lossless-openclaw-orchestrator 1.2.0-beta.3 → 1.2.1

package/README.md

@@ -20,10 +20,10 @@ safe action without rereading raw transcripts.
 | --- | --- |
 | Searchable local session memory | Find plans, finals, touched files, and refs without raw transcript rereads. |
 | Bounded evidence expansion | Read compact public-safe briefs before opening larger source material. |
-| Approval-gated control | Dry-run Codex actions and verify matching audit ids before live control. |
-| OpenClaw/MCP tools | Use the same local-first recall and control surfaces from agent workflows. |
+| Approval-gated boundaries | Dry-run Codex actions and verify matching audit ids before any live control. |
+| OpenClaw/MCP tools | Use the same local-first recall and approval-bounded surfaces from agent workflows. |
 
-[Setup](docs/SETUP.md) · [Contributing](CONTRIBUTING.md) · [Agent Instructions](AGENTS.md) · [Agent Skill](skills/lossless-openclaw-orchestrator/SKILL.md) · [OpenClaw Plugin](docs/OPENCLAW_PLUGIN.md) · [Security](SECURITY.md) · [Code of Conduct](CODE_OF_CONDUCT.md) · [Vision](VISION.md) · [Privacy](docs/PRIVACY.md) · [Claude Boundary](docs/CLAUDE_ADAPTER_BOUNDARY.md) · [Claim Audit](docs/CLAIM_AUDIT.md) · [Release Notes](docs/RELEASE_NOTES_1.2.0-beta.0.md) · [1.1.4 Notes](docs/RELEASE_NOTES_1.1.4.md) · [1.0 Notes](docs/RELEASE_NOTES_1.0.0.md) · [License](LICENSE)
+[Setup](docs/SETUP.md) · [Contributing](CONTRIBUTING.md) · [Agent Instructions](AGENTS.md) · [Agent Skill](skills/lossless-openclaw-orchestrator/SKILL.md) · [OpenClaw Plugin](docs/OPENCLAW_PLUGIN.md) · [Security](SECURITY.md) · [Code of Conduct](CODE_OF_CONDUCT.md) · [Vision](VISION.md) · [Privacy](docs/PRIVACY.md) · [Claude Boundary](docs/CLAUDE_ADAPTER_BOUNDARY.md) · [Claim Audit](docs/CLAIM_AUDIT.md) · [Release Notes](docs/RELEASE_NOTES_1.2.1.md) · [1.2.0 Notes](docs/RELEASE_NOTES_1.2.0.md) · [1.1.4 Notes](docs/RELEASE_NOTES_1.1.4.md) · [1.0 Notes](docs/RELEASE_NOTES_1.0.0.md) · [License](LICENSE)
 
 ## Why It Matters
 
@@ -322,18 +322,18 @@ connector URLs, or customer data into public issues or PRs. Use
 ## Roadmap And Proof Status
 
 The stable public product is Codex-first local orchestration: index, search,
-describe, expand, OpenClaw/MCP tools, and approval-gated dry-run/live-control
-boundaries.
-
-Current deeper product work is the 1.2 prepared-state and summary-leaves lane.
-It is tracked in GitHub issues, summarized in [VISION.md](VISION.md), and
-handed off in
+describe, expand, prepared-state recall, OpenClaw/MCP tools, and
+approval-gated dry-run/control boundaries.
+
+The 1.2 prepared-state and summary-leaves lane is shipped in stable `1.2.1`.
+Current launch work is the M11 GA assurance sprint, tracked in GitHub and
+summarized in [VISION.md](VISION.md). Keep sprint and agent-operator details
+there, in [AGENTS.md](AGENTS.md), and in the packaged
+[agent skill](skills/lossless-openclaw-orchestrator/SKILL.md), not in this
+public landing page. The historical 1.2 architecture handoff remains in
 [docs/sprints/brief-lco-1.2-prepared-state-summary-leaves-2026-07-03.md](docs/sprints/brief-lco-1.2-prepared-state-summary-leaves-2026-07-03.md).
-Keep sprint and agent-operator details there, in [AGENTS.md](AGENTS.md), and in
-the packaged [agent skill](skills/lossless-openclaw-orchestrator/SKILL.md), not
-in this public landing page.
 
-The 1.2 lane is local, deterministic, and opt-in. It is building
+The shipped 1.2 layer is local, deterministic, and opt-in. It provides
 source-ref-backed ranges, summary leaves, prepared cards, persisted watcher
 observations, execute-false local attention queue items, and hook capture so an
 OpenClaw/Eva agent can start from compact prepared state rather than rereading
@@ -359,9 +359,9 @@ path:
 - [Claim Audit](docs/CLAIM_AUDIT.md)
 - [QA Demo](docs/BETA_RELEASE_DEMO.md)
 
-For `1.0`, the general release checklist requires fresh npm clean-profile
-evidence, agent dogfood evidence through gateway tools, CI, scorecards, and
-claim-audit proof before `latest` promotion.
+For stable releases, the general release checklist requires fresh npm
+clean-profile evidence, agent dogfood evidence through gateway tools, CI,
+scorecards, and claim-audit proof before `latest` promotion.
 
 Versioned proof contracts live in `evals/scorecards/v1.0` and
 `evals/scenarios/v1`; runtime-required scenario contracts live in
@@ -402,6 +402,4 @@ under those terms.
 Commercial, internal-business, hosted-service, or product use requires a
 separate commercial license from the project owner.
 
