lossless-openclaw-orchestrator 1.1.1 → 1.1.3

package/README.md

@@ -14,7 +14,7 @@ safe action without rereading raw transcripts.
 [![License](https://img.shields.io/badge/license-PolyForm%20Noncommercial-blue)](LICENSE)
 [![PRs welcome](https://img.shields.io/badge/PRs-welcome-brightgreen)](CONTRIBUTING.md)
 
-[Setup](docs/SETUP.md) · [Contributing](CONTRIBUTING.md) · [Agent Instructions](AGENTS.md) · [Agent Skill](skills/lossless-openclaw-orchestrator/SKILL.md) · [OpenClaw Plugin](docs/OPENCLAW_PLUGIN.md) · [Security](SECURITY.md) · [Code of Conduct](CODE_OF_CONDUCT.md) · [Vision](VISION.md) · [Privacy](docs/PRIVACY.md) · [Claude Boundary](docs/CLAUDE_ADAPTER_BOUNDARY.md) · [Claim Audit](docs/CLAIM_AUDIT.md) · [Release Notes](docs/RELEASE_NOTES_1.1.1.md) · [1.0 Notes](docs/RELEASE_NOTES_1.0.0.md) · [License](LICENSE)
+[Setup](docs/SETUP.md) · [Contributing](CONTRIBUTING.md) · [Agent Instructions](AGENTS.md) · [Agent Skill](skills/lossless-openclaw-orchestrator/SKILL.md) · [OpenClaw Plugin](docs/OPENCLAW_PLUGIN.md) · [Security](SECURITY.md) · [Code of Conduct](CODE_OF_CONDUCT.md) · [Vision](VISION.md) · [Privacy](docs/PRIVACY.md) · [Claude Boundary](docs/CLAUDE_ADAPTER_BOUNDARY.md) · [Claim Audit](docs/CLAIM_AUDIT.md) · [Release Notes](docs/RELEASE_NOTES_1.1.3.md) · [1.0 Notes](docs/RELEASE_NOTES_1.0.0.md) · [License](LICENSE)
 
 ## Why It Matters
 

package/VISION.md

@@ -10,9 +10,9 @@ The stable product should feel like a local orchestration cockpit: OpenClaw can
 
 ## Current Milestone: 1.1 Desktop Collaboration Cockpit
 
-The current release lane is [#393](https://github.com/100yenadmin/Lossless-Codex-Orchestrator-LCO/issues/393), which publishes stable `1.1.1` on npm `latest` after the same full check, smoke, scenario, scorecard, release-status, finalization, and post-publish readiness gates used for `1.1.0`. This patch carries the same stable claim scope while adding the #380 same-connection live-control safety fix, the #385 Desktop-first agent skill wording fix, and the #382 Desktop-first daily orchestration scenario contract.
+The current release lane is [#396](https://github.com/100yenadmin/Lossless-Codex-Orchestrator-LCO/issues/396), which publishes stable `1.1.2` on npm `latest` after the same full check, smoke, scenario, scorecard, release-status, finalization, and post-publish readiness gates used for `1.1.1`. This patch carries the same stable claim scope while adding the #381 issue-grade public-safe live-control smoke failure report.
 
