lossless-openclaw-orchestrator 1.1.2 → 1.1.4

package/README.md

@@ -14,7 +14,7 @@ safe action without rereading raw transcripts.
 [![License](https://img.shields.io/badge/license-PolyForm%20Noncommercial-blue)](LICENSE)
 [![PRs welcome](https://img.shields.io/badge/PRs-welcome-brightgreen)](CONTRIBUTING.md)
 
-[Setup](docs/SETUP.md) · [Contributing](CONTRIBUTING.md) · [Agent Instructions](AGENTS.md) · [Agent Skill](skills/lossless-openclaw-orchestrator/SKILL.md) · [OpenClaw Plugin](docs/OPENCLAW_PLUGIN.md) · [Security](SECURITY.md) · [Code of Conduct](CODE_OF_CONDUCT.md) · [Vision](VISION.md) · [Privacy](docs/PRIVACY.md) · [Claude Boundary](docs/CLAUDE_ADAPTER_BOUNDARY.md) · [Claim Audit](docs/CLAIM_AUDIT.md) · [Release Notes](docs/RELEASE_NOTES_1.1.2.md) · [1.0 Notes](docs/RELEASE_NOTES_1.0.0.md) · [License](LICENSE)
+[Setup](docs/SETUP.md) · [Contributing](CONTRIBUTING.md) · [Agent Instructions](AGENTS.md) · [Agent Skill](skills/lossless-openclaw-orchestrator/SKILL.md) · [OpenClaw Plugin](docs/OPENCLAW_PLUGIN.md) · [Security](SECURITY.md) · [Code of Conduct](CODE_OF_CONDUCT.md) · [Vision](VISION.md) · [Privacy](docs/PRIVACY.md) · [Claude Boundary](docs/CLAUDE_ADAPTER_BOUNDARY.md) · [Claim Audit](docs/CLAIM_AUDIT.md) · [Release Notes](docs/RELEASE_NOTES_1.1.4.md) · [1.0 Notes](docs/RELEASE_NOTES_1.0.0.md) · [License](LICENSE)
 
 ## Why It Matters
 

package/dist/packages/cli/src/index.js

@@ -16,7 +16,9 @@ import { runOpenClawGatewayLiveControlSmoke } from "./openclaw-live-control-smok
 import { runOpenClawPostActionRefreshSmoke } from "./openclaw-post-action-refresh-smoke.js";
 import { createScorecardSweep } from "./scorecard-sweep.js";
 import { createScenarioSweep } from "./scenario-sweep.js";
+import { createRuntimeProofIssuePacket } from "./runtime-issue-packet.js";
 import { createOnboardingStatusReport, writeOnboardingStatusReport } from "./onboarding-status.js";
+import { createRuntimeSweepSummary } from "./runtime-sweep-summary.js";
 import { normalizeReleaseClaimScope } from "./release-claim-scope.js";
 import { AppServerLiveControlSmokeClient, runLiveControlSmoke } from "./live-control-smoke.js";
 import { createLocalMacSearchUiShell, REQUIRED_LOCAL_MAC_SEARCH_UI_TOOLS, sampleLocalMacSearchUiShell, writeLocalMacSearchUiEvidence } from "../../local-mac-ui/src/shell.js";
@@ -380,6 +382,18 @@ async function main() {
             process.exitCode = 1;
         return;
     }
+    if (command === "runtime" && args[0] === "sweep-summary") {
+        if (hasHelpFlag(args.slice(1))) {
+            printRuntimeSweepSummaryHelp();
+            return;
+        }
+        const parsed = parseRuntimeSweepSummaryArgs(args.slice(1));
+        const report = createRuntimeSweepSummary(parsed);
+        console.log(JSON.stringify(report, null, 2));
+        if (parsed.strict && (!report.summaryReady || report.claimBoundary.supportedClaimScope === "none"))
+            process.exitCode = 1;
+        return;
+    }
     if (command === "ui" && args[0] === "local-mac-search") {
         if (hasHelpFlag(args.slice(1))) {
             printLocalMacSearchUiHelp();
@@ -456,6 +470,25 @@ async function main() {
             process.exitCode = 1;
         return;
     }
+    if (command === "runtime" && args[0] === "issue-packet") {
+        if (hasHelpFlag(args.slice(1))) {
+            printRuntimeIssuePacketHelp();
+            return;
+        }
+        const parsed = parseRuntimeIssuePacketArgs(args.slice(1));
+        const report = createRuntimeProofIssuePacket({
+            evidenceDir: parsed.evidenceDir,
+            failureReport: parsed.failureReport,
+            parentIssue: parsed.parentIssue,
+            operatingLoopIssue: parsed.operatingLoopIssue,
+            milestone: parsed.milestone,
+            now: parsed.now
+        });
+        console.log(JSON.stringify(report, null, 2));