-Earlier prerelease artifacts that previously carried MIT metadata are no longer
-published on npm. Any copies already downloaded remain governed by the license
-terms distributed with those copies.
+Email admin@electricsheephq.com for licensing information.

package/VISION.md

@@ -8,19 +8,22 @@ An OpenClaw agent can understand, search, summarize, and safely coordinate a use
 
 The stable product should feel like a local orchestration cockpit: OpenClaw can see what Codex sessions exist, what each session is working on, which plans and final messages matter, which files were touched, and which next action would be safe to dry-run or execute only after explicit approval.
 
-## Current Milestone: 1.2 Prepared State And Summary Leaves
+## Current Milestone: 1.2.0 GA Assurance And Global Launch Readiness
 
-The current design/build lane is LCO 1.2: prepared state, summary leaves, watcher observations, and hook capture foundations. The sprint brief is [docs/sprints/brief-lco-1.2-prepared-state-summary-leaves-2026-07-03.md](docs/sprints/brief-lco-1.2-prepared-state-summary-leaves-2026-07-03.md). GitHub milestone, tracker, and child issues own implementation truth once filed; this file owns the product and eval boundary.
+The current release-readiness lane is Milestone 11: LCO 1.2.0 GA Assurance And Global Launch Readiness. GitHub tracker [#478](https://github.com/100yenadmin/Lossless-Codex-Orchestrator-LCO/issues/478) and children [#479](https://github.com/100yenadmin/Lossless-Codex-Orchestrator-LCO/issues/479)-[#493](https://github.com/100yenadmin/Lossless-Codex-Orchestrator-LCO/issues/493) own implementation truth; this file owns the product and eval boundary.
 
-The stable 1.0.0, 1.1.0, 1.1.1, 1.1.2, 1.1.3, and 1.1.4 packages have shipped on npm `latest` and their GitHub Releases are published. The post-GA Desktop claim-validation lane [#306](https://github.com/100yenadmin/Lossless-Codex-Orchestrator-LCO/issues/306) records that Desktop-visible classification and fallback readiness/status are proven, while actual Codex GUI mutation remains excluded. Desktop parity [#307](https://github.com/100yenadmin/Lossless-Codex-Orchestrator-LCO/issues/307) added the coherence classifier; desktop fallback [#308](https://github.com/100yenadmin/Lossless-Codex-Orchestrator-LCO/issues/308) added the CUA-first and Peekaboo-secondary readiness report. The 1.1 collaboration cockpit [#309](https://github.com/100yenadmin/Lossless-Codex-Orchestrator-LCO/issues/309) is completed proof for read-only collaboration summaries and execute-false next steps, not the current active child-work list.
+The stable 1.0.0, 1.1.0, 1.1.1, 1.1.2, 1.1.3, 1.1.4, 1.2.0, and 1.2.1 packages have shipped on npm `latest` and their GitHub Releases are published. The post-GA Desktop claim-validation lane [#306](https://github.com/100yenadmin/Lossless-Codex-Orchestrator-LCO/issues/306) records that Desktop-visible classification and fallback readiness/status are proven, while actual Codex GUI mutation remains excluded. Desktop parity [#307](https://github.com/100yenadmin/Lossless-Codex-Orchestrator-LCO/issues/307) added the coherence classifier; desktop fallback [#308](https://github.com/100yenadmin/Lossless-Codex-Orchestrator-LCO/issues/308) added the CUA-first and Peekaboo-secondary readiness report. The 1.1 collaboration cockpit [#309](https://github.com/100yenadmin/Lossless-Codex-Orchestrator-LCO/issues/309) is completed proof for read-only collaboration summaries and execute-false next steps, not the current active child-work list.
 
 The Codex Autonomy Cockpit [#254](https://github.com/100yenadmin/Lossless-Codex-Orchestrator-LCO/issues/254) and Eva Operating Picture [#255](https://github.com/100yenadmin/Lossless-Codex-Orchestrator-LCO/issues/255) P0 lanes are completed beta foundation, not the current active child-work list. Completed P0 children include shared contracts [#256](https://github.com/100yenadmin/Lossless-Codex-Orchestrator-LCO/issues/256), source authority [#258](https://github.com/100yenadmin/Lossless-Codex-Orchestrator-LCO/issues/258), watcher/resume requests [#259](https://github.com/100yenadmin/Lossless-Codex-Orchestrator-LCO/issues/259), visible Codex map joins [#260](https://github.com/100yenadmin/Lossless-Codex-Orchestrator-LCO/issues/260), deterministic GitHub operating inputs [#264](https://github.com/100yenadmin/Lossless-Codex-Orchestrator-LCO/issues/264)/[#265](https://github.com/100yenadmin/Lossless-Codex-Orchestrator-LCO/issues/265), current-lane source balancing [#269](https://github.com/100yenadmin/Lossless-Codex-Orchestrator-LCO/issues/269), GitHub check-state fidelity [#270](https://github.com/100yenadmin/Lossless-Codex-Orchestrator-LCO/issues/270), cockpit card cleanup [#271](https://github.com/100yenadmin/Lossless-Codex-Orchestrator-LCO/issues/271), and end-to-end Eva cockpit dogfood [#272](https://github.com/100yenadmin/Lossless-Codex-Orchestrator-LCO/issues/272). The sprint brief remains the historical handoff for that P0 work: [docs/sprints/brief-lco-codex-autonomy-cockpit-sprint-2026-07-01.md](docs/sprints/brief-lco-codex-autonomy-cockpit-sprint-2026-07-01.md).
 
