lossless-openclaw-orchestrator 1.1.3 → 1.1.4

package/README.md

@@ -14,7 +14,7 @@ safe action without rereading raw transcripts.
 [![License](https://img.shields.io/badge/license-PolyForm%20Noncommercial-blue)](LICENSE)
 [![PRs welcome](https://img.shields.io/badge/PRs-welcome-brightgreen)](CONTRIBUTING.md)
 
-[Setup](docs/SETUP.md) · [Contributing](CONTRIBUTING.md) · [Agent Instructions](AGENTS.md) · [Agent Skill](skills/lossless-openclaw-orchestrator/SKILL.md) · [OpenClaw Plugin](docs/OPENCLAW_PLUGIN.md) · [Security](SECURITY.md) · [Code of Conduct](CODE_OF_CONDUCT.md) · [Vision](VISION.md) · [Privacy](docs/PRIVACY.md) · [Claude Boundary](docs/CLAUDE_ADAPTER_BOUNDARY.md) · [Claim Audit](docs/CLAIM_AUDIT.md) · [Release Notes](docs/RELEASE_NOTES_1.1.3.md) · [1.0 Notes](docs/RELEASE_NOTES_1.0.0.md) · [License](LICENSE)
+[Setup](docs/SETUP.md) · [Contributing](CONTRIBUTING.md) · [Agent Instructions](AGENTS.md) · [Agent Skill](skills/lossless-openclaw-orchestrator/SKILL.md) · [OpenClaw Plugin](docs/OPENCLAW_PLUGIN.md) · [Security](SECURITY.md) · [Code of Conduct](CODE_OF_CONDUCT.md) · [Vision](VISION.md) · [Privacy](docs/PRIVACY.md) · [Claude Boundary](docs/CLAUDE_ADAPTER_BOUNDARY.md) · [Claim Audit](docs/CLAIM_AUDIT.md) · [Release Notes](docs/RELEASE_NOTES_1.1.4.md) · [1.0 Notes](docs/RELEASE_NOTES_1.0.0.md) · [License](LICENSE)
 
 ## Why It Matters
 

package/dist/packages/cli/src/index.js

@@ -780,7 +780,7 @@ function mainUsageText() {
         "  loo openclaw dogfood [--dev] [--profile name] [--install-source path] [--link] [--force-install] [--evidence-path path] [--strict]",
         "  loo openclaw tool-smoke [--openclaw-bin path] [--dev] [--profile name] [--gateway-url ws://127.0.0.1:port] [--token token] [--gateway-timeout-ms ms] [--session-key key] [--query text] [--thread-id id] [--expand-profile metadata|brief|evidence] [--token-budget n] [--required-tool name] [--evidence-path path] [--strict]",
         "  loo openclaw published-smoke --evidence-dir path --dogfood-report path --tool-smoke-report path [--configured-tool-smoke-report path] [--npm-install-diagnostic-report path] [--registry-version version] [--registry-beta-version version] [--root path] [--now iso] [--strict]",
-        "  loo openclaw live-control-smoke --evidence-dir path --thread-id id [--openclaw-bin path] [--dev] [--profile name] [--gateway-url ws://127.0.0.1:port] [--token token] [--gateway-timeout-ms ms] [--session-key key] [--message text] [--strict]",
+        "  loo openclaw live-control-smoke --evidence-dir path --thread-id id [--action send|resume] [--openclaw-bin path] [--dev] [--profile name] [--gateway-url ws://127.0.0.1:port] [--token token] [--gateway-timeout-ms ms] [--session-key key] [--message text] [--strict]",
         "  loo openclaw post-action-refresh-smoke --evidence-dir path --thread-id id --live-proof-report path [--openclaw-bin path] [--dev] [--profile name] [--gateway-url ws://127.0.0.1:port] [--token token] [--gateway-timeout-ms ms] [--session-key key] [--query text] [--expand-profile metadata|brief|evidence] [--token-budget n] [--strict]",
         "  loo scorecards sweep --evidence-dir path [--scorecard-dir path] [--claim-scope codex-live-control|codex-read-search-expand-dry-run|codex-working-app-proof] [--strict]",
         "  loo runtime sweep-summary --evidence-dir path --dry-run-scenarios path --runtime-scenarios path --scorecard-sweep path --published-smoke path [--runtime-proof-dir path] [--now iso] [--strict]",
@@ -1172,9 +1172,9 @@ function printLiveControlSmokeHelp() {
 function printOpenClawLiveControlSmokeHelp() {
     console.log([
         "Usage:",
-        "  loo openclaw live-control-smoke --evidence-dir path --thread-id id [--openclaw-bin path] [--dev] [--profile name] [--gateway-url ws://127.0.0.1:port] [--token token] [--gateway-timeout-ms ms] [--session-key key] [--message text] [--strict]",
+        "  loo openclaw live-control-smoke --evidence-dir path --thread-id id [--action send|resume] [--openclaw-bin path] [--dev] [--profile name] [--gateway-url ws://127.0.0.1:port] [--token token] [--gateway-timeout-ms ms] [--session-key key] [--message text] [--strict]",
         "",
-        "Runs one approval-gated live Codex send through the installed OpenClaw gateway tools.invoke path.",
+        "Runs one approval-gated live Codex send or resume through the installed OpenClaw gateway tools.invoke path.",
         "",
         "Outputs:",
         "  openclaw-gateway-live-codex-v1-1.runtime-proof.json",
@@ -1182,7 +1182,7 @@ function printOpenClawLiveControlSmokeHelp() {
         "",
         "Safety boundary:",
         "  The command requires an explicit --thread-id target.",
-        "  It invokes loo_codex_control_dry_run first, then uses the matching approval_audit_id for loo_codex_send_message with dry_run:false.",
+        "  It invokes loo_codex_control_dry_run first, then uses the matching approval_audit_id for the selected live tool with dry_run:false.",
         "  It reads loo_audit_tail to prove matching dry-run/live audit metadata.",
         "  Evidence contains refs, audit ids, hashes, tool names, and status only.",
         "  It does not write raw prompt text, raw transcript spans, screenshots, SQLite DBs, tokens, or credentials.",
@@ -1999,6 +1999,9 @@ function parseOpenClawLiveControlSmokeArgs(input) {
         else if (arg === "--thread-id") {
             parsed.threadId = requireOptionValue(input[++index], arg);
         }
+        else if (arg === "--action") {
+            parsed.action = parseOpenClawLiveControlAction(requireOptionValue(input[++index], arg));
+        }
         else if (arg === "--message") {
             parsed.message = requireOptionValue(input[++index], arg);
         }
@@ -2018,6 +2021,11 @@ function parseOpenClawLiveControlSmokeArgs(input) {
         throw new Error("openclaw live-control-smoke requires --thread-id");
     return parsed;
 }
+function parseOpenClawLiveControlAction(value) {
+    if (value === "send" || value === "resume")
+        return value;
+    throw new Error("--action must be send or resume");
+}
 function parseOpenClawPostActionRefreshSmokeArgs(input) {
     const parsed = {};
     for (let index = 0; index < input.length; index += 1) {

