overlord-cli 0.2607151850.0 → 0.2607161024.0

package/dist/connectors/VERSION

@@ -1 +1 @@
-0.3.2
+0.3.3

package/dist/connectors/adapters/antigravity/plugin.json

@@ -1,7 +1,7 @@
 {
   "$schema": "https://antigravity.google/schemas/v1/plugin.json",
   "name": "overlord",
-  "version": "0.3.2",
+  "version": "0.3.3",
   "description": "Chat-driven access to Overlord mission protocol workflows with hook-driven activity capture.",
   "author": {
     "name": "Cooperativ",

package/dist/connectors/adapters/antigravity/scripts/overlord-mcp.mjs

@@ -328,7 +328,7 @@ process.stdin.on('data', async chunk => {
         result: {
           protocolVersion: PROTOCOL_VERSION,
           capabilities: { tools: { listChanged: false } },
-          serverInfo: { name: 'overlord-antigravity', version: '0.3.2' }
+          serverInfo: { name: 'overlord-antigravity', version: '0.3.3' }
         }
       });
       continue;

package/dist/connectors/adapters/claude/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "overlord",
-  "version": "0.3.2",
+  "version": "0.3.3",
   "description": "Overlord mission protocol workflow for Claude Code — attach/update/ask/deliver, slash commands, and hook-driven activity capture.",
   "author": {
     "name": "Cooperativ",

package/dist/connectors/adapters/codex/.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "overlord",
-  "version": "0.3.2",
+  "version": "0.3.3",
   "description": "Chat-driven access to Overlord mission protocol workflows with hook-driven activity capture.",
   "author": {
     "name": "Cooperativ",

package/dist/connectors/adapters/codex/scripts/overlord-mcp.mjs

@@ -328,7 +328,7 @@ process.stdin.on('data', async chunk => {
         result: {
           protocolVersion: PROTOCOL_VERSION,
           capabilities: { tools: { listChanged: false } },
-          serverInfo: { name: 'overlord-codex', version: '0.3.2' }
+          serverInfo: { name: 'overlord-codex', version: '0.3.3' }
         }
       });
       continue;

package/dist/connectors/adapters/cursor/.cursor-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "overlord",
-  "version": "0.3.2",
+  "version": "0.3.3",
   "description": "Overlord mission protocol workflow for Cursor — attach/update/ask/deliver, slash commands, MCP bridge, and follow-up capture.",
   "author": {
     "name": "Cooperativ",