+        if (parsed.strict && !report.issuePacketReady)
+            process.exitCode = 1;
+        return;
+    }
     if (command === "release" && args[0] === "preflight") {
         if (hasHelpFlag(args.slice(1))) {
             printReleasePreflightHelp();
@@ -747,12 +780,14 @@ function mainUsageText() {
         "  loo openclaw dogfood [--dev] [--profile name] [--install-source path] [--link] [--force-install] [--evidence-path path] [--strict]",
         "  loo openclaw tool-smoke [--openclaw-bin path] [--dev] [--profile name] [--gateway-url ws://127.0.0.1:port] [--token token] [--gateway-timeout-ms ms] [--session-key key] [--query text] [--thread-id id] [--expand-profile metadata|brief|evidence] [--token-budget n] [--required-tool name] [--evidence-path path] [--strict]",
         "  loo openclaw published-smoke --evidence-dir path --dogfood-report path --tool-smoke-report path [--configured-tool-smoke-report path] [--npm-install-diagnostic-report path] [--registry-version version] [--registry-beta-version version] [--root path] [--now iso] [--strict]",
-        "  loo openclaw live-control-smoke --evidence-dir path --thread-id id [--openclaw-bin path] [--dev] [--profile name] [--gateway-url ws://127.0.0.1:port] [--token token] [--gateway-timeout-ms ms] [--session-key key] [--message text] [--strict]",
+        "  loo openclaw live-control-smoke --evidence-dir path --thread-id id [--action send|resume] [--openclaw-bin path] [--dev] [--profile name] [--gateway-url ws://127.0.0.1:port] [--token token] [--gateway-timeout-ms ms] [--session-key key] [--message text] [--strict]",
         "  loo openclaw post-action-refresh-smoke --evidence-dir path --thread-id id --live-proof-report path [--openclaw-bin path] [--dev] [--profile name] [--gateway-url ws://127.0.0.1:port] [--token token] [--gateway-timeout-ms ms] [--session-key key] [--query text] [--expand-profile metadata|brief|evidence] [--token-budget n] [--strict]",
         "  loo scorecards sweep --evidence-dir path [--scorecard-dir path] [--claim-scope codex-live-control|codex-read-search-expand-dry-run|codex-working-app-proof] [--strict]",
+        "  loo runtime sweep-summary --evidence-dir path --dry-run-scenarios path --runtime-scenarios path --scorecard-sweep path --published-smoke path [--runtime-proof-dir path] [--now iso] [--strict]",
         "  loo ui local-mac-search --evidence-dir path [--sample] [--strict]",
         "  loo eval retrieval --scenario-file path [--evidence-path path] [--strict]",
         "  loo eval scenarios --evidence-dir path [--scenario-dir path] [--runtime-proof-dir path] [--strict]",
+        "  loo runtime issue-packet --evidence-dir path --failure-report path [--parent-issue #n] [--operating-loop #n] [--milestone name] [--now iso] [--strict]",
         "  loo release preflight [--evidence-dir path] [--claim-scope codex-live-control|codex-read-search-expand-dry-run|codex-working-app-proof] [--approved-live-control-evidence path] [--runtime-proof-dir path] [--strict]",
         "  loo release bundle --evidence-dir path [--claim-scope codex-live-control|codex-read-search-expand-dry-run|codex-working-app-proof] [--approved-live-control-evidence path] [--runtime-proof-dir path] [--strict]",
         "  loo release status --evidence-dir path --candidate-sha sha [--claim-scope codex-live-control|codex-read-search-expand-dry-run|codex-working-app-proof] [--approved-live-control-evidence path] [--runtime-proof-dir path] [--npm-publish-approval-evidence path] [--github-release-approval-evidence path] [--github-ci-evidence path] [--codeql-evidence path] [--desktop-gui-required --desktop-gui-approval-evidence path] [--now iso] [--strict]",
@@ -906,6 +941,48 @@ function printScenarioSweepHelp() {
         "  It does not read raw Codex transcripts, run live Codex control, mutate a desktop GUI, publish npm, or create a GitHub Release."