package/dist/packages/cli/src/openclaw-live-control-smoke.js

@@ -4,7 +4,6 @@ import { basename, dirname, join } from "node:path";
 const SCENARIO_ID = "openclaw-gateway-live-codex-v1-1";
 const ACCEPTED_LIVE_TURN_STATUSES = new Set(["accepted", "completed", "in_progress", "pending", "queued", "running"]);
 const DEFAULT_MESSAGE = "LCO OpenClaw gateway live-control smoke. Reply with exactly: LCO gateway live smoke acknowledged. Do not run commands, edit files, or use tools.";
-const REQUIRED_TOOLS = ["loo_codex_control_dry_run", "loo_codex_send_message", "loo_audit_tail"];
 const PRIVATE_DATA_EXCLUSIONS = [
     "raw OpenClaw gateway stdout/stderr",
     "raw tool output",
@@ -32,48 +31,42 @@ export function runOpenClawGatewayLiveControlSmoke(options) {
     ];
     const callOptions = { timeoutMs: gatewayTimeoutMs, env: options.token ? { OPENCLAW_GATEWAY_TOKEN: options.token } : undefined };
     const sessionKey = options.sessionKey || "agent:main:lco-live-control-smoke";
+    const action = normalizeAction(options.action);
+    const liveToolName = liveToolForAction(action);
+    const requiredTools = ["loo_codex_control_dry_run", liveToolName, "loo_audit_tail"];
     const message = options.message ?? DEFAULT_MESSAGE;
     const targetRef = `codex_thread:${options.threadId}`;
     const blockers = [];
     const catalog = callGatewayJson(openclawBin, baseArgs, gatewayOptions, "tools.catalog", {}, callOptions);
     const catalogTools = catalog.status === 0 && catalog.parsed !== undefined ? extractCatalogToolNames(unwrapGatewayPayload(catalog.parsed)) : [];
     blockers.push(...gatewayCallBlockers(catalog, "openclaw_live_catalog_failed"));
-    blockers.push(...REQUIRED_TOOLS.filter((tool) => !catalogTools.includes(tool)).map((tool) => `openclaw_live_catalog_missing_tool:${tool}`));
+    blockers.push(...requiredTools.filter((tool) => !catalogTools.includes(tool)).map((tool) => `openclaw_live_catalog_missing_tool:${tool}`));
     const dryRun = blockers.length === 0
         ? callGatewayJson(openclawBin, baseArgs, gatewayOptions, "tools.invoke", {
             name: "loo_codex_control_dry_run",
-            args: {
-                action: "send",
-                thread_id: options.threadId,
-                message
-            },
+            args: liveDryRunArgs(action, options.threadId, message),
             sessionKey,
             confirm: false,
-            idempotencyKey: `loo-live-smoke-dry-run-${options.threadId}`
+            idempotencyKey: `loo-live-smoke-dry-run-${action}-${options.threadId}`
         }, callOptions)
         : null;
     blockers.push(...(dryRun ? gatewayCallBlockers(dryRun, "openclaw_live_dry_run_failed") : []));
     const dryRunSummary = summarizeControl(dryRun);
-    if (dryRun && !validDryRun(dryRunSummary))
+    if (dryRun && !validDryRun(action, dryRunSummary))
         blockers.push("openclaw_live_dry_run_not_proven");
     const live = blockers.length === 0
         ? callGatewayJson(openclawBin, baseArgs, gatewayOptions, "tools.invoke", {
-            name: "loo_codex_send_message",
-            args: {
-                thread_id: options.threadId,
-                message,
-                dry_run: false,
-                approval_audit_id: dryRunSummary.approvalAuditId
-            },
+            name: liveToolName,
+            args: liveArgs(action, options.threadId, message, dryRunSummary.approvalAuditId),
             sessionKey,
             confirm: false,
-            idempotencyKey: `loo-live-smoke-send-${options.threadId}-${dryRunSummary.approvalAuditId}`
+            idempotencyKey: `loo-live-smoke-${action}-${options.threadId}-${dryRunSummary.approvalAuditId}`
         }, callOptions)
         : null;
-    blockers.push(...(live ? gatewayCallBlockers(live, "openclaw_live_send_failed") : []));
+    blockers.push(...(live ? gatewayCallBlockers(live, "openclaw_live_control_failed") : []));
     const liveSummary = summarizeControl(live);
-    if (live && !validLive(liveSummary))
-        blockers.push("openclaw_live_send_not_proven");
+    if (live && !validLive(action, liveSummary))
+        blockers.push(action === "resume" ? "openclaw_live_resume_not_proven" : "openclaw_live_send_not_proven");
     if (live && dryRunSummary.paramsHash && liveSummary.paramsHash && liveSummary.paramsHash !== dryRunSummary.paramsHash)
         blockers.push("openclaw_live_params_hash_mismatch");
     if (live && dryRunSummary.messageHash && liveSummary.messageHash && liveSummary.messageHash !== dryRunSummary.messageHash)
@@ -89,7 +82,7 @@ export function runOpenClawGatewayLiveControlSmoke(options) {
             args: { limit: 20 },
             sessionKey,
             confirm: false,
-            idempotencyKey: `loo-live-smoke-audit-tail-${options.threadId}`
+            idempotencyKey: `loo-live-smoke-audit-tail-${action}-${options.threadId}`
