@openclaw/gateway-protocol 2026.8.1-beta.2 → 2026.9.1-beta.1

package/CHANGELOG.md

@@ -14,6 +14,7 @@ version and the additive schema surface. Dates are authoring dates (2026).
 - Slim worker and session-catalog payloads to the active wire contract.
 - Remove dead protocol surfaces and add since-vintage metadata to retained schemas and methods.
 - Add optional `step` on `SystemAgentChatResult` carrying the full awaited wizard step.
+- Project plugin tab `placement` in `hello-ok` so active plugins can target native Control UI routes.
 
 ## Protocol v4 (current)
 

package/dist/client-info.d.mts

@@ -57,14 +57,25 @@ declare const GATEWAY_CLIENT_MODES: {
 type GatewayClientMode = (typeof GATEWAY_CLIENT_MODES)[keyof typeof GATEWAY_CLIENT_MODES];
 /** Client metadata sent during gateway connection setup. */
 type GatewayClientInfo = {
-  /** Stable product/client identifier from `GATEWAY_CLIENT_IDS`. */id: GatewayClientId; /** Human-readable label for diagnostics; not used for policy decisions. */
-  displayName?: string; /** Client app or package version reported by the connecting process. */
-  version: string; /** Exact immutable artifact identity when the client can report one. */
-  buildId?: string; /** Runtime platform string, such as `darwin`, `ios`, `android`, or `web`. */
-  platform: string; /** Optional device family used by native clients for display and routing hints. */
-  deviceFamily?: string; /** Native hardware/model identifier when available. */
-  modelIdentifier?: string; /** Coarse category from `GATEWAY_CLIENT_MODES` for policy and diagnostics. */
-  mode: GatewayClientMode; /** Per-installation or per-process id used to distinguish same-product clients. */
+  /** Stable product/client identifier from `GATEWAY_CLIENT_IDS`. */
+  id: GatewayClientId;
+  /** Human-readable label for diagnostics; not used for policy decisions. */
+  displayName?: string;
+  /** Client app or package version reported by the connecting process. */
+  version: string;
+  /** Exact immutable artifact identity when the client can report one. */
+  buildId?: string;
+  /** Runtime platform string, such as `darwin`, `ios`, `android`, or `web`. */
+  platform: string;
+  /** Optional device family used by native clients for display and routing hints. */
+  deviceFamily?: string;
+  /** Native hardware/model identifier when available. */
+  modelIdentifier?: string;
+  /** Self-reported IANA time zone, such as `Europe/Vienna`, for presence display. */
+  timeZone?: string;
+  /** Coarse category from `GATEWAY_CLIENT_MODES` for policy and diagnostics. */
+  mode: GatewayClientMode;
+  /** Per-installation or per-process id used to distinguish same-product clients. */
   instanceId?: string;
 };
 /** Capability flags a client may advertise during the gateway handshake. */
@@ -80,6 +91,7 @@ declare const GATEWAY_CLIENT_CAPS: {
   readonly TERMINAL_OFFSET_SEQ: "terminal-offset-seq";
   readonly TOOL_EVENTS: "tool-events";
   readonly UI_COMMANDS: "ui-commands";
+  readonly USAGE_REFRESHING: "usage-refreshing";
 };
 /** Optional capability advertised by clients during gateway handshake. */
 type GatewayClientCap = (typeof GATEWAY_CLIENT_CAPS)[keyof typeof GATEWAY_CLIENT_CAPS];

package/dist/client-info.mjs

@@ -1,4 +1,4 @@
-import { i as normalizeOptionalProtocolString } from "./protocol-value-normalization-Bexl3yr1.mjs";
+import { n as normalizeOptionalProtocolString } from "./protocol-value-normalization-DcAoxLUs.mjs";
 //#region src/client-info.ts
 /**
 * Shared gateway client identity contract.
@@ -53,7 +53,8 @@ const GATEWAY_CLIENT_CAPS = {
 	TASK_SUGGESTIONS: "task-suggestions",
 	TERMINAL_OFFSET_SEQ: "terminal-offset-seq",
 	TOOL_EVENTS: "tool-events",
-	UI_COMMANDS: "ui-commands"
+	UI_COMMANDS: "ui-commands",
+	USAGE_REFRESHING: "usage-refreshing"
 };
 const GATEWAY_CLIENT_ID_SET = new Set(Object.values(GATEWAY_CLIENT_IDS));
 const GATEWAY_CLIENT_MODE_SET = new Set(Object.values(GATEWAY_CLIENT_MODES));

