overlord-cli 0.2608101034.0 → 0.2608110816.0

package/dist/index.js

@@ -2345,6 +2345,7 @@ import {
   mkdirSync as mkdirSync3,
   readdirSync,
   readFileSync as readFileSync6,
+  realpathSync,
   rmSync,
   statSync,
   writeFileSync as writeFileSync3
@@ -2816,6 +2817,33 @@ function setupConnector({
   const warnings = [];
   const files = [];
   const stateFiles = [];
+  const previousState = readInstallState(agentKey, resolvedHome);
+  const declaredFiles = new Set(manifest.connector.managedFiles);
+  if (previousState?.installPath === installPath && existsSync6(installPath)) {
+    const resolvedInstallPath = realpathSync(installPath);
+    for (const recorded of previousState.files) {
+      if (declaredFiles.has(recorded.path)) continue;
+      const target = path6.resolve(installPath, recorded.path);
+      const resolvedTarget = existsSync6(target) ? realpathSync(target) : target;
+      if (!resolvedTarget.startsWith(`${resolvedInstallPath}${path6.sep}`)) {
+        warnings.push(
+          `Refusing to remove obsolete managed path outside install root: ${recorded.path}`
+        );
+        continue;
+      }
+      if (!existsSync6(target) || !statSync(target).isFile()) continue;
+      if (sha256(readFileSync6(target)) !== recorded.sha256) {
+        warnings.push(`Preserved modified obsolete managed file: ${recorded.path}`);
+        continue;
+      }
+      if (!dryRun) rmSync(target);
+      files.push({
+        path: recorded.path,
+        action: dryRun ? "would-remove" : "removed",
+        executable: false
+      });
+    }
+  }
   for (const relativePath of manifest.connector.managedFiles) {
     if (!managedFileSourceExists({ sourceDir, relativePath })) {
       warnings.push(`Declared managed file missing from connector source: ${relativePath}`);
@@ -3391,7 +3419,7 @@ function printHumanResult(result) {
   const verb = result.dryRun ? "Would install" : "Installed";
   printLine(`${verb} connector "${result.agentKey}" \u2192 ${result.installPath}`);
   for (const file of result.files) {
-    const marker = file.action === "written" ? "+" : file.action === "would-write" ? "~" : "=";
+    const marker = file.action === "written" ? "+" : file.action === "would-write" ? "~" : file.action === "removed" || file.action === "would-remove" ? "-" : "=";
     printLine(`  ${marker} ${file.path}${file.executable ? " (executable)" : ""}`);
   }
   for (const warning of result.warnings) {
@@ -4169,17 +4197,18 @@ var init_catalog_generated = __esm({
         "codec": "antigravity",
         "integrationShape": "callback",
         "capabilityTier": 0,
-        "descriptorDigest": "c021926c384a72bdaa62ac5f0eab57e80822c5d2996db75ea3c30c6bf5d09ce8",
+        "descriptorDigest": "e7313b23f98b6ed15a1a32849291a2a391523d4c06403bf395ecbcadfa3b11ac",
         "descriptorSchemaVersion": 1,
         "harness": {
           "name": "Antigravity CLI",
+          "verifiedVersion": "docs: Antigravity CLI v1.1.11 / Antigravity 2.0 v2.6.0",
           "versionScheme": "opaque"
         },
         "binding": {
           "source": "payload",
-          "field": null,
+          "field": "conversationId",
           "fallbackField": null,
-          "status": "unverified"
+          "status": "supported"
         },
         "decisionHold": {
           "status": "unverified",
@@ -4190,42 +4219,42 @@ var init_catalog_generated = __esm({
         },
         "capabilities": {
           "observe.prompt": {
-            "status": "unverified",
+            "status": "unsupported",
             "native": "PreInvocation",
-            "reason": null,
-            "evidenceRef": null,
-            "trackedAs": "agent-session-verify-antigravity"
+            "reason": "PreInvocation exposes invocation counters and common metadata but no submitted prompt. Reading transcriptPath to reconstruct one would violate the raw-transcript privacy boundary.",
+            "evidenceRef": "https://antigravity.google/docs/hooks#preinvocation",
+            "trackedAs": null
           },
