lossless-openclaw-orchestrator 1.2.0 → 1.2.2

package/README.md

@@ -20,10 +20,10 @@ safe action without rereading raw transcripts.
 | --- | --- |
 | Searchable local session memory | Find plans, finals, touched files, and refs without raw transcript rereads. |
 | Bounded evidence expansion | Read compact public-safe briefs before opening larger source material. |
-| Approval-gated control | Dry-run Codex actions and verify matching audit ids before live control. |
-| OpenClaw/MCP tools | Use the same local-first recall and control surfaces from agent workflows. |
+| Approval-gated boundaries | Dry-run Codex actions and verify matching audit ids before any live control. |
+| OpenClaw/MCP tools | Use the same local-first recall and approval-bounded surfaces from agent workflows. |
 
-[Setup](docs/SETUP.md) · [Contributing](CONTRIBUTING.md) · [Agent Instructions](AGENTS.md) · [Agent Skill](skills/lossless-openclaw-orchestrator/SKILL.md) · [OpenClaw Plugin](docs/OPENCLAW_PLUGIN.md) · [Security](SECURITY.md) · [Code of Conduct](CODE_OF_CONDUCT.md) · [Vision](VISION.md) · [Privacy](docs/PRIVACY.md) · [Claude Boundary](docs/CLAUDE_ADAPTER_BOUNDARY.md) · [Claim Audit](docs/CLAIM_AUDIT.md) · [Release Notes](docs/RELEASE_NOTES_1.2.0-beta.0.md) · [1.1.4 Notes](docs/RELEASE_NOTES_1.1.4.md) · [1.0 Notes](docs/RELEASE_NOTES_1.0.0.md) · [License](LICENSE)
+[Setup](docs/SETUP.md) · [Contributing](CONTRIBUTING.md) · [Agent Instructions](AGENTS.md) · [Agent Skill](skills/lossless-openclaw-orchestrator/SKILL.md) · [OpenClaw Plugin](docs/OPENCLAW_PLUGIN.md) · [Security](SECURITY.md) · [Code of Conduct](CODE_OF_CONDUCT.md) · [Vision](VISION.md) · [Privacy](docs/PRIVACY.md) · [Claude Boundary](docs/CLAUDE_ADAPTER_BOUNDARY.md) · [Claim Audit](docs/CLAIM_AUDIT.md) · [Release Notes](docs/RELEASE_NOTES_1.2.2.md) · [1.2.1 Notes](docs/RELEASE_NOTES_1.2.1.md) · [1.2.0 Notes](docs/RELEASE_NOTES_1.2.0.md) · [1.1.4 Notes](docs/RELEASE_NOTES_1.1.4.md) · [1.0 Notes](docs/RELEASE_NOTES_1.0.0.md) · [License](LICENSE)
 
 ## Why It Matters
 
@@ -322,18 +322,18 @@ connector URLs, or customer data into public issues or PRs. Use
 ## Roadmap And Proof Status
 
 The stable public product is Codex-first local orchestration: index, search,
-describe, expand, OpenClaw/MCP tools, and approval-gated dry-run/live-control
-boundaries.
-
-Current deeper product work is the 1.2 prepared-state and summary-leaves lane.
-It is tracked in GitHub issues, summarized in [VISION.md](VISION.md), and
-handed off in
+describe, expand, prepared-state recall, OpenClaw/MCP tools, and
+approval-gated dry-run/control boundaries.
+
+The 1.2 prepared-state and summary-leaves lane is shipped in stable `1.2.2`.
+Current launch work is the M11 GA assurance sprint, tracked in GitHub and
+summarized in [VISION.md](VISION.md). Keep sprint and agent-operator details
+there, in [AGENTS.md](AGENTS.md), and in the packaged
+[agent skill](skills/lossless-openclaw-orchestrator/SKILL.md), not in this
+public landing page. The historical 1.2 architecture handoff remains in
 [docs/sprints/brief-lco-1.2-prepared-state-summary-leaves-2026-07-03.md](docs/sprints/brief-lco-1.2-prepared-state-summary-leaves-2026-07-03.md).
-Keep sprint and agent-operator details there, in [AGENTS.md](AGENTS.md), and in
-the packaged [agent skill](skills/lossless-openclaw-orchestrator/SKILL.md), not
-in this public landing page.
 
-The 1.2 lane is local, deterministic, and opt-in. It is building
+The shipped 1.2 layer is local, deterministic, and opt-in. It provides
 source-ref-backed ranges, summary leaves, prepared cards, persisted watcher
 observations, execute-false local attention queue items, and hook capture so an
 OpenClaw/Eva agent can start from compact prepared state rather than rereading
@@ -359,9 +359,9 @@ path:
 - [Claim Audit](docs/CLAIM_AUDIT.md)
 - [QA Demo](docs/BETA_RELEASE_DEMO.md)
 
-For `1.0`, the general release checklist requires fresh npm clean-profile
-evidence, agent dogfood evidence through gateway tools, CI, scorecards, and
-claim-audit proof before `latest` promotion.
+For stable releases, the general release checklist requires fresh npm
+clean-profile evidence, agent dogfood evidence through gateway tools, CI,
+scorecards, and claim-audit proof before `latest` promotion.
 
 Versioned proof contracts live in `evals/scorecards/v1.0` and
 `evals/scenarios/v1`; runtime-required scenario contracts live in
@@ -402,6 +402,4 @@ under those terms.
 Commercial, internal-business, hosted-service, or product use requires a
 separate commercial license from the project owner.
 
-Earlier prerelease artifacts that previously carried MIT metadata are no longer
-published on npm. Any copies already downloaded remain governed by the license
-terms distributed with those copies.
+Email admin@electricsheephq.com for licensing information.

package/VISION.md

@@ -8,19 +8,22 @@ An OpenClaw agent can understand, search, summarize, and safely coordinate a use
 
 The stable product should feel like a local orchestration cockpit: OpenClaw can see what Codex sessions exist, what each session is working on, which plans and final messages matter, which files were touched, and which next action would be safe to dry-run or execute only after explicit approval.
 
-## Current Milestone: 1.2 Prepared State And Summary Leaves
+## Current Milestone: 1.2.0 GA Assurance And Global Launch Readiness
 
-The current design/build lane is LCO 1.2: prepared state, summary leaves, watcher observations, and hook capture foundations. The sprint brief is [docs/sprints/brief-lco-1.2-prepared-state-summary-leaves-2026-07-03.md](docs/sprints/brief-lco-1.2-prepared-state-summary-leaves-2026-07-03.md). GitHub milestone, tracker, and child issues own implementation truth once filed; this file owns the product and eval boundary.
+The current release-readiness lane is Milestone 11: LCO 1.2.0 GA Assurance And Global Launch Readiness. GitHub tracker [#478](https://github.com/100yenadmin/Lossless-Codex-Orchestrator-LCO/issues/478) and children [#479](https://github.com/100yenadmin/Lossless-Codex-Orchestrator-LCO/issues/479)-[#493](https://github.com/100yenadmin/Lossless-Codex-Orchestrator-LCO/issues/493) own implementation truth; this file owns the product and eval boundary.
 
-The stable 1.0.0, 1.1.0, 1.1.1, 1.1.2, 1.1.3, and 1.1.4 packages have shipped on npm `latest` and their GitHub Releases are published. The post-GA Desktop claim-validation lane [#306](https://github.com/100yenadmin/Lossless-Codex-Orchestrator-LCO/issues/306) records that Desktop-visible classification and fallback readiness/status are proven, while actual Codex GUI mutation remains excluded. Desktop parity [#307](https://github.com/100yenadmin/Lossless-Codex-Orchestrator-LCO/issues/307) added the coherence classifier; desktop fallback [#308](https://github.com/100yenadmin/Lossless-Codex-Orchestrator-LCO/issues/308) added the CUA-first and Peekaboo-secondary readiness report. The 1.1 collaboration cockpit [#309](https://github.com/100yenadmin/Lossless-Codex-Orchestrator-LCO/issues/309) is completed proof for read-only collaboration summaries and execute-false next steps, not the current active child-work list.
+The stable 1.0.0, 1.1.0, 1.1.1, 1.1.2, 1.1.3, 1.1.4, 1.2.0, 1.2.1, and 1.2.2 packages have shipped on npm `latest` and their GitHub Releases are published. The post-GA Desktop claim-validation lane [#306](https://github.com/100yenadmin/Lossless-Codex-Orchestrator-LCO/issues/306) records that Desktop-visible classification and fallback readiness/status are proven, while actual Codex GUI mutation remains excluded. Desktop parity [#307](https://github.com/100yenadmin/Lossless-Codex-Orchestrator-LCO/issues/307) added the coherence classifier; desktop fallback [#308](https://github.com/100yenadmin/Lossless-Codex-Orchestrator-LCO/issues/308) added the CUA-first and Peekaboo-secondary readiness report. The 1.1 collaboration cockpit [#309](https://github.com/100yenadmin/Lossless-Codex-Orchestrator-LCO/issues/309) is completed proof for read-only collaboration summaries and execute-false next steps, not the current active child-work list.
 