-The stable 1.0.0 and 1.1.0 packages have shipped on npm `latest` and their GitHub Releases are published. The post-GA Desktop claim-validation lane [#306](https://github.com/100yenadmin/Lossless-Codex-Orchestrator-LCO/issues/306) records that Desktop-visible classification and fallback readiness/status are proven, while actual Codex GUI mutation remains excluded. Desktop parity [#307](https://github.com/100yenadmin/Lossless-Codex-Orchestrator-LCO/issues/307) added the coherence classifier; desktop fallback [#308](https://github.com/100yenadmin/Lossless-Codex-Orchestrator-LCO/issues/308) added the CUA-first and Peekaboo-secondary readiness report. The active product tracker is the 1.1 collaboration cockpit [#309](https://github.com/100yenadmin/Lossless-Codex-Orchestrator-LCO/issues/309), with the operating loop [#16](https://github.com/100yenadmin/Lossless-Codex-Orchestrator-LCO/issues/16).
+The stable 1.0.0, 1.1.0, and 1.1.1 packages have shipped on npm `latest` and their GitHub Releases are published. The post-GA Desktop claim-validation lane [#306](https://github.com/100yenadmin/Lossless-Codex-Orchestrator-LCO/issues/306) records that Desktop-visible classification and fallback readiness/status are proven, while actual Codex GUI mutation remains excluded. Desktop parity [#307](https://github.com/100yenadmin/Lossless-Codex-Orchestrator-LCO/issues/307) added the coherence classifier; desktop fallback [#308](https://github.com/100yenadmin/Lossless-Codex-Orchestrator-LCO/issues/308) added the CUA-first and Peekaboo-secondary readiness report. The active product tracker is the 1.1 collaboration cockpit [#309](https://github.com/100yenadmin/Lossless-Codex-Orchestrator-LCO/issues/309), with the operating loop [#16](https://github.com/100yenadmin/Lossless-Codex-Orchestrator-LCO/issues/16).
 
 The Codex Autonomy Cockpit [#254](https://github.com/100yenadmin/Lossless-Codex-Orchestrator-LCO/issues/254) and Eva Operating Picture [#255](https://github.com/100yenadmin/Lossless-Codex-Orchestrator-LCO/issues/255) P0 lanes are completed beta foundation, not the current active child-work list. Completed P0 children include shared contracts [#256](https://github.com/100yenadmin/Lossless-Codex-Orchestrator-LCO/issues/256), source authority [#258](https://github.com/100yenadmin/Lossless-Codex-Orchestrator-LCO/issues/258), watcher/resume requests [#259](https://github.com/100yenadmin/Lossless-Codex-Orchestrator-LCO/issues/259), visible Codex map joins [#260](https://github.com/100yenadmin/Lossless-Codex-Orchestrator-LCO/issues/260), deterministic GitHub operating inputs [#264](https://github.com/100yenadmin/Lossless-Codex-Orchestrator-LCO/issues/264)/[#265](https://github.com/100yenadmin/Lossless-Codex-Orchestrator-LCO/issues/265), current-lane source balancing [#269](https://github.com/100yenadmin/Lossless-Codex-Orchestrator-LCO/issues/269), GitHub check-state fidelity [#270](https://github.com/100yenadmin/Lossless-Codex-Orchestrator-LCO/issues/270), cockpit card cleanup [#271](https://github.com/100yenadmin/Lossless-Codex-Orchestrator-LCO/issues/271), and end-to-end Eva cockpit dogfood [#272](https://github.com/100yenadmin/Lossless-Codex-Orchestrator-LCO/issues/272). The sprint brief remains the historical handoff for that P0 work: [docs/sprints/brief-lco-codex-autonomy-cockpit-sprint-2026-07-01.md](docs/sprints/brief-lco-codex-autonomy-cockpit-sprint-2026-07-01.md).
 
@@ -20,7 +20,7 @@ The core Codex recall, M9 handoff paths, Codex Autonomy Cockpit, Eva Operating P
 
 The current target is:
 
-- Promote npm `latest` from stable `1.1.0` to stable `1.1.1` only after #393 passes full check, smoke, scenario, scorecard, release-status, finalization, and post-publish readiness gates; keep `beta` aligned with beta trains and use `next` for future release candidates.
+- Promote npm `latest` from stable `1.1.1` to stable `1.1.2` only after #396 passes full check, smoke, scenario, scorecard, release-status, finalization, and post-publish readiness gates; keep `beta` aligned with beta trains and use `next` for future release candidates.
 - Keep README, VISION, release notes, and scorecards current so completed release gates are recorded as completed proof, not active work.
 - Treat #307/#308 as completed proof for Desktop-visible classification and fallback readiness/status, not as proof of Codex GUI mutation, prompt typing, clicking, refresh/restart automation, or unattended visible collaboration.
 - Use #309 to design the next collaboration cockpit layer from structured public-safe cards, explicit action-bound proof gates, and clear excluded-claim wording.