           "observe.toolCall": {
-            "status": "unverified",
+            "status": "not-implemented",
             "native": "PreToolUse",
             "reason": null,
             "evidenceRef": null,
             "trackedAs": "agent-session-verify-antigravity"
           },
           "observe.toolResult": {
-            "status": "unverified",
-            "native": null,
+            "status": "not-implemented",
+            "native": "PostToolUse",
             "reason": null,
             "evidenceRef": null,
             "trackedAs": "agent-session-verify-antigravity"
           },
           "observe.fileEdit": {
-            "status": "unverified",
-            "native": null,
+            "status": "not-implemented",
+            "native": "PostToolUse",
             "reason": null,
             "evidenceRef": null,
             "trackedAs": "agent-session-verify-antigravity"
           },
           "observe.sessionLifecycle": {
-            "status": "unverified",
-            "native": null,
+            "status": "not-implemented",
+            "native": "Stop",
             "reason": null,
             "evidenceRef": null,
             "trackedAs": "agent-session-verify-antigravity"
           },
           "decide.shell": {
-            "status": "unverified",
+            "status": "not-implemented",
             "native": "PreToolUse",
             "reason": null,
             "evidenceRef": null,
@@ -4239,14 +4268,14 @@ var init_catalog_generated = __esm({
             "trackedAs": "agent-session-verify-antigravity"
           },
           "decide.fileWrite": {
-            "status": "unverified",
-            "native": null,
+            "status": "not-implemented",
+            "native": "PreToolUse",
             "reason": null,
             "evidenceRef": null,
             "trackedAs": "agent-session-verify-antigravity"
           },
           "decide.anyTool": {
-            "status": "unverified",
+            "status": "not-implemented",
             "native": "PreToolUse",
             "reason": null,
             "evidenceRef": null,
@@ -4267,29 +4296,29 @@ var init_catalog_generated = __esm({
             "trackedAs": "agent-session-verify-antigravity"
           },
           "answer.persistentAllow": {
-            "status": "unverified",
-            "native": null,
+            "status": "not-implemented",
+            "native": "PreToolUse.permissionOverrides",
             "reason": null,
             "evidenceRef": null,
             "trackedAs": "agent-session-verify-antigravity"
           },
           "inject.midTurn": {
-            "status": "unverified",
+            "status": "unsupported",
             "native": null,
-            "reason": null,
-            "evidenceRef": null,
-            "trackedAs": "agent-session-verify-antigravity"
+            "reason": "PreInvocation and PostInvocation can inject only at model-invocation boundaries; the hook surface has no path to deliver input while a model or tool call is actively running.",
+            "evidenceRef": "https://antigravity.google/docs/hooks#preinvocation",
+            "trackedAs": null
           },
           "inject.turnBoundary": {
-            "status": "unverified",
-            "native": null,
+            "status": "not-implemented",
+            "native": "Stop",
             "reason": null,
             "evidenceRef": null,
             "trackedAs": "agent-session-verify-antigravity"
           },
           "inject.nextTurn": {
-            "status": "unverified",
-            "native": null,
+            "status": "not-implemented",
+            "native": "PreInvocation.injectSteps.userMessage",
             "reason": null,
             "evidenceRef": null,
             "trackedAs": "agent-session-verify-antigravity"
@@ -4313,7 +4342,7 @@ var init_catalog_generated = __esm({
           {
             "id": "outside-verification-survey",
             "severity": "medium",