 The Codex Autonomy Cockpit [#254](https://github.com/100yenadmin/Lossless-Codex-Orchestrator-LCO/issues/254) and Eva Operating Picture [#255](https://github.com/100yenadmin/Lossless-Codex-Orchestrator-LCO/issues/255) P0 lanes are completed beta foundation, not the current active child-work list. Completed P0 children include shared contracts [#256](https://github.com/100yenadmin/Lossless-Codex-Orchestrator-LCO/issues/256), source authority [#258](https://github.com/100yenadmin/Lossless-Codex-Orchestrator-LCO/issues/258), watcher/resume requests [#259](https://github.com/100yenadmin/Lossless-Codex-Orchestrator-LCO/issues/259), visible Codex map joins [#260](https://github.com/100yenadmin/Lossless-Codex-Orchestrator-LCO/issues/260), deterministic GitHub operating inputs [#264](https://github.com/100yenadmin/Lossless-Codex-Orchestrator-LCO/issues/264)/[#265](https://github.com/100yenadmin/Lossless-Codex-Orchestrator-LCO/issues/265), current-lane source balancing [#269](https://github.com/100yenadmin/Lossless-Codex-Orchestrator-LCO/issues/269), GitHub check-state fidelity [#270](https://github.com/100yenadmin/Lossless-Codex-Orchestrator-LCO/issues/270), cockpit card cleanup [#271](https://github.com/100yenadmin/Lossless-Codex-Orchestrator-LCO/issues/271), and end-to-end Eva cockpit dogfood [#272](https://github.com/100yenadmin/Lossless-Codex-Orchestrator-LCO/issues/272). The sprint brief remains the historical handoff for that P0 work: [docs/sprints/brief-lco-codex-autonomy-cockpit-sprint-2026-07-01.md](docs/sprints/brief-lco-codex-autonomy-cockpit-sprint-2026-07-01.md).
 
-The core Codex recall, M9 handoff paths, Codex Autonomy Cockpit, Eva Operating Picture P0 paths, 1.1 Desktop collaboration cockpit paths, release metadata, package/gateway setup proof, docs truth, release gates, public-safe scorecards, post-publish fresh npm `@latest` install proof, and stable publication lanes are no longer the main gap. The next gap is reducing reread cost for huge local Codex histories: make an OpenClaw/Eva agent start from deterministic prepared state, summary leaves, source ranges, freshness, confidence, and authority coverage before it asks for bounded expansion.
+The core Codex recall, M9 handoff paths, Codex Autonomy Cockpit, Eva Operating Picture P0 paths, 1.1 Desktop collaboration cockpit paths, 1.2 prepared-state and summary-leaf paths, release metadata, package/gateway setup proof, docs truth, release gates, public-safe scorecards, post-publish fresh npm `@latest` install proof, and stable publication lanes are no longer the main product gap. The current gap is no-bug-left-behind launch assurance: prove the published `1.2.2` package is installable, discoverable, public-safe, and honest for global users before broad rollout.
 
 The current target is:
 
-- File and execute the 1.2 prepared-state tracker and child issues from the sprint brief, using test/eval-first slices and public-safe evidence.
+- Execute the M11 GA assurance tracker and children using public-safe evidence under `/Volumes/LEXAR/Codex/lossless-openclaw-orchestrator/2026-07-05/m11-ga-assurance/`.
+- Keep the launch claim scoped to local Codex prepared-state recall, search/describe/expand, summary leaves, prepared inbox/cards, OpenClaw gateway use, and approval-gated dry-run/control boundaries.
+- Fix or defer every P0-P3 launch finding with terminal disposition before calling the release globally ready.
+- Keep the 1.2 prepared-state tracker as completed proof, not the current active child-work list. The sprint brief remains the historical architecture handoff: [docs/sprints/brief-lco-1.2-prepared-state-summary-leaves-2026-07-03.md](docs/sprints/brief-lco-1.2-prepared-state-summary-leaves-2026-07-03.md).
 - Keep prepared state as advisory cache: cards, inbox items, and summary leaves route an agent to source refs; they do not become authority for PR/CI/release/runtime/customer truth.
 - Classify mutations explicitly: pure reads use empty `mutationClasses`, LCO-owned indexing/audit/prepared-state writes use `mode: "local_cache_write"` with `derived_cache`, and source-store, external-system, live-control, GUI, release, and npm mutations stay non-default.
 - Add source ranges and summary leaves as an additive DB layer behind the existing search/describe/expand tools instead of rewriting the current session-level DB in one migration. Source ranges are the first 1.2 proof slice; summary leaves sit on top as metadata-only routing/evidence cards with bounded DAG expansion.
@@ -35,7 +38,7 @@ The current target is:
 - Keep P1 source adapters, including Notion, support-control, Company Brain, Stripe, dashboard/export, and model summarization, behind separate adapters and proof gates; P0 tools report those sources as `not_configured` instead of fabricating summaries.
 - Use the [source authority profile](docs/SOURCE_AUTHORITY_PROFILE.md) to distinguish "this source returned data" from "this source owns the current truth"; unavailable or cache-only sources must degrade claims to `unknown` or low confidence.
 
-The sprint remains Codex-first, local-first, read-only-first, and public-safe by default. It does not claim full business truth, customer readiness, Claude Code parity, remote sync, generic GUI mutation, unattended desktop control, permission bypass, or enterprise/customer-ready security. npm `latest` promotion and GitHub Release creation are complete for 1.0.0. Desktop-visible classification and fallback readiness/status are proven by #307/#308; actual Codex GUI mutation remains excluded until a future action-bound proof gate records the exact backend, target, action hash, approval, and observation.
+The sprint remains Codex-first, local-first, read-only-first, and public-safe by default. It does not claim full business truth, customer readiness, Claude Code parity, remote sync, generic GUI mutation, unattended desktop control, permission bypass, or enterprise/customer-ready security. npm `latest` promotion and GitHub Release creation are complete for 1.2.2. Desktop-visible classification and fallback readiness/status are proven by #307/#308; actual Codex GUI mutation remains excluded until a future action-bound proof gate records the exact backend, target, action hash, approval, and observation.
 
 What 1.2 should let a local OpenClaw agent do next:
 
@@ -79,13 +82,13 @@ What a local OpenClaw agent can do today:
 - Inspect `authorityCoverage` on operating-picture outputs before trusting GitHub, PLAN_STATE, or future P1 source claims.
 - Classify package and gateway readiness with `loo onboard status`, `loo openclaw dogfood`, `loo openclaw tool-smoke`, and `loo openclaw published-smoke`.
 - Follow the packaged agent skill and M9 dogfood scenario to produce a public-safe recommendation from source refs, bounded expansion, detail lookups, and dry-run audit hashes.
-- Use `loo release general-readiness --strict` to decide whether fresh npm install, clean-profile OpenClaw load, and agent dogfood evidence are enough for a 1.0 claim.
+- Use `loo release general-readiness --strict` to decide whether fresh npm install, clean-profile OpenClaw load, clean-profile gateway readiness, and agent dogfood evidence are enough for a stable/general release claim.
 
 ## Completed Proof: Working App Runtime
 
-Completed proof from M7/M9 remains part of the evidence base. Milestone 7 and the [Working App Proof Sprint](docs/WORKING_APP_PROOF_SPRINT.md) moved LCO beyond reduced-scope dry-run claims by proving installed OpenClaw gateway paths, live `loo_*` calls through the same surface an OpenClaw agent uses, approved live Codex action proof where explicitly claimed, post-action refresh reasoning, action-bound desktop collaboration proof gates, connected local search UI contracts, runtime proof gates, and Claude Code adapter inventory boundaries. M9 added the agent handoff lane, first-class OpenClaw agent usage skill, docs truth pass, agent dogfood scenario, fresh npm clean-profile smoke, and 1.0 readiness gate.
+Completed proof from M7/M9 remains part of the evidence base. Milestone 7 and the [Working App Proof Sprint](docs/WORKING_APP_PROOF_SPRINT.md) moved LCO beyond reduced-scope dry-run claims by proving installed OpenClaw gateway paths, live `loo_*` calls through the same surface an OpenClaw agent uses, approved live Codex action proof where explicitly claimed, post-action refresh reasoning, action-bound desktop collaboration proof gates, connected local search UI contracts, runtime proof gates, and Claude Code adapter inventory boundaries. M9 added the agent handoff lane, first-class OpenClaw agent usage skill, docs truth pass, agent dogfood scenario, fresh npm clean-profile smoke, and general-release readiness gate.
 
