codex-agy-worker v0.4.0

Highlights

• Replace post-process stream handling and the single five-minute wall timeout with a process-owning, progress-aware supervisor.
• Add explicit local start, status, wait, result, extend, cancel, resume, and restart commands while preserving synchronous run.
• Separate idle, hard, and absolute runtime limits; valid progress renews only the idle lease.
• Remove automatic fresh retry and bind continuation attempts to immutable task, selection, conversation, state, and result evidence.
• Add hash-approved pre-gate dispatch-failure recording and job.sh abort cleanup.
• Stage complete plan prompts privately while keeping slash expansion only for the fixed upstream plan driver prompt.

Safety

• Local status and cancellation do not claim provider status or verified remote cancellation.
• Unknown provider/authentication diagnostics remain unclassified without an exact version-bound reviewed signature.
• No automatic model, effort, thinking-level, retry, Git action, provider action, or Windows denylist was added.
• P2-B and P2-C remain evidence-gated and deferred.

Verification

• 26 offline suites: 2,908 passed, 0 failed.
• Dispatcher: 238/238; lifecycle/abort: 116/116; packaging: 361/361.
• Independent adversarial audit reported no P0-P3 findings.
• Exact PR-head CI and exact merge-SHA push test succeeded; the accepted and merged Git trees are identical.
• Bash syntax, external-cache Python compile, diff hygiene, RTK, instruction audit, and no-bytecode checks passed.

Coverage boundary

The lifecycle implementation is offline and synthetic-subprocess verified. A separately authorized live provider exercise is still required before claiming live plan, conversation-resume, or remote-cancellation behavior.