- Docker: restore writable `~/.config` in runtime images. Fixes #85968. Thanks @hkoessler and @Bartok9.

- Plugin SDK: keep legacy root diagnostic subscriptions connected when built plugin SDK aliases resolve diagnostic helpers through a separate module graph.

- Tests: normalize macOS canonical temp paths in exec allowlists, fs-safe trash assertions, installed plugin matching, Telegram topic-name stores, and built ACPX MCP server expectations so native macOS proof runners cover the intended behavior.

- Codex/app-server: preserve message-tool-only source reply delivery mode on active runs so sub-agent completion wakeups can steer the active Codex turn instead of being rejected. (#86287) Thanks @ferminquant.

- Tests: normalize bundled plugin lifecycle probe paths and state-root lookup so native Windows release sweeps accept valid packaged plugin installs.

- Config: keep benign legacy metadata write anomalies out of default doctor and config command output while preserving explicit anomaly logging for diagnostics.

- Codex: log when implicit app-server `never` approvals are promoted for OpenClaw tool policy, including whether the trigger was a `before_tool_call` hook or trusted tool policy.

expect(interrupt?.params).toEqual({ threadId: "thread-1", turnId: "turn-1" });

});

it("accepts message-tool-only steering for active Codex app-server source replies", async () => {

const { requests, waitForMethod, completeTurn } = createStartedThreadHarness();

const params = createParams(

path.join(tempDir, "session.jsonl"),

path.join(tempDir, "workspace"),

);

params.sourceReplyDeliveryMode = "message_tool_only";

const run = runCodexAppServerAttempt(params);

await waitForMethod("turn/start");

expect(

queueActiveRunMessageForTest("session-1", "subagent complete", {

debounceMs: 1,

steeringMode: "all",

sourceReplyDeliveryMode: "message_tool_only",

}),

).toBe(true);

await vi.waitFor(

() =>

expect(requests.filter((entry) => entry.method === "turn/steer")).toEqual([

{

method: "turn/steer",

params: {

threadId: "thread-1",

expectedTurnId: "turn-1",

input: [{ type: "text", text: "subagent complete", text_elements: [] }],

},

},

]),

{ interval: 1 },

);

await completeTurn({ threadId: "thread-1", turnId: "turn-1" });

await run;

});

it("batches default queued steering before sending turn/steer", async () => {

const { requests, waitForMethod, completeTurn } = createStartedThreadHarness();

activeSteeringQueue.queue(text, options),

isStreaming: () => !completed,

isCompacting: () => projector?.isCompacting() ?? false,

sourceReplyDeliveryMode: params.sourceReplyDeliveryMode,

cancel: () => runAbortController.abort("cancelled"),

abort: () => runAbortController.abort("aborted"),

};