package/dist/connect-error-details.d.mts

@@ -17,6 +17,7 @@ declare const ConnectErrorDetailCodes: {
   readonly AUTH_TAILSCALE_PROXY_MISSING: "AUTH_TAILSCALE_PROXY_MISSING";
   readonly AUTH_TAILSCALE_WHOIS_FAILED: "AUTH_TAILSCALE_WHOIS_FAILED";
   readonly AUTH_TAILSCALE_IDENTITY_MISMATCH: "AUTH_TAILSCALE_IDENTITY_MISMATCH";
+  readonly AUTH_IDENTITY_HEADER_REQUIRED: "AUTH_IDENTITY_HEADER_REQUIRED";
   readonly CONTROL_UI_BUILD_MISMATCH: "CONTROL_UI_BUILD_MISMATCH";
   readonly CONTROL_UI_ORIGIN_NOT_ALLOWED: "CONTROL_UI_ORIGIN_NOT_ALLOWED";
   readonly PROTOCOL_MISMATCH: "PROTOCOL_MISMATCH";
@@ -115,6 +116,10 @@ declare function classifyGatewayConnectFailure(input: {
   kind: "pairing-required";
   userMessage: string;
   remediation: string;
+} | {
+  kind: "identity-proxy";
+  userMessage: string;
+  remediation: string;
 } | {
   remediation?: string | undefined;
   kind: "device-identity-required" | "scope-mismatch" | "rate-limited" | "auth-rejected" | "gateway-rejected" | "unreachable";

