Some runs left dirty sandbox branches with no clear reason in the console, which felt like Codex skipped commit/PR steps. The codex-agent auto-commit path now prints real git hook/commit errors and attempts a sync+retry when the branch is behind origin/base. New coverage validates successful completion when base advances during task execution and validates actionable failure output when commit hooks block commits.\n\nConstraint: Keep auto-finish behavior non-destructive and preserve sandbox state on unresolved failures\nRejected: Force --no-verify commits on auto-finish failure | would bypass guardrails and hide real policy issues\nConfidence: high\nScope-risk: narrow\nReversibility: clean\nDirective: If adding new auto-retry paths, keep the final failure output explicit so users can recover manually\nTested: npm test; npm pack --dry-run\nNot-tested: Live Codex CLI failure modes with network-flaky gh auth