package/dist/connectors/adapters/cursor/README.md

@@ -29,7 +29,7 @@ From an OpenOverlord checkout:
 ovld agent-setup cursor
 ```
 
-This copies managed plugin files to `~/.cursor/plugins/local/overlord`, merges a `beforeSubmitPrompt` hook into `~/.cursor/hooks.json`, and adds a `Shell(ovld protocol:*)` permission allow rule to `~/.cursor/settings.json` when missing.
+This copies managed plugin files to `~/.cursor/plugins/local/overlord`, merges Overlord's prompt, permission, tool-result, and stop hooks into `~/.cursor/hooks.json`, and adds a `Shell(ovld protocol:*)` permission allow rule to `~/.cursor/settings.json` when missing. Existing hooks and settings are preserved.
 
 Re-run safely any time the connector contract version changes:
 
@@ -76,9 +76,14 @@ This connector is intentionally reviewable against the four connector layers in
 - `skills/overlord-mission/SKILL.md` — Cursor adapter template with a `<!-- @connector-core -->` marker; setup interpolates shared core content at install time.
 - `commands/*.md` — slash commands for session routing, objective discussion, mission creation, and work recording.
 - `hooks/overlord-user-prompt-submit.sh` — `beforeSubmitPrompt` follow-up capture through `ovld protocol hook-event`.
+- `hooks/overlord-permission-request.sh` — observes `beforeShellExecution` and `beforeMCPExecution` through `ovld protocol permission-request`. It returns no allow/deny decision, leaving Cursor and user-installed hooks authoritative.
+- `hooks/overlord-post-tool-use.sh` — records `postToolUse` file edits and shell-mediated changes for exact per-session delivery attribution.
+- `hooks/overlord-stop.sh` — checks pending delivery through `ovld protocol hook-event`; when needed, it asks Cursor to continue once so the agent can finish delivery.
 - `rules/overlord-local.mdc` — always-on workflow rules for Cursor sessions.
 - `mcp.json` + `scripts/overlord-mcp.mjs` — MCP bridge to common `ovld protocol` operations.
 - `conformance-manifest.yaml` — connector conformance declaration for the Overlord contract.
 - `prompt-wrapper.md` — Cursor launch guidance.
 
 The shared Connector Core source lives at `connectors/core/overlord-mission`. `ovld agent-setup cursor` interpolates that core into the adapter skill template and installs core reference files so the runtime package is self-contained.
+
+Cursor's generic `preToolUse` hook is intentionally not used for permission capture. Cursor currently documents that `ask` is not enforced for `preToolUse`; the narrower shell and MCP hooks expose the native permission-decision schema without changing the user's policy. Cursor also documents hook execution as fail-open by default, so Overlord telemetry failures do not strand the agent.

package/dist/connectors/adapters/cursor/conformance-manifest.yaml

@@ -8,11 +8,17 @@ connector:
   agentIdentifier: cursor
   capabilities:
     - followUpHook
+    - permissionHook
+    - stopHook
+    - editHook
     - modelFlag
     - permissionRules
     - slashCommands
   hookTypes:
     - UserPromptSubmit
+    - PermissionRequest
+    - PostToolUse
+    - Stop
   installPath: "~/.cursor/plugins/local/overlord"
   managedFiles:
     - ".cursor-plugin/plugin.json"
@@ -27,6 +33,9 @@ connector:
     - "commands/record-work.md"
     - "commands/spawn.md"
     - "hooks/overlord-user-prompt-submit.sh"
+    - "hooks/overlord-permission-request.sh"
+    - "hooks/overlord-post-tool-use.sh"
+    - "hooks/overlord-stop.sh"
     - "mcp.json"
     - "prompt-wrapper.md"
     - "rules/overlord-local.mdc"

package/dist/connectors/adapters/cursor/hooks/overlord-permission-request.sh

@@ -0,0 +1,25 @@
+#!/bin/bash
+# Overlord Cursor permission observation hook.
+#
+# Cursor invokes this script from beforeShellExecution and beforeMCPExecution,
+# its native permission-decision points. The hook records the request through
+# the Connector -> Protocol surface but intentionally returns no decision, so
+# Cursor's own permissions and any other user hooks remain authoritative.
+
+BODY=$(cat -)
+
+if [ -n "${MISSION_ID:-}" ] && command -v ovld >/dev/null 2>&1; then
+  (
+    USER_TOKEN="${Overlord_USER_TOKEN:-${OVLD_USER_TOKEN:-}}"
+    if [ -n "$USER_TOKEN" ]; then
+      export Overlord_USER_TOKEN="$USER_TOKEN"
