lossless-openclaw-orchestrator 1.2.1 → 1.2.3

package/README.md

@@ -23,7 +23,7 @@ safe action without rereading raw transcripts.
 | Approval-gated boundaries | Dry-run Codex actions and verify matching audit ids before any live control. |
 | OpenClaw/MCP tools | Use the same local-first recall and approval-bounded surfaces from agent workflows. |
 
-[Setup](docs/SETUP.md) · [Contributing](CONTRIBUTING.md) · [Agent Instructions](AGENTS.md) · [Agent Skill](skills/lossless-openclaw-orchestrator/SKILL.md) · [OpenClaw Plugin](docs/OPENCLAW_PLUGIN.md) · [Security](SECURITY.md) · [Code of Conduct](CODE_OF_CONDUCT.md) · [Vision](VISION.md) · [Privacy](docs/PRIVACY.md) · [Claude Boundary](docs/CLAUDE_ADAPTER_BOUNDARY.md) · [Claim Audit](docs/CLAIM_AUDIT.md) · [Release Notes](docs/RELEASE_NOTES_1.2.1.md) · [1.2.0 Notes](docs/RELEASE_NOTES_1.2.0.md) · [1.1.4 Notes](docs/RELEASE_NOTES_1.1.4.md) · [1.0 Notes](docs/RELEASE_NOTES_1.0.0.md) · [License](LICENSE)
+[Setup](docs/SETUP.md) · [Contributing](CONTRIBUTING.md) · [Agent Instructions](AGENTS.md) · [Agent Skill](skills/lossless-openclaw-orchestrator/SKILL.md) · [OpenClaw Plugin](docs/OPENCLAW_PLUGIN.md) · [Security](SECURITY.md) · [Code of Conduct](CODE_OF_CONDUCT.md) · [Vision](VISION.md) · [Privacy](docs/PRIVACY.md) · [Claude Boundary](docs/CLAUDE_ADAPTER_BOUNDARY.md) · [Claim Audit](docs/CLAIM_AUDIT.md) · [Release Notes](docs/RELEASE_NOTES_1.2.3.md) · [1.2.2 Notes](docs/RELEASE_NOTES_1.2.2.md) · [1.2.1 Notes](docs/RELEASE_NOTES_1.2.1.md) · [1.2.0 Notes](docs/RELEASE_NOTES_1.2.0.md) · [1.1.4 Notes](docs/RELEASE_NOTES_1.1.4.md) · [1.0 Notes](docs/RELEASE_NOTES_1.0.0.md) · [License](LICENSE)
 
 ## Why It Matters
 
@@ -325,7 +325,7 @@ The stable public product is Codex-first local orchestration: index, search,
 describe, expand, prepared-state recall, OpenClaw/MCP tools, and
 approval-gated dry-run/control boundaries.
 
-The 1.2 prepared-state and summary-leaves lane is shipped in stable `1.2.1`.
+The 1.2 prepared-state and summary-leaves lane is shipped in stable `1.2.3`.
 Current launch work is the M11 GA assurance sprint, tracked in GitHub and
 summarized in [VISION.md](VISION.md). Keep sprint and agent-operator details
 there, in [AGENTS.md](AGENTS.md), and in the packaged

package/VISION.md

@@ -12,11 +12,11 @@ The stable product should feel like a local orchestration cockpit: OpenClaw can
 
 The current release-readiness lane is Milestone 11: LCO 1.2.0 GA Assurance And Global Launch Readiness. GitHub tracker [#478](https://github.com/100yenadmin/Lossless-Codex-Orchestrator-LCO/issues/478) and children [#479](https://github.com/100yenadmin/Lossless-Codex-Orchestrator-LCO/issues/479)-[#493](https://github.com/100yenadmin/Lossless-Codex-Orchestrator-LCO/issues/493) own implementation truth; this file owns the product and eval boundary.
 
-The stable 1.0.0, 1.1.0, 1.1.1, 1.1.2, 1.1.3, 1.1.4, 1.2.0, and 1.2.1 packages have shipped on npm `latest` and their GitHub Releases are published. The post-GA Desktop claim-validation lane [#306](https://github.com/100yenadmin/Lossless-Codex-Orchestrator-LCO/issues/306) records that Desktop-visible classification and fallback readiness/status are proven, while actual Codex GUI mutation remains excluded. Desktop parity [#307](https://github.com/100yenadmin/Lossless-Codex-Orchestrator-LCO/issues/307) added the coherence classifier; desktop fallback [#308](https://github.com/100yenadmin/Lossless-Codex-Orchestrator-LCO/issues/308) added the CUA-first and Peekaboo-secondary readiness report. The 1.1 collaboration cockpit [#309](https://github.com/100yenadmin/Lossless-Codex-Orchestrator-LCO/issues/309) is completed proof for read-only collaboration summaries and execute-false next steps, not the current active child-work list.
+The stable 1.0.0, 1.1.0, 1.1.1, 1.1.2, 1.1.3, 1.1.4, 1.2.0, 1.2.1, 1.2.2, and 1.2.3 packages have shipped on npm `latest` and their GitHub Releases are published. The post-GA Desktop claim-validation lane [#306](https://github.com/100yenadmin/Lossless-Codex-Orchestrator-LCO/issues/306) records that Desktop-visible classification and fallback readiness/status are proven, while actual Codex GUI mutation remains excluded. Desktop parity [#307](https://github.com/100yenadmin/Lossless-Codex-Orchestrator-LCO/issues/307) added the coherence classifier; desktop fallback [#308](https://github.com/100yenadmin/Lossless-Codex-Orchestrator-LCO/issues/308) added the CUA-first and Peekaboo-secondary readiness report. The 1.1 collaboration cockpit [#309](https://github.com/100yenadmin/Lossless-Codex-Orchestrator-LCO/issues/309) is completed proof for read-only collaboration summaries and execute-false next steps, not the current active child-work list.
 
 The Codex Autonomy Cockpit [#254](https://github.com/100yenadmin/Lossless-Codex-Orchestrator-LCO/issues/254) and Eva Operating Picture [#255](https://github.com/100yenadmin/Lossless-Codex-Orchestrator-LCO/issues/255) P0 lanes are completed beta foundation, not the current active child-work list. Completed P0 children include shared contracts [#256](https://github.com/100yenadmin/Lossless-Codex-Orchestrator-LCO/issues/256), source authority [#258](https://github.com/100yenadmin/Lossless-Codex-Orchestrator-LCO/issues/258), watcher/resume requests [#259](https://github.com/100yenadmin/Lossless-Codex-Orchestrator-LCO/issues/259), visible Codex map joins [#260](https://github.com/100yenadmin/Lossless-Codex-Orchestrator-LCO/issues/260), deterministic GitHub operating inputs [#264](https://github.com/100yenadmin/Lossless-Codex-Orchestrator-LCO/issues/264)/[#265](https://github.com/100yenadmin/Lossless-Codex-Orchestrator-LCO/issues/265), current-lane source balancing [#269](https://github.com/100yenadmin/Lossless-Codex-Orchestrator-LCO/issues/269), GitHub check-state fidelity [#270](https://github.com/100yenadmin/Lossless-Codex-Orchestrator-LCO/issues/270), cockpit card cleanup [#271](https://github.com/100yenadmin/Lossless-Codex-Orchestrator-LCO/issues/271), and end-to-end Eva cockpit dogfood [#272](https://github.com/100yenadmin/Lossless-Codex-Orchestrator-LCO/issues/272). The sprint brief remains the historical handoff for that P0 work: [docs/sprints/brief-lco-codex-autonomy-cockpit-sprint-2026-07-01.md](docs/sprints/brief-lco-codex-autonomy-cockpit-sprint-2026-07-01.md).
 
-The core Codex recall, M9 handoff paths, Codex Autonomy Cockpit, Eva Operating Picture P0 paths, 1.1 Desktop collaboration cockpit paths, 1.2 prepared-state and summary-leaf paths, release metadata, package/gateway setup proof, docs truth, release gates, public-safe scorecards, post-publish fresh npm `@latest` install proof, and stable publication lanes are no longer the main product gap. The current gap is no-bug-left-behind launch assurance: prove the published `1.2.1` package is installable, discoverable, public-safe, and honest for global users before broad rollout.
+The core Codex recall, M9 handoff paths, Codex Autonomy Cockpit, Eva Operating Picture P0 paths, 1.1 Desktop collaboration cockpit paths, 1.2 prepared-state and summary-leaf paths, release metadata, package/gateway setup proof, docs truth, release gates, public-safe scorecards, post-publish fresh npm `@latest` install proof, and stable publication lanes are no longer the main product gap. The current gap is no-bug-left-behind launch assurance: prove the published `1.2.3` package is installable, discoverable, public-safe, and honest for global users before broad rollout.
 