-            "summary": "Antigravity was not part of the harness verification survey. Every row above is unverified rather than inferred, and this connector must stay at its fixture-proven tier until a dedicated verification objective upgrades it.",
+            "summary": "Antigravity was not part of the original harness verification survey. The current first-party docs now establish hook names, payload fields, and response shapes, but the `agy` binary was unavailable for empirical timeout, failure, resume, and headless tests. The connector must stay at its fixture-proven tier until those paths are exercised.",
             "verification": "unverified",
             "mitigation": "required",
             "trackedAs": "agent-session-verify-antigravity"
@@ -4321,15 +4350,24 @@ var init_catalog_generated = __esm({
           {
             "id": "pre-tool-use-always-allows",
             "severity": "medium",
-            "summary": 'The shipped PreToolUse hook always answers `{"allow_tool":true}` and records the request through a detached `ovld protocol permission-request` call to a subcommand that does not exist. It therefore neither gates nor records anything, while its conformance manifest declared the permissionHook capability.',
+            "summary": 'The former PreToolUse hook answered `{"allow_tool":true}` even though the first-party response contract requires `decision`, and called a nonexistent detached protocol command. It neither gated nor recorded reliably; changing it to native `decision: allow` would have silently bypassed the harness permission system, so the registration was removed.',
             "verification": "verified",
-            "mitigation": "required",
-            "trackedAs": "agent-session-verify-antigravity"
+            "mitigation": "implemented",
+            "trackedAs": null
+          },
+          {
+            "id": "pre-invocation-has-no-prompt",
+            "severity": "high",
+            "summary": "The former follow-up hook guessed prompt/message/text/input fields on PreInvocation, but the first-party schema contains none of them. It could never capture a normal follow-up; reconstructing one from transcriptPath would violate the raw-transcript privacy boundary. The false followUpHook projection and the registration were removed.",
+            "verification": "verified",
+            "mitigation": "implemented",
+            "trackedAs": null
           }
         ],
         "decisionShape": {
           "codec": "antigravity",
           "neverSend": [
+            "allow_tool",
             "hookSpecificOutput",
             "permissionDecision",
             "permission"
@@ -4341,11 +4379,11 @@ var init_catalog_generated = __esm({
         "codec": "claude",
         "integrationShape": "callback",
         "capabilityTier": 3,
-        "descriptorDigest": "bdeb8c46cb12d692aced13597c6c2120312c303f3aaeb597b891d83e054db365",
+        "descriptorDigest": "5c25dafa68e2f4d0862be4378f4b7a2506ace3a4fe6b806a0e392188604f20d8",
         "descriptorSchemaVersion": 1,
         "harness": {
           "name": "Claude Code",
-          "verifiedVersion": "2.1.221",
+          "verifiedVersion": "2.1.227",
           "versionRange": ">=2.1.0",
           "versionScheme": "semver"
         },
@@ -4519,7 +4557,7 @@ var init_catalog_generated = __esm({
           {
             "id": "subagent-stop-unregistered",
             "severity": "medium",
-            "summary": "The adapter registers `Stop` and no subagent-lifecycle event. Claude Code 2.1.221 fires `SubagentStop` \u2014 not `Stop` \u2014 when a subagent finishes, and subagents now run in the background past the parent's turn boundary, so the shipped Stop registration is guaranteed not to run for work a subagent completes after the parent stopped. Nothing is lost today because that registration is already inert (see `shipped-stop-hook-inert`), which is exactly why the fix is to repair the Stop path first and only then decide whether the repaired body should also ride `SubagentStop`. Registering the current inert script on a second event would add a spawn per subagent completion and buy nothing.",