package/dist/packages/cli/src/index.js

@@ -16,7 +16,9 @@ import { runOpenClawGatewayLiveControlSmoke } from "./openclaw-live-control-smok
 import { runOpenClawPostActionRefreshSmoke } from "./openclaw-post-action-refresh-smoke.js";
 import { createScorecardSweep } from "./scorecard-sweep.js";
 import { createScenarioSweep } from "./scenario-sweep.js";
+import { createRuntimeProofIssuePacket } from "./runtime-issue-packet.js";
 import { createOnboardingStatusReport, writeOnboardingStatusReport } from "./onboarding-status.js";
+import { createRuntimeSweepSummary } from "./runtime-sweep-summary.js";
 import { normalizeReleaseClaimScope } from "./release-claim-scope.js";
 import { AppServerLiveControlSmokeClient, runLiveControlSmoke } from "./live-control-smoke.js";
 import { createLocalMacSearchUiShell, REQUIRED_LOCAL_MAC_SEARCH_UI_TOOLS, sampleLocalMacSearchUiShell, writeLocalMacSearchUiEvidence } from "../../local-mac-ui/src/shell.js";
@@ -380,6 +382,18 @@ async function main() {
             process.exitCode = 1;
         return;
     }
+    if (command === "runtime" && args[0] === "sweep-summary") {
+        if (hasHelpFlag(args.slice(1))) {
+            printRuntimeSweepSummaryHelp();
+            return;
+        }
+        const parsed = parseRuntimeSweepSummaryArgs(args.slice(1));
+        const report = createRuntimeSweepSummary(parsed);
+        console.log(JSON.stringify(report, null, 2));
+        if (parsed.strict && (!report.summaryReady || report.claimBoundary.supportedClaimScope === "none"))
+            process.exitCode = 1;
+        return;
+    }
     if (command === "ui" && args[0] === "local-mac-search") {
         if (hasHelpFlag(args.slice(1))) {
             printLocalMacSearchUiHelp();
@@ -456,6 +470,25 @@ async function main() {
             process.exitCode = 1;
         return;
     }
+    if (command === "runtime" && args[0] === "issue-packet") {
+        if (hasHelpFlag(args.slice(1))) {
+            printRuntimeIssuePacketHelp();
+            return;
+        }
+        const parsed = parseRuntimeIssuePacketArgs(args.slice(1));
+        const report = createRuntimeProofIssuePacket({
+            evidenceDir: parsed.evidenceDir,
+            failureReport: parsed.failureReport,
+            parentIssue: parsed.parentIssue,
+            operatingLoopIssue: parsed.operatingLoopIssue,
+            milestone: parsed.milestone,
+            now: parsed.now
+        });
+        console.log(JSON.stringify(report, null, 2));
+        if (parsed.strict && !report.issuePacketReady)
+            process.exitCode = 1;
+        return;
+    }
     if (command === "release" && args[0] === "preflight") {
         if (hasHelpFlag(args.slice(1))) {
             printReleasePreflightHelp();
@@ -750,9 +783,11 @@ function mainUsageText() {
         "  loo openclaw live-control-smoke --evidence-dir path --thread-id id [--openclaw-bin path] [--dev] [--profile name] [--gateway-url ws://127.0.0.1:port] [--token token] [--gateway-timeout-ms ms] [--session-key key] [--message text] [--strict]",
         "  loo openclaw post-action-refresh-smoke --evidence-dir path --thread-id id --live-proof-report path [--openclaw-bin path] [--dev] [--profile name] [--gateway-url ws://127.0.0.1:port] [--token token] [--gateway-timeout-ms ms] [--session-key key] [--query text] [--expand-profile metadata|brief|evidence] [--token-budget n] [--strict]",
         "  loo scorecards sweep --evidence-dir path [--scorecard-dir path] [--claim-scope codex-live-control|codex-read-search-expand-dry-run|codex-working-app-proof] [--strict]",
+        "  loo runtime sweep-summary --evidence-dir path --dry-run-scenarios path --runtime-scenarios path --scorecard-sweep path --published-smoke path [--runtime-proof-dir path] [--now iso] [--strict]",
         "  loo ui local-mac-search --evidence-dir path [--sample] [--strict]",
         "  loo eval retrieval --scenario-file path [--evidence-path path] [--strict]",
         "  loo eval scenarios --evidence-dir path [--scenario-dir path] [--runtime-proof-dir path] [--strict]",