         }, callOptions)
         : null;
     blockers.push(...(auditTail ? gatewayCallBlockers(auditTail, "openclaw_live_audit_tail_failed") : []));
@@ -110,7 +103,8 @@ export function runOpenClawGatewayLiveControlSmoke(options) {
         publicSafe: true,
         generatedAt: options.now ?? new Date().toISOString(),
         command: `${sanitizeCommandBinary(openclawBin)} ${[...baseArgs, "gateway", "call", "tools.invoke", "--json", "--params", "<redacted>"].join(" ")}`,
-        requiredTools: REQUIRED_TOOLS,
+        action,
+        requiredTools,
         targetRef,
         dryRun: {
             approvalAuditId: dryRunSummary.approvalAuditId,
@@ -139,7 +133,7 @@ export function runOpenClawGatewayLiveControlSmoke(options) {
             rawTranscriptRead: false
         },
         privateDataExclusions: PRIVATE_DATA_EXCLUSIONS,
-        proofBoundary: "This proves one approved harmless live Codex send through the installed OpenClaw gateway path only; it does not prove unattended live control, broad gateway scope approval, GUI mutation, Claude parity, or bypassed Codex approvals.",
+        proofBoundary: "This proves one approved harmless live Codex send/resume through the installed OpenClaw gateway path only; it does not prove unattended live control, broad gateway scope approval, GUI mutation, Claude parity, or bypassed Codex approvals.",
         nextAction: uniqueBlockers.length === 0
             ? "Run the v1.1 runtime scenario sweep against this runtime-proof directory, then continue #159 post-action refresh proof."
             : "Resolve the listed gateway live-control blockers before claiming #158 runtime proof."
@@ -170,19 +164,52 @@ function runtimeProofForReport(report) {
         raw_prompt_chars: 0
     };
 }
-function validDryRun(summary) {
+function liveDryRunArgs(action, threadId, message) {
+    return action === "send"
+        ? {
+            action,
+            thread_id: threadId,
+            message
+        }
+        : {
+            action,
+            thread_id: threadId
+        };
+}
+function liveArgs(action, threadId, message, approvalAuditId) {
+    const common = {
+        thread_id: threadId,
+        dry_run: false,
+        approval_audit_id: approvalAuditId
+    };
+    return action === "send" ? { ...common, message } : common;
+}
+function liveToolForAction(action) {
+    return action === "send" ? "loo_codex_send_message" : "loo_codex_resume_thread";
+}
+function normalizeAction(action) {
+    if (action === undefined || action === "send")
+        return "send";
+    if (action === "resume")
+        return "resume";
+    throw new Error("action must be send or resume");
+}
+function validDryRun(action, summary) {
     return summary.live === false
         && safeAuditId(summary.approvalAuditId)
         && safeHash(summary.paramsHash)
-        && safeHash(summary.messageHash);
+        && (action !== "send" || safeHash(summary.messageHash));
 }
-function validLive(summary) {
+function validLive(action, summary) {
+    const actionAccepted = action === "resume"
+        ? summary.method === "thread/resume"
+        : liveTurnStatusProvesSendAccepted(summary.turnStatus);
     return summary.live === true
         && safeAuditId(summary.approvalAuditId)
         && safeHash(summary.paramsHash)
-        && safeHash(summary.messageHash)
+        && (action !== "send" || safeHash(summary.messageHash))
         && summary.responseOk === true
-        && liveTurnStatusProvesSendAccepted(summary.turnStatus);
+        && actionAccepted;
 }
 function liveTurnStatusProvesSendAccepted(value) {
     if (typeof value !== "string")

package/dist/packages/cli/src/scenario-sweep.js

@@ -228,6 +228,7 @@ function readRuntimeScenario(scenario, file, evidenceDir, runtimeProofDir) {
     const fallbackId = safeEvidenceStem(basename(file, ".json")) || "scenario";
     const id = isSafeScenarioId(requestedId) ? requestedId : fallbackId;
     const requiredTools = stringArray(scenario.required_tools);
+    const allowedTools = stringArray(scenario.allowed_tools);
     const forbiddenBehaviors = stringArray(scenario.forbidden_behaviors);
     const expectedPublicSafeEvidence = stringArray(scenario.expected_public_safe_evidence);
     const privateDataExclusions = stringArray(scenario.private_data_exclusions).length
@@ -270,7 +271,7 @@ function readRuntimeScenario(scenario, file, evidenceDir, runtimeProofDir) {
         surface: stringValue(scenario.surface) || "unknown",
         status: contractBlockers.length > 0 ? "invalid" : proof.blockers.length > 0 ? "runtime_proof_required" : "runtime_proof_ready",
         evidencePath: join(evidenceDir, `${id}.json`),
-        allowedTools: requiredTools,
+        allowedTools: allowedTools.length > 0 ? allowedTools : requiredTools,
         forbiddenBehaviors,
         expectedPublicSafeEvidence,
         privateDataExclusions,