     ].join("\n"));
 }
+function printRuntimeIssuePacketHelp() {
+    console.log([
+        "Usage:",
+        "  loo runtime issue-packet --evidence-dir path --failure-report path [--parent-issue #n] [--operating-loop #n] [--milestone name] [--now iso] [--strict]",
+        "",
+        "Writes a public-safe issue-ready handoff packet from a failed runtime proof or scenario sweep report.",
+        "",
+        "Required:",
+        "  --evidence-dir is required and receives runtime-proof-issue-packet.json.",
+        "  --failure-report points to the failed public-safe runtime proof, smoke, or scenario-sweep JSON report.",
+        "",
+        "Strict mode:",
+        "  --strict exits non-zero when the failure report is missing, malformed, lacks blocker codes, or when packet redaction fails.",
+        "",
+        "Safety boundary:",
+        "  The command never runs gh issue create and never writes to GitHub.",
+        "  It records only blocker codes, scenario ids, duplicate-check query, acceptance criteria, proof boundary, and redaction categories.",
+        "  It does not read raw Codex transcripts, run live Codex control, mutate a GUI, publish npm, or create a GitHub Release."
+    ].join("\n"));
+}
+function printRuntimeSweepSummaryHelp() {
+    console.log([
+        "Usage:",
+        "  loo runtime sweep-summary --evidence-dir path --dry-run-scenarios path --runtime-scenarios path --scorecard-sweep path --published-smoke path [--runtime-proof-dir path] [--now iso] [--strict]",
+        "",
+        "Writes a public-safe summary that separates dry-run scenario readiness from missing runtime proof markers.",
+        "",
+        "Required:",
+        "  --dry-run-scenarios points to the v1 dry-run scenario sweep report.",
+        "  --runtime-scenarios points to the v1.1 runtime-required scenario sweep report.",
+        "  --scorecard-sweep points to the working-app scorecard sweep report.",
+        "  --published-smoke points to the published-package or gateway setup smoke report.",
+        "",
+        "Strict mode:",
+        "  --strict exits non-zero when the summary itself cannot be produced safely or no claim scope is supported.",
+        "  Missing runtime markers remain claim-boundary blockers, not packet-generation failures.",
+        "",
+        "Safety boundary:",
+        "  The command consumes public-safe reports only.",
+        "  It does not read raw Codex transcripts, run live Codex control, mutate a GUI, publish npm, create tags, or create a GitHub Release."