 The current target is:
 
@@ -38,7 +38,7 @@ The current target is:
 - Keep P1 source adapters, including Notion, support-control, Company Brain, Stripe, dashboard/export, and model summarization, behind separate adapters and proof gates; P0 tools report those sources as `not_configured` instead of fabricating summaries.
 - Use the [source authority profile](docs/SOURCE_AUTHORITY_PROFILE.md) to distinguish "this source returned data" from "this source owns the current truth"; unavailable or cache-only sources must degrade claims to `unknown` or low confidence.
 
-The sprint remains Codex-first, local-first, read-only-first, and public-safe by default. It does not claim full business truth, customer readiness, Claude Code parity, remote sync, generic GUI mutation, unattended desktop control, permission bypass, or enterprise/customer-ready security. npm `latest` promotion and GitHub Release creation are complete for 1.2.1. Desktop-visible classification and fallback readiness/status are proven by #307/#308; actual Codex GUI mutation remains excluded until a future action-bound proof gate records the exact backend, target, action hash, approval, and observation.
+The sprint remains Codex-first, local-first, read-only-first, and public-safe by default. It does not claim full business truth, customer readiness, Claude Code parity, remote sync, generic GUI mutation, unattended desktop control, permission bypass, or enterprise/customer-ready security. npm `latest` promotion and GitHub Release creation are complete for 1.2.3. Desktop-visible classification and fallback readiness/status are proven by #307/#308; actual Codex GUI mutation remains excluded until a future action-bound proof gate records the exact backend, target, action hash, approval, and observation.
 
 What 1.2 should let a local OpenClaw agent do next:
 
@@ -82,13 +82,13 @@ What a local OpenClaw agent can do today:
 - Inspect `authorityCoverage` on operating-picture outputs before trusting GitHub, PLAN_STATE, or future P1 source claims.
 - Classify package and gateway readiness with `loo onboard status`, `loo openclaw dogfood`, `loo openclaw tool-smoke`, and `loo openclaw published-smoke`.
 - Follow the packaged agent skill and M9 dogfood scenario to produce a public-safe recommendation from source refs, bounded expansion, detail lookups, and dry-run audit hashes.
-- Use `loo release general-readiness --strict` to decide whether fresh npm install, clean-profile OpenClaw load, and agent dogfood evidence are enough for a 1.0 claim.
+- Use `loo release general-readiness --strict` to decide whether fresh npm install, clean-profile OpenClaw load, clean-profile gateway readiness, and agent dogfood evidence are enough for a stable/general release claim.
 
 ## Completed Proof: Working App Runtime
 
-Completed proof from M7/M9 remains part of the evidence base. Milestone 7 and the [Working App Proof Sprint](docs/WORKING_APP_PROOF_SPRINT.md) moved LCO beyond reduced-scope dry-run claims by proving installed OpenClaw gateway paths, live `loo_*` calls through the same surface an OpenClaw agent uses, approved live Codex action proof where explicitly claimed, post-action refresh reasoning, action-bound desktop collaboration proof gates, connected local search UI contracts, runtime proof gates, and Claude Code adapter inventory boundaries. M9 added the agent handoff lane, first-class OpenClaw agent usage skill, docs truth pass, agent dogfood scenario, fresh npm clean-profile smoke, and 1.0 readiness gate.
+Completed proof from M7/M9 remains part of the evidence base. Milestone 7 and the [Working App Proof Sprint](docs/WORKING_APP_PROOF_SPRINT.md) moved LCO beyond reduced-scope dry-run claims by proving installed OpenClaw gateway paths, live `loo_*` calls through the same surface an OpenClaw agent uses, approved live Codex action proof where explicitly claimed, post-action refresh reasoning, action-bound desktop collaboration proof gates, connected local search UI contracts, runtime proof gates, and Claude Code adapter inventory boundaries. M9 added the agent handoff lane, first-class OpenClaw agent usage skill, docs truth pass, agent dogfood scenario, fresh npm clean-profile smoke, and general-release readiness gate.
 
-Completed proof does not mean 1.0 or broad automation parity. Generic GUI mutation, Codex GUI mutation, Claude Code parity, cloud sync, unattended takeover, and release-grade enterprise security remain excluded until separate issues and evidence prove them.
+Completed proof does not mean broad automation parity. Generic GUI mutation, Codex GUI mutation, Claude Code parity, cloud sync, unattended takeover, and release-grade enterprise security remain excluded until separate issues and evidence prove them.
 
 ## Primary User Stories
 
@@ -294,7 +294,7 @@ Release candidates follow [docs/BETA_RELEASE_RUNBOOK.md](docs/BETA_RELEASE_RUNBO
 
 ## Proof Boundary
 
-Allowed stable 1.2.1 claim:
+Allowed stable 1.2.3 claim:
 
 > Collaborate with local Codex sessions through OpenClaw using local indexing, prepared-state recall, bounded expansion, and approval-gated dry-run/control boundaries.
 

package/dist/packages/cli/src/general-release-readiness.js

@@ -23,6 +23,7 @@ export function createGeneralReleaseReadiness(options) {
     const packageVersion = readString(packageJson, "version");
     const expectedDistTag = distTagForVersion(packageVersion ?? "");
     const expectedPackage = packageName ? `${packageName}@${expectedDistTag}` : null;
+    const releaseLabel = formatReleaseLabel(expectedPackage, packageVersion);
     const freshNpmEvidence = resolveEvidencePath(evidenceDir, options.freshNpmEvidence);
     const agentDogfoodEvidence = resolveEvidencePath(evidenceDir, options.agentDogfoodEvidence);
     const checks = {
@@ -56,10 +57,10 @@ export function createGeneralReleaseReadiness(options) {
             liveCodexControlRun: false,
             desktopGuiActionRun: false
         },
-        proofBoundary: "This gate defines and validates 1.0 general-release readiness evidence; it does not publish 1.0, move npm latest, create a GitHub Release, run live Codex control, mutate a GUI, claim Claude parity, or claim enterprise/customer-ready security.",
+        proofBoundary: `This gate defines and validates general-release readiness evidence for ${releaseLabel}; it does not publish npm, move npm dist-tags, create a GitHub Release, run live Codex control, mutate a GUI, claim Claude parity, or claim enterprise/customer-ready security.`,
         nextAction: blockers.length === 0
-            ? "Use this packet as one input to a separate explicit stable release issue before any npm latest promotion or GitHub Release."
-            : "Produce the missing public-safe evidence or update docs before treating 1.0 as ready."
+            ? "Use this packet as one input to a separate explicit stable release issue before any npm dist-tag promotion or GitHub Release."
+            : "Produce the missing public-safe evidence or update docs before treating this release candidate as generally ready."
     };
     writeFileSync(readinessManifestPath, `${JSON.stringify(report, null, 2)}\n`);
     return report;
@@ -101,8 +102,7 @@ function validateDocsTruth(rootDir) {
     return check(Boolean(surfaces.every((content) => content
         && /loo release general-readiness/i.test(content)
         && /fresh npm/i.test(content)
-        && /agent dogfood/i.test(content)
-        && /1\.0/i.test(content))), "README, VISION, and release runbook point to the 1.0 general-readiness gate");
+        && /agent dogfood/i.test(content))), "README, VISION, and release runbook point to the general-readiness gate");
 }
 function validateFreshNpmEvidence(path, expected) {
     if (!path || !existsSync(path)) {
@@ -230,6 +230,14 @@ function readString(input, key) {
     const value = input[key];
     return typeof value === "string" ? value : null;
 }
+function formatReleaseLabel(expectedPackage, packageVersion) {
+    if (!expectedPackage || !packageVersion)
+        return "the current package release";
+    const safePackageVersion = /^[0-9A-Za-z.+-]{1,80}$/.test(packageVersion)
+        ? packageVersion
+        : "untrusted-version";
+    return `${expectedPackage} (${safePackageVersion})`;
+}
 function readNestedString(input, path) {
     const value = readNested(input, path);
     return typeof value === "string" ? value : null;

