overlord-cli 0.2608200954.0 → 0.2608210851.0

package/dist/connectors/HARNESS-MATRIX.md

@@ -28,7 +28,7 @@ Legend: ✅ supported (fixture-proven) · ⛔ unsupported (harness cannot) ·
 | `observe.prompt` | ⛔ unsupported | ✅ supported | ✅ supported | ✅ supported | 🚧 not-implemented | ✅ supported |
 | `observe.toolCall` | 🚧 not-implemented | 🚧 not-implemented | 🚧 not-implemented | 🚧 not-implemented | 🚧 not-implemented | 🚧 not-implemented |
 | `observe.toolResult` | 🚧 not-implemented | 🚧 not-implemented | 🚧 not-implemented | ✅ supported | ✅ supported | 🚧 not-implemented |
-| `observe.fileEdit` | 🚧 not-implemented | ✅ supported | 🚧 not-implemented | ✅ supported | ✅ supported | 🚧 not-implemented |
+| `observe.fileEdit` | 🚧 not-implemented | ✅ supported | ✅ supported | ✅ supported | ✅ supported | 🚧 not-implemented |
 | `observe.sessionLifecycle` | 🚧 not-implemented | 🚧 not-implemented | 🚧 not-implemented | 🚧 not-implemented | ✅ supported | 🚧 not-implemented |
 | `decide.shell` | 🚧 not-implemented | 🚧 not-implemented | 🚧 not-implemented | 🚧 not-implemented | ✅ supported | 🚧 not-implemented |
 | `decide.mcp` | ❓ unverified | 🚧 not-implemented | 🚧 not-implemented | 🚧 not-implemented | ✅ supported | 🚧 not-implemented |

package/dist/connectors/VERSION

@@ -1 +1 @@
-0.3.31
+0.3.32

package/dist/connectors/adapters/antigravity/plugin.json

@@ -1,7 +1,7 @@
 {
   "$schema": "https://antigravity.google/schemas/v1/plugin.json",
   "name": "overlord",
-  "version": "0.3.31",
+  "version": "0.3.32",
   "description": "Chat-driven access to Overlord mission protocol workflows through skills and MCP.",
   "author": {
     "name": "Cooperativ",

package/dist/connectors/adapters/claude/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "overlord",
-  "version": "0.3.31",
+  "version": "0.3.32",
   "description": "Overlord mission protocol workflow for Claude Code — attach/update/ask/deliver, slash commands, and hook-driven activity capture.",
   "author": {
     "name": "Cooperativ",

package/dist/connectors/adapters/codex/.codex-plugin/hooks.json

@@ -10,6 +10,17 @@
           }
         ]
       }
+    ],
+    "PostToolUse": [
+      {
+        "matcher": ".*",
+        "hooks": [
+          {
+            "type": "command",
+            "command": "/bin/sh -c 'exec \"${CODEX_PLUGIN_ROOT:-$HOME/.codex/plugins/overlord}/scripts/post-tool-use-hook.sh\"'"
+          }
+        ]
+      }
     ]
   }
 }

package/dist/connectors/adapters/codex/.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "overlord",
-  "version": "0.3.31",
+  "version": "0.3.32",
   "description": "Chat-driven access to Overlord mission protocol workflows with hook-driven activity capture.",
   "author": {
     "name": "Cooperativ",

package/dist/connectors/adapters/codex/CAPABILITIES.md

@@ -6,7 +6,7 @@
 
 **Harness version verified** `0.147.0` · **range** `>=0.124.0` · **scheme** `semver`
 
-**Descriptor digest** `e0d536667a5616d1a662c7225fc8ef439b5d7cdce1d6703e577190c9e5c6d9c5`
+**Descriptor digest** `ede31118a90f1afc3d8e934b7fd921759faac4afca1a08e4214a1104ee487b1d`
 