+    ].join("\n"));
+}
 function printOnboardingStatusHelp() {
     console.log([
         "Usage:",
@@ -1095,9 +1172,9 @@ function printLiveControlSmokeHelp() {
 function printOpenClawLiveControlSmokeHelp() {
     console.log([
         "Usage:",
-        "  loo openclaw live-control-smoke --evidence-dir path --thread-id id [--openclaw-bin path] [--dev] [--profile name] [--gateway-url ws://127.0.0.1:port] [--token token] [--gateway-timeout-ms ms] [--session-key key] [--message text] [--strict]",
+        "  loo openclaw live-control-smoke --evidence-dir path --thread-id id [--action send|resume] [--openclaw-bin path] [--dev] [--profile name] [--gateway-url ws://127.0.0.1:port] [--token token] [--gateway-timeout-ms ms] [--session-key key] [--message text] [--strict]",
         "",
-        "Runs one approval-gated live Codex send through the installed OpenClaw gateway tools.invoke path.",
+        "Runs one approval-gated live Codex send or resume through the installed OpenClaw gateway tools.invoke path.",
         "",
         "Outputs:",
         "  openclaw-gateway-live-codex-v1-1.runtime-proof.json",
@@ -1105,7 +1182,7 @@ function printOpenClawLiveControlSmokeHelp() {
         "",
         "Safety boundary:",
         "  The command requires an explicit --thread-id target.",
-        "  It invokes loo_codex_control_dry_run first, then uses the matching approval_audit_id for loo_codex_send_message with dry_run:false.",
+        "  It invokes loo_codex_control_dry_run first, then uses the matching approval_audit_id for the selected live tool with dry_run:false.",
         "  It reads loo_audit_tail to prove matching dry-run/live audit metadata.",
         "  Evidence contains refs, audit ids, hashes, tool names, and status only.",
         "  It does not write raw prompt text, raw transcript spans, screenshots, SQLite DBs, tokens, or credentials.",
@@ -1640,6 +1717,47 @@ function parseScenarioSweepArgs(input) {
         throw new Error("eval scenarios requires --evidence-dir");
     return { evidenceDir, scenarioDir, runtimeProofDir, scenarioIds: scenarioIds.length ? scenarioIds : undefined, strict };
 }
+function parseRuntimeIssuePacketArgs(input) {
+    let evidenceDir = "";
+    let failureReport = "";
+    let parentIssue;
+    let operatingLoopIssue;
+    let milestone;
+    let now;
+    let strict = false;
+    for (let index = 0; index < input.length; index += 1) {
+        const arg = input[index];
+        if (arg === "--evidence-dir") {
+            evidenceDir = requireOptionValue(input[++index], arg);
+        }
+        else if (arg === "--failure-report") {
+            failureReport = requireOptionValue(input[++index], arg);
+        }
+        else if (arg === "--parent-issue") {
+            parentIssue = requireOptionValue(input[++index], arg);
+        }
+        else if (arg === "--operating-loop") {
+            operatingLoopIssue = requireOptionValue(input[++index], arg);
+        }
+        else if (arg === "--milestone") {
+            milestone = requireOptionValue(input[++index], arg);
+        }
+        else if (arg === "--now") {
+            now = requireOptionValue(input[++index], arg);
+        }
+        else if (arg === "--strict") {
+            strict = true;
+        }
+        else {
+            throw new Error(`Unknown runtime issue-packet option: ${arg}`);
+        }
+    }
+    if (!evidenceDir)
+        throw new Error("runtime issue-packet requires --evidence-dir");
+    if (!failureReport)
+        throw new Error("runtime issue-packet requires --failure-report");
+    return { evidenceDir, failureReport, parentIssue, operatingLoopIssue, milestone, now, strict };
+}
 function readRetrievalScenarioFile(path) {
     const scenarioPath = resolve(path);
     if (!existsSync(scenarioPath))
@@ -1881,6 +1999,9 @@ function parseOpenClawLiveControlSmokeArgs(input) {
         else if (arg === "--thread-id") {