+    fi
+    printf '%s' "$BODY" | ovld protocol permission-request \
+      --mission-id "$MISSION_ID" \
+      --payload-file - \
+      >/dev/null 2>&1
+  ) &
+  disown
+fi
+
+exit 0

package/dist/connectors/adapters/cursor/hooks/overlord-post-tool-use.sh

@@ -0,0 +1,23 @@
+#!/bin/bash
+# Overlord Cursor postToolUse hook.
+# Records Cursor Write/Edit and Shell effects in the per-session touched-files
+# log used by `ovld protocol deliver` for concurrent-work attribution.
+
+BODY=$(cat -)
+LOG_DIR="${HOME:-}/.ovld/logs"
+LOG_FILE="${LOG_DIR}/cursor-post-tool-use-hook.log"
+
+log_hook() {
+  mkdir -p "$LOG_DIR" 2>/dev/null || return 0
+  printf '%s [cursor-post-tool-use] %s\n' "$(date -u '+%Y-%m-%dT%H:%M:%SZ')" "$1" >>"$LOG_FILE" 2>/dev/null || true
+}
+
+if ! command -v ovld >/dev/null 2>&1; then
+  log_hook "ovld not on PATH; skipping"
+  exit 0
+fi
+
+RESULT=$(printf '%s' "$BODY" | ovld protocol record-touched 2>>"$LOG_FILE")
+log_hook "record-touched: ${RESULT:-<no output>}"
+
+exit 0

package/dist/connectors/adapters/cursor/hooks/overlord-stop.sh

@@ -0,0 +1,73 @@
+#!/bin/bash
+# Overlord Cursor stop hook.
+# Checks whether the attached mission still needs delivery and, at most once,
+# asks Cursor to continue so the agent can deliver. It never delivers itself.
+
+BODY=$(cat -)
+LOG_DIR="${HOME:-}/.ovld/logs"
+LOG_FILE="${LOG_DIR}/cursor-stop-hook.log"
+
+log_hook() {
+  mkdir -p "$LOG_DIR" 2>/dev/null || return 0
+  printf '%s [cursor-stop] %s\n' "$(date -u '+%Y-%m-%dT%H:%M:%SZ')" "$1" >>"$LOG_FILE" 2>/dev/null || true
+}
+
+if [ -z "${MISSION_ID:-}" ] || ! command -v ovld >/dev/null 2>&1; then
+  log_hook "missing required mission or ovld, skipping"
+  printf '{}'
+  exit 0
+fi
+
+LOOP_COUNT=$(printf '%s' "$BODY" | python3 -c '
+import json, sys
+try:
+    value = json.load(sys.stdin).get("loop_count", 0)
+    print(value if isinstance(value, int) else 0)
+except Exception:
+    print(0)
+' 2>/dev/null)
+
+if [ "${LOOP_COUNT:-0}" -gt 0 ]; then
+  log_hook "automatic follow-up already used, skipping"
+  printf '{}'
+  exit 0
+fi
+
+RESPONSE_FILE=$(mktemp "${TMPDIR:-/tmp}/overlord-cursor-stop.XXXXXX")
+USER_TOKEN="${Overlord_USER_TOKEN:-${OVLD_USER_TOKEN:-}}"
+if [ -n "$USER_TOKEN" ]; then
+  export Overlord_USER_TOKEN="$USER_TOKEN"
+fi
+
+ovld protocol hook-event \
+  --hook-type Stop \
+  --mission-id "$MISSION_ID" \
+  >"$RESPONSE_FILE" 2>/dev/null
+OVLD_EXIT=$?
+
+if [ "$OVLD_EXIT" -eq 0 ]; then
+  python3 - "$RESPONSE_FILE" <<'PY'
+import json, sys
+
+response = {}
+try:
+    with open(sys.argv[1]) as handle:
+        data = json.load(handle)
+    status = data.get("deliveryStatus") or {}
+    if status.get("needed"):
+        reason = status.get("reason") or "Pending Overlord delivery work detected."
+        response["followup_message"] = (
+            f"[Overlord] {reason} Complete the required verification and deliver the attached mission now."
+        )
+except Exception:
+    pass
+
+print(json.dumps(response, separators=(",", ":")))
+PY
+else
+  log_hook "hook-event failed exit=$OVLD_EXIT"
+  printf '{}'
+fi
+
+rm -f "$RESPONSE_FILE"
+exit 0

package/dist/connectors/adapters/cursor/scripts/overlord-mcp.mjs

@@ -328,7 +328,7 @@ process.stdin.on('data', async chunk => {
         result: {
           protocolVersion: PROTOCOL_VERSION,
           capabilities: { tools: { listChanged: false } },
-          serverInfo: { name: 'overlord-cursor', version: '0.3.2' }
+          serverInfo: { name: 'overlord-cursor', version: '0.3.3' }
         }
       });
       continue;

package/dist/connectors/adapters/cursor/skills/overlord-mission/SKILL.md

@@ -10,6 +10,9 @@ description: Cursor adapter for the shared Overlord mission workflow.
 - Agent identifier: `cursor` for `ovld protocol create` and `ovld protocol prompt`.
 - Native commands: `/attach`, `/connect`, `/load`, `/create`, `/prompt`, `/discuss-objective`, `/add-objectives`, `/record-work`.
 - Follow-up capture: the installed `beforeSubmitPrompt` hook records ordinary post-delivery user messages. Do not manually publish `user_follow_up` unless the hook is unavailable.
+- Permission capture: installed `beforeShellExecution` and `beforeMCPExecution` hooks publish permission activity through `ovld protocol` without overriding Cursor's own decision.