package/dist/packages/cli/src/index.js

@@ -401,6 +401,8 @@ async function main() {
         console.log(JSON.stringify(report, null, 2));
         if (parsed.strict && !report.ok)
             process.exitCode = 1;
+        if (parsed.gatewayReadyStrict && !report.publishedSmokeReady)
+            process.exitCode = 1;
         return;
     }
     if (command === "openclaw" && args[0] === "live-control-smoke") {
@@ -1169,7 +1171,7 @@ function printGeneralReleaseReadinessHelp() {
         "Usage:",
         "  loo release general-readiness --evidence-dir path [--fresh-npm-evidence path] [--agent-dogfood-evidence path] [--now iso] [--strict]",
         "",
-        "Writes a public-safe 1.0 general-release readiness packet without performing release actions.",
+        "Writes a public-safe general-release readiness packet for the current package version without performing release actions.",
         "",
         "Required evidence:",
         "  --fresh-npm-evidence points to a public-safe `loo openclaw published-smoke` report with clean-profile gateway status ready.",
@@ -1179,19 +1181,26 @@ function printGeneralReleaseReadinessHelp() {
         "  --strict exits non-zero until docs, skill/playbook, M9 scenarios, fresh npm proof, and agent dogfood proof are complete.",
         "",
         "Safety boundary:",
-        "  The command does not publish npm, does not move npm latest, does not create a GitHub Release, does not run live Codex control, and does not perform desktop GUI mutation."
+        "  The command does not publish npm, does not move npm dist-tags, does not create a GitHub Release, does not run live Codex control, and does not perform desktop GUI mutation."
     ].join("\n"));
 }
 function printOpenClawPublishedSmokeHelp() {
     console.log([
         "Usage:",
-        "  loo openclaw published-smoke --evidence-dir path --dogfood-report path --tool-smoke-report path [--configured-tool-smoke-report path] [--npm-install-diagnostic-report path] [--registry-version version] [--registry-beta-version version] [--root path] [--now iso] [--strict]",
+        "  loo openclaw published-smoke --evidence-dir path --dogfood-report path --tool-smoke-report path [--configured-tool-smoke-report path] [--npm-install-diagnostic-report path] [--registry-version version] [--registry-beta-version version] [--root path] [--now iso] [--strict] [--gateway-ready-strict]",
         "",
-        "Writes a public-safe summary of the published npm beta install path and gateway setup state.",
+        "Writes a public-safe summary of the published npm package path for the expected dist-tag and gateway setup state.",
         "",
         "This command consumes sanitized reports from `loo openclaw dogfood` and `loo openclaw tool-smoke`.",
         "Optional `--configured-tool-smoke-report` records a separately named configured-profile gateway proof without marking the fresh published profile ready.",
         "Optional `--npm-install-diagnostic-report` records public-safe npm selector drift and tarball fallback proof without storing raw npm output.",
+        "",
+        "Strict mode:",
+        "  --strict exits non-zero only when ok/packagePathOk is false; it is package-path strict.",
+        "  --gateway-ready-strict exits non-zero unless publishedSmokeReady is true for the clean published profile.",
+        "  With both flags, any failed package-path or clean-profile gateway-ready condition exits non-zero.",
+        "  A configured gateway proof is recorded separately and never substitutes for fresh-profile gateway readiness.",
+        "",
         "It does not run npm install, does not call OpenClaw, does not run live Codex control, and does not mutate a desktop GUI."
     ].join("\n"));
 }
@@ -2205,7 +2214,7 @@ function parseOpenClawToolSmokeArgs(input) {
     return parsed;
 }
 function parseOpenClawPublishedSmokeArgs(input) {
-    const parsed = { strict: false };
+    const parsed = { strict: false, gatewayReadyStrict: false };
     for (let index = 0; index < input.length; index += 1) {
         const arg = input[index];
         if (arg === "--evidence-dir") {
@@ -2238,6 +2247,9 @@ function parseOpenClawPublishedSmokeArgs(input) {
         else if (arg === "--strict") {
             parsed.strict = true;
         }
+        else if (arg === "--gateway-ready-strict") {
+            parsed.gatewayReadyStrict = true;
+        }
         else {
             throw new Error(`Unknown openclaw published-smoke option: ${arg}`);
         }
@@ -2256,7 +2268,8 @@ function parseOpenClawPublishedSmokeArgs(input) {
         toolSmokeReportPath: parsed.toolSmokeReportPath,
         configuredToolSmokeReportPath: parsed.configuredToolSmokeReportPath,
         npmInstallDiagnosticReportPath: parsed.npmInstallDiagnosticReportPath,
-        strict: parsed.strict
+        strict: parsed.strict,
+        gatewayReadyStrict: parsed.gatewayReadyStrict
     };
 }
 function parseOpenClawLiveControlSmokeArgs(input) {

package/dist/packages/cli/src/published-package-smoke.js

@@ -2,6 +2,13 @@ import { existsSync, mkdirSync, readFileSync, writeFileSync } from "node:fs";
 import { dirname, join, resolve } from "node:path";
 import { fileURLToPath } from "node:url";
 import { PACKAGE_NAME, distTagForVersion, matchingRegistryStatus, mismatchedRegistryStatus } from "./dist-tag.js";
+const READINESS_SEMANTICS = Object.freeze({
+    okField: "packagePathOk",
+    strictModeExitsOn: "packagePathOk_false",
+    gatewayReadyStrictExitsOn: "publishedSmokeReady_false",
+    cleanProfileGatewayReadyField: "publishedSmokeReady",
+    configuredGatewayProofSeparate: true
+});
 export function createPublishedPackageSmokeReport(options) {
     const rootDir = options.rootDir
         ? resolve(options.rootDir)
@@ -69,6 +76,7 @@ export function createPublishedPackageSmokeReport(options) {
         ok: packagePathOk,
         publishedSmokeReady: packagePathOk && toolSmokeReady,
         packagePathOk,
+        readinessSemantics: READINESS_SEMANTICS,
         publicSafe: true,
         localOnly: true,
         dryRun: true,
@@ -118,7 +126,7 @@ export function createPublishedPackageSmokeReport(options) {
             "tokens, credentials, API keys, cookies",
             "private customer data"
         ],
-        proofBoundary: `This published package smoke report summarizes public-safe ${expectedDistTag} install and gateway setup evidence only; it does not run live Codex control, mutate a desktop GUI, publish npm, create a GitHub Release, store raw npm output, or store raw OpenClaw gateway output.`
+        proofBoundary: `This published package smoke report summarizes public-safe ${expectedDistTag} install and gateway setup evidence only. ok/packagePathOk are package-path claims; publishedSmokeReady is the clean-profile gateway-ready claim. This command does not run live Codex control, mutate a desktop GUI, publish npm, create a GitHub Release, store raw npm output, or store raw OpenClaw gateway output.`
     };
     if (options.evidenceDir)
         writePublishedPackageSmokeReport(report, options.evidenceDir);