-Completed proof does not mean 1.0 or broad automation parity. Generic GUI mutation, Codex GUI mutation, Claude Code parity, cloud sync, unattended takeover, and release-grade enterprise security remain excluded until separate issues and evidence prove them.
+Completed proof does not mean broad automation parity. Generic GUI mutation, Codex GUI mutation, Claude Code parity, cloud sync, unattended takeover, and release-grade enterprise security remain excluded until separate issues and evidence prove them.
 
 ## Primary User Stories
 
@@ -291,9 +294,9 @@ Release candidates follow [docs/BETA_RELEASE_RUNBOOK.md](docs/BETA_RELEASE_RUNBO
 
 ## Proof Boundary
 
-Allowed public beta claim:
+Allowed stable 1.2.2 claim:
 
-> Control and collaborate with local Codex sessions through OpenClaw using local indexing, bounded recall, and approval-gated controls.
+> Collaborate with local Codex sessions through OpenClaw using local indexing, prepared-state recall, bounded expansion, and approval-gated dry-run/control boundaries.
 
 Do not claim:
 

package/dist/packages/cli/src/general-release-readiness.js

@@ -23,6 +23,7 @@ export function createGeneralReleaseReadiness(options) {
     const packageVersion = readString(packageJson, "version");
     const expectedDistTag = distTagForVersion(packageVersion ?? "");
     const expectedPackage = packageName ? `${packageName}@${expectedDistTag}` : null;
+    const releaseLabel = formatReleaseLabel(expectedPackage, packageVersion);
     const freshNpmEvidence = resolveEvidencePath(evidenceDir, options.freshNpmEvidence);
     const agentDogfoodEvidence = resolveEvidencePath(evidenceDir, options.agentDogfoodEvidence);
     const checks = {
@@ -56,10 +57,10 @@ export function createGeneralReleaseReadiness(options) {
             liveCodexControlRun: false,
             desktopGuiActionRun: false
         },
-        proofBoundary: "This gate defines and validates 1.0 general-release readiness evidence; it does not publish 1.0, move npm latest, create a GitHub Release, run live Codex control, mutate a GUI, claim Claude parity, or claim enterprise/customer-ready security.",
+        proofBoundary: `This gate defines and validates general-release readiness evidence for ${releaseLabel}; it does not publish npm, move npm dist-tags, create a GitHub Release, run live Codex control, mutate a GUI, claim Claude parity, or claim enterprise/customer-ready security.`,
         nextAction: blockers.length === 0
-            ? "Use this packet as one input to a separate explicit stable release issue before any npm latest promotion or GitHub Release."
-            : "Produce the missing public-safe evidence or update docs before treating 1.0 as ready."
+            ? "Use this packet as one input to a separate explicit stable release issue before any npm dist-tag promotion or GitHub Release."
+            : "Produce the missing public-safe evidence or update docs before treating this release candidate as generally ready."
     };
     writeFileSync(readinessManifestPath, `${JSON.stringify(report, null, 2)}\n`);
     return report;
@@ -101,8 +102,7 @@ function validateDocsTruth(rootDir) {
     return check(Boolean(surfaces.every((content) => content
         && /loo release general-readiness/i.test(content)
         && /fresh npm/i.test(content)
-        && /agent dogfood/i.test(content)
-        && /1\.0/i.test(content))), "README, VISION, and release runbook point to the 1.0 general-readiness gate");
+        && /agent dogfood/i.test(content))), "README, VISION, and release runbook point to the general-readiness gate");
 }
 function validateFreshNpmEvidence(path, expected) {
     if (!path || !existsSync(path)) {
@@ -230,6 +230,14 @@ function readString(input, key) {
     const value = input[key];
     return typeof value === "string" ? value : null;
 }
+function formatReleaseLabel(expectedPackage, packageVersion) {
+    if (!expectedPackage || !packageVersion)
+        return "the current package release";
+    const safePackageVersion = /^[0-9A-Za-z.+-]{1,80}$/.test(packageVersion)
+        ? packageVersion
+        : "untrusted-version";
+    return `${expectedPackage} (${safePackageVersion})`;
+}
 function readNestedString(input, path) {
     const value = readNested(input, path);
     return typeof value === "string" ? value : null;

package/dist/packages/cli/src/index.js

@@ -401,6 +401,8 @@ async function main() {
         console.log(JSON.stringify(report, null, 2));
         if (parsed.strict && !report.ok)
             process.exitCode = 1;
+        if (parsed.gatewayReadyStrict && !report.publishedSmokeReady)
+            process.exitCode = 1;
         return;
     }
     if (command === "openclaw" && args[0] === "live-control-smoke") {
@@ -1169,7 +1171,7 @@ function printGeneralReleaseReadinessHelp() {
         "Usage:",
         "  loo release general-readiness --evidence-dir path [--fresh-npm-evidence path] [--agent-dogfood-evidence path] [--now iso] [--strict]",
         "",
-        "Writes a public-safe 1.0 general-release readiness packet without performing release actions.",
+        "Writes a public-safe general-release readiness packet for the current package version without performing release actions.",
         "",
         "Required evidence:",
         "  --fresh-npm-evidence points to a public-safe `loo openclaw published-smoke` report with clean-profile gateway status ready.",
@@ -1179,19 +1181,26 @@ function printGeneralReleaseReadinessHelp() {
         "  --strict exits non-zero until docs, skill/playbook, M9 scenarios, fresh npm proof, and agent dogfood proof are complete.",
         "",
         "Safety boundary:",
-        "  The command does not publish npm, does not move npm latest, does not create a GitHub Release, does not run live Codex control, and does not perform desktop GUI mutation."
+        "  The command does not publish npm, does not move npm dist-tags, does not create a GitHub Release, does not run live Codex control, and does not perform desktop GUI mutation."
     ].join("\n"));
 }
 function printOpenClawPublishedSmokeHelp() {
     console.log([
         "Usage:",
-        "  loo openclaw published-smoke --evidence-dir path --dogfood-report path --tool-smoke-report path [--configured-tool-smoke-report path] [--npm-install-diagnostic-report path] [--registry-version version] [--registry-beta-version version] [--root path] [--now iso] [--strict]",
+        "  loo openclaw published-smoke --evidence-dir path --dogfood-report path --tool-smoke-report path [--configured-tool-smoke-report path] [--npm-install-diagnostic-report path] [--registry-version version] [--registry-beta-version version] [--root path] [--now iso] [--strict] [--gateway-ready-strict]",
         "",
-        "Writes a public-safe summary of the published npm beta install path and gateway setup state.",
+        "Writes a public-safe summary of the published npm package path for the expected dist-tag and gateway setup state.",
         "",
         "This command consumes sanitized reports from `loo openclaw dogfood` and `loo openclaw tool-smoke`.",
         "Optional `--configured-tool-smoke-report` records a separately named configured-profile gateway proof without marking the fresh published profile ready.",
         "Optional `--npm-install-diagnostic-report` records public-safe npm selector drift and tarball fallback proof without storing raw npm output.",
+        "",
+        "Strict mode:",
+        "  --strict exits non-zero only when ok/packagePathOk is false; it is package-path strict.",
+        "  --gateway-ready-strict exits non-zero unless publishedSmokeReady is true for the clean published profile.",
+        "  With both flags, any failed package-path or clean-profile gateway-ready condition exits non-zero.",
+        "  A configured gateway proof is recorded separately and never substitutes for fresh-profile gateway readiness.",
+        "",
         "It does not run npm install, does not call OpenClaw, does not run live Codex control, and does not mutate a desktop GUI."
     ].join("\n"));
 }
@@ -2205,7 +2214,7 @@ function parseOpenClawToolSmokeArgs(input) {
     return parsed;
 }
 function parseOpenClawPublishedSmokeArgs(input) {
-    const parsed = { strict: false };
+    const parsed = { strict: false, gatewayReadyStrict: false };
     for (let index = 0; index < input.length; index += 1) {
         const arg = input[index];
         if (arg === "--evidence-dir") {
@@ -2238,6 +2247,9 @@ function parseOpenClawPublishedSmokeArgs(input) {
         else if (arg === "--strict") {
             parsed.strict = true;
         }
+        else if (arg === "--gateway-ready-strict") {
+            parsed.gatewayReadyStrict = true;
+        }
         else {
             throw new Error(`Unknown openclaw published-smoke option: ${arg}`);
         }
@@ -2256,7 +2268,8 @@ function parseOpenClawPublishedSmokeArgs(input) {
         toolSmokeReportPath: parsed.toolSmokeReportPath,
         configuredToolSmokeReportPath: parsed.configuredToolSmokeReportPath,
         npmInstallDiagnosticReportPath: parsed.npmInstallDiagnosticReportPath,
-        strict: parsed.strict
+        strict: parsed.strict,
+        gatewayReadyStrict: parsed.gatewayReadyStrict
     };
 }
 function parseOpenClawLiveControlSmokeArgs(input) {