+        "  loo runtime issue-packet --evidence-dir path --failure-report path [--parent-issue #n] [--operating-loop #n] [--milestone name] [--now iso] [--strict]",
         "  loo release preflight [--evidence-dir path] [--claim-scope codex-live-control|codex-read-search-expand-dry-run|codex-working-app-proof] [--approved-live-control-evidence path] [--runtime-proof-dir path] [--strict]",
         "  loo release bundle --evidence-dir path [--claim-scope codex-live-control|codex-read-search-expand-dry-run|codex-working-app-proof] [--approved-live-control-evidence path] [--runtime-proof-dir path] [--strict]",
         "  loo release status --evidence-dir path --candidate-sha sha [--claim-scope codex-live-control|codex-read-search-expand-dry-run|codex-working-app-proof] [--approved-live-control-evidence path] [--runtime-proof-dir path] [--npm-publish-approval-evidence path] [--github-release-approval-evidence path] [--github-ci-evidence path] [--codeql-evidence path] [--desktop-gui-required --desktop-gui-approval-evidence path] [--now iso] [--strict]",
@@ -906,6 +941,48 @@ function printScenarioSweepHelp() {
         "  It does not read raw Codex transcripts, run live Codex control, mutate a desktop GUI, publish npm, or create a GitHub Release."
     ].join("\n"));
 }
+function printRuntimeIssuePacketHelp() {
+    console.log([
+        "Usage:",
+        "  loo runtime issue-packet --evidence-dir path --failure-report path [--parent-issue #n] [--operating-loop #n] [--milestone name] [--now iso] [--strict]",
+        "",
+        "Writes a public-safe issue-ready handoff packet from a failed runtime proof or scenario sweep report.",
+        "",
+        "Required:",
+        "  --evidence-dir is required and receives runtime-proof-issue-packet.json.",
+        "  --failure-report points to the failed public-safe runtime proof, smoke, or scenario-sweep JSON report.",
+        "",
+        "Strict mode:",
+        "  --strict exits non-zero when the failure report is missing, malformed, lacks blocker codes, or when packet redaction fails.",
+        "",
+        "Safety boundary:",
+        "  The command never runs gh issue create and never writes to GitHub.",
+        "  It records only blocker codes, scenario ids, duplicate-check query, acceptance criteria, proof boundary, and redaction categories.",
+        "  It does not read raw Codex transcripts, run live Codex control, mutate a GUI, publish npm, or create a GitHub Release."
+    ].join("\n"));
+}
+function printRuntimeSweepSummaryHelp() {
+    console.log([
+        "Usage:",
+        "  loo runtime sweep-summary --evidence-dir path --dry-run-scenarios path --runtime-scenarios path --scorecard-sweep path --published-smoke path [--runtime-proof-dir path] [--now iso] [--strict]",
+        "",
+        "Writes a public-safe summary that separates dry-run scenario readiness from missing runtime proof markers.",
+        "",
+        "Required:",
+        "  --dry-run-scenarios points to the v1 dry-run scenario sweep report.",
+        "  --runtime-scenarios points to the v1.1 runtime-required scenario sweep report.",
+        "  --scorecard-sweep points to the working-app scorecard sweep report.",
+        "  --published-smoke points to the published-package or gateway setup smoke report.",
+        "",
+        "Strict mode:",
+        "  --strict exits non-zero when the summary itself cannot be produced safely or no claim scope is supported.",
+        "  Missing runtime markers remain claim-boundary blockers, not packet-generation failures.",
+        "",
+        "Safety boundary:",
+        "  The command consumes public-safe reports only.",
+        "  It does not read raw Codex transcripts, run live Codex control, mutate a GUI, publish npm, create tags, or create a GitHub Release."
+    ].join("\n"));
+}
 function printOnboardingStatusHelp() {
     console.log([
         "Usage:",
@@ -1640,6 +1717,47 @@ function parseScenarioSweepArgs(input) {
         throw new Error("eval scenarios requires --evidence-dir");
     return { evidenceDir, scenarioDir, runtimeProofDir, scenarioIds: scenarioIds.length ? scenarioIds : undefined, strict };