+- Edit capture: the installed `postToolUse` hook records Cursor file and shell effects for exact delivery attribution.
+- Stop hook: the installed `stop` hook may auto-submit one pending-delivery reminder but does not deliver for you.
 - MCP bridge: the installed `overlord` MCP server exposes the hosted-compatible `overlord_*` mission tool catalog backed by `ovld protocol`.
 - Authentication: use shared `ovld auth` credentials, Overlord-launched environment variables, or `Overlord_USER_TOKEN` / `OVLD_USER_TOKEN`.
 

package/dist/connectors/docs/05-connectors-and-agent-plugins.md

@@ -99,6 +99,9 @@ Requirements:
 
 - Install local Cursor plugin/rules/commands.
 - Add `beforeSubmitPrompt` hook to record follow-ups.
+- Map `beforeShellExecution` and `beforeMCPExecution` onto the canonical observational `PermissionRequest` hook without overriding Cursor's permission decision.
+- Add `postToolUse` edit capture for file tools and shell-mediated changes.
+- Add a bounded `stop` hook for pending-delivery reminders.
 - Add permission allow rules for protocol commands.
 - Launch with model flag where supported.
 - No thinking/effort flag required initially.

package/dist/connectors/docs/testing.md

@@ -27,10 +27,10 @@ For each connector's `conformance-manifest.yaml`
   `componentType: connector`, valid `componentKey`, required `connector` block with
   `agentIdentifier` + `capabilities`.
 - Every `capabilities` value is in `approvedConnectorCapabilities`
-  (`followUpHook`, `permissionHook`, `stopHook`, `nativeResume`, `modelFlag`,
+  (`followUpHook`, `permissionHook`, `stopHook`, `editHook`, `nativeResume`, `modelFlag`,
   `effortFlag`, `contextFilePrompt`, `permissionRules`, `slashCommands`).
 - Every `hookTypes` value is in `approvedHookTypes`
-  (`UserPromptSubmit`, `PermissionRequest`, `Stop`).
+  (`UserPromptSubmit`, `PermissionRequest`, `PostToolUse`, `Stop`).
 - `contractVersion` is a known contract version.
 - `agentIdentifier` is a documented or namespaced connector identifier (open vocab).
 

package/dist/contract/conformance-manifest.schema.yaml

@@ -80,6 +80,7 @@ properties:
             - followUpHook
             - permissionHook
             - stopHook
+            - editHook
             - nativeResume
             - modelFlag
             - effortFlag
@@ -95,6 +96,7 @@ properties:
           enum:
             - UserPromptSubmit
             - PermissionRequest
+            - PostToolUse
             - Stop
         uniqueItems: true
       managedFiles:

package/dist/index.js

@@ -1,3 +1,5 @@
+import { createRequire } from 'node:module';
+const require = createRequire(import.meta.url);
 // Overlord CLI bundle — generated by cli/scripts/build.mjs. Do not edit.
 var __create = Object.create;
 var __defProp = Object.defineProperty;
@@ -2421,18 +2423,56 @@ function configureCursorHarness({
   };
   const hookRoot = hooks.hooks;
   const hookEntries = hookRoot && typeof hookRoot === "object" && !Array.isArray(hookRoot) ? hookRoot : {};
-  const beforeSubmit = Array.isArray(hookEntries.beforeSubmitPrompt) ? [...hookEntries.beforeSubmitPrompt] : [];
-  const alreadyInstalled = beforeSubmit.some((entry) => {
-    if (!entry || typeof entry !== "object") return false;
-    const command = entry.command;
-    return typeof command === "string" && command.includes("overlord-user-prompt-submit");
-  });
-  if (!alreadyInstalled) {
-    beforeSubmit.push({ command: CURSOR_HOOK_COMMAND });
-    hookEntries.beforeSubmitPrompt = beforeSubmit;
+  const mergeHook = ({
+    event,
+    command,
+    marker,
+    extra = {}
+  }) => {
+    const entries = Array.isArray(hookEntries[event]) ? [...hookEntries[event]] : [];
+    const alreadyInstalled = entries.some((entry) => {
+      if (!entry || typeof entry !== "object") return false;
+      const installedCommand = entry.command;
+      return typeof installedCommand === "string" && installedCommand.includes(marker);
+    });
+    if (alreadyInstalled) return false;
+    entries.push({ command, ...extra });
+    hookEntries[event] = entries;
+    return true;
+  };
+  const installedHookEvents = [
+    mergeHook({
+      event: "beforeSubmitPrompt",
+      command: CURSOR_HOOK_COMMANDS.beforeSubmitPrompt,