package/docs/RELEASE_NOTES_1.1.4.md

@@ -0,0 +1,112 @@
+# Release Notes 1.1.4
+
+`1.1.4` is a stable patch release for the Codex-first collaboration cockpit and
+OpenClaw gateway lane.
+
+It keeps the `1.1.3` stable claim scope and adds the approved live-resume
+gateway proof from #383 / #402. The release proves one harmless approved
+`thread/resume` path through the installed OpenClaw gateway plus post-action
+safe refresh/reasoning evidence.
+
+## What Changed
+
+- Added `--action send|resume` to the OpenClaw live-control smoke command so
+  release/runtime proof can validate either a message send or a no-message
+  Codex resume action through the same gateway surface.
+- `loo openclaw live-control-smoke --action resume` now requires
+  `loo_codex_control_dry_run`, `loo_codex_resume_thread`, and `loo_audit_tail`
+  instead of the send-only live tool.
+- Resume proof accepts the Codex app-server `thread/resume` response shape when
+  `ok: true` and `method: "thread/resume"` are present, even when there is no
+  turn-status payload.
+- Resume proof fails closed when the live response is not ok, reports the wrong
+  method, or cannot be matched back to the dry-run approval audit record.
+- Runtime action parsing now rejects malformed action values instead of
+  silently falling back to the higher-side-effect send path.
+- The `openclaw-gateway-live-codex-v1-1` runtime scenario now keeps only the
+  common dry-run/audit tools in `required_tools` and lists `loo_codex_send_message`
+  and `loo_codex_resume_thread` as allowed alternatives, so scenario consumers
+  do not try to perform two live actions while the contract caps live actions at
+  one.
+- Scenario sweep output preserves `allowed_tools` separately from the required
+  dry-run tool sequence for runtime-required scenarios.
+- Regression tests cover the send path, resume happy path, status-less resume
+  success, resume negative paths, malformed actions, and scenario-contract
+  alternate live actions.
+- Carries forward the #160 desktop proof-action release boundary:
+  `loo_desktop_proof_action` / `loo desktop proof-action` validates the
+  action-bound CUA Driver TextEdit scratch proof gate and does not prove
+  generic GUI mutation. The proof action still requires exact backend, target
+  app, target window, action hash, approval ref, permission state, scratch file
+  path, and `execute: true` before the backend can run. Generic gateway
+  invocation without exact proof args fails closed, using the same proof
+  boundary as beta.35.
+  Exact gate phrase: exact backend, target app, target window, action hash, approval ref, permission state, scratch file path, and `execute: true`.
+  Exact fail-closed phrase: generic gateway invocation without exact proof args fails closed.
+  The desktop proof action keeps the same proof boundary as beta.35.
+- Carries forward strict OpenClaw gateway result handling:
+  plugin output with `output.details.ok: false` is reported as
+  `openclaw_tool_result_not_ok:<tool>` rather than successful tool proof.
+
+## Stable Claim Scope
+
+Allowed stable claim:
+
+> Codex-first local orchestration through OpenClaw for local Codex sessions,
+> including local indexing, search, describe, bounded expansion, dry-run control
+> envelopes, read-only collaboration cockpit/autonomy cards, read-only Desktop
+> visibility and fallback status, action-bound proof-packet validation,
+> public-safe scorecards, runtime proof handoff packets, runtime sweep
+> summaries, installed OpenClaw gateway dogfood, and one approved harmless live
+> Codex resume proof through the installed OpenClaw gateway.
+
+This release still does not claim generic GUI mutation, Codex GUI mutation,
+unattended control, Claude Code parity, P1 business-adapter parity, cloud sync,
+or enterprise/customer-ready security.
+
+## Release Gate Notes
+
+- Stable issue: #403.
+- Included implementation issue: #383.
+- Included implementation PR: #402.
+- Parent product tracker: #309.
+- Operating-loop tracker: #16.
+- Baseline stable release: `v1.1.3`.
+- Candidate package: `lossless-openclaw-orchestrator@1.1.4`.
+- Expected git tag: `v1.1.4`.
+- Expected GitHub Release:
+  `https://github.com/100yenadmin/Lossless-Codex-Orchestrator-LCO/releases/tag/v1.1.4`.
+- Required pre-publish stable gates: `npm run check`, `npm pack --dry-run`,
+  strict runtime-required scenario sweep for `openclaw-gateway-live-codex-v1-1`
+  and `post-action-refresh-reasoning-v1-1`, strict scorecard sweep, release
+  preflight, release bundle, release demo-status, release status, OpenClaw
+  dogfood, and OpenClaw tool-smoke for the exact stable candidate SHA.
+- Required PR gates: GitHub CI, CodeQL, current-head review threads clear, and
+  any actionable review feedback fixed before merge.
+- Required post-publish stable gates: npm `latest` view, git tag, GitHub
+  non-prerelease Release, `loo release finalization-status --expected-dist-tag
+  latest --expected-github-prerelease false --strict`, fresh npm `@latest`
+  published-smoke, and strict general-readiness before #403 closes.
+- Working-app status example:
+  `loo release status --claim-scope codex-working-app-proof --runtime-proof-dir <path> --approved-live-control-evidence <path> --npm-publish-approval-evidence <path> --github-release-approval-evidence <path> --candidate-sha <sha> --github-ci-evidence <path> --codeql-evidence <path> --evidence-dir <path> --strict`
+- Reduced-scope status example:
+  `loo release status --claim-scope codex-read-search-expand-dry-run --npm-publish-approval-evidence <path> --github-release-approval-evidence <path> --candidate-sha <sha> --github-ci-evidence <path> --codeql-evidence <path> --evidence-dir <path> --strict`
+- Post-publish finalization example:
+  `loo release finalization-status --evidence-dir <path> --candidate-sha <sha> --npm-publish-evidence <path> --git-tag-evidence <path> --github-release-evidence <path> --expected-dist-tag latest --expected-github-prerelease false --strict`
+- `approved_live_control_smoke_missing` remains the expected blocker when a
+  working-app claim is attempted without approved live-control smoke evidence
+  for the exact candidate SHA.
+
+## Explicit Non-Claims
+
+No new live Codex control smoke is run by this release.
+It does not run generic GUI mutation and does not run Codex GUI mutation.
+No screenshot workflow.
+No prompt typing. No clicking. No arbitrary app control.
+No unattended desktop takeover.
+No automatic gateway authorization and no broad gateway scope approval.
+Claude Code remains an adapter stub, not adapter equivalence.
+No Notion, support-control, Stripe, or Company Brain P1 adapter proof.
+No cloud sync.
+Bundle/status/finalization checks do not publish to npm and do not create a GitHub Release.
+No release-grade enterprise security or customer-ready security claim.