             parsed.threadId = requireOptionValue(input[++index], arg);
         }
+        else if (arg === "--action") {
+            parsed.action = parseOpenClawLiveControlAction(requireOptionValue(input[++index], arg));
+        }
         else if (arg === "--message") {
             parsed.message = requireOptionValue(input[++index], arg);
         }
@@ -1900,6 +2021,11 @@ function parseOpenClawLiveControlSmokeArgs(input) {
         throw new Error("openclaw live-control-smoke requires --thread-id");
     return parsed;
 }
+function parseOpenClawLiveControlAction(value) {
+    if (value === "send" || value === "resume")
+        return value;
+    throw new Error("--action must be send or resume");
+}
 function parseOpenClawPostActionRefreshSmokeArgs(input) {
     const parsed = {};
     for (let index = 0; index < input.length; index += 1) {
@@ -2066,6 +2192,57 @@ function parseScorecardSweepArgs(input) {
         throw new Error("scorecards sweep requires --evidence-dir");
     return { evidenceDir, scorecardDir, claimScope, strict };
 }
+function parseRuntimeSweepSummaryArgs(input) {
+    let evidenceDir;
+    let dryRunScenarios;
+    let runtimeScenarios;
+    let scorecardSweep;
+    let publishedSmoke;
+    let runtimeProofDir;
+    let now;
+    let strict = false;
+    for (let index = 0; index < input.length; index += 1) {
+        const arg = input[index];
+        if (arg === "--evidence-dir") {
+            evidenceDir = requireOptionValue(input[++index], arg);
+        }
+        else if (arg === "--dry-run-scenarios") {
+            dryRunScenarios = requireOptionValue(input[++index], arg);
+        }
+        else if (arg === "--runtime-scenarios") {
+            runtimeScenarios = requireOptionValue(input[++index], arg);
+        }
+        else if (arg === "--scorecard-sweep") {
+            scorecardSweep = requireOptionValue(input[++index], arg);
+        }
+        else if (arg === "--published-smoke") {
+            publishedSmoke = requireOptionValue(input[++index], arg);
+        }
+        else if (arg === "--runtime-proof-dir") {
+            runtimeProofDir = requireOptionValue(input[++index], arg);
+        }
+        else if (arg === "--now") {
+            now = requireOptionValue(input[++index], arg);
+        }
+        else if (arg === "--strict") {
+            strict = true;
+        }
+        else {
+            throw new Error(`Unknown runtime sweep-summary option: ${arg}`);
+        }
+    }
+    if (!evidenceDir)
+        throw new Error("runtime sweep-summary requires --evidence-dir");
+    if (!dryRunScenarios)
+        throw new Error("runtime sweep-summary requires --dry-run-scenarios");
+    if (!runtimeScenarios)
+        throw new Error("runtime sweep-summary requires --runtime-scenarios");
+    if (!scorecardSweep)
+        throw new Error("runtime sweep-summary requires --scorecard-sweep");
+    if (!publishedSmoke)
+        throw new Error("runtime sweep-summary requires --published-smoke");
+    return { evidenceDir, dryRunScenarios, runtimeScenarios, scorecardSweep, publishedSmoke, runtimeProofDir, now, strict };
+}
 function parsePositiveInteger(value, name, max) {
     const parsed = Number(value);
     if (!Number.isInteger(parsed) || parsed < 1 || (max !== undefined && parsed > max)) {

package/dist/packages/cli/src/openclaw-live-control-smoke.js

@@ -4,7 +4,6 @@ import { basename, dirname, join } from "node:path";
 const SCENARIO_ID = "openclaw-gateway-live-codex-v1-1";
 const ACCEPTED_LIVE_TURN_STATUSES = new Set(["accepted", "completed", "in_progress", "pending", "queued", "running"]);
 const DEFAULT_MESSAGE = "LCO OpenClaw gateway live-control smoke. Reply with exactly: LCO gateway live smoke acknowledged. Do not run commands, edit files, or use tools.";
-const REQUIRED_TOOLS = ["loo_codex_control_dry_run", "loo_codex_send_message", "loo_audit_tail"];
 const PRIVATE_DATA_EXCLUSIONS = [
     "raw OpenClaw gateway stdout/stderr",