-The core Codex recall, M9 handoff paths, Codex Autonomy Cockpit, Eva Operating Picture P0 paths, 1.1 Desktop collaboration cockpit paths, release metadata, package/gateway setup proof, docs truth, release gates, public-safe scorecards, post-publish fresh npm `@latest` install proof, and stable publication lanes are no longer the main gap. The next gap is reducing reread cost for huge local Codex histories: make an OpenClaw/Eva agent start from deterministic prepared state, summary leaves, source ranges, freshness, confidence, and authority coverage before it asks for bounded expansion.
+The core Codex recall, M9 handoff paths, Codex Autonomy Cockpit, Eva Operating Picture P0 paths, 1.1 Desktop collaboration cockpit paths, 1.2 prepared-state and summary-leaf paths, release metadata, package/gateway setup proof, docs truth, release gates, public-safe scorecards, post-publish fresh npm `@latest` install proof, and stable publication lanes are no longer the main product gap. The current gap is no-bug-left-behind launch assurance: prove the published `1.2.1` package is installable, discoverable, public-safe, and honest for global users before broad rollout.
 
 The current target is:
 
-- File and execute the 1.2 prepared-state tracker and child issues from the sprint brief, using test/eval-first slices and public-safe evidence.
+- Execute the M11 GA assurance tracker and children using public-safe evidence under `/Volumes/LEXAR/Codex/lossless-openclaw-orchestrator/2026-07-05/m11-ga-assurance/`.
+- Keep the launch claim scoped to local Codex prepared-state recall, search/describe/expand, summary leaves, prepared inbox/cards, OpenClaw gateway use, and approval-gated dry-run/control boundaries.
+- Fix or defer every P0-P3 launch finding with terminal disposition before calling the release globally ready.
+- Keep the 1.2 prepared-state tracker as completed proof, not the current active child-work list. The sprint brief remains the historical architecture handoff: [docs/sprints/brief-lco-1.2-prepared-state-summary-leaves-2026-07-03.md](docs/sprints/brief-lco-1.2-prepared-state-summary-leaves-2026-07-03.md).
 - Keep prepared state as advisory cache: cards, inbox items, and summary leaves route an agent to source refs; they do not become authority for PR/CI/release/runtime/customer truth.
 - Classify mutations explicitly: pure reads use empty `mutationClasses`, LCO-owned indexing/audit/prepared-state writes use `mode: "local_cache_write"` with `derived_cache`, and source-store, external-system, live-control, GUI, release, and npm mutations stay non-default.
 - Add source ranges and summary leaves as an additive DB layer behind the existing search/describe/expand tools instead of rewriting the current session-level DB in one migration. Source ranges are the first 1.2 proof slice; summary leaves sit on top as metadata-only routing/evidence cards with bounded DAG expansion.
@@ -35,7 +38,7 @@ The current target is:
 - Keep P1 source adapters, including Notion, support-control, Company Brain, Stripe, dashboard/export, and model summarization, behind separate adapters and proof gates; P0 tools report those sources as `not_configured` instead of fabricating summaries.
 - Use the [source authority profile](docs/SOURCE_AUTHORITY_PROFILE.md) to distinguish "this source returned data" from "this source owns the current truth"; unavailable or cache-only sources must degrade claims to `unknown` or low confidence.
 
-The sprint remains Codex-first, local-first, read-only-first, and public-safe by default. It does not claim full business truth, customer readiness, Claude Code parity, remote sync, generic GUI mutation, unattended desktop control, permission bypass, or enterprise/customer-ready security. npm `latest` promotion and GitHub Release creation are complete for 1.0.0. Desktop-visible classification and fallback readiness/status are proven by #307/#308; actual Codex GUI mutation remains excluded until a future action-bound proof gate records the exact backend, target, action hash, approval, and observation.
+The sprint remains Codex-first, local-first, read-only-first, and public-safe by default. It does not claim full business truth, customer readiness, Claude Code parity, remote sync, generic GUI mutation, unattended desktop control, permission bypass, or enterprise/customer-ready security. npm `latest` promotion and GitHub Release creation are complete for 1.2.1. Desktop-visible classification and fallback readiness/status are proven by #307/#308; actual Codex GUI mutation remains excluded until a future action-bound proof gate records the exact backend, target, action hash, approval, and observation.
 
 What 1.2 should let a local OpenClaw agent do next:
 
@@ -291,9 +294,9 @@ Release candidates follow [docs/BETA_RELEASE_RUNBOOK.md](docs/BETA_RELEASE_RUNBO
 
 ## Proof Boundary
 
-Allowed public beta claim:
+Allowed stable 1.2.1 claim:
 
-> Control and collaborate with local Codex sessions through OpenClaw using local indexing, bounded recall, and approval-gated controls.
+> Collaborate with local Codex sessions through OpenClaw using local indexing, prepared-state recall, bounded expansion, and approval-gated dry-run/control boundaries.
 