package/evals/scenarios/v1.1/openclaw-gateway-live-codex.json

@@ -9,16 +9,16 @@
   "surface": "installed-openclaw-gateway",
   "required_tools": [
     "loo_codex_control_dry_run",
-    "loo_codex_send_message",
     "loo_audit_tail"
   ],
   "allowed_tools": [
     "loo_codex_control_dry_run",
     "loo_codex_send_message",
+    "loo_codex_resume_thread",
     "loo_audit_tail"
   ],
   "allowed_live_behaviors": [
-    "one approved harmless Codex turn on a selected or disposable target thread"
+    "one approved harmless Codex send or resume on a selected or disposable target thread"
   ],
   "forbidden_behaviors": [
     "unauthorized_live_control",
@@ -40,9 +40,9 @@
     "action type",
     "approval audit id prefix",
     "params hash",
-    "message hash",
-    "Codex notification count and types",
-    "completion status",
+    "message hash when the live action sends a message",
+    "Codex notification count and types when available",
+    "completion status or response ok marker",
     "rawPromptIncluded false"
   ],
   "metrics": {

package/openclaw.plugin.json

@@ -2,7 +2,7 @@
   "id": "lossless-openclaw-orchestrator",
   "name": "Lossless OpenClaw Orchestrator",
   "description": "Control and collaborate with local Codex sessions through OpenClaw using local indexing, bounded recall, and approval-gated controls.",
-  "version": "1.1.3",
+  "version": "1.1.4",
   "kind": "tool",
   "tools": {
     "prefix": "loo_"

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "lossless-openclaw-orchestrator",
-  "version": "1.1.3",
+  "version": "1.1.4",
   "description": "Index, search, and control local Codex sessions through OpenClaw with approval-gated safety; Claude Code remains an experimental adapter stub.",
   "type": "module",
   "license": "PolyForm-Noncommercial-1.0.0",