package/dist/packages/cli/src/release-preflight.js

@@ -1,8 +1,9 @@
 import { existsSync, mkdirSync, readdirSync, readFileSync, statSync, writeFileSync } from "node:fs";
 import { fileURLToPath } from "node:url";
-import { basename, dirname, extname, join, resolve, sep } from "node:path";
+import { dirname, extname, join, relative, resolve, sep } from "node:path";
 import { excludedClaimsForScope, liveControlExcludedDetail, normalizeReleaseClaimScope, releaseClaimScopeRequiresLiveControl, releaseClaimScopeRequiresWorkingAppRuntimeProof } from "./release-claim-scope.js";
 import { validateWorkingAppRuntimeProof } from "./runtime-proof-gate.js";
+const EVIDENCE_SCAN_MAX_DEPTH = 40;
 const forbiddenClaims = [
     "Full Claude Code parity",
     "cloud sync",
@@ -68,14 +69,18 @@ export function runReleasePreflight(options = {}) {
     const workingAppRuntimeProof = workingAppRuntimeProofRequired
         ? validateWorkingAppRuntimeProof(options.runtimeProofDir)
         : null;
-    const rawSessionArtifacts = scanRawSessionArtifacts(options.evidenceDir);
+    const evidenceScan = scanEvidenceArtifacts(options.evidenceDir);
+    const rawSessionArtifacts = evidenceScan.rawSessionArtifacts;
+    const evidenceScanDepthExceeded = evidenceScan.depthLimitExceeded;
     const checks = {
         packageJson: check(Boolean(!packageJsonRead.error && packageJson?.name && packageJson.version && packageJson.description?.match(/local Codex sessions/i)), packageJsonRead.error ?? "package metadata keeps Codex-first beta positioning"),
         readme: check(Boolean(readme && readmePublicDocsRequiredPatterns.every((pattern) => pattern.test(readme))), "README includes public setup path, OpenClaw/MCP entrypoints, safety boundaries, and forbidden claims"),
         openclawManifest: check(Boolean(!openclawManifestRead.error && openclawPackageMetadataOk && openclawManifest?.id === "lossless-openclaw-orchestrator" && openclawManifest.mcp?.command === "loo-mcp-server" && openclawManifest.mcp.transport === "stdio" && openclawManifest.tools?.prefix === "loo_" && openclawManifest.safety?.localOnlyByDefault === true), openclawManifestRead.error ?? "root OpenClaw manifest and package runtime entry are packageable and local-only by default"),
         claimAudit: check(Boolean(claimAudit?.match(/Forbidden Beta Claims/i) && claimAudit.match(/approved_live_control_smoke_missing/i)), "claim audit records forbidden claims and the live-control blocker code"),
         betaDemo: check(Boolean(betaDemo?.match(/100\+ local Codex sessions/i) && betaDemo.match(/does not run live control/i)), "demo workflow covers 100+ Codex sessions and dry-run-only control boundary"),
-        rawArtifacts: check(rawSessionArtifacts.length === 0, rawSessionArtifacts.length === 0 ? "no raw session/private DB/screenshot artifacts found" : "raw session/private DB/screenshot artifacts are present"),
+        rawArtifacts: check(rawSessionArtifacts.length === 0 && evidenceScanDepthExceeded.length === 0, rawSessionArtifacts.length === 0 && evidenceScanDepthExceeded.length === 0
+            ? "no raw session/private DB/screenshot artifacts found"
+            : "raw artifacts or unsafe evidence tree shape are present"),
         liveControlSmoke: liveControlProof,
         workingAppRuntimeProof: workingAppRuntimeProof
             ? check(workingAppRuntimeProof.ok, workingAppRuntimeProof.ok
@@ -88,6 +93,8 @@ export function runReleasePreflight(options = {}) {
         .map(([key]) => `${key}_failed`);
     if (rawSessionArtifacts.length > 0)
         blockers.push("raw_session_artifacts_present");
+    if (evidenceScanDepthExceeded.length > 0)
+        blockers.push("evidence_scan_depth_exceeded");
     if (liveControlRequired && !checks.liveControlSmoke?.ok)
         blockers.push("approved_live_control_smoke_missing");
     if (workingAppRuntimeProofRequired && workingAppRuntimeProof && !workingAppRuntimeProof.ok) {
@@ -105,7 +112,8 @@ export function runReleasePreflight(options = {}) {
         checks,
         blockers,
         forbiddenClaims,
-        rawSessionArtifacts
+        rawSessionArtifacts,
+        evidenceScanDepthExceeded
     };
     if (report.artifactManifestPath) {
         mkdirSync(options.evidenceDir, { recursive: true });
@@ -190,27 +198,60 @@ function findPackageRoot(start) {
         cursor = parent;
     }
 }
-function scanRawSessionArtifacts(evidenceDir) {
-    if (!evidenceDir || !existsSync(evidenceDir))
-        return [];
-    return readdirSync(evidenceDir, { withFileTypes: true })
-        .filter((entry) => entry.isFile())
-        .map((entry) => rawArtifactForName(entry.name))
-        .filter((entry) => entry !== null)
-        .sort((left, right) => left.name.localeCompare(right.name));
+function scanEvidenceArtifacts(evidenceDir) {
+    if (!evidenceDir || !existsSync(evidenceDir)) {
+        return { rawSessionArtifacts: [], depthLimitExceeded: [] };
+    }
+    const root = resolve(evidenceDir);
+    const rawSessionArtifacts = [];
+    const depthLimitExceeded = [];
+    const visit = (dir, depth) => {
+        for (const entry of readdirSync(dir, { withFileTypes: true })) {
+            const absolutePath = join(dir, entry.name);
+            const relativePath = normalizePackagePath(relative(root, absolutePath));
+            if (entry.isSymbolicLink())
+                continue;
+            if (entry.isDirectory()) {
+                if (depth >= EVIDENCE_SCAN_MAX_DEPTH) {
+                    depthLimitExceeded.push(relativePath);
+                    continue;
+                }
+                visit(absolutePath, depth + 1);
+                continue;
+            }
+            if (!entry.isFile())
+                continue;
+            const artifact = rawArtifactForName(relativePath);
+            if (artifact)
+                rawSessionArtifacts.push(artifact);
+        }
+    };
+    visit(root, 0);
+    return {
+        rawSessionArtifacts: rawSessionArtifacts
+            .filter((entry) => entry !== null)
+            .sort((left, right) => left.name.localeCompare(right.name)),
+        depthLimitExceeded: depthLimitExceeded.sort((left, right) => left.localeCompare(right))
+    };
 }
 function rawArtifactForName(name) {
     if (name === "release-preflight.json")
         return null;
-    const extension = extname(name).toLowerCase();
+    const normalizedName = normalizePackagePath(name);
+    const extension = extname(normalizedName).toLowerCase();
+    const lowerName = normalizedName.toLowerCase();
     if (extension === ".jsonl")
-        return { name: basename(name), reason: "raw_codex_jsonl" };
-    if (extension === ".sqlite" || extension === ".sqlite3" || extension === ".db")
-        return { name: basename(name), reason: "sqlite_database" };
+        return { name: normalizedName, reason: "raw_codex_jsonl" };
+    if (extension === ".sqlite" || extension === ".sqlite3" || extension === ".db"
+        || lowerName.endsWith(".sqlite-wal") || lowerName.endsWith(".sqlite-shm")
+        || lowerName.endsWith(".sqlite3-wal") || lowerName.endsWith(".sqlite3-shm")
+        || lowerName.endsWith(".db-wal") || lowerName.endsWith(".db-shm")) {
+        return { name: normalizedName, reason: "sqlite_database" };
+    }
     if (extension === ".png" || extension === ".jpg" || extension === ".jpeg" || extension === ".heic" || extension === ".webp")
-        return { name: basename(name), reason: "screenshot_or_image" };
+        return { name: normalizedName, reason: "screenshot_or_image" };
     if (extension === ".mov" || extension === ".mp4" || extension === ".webm")
-        return { name: basename(name), reason: "video_capture" };
+        return { name: normalizedName, reason: "video_capture" };
     return null;
 }
 function validateApprovedLiveControlProof(path) {

package/docs/BETA_RELEASE_RUNBOOK.md

@@ -321,10 +321,11 @@ A release candidate may be announced internally when all of these are true:
 - no public artifact contains raw Codex JSONL, local SQLite databases, raw
   prompts, screenshots, credentials, tokens, or private transcripts
 