 > The tier is derived from passing fixtures, never authored. `unsupported` means the harness
 > cannot do it — do not attempt it. `not-implemented` means it is buildable and unbuilt: that is
@@ -47,7 +47,7 @@ Per-hook timeouts in seconds; the documentation gives a 600-second default. The
 | `observe.prompt` | ✅ supported | `UserPromptSubmit` | fixtures: `fixtures/normalize-user-prompt.json` |
 | `observe.toolCall` | 🚧 not-implemented | `PreToolUse` | tracked as `latch-engine` |
 | `observe.toolResult` | 🚧 not-implemented | `PostToolUse` | tracked as `latch-engine` |
-| `observe.fileEdit` | 🚧 not-implemented | `PostToolUse` | tracked as `latch-engine` |
+| `observe.fileEdit` | ✅ supported | `PostToolUse` | fixtures: `fixtures/normalize-post-tool-use.json`, `fixtures/agent-session-hooks.json`, `fixtures/post-tool-use-hook.json` |
 | `observe.sessionLifecycle` | 🚧 not-implemented | `SessionStart` | tracked as `latch-engine` |
 | `decide.shell` | 🚧 not-implemented | `PermissionRequest` | tracked as `latch-engine` |
 | `decide.mcp` | 🚧 not-implemented | `PermissionRequest` | tracked as `latch-engine` |
@@ -65,6 +65,7 @@ Per-hook timeouts in seconds; the documentation gives a 600-second default. The
 ### Capability notes
 
 - **`observe.toolCall`** — Mechanical PreToolUse observation moved to Latch `events`.
+- **`observe.fileEdit`** — The lifecycle PostToolUse registration pipes Codex's native payload to `ovld protocol record-touched`, which appends normalized changed paths to the per-session attribution log read by `deliver`. It is intentionally separate from mechanical agent-session observation, which remains owned by Latch.
 - **`decide.universal`** — Remote permission decisions moved to Latch `awaiting_input` / `latch send --resolve`.
 - **`answer.structuredQuestion`** — `codex app-server` exposes ToolRequestUserInput with per-option label/description and an autoResolutionMs — an ACP-shaped structured question in everything but name. It is unreachable until the single-subscriber question is settled.
 - **`inject.midTurn`** — ThreadInjectItems/TurnSteer exist on the experimental app-server surface only. The binary carries "expected exactly one client subscribed to the thread, found {}", so if the TUI is that one client Overlord cannot also subscribe and this path is closed.

package/dist/connectors/adapters/codex/README.md

@@ -70,7 +70,8 @@ This connector is intentionally reviewable against the four connector layers in
 
 - `skills/overlord-mission/SKILL.md` — Codex adapter template with a `<!-- @connector-core -->` marker; setup interpolates shared core content at install time.
 - `.codex-plugin/hooks.json` — Channel 1 `UserPromptSubmit` follow-up capture through
-  `ovld protocol hook-event`. Mechanical harness observation, permission, and injection
+  `ovld protocol hook-event` and `PostToolUse` delivery attribution through
+  `ovld protocol record-touched`. Mechanical harness observation, permission, and injection
   are Latch's (`latch events` / PTY), not Overlord connector registrations.
 - `.mcp.json` + `scripts/overlord-mcp.mjs` — MCP bridge to common `ovld protocol` operations. The shim is **generated**: it is rendered from `connectors/core/scripts/overlord-mcp.mjs` at setup time with the adapter key substituted, and there is no copy in this directory to edit.
 - `assets/` — branded plugin assets for Codex install surfaces.

package/dist/connectors/adapters/codex/conformance-manifest.yaml

@@ -15,10 +15,11 @@ connector:
   harnessCapabilities:
     path: connectors/adapters/codex/harness-capabilities.yaml
     schemaVersion: 1
-    digest: "e0d536667a5616d1a662c7225fc8ef439b5d7cdce1d6703e577190c9e5c6d9c5"
+    digest: "ede31118a90f1afc3d8e934b7fd921759faac4afca1a08e4214a1104ee487b1d"
   capabilities:
     - followUpHook
     - permissionHook
+    - editHook
     - nativeResume
     - modelFlag
     - effortFlag
@@ -27,6 +28,7 @@ connector:
   hookTypes:
     - UserPromptSubmit
     - PermissionRequest
+    - PostToolUse
   # ── END GENERATED ────────────────────────────────────────────────────────────
   installPath: "~/.codex/plugins/overlord"
   managedFiles:
@@ -42,6 +44,7 @@ connector:
     - "prompt-wrapper.md"
     - "scripts/overlord-mcp.mjs"
     - "scripts/permission-hook.sh"
+    - "scripts/post-tool-use-hook.sh"
     - "scripts/user-prompt-submit-hook.sh"
     - "skills/overlord-mission/SKILL.md"
     - "skills/overlord-mission/reference/cli.md"