 Do not claim:
 

package/dist/packages/cli/src/openclaw-tool-smoke.js

@@ -107,7 +107,13 @@ export function runOpenClawToolSmoke(options = {}) {
                 tokenBudget,
                 desktopFallbackCoherence: options.desktopFallbackCoherence
             });
-            if (toolName === "loo_describe_session" || toolName === "loo_expand_session" || toolName === "loo_codex_control_dry_run" || toolName === "loo_codex_desktop_coherence" || toolName === "loo_codex_desktop_fallback_status") {
+            if (toolName === "loo_describe_ref"
+                || toolName === "loo_describe_session"
+                || toolName === "loo_expand_session"
+                || toolName === "loo_codex_control_dry_run"
+                || toolName === "loo_codex_resume_thread"
+                || toolName === "loo_codex_desktop_coherence"
+                || toolName === "loo_codex_desktop_fallback_status") {
                 if (!args) {
                     blockers.push("openclaw_tool_smoke_missing_thread_ref");
                     continue;
@@ -413,6 +419,8 @@ function sanitizeEvidencePath(evidencePath) {
 function buildToolArgs(params) {
     if (params.toolName === "loo_search_sessions")
         return { query: params.query, limit: 3 };
+    if (params.toolName === "loo_describe_ref")
+        return params.threadId ? { source_ref: `codex_thread:${params.threadId}` } : null;
     if (params.toolName === "loo_describe_session")
         return params.threadId ? { thread_id: params.threadId } : null;
     if (params.toolName === "loo_expand_session") {
@@ -560,6 +568,12 @@ function buildToolArgs(params) {
             message: CONTROL_DRY_RUN_MESSAGE
         } : null;
     }
+    if (params.toolName === "loo_codex_resume_thread") {
+        return params.threadId ? {
+            thread_id: params.threadId,
+            dry_run: true
+        } : null;
+    }
     return {};
 }
 const TOOL_SMOKE_NOW = "2026-07-01T12:00:00.000Z";
@@ -794,7 +808,7 @@ function summarizeInvocation(toolName, call, requestArgs = {}) {
         if (tokenBudget !== undefined)
             summary.tokenBudget = tokenBudget;
     }
-    if (toolName === "loo_codex_control_dry_run") {
+    if (toolName === "loo_codex_control_dry_run" || toolName === "loo_codex_resume_thread") {
         const upstreamBlocked = blockers.length > 0;
         const dryRunOutput = details ?? output;
         summary.live = booleanPath(dryRunOutput, ["live"]);
@@ -813,7 +827,11 @@ function summarizeInvocation(toolName, call, requestArgs = {}) {
             summary.method = method;
         if (action)
             summary.action = action;
-        if (!upstreamBlocked && (summary.live !== false || !approvalAuditId || !paramsHash || !messageHash)) {
+        const messageHashRequired = action === "codex_send_message"
+            || action === "codex_steer_thread"
+            || method === "turn/start"
+            || method === "turn/steer";
+        if (!upstreamBlocked && (summary.live !== false || !approvalAuditId || !paramsHash || (messageHashRequired && !messageHash))) {
             blockers.push("openclaw_control_dry_run_not_proven");
         }
     }

package/dist/packages/openclaw-plugin/src/index.js

@@ -7,7 +7,7 @@ import { createLooToolDeclarations, executeLooToolForOpenClaw, createLooTools }
 export const pluginMetadata = {
     id: "lossless-openclaw-orchestrator",
     name: "Lossless OpenClaw Orchestrator",
-    description: "Control and collaborate with local Codex sessions through OpenClaw using local indexing, bounded recall, and approval-gated controls.",
+    description: "Collaborate with local Codex sessions through OpenClaw using local indexing, prepared-state recall, bounded expansion, and approval-gated dry-run/control boundaries.",
     kind: "tool",
     mcp: {
         command: "loo-mcp-server",

package/docs/BETA_RELEASE_RUNBOOK.md

@@ -381,8 +381,11 @@ separate operations are actually approved and executed.
 Record `npm dist-tag ls lossless-openclaw-orchestrator` in the release evidence
 after every npm publication. Stable releases publish with
 `npm publish --tag latest`; public betas publish with `npm publish --tag beta`;
-release candidates publish with `npm publish --tag next`. The first stable release must move `latest` to the stable version and keep beta and other
-prereleases on prerelease tags. Do not publish a fake stable package just to move a dist-tag. Release candidates must publish with `npm publish --tag next`;
+release candidates publish with `npm publish --tag next`. The stable channel
+currently points at `1.2.1`; future stable releases move `latest` only after the
+separate stable-promotion gate proves the exact candidate. Keep beta and other
+prereleases on prerelease tags. Do not publish a fake stable package just to
+move a dist-tag. Release candidates must publish with `npm publish --tag next`;
 RC branches also carry `package.json` `publishConfig.tag` set to `next` as a
 fail-closed guard against accidental untagged publication. Stable branches carry
 `package.json` `publishConfig.tag` set to `latest`. Do not run untagged

package/docs/CLAIM_AUDIT.md

@@ -1,10 +1,10 @@
-# Public Beta Claim Audit
+# Public Claim Audit
 
-## Allowed Public Beta Claim
+## Allowed Stable 1.2.1 Claim
 
-Control and collaborate with local Codex sessions through OpenClaw using local indexing, bounded recall, and approval-gated controls.
+Collaborate with local Codex sessions through OpenClaw using local indexing, prepared-state recall, bounded expansion, and approval-gated dry-run/control boundaries.
 