package/dist/connect-error-details.mjs

@@ -1,4 +1,5 @@
-import { i as normalizeOptionalProtocolString } from "./protocol-value-normalization-Bexl3yr1.mjs";
+import { n as isRecord } from "./record-coerce-BKHrZ46I.mjs";
+import { n as normalizeOptionalProtocolString } from "./protocol-value-normalization-DcAoxLUs.mjs";
 //#region src/connect-error-details.ts
 /**
 * Shared gateway connect-error detail helpers.
@@ -29,6 +30,7 @@ const ConnectErrorDetailCodes = {
 	AUTH_TAILSCALE_PROXY_MISSING: "AUTH_TAILSCALE_PROXY_MISSING",
 	AUTH_TAILSCALE_WHOIS_FAILED: "AUTH_TAILSCALE_WHOIS_FAILED",
 	AUTH_TAILSCALE_IDENTITY_MISMATCH: "AUTH_TAILSCALE_IDENTITY_MISMATCH",
+	AUTH_IDENTITY_HEADER_REQUIRED: "AUTH_IDENTITY_HEADER_REQUIRED",
 	CONTROL_UI_BUILD_MISMATCH: "CONTROL_UI_BUILD_MISMATCH",
 	CONTROL_UI_ORIGIN_NOT_ALLOWED: "CONTROL_UI_ORIGIN_NOT_ALLOWED",
 	PROTOCOL_MISMATCH: "PROTOCOL_MISMATCH",
@@ -95,6 +97,7 @@ const CONNECT_PAIRING_REQUIRED_MESSAGE_BY_REASON = {
 };
 /** Maps internal auth failure reasons to public connect-error detail codes. */
 function resolveAuthConnectErrorDetailCode(reason) {
+	if (reason?.startsWith("trusted_proxy_missing_header_")) return ConnectErrorDetailCodes.AUTH_IDENTITY_HEADER_REQUIRED;
 	switch (reason) {
 		case "token_missing": return ConnectErrorDetailCodes.AUTH_TOKEN_MISSING;
 		case "token_mismatch": return ConnectErrorDetailCodes.AUTH_TOKEN_MISMATCH;
@@ -128,13 +131,14 @@ function resolveDeviceAuthConnectErrorDetailCode(reason) {
 }
 /** Reads a non-empty detail code from an untrusted error details payload. */
 function readConnectErrorDetailCode(details) {
-	if (!details || typeof details !== "object" || Array.isArray(details)) return null;
+	if (!isRecord(details)) return null;
 	const code = details.code;
 	return typeof code === "string" && code.trim().length > 0 ? code.trim() : null;
 }
 /** Read the exact target artifact from an untrusted reload-required rejection. */
 function readControlUiBuildMismatchId(details) {
-	if (readConnectErrorDetailCode(details) !== ConnectErrorDetailCodes.CONTROL_UI_BUILD_MISMATCH) return null;
+	const code = readConnectErrorDetailCode(details);
+	if (code !== ConnectErrorDetailCodes.PROTOCOL_MISMATCH && code !== ConnectErrorDetailCodes.CONTROL_UI_BUILD_MISMATCH) return null;
 	const raw = details;
 	const gatewayBuildId = normalizeOptionalProtocolString(raw.gatewayBuildId);
 	if (!gatewayBuildId || gatewayBuildId.length > 96 || raw.reloadRequired !== true) return null;
@@ -142,7 +146,7 @@ function readControlUiBuildMismatchId(details) {
 }
 /** Extracts normalized retry advice from untrusted connect-error details. */
 function readConnectErrorRecoveryAdvice(details) {
-	if (!details || typeof details !== "object" || Array.isArray(details)) return {};
+	if (!isRecord(details)) return {};
 	const raw = details;
 	const canRetryWithDeviceToken = typeof raw.canRetryWithDeviceToken === "boolean" ? raw.canRetryWithDeviceToken : void 0;
 	const normalizedNextStep = normalizeOptionalProtocolString(raw.recommendedNextStep) ?? "";
@@ -226,7 +230,7 @@ function buildPairingConnectCloseReason(params) {
 /** Reads and backfills pairing-required details from an untrusted details object. */
 function readPairingConnectErrorDetails(details) {
 	if (readConnectErrorDetailCode(details) !== ConnectErrorDetailCodes.PAIRING_REQUIRED) return null;
-	if (!details || typeof details !== "object" || Array.isArray(details)) return null;
+	if (!isRecord(details)) return null;
 	const raw = details;
 	const reason = normalizePairingConnectReason(raw.reason);
 	const requestId = normalizePairingConnectRequestId(raw.requestId);
@@ -275,7 +279,29 @@ const DEVICE_TOKEN_REMEDIATION = "Rotate the paired-device token with `openclaw
 const SHARED_TOKEN_REMEDIATION = "Verify `gateway.remote.token` matches `gateway.auth.token`. If a paired-device token is stale, rotate it with `openclaw devices rotate --device <deviceId> --role operator`, then reconnect.";
 const SCOPE_MISMATCH_REMEDIATION = "Review approved scopes with `openclaw devices list`; if an upgrade is pending, preview it with `openclaw devices approve --latest`, approve the printed request, then reconnect.";
 const RATE_LIMITED_REMEDIATION = "Wait for the temporary authentication lockout to expire, then retry.";
+const IDENTITY_PROXY_REMEDIATION = "An identity-aware proxy rejected the WebSocket upgrade. Configure gateway.remote.edgeAuth for the configured Gateway origin, then reconnect. See https://docs.openclaw.ai/gateway/remote#gateway-behind-an-identity-aware-proxy.";
+const CLOUDFLARE_ACCESS_REMEDIATION = "Cloudflare Access detected: configure its token header or service-token headers in gateway.remote.edgeAuth.";
+const IDENTITY_PROXY_HTTP_STATUSES = /* @__PURE__ */ new Set([
+	301,
+	302,
+	303,
+	307,
+	308,
+	401,
+	403
+]);
 const GATEWAY_CLOSED_MESSAGE_PATTERN = /\bgateway closed \(\d+\):/i;
+function readIdentityProxyRejection(details) {
+	if (!isRecord(details)) return null;
+	if (details.reason !== "websocket-upgrade-rejected" || typeof details.httpStatus !== "number" || !IDENTITY_PROXY_HTTP_STATUSES.has(details.httpStatus)) return null;
+	const location = normalizeOptionalProtocolString(details.location);
+	if (!location) return { cloudflareAccess: false };
+	try {
+		return { cloudflareAccess: new URL(location).hostname.toLowerCase().replace(/\.+$/u, "").endsWith(".cloudflareaccess.com") };
+	} catch {
+		return { cloudflareAccess: false };
+	}
+}
 /** Classifies Gateway connect failures from structured details, with one legacy text fallback. */
 function classifyGatewayConnectFailure(input) {
 	const code = readConnectErrorDetailCode(input.details);
@@ -290,6 +316,12 @@ function classifyGatewayConnectFailure(input) {
 		userMessage: code === ConnectErrorDetailCodes.PAIRING_REQUIRED ? formatConnectPairingRequiredMessage(input.details) : userMessage ?? "device pairing required",
 		remediation: PAIRING_APPROVAL_REMEDIATION
 	};
+	const identityProxy = readIdentityProxyRejection(input.details);
+	if (identityProxy) return {
+		kind: "identity-proxy",
+		userMessage: userMessage ?? "identity-aware proxy rejected websocket upgrade",
+		remediation: identityProxy.cloudflareAccess ? `${IDENTITY_PROXY_REMEDIATION}\n${CLOUDFLARE_ACCESS_REMEDIATION}` : IDENTITY_PROXY_REMEDIATION
+	};
 	const deviceIdentityRequired = code === ConnectErrorDetailCodes.DEVICE_IDENTITY_REQUIRED || code === ConnectErrorDetailCodes.CONTROL_UI_DEVICE_IDENTITY_REQUIRED || normalized.includes("device identity required");
 	const scopeMismatch = code === ConnectErrorDetailCodes.AUTH_SCOPE_MISMATCH || normalized.includes("scope mismatch");
 	const rateLimited = code === ConnectErrorDetailCodes.AUTH_RATE_LIMITED || !code && normalized.includes("too many failed authentication attempts");