package/dist/packages/cli/src/openclaw-tool-smoke.js

@@ -107,7 +107,13 @@ export function runOpenClawToolSmoke(options = {}) {
                 tokenBudget,
                 desktopFallbackCoherence: options.desktopFallbackCoherence
             });
-            if (toolName === "loo_describe_session" || toolName === "loo_expand_session" || toolName === "loo_codex_control_dry_run" || toolName === "loo_codex_desktop_coherence" || toolName === "loo_codex_desktop_fallback_status") {
+            if (toolName === "loo_describe_ref"
+                || toolName === "loo_describe_session"
+                || toolName === "loo_expand_session"
+                || toolName === "loo_codex_control_dry_run"
+                || toolName === "loo_codex_resume_thread"
+                || toolName === "loo_codex_desktop_coherence"
+                || toolName === "loo_codex_desktop_fallback_status") {
                 if (!args) {
                     blockers.push("openclaw_tool_smoke_missing_thread_ref");
                     continue;
@@ -413,6 +419,8 @@ function sanitizeEvidencePath(evidencePath) {
 function buildToolArgs(params) {
     if (params.toolName === "loo_search_sessions")
         return { query: params.query, limit: 3 };
+    if (params.toolName === "loo_describe_ref")
+        return params.threadId ? { source_ref: `codex_thread:${params.threadId}` } : null;
     if (params.toolName === "loo_describe_session")
         return params.threadId ? { thread_id: params.threadId } : null;
     if (params.toolName === "loo_expand_session") {
@@ -560,6 +568,12 @@ function buildToolArgs(params) {
             message: CONTROL_DRY_RUN_MESSAGE
         } : null;
     }
+    if (params.toolName === "loo_codex_resume_thread") {
+        return params.threadId ? {
+            thread_id: params.threadId,
+            dry_run: true
+        } : null;
+    }
     return {};
 }
 const TOOL_SMOKE_NOW = "2026-07-01T12:00:00.000Z";
@@ -794,7 +808,7 @@ function summarizeInvocation(toolName, call, requestArgs = {}) {
         if (tokenBudget !== undefined)
             summary.tokenBudget = tokenBudget;
     }
-    if (toolName === "loo_codex_control_dry_run") {
+    if (toolName === "loo_codex_control_dry_run" || toolName === "loo_codex_resume_thread") {
         const upstreamBlocked = blockers.length > 0;
         const dryRunOutput = details ?? output;
         summary.live = booleanPath(dryRunOutput, ["live"]);
@@ -813,7 +827,11 @@ function summarizeInvocation(toolName, call, requestArgs = {}) {
             summary.method = method;
         if (action)
             summary.action = action;
-        if (!upstreamBlocked && (summary.live !== false || !approvalAuditId || !paramsHash || !messageHash)) {
+        const messageHashRequired = action === "codex_send_message"
+            || action === "codex_steer_thread"
+            || method === "turn/start"
+            || method === "turn/steer";
+        if (!upstreamBlocked && (summary.live !== false || !approvalAuditId || !paramsHash || (messageHashRequired && !messageHash))) {
             blockers.push("openclaw_control_dry_run_not_proven");
         }
     }

package/dist/packages/cli/src/published-package-smoke.js

@@ -2,6 +2,13 @@ import { existsSync, mkdirSync, readFileSync, writeFileSync } from "node:fs";
 import { dirname, join, resolve } from "node:path";
 import { fileURLToPath } from "node:url";
 import { PACKAGE_NAME, distTagForVersion, matchingRegistryStatus, mismatchedRegistryStatus } from "./dist-tag.js";
+const READINESS_SEMANTICS = Object.freeze({
+    okField: "packagePathOk",
+    strictModeExitsOn: "packagePathOk_false",
+    gatewayReadyStrictExitsOn: "publishedSmokeReady_false",
+    cleanProfileGatewayReadyField: "publishedSmokeReady",
+    configuredGatewayProofSeparate: true
+});
 export function createPublishedPackageSmokeReport(options) {
     const rootDir = options.rootDir
         ? resolve(options.rootDir)
@@ -69,6 +76,7 @@ export function createPublishedPackageSmokeReport(options) {
         ok: packagePathOk,
         publishedSmokeReady: packagePathOk && toolSmokeReady,
         packagePathOk,
+        readinessSemantics: READINESS_SEMANTICS,
         publicSafe: true,
         localOnly: true,
         dryRun: true,
@@ -118,7 +126,7 @@ export function createPublishedPackageSmokeReport(options) {
             "tokens, credentials, API keys, cookies",
             "private customer data"
         ],
-        proofBoundary: `This published package smoke report summarizes public-safe ${expectedDistTag} install and gateway setup evidence only; it does not run live Codex control, mutate a desktop GUI, publish npm, create a GitHub Release, store raw npm output, or store raw OpenClaw gateway output.`
+        proofBoundary: `This published package smoke report summarizes public-safe ${expectedDistTag} install and gateway setup evidence only. ok/packagePathOk are package-path claims; publishedSmokeReady is the clean-profile gateway-ready claim. This command does not run live Codex control, mutate a desktop GUI, publish npm, create a GitHub Release, store raw npm output, or store raw OpenClaw gateway output.`
     };
     if (options.evidenceDir)
         writePublishedPackageSmokeReport(report, options.evidenceDir);

package/dist/packages/openclaw-plugin/src/index.js

@@ -7,7 +7,7 @@ import { createLooToolDeclarations, executeLooToolForOpenClaw, createLooTools }
 export const pluginMetadata = {
     id: "lossless-openclaw-orchestrator",
     name: "Lossless OpenClaw Orchestrator",
-    description: "Control and collaborate with local Codex sessions through OpenClaw using local indexing, bounded recall, and approval-gated controls.",
+    description: "Collaborate with local Codex sessions through OpenClaw using local indexing, prepared-state recall, bounded expansion, and approval-gated dry-run/control boundaries.",
     kind: "tool",
     mcp: {
         command: "loo-mcp-server",

package/docs/BETA_RELEASE_RUNBOOK.md

@@ -321,10 +321,11 @@ A release candidate may be announced internally when all of these are true:
 - no public artifact contains raw Codex JSONL, local SQLite databases, raw
   prompts, screenshots, credentials, tokens, or private transcripts
 