-## 1.0 General Readiness Gate
+## Stable General Readiness Gate
 
-The beta train can publish scoped prereleases without claiming 1.0. A 1.0
-candidate must also pass the deeper [Release Checklist](RELEASE_CHECKLIST.md).
+The beta train can publish scoped prereleases without claiming stable/general
+readiness. A stable candidate must also pass the deeper
+[Release Checklist](RELEASE_CHECKLIST.md).
 Run candidate gates before publication, then run fresh npm `@latest` and agent
 dogfood evidence after publication before closing the stable issue. The
 user-facing post-publish command is `loo release general-readiness`; the
@@ -338,13 +339,14 @@ node ./dist/packages/cli/src/index.js release general-readiness \
   --strict
 ```
 
-This post-publish gate is intentionally stricter than a beta first-run classifier:
-`gateway_setup_required` can be acceptable beta onboarding evidence, but it is
-not enough for 1.0. The stable gate requires a fresh npm install, clean-profile
-OpenClaw load, agent dogfood through gateway tools, and docs truth. If resume,
-steer, or interrupt have not passed live proof on disposable threads, the
-release copy must exclude broad live control and name only the proven live send
-path.
+This post-publish gate is intentionally stricter than a beta first-run
+classifier: `gateway_setup_required` can be acceptable beta onboarding evidence,
+but it is not enough for a stable/general readiness claim. The stable gate
+requires a fresh npm install, clean-profile OpenClaw load, clean-profile gateway
+tool-smoke readiness, agent dogfood through gateway tools, and docs truth. If
+resume, steer, or interrupt have not passed live proof on disposable threads,
+the release copy must exclude broad live control and name only the proven live
+send path.
 
 ## Publication Approval Gates
 
@@ -382,7 +384,7 @@ Record `npm dist-tag ls lossless-openclaw-orchestrator` in the release evidence
 after every npm publication. Stable releases publish with
 `npm publish --tag latest`; public betas publish with `npm publish --tag beta`;
 release candidates publish with `npm publish --tag next`. The stable channel
-currently points at `1.2.1`; future stable releases move `latest` only after the
+currently points at `1.2.3`; future stable releases move `latest` only after the
 separate stable-promotion gate proves the exact candidate. Keep beta and other
 prereleases on prerelease tags. Do not publish a fake stable package just to
 move a dist-tag. Release candidates must publish with `npm publish --tag next`;

package/docs/CLAIM_AUDIT.md

@@ -1,6 +1,6 @@
 # Public Claim Audit
 
-## Allowed Stable 1.2.1 Claim
+## Allowed Stable 1.2.3 Claim
 
 Collaborate with local Codex sessions through OpenClaw using local indexing, prepared-state recall, bounded expansion, and approval-gated dry-run/control boundaries.
 
@@ -75,7 +75,7 @@ blockers instead of allowing a working-app claim.
 
 Install stable releases through the `latest` dist-tag, public betas through the
 `beta` dist-tag, and release candidates through `next`. The stable channel
-currently points at `1.2.1`; future stable releases move `latest` only after the
+currently points at `1.2.3`; future stable releases move `latest` only after the
 separate stable-promotion gate proves the exact candidate. Keep beta and other
 prereleases on prerelease tags. Do not publish a fake stable package just to
 move a dist-tag.

package/docs/RELEASE_CHECKLIST.md

@@ -52,9 +52,9 @@ Every beta, RC, and stable release must have public-safe evidence for:
 - GitHub issue/tracker updates with evidence path and proof boundary
 - no open PRs or release-blocking issues for the claimed tier
 
-## 1.0 General Release
+## Stable General Release
 
-For 1.0, the release must additionally prove:
+For a stable/general release, the release must additionally prove:
 
 - fresh npm stable install from the registry, not a linked repo checkout or a
   beta/RC substitute
@@ -63,8 +63,8 @@ For 1.0, the release must additionally prove:
 - if fresh-profile gateway credentials are missing, published-smoke evidence
   must classify the blocker as setup-required and show token generation,
   env-ref onboarding, gateway status, and fresh-profile tool-smoke commands
-  without storing raw tokens; this remains a 1.0 blocker until tool-smoke is
-  actually ready
+  without storing raw tokens; this remains a stable-readiness blocker until
+  clean-profile tool-smoke is actually ready
 - first-class agent skill/playbook is packaged and current
 - agent dogfood completes the core workflow through gateway tools:
   doctor, search, describe, expand, plan/final/touched-file lookup, recommend,
@@ -75,8 +75,8 @@ For 1.0, the release must additionally prove:
 - live control claims name the exact control matrix that passed
 
 If resume, steer, or interrupt have not passed live proof on disposable threads,
-the 1.0 claim must exclude broad live control and say only the proven live send
-path is available.
+the stable/general release claim must exclude broad live control and say only the
+proven live send path is available.
 
 ## npm Dist-Tag Boundary
 

package/docs/RELEASE_NOTES_1.2.2.md

@@ -0,0 +1,94 @@
+# Release Notes 1.2.2
+
+`1.2.2` is a patch release for the LCO 1.2 stable train and Codex-first local orchestration.
+It publishes the readiness-smoke semantics clarification from
+#494 / #499 to the npm `latest` channel without widening the 1.2 claim
+boundary.
+
+This release is focused on local Codex sessions. Prepared state remains an
+advisory local derived cache, not source authority for PR, CI, release,
+runtime, customer, or business truth.
+
+## What Changed
+
+- Clarifies `loo openclaw published-smoke` strictness semantics:
+  `ok` / `packagePathOk` are package-path claims, while
+  `publishedSmokeReady` is the clean-profile gateway-ready claim.
+- Adds `--gateway-ready-strict` so operators and CI can explicitly fail when a
+  fresh published profile still needs gateway credentials or device setup.
+- Documents the combined `--strict` plus `--gateway-ready-strict` behavior:
+  either a package-path failure or clean-profile gateway-readiness failure exits
+  non-zero.
+- Hardens the public `loo release general-readiness` proof-boundary label so an
+  unexpected package version string cannot inject uncontrolled text into the
+  public proof boundary.
+- Freezes the `readinessSemantics` metadata object emitted by
+  `published-smoke`, keeping machine-readable exit semantics stable for
+  release scripts and audits.
+- Carries forward the 1.2.1 facade smoke fix for resume dry-run proof, including
+  the distinction between resume packets and message-carrying send/steer
+  packets.
+- Carries forward the #160 desktop proof-action release boundary:
+  `loo_desktop_proof_action` / `loo desktop proof-action` validates the
+  CUA Driver TextEdit scratch proof gate and does not prove generic GUI
+  mutation.
+  The proof action still requires exact backend, target app, target window, action hash, approval ref, permission state, scratch file path, and `execute: true` before the backend can run.
+  Generic gateway invocation without exact proof args fails closed. The desktop
+  proof action keeps the same proof boundary as beta.35.
+- Carries forward strict OpenClaw gateway result handling: plugin output with
+  `output.details.ok: false` is reported as
+  `openclaw_tool_result_not_ok:<tool>` rather than successful tool proof.
+
+## Current Claim Scope
+
+Allowed stable claim:
+
+> Collaborate with local Codex sessions through OpenClaw using local indexing,
+> prepared-state recall, bounded expansion, and approval-gated dry-run/control
+> boundaries.
+
+The stable channel means the scoped prepared-state and cockpit-management
+surface is ready as a public local-Codex release. It does not broaden the
+control, GUI, Claude, customer, or enterprise-security proof boundary.
+
+## Release Gate Notes
+
+- Parent 1.2 tracker: #405.
+- GA assurance tracker: #478.
+- Patch-release issue: #503.
+- Readiness-semantics issue: #494.
+- Patch PRs: #499 and the 1.2.2 release PR.
+- Baseline stable release: `v1.2.1`.
+- Candidate package: `lossless-openclaw-orchestrator@1.2.2`.
+- Expected npm dist-tag: `latest`.
+- Expected git tag: `v1.2.2`.
+- Required stable gates: focused release-smoke tests, release claim audit,
+  build/typecheck, `npm pack --dry-run`, release bundle/status checks, GitHub
+  CI, CodeQL, current-head review threads clear, npm publish to `latest`,
+  GitHub Release, and post-publish finalization status.
+- Bundle/status/finalization dry-run checks do not publish to npm and will not create a GitHub Release.
+- Working-app status example:
+  `loo release status --claim-scope codex-working-app-proof --runtime-proof-dir <path> --approved-live-control-evidence <path> --npm-publish-approval-evidence <path> --github-release-approval-evidence <path> --candidate-sha <sha> --github-ci-evidence <path> --codeql-evidence <path> --evidence-dir <path> --strict`
+- Reduced-scope status example:
+  `loo release status --claim-scope codex-read-search-expand-dry-run --npm-publish-approval-evidence <path> --github-release-approval-evidence <path> --candidate-sha <sha> --github-ci-evidence <path> --codeql-evidence <path> --evidence-dir <path> --strict`
+- `approved_live_control_smoke_missing` remains the expected blocker when a