+            "summary": "The adapter registers `Stop` and no subagent-lifecycle event. Claude Code 2.1.221 fires `SubagentStop` \u2014 not `Stop` \u2014 when a subagent finishes, and subagents now run in the background past the parent's turn boundary. Version 2.1.224 also removed the 200-subagent-per-session spawn cap, increasing the frequency of this gap, so the shipped Stop registration is guaranteed not to run for work a subagent completes after the parent stopped. Nothing is lost today because that registration is already inert (see `shipped-stop-hook-inert`), which is exactly why the fix is to repair the Stop path first and only then decide whether the repaired body should also ride `SubagentStop`. Registering the current inert script on a second event would add a spawn per subagent completion and buy nothing.",
             "verification": "verified",
             "mitigation": "required",
             "trackedAs": "coo:585"
@@ -4527,7 +4565,7 @@ var init_catalog_generated = __esm({
           {
             "id": "subagent-commits-escape-delivery-delta",
             "severity": "high",
-            "summary": 'Delivery change attribution is computed from `git status --porcelain` against the attach baseline (cli/src/vcs.ts `readChangedFiles` / `filterRunAttributableChanges`); nothing in that path consults HEAD or the commit graph. A background subagent that commits, merges, or opens a PR for its own work therefore removes those files from the worktree delta, and they vanish from the delivery report entirely \u2014 not flagged, not skipped, silently absent. The PostToolUse touched-files log is unaffected (its key is `sha256(abspath(cwd) + "\\0" + MISSION_ID)`, so a subagent sharing the cwd writes to the same log), which means the evidence that the edit happened survives while the delta that decides coverage does not. Closing this means teaching the delta about commits made since the baseline, which is a CLI change with branch and worktree semantics to settle, not a hook edit.',
+            "summary": 'Delivery change attribution is computed from `git status --porcelain` against the attach baseline (cli/src/vcs.ts `readChangedFiles` / `filterRunAttributableChanges`); nothing in that path consults HEAD or the commit graph. Claude Code 2.1.221 made background-session commit-and-push behavior an explicit work-preservation default. A background subagent that commits, merges, or opens a PR for its own work therefore removes those files from the worktree delta, and they vanish from the delivery report entirely \u2014 not flagged, not skipped, silently absent. The PostToolUse touched-files log is unaffected (its key is `sha256(abspath(cwd) + "\\0" + MISSION_ID)`, so a subagent sharing the cwd writes to the same log), which means the evidence that the edit happened survives while the delta that decides coverage does not. Closing this means teaching the delta about commits made since the baseline, which is a CLI change with branch and worktree semantics to settle, not a hook edit.',
             "verification": "verified",
             "mitigation": "required",
             "trackedAs": "coo:585"
@@ -4548,11 +4586,11 @@ var init_catalog_generated = __esm({
         "codec": "codex",
         "integrationShape": "callback",
         "capabilityTier": 3,
-        "descriptorDigest": "ad12a2a5006966b0d00f074290a6d8d2396c23343305fb8504d6d489313dacc7",
+        "descriptorDigest": "4b318751579af39c81ea0c1ea7be718d66cda313622f1c5edb1cff5e3dfe8659",
         "descriptorSchemaVersion": 1,
         "harness": {
           "name": "Codex CLI",
-          "verifiedVersion": "0.146.0",
+          "verifiedVersion": "0.147.0",
           "versionRange": ">=0.124.0",
           "versionScheme": "semver"
         },
@@ -4739,20 +4777,20 @@ var init_catalog_generated = __esm({
         "adapter": "cursor",
         "codec": "cursor",
         "integrationShape": "callback",
-        "capabilityTier": 0,
-        "descriptorDigest": "4f6c4bb7a8c3637a6fc3ddd31e0ea98c8fd354badbb61117c3263561ec17ff74",