-## 1.0 General Readiness Gate
+## Stable General Readiness Gate
 
-The beta train can publish scoped prereleases without claiming 1.0. A 1.0
-candidate must also pass the deeper [Release Checklist](RELEASE_CHECKLIST.md).
+The beta train can publish scoped prereleases without claiming stable/general
+readiness. A stable candidate must also pass the deeper
+[Release Checklist](RELEASE_CHECKLIST.md).
 Run candidate gates before publication, then run fresh npm `@latest` and agent
 dogfood evidence after publication before closing the stable issue. The
 user-facing post-publish command is `loo release general-readiness`; the
@@ -338,13 +339,14 @@ node ./dist/packages/cli/src/index.js release general-readiness \
   --strict
 ```
 
-This post-publish gate is intentionally stricter than a beta first-run classifier:
-`gateway_setup_required` can be acceptable beta onboarding evidence, but it is
-not enough for 1.0. The stable gate requires a fresh npm install, clean-profile
-OpenClaw load, agent dogfood through gateway tools, and docs truth. If resume,
-steer, or interrupt have not passed live proof on disposable threads, the
-release copy must exclude broad live control and name only the proven live send
-path.
+This post-publish gate is intentionally stricter than a beta first-run
+classifier: `gateway_setup_required` can be acceptable beta onboarding evidence,
+but it is not enough for a stable/general readiness claim. The stable gate
+requires a fresh npm install, clean-profile OpenClaw load, clean-profile gateway
+tool-smoke readiness, agent dogfood through gateway tools, and docs truth. If
+resume, steer, or interrupt have not passed live proof on disposable threads,
+the release copy must exclude broad live control and name only the proven live
+send path.
 
 ## Publication Approval Gates
 
@@ -381,8 +383,11 @@ separate operations are actually approved and executed.
 Record `npm dist-tag ls lossless-openclaw-orchestrator` in the release evidence
 after every npm publication. Stable releases publish with
 `npm publish --tag latest`; public betas publish with `npm publish --tag beta`;
-release candidates publish with `npm publish --tag next`. The first stable release must move `latest` to the stable version and keep beta and other
-prereleases on prerelease tags. Do not publish a fake stable package just to move a dist-tag. Release candidates must publish with `npm publish --tag next`;
+release candidates publish with `npm publish --tag next`. The stable channel
+currently points at `1.2.2`; future stable releases move `latest` only after the
+separate stable-promotion gate proves the exact candidate. Keep beta and other
+prereleases on prerelease tags. Do not publish a fake stable package just to
+move a dist-tag. Release candidates must publish with `npm publish --tag next`;
 RC branches also carry `package.json` `publishConfig.tag` set to `next` as a
 fail-closed guard against accidental untagged publication. Stable branches carry
 `package.json` `publishConfig.tag` set to `latest`. Do not run untagged

package/docs/CLAIM_AUDIT.md

@@ -1,10 +1,10 @@
-# Public Beta Claim Audit
+# Public Claim Audit
 
-## Allowed Public Beta Claim
+## Allowed Stable 1.2.2 Claim
 
-Control and collaborate with local Codex sessions through OpenClaw using local indexing, bounded recall, and approval-gated controls.
+Collaborate with local Codex sessions through OpenClaw using local indexing, prepared-state recall, bounded expansion, and approval-gated dry-run/control boundaries.
 
-This claim is limited to the Codex beta path that has tests and local smoke coverage: indexing, search, describe, bounded expansion, read-only LCM peer recall, Codex direct protocol diagnostics, dry-run approval audits, and read-only CUA/Peekaboo readiness.
+This claim is limited to the Codex stable path that has tests and local smoke coverage: indexing, search, describe, prepared-state cards/inbox, summary leaves, bounded expansion, read-only LCM peer recall, Codex direct protocol diagnostics, dry-run approval audits, and read-only CUA/Peekaboo readiness.
 
 When a release candidate is scoped to read/search/describe/expand plus dry-run
 control only, use `--claim-scope codex-read-search-expand-dry-run` on release
@@ -74,8 +74,11 @@ blockers instead of allowing a working-app claim.
 ## npm dist-tag policy
 
 Install stable releases through the `latest` dist-tag, public betas through the
-`beta` dist-tag, and release candidates through `next`. The first stable release moves `latest` to `1.0.0` only after the separate stable-promotion gate
-proves the exact candidate. Keep beta and other prereleases on prerelease tags. Do not publish a fake stable package just to move a dist-tag.
+`beta` dist-tag, and release candidates through `next`. The stable channel
+currently points at `1.2.2`; future stable releases move `latest` only after the
+separate stable-promotion gate proves the exact candidate. Keep beta and other
+prereleases on prerelease tags. Do not publish a fake stable package just to
+move a dist-tag.
 
 ## Release Checklist
 

package/docs/RELEASE_CHECKLIST.md

@@ -52,9 +52,9 @@ Every beta, RC, and stable release must have public-safe evidence for:
 - GitHub issue/tracker updates with evidence path and proof boundary
 - no open PRs or release-blocking issues for the claimed tier
 
-## 1.0 General Release
+## Stable General Release
 
-For 1.0, the release must additionally prove:
+For a stable/general release, the release must additionally prove:
 
 - fresh npm stable install from the registry, not a linked repo checkout or a
   beta/RC substitute
@@ -63,8 +63,8 @@ For 1.0, the release must additionally prove:
 - if fresh-profile gateway credentials are missing, published-smoke evidence
   must classify the blocker as setup-required and show token generation,
   env-ref onboarding, gateway status, and fresh-profile tool-smoke commands
-  without storing raw tokens; this remains a 1.0 blocker until tool-smoke is
-  actually ready
+  without storing raw tokens; this remains a stable-readiness blocker until
+  clean-profile tool-smoke is actually ready
 - first-class agent skill/playbook is packaged and current
 - agent dogfood completes the core workflow through gateway tools:
   doctor, search, describe, expand, plan/final/touched-file lookup, recommend,
@@ -75,8 +75,8 @@ For 1.0, the release must additionally prove:
 - live control claims name the exact control matrix that passed
 
 If resume, steer, or interrupt have not passed live proof on disposable threads,
-the 1.0 claim must exclude broad live control and say only the proven live send
-path is available.
+the stable/general release claim must exclude broad live control and say only the
+proven live send path is available.
 
 ## npm Dist-Tag Boundary
 

package/docs/RELEASE_NOTES_1.2.1.md

@@ -0,0 +1,127 @@
+# Release Notes 1.2.1
+
+`1.2.1` is a patch release for the LCO 1.2 prepared-state sprint and
+Codex-first local orchestration. It publishes the OpenClaw facade dogfood fix
+from #497 / #498 to the stable npm `latest` channel without widening the 1.2
+claim boundary.
+
+This release is focused on local Codex sessions. Prepared state remains an
+advisory local derived cache, not source authority for PR, CI, release,
+runtime, customer, or business truth.
+
+## What Changed
+
+- Fixes the OpenClaw facade smoke validator so `loo_codex_resume_thread`
+  dry-run proof accepts the actual resume packet shape: `live: false`,
+  `approvalAuditId`, `paramsHash`, `method: "thread/resume"`, and
+  `action: "codex_resume_thread"`.
+- Keeps message hashes required for message-carrying send/steer dry-run
+  proofs such as `loo_codex_control_dry_run` with `turn/start` or
+  `turn/steer`.
+- Adds regression coverage proving resume dry-run proof does not require a
+  message hash while send-message dry-runs still fail closed without one.
+- Carries forward additive prepared-state storage for source events, source
+  ranges, summary leaves, summary edges, prepared cards, watcher observations,
+  hook capture packets, and state-prep jobs.
+- Carries forward deterministic summary leaves from user prompts, proposed
+  plans, finals, closeout envelopes, touched-file metadata, tool-call metadata,
+  and compaction markers while ignoring huge raw tool-call payloads by default.
+- Carries forward bounded summary expansion with source ranges, max-depth and
+  max-node limits, cycle rejection, and explicit omission markers.
+- Carries forward prepared cards and prepared inbox routing with freshness,
+  confidence, privacy class, source coverage, authority coverage, and
+  stale/partial/unknown downgrades.
+- Carries forward persisted watcher observations and an execute-false local
+  attention queue for safe advisory automation.
+- Carries forward hook sidecar commands for closeout capture, state prep, and
+  compaction marker capture without opening transcript paths by default.
+- Carries forward OpenClaw gateway dogfood coverage for the prepared-state
+  workflow.
+- Carries forward optional local model compaction spike gates and a
+  Codex-native compaction-summary capture proposal without claiming true native