+  working-app or live-control claim is attempted without approved live-control
+  smoke evidence for the exact candidate SHA.
+
+## Explicit Non-Claims
+
+No new live Codex control smoke is run by this release.
+It does not run generic GUI mutation and does not run Codex GUI mutation.
+No automatic gateway authorization.
+No broad gateway scope approval. No prompt typing. No clicking. No arbitrary app control.
+No screenshots or videos are part of the public release evidence.
+Claude Code remains an adapter stub, not an adapter-equivalence claim.
+No true Codex compaction-summary capture.
+No raw model compaction by default and no default model access to raw transcript
+or current `safe_text`.
+No raw transcript upload and no OpenClaw LCM merge.
+No source-store mutation.
+No Notion, support-control, Stripe, or Company Brain P1 adapter proof.
+No cloud sync.
+No unattended desktop takeover.
+No release-grade enterprise security or customer-ready security claim.

package/docs/RELEASE_NOTES_1.2.3.md

@@ -0,0 +1,84 @@
+# Release Notes 1.2.3
+
+`1.2.3` is the GA-assurance hygiene patch for the LCO 1.2 stable train and Codex-first local orchestration. It fixes the recursive release-evidence scan gap found during M11 adversarial review and keeps the 1.2 claim boundary unchanged.
+
+This release is focused on local Codex sessions. Prepared state remains an advisory local derived cache, not source authority for PR, CI, release, runtime, customer, or business truth.
+
+## What Changed
+
+- Fixes `loo release preflight` raw-artifact detection so it scans nested evidence folders instead of only immediate files in `--evidence-dir`.
+- Adds recursive detection for SQLite sidecars such as `.sqlite-wal`, `.sqlite-shm`, `.sqlite3-wal`, `.sqlite3-shm`, `.db-wal`, and `.db-shm`.
+- Skips symlinked evidence entries and reports `evidence_scan_depth_exceeded`
+  when an evidence tree is too deep to scan deterministically.
+- Keeps raw artifact findings public-safe by reporting relative evidence names and blocker reasons, not raw artifact contents.
+- Sanitizes the M11 final evidence packet by removing generated clean-profile runtime HOME/prefix artifacts while preserving public-safe summary reports.
+- Carries forward the 1.2.2 readiness-smoke semantics clarification: `ok` / `packagePathOk` are package-path claims, while `publishedSmokeReady` is the clean-profile gateway-ready claim.
+- Carries forward `--gateway-ready-strict` so operators and CI can explicitly fail when a fresh published profile still needs gateway credentials or device setup.
+- Carries forward the hardened `loo release general-readiness` proof-boundary label so an unexpected package version string cannot inject uncontrolled text into the public proof boundary.
+- Carries forward the frozen `readinessSemantics` metadata object emitted by `published-smoke`, keeping machine-readable exit semantics stable for release scripts and audits.
+- Carries forward the 1.2.1 facade smoke fix for resume dry-run proof, including the distinction between resume packets and message-carrying send/steer packets.
+- Carries forward the #160 desktop proof-action release boundary:
+  `loo_desktop_proof_action` / `loo desktop proof-action` validates the
+  CUA Driver TextEdit scratch proof gate and does not prove generic GUI
+  mutation.
+  The proof action still requires exact backend, target app, target window, action hash, approval ref, permission state, scratch file path, and `execute: true` before the backend can run.
+  Generic gateway invocation without exact proof args fails closed. The desktop
+  proof action keeps the same proof boundary as beta.35.
+- Carries forward strict OpenClaw gateway result handling: plugin output with
+  `output.details.ok: false` is reported as
+  `openclaw_tool_result_not_ok:<tool>` rather than successful tool proof.
+
+## Current Claim Scope
+
+Allowed stable claim:
+
+> Collaborate with local Codex sessions through OpenClaw using local indexing,
+> prepared-state recall, bounded expansion, and approval-gated dry-run/control
+> boundaries.
+
+The stable channel means the scoped prepared-state and cockpit-management
+surface is ready as a public local-Codex release. It does not broaden the
+control, GUI, Claude, customer, or enterprise-security proof boundary.
+
+## Release Gate Notes
+
+- Parent 1.2 tracker: #405.
+- GA assurance tracker: #478.
+- Hygiene patch issue: #506.
+- Previous patch-release issue: #503.
+- Readiness-semantics issue: #494.
+- Patch PRs: #499, #505, and the 1.2.3 release PR.
+- Baseline stable release: `v1.2.2`.
+- Candidate package: `lossless-openclaw-orchestrator@1.2.3`.
+- Expected npm dist-tag: `latest`.
+- Expected git tag: `v1.2.3`.
+- Required stable gates: focused release-smoke tests, release claim audit,
+  build/typecheck, `npm pack --dry-run`, release bundle/status checks, GitHub
+  CI, CodeQL, current-head review threads clear, npm publish to `latest`,
+  GitHub Release, and post-publish finalization status.
+- Bundle/status/finalization dry-run checks do not publish to npm and will not create a GitHub Release.
+- Working-app status example:
+  `loo release status --claim-scope codex-working-app-proof --runtime-proof-dir <path> --approved-live-control-evidence <path> --npm-publish-approval-evidence <path> --github-release-approval-evidence <path> --candidate-sha <sha> --github-ci-evidence <path> --codeql-evidence <path> --evidence-dir <path> --strict`
+- Reduced-scope status example:
+  `loo release status --claim-scope codex-read-search-expand-dry-run --npm-publish-approval-evidence <path> --github-release-approval-evidence <path> --candidate-sha <sha> --github-ci-evidence <path> --codeql-evidence <path> --evidence-dir <path> --strict`
+- `approved_live_control_smoke_missing` remains the expected blocker when a
+  working-app or live-control claim is attempted without approved live-control
+  smoke evidence for the exact candidate SHA.
+
+## Explicit Non-Claims
+
+No new live Codex control smoke is run by this release.
+It does not run generic GUI mutation and does not run Codex GUI mutation.
+No automatic gateway authorization.
+No broad gateway scope approval. No prompt typing. No clicking. No arbitrary app control.
+No screenshots or videos are part of the public release evidence.
+Claude Code remains an adapter stub, not an adapter-equivalence claim.
+No true Codex compaction-summary capture.
+No raw model compaction by default and no default model access to raw transcript
+or current `safe_text`.
+No raw transcript upload and no OpenClaw LCM merge.
+No source-store mutation.
+No Notion, support-control, Stripe, or Company Brain P1 adapter proof.
+No cloud sync.
+No unattended desktop takeover.
+No release-grade enterprise security or customer-ready security claim.

package/docs/SETUP.md

@@ -396,6 +396,10 @@ OpenClaw plugin installs but tools are missing
 OpenClaw gateway tool smoke reports credential or device blockers
 
 - Treat this as first-run gateway setup, not a package failure.
+- In `loo openclaw published-smoke`, `ok`/`packagePathOk` prove package-path
+  health only. `publishedSmokeReady` is the clean-profile gateway-ready claim.
+- A configured gateway proof is useful local evidence, but it does not satisfy
+  fresh-profile gateway readiness.
 - Use the recovery commands returned by `loo openclaw published-smoke` or
   `loo openclaw tool-smoke`.
 

package/openclaw.plugin.json

@@ -2,7 +2,7 @@
   "id": "lossless-openclaw-orchestrator",
   "name": "Lossless OpenClaw Orchestrator",
   "description": "Collaborate with local Codex sessions through OpenClaw using local indexing, prepared-state recall, bounded expansion, and approval-gated dry-run/control boundaries.",
-  "version": "1.2.1",
+  "version": "1.2.3",
   "kind": "tool",
   "tools": {
     "prefix": "loo_"

package/package.json

@@ -1,10 +1,18 @@
 {
   "name": "lossless-openclaw-orchestrator",
-  "version": "1.2.1",
+  "version": "1.2.3",
   "description": "Index, search, and prepare local Codex sessions for OpenClaw with approval-gated dry-run/control boundaries.",
   "type": "module",
   "license": "PolyForm-Noncommercial-1.0.0",
   "private": false,
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/100yenadmin/Lossless-Codex-Orchestrator-LCO.git"
+  },
+  "homepage": "https://github.com/100yenadmin/Lossless-Codex-Orchestrator-LCO#readme",
+  "bugs": {
+    "url": "https://github.com/100yenadmin/Lossless-Codex-Orchestrator-LCO/issues"
+  },
   "publishConfig": {
     "tag": "latest"
   },

package/packages/cli/src/general-release-readiness.ts

@@ -74,6 +74,7 @@ export function createGeneralReleaseReadiness(options: GeneralReleaseReadinessOp
   const packageVersion = readString(packageJson, "version");
   const expectedDistTag = distTagForVersion(packageVersion ?? "");
   const expectedPackage = packageName ? `${packageName}@${expectedDistTag}` : null;
+  const releaseLabel = formatReleaseLabel(expectedPackage, packageVersion);
   const freshNpmEvidence = resolveEvidencePath(evidenceDir, options.freshNpmEvidence);
   const agentDogfoodEvidence = resolveEvidencePath(evidenceDir, options.agentDogfoodEvidence);
   const checks: Record<string, GeneralReleaseReadinessCheck> = {
@@ -107,10 +108,10 @@ export function createGeneralReleaseReadiness(options: GeneralReleaseReadinessOp
       liveCodexControlRun: false,
       desktopGuiActionRun: false
     },