package/dist/frame-guards.d.mts

@@ -1,5 +1,4 @@
-import { a as EventFrame, c as GatewayFrame, f as RequestFrame, m as ResponseFrame, r as ErrorShape, t as ConnectParams, u as HelloOk } from "./frames-B9De7i2H.mjs";
-
+import { a as EventFrame, d as RequestFrame, l as HelloOk, p as ResponseFrame, r as ErrorShape, s as GatewayFrame, t as ConnectParams } from "./frames-BmksHL6e.mjs";
 //#region src/frame-guards.d.ts
 declare function isGatewayEventFrame(value: unknown): value is EventFrame;
 declare function isGatewayResponseFrame(value: unknown): value is ResponseFrame;

package/dist/frame-guards.mjs

@@ -1,20 +1,21 @@
-import { n as isNonEmptyProtocolString, r as isProtocolRecord } from "./protocol-value-normalization-Bexl3yr1.mjs";
+import { n as isRecord } from "./record-coerce-BKHrZ46I.mjs";
+import { t as isNonEmptyProtocolString } from "./protocol-value-normalization-DcAoxLUs.mjs";
 //#region src/frame-guards.ts
 function isNonNegativeInteger(value) {
 	return typeof value === "number" && Number.isInteger(value) && value >= 0;
 }
 function isGatewayErrorShape(value) {
-	if (!isProtocolRecord(value)) return false;
+	if (!isRecord(value)) return false;
 	if (!isNonEmptyProtocolString(value.code) || !isNonEmptyProtocolString(value.message)) return false;
 	if (value.retryable !== void 0 && typeof value.retryable !== "boolean") return false;
 	return value.retryAfterMs === void 0 || isNonNegativeInteger(value.retryAfterMs);
 }
 function isGatewayEventFrame(value) {
-	if (!isProtocolRecord(value) || value.type !== "event" || !isNonEmptyProtocolString(value.event)) return false;
+	if (!isRecord(value) || value.type !== "event" || !isNonEmptyProtocolString(value.event)) return false;
 	return value.seq === void 0 || isNonNegativeInteger(value.seq);
 }
 function isGatewayResponseFrame(value) {
-	if (!isProtocolRecord(value) || value.type !== "res" || !isNonEmptyProtocolString(value.id) || typeof value.ok !== "boolean") return false;
+	if (!isRecord(value) || value.type !== "res" || !isNonEmptyProtocolString(value.id) || typeof value.ok !== "boolean") return false;
 	return value.error === void 0 || isGatewayErrorShape(value.error);
 }
 //#endregion