+  capture.
+- Carries forward semantic lifecycle states for prepared cards and prepared
+  inbox routing: `completed`, `blocked_missing_info`, `waiting_approval`,
+  `watching_external_check`, `needs_resume`, `dirty_worktree_handoff`,
+  `ready_for_review`, `stale_or_partial`, and `unknown_lifecycle`.
+- Carries forward the shared core lifecycle registry, MCP tool schema,
+  OpenClaw plugin manifests, and OpenClaw gateway smoke validation.
+- Carries forward deterministic lifecycle reason codes, lifecycle-aware next
+  actions, and urgency ranking for advisory prepared cards.
+- Carries forward the completed-card summary counter so finished lanes remain
+  visible in prepared-card summaries.
+- Carries forward lifecycle classification hardening so generic words such as
+  `resume`, `monitor`, and `ci` do not become lifecycle states without
+  operator-action context.
+- Carries forward completed prepared-card target coverage so a fresh public
+  completed card counts as target coverage `ok` and does not make
+  `loo_prepared_state_status` report stale/partial coverage for a fully
+  materialized completed lane.
+- Carries forward stale, partial, unknown, unsafe-row, and stale-freshness
+  downgrades for incomplete or unsafe prepared-state evidence.
+- Carries forward the #160 desktop proof-action release boundary:
+  `loo_desktop_proof_action` / `loo desktop proof-action` validates the
+  CUA Driver TextEdit scratch proof gate and does not prove generic GUI
+  mutation.
+  The proof action still requires exact backend, target app, target window, action hash, approval ref, permission state, scratch file path, and `execute: true` before the backend can run.
+  Generic gateway invocation without exact proof args fails closed. The desktop
+  proof action keeps the same proof boundary as beta.35.
+- Carries forward strict OpenClaw gateway result handling: plugin output with
+  `output.details.ok: false` is reported as
+  `openclaw_tool_result_not_ok:<tool>` rather than successful tool proof.
+
+## Current Claim Scope
+
+Allowed stable claim:
+
+> Local prepared Codex state and summary-leaf recall for OpenClaw/Eva, including
+> semantic prepared-card lifecycle routing, prepared inbox prioritization,
+> bounded summary expansion, visible Codex sidebar inventory, hook sidecar
+> foundations, watcher observations, and approval-gated start-thread proof
+> packets without raw transcript reads.
+
+The stable channel means the scoped prepared-state and cockpit-management
+surface is ready as a public local-Codex release. It does not broaden the
+control, GUI, Claude, customer, or enterprise-security proof boundary.
+
+## Release Gate Notes
+
+- Parent 1.2 tracker: #405.
+- GA assurance tracker: #478.
+- Patch-release issue: #500.
+- Facade dogfood bug: #497.
+- Patch PRs: #498 and the 1.2.1 release PR.
+- Baseline stable release: `v1.2.0`.
+- Candidate package: `lossless-openclaw-orchestrator@1.2.1`.
+- Expected npm dist-tag: `latest`.
+- Expected git tag: `v1.2.1`.
+- Required stable gates: focused OpenClaw tool-smoke tests, release claim
+  audit, build/typecheck, `npm pack --dry-run`, release bundle/status checks,
+  GitHub CI, CodeQL, current-head review threads clear, npm publish to
+  `latest`, GitHub release, and post-publish finalization status.
+- Bundle/status/finalization dry-run checks do not publish to npm and do not create a GitHub Release.
+- Working-app status example:
+  `loo release status --claim-scope codex-working-app-proof --runtime-proof-dir <path> --approved-live-control-evidence <path> --npm-publish-approval-evidence <path> --github-release-approval-evidence <path> --candidate-sha <sha> --github-ci-evidence <path> --codeql-evidence <path> --evidence-dir <path> --strict`
+- Reduced-scope status example:
+  `loo release status --claim-scope codex-read-search-expand-dry-run --npm-publish-approval-evidence <path> --github-release-approval-evidence <path> --candidate-sha <sha> --github-ci-evidence <path> --codeql-evidence <path> --evidence-dir <path> --strict`
+- `approved_live_control_smoke_missing` remains the expected blocker when a
+  working-app or live-control claim is attempted without approved live-control
+  smoke evidence for the exact candidate SHA.
+
+## Explicit Non-Claims
+
+No new live Codex control smoke is run by this release.
+It does not run generic GUI mutation and does not run Codex GUI mutation.
+No automatic gateway authorization.
+No broad gateway scope approval. No prompt typing. No clicking. No arbitrary app control.
+No screenshots or videos are part of the public release evidence.
+Claude Code remains an adapter stub, not an adapter-equivalence claim.
+No true Codex compaction-summary capture.
+No raw model compaction by default and no default model access to raw transcript
+or current `safe_text`.
+No raw transcript upload and no OpenClaw LCM merge.
+No source-store mutation.
+No Notion, support-control, Stripe, or Company Brain P1 adapter proof.
+No cloud sync.
+No unattended desktop takeover.
+No release-grade enterprise security or customer-ready security claim.

package/docs/RELEASE_NOTES_1.2.2.md

@@ -0,0 +1,94 @@
+# Release Notes 1.2.2
+
+`1.2.2` is a patch release for the LCO 1.2 stable train and Codex-first local orchestration.
+It publishes the readiness-smoke semantics clarification from
+#494 / #499 to the npm `latest` channel without widening the 1.2 claim
+boundary.
+
+This release is focused on local Codex sessions. Prepared state remains an
+advisory local derived cache, not source authority for PR, CI, release,
+runtime, customer, or business truth.
+
+## What Changed
+
+- Clarifies `loo openclaw published-smoke` strictness semantics:
+  `ok` / `packagePathOk` are package-path claims, while
+  `publishedSmokeReady` is the clean-profile gateway-ready claim.
+- Adds `--gateway-ready-strict` so operators and CI can explicitly fail when a
+  fresh published profile still needs gateway credentials or device setup.
+- Documents the combined `--strict` plus `--gateway-ready-strict` behavior:
+  either a package-path failure or clean-profile gateway-readiness failure exits
+  non-zero.
+- Hardens the public `loo release general-readiness` proof-boundary label so an
+  unexpected package version string cannot inject uncontrolled text into the
+  public proof boundary.
+- Freezes the `readinessSemantics` metadata object emitted by
+  `published-smoke`, keeping machine-readable exit semantics stable for
+  release scripts and audits.
+- Carries forward the 1.2.1 facade smoke fix for resume dry-run proof, including
+  the distinction between resume packets and message-carrying send/steer
+  packets.
+- Carries forward the #160 desktop proof-action release boundary:
+  `loo_desktop_proof_action` / `loo desktop proof-action` validates the
+  CUA Driver TextEdit scratch proof gate and does not prove generic GUI
+  mutation.
+  The proof action still requires exact backend, target app, target window, action hash, approval ref, permission state, scratch file path, and `execute: true` before the backend can run.
+  Generic gateway invocation without exact proof args fails closed. The desktop
+  proof action keeps the same proof boundary as beta.35.
+- Carries forward strict OpenClaw gateway result handling: plugin output with
+  `output.details.ok: false` is reported as
+  `openclaw_tool_result_not_ok:<tool>` rather than successful tool proof.
+
+## Current Claim Scope
+
+Allowed stable claim:
+
+> Collaborate with local Codex sessions through OpenClaw using local indexing,
+> prepared-state recall, bounded expansion, and approval-gated dry-run/control
+> boundaries.
+
+The stable channel means the scoped prepared-state and cockpit-management
+surface is ready as a public local-Codex release. It does not broaden the
+control, GUI, Claude, customer, or enterprise-security proof boundary.
+
+## Release Gate Notes
+
+- Parent 1.2 tracker: #405.
+- GA assurance tracker: #478.
+- Patch-release issue: #503.
+- Readiness-semantics issue: #494.
+- Patch PRs: #499 and the 1.2.2 release PR.
+- Baseline stable release: `v1.2.1`.
+- Candidate package: `lossless-openclaw-orchestrator@1.2.2`.
+- Expected npm dist-tag: `latest`.
+- Expected git tag: `v1.2.2`.
+- Required stable gates: focused release-smoke tests, release claim audit,
+  build/typecheck, `npm pack --dry-run`, release bundle/status checks, GitHub
+  CI, CodeQL, current-head review threads clear, npm publish to `latest`,
+  GitHub Release, and post-publish finalization status.
+- Bundle/status/finalization dry-run checks do not publish to npm and will not create a GitHub Release.
+- Working-app status example:
+  `loo release status --claim-scope codex-working-app-proof --runtime-proof-dir <path> --approved-live-control-evidence <path> --npm-publish-approval-evidence <path> --github-release-approval-evidence <path> --candidate-sha <sha> --github-ci-evidence <path> --codeql-evidence <path> --evidence-dir <path> --strict`
+- Reduced-scope status example:
