKILL_PROPOSAL_REVISION_CHANGED: "SKILL_PROPOSAL_REVISION_CHANGED";
   readonly PROJECT_CLONE_FAILED: "PROJECT_CLONE_FAILED";
   readonly UNKNOWN_AGENT_ID: "UNKNOWN_AGENT_ID";
   readonly WIZARD_NOT_FOUND: "WIZARD_NOT_FOUND";
 };
+/** Missing cron automation identified by its exact store key. */
+type CronJobNotFoundErrorDetails = {
+  code: typeof GatewayErrorDetailCodes.CRON_JOB_NOT_FOUND;
+  jobId: string;
+};
 /** Missing operator-scope details shared by WebSocket and HTTP responses. */
 type MissingScopeErrorDetails = {
   code: typeof GatewayErrorDetailCodes.MISSING_SCOPE;
@@ -30,6 +38,9 @@ type MissingScopeErrorDetails = {
 type McpAppViewExpiredErrorDetails = {
   code: typeof GatewayErrorDetailCodes.MCP_APP_VIEW_EXPIRED;
 };
+type OutboundDeliveryQueuedErrorDetails = {
+  code: typeof GatewayErrorDetailCodes.OUTBOUND_DELIVERY_QUEUED;
+};
 /** Per-profile preference quota details returned by users.prefs.set. */
 type UserPrefsLimitExceededErrorDetails = {
   code: typeof GatewayErrorDetailCodes.USER_PREFS_LIMIT_EXCEEDED;
@@ -50,8 +61,23 @@ type ProjectCloneErrorDetails = {
   code: typeof GatewayErrorDetailCodes.PROJECT_CLONE_FAILED;
   cause: ProjectCloneFailureCause;
 };
+/** Optimistic-concurrency mismatch for an operator-reviewed Skill Workshop draft. */
+type SkillProposalRevisionChangedErrorDetails = {
+  code: typeof GatewayErrorDetailCodes.SKILL_PROPOSAL_REVISION_CHANGED;
+  expectedRevisionHash: string;
+  currentRevisionHash: string;
+};
 /** Structured details emitted by method-level failures. */
-type GatewayErrorDetails = MissingScopeErrorDetails | McpAppViewExpiredErrorDetails | UserPrefsLimitExceededErrorDetails | ProjectCloneErrorDetails | UnknownAgentIdErrorDetails | WizardNotFoundErrorDetails;
+type GatewayErrorDetails = CronJobNotFoundErrorDetails | MissingScopeErrorDetails | McpAppViewExpiredErrorDetails | OutboundDeliveryQueuedErrorDetails | UserPrefsLimitExceededErrorDetails | SkillProposalRevisionChangedErrorDetails | ProjectCloneErrorDetails | UnknownAgentIdErrorDetails | WizardNotFoundErrorDetails;
+/** Reads a typed cron lookup miss without parsing operator-facing prose. */
+declare function readCronJobNotFoundError(error: unknown): CronJobNotFoundErrorDetails | null;
+/** Builds the canonical stale-draft details shared by Skill Workshop RPCs. */
+declare function buildSkillProposalRevisionChangedErrorDetails(params: {
+  expectedRevisionHash: string;
+  currentRevisionHash: string;
+}): SkillProposalRevisionChangedErrorDetails;
+/** Reads a stale Skill Workshop decision without parsing operator-facing prose. */
+declare function readSkillProposalRevisionChangedError(error: unknown): SkillProposalRevisionChangedErrorDetails | null;
 /** Reads validated missing-scope details from an untrusted protocol payload. */
 declare function readMissingScopeErrorDetails(details: unknown): MissingScopeErrorDetails | null;
 declare function isMcpAppViewExpiredError(error: unknown): boolean;
@@ -61,4 +87,4 @@ declare function isMcpAppViewExpiredError(error: unknown): boolean;
  */
 declare function readMissingScopeError(error: unknown): MissingScopeErrorDetails | null;
 //#endregion
-export { McpAppViewExpiredErrorDetails as a, ProjectCloneFailureCause as c, WizardNotFoundErrorDetails as d, isMcpAppViewExpiredError as f, GatewayErrorDetails as i, UnknownAgentIdErrorDetails as l, readMissingScopeErrorDetails as m, ErrorCodes as n, MissingScopeErrorDetails as o, readMissingScopeError as p, GatewayErrorDetailCodes as r, ProjectCloneErrorDetails as s, ErrorCode as t, UserPrefsLimitExceededErrorDetails as u };
