@open-agent-toolkit/cli 0.2.33 → 0.2.35

package/assets/bundle-metadata.json

@@ -1,4 +1,4 @@
 {
   "schemaVersion": 1,
-  "oatVersion": "0.2.33"
+  "oatVersion": "0.2.35"
 }

package/assets/docs/cli-utilities/configuration.md

@@ -198,6 +198,26 @@ project settings. Neither has a config key.
 
 Both accept `1`, `true` or `on`.
 
+### Bundled assets root (`OAT_ASSETS_DIR`)
+
+The CLI reads its bundled skills, agents, templates, and scripts from the
+packaged `assets/` directory next to the installed CLI. Setting a non-empty
+`OAT_ASSETS_DIR` makes `resolveAssetsRoot` read that directory instead:
+
+- The value is trimmed; unset, empty, or whitespace-only values keep the
+  packaged default. A relative value is resolved against the process working
+  directory.
+- The override is validated exactly like the packaged root and fails closed:
+  the path must be a directory containing bundle metadata whose version matches
+  the running CLI (`OAT_VERSION`). A missing, malformed, or version-mismatched
+  override is an error — the CLI never silently falls back to packaged assets.
+- Produce a matching bundle with `bash packages/cli/scripts/bundle-assets.sh`
+  while `OAT_ASSETS_DIR` points at the target directory (the script already
+  honors the variable as its destination).
+
+This is primarily a test-isolation and packaging seam; day-to-day use of the CLI
+does not need it.
+
 `EXPLAINER_KIT_ALLOW_PRIVATE_PUBLIC_ROOT` disables an anti-SSRF control. Public
 verification issues an outbound GET against whatever `publicBaseUrl` names, so
 by default the connector refuses internal addresses — including the

package/assets/docs/provider-sync/commands.md

@@ -65,6 +65,14 @@ Key behavior:
 - Upgrade cleanup removes only verified clean legacy Cursor or Copilot skill views.
   Changed or unverified views are preserved and detached from obsolete manifest
   ownership.
+- Before the dry-run/apply branch, each scope's sync manifest `oatVersion` is
+  compared with the invoking CLI version. Any difference (older or newer) logs
+  an advisory warning naming the scope and both versions; the run continues and
+  the apply path restamps the manifest with the invoking version. JSON output
+  suppresses the warning and reports the same data under a top-level
+  `versionSkew` array (`{ scope, producingVersion, invokingVersion }`) in both
+  `--dry-run` and apply envelopes; a scope without skew is omitted from the
+  array.
 
 Preview project and user cleanup before applying it:
 

package/assets/public-package-versions.json

@@ -1,6 +1,6 @@
 {
-  "cli": "0.2.33",
-  "docs-config": "0.2.33",
-  "docs-theme": "0.2.33",
-  "docs-transforms": "0.2.33"
+  "cli": "0.2.35",
+  "docs-config": "0.2.35",
+  "docs-theme": "0.2.35",
+  "docs-transforms": "0.2.35"
 }

package/dist/commands/sync/apply.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"apply.d.ts","sourceRoot":"","sources":["../../../src/commands/sync/apply.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAG3D,OAAO,KAAK,EACV,aAAa,EACb,uBAAuB,EAExB,MAAM,cAAc,CAAC;AAyEtB,wBAAsB,YAAY,CAChC,OAAO,EAAE,cAAc,EACvB,UAAU,EAAE,aAAa,EAAE,EAC3B,YAAY,EAAE,uBAAuB,GACpC,OAAO,CAAC,IAAI,CAAC,CAyGf"}
+{"version":3,"file":"apply.d.ts","sourceRoot":"","sources":["../../../src/commands/sync/apply.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAE3D,OAAO,KAAK,EACV,aAAa,EACb,uBAAuB,EAExB,MAAM,cAAc,CAAC;AAyEtB,wBAAsB,YAAY,CAChC,OAAO,EAAE,cAAc,EACvB,UAAU,EAAE,aAAa,EAAE,EAC3B,YAAY,EAAE,uBAAuB,GACpC,OAAO,CAAC,IAAI,CAAC,CAgHf"}