package/dist/{frames-B9De7i2H.d.mts → frames-BmksHL6e.d.mts}

@@ -1,13 +1,5 @@
 import { Static, Type } from "typebox";
-
 //#region src/schema/frames.d.ts
-declare const GATEWAY_SERVER_CAPS: {
-  readonly BOARD_WIDGET_PUT_CANVAS_DOC: "board-widget-put-canvas-doc";
-  readonly CHAT_SEND_ROUTING_CONTRACT: "chat-send-routing-contract";
-  readonly SYSTEM_AGENT_WIZARD_CANCEL: "openclaw-chat-wizard-cancel";
-  readonly SYSTEM_AGENT_SETUP_MODEL_REF: "openclaw-setup-model-ref";
-  readonly TASK_SUGGESTIONS_ACCEPT_MODES: "taskSuggestions.acceptModes";
-};
 /**
  * Top-level gateway frame schemas.
  *
@@ -35,16 +27,21 @@ declare const ConnectParamsSchema: Type.TObject<{
     platform: Type.TString;
     deviceFamily: Type.TOptional<Type.TString>;
     modelIdentifier: Type.TOptional<Type.TString>;
+    /** Self-reported IANA zone. Bounded because the longest real name is well under this cap. */
+    timeZone: Type.TOptional<Type.TString>;
     mode: Type.TEnum<["webchat", "cli", "worker", "test", "probe", "ui", "backend", "node"]>;
     instanceId: Type.TOptional<Type.TString>;
   }>;
   caps: Type.TOptional<Type.TArray<Type.TString>>;
-  commands: Type.TOptional<Type.TArray<Type.TString>>; /** Additive Computer Use declaration; the owning core contract validates its bounded shape. */
-  computerUse: Type.TOptional<Type.TUnknown>; /** Additive node-local worker build identity; presence advertises session hosting. */
+  commands: Type.TOptional<Type.TArray<Type.TString>>;
+  /** Additive Computer Use declaration; the owning core contract validates its bounded shape. */
+  computerUse: Type.TOptional<Type.TUnknown>;
+  /** @deprecated Accepted for the shipped v1 node-host envelope; current hosts use runner inventory. */
   workerRuns: Type.TOptional<Type.TObject<{
     bundleHash: Type.TString;
     openclawVersion: Type.TString;
     protocolFeatures: Type.TArray<Type.TString>;
+    bundlePrewarm: Type.TOptional<Type.TInteger>;
   }>>;
   permissions: Type.TOptional<Type.TRecord<"^.*$", Type.TBoolean>>;
   pathEnv: Type.TOptional<Type.TString>;
@@ -75,6 +72,7 @@ declare const HelloOkSchema: Type.TObject<{
   server: Type.TObject<{
     version: Type.TString;
     buildId: Type.TOptional<Type.TString>;
+    bootId: Type.TOptional<Type.TString>;
     controlUiBuildSource: Type.TOptional<Type.TUnion<[Type.TLiteral<"bundled">, Type.TLiteral<"configured">]>>;
     connId: Type.TString;
   }>;
@@ -91,6 +89,7 @@ declare const HelloOkSchema: Type.TObject<{
       platform: Type.TOptional<Type.TString>;
       deviceFamily: Type.TOptional<Type.TString>;
       modelIdentifier: Type.TOptional<Type.TString>;
+      timeZone: Type.TOptional<Type.TString>;
       mode: Type.TOptional<Type.TString>;
       lastInputSeconds: Type.TOptional<Type.TInteger>;
       reason: Type.TOptional<Type.TString>;
@@ -238,6 +237,7 @@ declare const HelloOkSchema: Type.TObject<{
     stateDir: Type.TOptional<Type.TString>;
     sessionDefaults: Type.TOptional<Type.TObject<{
       defaultAgentId: Type.TString;
+      modelConfigured: Type.TOptional<Type.TBoolean>;
       ownership: Type.TOptional<Type.TUnion<[Type.TLiteral<"sole">, Type.TLiteral<"legacy">, Type.TLiteral<"explicit">]>>;
       selectionRequired: Type.TOptional<Type.TBoolean>;
       mainKey: Type.TString;
@@ -322,6 +322,7 @@ declare const HelloOkSchema: Type.TObject<{
     description: Type.TOptional<Type.TString>;
     icon: Type.TOptional<Type.TString>;
     path: Type.TOptional<Type.TString>;
+    placement: Type.TOptional<Type.TString>;
     requiresGatewayAuth: Type.TOptional<Type.TBoolean>;
     group: Type.TOptional<Type.TUnion<[Type.TLiteral<"control">, Type.TLiteral<"agent">]>>;
     order: Type.TOptional<Type.TNumber>;
@@ -332,9 +333,6 @@ declare const HelloOkSchema: Type.TObject<{
     label: Type.TString;
   }>>>;
   pluginSurfaceUrls: Type.TOptional<Type.TRecord<"^.*$", Type.TString>>;
-  deviceAuthMigration: Type.TOptional<Type.TObject<{
-    pending: Type.TLiteral<true>;
-  }>>;
   auth: Type.TObject<{
     deviceToken: Type.TOptional<Type.TString>;
     recoveryMigrationAllowed: Type.TOptional<Type.TLiteral<true>>;
@@ -440,4 +438,4 @@ type GatewayFrame = Static<typeof GatewayFrameSchema>;
 type TickEvent = Static<typeof TickEventSchema>;
 type ShutdownEvent = Static<typeof ShutdownEventSchema>;
 //#endregion
-export { ShutdownEventSchema as _, EventFrame as a, GatewayFrame as c, HelloOkSchema as d, RequestFrame as f, ShutdownEvent as g, ResponseFrameSchema as h, ErrorShapeSchema as i, GatewayFrameSchema as l, ResponseFrame as m, ConnectParamsSchema as n, EventFrameSchema as o, RequestFrameSchema as p, ErrorShape as r, GATEWAY_SERVER_CAPS as s, ConnectParams as t, HelloOk as u, TickEvent as v, TickEventSchema as y };
+export { TickEvent as _, EventFrame as a, GatewayFrameSchema as c, RequestFrame as d, RequestFrameSchema as f, ShutdownEventSchema as g, ShutdownEvent as h, ErrorShapeSchema as i, HelloOk as l, ResponseFrameSchema as m, ConnectParamsSchema as n, EventFrameSchema as o, ResponseFrame as p, ErrorShape as r, GatewayFrame as s, ConnectParams as t, HelloOkSchema as u, TickEventSchema as v };