package/dist/connectors/adapters/codex/fixtures/agent-session-hooks.json

@@ -1,10 +1,10 @@
 {
   "fixtureVersion": 1,
   "kind": "source-guard",
-  "description": "Codex Channel 1 keeps the protocol follow-up hook. Mechanical agent-session observe/decide/inject is no longer registered.",
+  "description": "Codex Channel 1 keeps the protocol follow-up hook and the lifecycle PostToolUse attribution hook. Mechanical agent-session observe/decide/inject is no longer registered.",
   "path": "connectors/adapters/codex/.codex-plugin/hooks.json",
   "assert": {
-    "mustContain": ["user-prompt-submit-hook.sh"],
+    "mustContain": ["user-prompt-submit-hook.sh", "post-tool-use-hook.sh", "\"PostToolUse\""],
     "mustNotContain": [
       "agent-session-event.sh",
       "agent-session-request.sh",
@@ -12,7 +12,6 @@
       "permission-hook.sh",
       "\"PermissionRequest\"",
       "\"PreToolUse\"",
-      "\"PostToolUse\"",
       "\"SessionStart\"",
       "\"Stop\""
     ]

package/dist/connectors/adapters/codex/fixtures/post-tool-use-hook.json

@@ -0,0 +1,13 @@
+{
+  "fixtureVersion": 1,
+  "kind": "source-guard",
+  "description": "Codex's lifecycle PostToolUse hook must create its log directory before redirecting stderr, then forward the native payload to record-touched for delivery attribution.",
+  "path": "connectors/adapters/codex/scripts/post-tool-use-hook.sh",
+  "assert": {
+    "mustContain": [
+      "mkdir -p \"$LOG_DIR\" 2>/dev/null || true",
+      "ovld protocol record-touched",
+      "codex-post-tool-use-hook.log"
+    ]
+  }
+}

package/dist/connectors/adapters/codex/harness-capabilities.yaml

@@ -62,9 +62,17 @@ capabilities:
     native: PostToolUse
     trackedAs: latch-engine
   observe.fileEdit:
-    status: not-implemented
+    status: supported
     native: PostToolUse
-    trackedAs: latch-engine
+    fixtures:
+      - fixtures/normalize-post-tool-use.json
+      - fixtures/agent-session-hooks.json
+      - fixtures/post-tool-use-hook.json
+    notes: >-
+      The lifecycle PostToolUse registration pipes Codex's native payload to
+      `ovld protocol record-touched`, which appends normalized changed paths to the
+      per-session attribution log read by `deliver`. It is intentionally separate
+      from mechanical agent-session observation, which remains owned by Latch.
   observe.sessionLifecycle:
     status: not-implemented
     native: SessionStart
@@ -192,6 +200,7 @@ legacy:
   capabilities:
     - followUpHook
     - permissionHook
+    - editHook
     - nativeResume
     - modelFlag
     - effortFlag
@@ -200,3 +209,4 @@ legacy:
   hookTypes:
     - UserPromptSubmit
     - PermissionRequest
+    - PostToolUse

package/dist/connectors/adapters/codex/scripts/post-tool-use-hook.sh

@@ -0,0 +1,30 @@
+#!/bin/bash
+# Overlord Codex PostToolUse hook. Records exact file and shell-mediated changes
+# in the per-session touched-files log used by `ovld protocol deliver` for
+# concurrent-work attribution. The CLI owns mission resolution and path
+# normalization, so this adapter only forwards Codex's native hook payload.
+
+BODY=$(cat -)
+HOOK_NAME="codex-post-tool-use"
+LOG_DIR="${HOME:-}/.ovld/logs"
+LOG_FILE="${LOG_DIR}/codex-post-tool-use-hook.log"
+
+log_hook() {
+  mkdir -p "$LOG_DIR" 2>/dev/null || return 0
+  printf '%s [%s] %s\n' "$(date -u '+%Y-%m-%dT%H:%M:%SZ')" "$HOOK_NAME" "$1" >>"$LOG_FILE" 2>/dev/null || true
+}
+
+# The stderr redirect below prevents a hook failure from writing into Codex's
+# conversation, but Bash resolves it before invoking `ovld`; create the parent
+# directory first so first-run installations can still record attribution.
+mkdir -p "$LOG_DIR" 2>/dev/null || true
+
+if ! command -v ovld >/dev/null 2>&1; then
+  log_hook "ovld not on PATH; skipping"
+  exit 0
+fi
+
+RESULT=$(printf '%s' "$BODY" | ovld protocol record-touched 2>>"$LOG_FILE")
+log_hook "record-touched: ${RESULT:-<no output>}"
+
+exit 0

package/dist/connectors/adapters/cursor/.cursor-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "overlord",
-  "version": "0.3.31",
+  "version": "0.3.32",
   "description": "Overlord mission protocol workflow for Cursor — attach/update/ask/deliver, slash commands, MCP bridge, and follow-up capture.",
   "author": {
     "name": "Cooperativ",