 }
+function parseRuntimeIssuePacketArgs(input) {
+    let evidenceDir = "";
+    let failureReport = "";
+    let parentIssue;
+    let operatingLoopIssue;
+    let milestone;
+    let now;
+    let strict = false;
+    for (let index = 0; index < input.length; index += 1) {
+        const arg = input[index];
+        if (arg === "--evidence-dir") {
+            evidenceDir = requireOptionValue(input[++index], arg);
+        }
+        else if (arg === "--failure-report") {
+            failureReport = requireOptionValue(input[++index], arg);
+        }
+        else if (arg === "--parent-issue") {
+            parentIssue = requireOptionValue(input[++index], arg);
+        }
+        else if (arg === "--operating-loop") {
+            operatingLoopIssue = requireOptionValue(input[++index], arg);
+        }
+        else if (arg === "--milestone") {
+            milestone = requireOptionValue(input[++index], arg);
+        }
+        else if (arg === "--now") {
+            now = requireOptionValue(input[++index], arg);
+        }
+        else if (arg === "--strict") {
+            strict = true;
+        }
+        else {
+            throw new Error(`Unknown runtime issue-packet option: ${arg}`);
+        }
+    }
+    if (!evidenceDir)
+        throw new Error("runtime issue-packet requires --evidence-dir");
+    if (!failureReport)
+        throw new Error("runtime issue-packet requires --failure-report");
+    return { evidenceDir, failureReport, parentIssue, operatingLoopIssue, milestone, now, strict };
+}
 function readRetrievalScenarioFile(path) {
     const scenarioPath = resolve(path);
     if (!existsSync(scenarioPath))
@@ -2066,6 +2184,57 @@ function parseScorecardSweepArgs(input) {
         throw new Error("scorecards sweep requires --evidence-dir");
     return { evidenceDir, scorecardDir, claimScope, strict };
 }
+function parseRuntimeSweepSummaryArgs(input) {
+    let evidenceDir;
+    let dryRunScenarios;
+    let runtimeScenarios;
+    let scorecardSweep;
+    let publishedSmoke;
+    let runtimeProofDir;
+    let now;
+    let strict = false;
+    for (let index = 0; index < input.length; index += 1) {
+        const arg = input[index];
+        if (arg === "--evidence-dir") {
+            evidenceDir = requireOptionValue(input[++index], arg);
+        }
+        else if (arg === "--dry-run-scenarios") {
+            dryRunScenarios = requireOptionValue(input[++index], arg);
+        }
+        else if (arg === "--runtime-scenarios") {
+            runtimeScenarios = requireOptionValue(input[++index], arg);
+        }
+        else if (arg === "--scorecard-sweep") {
+            scorecardSweep = requireOptionValue(input[++index], arg);
+        }
+        else if (arg === "--published-smoke") {
+            publishedSmoke = requireOptionValue(input[++index], arg);
+        }
+        else if (arg === "--runtime-proof-dir") {
+            runtimeProofDir = requireOptionValue(input[++index], arg);
+        }
+        else if (arg === "--now") {
+            now = requireOptionValue(input[++index], arg);
+        }
+        else if (arg === "--strict") {
+            strict = true;
+        }
+        else {
+            throw new Error(`Unknown runtime sweep-summary option: ${arg}`);
+        }
+    }
+    if (!evidenceDir)
+        throw new Error("runtime sweep-summary requires --evidence-dir");
+    if (!dryRunScenarios)
+        throw new Error("runtime sweep-summary requires --dry-run-scenarios");
+    if (!runtimeScenarios)
+        throw new Error("runtime sweep-summary requires --runtime-scenarios");
+    if (!scorecardSweep)
+        throw new Error("runtime sweep-summary requires --scorecard-sweep");
+    if (!publishedSmoke)
+        throw new Error("runtime sweep-summary requires --published-smoke");
+    return { evidenceDir, dryRunScenarios, runtimeScenarios, scorecardSweep, publishedSmoke, runtimeProofDir, now, strict };
+}
 function parsePositiveInteger(value, name, max) {
     const parsed = Number(value);
     if (!Number.isInteger(parsed) || parsed < 1 || (max !== undefined && parsed > max)) {