+  `loo release status --claim-scope codex-read-search-expand-dry-run --npm-publish-approval-evidence <path> --github-release-approval-evidence <path> --candidate-sha <sha> --github-ci-evidence <path> --codeql-evidence <path> --evidence-dir <path> --strict`
+- `approved_live_control_smoke_missing` remains the expected blocker when a
+  working-app or live-control claim is attempted without approved live-control
+  smoke evidence for the exact candidate SHA.
+
+## Explicit Non-Claims
+
+No new live Codex control smoke is run by this release.
+It does not run generic GUI mutation and does not run Codex GUI mutation.
+No automatic gateway authorization.
+No broad gateway scope approval. No prompt typing. No clicking. No arbitrary app control.
+No screenshots or videos are part of the public release evidence.
+Claude Code remains an adapter stub, not an adapter-equivalence claim.
+No true Codex compaction-summary capture.
+No raw model compaction by default and no default model access to raw transcript
+or current `safe_text`.
+No raw transcript upload and no OpenClaw LCM merge.
+No source-store mutation.
+No Notion, support-control, Stripe, or Company Brain P1 adapter proof.
+No cloud sync.
+No unattended desktop takeover.
+No release-grade enterprise security or customer-ready security claim.

package/docs/SETUP.md

@@ -396,6 +396,10 @@ OpenClaw plugin installs but tools are missing
 OpenClaw gateway tool smoke reports credential or device blockers
 
 - Treat this as first-run gateway setup, not a package failure.
+- In `loo openclaw published-smoke`, `ok`/`packagePathOk` prove package-path
+  health only. `publishedSmokeReady` is the clean-profile gateway-ready claim.
+- A configured gateway proof is useful local evidence, but it does not satisfy
+  fresh-profile gateway readiness.
 - Use the recovery commands returned by `loo openclaw published-smoke` or
   `loo openclaw tool-smoke`.
 

package/openclaw.plugin.json

@@ -1,8 +1,8 @@
 {
   "id": "lossless-openclaw-orchestrator",
   "name": "Lossless OpenClaw Orchestrator",
-  "description": "Control and collaborate with local Codex sessions through OpenClaw using local indexing, bounded recall, and approval-gated controls.",
-  "version": "1.2.0",
+  "description": "Collaborate with local Codex sessions through OpenClaw using local indexing, prepared-state recall, bounded expansion, and approval-gated dry-run/control boundaries.",
+  "version": "1.2.2",
   "kind": "tool",
   "tools": {
     "prefix": "loo_"

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "lossless-openclaw-orchestrator",
-  "version": "1.2.0",
-  "description": "Index, search, and control local Codex sessions through OpenClaw with approval-gated safety; Claude Code remains an experimental adapter stub.",
+  "version": "1.2.2",
+  "description": "Index, search, and prepare local Codex sessions for OpenClaw with approval-gated dry-run/control boundaries.",
   "type": "module",
   "license": "PolyForm-Noncommercial-1.0.0",
   "private": false,

package/packages/cli/src/general-release-readiness.ts

@@ -74,6 +74,7 @@ export function createGeneralReleaseReadiness(options: GeneralReleaseReadinessOp
   const packageVersion = readString(packageJson, "version");
   const expectedDistTag = distTagForVersion(packageVersion ?? "");
   const expectedPackage = packageName ? `${packageName}@${expectedDistTag}` : null;
+  const releaseLabel = formatReleaseLabel(expectedPackage, packageVersion);
   const freshNpmEvidence = resolveEvidencePath(evidenceDir, options.freshNpmEvidence);
   const agentDogfoodEvidence = resolveEvidencePath(evidenceDir, options.agentDogfoodEvidence);
   const checks: Record<string, GeneralReleaseReadinessCheck> = {
@@ -107,10 +108,10 @@ export function createGeneralReleaseReadiness(options: GeneralReleaseReadinessOp
       liveCodexControlRun: false,
       desktopGuiActionRun: false
     },
-    proofBoundary: "This gate defines and validates 1.0 general-release readiness evidence; it does not publish 1.0, move npm latest, create a GitHub Release, run live Codex control, mutate a GUI, claim Claude parity, or claim enterprise/customer-ready security.",
+    proofBoundary: `This gate defines and validates general-release readiness evidence for ${releaseLabel}; it does not publish npm, move npm dist-tags, create a GitHub Release, run live Codex control, mutate a GUI, claim Claude parity, or claim enterprise/customer-ready security.`,
     nextAction: blockers.length === 0
-      ? "Use this packet as one input to a separate explicit stable release issue before any npm latest promotion or GitHub Release."
-      : "Produce the missing public-safe evidence or update docs before treating 1.0 as ready."
+      ? "Use this packet as one input to a separate explicit stable release issue before any npm dist-tag promotion or GitHub Release."
+      : "Produce the missing public-safe evidence or update docs before treating this release candidate as generally ready."
   };
   writeFileSync(readinessManifestPath, `${JSON.stringify(report, null, 2)}\n`);
   return report;
@@ -163,9 +164,8 @@ function validateDocsTruth(rootDir: string): GeneralReleaseReadinessCheck {
     surfaces.every((content) => content
       && /loo release general-readiness/i.test(content)
       && /fresh npm/i.test(content)
-      && /agent dogfood/i.test(content)
-      && /1\.0/i.test(content))
-  ), "README, VISION, and release runbook point to the 1.0 general-readiness gate");
+      && /agent dogfood/i.test(content))
+  ), "README, VISION, and release runbook point to the general-readiness gate");
 }
 
 function validateFreshNpmEvidence(
@@ -327,6 +327,14 @@ function readString(input: JsonObject, key: string): string | null {
   return typeof value === "string" ? value : null;
 }
 
+function formatReleaseLabel(expectedPackage: string | null, packageVersion: string | null): string {
+  if (!expectedPackage || !packageVersion) return "the current package release";
+  const safePackageVersion = /^[0-9A-Za-z.+-]{1,80}$/.test(packageVersion)
+    ? packageVersion
+    : "untrusted-version";
+  return `${expectedPackage} (${safePackageVersion})`;
+}
+
 function readNestedString(input: JsonObject, path: string[]): string | null {
   const value = readNested(input, path);
   return typeof value === "string" ? value : null;

package/packages/cli/src/index.ts

@@ -423,6 +423,7 @@ async function main() {
     const report = createPublishedPackageSmokeReport(parsed);
     console.log(JSON.stringify(report, null, 2));
     if (parsed.strict && !report.ok) process.exitCode = 1;
+    if (parsed.gatewayReadyStrict && !report.publishedSmokeReady) process.exitCode = 1;
     return;
   }
   if (command === "openclaw" && args[0] === "live-control-smoke") {
@@ -1206,7 +1207,7 @@ function printGeneralReleaseReadinessHelp(): void {
     "Usage:",
     "  loo release general-readiness --evidence-dir path [--fresh-npm-evidence path] [--agent-dogfood-evidence path] [--now iso] [--strict]",
     "",
-    "Writes a public-safe 1.0 general-release readiness packet without performing release actions.",
+    "Writes a public-safe general-release readiness packet for the current package version without performing release actions.",
     "",
     "Required evidence:",
     "  --fresh-npm-evidence points to a public-safe `loo openclaw published-smoke` report with clean-profile gateway status ready.",
@@ -1216,20 +1217,27 @@ function printGeneralReleaseReadinessHelp(): void {
     "  --strict exits non-zero until docs, skill/playbook, M9 scenarios, fresh npm proof, and agent dogfood proof are complete.",
     "",
     "Safety boundary:",
-    "  The command does not publish npm, does not move npm latest, does not create a GitHub Release, does not run live Codex control, and does not perform desktop GUI mutation."
+    "  The command does not publish npm, does not move npm dist-tags, does not create a GitHub Release, does not run live Codex control, and does not perform desktop GUI mutation."
   ].join("\n"));
 }
 
 function printOpenClawPublishedSmokeHelp(): void {
   console.log([
     "Usage:",
-    "  loo openclaw published-smoke --evidence-dir path --dogfood-report path --tool-smoke-report path [--configured-tool-smoke-report path] [--npm-install-diagnostic-report path] [--registry-version version] [--registry-beta-version version] [--root path] [--now iso] [--strict]",
+    "  loo openclaw published-smoke --evidence-dir path --dogfood-report path --tool-smoke-report path [--configured-tool-smoke-report path] [--npm-install-diagnostic-report path] [--registry-version version] [--registry-beta-version version] [--root path] [--now iso] [--strict] [--gateway-ready-strict]",
     "",
-    "Writes a public-safe summary of the published npm beta install path and gateway setup state.",
+    "Writes a public-safe summary of the published npm package path for the expected dist-tag and gateway setup state.",
     "",
     "This command consumes sanitized reports from `loo openclaw dogfood` and `loo openclaw tool-smoke`.",
     "Optional `--configured-tool-smoke-report` records a separately named configured-profile gateway proof without marking the fresh published profile ready.",