package/dist/commands/sync/apply.js

@@ -1,4 +1,3 @@
-import { OAT_VERSION } from '../../shared/oat-version.js';
 import { countPlannedOperations } from './sync.utils.js';
 function countSkippedEntries(scopePlans) {
     return scopePlans.reduce((total, scopePlan) => {
@@ -52,7 +51,11 @@ export async function runSyncApply(context, scopePlans, dependencies) {
     for (const scopePlan of scopePlans) {
         const hasSyncEntries = scopePlan.plan.entries.length > 0 || scopePlan.plan.removals.length > 0;
         const hasExtensionPlannedOperations = scopePlan.materializationExtensionPlans.some((plan) => plan.operations.some((operation) => operation.action !== 'skip'));
-        const shouldRefreshManifestVersion = scopePlan.manifest.oatVersion !== OAT_VERSION;
+        // Derived from the same diagnostic that produced the pre-mutation advisory
+        // (`detectVersionSkew` in ./index), so the restamp and the warning cannot
+        // drift apart: this manifest is only ever restamped when sync has already
+        // reported the provenance the restamp is about to overwrite.
+        const shouldRefreshManifestVersion = scopePlan.versionSkew !== undefined;
         if (!hasSyncEntries &&
             !hasExtensionPlannedOperations &&
             !shouldRefreshManifestVersion) {
@@ -86,6 +89,9 @@ export async function runSyncApply(context, scopePlans, dependencies) {
     const providerMismatches = scopePlans
         .map((scopePlan) => scopePlan.providerMismatches)
         .filter((mismatch) => mismatch !== undefined);
+    const versionSkew = scopePlans
+        .map((scopePlan) => scopePlan.versionSkew)
+        .filter((skew) => skew !== undefined);
     const materializationExtensions = scopePlans.flatMap((scopePlan) => scopePlan.materializationExtensions);
     const codexExtensions = materializationExtensions
         .filter((extension) => extension.provider === 'codex')
@@ -110,6 +116,7 @@ export async function runSyncApply(context, scopePlans, dependencies) {
             plans: scopePlans.map((scopePlan) => scopePlan.plan),
             summary,
             providerMismatches,
+            versionSkew,
             materializationExtensions,
             codexExtensions,
         });

package/dist/commands/sync/dry-run.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"dry-run.d.ts","sourceRoot":"","sources":["../../../src/commands/sync/dry-run.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAE3D,OAAO,KAAK,EACV,aAAa,EACb,uBAAuB,EAExB,MAAM,cAAc,CAAC;AAiEtB,wBAAgB,aAAa,CAC3B,OAAO,EAAE,cAAc,EACvB,UAAU,EAAE,aAAa,EAAE,EAC3B,YAAY,EAAE,uBAAuB,GACpC,IAAI,CA2CN"}
+{"version":3,"file":"dry-run.d.ts","sourceRoot":"","sources":["../../../src/commands/sync/dry-run.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAE3D,OAAO,KAAK,EACV,aAAa,EACb,uBAAuB,EAExB,MAAM,cAAc,CAAC;AAiEtB,wBAAgB,aAAa,CAC3B,OAAO,EAAE,cAAc,EACvB,UAAU,EAAE,aAAa,EAAE,EAC3B,YAAY,EAAE,uBAAuB,GACpC,IAAI,CA+CN"}

package/dist/commands/sync/dry-run.js

@@ -48,6 +48,9 @@ export function runSyncDryRun(context, scopePlans, dependencies) {
     const providerMismatches = scopePlans
         .map((scopePlan) => scopePlan.providerMismatches)
         .filter((mismatch) => mismatch !== undefined);
+    const versionSkew = scopePlans
+        .map((scopePlan) => scopePlan.versionSkew)
+        .filter((skew) => skew !== undefined);
     const materializationExtensions = scopePlans.flatMap((scopePlan) => scopePlan.materializationExtensions);
     const codexExtensions = materializationExtensions
         .filter((extension) => extension.provider === 'codex')
@@ -69,6 +72,7 @@ export function runSyncDryRun(context, scopePlans, dependencies) {
             plans: scopePlans.map((scopePlan) => scopePlan.plan),
             summary,
             providerMismatches,
+            versionSkew,
             materializationExtensions,
             codexExtensions,
         });