package/dist/packages/cli/src/live-control-smoke.js

@@ -51,11 +51,28 @@ export async function runLiveControlSmoke(options) {
     mkdirSync(options.evidenceDir, { recursive: true });
     const timeoutMs = options.timeoutMs ?? DEFAULT_TIMEOUT_MS;
     const message = options.message ?? DEFAULT_MESSAGE;
-    await options.client.connect();
+    let targetState = {
+        threadId: options.threadId ?? null,
+        source: options.threadId ? "provided_thread" : "unknown"
+    };
+    let dryRunState = null;
+    let liveState = {
+        accepted: false,
+        approvalAuditId: null,
+        method: null,
+        completed: false,
+        status: null,
+        notificationMethods: [],
+        approvalRequestCount: 0,
+        serverRequestCount: 0
+    };
+    let failed = false;
     try {
+        await options.client.connect();
         const target = options.threadId
             ? { threadId: options.threadId, source: "provided_thread" }
             : { threadId: await startEphemeralThread(options.client, options.cwd), source: "ephemeral_thread_start" };
+        targetState = target;
         const control = createCodexControl({
             audit: options.audit,
             client: {
@@ -74,6 +91,12 @@ export async function runLiveControlSmoke(options) {
             }
         });
         const dryRun = await control.sendMessage({ threadId: target.threadId, message, dryRun: true });
+        dryRunState = {
+            approvalAuditId: dryRun.approvalAuditId,
+            paramsHash: dryRun.paramsHash,
+            messageHash: dryRun.messageHash,
+            live: false
+        };
         if (!dryRun.messageHash)
             throw new Error("dry-run did not produce a message hash");
         const live = await control.sendMessage({
@@ -82,10 +105,24 @@ export async function runLiveControlSmoke(options) {
             dryRun: false,
             approvalAuditId: dryRun.approvalAuditId
         });
+        liveState = {
+            ...liveState,
+            accepted: true,
+            approvalAuditId: live.approvalAuditId,
+            method: live.method ?? null
+        };
         const turnId = extractTurnId(live.response);
         if (!turnId)
             throw new Error("live Codex control response did not include a turn id");
         const completion = await options.client.waitForTurnCompletion({ threadId: target.threadId, turnId, timeoutMs });
+        liveState = {
+            ...liveState,
+            completed: completion.completed,
+            status: completion.status,
+            notificationMethods: summarizeMethods(completion.notificationMethods),
+            approvalRequestCount: completion.approvalRequestCount,
+            serverRequestCount: completion.serverRequestCount
+        };
         if (completion.approvalRequestCount > 0) {
             throw new Error("live Codex control smoke observed a Codex approval request; harmless smoke must not require approvals");
         }
@@ -138,8 +175,29 @@ export async function runLiveControlSmoke(options) {
         writeJson(reportPath, report);
         return report;
     }
+    catch (error) {
+        failed = true;
+        try {
+            writeFailureReport(options, {
+                error,
+                target: targetState,
+                dryRun: dryRunState,
+                live: liveState
+            });
+        }
+        catch {
+            // Best-effort evidence: never let report-writing failures mask the original smoke failure.
+        }
+        throw error;
+    }
     finally {
-        await options.client.close();
+        try {
+            await options.client.close();
+        }
+        catch (closeError) {
+            if (!failed)
+                throw closeError;
+        }
     }
 }
 export function defaultAppServerArgs() {