package/dist/gateway-error-details-yO9RdEKe.d.mts

@@ -0,0 +1,97 @@
+//#region src/gateway-error-details.d.ts
+/** Gateway JSON-RPC style error codes shared by clients and server handlers. */
+declare const ErrorCodes: {
+  /** @deprecated Retained for source compatibility; no current server emitter. */
+  readonly NOT_LINKED: "NOT_LINKED";
+  /** Device exists but still needs an explicit pairing approval. */
+  readonly NOT_PAIRED: "NOT_PAIRED";
+  /** @deprecated Retained for source compatibility; no current server emitter. */
+  readonly AGENT_TIMEOUT: "AGENT_TIMEOUT";
+  /** Request payload failed protocol validation or method preconditions. */
+  readonly INVALID_REQUEST: "INVALID_REQUEST";
+  /** Authenticated caller lacks permission for the requested operation. */
+  readonly FORBIDDEN: "FORBIDDEN";
+  /** Approval resolution referenced a missing or expired approval request. */
+  readonly APPROVAL_NOT_FOUND: "APPROVAL_NOT_FOUND";
+  /** Gateway service or required backend is temporarily unavailable. */
+  readonly UNAVAILABLE: "UNAVAILABLE";
+};
+/** Closed set of canonical gateway error code strings. */
+type ErrorCode = (typeof ErrorCodes)[keyof typeof ErrorCodes];
+/** Stable discriminants for structured method-level failures. */
+declare const GatewayErrorDetailCodes: {
+  readonly CRON_JOB_NOT_FOUND: "CRON_JOB_NOT_FOUND";
+  readonly MISSING_SCOPE: "MISSING_SCOPE";
+  readonly MCP_APP_VIEW_EXPIRED: "MCP_APP_VIEW_EXPIRED";
+  readonly OUTBOUND_DELIVERY_QUEUED: "OUTBOUND_DELIVERY_QUEUED";
+  readonly USER_PREFS_LIMIT_EXCEEDED: "USER_PREFS_LIMIT_EXCEEDED";
+  readonly SESSION_COMPANION_BUSY: "SESSION_COMPANION_BUSY";
+  readonly SKILL_PROPOSAL_REVISION_CHANGED: "SKILL_PROPOSAL_REVISION_CHANGED";
+  readonly PROJECT_CLONE_FAILED: "PROJECT_CLONE_FAILED";
+  readonly UNKNOWN_AGENT_ID: "UNKNOWN_AGENT_ID";
+  readonly WIZARD_NOT_FOUND: "WIZARD_NOT_FOUND";
+};
+/** Missing cron automation identified by its exact store key. */
+type CronJobNotFoundErrorDetails = {
+  code: typeof GatewayErrorDetailCodes.CRON_JOB_NOT_FOUND;
+  jobId: string;
+};
+/** Missing operator-scope details shared by WebSocket and HTTP responses. */
+type MissingScopeErrorDetails = {
+  code: typeof GatewayErrorDetailCodes.MISSING_SCOPE;
+  missingScope: string;
+  requiredScopes: string[];
+};
+type McpAppViewExpiredErrorDetails = {
+  code: typeof GatewayErrorDetailCodes.MCP_APP_VIEW_EXPIRED;
+};
+type OutboundDeliveryQueuedErrorDetails = {
+  code: typeof GatewayErrorDetailCodes.OUTBOUND_DELIVERY_QUEUED;
+};
+/** Per-profile preference quota details returned by users.prefs.set. */
+type UserPrefsLimitExceededErrorDetails = {
+  code: typeof GatewayErrorDetailCodes.USER_PREFS_LIMIT_EXCEEDED;
+  limit: number;
+  currentCount: number;
+};
+/** Unknown agent details carried by agent-scoped method validation failures. */
+type UnknownAgentIdErrorDetails = {
+  code: typeof GatewayErrorDetailCodes.UNKNOWN_AGENT_ID;
+  agentId: string;
+};
+/** Missing or expired process-local setup wizard session. */
+type WizardNotFoundErrorDetails = {
+  code: typeof GatewayErrorDetailCodes.WIZARD_NOT_FOUND;
+};
+type ProjectCloneFailureCause = "invalid_url" | "auth_required" | "not_found" | "network" | "target_exists" | "clone_failed";
+type ProjectCloneErrorDetails = {
+  code: typeof GatewayErrorDetailCodes.PROJECT_CLONE_FAILED;
+  cause: ProjectCloneFailureCause;
+};
+/** Optimistic-concurrency mismatch for an operator-reviewed Skill Workshop draft. */
+type SkillProposalRevisionChangedErrorDetails = {
+  code: typeof GatewayErrorDetailCodes.SKILL_PROPOSAL_REVISION_CHANGED;
+  expectedRevisionHash: string;
+  currentRevisionHash: string;
+};
+/** Structured details emitted by method-level failures. */
+type GatewayErrorDetails = CronJobNotFoundErrorDetails | MissingScopeErrorDetails | McpAppViewExpiredErrorDetails | OutboundDeliveryQueuedErrorDetails | UserPrefsLimitExceededErrorDetails | SkillProposalRevisionChangedErrorDetails | ProjectCloneErrorDetails | UnknownAgentIdErrorDetails | WizardNotFoundErrorDetails;
+/** Reads a typed cron lookup miss without parsing operator-facing prose. */
+declare function readCronJobNotFoundError(error: unknown): CronJobNotFoundErrorDetails | null;
+/** Builds the canonical stale-draft details shared by Skill Workshop RPCs. */
+declare function buildSkillProposalRevisionChangedErrorDetails(params: {
+  expectedRevisionHash: string;
+  currentRevisionHash: string;
+}): SkillProposalRevisionChangedErrorDetails;
+/** Reads a stale Skill Workshop decision without parsing operator-facing prose. */
+declare function readSkillProposalRevisionChangedError(error: unknown): SkillProposalRevisionChangedErrorDetails | null;
+/** Reads validated missing-scope details from an untrusted protocol payload. */
+declare function readMissingScopeErrorDetails(details: unknown): MissingScopeErrorDetails | null;
+declare function isMcpAppViewExpiredError(error: unknown): boolean;
+/**
+ * Reads a method-level missing-scope failure, preferring structured details.
+ * The message fallback keeps clients compatible with gateways predating structured details.
+ */
+declare function readMissingScopeError(error: unknown): MissingScopeErrorDetails | null;
+//#endregion
+export { readCronJobNotFoundError as _, GatewayErrorDetails as a, readSkillProposalRevisionChangedError as b, OutboundDeliveryQueuedErrorDetails as c, SkillProposalRevisionChangedErrorDetails as d, UnknownAgentIdErrorDetails as f, isMcpAppViewExpiredError as g, buildSkillProposalRevisionChangedErrorDetails as h, GatewayErrorDetailCodes as i, ProjectCloneErrorDetails as l, WizardNotFoundErrorDetails as m, ErrorCode as n, McpAppViewExpiredErrorDetails as o, UserPrefsLimitExceededErrorDetails as p, ErrorCodes as r, MissingScopeErrorDetails as s, CronJobNotFoundErrorDetails as t, ProjectCloneFailureCause as u, readMissingScopeError as v, readMissingScopeErrorDetails as y };