-    proofBoundary: "This gate defines and validates 1.0 general-release readiness evidence; it does not publish 1.0, move npm latest, create a GitHub Release, run live Codex control, mutate a GUI, claim Claude parity, or claim enterprise/customer-ready security.",
+    proofBoundary: `This gate defines and validates general-release readiness evidence for ${releaseLabel}; it does not publish npm, move npm dist-tags, create a GitHub Release, run live Codex control, mutate a GUI, claim Claude parity, or claim enterprise/customer-ready security.`,
     nextAction: blockers.length === 0
-      ? "Use this packet as one input to a separate explicit stable release issue before any npm latest promotion or GitHub Release."
-      : "Produce the missing public-safe evidence or update docs before treating 1.0 as ready."
+      ? "Use this packet as one input to a separate explicit stable release issue before any npm dist-tag promotion or GitHub Release."
+      : "Produce the missing public-safe evidence or update docs before treating this release candidate as generally ready."
   };
   writeFileSync(readinessManifestPath, `${JSON.stringify(report, null, 2)}\n`);
   return report;
@@ -163,9 +164,8 @@ function validateDocsTruth(rootDir: string): GeneralReleaseReadinessCheck {
     surfaces.every((content) => content
       && /loo release general-readiness/i.test(content)
       && /fresh npm/i.test(content)
-      && /agent dogfood/i.test(content)
-      && /1\.0/i.test(content))
-  ), "README, VISION, and release runbook point to the 1.0 general-readiness gate");
+      && /agent dogfood/i.test(content))
+  ), "README, VISION, and release runbook point to the general-readiness gate");
 }
 
 function validateFreshNpmEvidence(
@@ -327,6 +327,14 @@ function readString(input: JsonObject, key: string): string | null {
   return typeof value === "string" ? value : null;
 }
 
+function formatReleaseLabel(expectedPackage: string | null, packageVersion: string | null): string {
+  if (!expectedPackage || !packageVersion) return "the current package release";
+  const safePackageVersion = /^[0-9A-Za-z.+-]{1,80}$/.test(packageVersion)
+    ? packageVersion
+    : "untrusted-version";
+  return `${expectedPackage} (${safePackageVersion})`;
+}
+
 function readNestedString(input: JsonObject, path: string[]): string | null {
   const value = readNested(input, path);
   return typeof value === "string" ? value : null;

package/packages/cli/src/index.ts

@@ -423,6 +423,7 @@ async function main() {
     const report = createPublishedPackageSmokeReport(parsed);
     console.log(JSON.stringify(report, null, 2));
     if (parsed.strict && !report.ok) process.exitCode = 1;
+    if (parsed.gatewayReadyStrict && !report.publishedSmokeReady) process.exitCode = 1;
     return;
   }
   if (command === "openclaw" && args[0] === "live-control-smoke") {
@@ -1206,7 +1207,7 @@ function printGeneralReleaseReadinessHelp(): void {
     "Usage:",
     "  loo release general-readiness --evidence-dir path [--fresh-npm-evidence path] [--agent-dogfood-evidence path] [--now iso] [--strict]",
     "",
-    "Writes a public-safe 1.0 general-release readiness packet without performing release actions.",
+    "Writes a public-safe general-release readiness packet for the current package version without performing release actions.",
     "",
     "Required evidence:",
     "  --fresh-npm-evidence points to a public-safe `loo openclaw published-smoke` report with clean-profile gateway status ready.",
@@ -1216,20 +1217,27 @@ function printGeneralReleaseReadinessHelp(): void {
     "  --strict exits non-zero until docs, skill/playbook, M9 scenarios, fresh npm proof, and agent dogfood proof are complete.",
     "",
     "Safety boundary:",
-    "  The command does not publish npm, does not move npm latest, does not create a GitHub Release, does not run live Codex control, and does not perform desktop GUI mutation."
+    "  The command does not publish npm, does not move npm dist-tags, does not create a GitHub Release, does not run live Codex control, and does not perform desktop GUI mutation."
   ].join("\n"));
 }
 
 function printOpenClawPublishedSmokeHelp(): void {
   console.log([
     "Usage:",
-    "  loo openclaw published-smoke --evidence-dir path --dogfood-report path --tool-smoke-report path [--configured-tool-smoke-report path] [--npm-install-diagnostic-report path] [--registry-version version] [--registry-beta-version version] [--root path] [--now iso] [--strict]",
+    "  loo openclaw published-smoke --evidence-dir path --dogfood-report path --tool-smoke-report path [--configured-tool-smoke-report path] [--npm-install-diagnostic-report path] [--registry-version version] [--registry-beta-version version] [--root path] [--now iso] [--strict] [--gateway-ready-strict]",
     "",
-    "Writes a public-safe summary of the published npm beta install path and gateway setup state.",
+    "Writes a public-safe summary of the published npm package path for the expected dist-tag and gateway setup state.",
     "",
     "This command consumes sanitized reports from `loo openclaw dogfood` and `loo openclaw tool-smoke`.",
     "Optional `--configured-tool-smoke-report` records a separately named configured-profile gateway proof without marking the fresh published profile ready.",
     "Optional `--npm-install-diagnostic-report` records public-safe npm selector drift and tarball fallback proof without storing raw npm output.",
+    "",
+    "Strict mode:",
+    "  --strict exits non-zero only when ok/packagePathOk is false; it is package-path strict.",
+    "  --gateway-ready-strict exits non-zero unless publishedSmokeReady is true for the clean published profile.",
+    "  With both flags, any failed package-path or clean-profile gateway-ready condition exits non-zero.",
+    "  A configured gateway proof is recorded separately and never substitutes for fresh-profile gateway readiness.",
+    "",
     "It does not run npm install, does not call OpenClaw, does not run live Codex control, and does not mutate a desktop GUI."
   ].join("\n"));
 }
@@ -2223,6 +2231,7 @@ function parseOpenClawPublishedSmokeArgs(input: string[]): {
   configuredToolSmokeReportPath?: string;
   npmInstallDiagnosticReportPath?: string;
   strict: boolean;
+  gatewayReadyStrict: boolean;
 } {
   const parsed: {
     evidenceDir?: string;
@@ -2235,7 +2244,8 @@ function parseOpenClawPublishedSmokeArgs(input: string[]): {
     configuredToolSmokeReportPath?: string;
     npmInstallDiagnosticReportPath?: string;
     strict: boolean;
-  } = { strict: false };
+    gatewayReadyStrict: boolean;
+  } = { strict: false, gatewayReadyStrict: false };
   for (let index = 0; index < input.length; index += 1) {
     const arg = input[index]!;
     if (arg === "--evidence-dir") {
@@ -2258,6 +2268,8 @@ function parseOpenClawPublishedSmokeArgs(input: string[]): {
       parsed.npmInstallDiagnosticReportPath = requireOptionValue(input[++index], arg);
     } else if (arg === "--strict") {
       parsed.strict = true;
+    } else if (arg === "--gateway-ready-strict") {
+      parsed.gatewayReadyStrict = true;
     } else {
       throw new Error(`Unknown openclaw published-smoke option: ${arg}`);
     }
@@ -2274,7 +2286,8 @@ function parseOpenClawPublishedSmokeArgs(input: string[]): {
     toolSmokeReportPath: parsed.toolSmokeReportPath,
     configuredToolSmokeReportPath: parsed.configuredToolSmokeReportPath,
     npmInstallDiagnosticReportPath: parsed.npmInstallDiagnosticReportPath,
-    strict: parsed.strict
+    strict: parsed.strict,
+    gatewayReadyStrict: parsed.gatewayReadyStrict
   };
 }
 

package/packages/cli/src/published-package-smoke.ts

@@ -19,6 +19,13 @@ export type PublishedPackageSmokeReport = {
   ok: boolean;
   publishedSmokeReady: boolean;
   packagePathOk: boolean;
+  readinessSemantics: Readonly<{
+    okField: "packagePathOk";
+    strictModeExitsOn: "packagePathOk_false";
+    gatewayReadyStrictExitsOn: "publishedSmokeReady_false";
+    cleanProfileGatewayReadyField: "publishedSmokeReady";
+    configuredGatewayProofSeparate: true;
+  }>;
   publicSafe: true;
   localOnly: true;
   dryRun: true;
@@ -104,6 +111,14 @@ export type PublishedPackageSmokeReport = {
   proofBoundary: string;
 };
 
+const READINESS_SEMANTICS = Object.freeze({
+  okField: "packagePathOk",
+  strictModeExitsOn: "packagePathOk_false",
+  gatewayReadyStrictExitsOn: "publishedSmokeReady_false",
+  cleanProfileGatewayReadyField: "publishedSmokeReady",
+  configuredGatewayProofSeparate: true
+} as const);
+
 export function createPublishedPackageSmokeReport(options: PublishedPackageSmokeOptions): PublishedPackageSmokeReport {
   const rootDir = options.rootDir
     ? resolve(options.rootDir)
@@ -171,6 +186,7 @@ export function createPublishedPackageSmokeReport(options: PublishedPackageSmoke
     ok: packagePathOk,
     publishedSmokeReady: packagePathOk && toolSmokeReady,
     packagePathOk,
+    readinessSemantics: READINESS_SEMANTICS,
     publicSafe: true,
     localOnly: true,
     dryRun: true,
@@ -220,7 +236,7 @@ export function createPublishedPackageSmokeReport(options: PublishedPackageSmoke
       "tokens, credentials, API keys, cookies",
       "private customer data"
     ],
-    proofBoundary: `This published package smoke report summarizes public-safe ${expectedDistTag} install and gateway setup evidence only; it does not run live Codex control, mutate a desktop GUI, publish npm, create a GitHub Release, store raw npm output, or store raw OpenClaw gateway output.`