package/dist/commands/sync/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/commands/sync/index.ts"],"names":[],"mappings":"AA0CA,OAAO,EAAE,OAAO,EAAU,MAAM,WAAW,CAAC;AAI5C,OAAO,KAAK,EAEV,uBAAuB,EAExB,MAAM,cAAc,CAAC;AAwUtB,wBAAgB,iBAAiB,CAC/B,SAAS,GAAE,OAAO,CAAC,uBAAuB,CAAM,GAC/C,OAAO,CA6BT"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/commands/sync/index.ts"],"names":[],"mappings":"AA2CA,OAAO,EAAE,OAAO,EAAU,MAAM,WAAW,CAAC;AAI5C,OAAO,KAAK,EAEV,uBAAuB,EAGxB,MAAM,cAAc,CAAC;AA4XtB,wBAAgB,iBAAiB,CAC/B,SAAS,GAAE,OAAO,CAAC,uBAAuB,CAAM,GAC/C,OAAO,CA6BT"}

package/dist/commands/sync/index.js

@@ -17,6 +17,7 @@ import { cursorAdapter } from '../../providers/cursor/index.js';
 import { cursorMaterializationExtension } from '../../providers/cursor/codec/sync-extension.js';
 import { geminiAdapter } from '../../providers/gemini/index.js';
 import { getConfigAwareAdapters, toMaterializationOperations, } from '../../providers/shared/index.js';
+import { OAT_VERSION } from '../../shared/oat-version.js';
 import { formatSyncPlan } from '../../ui/output.js';
 import { Command, Option } from 'commander';
 import { runSyncApply } from './apply.js';
@@ -147,6 +148,30 @@ async function maybeResolveProviderMismatches(context, scope, scopeRoot, configP
         activeAdapters: resolution.activeAdapters,
     };
 }
+/**
+ * Derive the advisory version-skew diagnostic for a loaded scope manifest.
+ *
+ * This is the single source of truth for "this manifest was produced by a
+ * different CLI version": `runSyncApply` keys its manifest restamp off the
+ * presence of this diagnostic, so a restamp can never destroy the provenance
+ * evidence without the advisory having been emitted first.
+ *
+ * Comparison is plain string inequality on identity, never semantic-version
+ * ordering. An absent manifest therefore never reports skew, because
+ * `loadManifest` deliberately creates an empty manifest stamped with the
+ * invoking version and the two strings match. `ManifestSchema` rejects an
+ * *empty* `oatVersion` before sync ever sees it, but it does admit other
+ * degenerate strings such as whitespace-only values; those surface here as
+ * ordinary skew rather than being reclassified as corruption.
+ */
+function detectVersionSkew(scope, manifest) {
+    const producingVersion = manifest.oatVersion;
+    const invokingVersion = OAT_VERSION;
+    if (producingVersion === invokingVersion) {
+        return undefined;
+    }
+    return { scope, producingVersion, invokingVersion };
+}
 async function computePlans(context, dependencies, allowedCanonicalPaths) {
     const scopePlans = [];
     for (const scope of resolveConcreteScopes(context.scope)) {
@@ -201,6 +226,7 @@ async function computePlans(context, dependencies, allowedCanonicalPaths) {
             activeAdapterNames,
             plan,
             providerMismatches: resolved.mismatches,
+            versionSkew: detectVersionSkew(scope, manifest),
             materializationExtensionPlans,
             materializationExtensions,
         });
@@ -232,9 +258,22 @@ function logNonInteractiveMismatchGuidance(context, scopePlans) {
         }
     }
 }
+function logVersionSkewWarnings(context, scopePlans) {
+    if (context.json) {
+        return;
+    }
+    for (const scopePlan of scopePlans) {
+        const skew = scopePlan.versionSkew;
+        if (!skew) {
+            continue;
+        }
+        context.logger.warn(`Sync manifest version skew [${skew.scope}]: manifest produced by oat "${skew.producingVersion}" but invoked by oat "${skew.invokingVersion}".`);
+    }
+}
 async function runSyncCommand(context, dependencies, allowedCanonicalPaths) {
     const scopePlans = await computePlans(context, dependencies, allowedCanonicalPaths);
     logNonInteractiveMismatchGuidance(context, scopePlans);
+    logVersionSkewWarnings(context, scopePlans);
     if (context.dryRun) {
         runSyncDryRun(context, scopePlans, dependencies);
         return;