package/dist/gateway-error-details.d.mts

@@ -1,2 +1,2 @@
-import { a as McpAppViewExpiredErrorDetails, c as ProjectCloneFailureCause, d as WizardNotFoundErrorDetails, f as isMcpAppViewExpiredError, i as GatewayErrorDetails, l as UnknownAgentIdErrorDetails, m as readMissingScopeErrorDetails, n as ErrorCodes, o as MissingScopeErrorDetails, p as readMissingScopeError, r as GatewayErrorDetailCodes, s as ProjectCloneErrorDetails, t as ErrorCode, u as UserPrefsLimitExceededErrorDetails } from "./gateway-error-details-BXoMHq1i.mjs";
-export { ErrorCode, ErrorCodes, GatewayErrorDetailCodes, GatewayErrorDetails, McpAppViewExpiredErrorDetails, MissingScopeErrorDetails, ProjectCloneErrorDetails, ProjectCloneFailureCause, UnknownAgentIdErrorDetails, UserPrefsLimitExceededErrorDetails, WizardNotFoundErrorDetails, isMcpAppViewExpiredError, readMissingScopeError, readMissingScopeErrorDetails };
+import { _ as readCronJobNotFoundError, a as GatewayErrorDetails, b as readSkillProposalRevisionChangedError, c as OutboundDeliveryQueuedErrorDetails, d as SkillProposalRevisionChangedErrorDetails, f as UnknownAgentIdErrorDetails, g as isMcpAppViewExpiredError, h as buildSkillProposalRevisionChangedErrorDetails, i as GatewayErrorDetailCodes, l as ProjectCloneErrorDetails, m as WizardNotFoundErrorDetails, n as ErrorCode, o as McpAppViewExpiredErrorDetails, p as UserPrefsLimitExceededErrorDetails, r as ErrorCodes, s as MissingScopeErrorDetails, t as CronJobNotFoundErrorDetails, u as ProjectCloneFailureCause, v as readMissingScopeError, y as readMissingScopeErrorDetails } from "./gateway-error-details-yO9RdEKe.mjs";
+export { CronJobNotFoundErrorDetails, ErrorCode, ErrorCodes, GatewayErrorDetailCodes, GatewayErrorDetails, McpAppViewExpiredErrorDetails, MissingScopeErrorDetails, OutboundDeliveryQueuedErrorDetails, ProjectCloneErrorDetails, ProjectCloneFailureCause, SkillProposalRevisionChangedErrorDetails, UnknownAgentIdErrorDetails, UserPrefsLimitExceededErrorDetails, WizardNotFoundErrorDetails, buildSkillProposalRevisionChangedErrorDetails, isMcpAppViewExpiredError, readCronJobNotFoundError, readMissingScopeError, readMissingScopeErrorDetails, readSkillProposalRevisionChangedError };