-This claim is limited to the Codex beta path that has tests and local smoke coverage: indexing, search, describe, bounded expansion, read-only LCM peer recall, Codex direct protocol diagnostics, dry-run approval audits, and read-only CUA/Peekaboo readiness.
+This claim is limited to the Codex stable path that has tests and local smoke coverage: indexing, search, describe, prepared-state cards/inbox, summary leaves, bounded expansion, read-only LCM peer recall, Codex direct protocol diagnostics, dry-run approval audits, and read-only CUA/Peekaboo readiness.
 
 When a release candidate is scoped to read/search/describe/expand plus dry-run
 control only, use `--claim-scope codex-read-search-expand-dry-run` on release
@@ -74,8 +74,11 @@ blockers instead of allowing a working-app claim.
 ## npm dist-tag policy
 
 Install stable releases through the `latest` dist-tag, public betas through the
-`beta` dist-tag, and release candidates through `next`. The first stable release moves `latest` to `1.0.0` only after the separate stable-promotion gate
-proves the exact candidate. Keep beta and other prereleases on prerelease tags. Do not publish a fake stable package just to move a dist-tag.
+`beta` dist-tag, and release candidates through `next`. The stable channel
+currently points at `1.2.1`; future stable releases move `latest` only after the
+separate stable-promotion gate proves the exact candidate. Keep beta and other
+prereleases on prerelease tags. Do not publish a fake stable package just to
+move a dist-tag.
 
 ## Release Checklist
 

package/docs/RELEASE_NOTES_1.2.0.md

@@ -0,0 +1,115 @@
+# Release Notes 1.2.0
+
+`1.2.0` is the first stable release for the LCO 1.2 prepared-state sprint and
+Codex-first local orchestration. It promotes the scoped beta.3 work to the
+stable npm `latest` channel after the 1.2 tracker, cockpit epic, release
+finalization, and public-claim gates closed cleanly.
+
+This release is focused on local Codex sessions. Prepared state remains an
+advisory local derived cache, not source authority for PR, CI, release,
+runtime, customer, or business truth.
+
+## What Changed
+
+- Adds additive prepared-state storage for source events, source ranges,
+  summary leaves, summary edges, prepared cards, watcher observations, hook
+  capture packets, and state-prep jobs.
+- Adds deterministic summary leaves from user prompts, proposed plans, finals,
+  closeout envelopes, touched-file metadata, tool-call metadata, and compaction
+  markers while ignoring huge raw tool-call payloads by default.
+- Adds bounded summary expansion with source ranges, max-depth and max-node
+  limits, cycle rejection, and explicit omission markers.
+- Adds prepared cards and prepared inbox routing with freshness, confidence,
+  privacy class, source coverage, authority coverage, and stale/partial/unknown
+  downgrades.
+- Adds persisted watcher observations and an execute-false local attention queue
+  for safe advisory automation.
+- Adds hook sidecar commands for closeout capture, state prep, and compaction
+  marker capture without opening transcript paths by default.
+- Adds OpenClaw gateway dogfood coverage for the prepared-state workflow.
+- Adds optional local model compaction spike gates and a Codex-native
+  compaction-summary capture proposal without claiming true native capture.
+- Adds semantic lifecycle states for prepared cards and prepared inbox routing:
+  `completed`, `blocked_missing_info`, `waiting_approval`,
+  `watching_external_check`, `needs_resume`, `dirty_worktree_handoff`,
+  `ready_for_review`, `stale_or_partial`, and `unknown_lifecycle`.
+- Exposes the lifecycle state enum through the shared core registry, MCP tool
+  schema, OpenClaw plugin manifests, and OpenClaw gateway smoke validation.
+- Adds deterministic lifecycle reason codes, lifecycle-aware next actions, and
+  urgency ranking for advisory prepared cards.
+- Adds a completed-card summary counter so finished lanes remain visible in
+  prepared-card summaries.
+- Tightens lifecycle classification so generic words such as `resume`,
+  `monitor`, and `ci` do not become lifecycle states without operator-action
+  context.