package/dist/commands/sync/sync.types.d.ts

@@ -9,6 +9,16 @@ export interface SyncProviderMismatches {
     detectedUnset: string[];
     detectedDisabled: string[];
 }
+/**
+ * Advisory diagnostic emitted when the CLI version that produced a scope's sync
+ * manifest differs from the CLI version invoking sync. Comparison is symmetric
+ * string inequality: the contract is version identity, not which side is newer.
+ */
+export interface SyncVersionSkew {
+    scope: ConcreteScope;
+    producingVersion: string;
+    invokingVersion: string;
+}
 export interface ScopeSyncPlan {
     scope: ConcreteScope;
     scopeRoot: string;
@@ -18,6 +28,7 @@ export interface ScopeSyncPlan {
     canonical?: CanonicalEntry[];
     activeAdapterNames?: string[];
     providerMismatches?: SyncProviderMismatches;
+    versionSkew?: SyncVersionSkew;
     materializationExtensionPlans: MaterializationPlan[];
     materializationExtensions: MaterializationExtensionSummary[];
 }
@@ -33,6 +44,7 @@ export interface SyncJsonPayload {
     plans: SyncPlan[];
     summary: SyncSummary;
     providerMismatches?: SyncProviderMismatches[];
+    versionSkew?: SyncVersionSkew[];
     materializationExtensions?: MaterializationExtensionSummary[];
     /** Retained for compatibility with existing Codex JSON consumers. */
     codexExtensions?: CodexExtensionSummary[];