     "Optional `--npm-install-diagnostic-report` records public-safe npm selector drift and tarball fallback proof without storing raw npm output.",
+    "",
+    "Strict mode:",
+    "  --strict exits non-zero only when ok/packagePathOk is false; it is package-path strict.",
+    "  --gateway-ready-strict exits non-zero unless publishedSmokeReady is true for the clean published profile.",
+    "  With both flags, any failed package-path or clean-profile gateway-ready condition exits non-zero.",
+    "  A configured gateway proof is recorded separately and never substitutes for fresh-profile gateway readiness.",
+    "",
     "It does not run npm install, does not call OpenClaw, does not run live Codex control, and does not mutate a desktop GUI."
   ].join("\n"));
 }
@@ -2223,6 +2231,7 @@ function parseOpenClawPublishedSmokeArgs(input: string[]): {
   configuredToolSmokeReportPath?: string;
   npmInstallDiagnosticReportPath?: string;
   strict: boolean;
+  gatewayReadyStrict: boolean;
 } {
   const parsed: {
     evidenceDir?: string;
@@ -2235,7 +2244,8 @@ function parseOpenClawPublishedSmokeArgs(input: string[]): {
     configuredToolSmokeReportPath?: string;
     npmInstallDiagnosticReportPath?: string;
     strict: boolean;
-  } = { strict: false };
+    gatewayReadyStrict: boolean;
+  } = { strict: false, gatewayReadyStrict: false };
   for (let index = 0; index < input.length; index += 1) {
     const arg = input[index]!;
     if (arg === "--evidence-dir") {
@@ -2258,6 +2268,8 @@ function parseOpenClawPublishedSmokeArgs(input: string[]): {
       parsed.npmInstallDiagnosticReportPath = requireOptionValue(input[++index], arg);
     } else if (arg === "--strict") {
       parsed.strict = true;
+    } else if (arg === "--gateway-ready-strict") {
+      parsed.gatewayReadyStrict = true;
     } else {
       throw new Error(`Unknown openclaw published-smoke option: ${arg}`);
     }
@@ -2274,7 +2286,8 @@ function parseOpenClawPublishedSmokeArgs(input: string[]): {
     toolSmokeReportPath: parsed.toolSmokeReportPath,
     configuredToolSmokeReportPath: parsed.configuredToolSmokeReportPath,
     npmInstallDiagnosticReportPath: parsed.npmInstallDiagnosticReportPath,
-    strict: parsed.strict
+    strict: parsed.strict,
+    gatewayReadyStrict: parsed.gatewayReadyStrict
   };
 }
 

package/packages/cli/src/openclaw-tool-smoke.ts

@@ -235,7 +235,15 @@ export function runOpenClawToolSmoke(options: OpenClawToolSmokeOptions = {}): Op
         tokenBudget,
         desktopFallbackCoherence: options.desktopFallbackCoherence
       });
-      if (toolName === "loo_describe_session" || toolName === "loo_expand_session" || toolName === "loo_codex_control_dry_run" || toolName === "loo_codex_desktop_coherence" || toolName === "loo_codex_desktop_fallback_status") {
+      if (
+        toolName === "loo_describe_ref"
+        || toolName === "loo_describe_session"
+        || toolName === "loo_expand_session"
+        || toolName === "loo_codex_control_dry_run"
+        || toolName === "loo_codex_resume_thread"
+        || toolName === "loo_codex_desktop_coherence"
+        || toolName === "loo_codex_desktop_fallback_status"
+      ) {
         if (!args) {
           blockers.push("openclaw_tool_smoke_missing_thread_ref");
           continue;
@@ -570,6 +578,7 @@ function buildToolArgs(params: {
   desktopFallbackCoherence?: "fixture" | "omit";
 }): Record<string, unknown> | null {
   if (params.toolName === "loo_search_sessions") return { query: params.query, limit: 3 };
+  if (params.toolName === "loo_describe_ref") return params.threadId ? { source_ref: `codex_thread:${params.threadId}` } : null;
   if (params.toolName === "loo_describe_session") return params.threadId ? { thread_id: params.threadId } : null;
   if (params.toolName === "loo_expand_session") {
     return params.threadId ? { thread_id: params.threadId, profile: params.expandProfile, token_budget: params.tokenBudget } : null;
@@ -708,6 +717,12 @@ function buildToolArgs(params: {
       message: CONTROL_DRY_RUN_MESSAGE
     } : null;
   }
+  if (params.toolName === "loo_codex_resume_thread") {
+    return params.threadId ? {
+      thread_id: params.threadId,
+      dry_run: true
+    } : null;
+  }
   return {};
 }
 
@@ -954,7 +969,7 @@ function summarizeInvocation(
     const tokenBudget = numberPath(summarySource, ["limits", "tokenBudget"]) ?? numberPath(summarySource, ["tokenBudget"]) ?? numberPath(summarySource, ["token_budget"]);
     if (tokenBudget !== undefined) summary.tokenBudget = tokenBudget;
   }
-  if (toolName === "loo_codex_control_dry_run") {
+  if (toolName === "loo_codex_control_dry_run" || toolName === "loo_codex_resume_thread") {
     const upstreamBlocked = blockers.length > 0;
     const dryRunOutput = details ?? output;
     summary.live = booleanPath(dryRunOutput, ["live"]);
@@ -968,7 +983,12 @@ function summarizeInvocation(
     if (messageHash) summary.messageHash = messageHash;
     if (method) summary.method = method;
     if (action) summary.action = action;
-    if (!upstreamBlocked && (summary.live !== false || !approvalAuditId || !paramsHash || !messageHash)) {
+    const messageHashRequired =
+      action === "codex_send_message"
+      || action === "codex_steer_thread"
+      || method === "turn/start"
+      || method === "turn/steer";
+    if (!upstreamBlocked && (summary.live !== false || !approvalAuditId || !paramsHash || (messageHashRequired && !messageHash))) {
       blockers.push("openclaw_control_dry_run_not_proven");
     }
   }

package/packages/cli/src/published-package-smoke.ts

@@ -19,6 +19,13 @@ export type PublishedPackageSmokeReport = {
   ok: boolean;
   publishedSmokeReady: boolean;
   packagePathOk: boolean;
+  readinessSemantics: Readonly<{
+    okField: "packagePathOk";
+    strictModeExitsOn: "packagePathOk_false";
+    gatewayReadyStrictExitsOn: "publishedSmokeReady_false";
+    cleanProfileGatewayReadyField: "publishedSmokeReady";
+    configuredGatewayProofSeparate: true;
+  }>;
   publicSafe: true;
   localOnly: true;
   dryRun: true;
@@ -104,6 +111,14 @@ export type PublishedPackageSmokeReport = {
   proofBoundary: string;
 };
 
+const READINESS_SEMANTICS = Object.freeze({
+  okField: "packagePathOk",
+  strictModeExitsOn: "packagePathOk_false",
+  gatewayReadyStrictExitsOn: "publishedSmokeReady_false",
+  cleanProfileGatewayReadyField: "publishedSmokeReady",
+  configuredGatewayProofSeparate: true
+} as const);
+
 export function createPublishedPackageSmokeReport(options: PublishedPackageSmokeOptions): PublishedPackageSmokeReport {
   const rootDir = options.rootDir
     ? resolve(options.rootDir)
@@ -171,6 +186,7 @@ export function createPublishedPackageSmokeReport(options: PublishedPackageSmoke
     ok: packagePathOk,
     publishedSmokeReady: packagePathOk && toolSmokeReady,
     packagePathOk,
+    readinessSemantics: READINESS_SEMANTICS,
     publicSafe: true,
     localOnly: true,
     dryRun: true,
@@ -220,7 +236,7 @@ export function createPublishedPackageSmokeReport(options: PublishedPackageSmoke
       "tokens, credentials, API keys, cookies",
       "private customer data"
     ],
-    proofBoundary: `This published package smoke report summarizes public-safe ${expectedDistTag} install and gateway setup evidence only; it does not run live Codex control, mutate a desktop GUI, publish npm, create a GitHub Release, store raw npm output, or store raw OpenClaw gateway output.`
+    proofBoundary: `This published package smoke report summarizes public-safe ${expectedDistTag} install and gateway setup evidence only. ok/packagePathOk are package-path claims; publishedSmokeReady is the clean-profile gateway-ready claim. This command does not run live Codex control, mutate a desktop GUI, publish npm, create a GitHub Release, store raw npm output, or store raw OpenClaw gateway output.`
   };
   if (options.evidenceDir) writePublishedPackageSmokeReport(report, options.evidenceDir);
   return report;

package/packages/openclaw-plugin/openclaw.plugin.json

@@ -1,8 +1,8 @@
 {
   "id": "lossless-openclaw-orchestrator",
   "name": "Lossless OpenClaw Orchestrator",
-  "description": "Control and collaborate with local Codex sessions through OpenClaw using local indexing, bounded recall, and approval-gated controls.",
-  "version": "1.2.0",
+  "description": "Collaborate with local Codex sessions through OpenClaw using local indexing, prepared-state recall, bounded expansion, and approval-gated dry-run/control boundaries.",
+  "version": "1.2.2",
   "kind": "tool",
   "tools": {
     "prefix": "loo_"

package/packages/openclaw-plugin/src/index.ts

@@ -18,7 +18,7 @@ import {
 export const pluginMetadata = {
   id: "lossless-openclaw-orchestrator",
   name: "Lossless OpenClaw Orchestrator",
-  description: "Control and collaborate with local Codex sessions through OpenClaw using local indexing, bounded recall, and approval-gated controls.",
+  description: "Collaborate with local Codex sessions through OpenClaw using local indexing, prepared-state recall, bounded expansion, and approval-gated dry-run/control boundaries.",
   kind: "tool",
   mcp: {
     command: "loo-mcp-server",