+export { readCronJobNotFoundError as _, GatewayErrorDetails as a, readSkillProposalRevisionChangedError as b, OutboundDeliveryQueuedErrorDetails as c, SkillProposalRevisionChangedErrorDetails as d, UnknownAgentIdErrorDetails as f, isMcpAppViewExpiredError as g, buildSkillProposalRevisionChangedErrorDetails as h, GatewayErrorDetailCodes as i, ProjectCloneErrorDetails as l, WizardNotFoundErrorDetails as m, ErrorCode as n, McpAppViewExpiredErrorDetails as o, UserPrefsLimitExceededErrorDetails as p, ErrorCodes as r, MissingScopeErrorDetails as s, CronJobNotFoundErrorDetails as t, ProjectCloneFailureCause as u, readMissingScopeError as v, readMissingScopeErrorDetails as y };

package/dist/gateway-error-details.d.mts

@@ -1,2 +1,2 @@
-import { a as McpAppViewExpiredErrorDetails, c as ProjectCloneFailureCause, d as WizardNotFoundErrorDetails, f as isMcpAppViewExpiredError, i as GatewayErrorDetails, l as UnknownAgentIdErrorDetails, m as readMissingScopeErrorDetails, n as ErrorCodes, o as MissingScopeErrorDetails, p as readMissingScopeError, r as GatewayErrorDetailCodes, s as ProjectCloneErrorDetails, t as ErrorCode, u as UserPrefsLimitExceededErrorDetails } from "./gateway-error-details-BXoMHq1i.mjs";
-export { ErrorCode, ErrorCodes, GatewayErrorDetailCodes, GatewayErrorDetails, McpAppViewExpiredErrorDetails, MissingScopeErrorDetails, ProjectCloneErrorDetails, ProjectCloneFailureCause, UnknownAgentIdErrorDetails, UserPrefsLimitExceededErrorDetails, WizardNotFoundErrorDetails, isMcpAppViewExpiredError, readMissingScopeError, readMissingScopeErrorDetails };
+import { _ as readCronJobNotFoundError, a as GatewayErrorDetails, b as readSkillProposalRevisionChangedError, c as OutboundDeliveryQueuedErrorDetails, d as SkillProposalRevisionChangedErrorDetails, f as UnknownAgentIdErrorDetails, g as isMcpAppViewExpiredError, h as buildSkillProposalRevisionChangedErrorDetails, i as GatewayErrorDetailCodes, l as ProjectCloneErrorDetails, m as WizardNotFoundErrorDetails, n as ErrorCode, o as McpAppViewExpiredErrorDetails, p as UserPrefsLimitExceededErrorDetails, r as ErrorCodes, s as MissingScopeErrorDetails, t as CronJobNotFoundErrorDetails, u as ProjectCloneFailureCause, v as readMissingScopeError, y as readMissingScopeErrorDetails } from "./gateway-error-details-DR-CyzeW.mjs";
+export { CronJobNotFoundErrorDetails, ErrorCode, ErrorCodes, GatewayErrorDetailCodes, GatewayErrorDetails, McpAppViewExpiredErrorDetails, MissingScopeErrorDetails, OutboundDeliveryQueuedErrorDetails, ProjectCloneErrorDetails, ProjectCloneFailureCause, SkillProposalRevisionChangedErrorDetails, UnknownAgentIdErrorDetails, UserPrefsLimitExceededErrorDetails, WizardNotFoundErrorDetails, buildSkillProposalRevisionChangedErrorDetails, isMcpAppViewExpiredError, readCronJobNotFoundError, readMissingScopeError, readMissingScopeErrorDetails, readSkillProposalRevisionChangedError };

package/dist/gateway-error-details.mjs

@@ -1,4 +1,4 @@
-import { t as asProtocolRecord } from "./protocol-value-normalization-Bexl3yr1.mjs";
+import { t as asNullableRecord } from "./record-coerce-BKHrZ46I.mjs";
 //#region src/gateway-error-details.ts
 /** Gateway JSON-RPC style error codes shared by clients and server handlers. */
 const ErrorCodes = {
@@ -19,18 +19,52 @@ const ErrorCodes = {
 };
 /** Stable discriminants for structured method-level failures. */
 const GatewayErrorDetailCodes = {
+	CRON_JOB_NOT_FOUND: "CRON_JOB_NOT_FOUND",
 	MISSING_SCOPE: "MISSING_SCOPE",
 	MCP_APP_VIEW_EXPIRED: "MCP_APP_VIEW_EXPIRED",
+	OUTBOUND_DELIVERY_QUEUED: "OUTBOUND_DELIVERY_QUEUED",
 	USER_PREFS_LIMIT_EXCEEDED: "USER_PREFS_LIMIT_EXCEEDED",
 	SESSION_COMPANION_BUSY: "SESSION_COMPANION_BUSY",