package/dist/gateway-error-details.mjs

@@ -1,4 +1,4 @@
-import { t as asProtocolRecord } from "./protocol-value-normalization-Bexl3yr1.mjs";
+import { t as asNullableRecord } from "./record-coerce-BKHrZ46I.mjs";
 //#region src/gateway-error-details.ts
 /** Gateway JSON-RPC style error codes shared by clients and server handlers. */
 const ErrorCodes = {
@@ -19,18 +19,52 @@ const ErrorCodes = {
 };
 /** Stable discriminants for structured method-level failures. */
 const GatewayErrorDetailCodes = {
+	CRON_JOB_NOT_FOUND: "CRON_JOB_NOT_FOUND",
 	MISSING_SCOPE: "MISSING_SCOPE",
 	MCP_APP_VIEW_EXPIRED: "MCP_APP_VIEW_EXPIRED",
+	OUTBOUND_DELIVERY_QUEUED: "OUTBOUND_DELIVERY_QUEUED",
 	USER_PREFS_LIMIT_EXCEEDED: "USER_PREFS_LIMIT_EXCEEDED",
 	SESSION_COMPANION_BUSY: "SESSION_COMPANION_BUSY",
+	SKILL_PROPOSAL_REVISION_CHANGED: "SKILL_PROPOSAL_REVISION_CHANGED",
 	PROJECT_CLONE_FAILED: "PROJECT_CLONE_FAILED",
 	UNKNOWN_AGENT_ID: "UNKNOWN_AGENT_ID",
 	WIZARD_NOT_FOUND: "WIZARD_NOT_FOUND"
 };
 const LEGACY_MISSING_SCOPE_PATTERN = /\bmissing scope:\s*([a-z0-9._-]+)/i;
+const SHA256_PATTERN = /^[a-fA-F0-9]{64}$/;
+/** Reads a typed cron lookup miss without parsing operator-facing prose. */
+function readCronJobNotFoundError(error) {
+	const details = asNullableRecord(asNullableRecord(error)?.details);
+	if (details?.code !== GatewayErrorDetailCodes.CRON_JOB_NOT_FOUND) return null;
+	const jobId = typeof details.jobId === "string" ? details.jobId.trim() : "";
+	return jobId ? {
+		code: GatewayErrorDetailCodes.CRON_JOB_NOT_FOUND,
+		jobId
+	} : null;
+}
+/** Builds the canonical stale-draft details shared by Skill Workshop RPCs. */
+function buildSkillProposalRevisionChangedErrorDetails(params) {
+	return {
+		code: GatewayErrorDetailCodes.SKILL_PROPOSAL_REVISION_CHANGED,
+		expectedRevisionHash: params.expectedRevisionHash,
+		currentRevisionHash: params.currentRevisionHash
+	};
+}
+/** Reads a stale Skill Workshop decision without parsing operator-facing prose. */
+function readSkillProposalRevisionChangedError(error) {
+	const details = asNullableRecord(asNullableRecord(error)?.details);
+	if (details?.code !== GatewayErrorDetailCodes.SKILL_PROPOSAL_REVISION_CHANGED) return null;
+	const expectedRevisionHash = typeof details.expectedRevisionHash === "string" ? details.expectedRevisionHash : "";
+	const currentRevisionHash = typeof details.currentRevisionHash === "string" ? details.currentRevisionHash : "";
+	if (!SHA256_PATTERN.test(expectedRevisionHash) || !SHA256_PATTERN.test(currentRevisionHash)) return null;
+	return buildSkillProposalRevisionChangedErrorDetails({
+		expectedRevisionHash,
+		currentRevisionHash
+	});
+}
 /** Reads validated missing-scope details from an untrusted protocol payload. */
 function readMissingScopeErrorDetails(details) {
-	const record = asProtocolRecord(details);
+	const record = asNullableRecord(details);
 	if (record?.code !== GatewayErrorDetailCodes.MISSING_SCOPE) return null;
 	const missingScope = typeof record.missingScope === "string" ? record.missingScope.trim() : "";
 	const requiredScopes = Array.isArray(record.requiredScopes) ? record.requiredScopes.map((scope) => typeof scope === "string" ? scope.trim() : "") : [];
@@ -42,14 +76,14 @@ function readMissingScopeErrorDetails(details) {
 	};
 }
 function isMcpAppViewExpiredError(error) {
-	return asProtocolRecord(asProtocolRecord(error)?.details)?.code === GatewayErrorDetailCodes.MCP_APP_VIEW_EXPIRED;
+	return asNullableRecord(asNullableRecord(error)?.details)?.code === GatewayErrorDetailCodes.MCP_APP_VIEW_EXPIRED;
 }
 /**
 * Reads a method-level missing-scope failure, preferring structured details.
 * The message fallback keeps clients compatible with gateways predating structured details.
 */
 function readMissingScopeError(error) {
-	const record = asProtocolRecord(error);
+	const record = asNullableRecord(error);
 	if (!record) return null;
 	const structured = readMissingScopeErrorDetails(record.details);
 	if (structured) return structured;
@@ -64,4 +98,4 @@ function readMissingScopeError(error) {
 	} : null;
 }
 //#endregion
-export { ErrorCodes, GatewayErrorDetailCodes, isMcpAppViewExpiredError, readMissingScopeError, readMissingScopeErrorDetails };
+export { ErrorCodes, GatewayErrorDetailCodes, buildSkillProposalRevisionChangedErrorDetails, isMcpAppViewExpiredError, readCronJobNotFoundError, readMissingScopeError, readMissingScopeErrorDetails, readSkillProposalRevisionChangedError };