     "raw tool output",
@@ -32,48 +31,42 @@ export function runOpenClawGatewayLiveControlSmoke(options) {
     ];
     const callOptions = { timeoutMs: gatewayTimeoutMs, env: options.token ? { OPENCLAW_GATEWAY_TOKEN: options.token } : undefined };
     const sessionKey = options.sessionKey || "agent:main:lco-live-control-smoke";
+    const action = normalizeAction(options.action);
+    const liveToolName = liveToolForAction(action);
+    const requiredTools = ["loo_codex_control_dry_run", liveToolName, "loo_audit_tail"];
     const message = options.message ?? DEFAULT_MESSAGE;
     const targetRef = `codex_thread:${options.threadId}`;
     const blockers = [];
     const catalog = callGatewayJson(openclawBin, baseArgs, gatewayOptions, "tools.catalog", {}, callOptions);
     const catalogTools = catalog.status === 0 && catalog.parsed !== undefined ? extractCatalogToolNames(unwrapGatewayPayload(catalog.parsed)) : [];
     blockers.push(...gatewayCallBlockers(catalog, "openclaw_live_catalog_failed"));
-    blockers.push(...REQUIRED_TOOLS.filter((tool) => !catalogTools.includes(tool)).map((tool) => `openclaw_live_catalog_missing_tool:${tool}`));
+    blockers.push(...requiredTools.filter((tool) => !catalogTools.includes(tool)).map((tool) => `openclaw_live_catalog_missing_tool:${tool}`));
     const dryRun = blockers.length === 0
         ? callGatewayJson(openclawBin, baseArgs, gatewayOptions, "tools.invoke", {
             name: "loo_codex_control_dry_run",
-            args: {
-                action: "send",
-                thread_id: options.threadId,
-                message
-            },
+            args: liveDryRunArgs(action, options.threadId, message),
             sessionKey,
             confirm: false,
-            idempotencyKey: `loo-live-smoke-dry-run-${options.threadId}`
+            idempotencyKey: `loo-live-smoke-dry-run-${action}-${options.threadId}`
         }, callOptions)
         : null;
     blockers.push(...(dryRun ? gatewayCallBlockers(dryRun, "openclaw_live_dry_run_failed") : []));
     const dryRunSummary = summarizeControl(dryRun);
-    if (dryRun && !validDryRun(dryRunSummary))
+    if (dryRun && !validDryRun(action, dryRunSummary))
         blockers.push("openclaw_live_dry_run_not_proven");
     const live = blockers.length === 0
         ? callGatewayJson(openclawBin, baseArgs, gatewayOptions, "tools.invoke", {
-            name: "loo_codex_send_message",
-            args: {
-                thread_id: options.threadId,
-                message,
-                dry_run: false,
-                approval_audit_id: dryRunSummary.approvalAuditId
-            },
+            name: liveToolName,
+            args: liveArgs(action, options.threadId, message, dryRunSummary.approvalAuditId),
             sessionKey,
             confirm: false,
-            idempotencyKey: `loo-live-smoke-send-${options.threadId}-${dryRunSummary.approvalAuditId}`
+            idempotencyKey: `loo-live-smoke-${action}-${options.threadId}-${dryRunSummary.approvalAuditId}`
         }, callOptions)
         : null;
-    blockers.push(...(live ? gatewayCallBlockers(live, "openclaw_live_send_failed") : []));
+    blockers.push(...(live ? gatewayCallBlockers(live, "openclaw_live_control_failed") : []));
     const liveSummary = summarizeControl(live);
-    if (live && !validLive(liveSummary))
-        blockers.push("openclaw_live_send_not_proven");
+    if (live && !validLive(action, liveSummary))
+        blockers.push(action === "resume" ? "openclaw_live_resume_not_proven" : "openclaw_live_send_not_proven");
     if (live && dryRunSummary.paramsHash && liveSummary.paramsHash && liveSummary.paramsHash !== dryRunSummary.paramsHash)
         blockers.push("openclaw_live_params_hash_mismatch");
     if (live && dryRunSummary.messageHash && liveSummary.messageHash && liveSummary.messageHash !== dryRunSummary.messageHash)