package/dist/commands/sync/sync.types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sync.types.d.ts","sourceRoot":"","sources":["../../../src/commands/sync/sync.types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AAC1E,OAAO,KAAK,EACV,iBAAiB,EACjB,aAAa,EACd,MAAM,iCAAiC,CAAC;AACzC,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAChD,OAAO,KAAK,EAAE,cAAc,EAAE,QAAQ,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAC1E,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,iBAAiB,CAAC;AAChD,OAAO,KAAK,EACV,yBAAyB,EACzB,0BAA0B,EAC1B,wBAAwB,EACxB,wBAAwB,EACxB,mBAAmB,EACnB,eAAe,EAChB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,KAAK,EAAE,aAAa,EAAE,KAAK,EAAE,MAAM,eAAe,CAAC;AAE1D,MAAM,WAAW,sBAAsB;IACrC,aAAa,EAAE,MAAM,EAAE,CAAC;IACxB,gBAAgB,EAAE,MAAM,EAAE,CAAC;CAC5B;AAED,MAAM,WAAW,aAAa;IAC5B,KAAK,EAAE,aAAa,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,EAAE,MAAM,CAAC;IACrB,QAAQ,EAAE,QAAQ,CAAC;IACnB,IAAI,EAAE,QAAQ,CAAC;IACf,SAAS,CAAC,EAAE,cAAc,EAAE,CAAC;IAC7B,kBAAkB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC9B,kBAAkB,CAAC,EAAE,sBAAsB,CAAC;IAC5C,6BAA6B,EAAE,mBAAmB,EAAE,CAAC;IACrD,yBAAyB,EAAE,+BAA+B,EAAE,CAAC;CAC9D;AAED,MAAM,WAAW,WAAW;IAC1B,iBAAiB,EAAE,MAAM,CAAC;IAC1B,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,eAAe;IAC9B,KAAK,EAAE,KAAK,CAAC;IACb,MAAM,EAAE,OAAO,CAAC;IAChB,KAAK,EAAE,QAAQ,EAAE,CAAC;IAClB,OAAO,EAAE,WAAW,CAAC;IACrB,kBAAkB,CAAC,EAAE,sBAAsB,EAAE,CAAC;IAC9C,yBAAyB,CAAC,EAAE,+BAA+B,EAAE,CAAC;IAC9D,qEAAqE;IACrE,eAAe,CAAC,EAAE,qBAAqB,EAAE,CAAC;CAC3C;AAED,MAAM,MAAM,oBAAoB,GAAG,QAAQ,GAAG,QAAQ,GAAG,QAAQ,GAAG,MAAM,CAAC;AAC3E,MAAM,MAAM,oBAAoB,GAAG,MAAM,GAAG,QAAQ,CAAC;AAErD,MAAM,WAAW,uBAAuB;IACtC,MAAM,EAAE,oBAAoB,CAAC;IAC7B,MAAM,EAAE,oBAAoB,CAAC;IAC7B,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,qBAAqB;IACpC,UAAU,EAAE,uBAAuB,EAAE,CAAC;IACtC,YAAY,EAAE,MAAM,EAAE,CAAC;IACvB,mBAAmB,EAAE,MAAM,CAAC;IAC5B,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,+BAA+B;IAC9C,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,wBAAwB,EAAE,CAAC;IACvC,cAAc,EAAE,MAAM,EAAE,CAAC;IACzB,aAAa,EAAE,MAAM,CAAC;IACtB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,MAAM,4BAA4B,GAAG,wBAAwB,CACjE,mBAAmB,EACnB;IACE,SAAS,EAAE,MAAM,CAAC;IAClB,gBAAgB,EAAE,cAAc,EAAE,CAAC;IACnC,qBAAqB,CAAC,EAAE,MAAM,EAAE,CAAC;IACjC,OAAO,EAAE;QACP,aAAa,CAAC,EAAE,MAAM,CAAC;QACvB,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;KACzB,CAAC;CACH,CACF,CAAC;AAEF,MAAM,WAAW,uBAAuB;IACtC,mBAAmB,EAAE,CAAC,OAAO,EAAE,aAAa,KAAK,cAAc,CAAC;IAChE,gBAAgB,EAAE,CAChB,KAAK,EAAE,aAAa,EACpB,OAAO,EAAE,cAAc,KACpB,OAAO,CAAC,MAAM,CAAC,CAAC;IACrB,YAAY,EAAE,CAAC,YAAY,EAAE,MAAM,KAAK,OAAO,CAAC,QAAQ,CAAC,CAAC;IAC1D,cAAc,EAAE,CAAC,UAAU,EAAE,MAAM,KAAK,OAAO,CAAC,UAAU,CAAC,CAAC;IAC5D,cAAc,EAAE,CACd,UAAU,EAAE,MAAM,EAClB,MAAM,EAAE,UAAU,KACf,OAAO,CAAC,UAAU,CAAC,CAAC;IACzB,aAAa,EAAE,CACb,SAAS,EAAE,MAAM,EACjB,KAAK,EAAE,aAAa,KACjB,OAAO,CAAC,cAAc,EAAE,CAAC,CAAC;IAC/B,wBAAwB,EAAE,MAAM,OAAO,CAAC,cAAc,EAAE,CAAC,CAAC;IAC1D,WAAW,EAAE,MAAM,eAAe,EAAE,CAAC;IACrC,sBAAsB,EAAE,CACtB,QAAQ,EAAE,eAAe,EAAE,EAC3B,SAAS,EAAE,MAAM,EACjB,MAAM,EAAE,UAAU,KACf,OAAO,CAAC,yBAAyB,CAAC,CAAC;IACxC,wBAAwB,EAAE,CAAC,CAAC,SAAS,MAAM,EACzC,OAAO,EAAE,MAAM,EACf,OAAO,EAAE,iBAAiB,CAAC,CAAC,CAAC,EAAE,EAC/B,GAAG,EAAE,aAAa,KACf,OAAO,CAAC,CAAC,EAAE,GAAG,IAAI,CAAC,CAAC;IACzB,eAAe,EAAE,CAAC,IAAI,EAAE;QACtB,SAAS,EAAE,cAAc,EAAE,CAAC;QAC5B,QAAQ,EAAE,eAAe,EAAE,CAAC;QAC5B,QAAQ,EAAE,QAAQ,CAAC;QACnB,KAAK,EAAE,aAAa,CAAC;QACrB,MAAM,EAAE,UAAU,CAAC;QACnB,SAAS,EAAE,MAAM,CAAC;QAClB,qBAAqB,CAAC,EAAE,MAAM,EAAE,CAAC;KAClC,KAAK,OAAO,CAAC,QAAQ,CAAC,CAAC;IACxB,eAAe,EAAE,CACf,IAAI,EAAE,QAAQ,EACd,QAAQ,EAAE,QAAQ,EAClB,YAAY,EAAE,MAAM,KACjB,OAAO,CAAC,UAAU,CAAC,CAAC;IACzB,4BAA4B,EAAE,MAAM,4BAA4B,EAAE,CAAC;IACnE,iCAAiC,EAAE,CACjC,SAAS,EAAE,4BAA4B,EACvC,SAAS,EAAE,MAAM,EACjB,IAAI,EAAE,mBAAmB,KACtB,OAAO,CAAC,0BAA0B,CAAC,CAAC;IACzC,cAAc,EAAE,CAAC,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,KAAK,MAAM,CAAC;CAC9D"}
+{"version":3,"file":"sync.types.d.ts","sourceRoot":"","sources":["../../../src/commands/sync/sync.types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AAC1E,OAAO,KAAK,EACV,iBAAiB,EACjB,aAAa,EACd,MAAM,iCAAiC,CAAC;AACzC,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAChD,OAAO,KAAK,EAAE,cAAc,EAAE,QAAQ,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAC1E,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,iBAAiB,CAAC;AAChD,OAAO,KAAK,EACV,yBAAyB,EACzB,0BAA0B,EAC1B,wBAAwB,EACxB,wBAAwB,EACxB,mBAAmB,EACnB,eAAe,EAChB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,KAAK,EAAE,aAAa,EAAE,KAAK,EAAE,MAAM,eAAe,CAAC;AAE1D,MAAM,WAAW,sBAAsB;IACrC,aAAa,EAAE,MAAM,EAAE,CAAC;IACxB,gBAAgB,EAAE,MAAM,EAAE,CAAC;CAC5B;AAED;;;;GAIG;AACH,MAAM,WAAW,eAAe;IAC9B,KAAK,EAAE,aAAa,CAAC;IACrB,gBAAgB,EAAE,MAAM,CAAC;IACzB,eAAe,EAAE,MAAM,CAAC;CACzB;AAED,MAAM,WAAW,aAAa;IAC5B,KAAK,EAAE,aAAa,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,EAAE,MAAM,CAAC;IACrB,QAAQ,EAAE,QAAQ,CAAC;IACnB,IAAI,EAAE,QAAQ,CAAC;IACf,SAAS,CAAC,EAAE,cAAc,EAAE,CAAC;IAC7B,kBAAkB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC9B,kBAAkB,CAAC,EAAE,sBAAsB,CAAC;IAC5C,WAAW,CAAC,EAAE,eAAe,CAAC;IAC9B,6BAA6B,EAAE,mBAAmB,EAAE,CAAC;IACrD,yBAAyB,EAAE,+BAA+B,EAAE,CAAC;CAC9D;AAED,MAAM,WAAW,WAAW;IAC1B,iBAAiB,EAAE,MAAM,CAAC;IAC1B,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,eAAe;IAC9B,KAAK,EAAE,KAAK,CAAC;IACb,MAAM,EAAE,OAAO,CAAC;IAChB,KAAK,EAAE,QAAQ,EAAE,CAAC;IAClB,OAAO,EAAE,WAAW,CAAC;IACrB,kBAAkB,CAAC,EAAE,sBAAsB,EAAE,CAAC;IAC9C,WAAW,CAAC,EAAE,eAAe,EAAE,CAAC;IAChC,yBAAyB,CAAC,EAAE,+BAA+B,EAAE,CAAC;IAC9D,qEAAqE;IACrE,eAAe,CAAC,EAAE,qBAAqB,EAAE,CAAC;CAC3C;AAED,MAAM,MAAM,oBAAoB,GAAG,QAAQ,GAAG,QAAQ,GAAG,QAAQ,GAAG,MAAM,CAAC;AAC3E,MAAM,MAAM,oBAAoB,GAAG,MAAM,GAAG,QAAQ,CAAC;AAErD,MAAM,WAAW,uBAAuB;IACtC,MAAM,EAAE,oBAAoB,CAAC;IAC7B,MAAM,EAAE,oBAAoB,CAAC;IAC7B,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,qBAAqB;IACpC,UAAU,EAAE,uBAAuB,EAAE,CAAC;IACtC,YAAY,EAAE,MAAM,EAAE,CAAC;IACvB,mBAAmB,EAAE,MAAM,CAAC;IAC5B,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,+BAA+B;IAC9C,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,wBAAwB,EAAE,CAAC;IACvC,cAAc,EAAE,MAAM,EAAE,CAAC;IACzB,aAAa,EAAE,MAAM,CAAC;IACtB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,MAAM,4BAA4B,GAAG,wBAAwB,CACjE,mBAAmB,EACnB;IACE,SAAS,EAAE,MAAM,CAAC;IAClB,gBAAgB,EAAE,cAAc,EAAE,CAAC;IACnC,qBAAqB,CAAC,EAAE,MAAM,EAAE,CAAC;IACjC,OAAO,EAAE;QACP,aAAa,CAAC,EAAE,MAAM,CAAC;QACvB,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;KACzB,CAAC;CACH,CACF,CAAC;AAEF,MAAM,WAAW,uBAAuB;IACtC,mBAAmB,EAAE,CAAC,OAAO,EAAE,aAAa,KAAK,cAAc,CAAC;IAChE,gBAAgB,EAAE,CAChB,KAAK,EAAE,aAAa,EACpB,OAAO,EAAE,cAAc,KACpB,OAAO,CAAC,MAAM,CAAC,CAAC;IACrB,YAAY,EAAE,CAAC,YAAY,EAAE,MAAM,KAAK,OAAO,CAAC,QAAQ,CAAC,CAAC;IAC1D,cAAc,EAAE,CAAC,UAAU,EAAE,MAAM,KAAK,OAAO,CAAC,UAAU,CAAC,CAAC;IAC5D,cAAc,EAAE,CACd,UAAU,EAAE,MAAM,EAClB,MAAM,EAAE,UAAU,KACf,OAAO,CAAC,UAAU,CAAC,CAAC;IACzB,aAAa,EAAE,CACb,SAAS,EAAE,MAAM,EACjB,KAAK,EAAE,aAAa,KACjB,OAAO,CAAC,cAAc,EAAE,CAAC,CAAC;IAC/B,wBAAwB,EAAE,MAAM,OAAO,CAAC,cAAc,EAAE,CAAC,CAAC;IAC1D,WAAW,EAAE,MAAM,eAAe,EAAE,CAAC;IACrC,sBAAsB,EAAE,CACtB,QAAQ,EAAE,eAAe,EAAE,EAC3B,SAAS,EAAE,MAAM,EACjB,MAAM,EAAE,UAAU,KACf,OAAO,CAAC,yBAAyB,CAAC,CAAC;IACxC,wBAAwB,EAAE,CAAC,CAAC,SAAS,MAAM,EACzC,OAAO,EAAE,MAAM,EACf,OAAO,EAAE,iBAAiB,CAAC,CAAC,CAAC,EAAE,EAC/B,GAAG,EAAE,aAAa,KACf,OAAO,CAAC,CAAC,EAAE,GAAG,IAAI,CAAC,CAAC;IACzB,eAAe,EAAE,CAAC,IAAI,EAAE;QACtB,SAAS,EAAE,cAAc,EAAE,CAAC;QAC5B,QAAQ,EAAE,eAAe,EAAE,CAAC;QAC5B,QAAQ,EAAE,QAAQ,CAAC;QACnB,KAAK,EAAE,aAAa,CAAC;QACrB,MAAM,EAAE,UAAU,CAAC;QACnB,SAAS,EAAE,MAAM,CAAC;QAClB,qBAAqB,CAAC,EAAE,MAAM,EAAE,CAAC;KAClC,KAAK,OAAO,CAAC,QAAQ,CAAC,CAAC;IACxB,eAAe,EAAE,CACf,IAAI,EAAE,QAAQ,EACd,QAAQ,EAAE,QAAQ,EAClB,YAAY,EAAE,MAAM,KACjB,OAAO,CAAC,UAAU,CAAC,CAAC;IACzB,4BAA4B,EAAE,MAAM,4BAA4B,EAAE,CAAC;IACnE,iCAAiC,EAAE,CACjC,SAAS,EAAE,4BAA4B,EACvC,SAAS,EAAE,MAAM,EACjB,IAAI,EAAE,mBAAmB,KACtB,OAAO,CAAC,0BAA0B,CAAC,CAAC;IACzC,cAAc,EAAE,CAAC,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,KAAK,MAAM,CAAC;CAC9D"}

