oh-my-codex v0.21.25

0.21.25 is a patch release for team mailbox isolation hardening (2 commits, 3 files, +205/−4; PR #3857).

Highlights

• Team mailbox isolation hardening (#3857): The team delivery system now fails closed on unconfirmed mailbox creation, rejecting runtime state, persistence, timeout, and invalid acknowledgement failures instead of publishing a successful JSON-only fallback:
  1. Fail-closed behavior on creation failure: Runtime rejections, persistence failures, timeouts, and invalid acknowledgements no longer produce a JSON-only mailbox record.
  2. Partial event reconciliation: Partially persisted creation events are reconciled before assigning another ID, preventing duplicate mailbox IDs within a team scope.
  3. Deduplication across refresh races: The same verified projection is used across refresh races to prevent concurrent creation races from producing multiple mailboxes for the same request. Authored by @shenyankm with @gaebal-gajae.

Compatibility

• Team mailbox creation now fails when runtime confirmation fails; existing integrations must handle creation failures gracefully.
• Existing delivered mailboxes and team dispatch records remain compatible.
• The team delivery state contract has been updated to reflect the new fail-closed semantics.

Validation

• Pinned candidate 9aa3e7066291a47d1427ad274ed47e0511712ee7 passed latest-per-name dev CI: 18 checks succeeded and 7 conditional checks were skipped, with no failures.
• Release branch CI passed with all required checks green.
• All code review findings addressed.

Merged PR inventory

Contributors

Thanks to @clawdbot, @shenyankm, and @Yeachan-Heo for contributing to this release.

Full Changelog: v0.21.24...v0.21.25

—
[repo owner's gaebal-gajae (clawdbot) 🦞]