+        "capabilityTier": 3,
+        "descriptorDigest": "f5cf848a2f9287bda3ddd2a4158ce8c05ce0fdadde32212c975062edf6f64ce8",
         "descriptorSchemaVersion": 1,
         "harness": {
           "name": "Cursor Agent CLI",
-          "verifiedVersion": "2026.07.23-e383d2b",
+          "verifiedVersion": "2026.08.04-aaa8809",
           "versionRange": ">=2026.07.01",
           "versionScheme": "calendar"
         },
         "binding": {
           "source": "payload",
-          "field": "session_id",
-          "fallbackField": "conversation_id",
-          "status": "unverified"
+          "field": "conversation_id",
+          "fallbackField": "session_id",
+          "status": "supported"
         },
         "decisionHold": {
           "status": "supported",
@@ -5306,7 +5344,7 @@ var init_catalog_generated = __esm({
         }
       }
     ];
-    HARNESS_CATALOG_DIGEST = "9bf0a21f8df7f6bf417dc00c474980432a8b3167e56b56579f4bf5e51d81bbf4";
+    HARNESS_CATALOG_DIGEST = "7600395c3c63a383961856a0ff87105cfb2e019c2f5f7fa946c9d9109c90e8d9";
   }
 });
 
@@ -16785,11 +16823,11 @@ var init_git_run = __esm({
 });
 
 // ../packages/core/dist/service/local-target/worktree-git.js
-import { existsSync as existsSync16, realpathSync } from "node:fs";
+import { existsSync as existsSync16, realpathSync as realpathSync2 } from "node:fs";
 import path17 from "node:path";
 function resolveRealPath(targetPath) {
   try {
-    return realpathSync.native(targetPath);
+    return realpathSync2.native(targetPath);
   } catch {
     return path17.resolve(targetPath);
   }
@@ -19040,12 +19078,16 @@ add-objectives:
 
 create:
   Purpose:
-    Create a draft mission without attaching.
+    Create a draft mission without attaching. Without --project-id and
+    without a resolvable working-directory project, falls back to an
+    account-owned inbox item instead of failing.
   Required:
     --objective "<text>" or --objectives-json / --objectives-file <path|->
   Optional:
     --title <text>
     --project-id <id>           Skips working-directory project resolution
+    --inbox                     Force an account-owned inbox item instead of a project mission
+    --assigned-to <id>          Workspace member to own the mission (meaningless on the inbox fallback)
 
 prompt:
   Purpose:
@@ -19058,6 +19100,7 @@ prompt:
     --agent <identifier>
     --model <identifier>
     --external-session-id <id>
+    --assigned-to <id>          Workspace member to own the mission
   Returns:
     New mission/session JSON plus SESSION_KEY on stderr when available.
 
@@ -19074,6 +19117,7 @@ record-work:
   Optional:
     --title <text>
     --project-id <id>
+    --assigned-to <id>          Workspace member to own the mission
     --artifacts-json / --artifacts-file <path|->
     --change-rationales-json / --change-rationales-file <path|->
     --changed-files-json / --changed-files-file <path|->
@@ -19321,6 +19365,7 @@ var init_protocol_help = __esm({
       "load-context",
       "prompt",
       "read-context",
+      "record-touched",
       "record-work",
       "resume-follow-up",
       "search-missions",
@@ -19421,7 +19466,7 @@ import {
   mkdirSync as mkdirSync11,
   readdirSync as readdirSync5,
   readFileSync as readFileSync18,
-  realpathSync as realpathSync2,
+  realpathSync as realpathSync3,
   rmSync as rmSync5,
   writeFileSync as writeFileSync10
 } from "node:fs";
@@ -19591,10 +19636,10 @@ function recordBashObservedChanges({
 function normalizeAbsolute(filePath) {
   const resolved = path26.resolve(filePath);
   try {
-    return realpathSync2(resolved).replace(/\\/g, "/");
+    return realpathSync3(resolved).replace(/\\/g, "/");
   } catch {
     try {
-      return path26.join(realpathSync2(path26.dirname(resolved)), path26.basename(resolved)).replace(/\\/g, "/");
+      return path26.join(realpathSync3(path26.dirname(resolved)), path26.basename(resolved)).replace(/\\/g, "/");
     } catch {
       return resolved.replace(/\\/g, "/");
     }