package/dist/fs/assets.d.ts

@@ -1,3 +1,13 @@
 export declare function validateAssetsBundle(assetsRoot: string, expectedVersion?: string): Promise<void>;
-export declare function resolveAssetsRoot(): Promise<string>;
+/**
+ * Resolve the directory the CLI reads bundled assets from.
+ *
+ * A non-empty `OAT_ASSETS_DIR` selects an explicit root; an unset or blank
+ * value keeps the packaged `<cliRoot>/assets` default. Both paths run the same
+ * directory and bundle-integrity checks, and an explicit root never falls back
+ * to the packaged one: a missing, non-directory, malformed, or
+ * version-mismatched override fails closed with the same actionable errors.
+ * A relative value is resolved against the process working directory.
+ */
+export declare function resolveAssetsRoot(env?: NodeJS.ProcessEnv): Promise<string>;
 //# sourceMappingURL=assets.d.ts.map

package/dist/fs/assets.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"assets.d.ts","sourceRoot":"","sources":["../../src/fs/assets.ts"],"names":[],"mappings":"AA2BA,wBAAsB,oBAAoB,CACxC,UAAU,EAAE,MAAM,EAClB,eAAe,SAAc,GAC5B,OAAO,CAAC,IAAI,CAAC,CAoCf;AAED,wBAAsB,iBAAiB,IAAI,OAAO,CAAC,MAAM,CAAC,CAwBzD"}
+{"version":3,"file":"assets.d.ts","sourceRoot":"","sources":["../../src/fs/assets.ts"],"names":[],"mappings":"AA2BA,wBAAsB,oBAAoB,CACxC,UAAU,EAAE,MAAM,EAClB,eAAe,SAAc,GAC5B,OAAO,CAAC,IAAI,CAAC,CAoCf;AAQD;;;;;;;;;GASG;AACH,wBAAsB,iBAAiB,CACrC,GAAG,GAAE,MAAM,CAAC,UAAwB,GACnC,OAAO,CAAC,MAAM,CAAC,CAwBjB"}

package/dist/fs/assets.js

@@ -36,10 +36,24 @@ export async function validateAssetsBundle(assetsRoot, expectedVersion = OAT_VER
         throw new CliError(`Bundled assets version mismatch: CLI ${expectedVersion}, assets ${metadata.oatVersion}. Reinstall @open-agent-toolkit/cli or rebuild the CLI before updating tools.`, 2);
     }
 }
-export async function resolveAssetsRoot() {
+function resolvePackagedAssetsRoot() {
     const modulePath = fileURLToPath(import.meta.url);
     const cliRoot = resolve(dirname(modulePath), '..', '..');
-    const assetsRoot = join(cliRoot, 'assets');
+    return join(cliRoot, 'assets');
+}
+/**
+ * Resolve the directory the CLI reads bundled assets from.
+ *
+ * A non-empty `OAT_ASSETS_DIR` selects an explicit root; an unset or blank
+ * value keeps the packaged `<cliRoot>/assets` default. Both paths run the same
+ * directory and bundle-integrity checks, and an explicit root never falls back
+ * to the packaged one: a missing, non-directory, malformed, or
+ * version-mismatched override fails closed with the same actionable errors.
+ * A relative value is resolved against the process working directory.
+ */
+export async function resolveAssetsRoot(env = process.env) {
+    const override = env.OAT_ASSETS_DIR?.trim() ?? '';
+    const assetsRoot = override.length > 0 ? resolve(override) : resolvePackagedAssetsRoot();
     try {
         const assetsStat = await stat(assetsRoot);
         if (!assetsStat.isDirectory()) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@open-agent-toolkit/cli",
-  "version": "0.2.33",
+  "version": "0.2.35",
   "private": false,
   "description": "Open Agent Toolkit CLI",
   "homepage": "https://github.com/voxmedia/open-agent-toolkit/tree/main/packages/cli",
@@ -34,7 +34,7 @@
     "ora": "^9.0.0",
     "yaml": "2.8.2",
     "zod": "^3.25.76",
-    "@open-agent-toolkit/control-plane": "0.2.33"
+    "@open-agent-toolkit/control-plane": "0.2.35"
   },
   "devDependencies": {
     "@types/node": "^22.10.0",