+      marker: "overlord-user-prompt-submit"
+    }) && "beforeSubmitPrompt",
+    mergeHook({
+      event: "beforeShellExecution",
+      command: CURSOR_HOOK_COMMANDS.beforePermission,
+      marker: "overlord-permission-request"
+    }) && "beforeShellExecution",
+    mergeHook({
+      event: "beforeMCPExecution",
+      command: CURSOR_HOOK_COMMANDS.beforePermission,
+      marker: "overlord-permission-request"
+    }) && "beforeMCPExecution",
+    mergeHook({
+      event: "postToolUse",
+      command: CURSOR_HOOK_COMMANDS.postToolUse,
+      marker: "overlord-post-tool-use",
+      extra: { matcher: "Shell|Write|Edit|MultiEdit|NotebookEdit" }
+    }) && "postToolUse",
+    mergeHook({
+      event: "stop",
+      command: CURSOR_HOOK_COMMANDS.stop,
+      marker: "overlord-stop",
+      extra: { loop_limit: 1 }
+    }) && "stop"
+  ].filter((event) => Boolean(event));
+  if (installedHookEvents.length > 0) {
     hooks.hooks = hookEntries;
     if (dryRun) {
-      warnings.push(`Would merge beforeSubmitPrompt hook into ${hooksPath}.`);
+      warnings.push(`Would merge ${installedHookEvents.join(", ")} hooks into ${hooksPath}.`);
     } else {
       mkdirSync3(cursorDir, { recursive: true });
       writeFileSync3(hooksPath, `${JSON.stringify(hooks, null, 2)}
@@ -2863,7 +2903,7 @@ function inspectConnector({
     problems
   };
 }
-var CURSOR_HOOK_COMMAND, CURSOR_PROTOCOL_PERMISSION, CODEX_PLUGIN_KEY, CODEX_RULES_START, CODEX_RULES_END, CLAUDE_MARKETPLACE_NAME, CLAUDE_PLUGIN_KEY;
+var CURSOR_HOOK_COMMANDS, CURSOR_PROTOCOL_PERMISSION, CODEX_PLUGIN_KEY, CODEX_RULES_START, CODEX_RULES_END, CLAUDE_MARKETPLACE_NAME, CLAUDE_PLUGIN_KEY;
 var init_connectors = __esm({
   "src/connectors.ts"() {
     "use strict";
@@ -2871,7 +2911,12 @@ var init_connectors = __esm({
     init_config();
     init_connector_core_render();
     init_errors();
-    CURSOR_HOOK_COMMAND = "plugins/local/overlord/hooks/overlord-user-prompt-submit.sh";
+    CURSOR_HOOK_COMMANDS = {
+      beforeSubmitPrompt: "plugins/local/overlord/hooks/overlord-user-prompt-submit.sh",
+      beforePermission: "plugins/local/overlord/hooks/overlord-permission-request.sh",
+      postToolUse: "plugins/local/overlord/hooks/overlord-post-tool-use.sh",
+      stop: "plugins/local/overlord/hooks/overlord-stop.sh"
+    };
     CURSOR_PROTOCOL_PERMISSION = "Shell(ovld protocol:*)";
     CODEX_PLUGIN_KEY = "overlord@overlord-local";
     CODEX_RULES_START = "# overlord:permissions:start";
@@ -15487,7 +15532,7 @@ function recordTouchedFromPayload({
     missionId = resolved.missionId;
     ambiguous = resolved.ambiguous;
   }
-  if (toolName === "Bash") {
+  if (toolName === "Bash" || toolName === "Shell") {
     const { addedCount } = recordBashObservedChanges({ workingDirectory, missionId });
     return { recorded: true, missionId, ambiguous, files: addedCount };
   }
@@ -16618,7 +16663,17 @@ async function runProtocolCommand({
   if (subcommand === "deliver" && missionId) {
     clearCachedSessionKey({ missionId, workingDirectory });
     removeActiveSession({ workingDirectory, missionId });
-    const connectorInstallsEditHook = existsSync22(path26.join(os5.homedir(), ".claude"));
+    const connectorInstallsEditHook = existsSync22(path26.join(os5.homedir(), ".claude")) || existsSync22(
+      path26.join(
+        os5.homedir(),
+        ".cursor",
+        "plugins",
+        "local",
+        "overlord",
+        "hooks",
+        "overlord-post-tool-use.sh"
+      )
+    );
     if (connectorInstallsEditHook && !hasTouchedFilesLog({ workingDirectory, missionId }) && readChangedFiles(workingDirectory).length > 0) {
       const warning = `[overlord] warning: no touched-files log found at deliver for mission ${missionId} in ${workingDirectory}, even though this connector installs a PostToolUse edit hook. Deliver is falling back to baseline-only attribution, which can misattribute concurrent sessions' edits. Check ~/.ovld/logs/post-tool-use-hook.log for why the hook did not record any touched files.`;
       console.error(warning);
@@ -17332,6 +17387,7 @@ var init_commands = __esm({
       "heartbeat",
       "ask",
       "deliver",
+      "hook-event",
       "record-change-rationales"
     ]);
   }