package/packages/cli/src/index.ts

@@ -44,7 +44,7 @@ import { createGeneralReleaseReadiness } from "./general-release-readiness.js";
 import { runOpenClawDogfood } from "./openclaw-dogfood.js";
 import { DEFAULT_REQUIRED_TOOL_CALLS, runOpenClawToolSmoke } from "./openclaw-tool-smoke.js";
 import { createPublishedPackageSmokeReport } from "./published-package-smoke.js";
-import { runOpenClawGatewayLiveControlSmoke } from "./openclaw-live-control-smoke.js";
+import { runOpenClawGatewayLiveControlSmoke, type OpenClawGatewayLiveControlAction } from "./openclaw-live-control-smoke.js";
 import { runOpenClawPostActionRefreshSmoke } from "./openclaw-post-action-refresh-smoke.js";
 import { createScorecardSweep } from "./scorecard-sweep.js";
 import { createScenarioSweep } from "./scenario-sweep.js";
@@ -803,7 +803,7 @@ function mainUsageText(): string {
     "  loo openclaw dogfood [--dev] [--profile name] [--install-source path] [--link] [--force-install] [--evidence-path path] [--strict]",
     "  loo openclaw tool-smoke [--openclaw-bin path] [--dev] [--profile name] [--gateway-url ws://127.0.0.1:port] [--token token] [--gateway-timeout-ms ms] [--session-key key] [--query text] [--thread-id id] [--expand-profile metadata|brief|evidence] [--token-budget n] [--required-tool name] [--evidence-path path] [--strict]",
     "  loo openclaw published-smoke --evidence-dir path --dogfood-report path --tool-smoke-report path [--configured-tool-smoke-report path] [--npm-install-diagnostic-report path] [--registry-version version] [--registry-beta-version version] [--root path] [--now iso] [--strict]",
-    "  loo openclaw live-control-smoke --evidence-dir path --thread-id id [--openclaw-bin path] [--dev] [--profile name] [--gateway-url ws://127.0.0.1:port] [--token token] [--gateway-timeout-ms ms] [--session-key key] [--message text] [--strict]",
+    "  loo openclaw live-control-smoke --evidence-dir path --thread-id id [--action send|resume] [--openclaw-bin path] [--dev] [--profile name] [--gateway-url ws://127.0.0.1:port] [--token token] [--gateway-timeout-ms ms] [--session-key key] [--message text] [--strict]",
     "  loo openclaw post-action-refresh-smoke --evidence-dir path --thread-id id --live-proof-report path [--openclaw-bin path] [--dev] [--profile name] [--gateway-url ws://127.0.0.1:port] [--token token] [--gateway-timeout-ms ms] [--session-key key] [--query text] [--expand-profile metadata|brief|evidence] [--token-budget n] [--strict]",
     "  loo scorecards sweep --evidence-dir path [--scorecard-dir path] [--claim-scope codex-live-control|codex-read-search-expand-dry-run|codex-working-app-proof] [--strict]",
     "  loo runtime sweep-summary --evidence-dir path --dry-run-scenarios path --runtime-scenarios path --scorecard-sweep path --published-smoke path [--runtime-proof-dir path] [--now iso] [--strict]",
@@ -1212,9 +1212,9 @@ function printLiveControlSmokeHelp(): void {
 function printOpenClawLiveControlSmokeHelp(): void {
   console.log([
     "Usage:",
-    "  loo openclaw live-control-smoke --evidence-dir path --thread-id id [--openclaw-bin path] [--dev] [--profile name] [--gateway-url ws://127.0.0.1:port] [--token token] [--gateway-timeout-ms ms] [--session-key key] [--message text] [--strict]",
+    "  loo openclaw live-control-smoke --evidence-dir path --thread-id id [--action send|resume] [--openclaw-bin path] [--dev] [--profile name] [--gateway-url ws://127.0.0.1:port] [--token token] [--gateway-timeout-ms ms] [--session-key key] [--message text] [--strict]",
     "",
-    "Runs one approval-gated live Codex send through the installed OpenClaw gateway tools.invoke path.",
+    "Runs one approval-gated live Codex send or resume through the installed OpenClaw gateway tools.invoke path.",
     "",
     "Outputs:",
     "  openclaw-gateway-live-codex-v1-1.runtime-proof.json",
@@ -1222,7 +1222,7 @@ function printOpenClawLiveControlSmokeHelp(): void {
     "",
     "Safety boundary:",
     "  The command requires an explicit --thread-id target.",
-    "  It invokes loo_codex_control_dry_run first, then uses the matching approval_audit_id for loo_codex_send_message with dry_run:false.",
+    "  It invokes loo_codex_control_dry_run first, then uses the matching approval_audit_id for the selected live tool with dry_run:false.",
     "  It reads loo_audit_tail to prove matching dry-run/live audit metadata.",
     "  Evidence contains refs, audit ids, hashes, tool names, and status only.",
     "  It does not write raw prompt text, raw transcript spans, screenshots, SQLite DBs, tokens, or credentials.",
@@ -2026,6 +2026,7 @@ function parseOpenClawLiveControlSmokeArgs(input: string[]): {
   token?: string;
   sessionKey?: string;
   threadId: string;
+  action?: OpenClawGatewayLiveControlAction;
   message?: string;
   evidenceDir: string;
   gatewayTimeoutMs?: number;
@@ -2050,6 +2051,8 @@ function parseOpenClawLiveControlSmokeArgs(input: string[]): {
       parsed.sessionKey = requireOptionValue(input[++index], arg);
     } else if (arg === "--thread-id") {
       parsed.threadId = requireOptionValue(input[++index], arg);
+    } else if (arg === "--action") {
+      parsed.action = parseOpenClawLiveControlAction(requireOptionValue(input[++index], arg));
     } else if (arg === "--message") {
       parsed.message = requireOptionValue(input[++index], arg);
     } else if (arg === "--evidence-dir") {
@@ -2065,6 +2068,11 @@ function parseOpenClawLiveControlSmokeArgs(input: string[]): {
   return parsed as ReturnType<typeof parseOpenClawLiveControlSmokeArgs>;
 }
 
+function parseOpenClawLiveControlAction(value: string): OpenClawGatewayLiveControlAction {
+  if (value === "send" || value === "resume") return value;
+  throw new Error("--action must be send or resume");
+}
+
 function parseOpenClawPostActionRefreshSmokeArgs(input: string[]): {
   openclawBin?: string;
   dev?: boolean;

package/packages/cli/src/openclaw-live-control-smoke.ts

@@ -10,18 +10,22 @@ export type OpenClawGatewayLiveControlSmokeOptions = {
   token?: string;
   sessionKey?: string;
   threadId: string;
+  action?: OpenClawGatewayLiveControlAction;
   message?: string;
   evidenceDir: string;
   gatewayTimeoutMs?: number;
   now?: string;
 };
 