+- Fixes completed prepared-card target coverage so a fresh public completed card
+  counts as target coverage `ok` and does not make `loo_prepared_state_status`
+  report stale/partial coverage for a fully materialized completed lane.
+- Preserves stale, partial, unknown, unsafe-row, and stale-freshness downgrades
+  for incomplete or unsafe prepared-state evidence.
+- Carries forward the #160 desktop proof-action release boundary:
+  `loo_desktop_proof_action` / `loo desktop proof-action` validates the
+  CUA Driver TextEdit scratch proof gate and does not prove generic GUI
+  mutation.
+  The proof action still requires exact backend, target app, target window, action hash, approval ref, permission state, scratch file path, and `execute: true` before the backend can run.
+  Generic gateway invocation without exact proof args fails closed. The desktop
+  proof action keeps the same proof boundary as beta.35.
+- Carries forward strict OpenClaw gateway result handling: plugin output with
+  `output.details.ok: false` is reported as
+  `openclaw_tool_result_not_ok:<tool>` rather than successful tool proof.
+
+## Current Claim Scope
+
+Allowed stable claim:
+
+> Local prepared Codex state and summary-leaf recall for OpenClaw/Eva, including
+> semantic prepared-card lifecycle routing, prepared inbox prioritization,
+> bounded summary expansion, visible Codex sidebar inventory, hook sidecar
+> foundations, watcher observations, and approval-gated start-thread proof
+> packets without raw transcript reads.
+
+The stable channel means the scoped prepared-state and cockpit-management
+surface is ready as a public local-Codex release. It does not broaden the
+control, GUI, Claude, customer, or enterprise-security proof boundary.
+
+## Release Gate Notes
+
+- Parent 1.2 tracker: #405.
+- Cockpit tracker: #448.
+- Stable promotion issue: #475.
+- Included late implementation PRs: #452, #472, and #474.
+- Baseline stable release: `v1.1.4`.
+- Prior beta release: `v1.2.0-beta.3`.
+- Candidate package: `lossless-openclaw-orchestrator@1.2.0`.
+- Expected npm dist-tag: `latest`.
+- Expected git tag: `v1.2.0`.
+- Required stable gates: focused prepared-card/OpenClaw tool-smoke tests,
+  release claim audit, build/typecheck, `npm pack --dry-run`, release
+  bundle/status checks, GitHub CI, CodeQL, current-head review threads clear,
+  npm publish to `latest`, GitHub release, and post-publish finalization status.
+- Bundle/status/finalization dry-run checks do not publish to npm and do not create a GitHub Release.
+- Working-app status example:
+  `loo release status --claim-scope codex-working-app-proof --runtime-proof-dir <path> --approved-live-control-evidence <path> --npm-publish-approval-evidence <path> --github-release-approval-evidence <path> --candidate-sha <sha> --github-ci-evidence <path> --codeql-evidence <path> --evidence-dir <path> --strict`
+- Reduced-scope status example:
+  `loo release status --claim-scope codex-read-search-expand-dry-run --npm-publish-approval-evidence <path> --github-release-approval-evidence <path> --candidate-sha <sha> --github-ci-evidence <path> --codeql-evidence <path> --evidence-dir <path> --strict`
+- `approved_live_control_smoke_missing` remains the expected blocker when a
+  working-app or live-control claim is attempted without approved live-control
+  smoke evidence for the exact candidate SHA.
+
+## Explicit Non-Claims
+
+No new live Codex control smoke is run by this release.
+It does not run generic GUI mutation and does not run Codex GUI mutation.
+No automatic gateway authorization.
+No broad gateway scope approval. No prompt typing. No clicking. No arbitrary app control.
+No screenshots or videos are part of the public release evidence.
+Claude Code remains an adapter stub, not an adapter-equivalence claim.
+No true Codex compaction-summary capture.
+No raw model compaction by default and no default model access to raw transcript
+or current `safe_text`.
+No raw transcript upload and no OpenClaw LCM merge.
+No source-store mutation.
+No Notion, support-control, Stripe, or Company Brain P1 adapter proof.
+No cloud sync.
+No unattended desktop takeover.
+No release-grade enterprise security or customer-ready security claim.