@@ -197,3 +255,80 @@ function summarizeMethods(methods) {
 function writeJson(path, value) {
     writeFileSync(path, `${JSON.stringify(value, null, 2)}\n`);
 }
+function writeFailureReport(options, state) {
+    const blocker = classifyFailureBlocker(state.error);
+    const report = {
+        kind: "loo_live_control_smoke_failure",
+        ok: false,
+        proofReady: false,
+        generatedAt: options.now ?? new Date().toISOString(),
+        blocker,
+        command: {
+            action: "send",
+            actionClass: "codex_live_control_send"
+        },
+        target: {
+            source: state.target.source,
+            refClass: state.target.threadId ? "codex_thread" : "unknown",
+            ref: state.target.threadId ? `codex_thread:${state.target.threadId}` : null
+        },
+        dryRun: {
+            attempted: state.dryRun !== null,
+            approvalAuditId: state.dryRun?.approvalAuditId ?? null,
+            paramsHash: state.dryRun?.paramsHash ?? null,
+            messageHash: state.dryRun?.messageHash ?? null,
+            live: state.dryRun ? false : null
+        },
+        transport: {
+            class: "codex_app_server",
+            connection: "single_connection_sequence"
+        },
+        live: state.live,
+        postActionRefresh: {
+            ran: false
+        },
+        nextDiagnosticStep: nextDiagnosticStep(blocker),
+        rawPromptIncluded: false,
+        rawTranscriptIncluded: false,
+        rawSecretIncluded: false,
+        screenshotIncluded: false,
+        sqliteIncluded: false
+    };
+    writeJson(join(options.evidenceDir, "live-control-smoke-failure-report.json"), report);
+}
+function classifyFailureBlocker(error) {
+    const message = error instanceof Error ? error.message : String(error);
+    if (/connect|handshake|spawn|ENOENT|codex.*not found|not connected/i.test(message)) {
+        return "codex_app_server_setup_failed";
+    }
+    if (/thread(?:\/resume| not found)|control sequence step failed:\s*thread\/resume/i.test(message)) {
+        return "same_connection_resume_load_diagnostics_required";
+    }
+    if (/approval request/i.test(message))
+        return "codex_approval_request_observed";
+    if (/server request/i.test(message))
+        return "codex_server_request_observed";
+    if (/turn id/i.test(message))
+        return "live_control_turn_id_missing";
+    if (/did not complete cleanly|timeout/i.test(message))
+        return "live_control_smoke_not_completed_cleanly";
+    return "live_control_smoke_failed";
+}
+function nextDiagnosticStep(blocker) {
+    switch (blocker) {
+        case "codex_app_server_setup_failed":
+            return "Check Codex app-server command availability, stdio handshake, and local transport setup before retrying live control.";
+        case "same_connection_resume_load_diagnostics_required":
+            return "Run same-connection resume/load diagnostics for the selected thread before retrying live control.";
+        case "codex_approval_request_observed":
+            return "Inspect why the harmless smoke triggered a Codex approval request; do not treat this as approved live-control proof.";
+        case "codex_server_request_observed":
+            return "Inspect unexpected server requests from the app-server smoke; do not retry live control until the request class is understood.";
+        case "live_control_turn_id_missing":
+            return "Inspect the app-server turn/start response shape and protocol drift before retrying.";
+        case "live_control_smoke_not_completed_cleanly":
+            return "Inspect turn completion notifications, status, and timeout behavior before retrying live control.";
+        default:
+            return "Inspect the public-safe failure report and route a focused issue before retrying live control.";
+    }
+}