+export type OpenClawGatewayLiveControlAction = "send" | "resume";
+
 export type OpenClawGatewayLiveControlSmokeReport = {
   ok: boolean;
   proofReady: boolean;
   publicSafe: boolean;
   generatedAt: string;
   command: string;
+  action: OpenClawGatewayLiveControlAction;
   requiredTools: string[];
   targetRef: string;
   dryRun: {
@@ -84,7 +88,6 @@ type ControlSummary = {
 const SCENARIO_ID = "openclaw-gateway-live-codex-v1-1";
 const ACCEPTED_LIVE_TURN_STATUSES = new Set(["accepted", "completed", "in_progress", "pending", "queued", "running"]);
 const DEFAULT_MESSAGE = "LCO OpenClaw gateway live-control smoke. Reply with exactly: LCO gateway live smoke acknowledged. Do not run commands, edit files, or use tools.";
-const REQUIRED_TOOLS = ["loo_codex_control_dry_run", "loo_codex_send_message", "loo_audit_tail"];
 const PRIVATE_DATA_EXCLUSIONS = [
   "raw OpenClaw gateway stdout/stderr",
   "raw tool output",
@@ -113,6 +116,9 @@ export function runOpenClawGatewayLiveControlSmoke(options: OpenClawGatewayLiveC
   ];
   const callOptions = { timeoutMs: gatewayTimeoutMs, env: options.token ? { OPENCLAW_GATEWAY_TOKEN: options.token } : undefined };
   const sessionKey = options.sessionKey || "agent:main:lco-live-control-smoke";
+  const action = normalizeAction(options.action);
+  const liveToolName = liveToolForAction(action);
+  const requiredTools = ["loo_codex_control_dry_run", liveToolName, "loo_audit_tail"];
   const message = options.message ?? DEFAULT_MESSAGE;
   const targetRef = `codex_thread:${options.threadId}`;
   const blockers: string[] = [];
@@ -120,42 +126,33 @@ export function runOpenClawGatewayLiveControlSmoke(options: OpenClawGatewayLiveC
   const catalog = callGatewayJson(openclawBin, baseArgs, gatewayOptions, "tools.catalog", {}, callOptions);
   const catalogTools = catalog.status === 0 && catalog.parsed !== undefined ? extractCatalogToolNames(unwrapGatewayPayload(catalog.parsed)) : [];
   blockers.push(...gatewayCallBlockers(catalog, "openclaw_live_catalog_failed"));
-  blockers.push(...REQUIRED_TOOLS.filter((tool) => !catalogTools.includes(tool)).map((tool) => `openclaw_live_catalog_missing_tool:${tool}`));
+  blockers.push(...requiredTools.filter((tool) => !catalogTools.includes(tool)).map((tool) => `openclaw_live_catalog_missing_tool:${tool}`));
 
   const dryRun = blockers.length === 0
     ? callGatewayJson(openclawBin, baseArgs, gatewayOptions, "tools.invoke", {
       name: "loo_codex_control_dry_run",
-      args: {
-        action: "send",
-        thread_id: options.threadId,
-        message
-      },
+      args: liveDryRunArgs(action, options.threadId, message),
       sessionKey,
       confirm: false,
-      idempotencyKey: `loo-live-smoke-dry-run-${options.threadId}`
+      idempotencyKey: `loo-live-smoke-dry-run-${action}-${options.threadId}`
     }, callOptions)
     : null;
   blockers.push(...(dryRun ? gatewayCallBlockers(dryRun, "openclaw_live_dry_run_failed") : []));
   const dryRunSummary = summarizeControl(dryRun);
-  if (dryRun && !validDryRun(dryRunSummary)) blockers.push("openclaw_live_dry_run_not_proven");
+  if (dryRun && !validDryRun(action, dryRunSummary)) blockers.push("openclaw_live_dry_run_not_proven");
 
   const live = blockers.length === 0
     ? callGatewayJson(openclawBin, baseArgs, gatewayOptions, "tools.invoke", {
-      name: "loo_codex_send_message",
-      args: {
-        thread_id: options.threadId,
-        message,
-        dry_run: false,
-        approval_audit_id: dryRunSummary.approvalAuditId
-      },
+      name: liveToolName,
+      args: liveArgs(action, options.threadId, message, dryRunSummary.approvalAuditId),
       sessionKey,
       confirm: false,
-      idempotencyKey: `loo-live-smoke-send-${options.threadId}-${dryRunSummary.approvalAuditId}`
+      idempotencyKey: `loo-live-smoke-${action}-${options.threadId}-${dryRunSummary.approvalAuditId}`
     }, callOptions)
     : null;
-  blockers.push(...(live ? gatewayCallBlockers(live, "openclaw_live_send_failed") : []));
+  blockers.push(...(live ? gatewayCallBlockers(live, "openclaw_live_control_failed") : []));
   const liveSummary = summarizeControl(live);
-  if (live && !validLive(liveSummary)) blockers.push("openclaw_live_send_not_proven");
+  if (live && !validLive(action, liveSummary)) blockers.push(action === "resume" ? "openclaw_live_resume_not_proven" : "openclaw_live_send_not_proven");
   if (live && dryRunSummary.paramsHash && liveSummary.paramsHash && liveSummary.paramsHash !== dryRunSummary.paramsHash) blockers.push("openclaw_live_params_hash_mismatch");
   if (live && dryRunSummary.messageHash && liveSummary.messageHash && liveSummary.messageHash !== dryRunSummary.messageHash) blockers.push("openclaw_live_message_hash_mismatch");
   const approvalAuditIdUsed = live ? dryRunSummary.approvalAuditId : null;
@@ -172,7 +169,7 @@ export function runOpenClawGatewayLiveControlSmoke(options: OpenClawGatewayLiveC
       args: { limit: 20 },
       sessionKey,
       confirm: false,
-      idempotencyKey: `loo-live-smoke-audit-tail-${options.threadId}`
+      idempotencyKey: `loo-live-smoke-audit-tail-${action}-${options.threadId}`
     }, callOptions)
     : null;
   blockers.push(...(auditTail ? gatewayCallBlockers(auditTail, "openclaw_live_audit_tail_failed") : []));
@@ -196,7 +193,8 @@ export function runOpenClawGatewayLiveControlSmoke(options: OpenClawGatewayLiveC
     publicSafe: true,
     generatedAt: options.now ?? new Date().toISOString(),
     command: `${sanitizeCommandBinary(openclawBin)} ${[...baseArgs, "gateway", "call", "tools.invoke", "--json", "--params", "<redacted>"].join(" ")}`,
-    requiredTools: REQUIRED_TOOLS,
+    action,
+    requiredTools,
     targetRef,
     dryRun: {
       approvalAuditId: dryRunSummary.approvalAuditId,
@@ -225,7 +223,7 @@ export function runOpenClawGatewayLiveControlSmoke(options: OpenClawGatewayLiveC
       rawTranscriptRead: false
     },
     privateDataExclusions: PRIVATE_DATA_EXCLUSIONS,
-    proofBoundary: "This proves one approved harmless live Codex send through the installed OpenClaw gateway path only; it does not prove unattended live control, broad gateway scope approval, GUI mutation, Claude parity, or bypassed Codex approvals.",
+    proofBoundary: "This proves one approved harmless live Codex send/resume through the installed OpenClaw gateway path only; it does not prove unattended live control, broad gateway scope approval, GUI mutation, Claude parity, or bypassed Codex approvals.",
     nextAction: uniqueBlockers.length === 0
       ? "Run the v1.1 runtime scenario sweep against this runtime-proof directory, then continue #159 post-action refresh proof."
       : "Resolve the listed gateway live-control blockers before claiming #158 runtime proof."
@@ -259,20 +257,55 @@ function runtimeProofForReport(report: OpenClawGatewayLiveControlSmokeReport): R
   };
 }
 
