### Fixes

- CLI: lazy-load model and plugin runtime helpers for command actions so parent/help output renders without importing those runtime paths.

- Gateway/session history: carry monotonic transcript message sequence through live updates and refresh SSE history when stale sequence input would otherwise append bad incremental state. (#81474) Thanks @samzong.

- Security/sandbox: include Windows `USERPROFILE` in the sandbox blocked home roots so credential-bearing binds (such as `.codex`, `.openclaw`, or `.ssh` under the Windows user profile) are denied even when `HOME` points at a different shell home. (#63074) Thanks @luoyanglang.

- Models config/auth: stop inferring provider env-var markers from broad `^[A-Z_][A-Z0-9_]*$` strings, and resolve config-backed provider `apiKey` values only through structured env SecretRefs (`secrets.providers[id]` / `secrets.defaults`), so unrelated env vars cannot accidentally become provider credentials. Thanks @sallyom.

- Media fetch: skip allocating and buffering the response body for bodyless media responses (HEAD probes and 204-style empty bodies), avoiding wasted heap on streams that carry no payload. Thanks @shakkernerd.

import type { SessionLifecycleEvent } from "../sessions/session-lifecycle-events.js";

import type { SessionTranscriptUpdate } from "../sessions/transcript-events.js";

import { asPositiveSafeInteger } from "../shared/number-coercion.js";

import { projectChatDisplayMessage } from "./chat-display-projection.js";

import type { GatewayBroadcastToConnIdsFn } from "./server-broadcast-types.js";

import type {

type SessionEventSubscribers = Pick<SessionEventSubscriberRegistry, "getAll">;

type SessionMessageSubscribers = Pick<SessionMessageSubscriberRegistry, "get">;

function normalizeMessageSeq(value: unknown): number | undefined {

return typeof value === "number" && Number.isSafeInteger(value) && value > 0 ? value : undefined;

}

function buildGatewaySessionSnapshot(params: {

sessionRow: GatewaySessionRow | null | undefined;

includeSession?: boolean;

if (connIds.size === 0) {

return;

}

let messageSeq = normalizeMessageSeq(update.messageSeq);

let messageSeq = asPositiveSafeInteger(update.messageSeq);

if (messageSeq === undefined) {

const { entry, storePath } = loadSessionEntry(sessionKey);

messageSeq = entry?.sessionId

? normalizeMessageSeq(

? asPositiveSafeInteger(

await readSessionMessageCountAsync(entry.sessionId, storePath, entry.sessionFile),

)

: undefined;

import { asPositiveSafeInteger } from "../shared/number-coercion.js";

import {

DEFAULT_CHAT_HISTORY_TEXT_MAX_CHARS,

projectChatDisplayMessages,

return Number.isFinite(value) && value > 0 ? value : undefined;

}

function resolvePositiveInteger(value: unknown): number | undefined {

return typeof value === "number" && Number.isSafeInteger(value) && value > 0 ? value : undefined;

}

function toSessionHistoryMessages(messages: unknown[]): SessionHistoryMessage[] {

return messages.filter(

(message): message is SessionHistoryMessage =>

}

function resolveMessageSeq(message: SessionHistoryMessage | undefined): number | undefined {

return resolvePositiveInteger(message?.__openclaw?.seq);

return asPositiveSafeInteger(message?.__openclaw?.seq);

}

function paginateSessionMessages(

if (this.limit !== undefined || this.cursor !== undefined) {

return null;

}

const carriedSeq = resolvePositiveInteger(update.messageSeq);

const carriedSeq = asPositiveSafeInteger(update.messageSeq);

if (carriedSeq !== undefined) {

if (carriedSeq <= this.rawTranscriptSeq) {

return { shouldRefresh: true };

import { asPositiveSafeInteger } from "../shared/number-coercion.js";

import { normalizeOptionalString } from "../shared/string-coerce.js";

export type SessionTranscriptUpdate = {

const SESSION_TRANSCRIPT_LISTENERS = new Set<SessionTranscriptListener>();

function normalizeMessageSeq(value: unknown): number | undefined {

return typeof value === "number" && Number.isSafeInteger(value) && value > 0 ? value : undefined;

}

export function onSessionTranscriptUpdate(listener: SessionTranscriptListener): () => void {

SESSION_TRANSCRIPT_LISTENERS.add(listener);

return () => {

if (!trimmed) {

return;

}

const messageSeq = normalizeMessageSeq(normalized.messageSeq);

const messageSeq = asPositiveSafeInteger(normalized.messageSeq);

const nextUpdate: SessionTranscriptUpdate = {

sessionFile: trimmed,

...(normalizeOptionalString(normalized.sessionKey)

export function asFiniteNumber(value: unknown): number | undefined {

return typeof value === "number" && Number.isFinite(value) ? value : undefined;

}

export function asPositiveSafeInteger(value: unknown): number | undefined {

return typeof value === "number" && Number.isSafeInteger(value) && value > 0 ? value : undefined;

}