+	SKILL_PROPOSAL_REVISION_CHANGED: "SKILL_PROPOSAL_REVISION_CHANGED",
 	PROJECT_CLONE_FAILED: "PROJECT_CLONE_FAILED",
 	UNKNOWN_AGENT_ID: "UNKNOWN_AGENT_ID",
 	WIZARD_NOT_FOUND: "WIZARD_NOT_FOUND"
 };
 const LEGACY_MISSING_SCOPE_PATTERN = /\bmissing scope:\s*([a-z0-9._-]+)/i;
+const SHA256_PATTERN = /^[a-fA-F0-9]{64}$/;
+/** Reads a typed cron lookup miss without parsing operator-facing prose. */
+function readCronJobNotFoundError(error) {
+	const details = asNullableRecord(asNullableRecord(error)?.details);
+	if (details?.code !== GatewayErrorDetailCodes.CRON_JOB_NOT_FOUND) return null;
+	const jobId = typeof details.jobId === "string" ? details.jobId.trim() : "";
+	return jobId ? {
+		code: GatewayErrorDetailCodes.CRON_JOB_NOT_FOUND,
+		jobId
+	} : null;
+}
+/** Builds the canonical stale-draft details shared by Skill Workshop RPCs. */
+function buildSkillProposalRevisionChangedErrorDetails(params) {
+	return {
+		code: GatewayErrorDetailCodes.SKILL_PROPOSAL_REVISION_CHANGED,
+		expectedRevisionHash: params.expectedRevisionHash,
+		currentRevisionHash: params.currentRevisionHash
+	};
+}
+/** Reads a stale Skill Workshop decision without parsing operator-facing prose. */
+function readSkillProposalRevisionChangedError(error) {
+	const details = asNullableRecord(asNullableRecord(error)?.details);
+	if (details?.code !== GatewayErrorDetailCodes.SKILL_PROPOSAL_REVISION_CHANGED) return null;
+	const expectedRevisionHash = typeof details.expectedRevisionHash === "string" ? details.expectedRevisionHash : "";
+	const currentRevisionHash = typeof details.currentRevisionHash === "string" ? details.currentRevisionHash : "";
+	if (!SHA256_PATTERN.test(expectedRevisionHash) || !SHA256_PATTERN.test(currentRevisionHash)) return null;
+	return buildSkillProposalRevisionChangedErrorDetails({
+		expectedRevisionHash,
+		currentRevisionHash
+	});
+}
 /** Reads validated missing-scope details from an untrusted protocol payload. */
 function readMissingScopeErrorDetails(details) {
-	const record = asProtocolRecord(details);
+	const record = asNullableRecord(details);
 	if (record?.code !== GatewayErrorDetailCodes.MISSING_SCOPE) return null;
 	const missingScope = typeof record.missingScope === "string" ? record.missingScope.trim() : "";
 	const requiredScopes = Array.isArray(record.requiredScopes) ? record.requiredScopes.map((scope) => typeof scope === "string" ? scope.trim() : "") : [];
@@ -42,14 +76,14 @@ function readMissingScopeErrorDetails(details) {
 	};
 }
 function isMcpAppViewExpiredError(error) {
-	return asProtocolRecord(asProtocolRecord(error)?.details)?.code === GatewayErrorDetailCodes.MCP_APP_VIEW_EXPIRED;
+	return asNullableRecord(asNullableRecord(error)?.details)?.code === GatewayErrorDetailCodes.MCP_APP_VIEW_EXPIRED;
 }
 /**
 * Reads a method-level missing-scope failure, preferring structured details.
 * The message fallback keeps clients compatible with gateways predating structured details.
 */
 function readMissingScopeError(error) {
-	const record = asProtocolRecord(error);
+	const record = asNullableRecord(error);
 	if (!record) return null;
 	const structured = readMissingScopeErrorDetails(record.details);
 	if (structured) return structured;
@@ -64,4 +98,4 @@ function readMissingScopeError(error) {
 	} : null;
 }
 //#endregion
-export { ErrorCodes, GatewayErrorDetailCodes, isMcpAppViewExpiredError, readMissingScopeError, readMissingScopeErrorDetails };
+export { ErrorCodes, GatewayErrorDetailCodes, buildSkillProposalRevisionChangedErrorDetails, isMcpAppViewExpiredError, readCronJobNotFoundError, readMissingScopeError, readMissingScopeErrorDetails, readSkillProposalRevisionChangedError };