-function validDryRun(summary: ControlSummary): boolean {
+function liveDryRunArgs(action: OpenClawGatewayLiveControlAction, threadId: string, message: string): Record<string, unknown> {
+  return action === "send"
+    ? {
+        action,
+        thread_id: threadId,
+        message
+      }
+    : {
+        action,
+        thread_id: threadId
+      };
+}
+
+function liveArgs(action: OpenClawGatewayLiveControlAction, threadId: string, message: string, approvalAuditId: string | null): Record<string, unknown> {
+  const common = {
+    thread_id: threadId,
+    dry_run: false,
+    approval_audit_id: approvalAuditId
+  };
+  return action === "send" ? { ...common, message } : common;
+}
+
+function liveToolForAction(action: OpenClawGatewayLiveControlAction): string {
+  return action === "send" ? "loo_codex_send_message" : "loo_codex_resume_thread";
+}
+
+function normalizeAction(action: unknown): OpenClawGatewayLiveControlAction {
+  if (action === undefined || action === "send") return "send";
+  if (action === "resume") return "resume";
+  throw new Error("action must be send or resume");
+}
+
+function validDryRun(action: OpenClawGatewayLiveControlAction, summary: ControlSummary): boolean {
   return summary.live === false
     && safeAuditId(summary.approvalAuditId)
     && safeHash(summary.paramsHash)
-    && safeHash(summary.messageHash);
+    && (action !== "send" || safeHash(summary.messageHash));
 }
 
-function validLive(summary: ControlSummary): boolean {
+function validLive(action: OpenClawGatewayLiveControlAction, summary: ControlSummary): boolean {
+  const actionAccepted = action === "resume"
+    ? summary.method === "thread/resume"
+    : liveTurnStatusProvesSendAccepted(summary.turnStatus);
   return summary.live === true
     && safeAuditId(summary.approvalAuditId)
     && safeHash(summary.paramsHash)
-    && safeHash(summary.messageHash)
+    && (action !== "send" || safeHash(summary.messageHash))
     && summary.responseOk === true
-    && liveTurnStatusProvesSendAccepted(summary.turnStatus);
+    && actionAccepted;
 }
 
 function liveTurnStatusProvesSendAccepted(value: string | null): boolean {

package/packages/cli/src/scenario-sweep.ts

@@ -351,6 +351,7 @@ function readRuntimeScenario(scenario: ScenarioJson, file: string, evidenceDir:
   const fallbackId = safeEvidenceStem(basename(file, ".json")) || "scenario";
   const id = isSafeScenarioId(requestedId) ? requestedId : fallbackId;
   const requiredTools = stringArray(scenario.required_tools);
+  const allowedTools = stringArray(scenario.allowed_tools);
   const forbiddenBehaviors = stringArray(scenario.forbidden_behaviors);
   const expectedPublicSafeEvidence = stringArray(scenario.expected_public_safe_evidence);
   const privateDataExclusions = stringArray(scenario.private_data_exclusions).length
@@ -393,7 +394,7 @@ function readRuntimeScenario(scenario: ScenarioJson, file: string, evidenceDir:
     surface: stringValue(scenario.surface) || "unknown",
     status: contractBlockers.length > 0 ? "invalid" : proof.blockers.length > 0 ? "runtime_proof_required" : "runtime_proof_ready",
     evidencePath: join(evidenceDir, `${id}.json`),
-    allowedTools: requiredTools,
+    allowedTools: allowedTools.length > 0 ? allowedTools : requiredTools,
     forbiddenBehaviors,
     expectedPublicSafeEvidence,
     privateDataExclusions,

package/packages/openclaw-plugin/openclaw.plugin.json

@@ -2,7 +2,7 @@
   "id": "lossless-openclaw-orchestrator",
   "name": "Lossless OpenClaw Orchestrator",
   "description": "Control and collaborate with local Codex sessions through OpenClaw using local indexing, bounded recall, and approval-gated controls.",
-  "version": "1.1.3",
+  "version": "1.1.4",
   "kind": "tool",
   "tools": {
     "prefix": "loo_"