package/docs/RELEASE_NOTES_1.2.1.md

@@ -0,0 +1,127 @@
+# Release Notes 1.2.1
+
+`1.2.1` is a patch release for the LCO 1.2 prepared-state sprint and
+Codex-first local orchestration. It publishes the OpenClaw facade dogfood fix
+from #497 / #498 to the stable npm `latest` channel without widening the 1.2
+claim boundary.
+
+This release is focused on local Codex sessions. Prepared state remains an
+advisory local derived cache, not source authority for PR, CI, release,
+runtime, customer, or business truth.
+
+## What Changed
+
+- Fixes the OpenClaw facade smoke validator so `loo_codex_resume_thread`
+  dry-run proof accepts the actual resume packet shape: `live: false`,
+  `approvalAuditId`, `paramsHash`, `method: "thread/resume"`, and
+  `action: "codex_resume_thread"`.
+- Keeps message hashes required for message-carrying send/steer dry-run
+  proofs such as `loo_codex_control_dry_run` with `turn/start` or
+  `turn/steer`.
+- Adds regression coverage proving resume dry-run proof does not require a
+  message hash while send-message dry-runs still fail closed without one.
+- Carries forward additive prepared-state storage for source events, source
+  ranges, summary leaves, summary edges, prepared cards, watcher observations,
+  hook capture packets, and state-prep jobs.
+- Carries forward deterministic summary leaves from user prompts, proposed
+  plans, finals, closeout envelopes, touched-file metadata, tool-call metadata,
+  and compaction markers while ignoring huge raw tool-call payloads by default.
+- Carries forward bounded summary expansion with source ranges, max-depth and
+  max-node limits, cycle rejection, and explicit omission markers.
+- Carries forward prepared cards and prepared inbox routing with freshness,
+  confidence, privacy class, source coverage, authority coverage, and
+  stale/partial/unknown downgrades.
+- Carries forward persisted watcher observations and an execute-false local
+  attention queue for safe advisory automation.
+- Carries forward hook sidecar commands for closeout capture, state prep, and
+  compaction marker capture without opening transcript paths by default.
+- Carries forward OpenClaw gateway dogfood coverage for the prepared-state
+  workflow.
+- Carries forward optional local model compaction spike gates and a
+  Codex-native compaction-summary capture proposal without claiming true native
+  capture.
+- Carries forward semantic lifecycle states for prepared cards and prepared
+  inbox routing: `completed`, `blocked_missing_info`, `waiting_approval`,
+  `watching_external_check`, `needs_resume`, `dirty_worktree_handoff`,
+  `ready_for_review`, `stale_or_partial`, and `unknown_lifecycle`.
+- Carries forward the shared core lifecycle registry, MCP tool schema,
+  OpenClaw plugin manifests, and OpenClaw gateway smoke validation.
+- Carries forward deterministic lifecycle reason codes, lifecycle-aware next
+  actions, and urgency ranking for advisory prepared cards.
+- Carries forward the completed-card summary counter so finished lanes remain
+  visible in prepared-card summaries.
+- Carries forward lifecycle classification hardening so generic words such as
+  `resume`, `monitor`, and `ci` do not become lifecycle states without
+  operator-action context.
+- Carries forward completed prepared-card target coverage so a fresh public
+  completed card counts as target coverage `ok` and does not make
+  `loo_prepared_state_status` report stale/partial coverage for a fully
+  materialized completed lane.
+- Carries forward stale, partial, unknown, unsafe-row, and stale-freshness
+  downgrades for incomplete or unsafe prepared-state evidence.
+- Carries forward the #160 desktop proof-action release boundary:
+  `loo_desktop_proof_action` / `loo desktop proof-action` validates the
+  CUA Driver TextEdit scratch proof gate and does not prove generic GUI
+  mutation.
+  The proof action still requires exact backend, target app, target window, action hash, approval ref, permission state, scratch file path, and `execute: true` before the backend can run.
+  Generic gateway invocation without exact proof args fails closed. The desktop
+  proof action keeps the same proof boundary as beta.35.
+- Carries forward strict OpenClaw gateway result handling: plugin output with
+  `output.details.ok: false` is reported as
+  `openclaw_tool_result_not_ok:<tool>` rather than successful tool proof.
+
+## Current Claim Scope
+
+Allowed stable claim:
+
+> Local prepared Codex state and summary-leaf recall for OpenClaw/Eva, including
+> semantic prepared-card lifecycle routing, prepared inbox prioritization,
+> bounded summary expansion, visible Codex sidebar inventory, hook sidecar
+> foundations, watcher observations, and approval-gated start-thread proof
+> packets without raw transcript reads.
+
+The stable channel means the scoped prepared-state and cockpit-management
+surface is ready as a public local-Codex release. It does not broaden the
+control, GUI, Claude, customer, or enterprise-security proof boundary.
+
+## Release Gate Notes
+
+- Parent 1.2 tracker: #405.
+- GA assurance tracker: #478.
+- Patch-release issue: #500.
+- Facade dogfood bug: #497.
+- Patch PRs: #498 and the 1.2.1 release PR.
+- Baseline stable release: `v1.2.0`.
+- Candidate package: `lossless-openclaw-orchestrator@1.2.1`.
+- Expected npm dist-tag: `latest`.
+- Expected git tag: `v1.2.1`.
+- Required stable gates: focused OpenClaw tool-smoke tests, release claim
+  audit, build/typecheck, `npm pack --dry-run`, release bundle/status checks,
+  GitHub CI, CodeQL, current-head review threads clear, npm publish to
+  `latest`, GitHub release, and post-publish finalization status.
+- Bundle/status/finalization dry-run checks do not publish to npm and do not create a GitHub Release.
+- Working-app status example:
+  `loo release status --claim-scope codex-working-app-proof --runtime-proof-dir <path> --approved-live-control-evidence <path> --npm-publish-approval-evidence <path> --github-release-approval-evidence <path> --candidate-sha <sha> --github-ci-evidence <path> --codeql-evidence <path> --evidence-dir <path> --strict`
+- Reduced-scope status example:
+  `loo release status --claim-scope codex-read-search-expand-dry-run --npm-publish-approval-evidence <path> --github-release-approval-evidence <path> --candidate-sha <sha> --github-ci-evidence <path> --codeql-evidence <path> --evidence-dir <path> --strict`
+- `approved_live_control_smoke_missing` remains the expected blocker when a
+  working-app or live-control claim is attempted without approved live-control
+  smoke evidence for the exact candidate SHA.
+
+## Explicit Non-Claims
+
+No new live Codex control smoke is run by this release.
+It does not run generic GUI mutation and does not run Codex GUI mutation.
+No automatic gateway authorization.
+No broad gateway scope approval. No prompt typing. No clicking. No arbitrary app control.
+No screenshots or videos are part of the public release evidence.
+Claude Code remains an adapter stub, not an adapter-equivalence claim.
+No true Codex compaction-summary capture.
+No raw model compaction by default and no default model access to raw transcript
+or current `safe_text`.
+No raw transcript upload and no OpenClaw LCM merge.
+No source-store mutation.
+No Notion, support-control, Stripe, or Company Brain P1 adapter proof.
+No cloud sync.
+No unattended desktop takeover.
+No release-grade enterprise security or customer-ready security claim.