@@ -89,7 +82,7 @@ export function runOpenClawGatewayLiveControlSmoke(options) {
             args: { limit: 20 },
             sessionKey,
             confirm: false,
-            idempotencyKey: `loo-live-smoke-audit-tail-${options.threadId}`
+            idempotencyKey: `loo-live-smoke-audit-tail-${action}-${options.threadId}`
         }, callOptions)
         : null;
     blockers.push(...(auditTail ? gatewayCallBlockers(auditTail, "openclaw_live_audit_tail_failed") : []));
@@ -110,7 +103,8 @@ export function runOpenClawGatewayLiveControlSmoke(options) {
         publicSafe: true,
         generatedAt: options.now ?? new Date().toISOString(),
         command: `${sanitizeCommandBinary(openclawBin)} ${[...baseArgs, "gateway", "call", "tools.invoke", "--json", "--params", "<redacted>"].join(" ")}`,
-        requiredTools: REQUIRED_TOOLS,
+        action,
+        requiredTools,
         targetRef,
         dryRun: {
             approvalAuditId: dryRunSummary.approvalAuditId,
@@ -139,7 +133,7 @@ export function runOpenClawGatewayLiveControlSmoke(options) {
             rawTranscriptRead: false
         },
         privateDataExclusions: PRIVATE_DATA_EXCLUSIONS,
-        proofBoundary: "This proves one approved harmless live Codex send through the installed OpenClaw gateway path only; it does not prove unattended live control, broad gateway scope approval, GUI mutation, Claude parity, or bypassed Codex approvals.",
+        proofBoundary: "This proves one approved harmless live Codex send/resume through the installed OpenClaw gateway path only; it does not prove unattended live control, broad gateway scope approval, GUI mutation, Claude parity, or bypassed Codex approvals.",
         nextAction: uniqueBlockers.length === 0
             ? "Run the v1.1 runtime scenario sweep against this runtime-proof directory, then continue #159 post-action refresh proof."
             : "Resolve the listed gateway live-control blockers before claiming #158 runtime proof."
@@ -170,19 +164,52 @@ function runtimeProofForReport(report) {
         raw_prompt_chars: 0
     };
 }
-function validDryRun(summary) {
+function liveDryRunArgs(action, threadId, message) {
+    return action === "send"
+        ? {
+            action,
+            thread_id: threadId,
+            message
+        }
+        : {
+            action,
+            thread_id: threadId
+        };
+}
+function liveArgs(action, threadId, message, approvalAuditId) {
+    const common = {
+        thread_id: threadId,
+        dry_run: false,
+        approval_audit_id: approvalAuditId
+    };
+    return action === "send" ? { ...common, message } : common;
+}
+function liveToolForAction(action) {
+    return action === "send" ? "loo_codex_send_message" : "loo_codex_resume_thread";
+}
+function normalizeAction(action) {
+    if (action === undefined || action === "send")
+        return "send";
+    if (action === "resume")
+        return "resume";
+    throw new Error("action must be send or resume");
+}
+function validDryRun(action, summary) {
     return summary.live === false
         && safeAuditId(summary.approvalAuditId)
         && safeHash(summary.paramsHash)
-        && safeHash(summary.messageHash);
+        && (action !== "send" || safeHash(summary.messageHash));
 }
-function validLive(summary) {
+function validLive(action, summary) {
+    const actionAccepted = action === "resume"
+        ? summary.method === "thread/resume"
+        : liveTurnStatusProvesSendAccepted(summary.turnStatus);
     return summary.live === true
         && safeAuditId(summary.approvalAuditId)
         && safeHash(summary.paramsHash)
-        && safeHash(summary.messageHash)
+        && (action !== "send" || safeHash(summary.messageHash))
         && summary.responseOk === true
-        && liveTurnStatusProvesSendAccepted(summary.turnStatus);
+        && actionAccepted;
 }
 function liveTurnStatusProvesSendAccepted(value) {
     if (typeof value !== "string")