+    proofBoundary: `This published package smoke report summarizes public-safe ${expectedDistTag} install and gateway setup evidence only. ok/packagePathOk are package-path claims; publishedSmokeReady is the clean-profile gateway-ready claim. This command does not run live Codex control, mutate a desktop GUI, publish npm, create a GitHub Release, store raw npm output, or store raw OpenClaw gateway output.`
   };
   if (options.evidenceDir) writePublishedPackageSmokeReport(report, options.evidenceDir);
   return report;

package/packages/cli/src/release-preflight.ts

@@ -1,6 +1,6 @@
 import { existsSync, mkdirSync, readdirSync, readFileSync, statSync, writeFileSync } from "node:fs";
 import { fileURLToPath } from "node:url";
-import { basename, dirname, extname, join, resolve, sep } from "node:path";
+import { dirname, extname, join, relative, resolve, sep } from "node:path";
 import {
   excludedClaimsForScope,
   liveControlExcludedDetail,
@@ -39,6 +39,7 @@ export type ReleasePreflightReport = {
   blockers: string[];
   forbiddenClaims: string[];
   rawSessionArtifacts: RawSessionArtifact[];
+  evidenceScanDepthExceeded: string[];
 };
 
 type ApprovedLiveControlSmokeProof = {
@@ -57,11 +58,18 @@ type RawSessionArtifact = {
   reason: "raw_codex_jsonl" | "sqlite_database" | "screenshot_or_image" | "video_capture";
 };
 
+type EvidenceScanResult = {
+  rawSessionArtifacts: RawSessionArtifact[];
+  depthLimitExceeded: string[];
+};
+
 type JsonReadResult = {
   value: unknown | null;
   error: string | null;
 };
 
+const EVIDENCE_SCAN_MAX_DEPTH = 40;
+
 const forbiddenClaims = [
   "Full Claude Code parity",
   "cloud sync",
@@ -148,14 +156,21 @@ export function runReleasePreflight(options: ReleasePreflightOptions = {}): Rele
   const workingAppRuntimeProof = workingAppRuntimeProofRequired
     ? validateWorkingAppRuntimeProof(options.runtimeProofDir)
     : null;
-  const rawSessionArtifacts = scanRawSessionArtifacts(options.evidenceDir);
+  const evidenceScan = scanEvidenceArtifacts(options.evidenceDir);
+  const rawSessionArtifacts = evidenceScan.rawSessionArtifacts;
+  const evidenceScanDepthExceeded = evidenceScan.depthLimitExceeded;
   const checks: Record<string, ReleasePreflightCheck> = {
     packageJson: check(Boolean(!packageJsonRead.error && packageJson?.name && packageJson.version && packageJson.description?.match(/local Codex sessions/i)), packageJsonRead.error ?? "package metadata keeps Codex-first beta positioning"),
     readme: check(Boolean(readme && readmePublicDocsRequiredPatterns.every((pattern) => pattern.test(readme))), "README includes public setup path, OpenClaw/MCP entrypoints, safety boundaries, and forbidden claims"),
     openclawManifest: check(Boolean(!openclawManifestRead.error && openclawPackageMetadataOk && openclawManifest?.id === "lossless-openclaw-orchestrator" && openclawManifest.mcp?.command === "loo-mcp-server" && openclawManifest.mcp.transport === "stdio" && openclawManifest.tools?.prefix === "loo_" && openclawManifest.safety?.localOnlyByDefault === true), openclawManifestRead.error ?? "root OpenClaw manifest and package runtime entry are packageable and local-only by default"),
     claimAudit: check(Boolean(claimAudit?.match(/Forbidden Beta Claims/i) && claimAudit.match(/approved_live_control_smoke_missing/i)), "claim audit records forbidden claims and the live-control blocker code"),
     betaDemo: check(Boolean(betaDemo?.match(/100\+ local Codex sessions/i) && betaDemo.match(/does not run live control/i)), "demo workflow covers 100+ Codex sessions and dry-run-only control boundary"),
-    rawArtifacts: check(rawSessionArtifacts.length === 0, rawSessionArtifacts.length === 0 ? "no raw session/private DB/screenshot artifacts found" : "raw session/private DB/screenshot artifacts are present"),
+    rawArtifacts: check(
+      rawSessionArtifacts.length === 0 && evidenceScanDepthExceeded.length === 0,
+      rawSessionArtifacts.length === 0 && evidenceScanDepthExceeded.length === 0
+        ? "no raw session/private DB/screenshot artifacts found"
+        : "raw artifacts or unsafe evidence tree shape are present"
+    ),
     liveControlSmoke: liveControlProof,
     workingAppRuntimeProof: workingAppRuntimeProof
       ? check(
@@ -171,6 +186,7 @@ export function runReleasePreflight(options: ReleasePreflightOptions = {}): Rele
     .filter(([key, value]) => !value.ok && key !== "liveControlSmoke" && key !== "rawArtifacts" && key !== "workingAppRuntimeProof")
     .map(([key]) => `${key}_failed`);
   if (rawSessionArtifacts.length > 0) blockers.push("raw_session_artifacts_present");
+  if (evidenceScanDepthExceeded.length > 0) blockers.push("evidence_scan_depth_exceeded");
   if (liveControlRequired && !checks.liveControlSmoke?.ok) blockers.push("approved_live_control_smoke_missing");
   if (workingAppRuntimeProofRequired && workingAppRuntimeProof && !workingAppRuntimeProof.ok) {
     blockers.push(...workingAppRuntimeProof.blockers);
@@ -188,7 +204,8 @@ export function runReleasePreflight(options: ReleasePreflightOptions = {}): Rele
     checks,
     blockers,
     forbiddenClaims,
-    rawSessionArtifacts
+    rawSessionArtifacts,
+    evidenceScanDepthExceeded
   };
 
   if (report.artifactManifestPath) {
@@ -272,22 +289,54 @@ function findPackageRoot(start: string): string | null {
   }
 }
 
-function scanRawSessionArtifacts(evidenceDir: string | undefined): RawSessionArtifact[] {
-  if (!evidenceDir || !existsSync(evidenceDir)) return [];
-  return readdirSync(evidenceDir, { withFileTypes: true })
-    .filter((entry) => entry.isFile())
-    .map((entry) => rawArtifactForName(entry.name))
-    .filter((entry): entry is RawSessionArtifact => entry !== null)
-    .sort((left, right) => left.name.localeCompare(right.name));
+function scanEvidenceArtifacts(evidenceDir: string | undefined): EvidenceScanResult {
+  if (!evidenceDir || !existsSync(evidenceDir)) {
+    return { rawSessionArtifacts: [], depthLimitExceeded: [] };
+  }
+  const root = resolve(evidenceDir);
+  const rawSessionArtifacts: RawSessionArtifact[] = [];
+  const depthLimitExceeded: string[] = [];
+  const visit = (dir: string, depth: number): void => {
+    for (const entry of readdirSync(dir, { withFileTypes: true })) {
+      const absolutePath = join(dir, entry.name);
+      const relativePath = normalizePackagePath(relative(root, absolutePath));
+      if (entry.isSymbolicLink()) continue;
+      if (entry.isDirectory()) {
+        if (depth >= EVIDENCE_SCAN_MAX_DEPTH) {
+          depthLimitExceeded.push(relativePath);
+          continue;
+        }
+        visit(absolutePath, depth + 1);
+        continue;
+      }
+      if (!entry.isFile()) continue;
+      const artifact = rawArtifactForName(relativePath);
+      if (artifact) rawSessionArtifacts.push(artifact);
+    }
+  };
+  visit(root, 0);
+  return {
+    rawSessionArtifacts: rawSessionArtifacts
+      .filter((entry) => entry !== null)
+      .sort((left, right) => left.name.localeCompare(right.name)),
+    depthLimitExceeded: depthLimitExceeded.sort((left, right) => left.localeCompare(right))
+  };
 }
 
 function rawArtifactForName(name: string): RawSessionArtifact | null {
   if (name === "release-preflight.json") return null;
-  const extension = extname(name).toLowerCase();
-  if (extension === ".jsonl") return { name: basename(name), reason: "raw_codex_jsonl" };
-  if (extension === ".sqlite" || extension === ".sqlite3" || extension === ".db") return { name: basename(name), reason: "sqlite_database" };
-  if (extension === ".png" || extension === ".jpg" || extension === ".jpeg" || extension === ".heic" || extension === ".webp") return { name: basename(name), reason: "screenshot_or_image" };
-  if (extension === ".mov" || extension === ".mp4" || extension === ".webm") return { name: basename(name), reason: "video_capture" };
+  const normalizedName = normalizePackagePath(name);
+  const extension = extname(normalizedName).toLowerCase();
+  const lowerName = normalizedName.toLowerCase();
+  if (extension === ".jsonl") return { name: normalizedName, reason: "raw_codex_jsonl" };
+  if (extension === ".sqlite" || extension === ".sqlite3" || extension === ".db"
+    || lowerName.endsWith(".sqlite-wal") || lowerName.endsWith(".sqlite-shm")
+    || lowerName.endsWith(".sqlite3-wal") || lowerName.endsWith(".sqlite3-shm")
+    || lowerName.endsWith(".db-wal") || lowerName.endsWith(".db-shm")) {
+    return { name: normalizedName, reason: "sqlite_database" };
+  }
+  if (extension === ".png" || extension === ".jpg" || extension === ".jpeg" || extension === ".heic" || extension === ".webp") return { name: normalizedName, reason: "screenshot_or_image" };
+  if (extension === ".mov" || extension === ".mp4" || extension === ".webm") return { name: normalizedName, reason: "video_capture" };
   return null;
 }
 

package/packages/openclaw-plugin/openclaw.plugin.json

@@ -2,7 +2,7 @@
   "id": "lossless-openclaw-orchestrator",
   "name": "Lossless OpenClaw Orchestrator",
   "description": "Collaborate with local Codex sessions through OpenClaw using local indexing, prepared-state recall, bounded expansion, and approval-gated dry-run/control boundaries.",
-  "version": "1.2.1",
+  "version": "1.2.3",
   "kind": "tool",
   "tools": {
     "prefix": "loo_"