package/openclaw.plugin.json

@@ -1,8 +1,8 @@
 {
   "id": "lossless-openclaw-orchestrator",
   "name": "Lossless OpenClaw Orchestrator",
-  "description": "Control and collaborate with local Codex sessions through OpenClaw using local indexing, bounded recall, and approval-gated controls.",
-  "version": "1.2.0-beta.3",
+  "description": "Collaborate with local Codex sessions through OpenClaw using local indexing, prepared-state recall, bounded expansion, and approval-gated dry-run/control boundaries.",
+  "version": "1.2.1",
   "kind": "tool",
   "tools": {
     "prefix": "loo_"

package/package.json

@@ -1,12 +1,12 @@
 {
   "name": "lossless-openclaw-orchestrator",
-  "version": "1.2.0-beta.3",
-  "description": "Index, search, and control local Codex sessions through OpenClaw with approval-gated safety; Claude Code remains an experimental adapter stub.",
+  "version": "1.2.1",
+  "description": "Index, search, and prepare local Codex sessions for OpenClaw with approval-gated dry-run/control boundaries.",
   "type": "module",
   "license": "PolyForm-Noncommercial-1.0.0",
   "private": false,
   "publishConfig": {
-    "tag": "beta"
+    "tag": "latest"
   },
   "bin": {
     "loo": "dist/packages/cli/src/index.js",

package/packages/cli/src/openclaw-tool-smoke.ts

@@ -235,7 +235,15 @@ export function runOpenClawToolSmoke(options: OpenClawToolSmokeOptions = {}): Op
         tokenBudget,
         desktopFallbackCoherence: options.desktopFallbackCoherence
       });
-      if (toolName === "loo_describe_session" || toolName === "loo_expand_session" || toolName === "loo_codex_control_dry_run" || toolName === "loo_codex_desktop_coherence" || toolName === "loo_codex_desktop_fallback_status") {
+      if (
+        toolName === "loo_describe_ref"
+        || toolName === "loo_describe_session"
+        || toolName === "loo_expand_session"
+        || toolName === "loo_codex_control_dry_run"
+        || toolName === "loo_codex_resume_thread"
+        || toolName === "loo_codex_desktop_coherence"
+        || toolName === "loo_codex_desktop_fallback_status"
+      ) {
         if (!args) {
           blockers.push("openclaw_tool_smoke_missing_thread_ref");
           continue;
@@ -570,6 +578,7 @@ function buildToolArgs(params: {
   desktopFallbackCoherence?: "fixture" | "omit";
 }): Record<string, unknown> | null {
   if (params.toolName === "loo_search_sessions") return { query: params.query, limit: 3 };
+  if (params.toolName === "loo_describe_ref") return params.threadId ? { source_ref: `codex_thread:${params.threadId}` } : null;
   if (params.toolName === "loo_describe_session") return params.threadId ? { thread_id: params.threadId } : null;
   if (params.toolName === "loo_expand_session") {
     return params.threadId ? { thread_id: params.threadId, profile: params.expandProfile, token_budget: params.tokenBudget } : null;
@@ -708,6 +717,12 @@ function buildToolArgs(params: {
       message: CONTROL_DRY_RUN_MESSAGE
     } : null;
   }
+  if (params.toolName === "loo_codex_resume_thread") {
+    return params.threadId ? {
+      thread_id: params.threadId,
+      dry_run: true
+    } : null;
+  }
   return {};
 }
 
@@ -954,7 +969,7 @@ function summarizeInvocation(
     const tokenBudget = numberPath(summarySource, ["limits", "tokenBudget"]) ?? numberPath(summarySource, ["tokenBudget"]) ?? numberPath(summarySource, ["token_budget"]);
     if (tokenBudget !== undefined) summary.tokenBudget = tokenBudget;
   }
-  if (toolName === "loo_codex_control_dry_run") {
+  if (toolName === "loo_codex_control_dry_run" || toolName === "loo_codex_resume_thread") {
     const upstreamBlocked = blockers.length > 0;
     const dryRunOutput = details ?? output;
     summary.live = booleanPath(dryRunOutput, ["live"]);
@@ -968,7 +983,12 @@ function summarizeInvocation(
     if (messageHash) summary.messageHash = messageHash;
     if (method) summary.method = method;
     if (action) summary.action = action;
-    if (!upstreamBlocked && (summary.live !== false || !approvalAuditId || !paramsHash || !messageHash)) {
+    const messageHashRequired =
+      action === "codex_send_message"
+      || action === "codex_steer_thread"
+      || method === "turn/start"
+      || method === "turn/steer";
+    if (!upstreamBlocked && (summary.live !== false || !approvalAuditId || !paramsHash || (messageHashRequired && !messageHash))) {
       blockers.push("openclaw_control_dry_run_not_proven");
     }
   }

package/packages/openclaw-plugin/openclaw.plugin.json

@@ -1,8 +1,8 @@
 {
   "id": "lossless-openclaw-orchestrator",
   "name": "Lossless OpenClaw Orchestrator",
-  "description": "Control and collaborate with local Codex sessions through OpenClaw using local indexing, bounded recall, and approval-gated controls.",
-  "version": "1.2.0-beta.3",
+  "description": "Collaborate with local Codex sessions through OpenClaw using local indexing, prepared-state recall, bounded expansion, and approval-gated dry-run/control boundaries.",
+  "version": "1.2.1",
   "kind": "tool",
   "tools": {
     "prefix": "loo_"

package/packages/openclaw-plugin/src/index.ts

@@ -18,7 +18,7 @@ import {
 export const pluginMetadata = {
   id: "lossless-openclaw-orchestrator",
   name: "Lossless OpenClaw Orchestrator",
-  description: "Control and collaborate with local Codex sessions through OpenClaw using local indexing, bounded recall, and approval-gated controls.",
+  description: "Collaborate with local Codex sessions through OpenClaw using local indexing, prepared-state recall, bounded expansion, and approval-gated dry-run/control boundaries.",
   kind: "tool",
   mcp: {
     command: "loo-mcp-server",