package/dist/connectors/core/overlord-mission/reference/cli.md

@@ -181,7 +181,7 @@ When creating missions from within a repository:
 - Add objectives to the same mission when each prompt is a sequential step toward the same feature or goal; use `ovld protocol add-objectives --mission-id <mission_id> --objectives-json '[{"objective":"..."}]'`.
 - `create` and `prompt` require `--objectives-json` or `--objectives-file` with an ordered array of `{ "objective": "...", "title": "...", "autoAdvance": true }` objects. A single objective is just an array with one item. `--auto-advance` / `--no-auto-advance` map each opted-in item to authoritative Run Queue membership (default off).
 - `add-objectives` uses the same per-item `autoAdvance` field and `--auto-advance` / `--no-auto-advance` mapping.
-- Use `ovld protocol queue-objective --objective-id <id> [--queue <id|name>] [--after <queued-entry|objective>|--front|--position <rank>]` to explicitly enqueue or move work, `dequeue-objective --objective-id <id>` to remove it, and `run-queue --project-id <id|slug|name>` to inspect every queue.
+- Use `ovld protocol run-queue [--project-id <id|slug|name>|--objective-id <id>|--mission-id <id>] [--queue <id|name>]` to inspect live queues. Entry operations use `queue-objective --objective-id <id> [--queue <id|name>] [--after <queued-entry|objective>|--front|--position <rank>]`, `dequeue-objective --objective-id <id>`, and `reorder-run-queue --queue <id|name> --ordered-entries-json <json>`; they require `execution_request:create`. Queue-definition operations use `create-run-queue`, `update-run-queue`, `delete-run-queue`, and `reorder-project-run-queues`; they require `project:update` and therefore a full-scope token.
 - `ovld protocol update-objective --objective-id <id> --auto-advance` / `--no-auto-advance` is retained as an enqueue/dequeue compatibility mapping. `autoAdvance` is deprecated and derived from `queueEntry`; legacy writes retire next release and column removal requires a later contract bump.
 - `record-work` creates exactly one **completed** objective from a single `--objective` (or positional / an `objective` field in `--payload-json`) plus a `--summary` and file-change data — it does not take `--objectives-json`. See [record-work.md](record-work.md).
 

package/dist/connectors/core/overlord-mission/reference/mcp.md

@@ -1,6 +1,6 @@
 # MCP And API Defaults
 
-- Every mission-scoped tool accepts `objectiveId` (hosted MCP) / `objective_id` (local shim) alongside `missionId`, taking an objective UUID or a display id such as `coo:756.k7xm`. A display id already names its mission, so `missionId` is **optional** whenever one is supplied — `overlord_load_mission_context`, `overlord_attach_session`, `overlord_update_session`, `overlord_deliver_session`, `overlord_add_artifact`, `overlord_add_objectives`, and `overlord_update_artifact` all resolve the mission from it. An objective **UUID** names no mission and still needs `missionId`. On `overlord_load_mission_context` and `overlord_attach_session` the objective is also a *pin*: it selects which objective to read or execute, which is the only way to address a mission that is running objectives in parallel.
+- Every mission-scoped tool accepts `objectiveId` (hosted MCP) / `objective_id` (local shim) alongside `missionId`, taking an objective UUID or a display id such as `coo:756.k7xm`. A display id already names its mission, so `missionId` is **optional** whenever one is supplied — `overlord_load_mission_context`, `overlord_attach_session`, `overlord_update_session`, `overlord_deliver_session`, `overlord_add_artifact`, `overlord_add_objectives`, and `overlord_update_artifact` all resolve the mission from it. An objective **UUID** names no mission and still needs `missionId`. On `overlord_load_mission_context` and `overlord_attach_session` the objective is also a _pin_: it selects which objective to read or execute, which is the only way to address a mission that is running objectives in parallel.
 - API requires `agentIdentifier` and `connectionMethod` on attach/connect/prompt. Connector adapters set the appropriate agent identifier; the CLI uses `cli` as the connection method, and the MCP tool defaults to `mcp`. Override with `--agent` / `--method` when calling from a different runtime.
 - Hosted Overlord MCP (`/mcp`) uses camelCase JSON keys (`missionId`, `sessionKey`, `deviceFingerprint`) matching `POST /api/protocol/*` bodies. The local shim uses snake_case keys mapped to CLI flags (`mission_id`, `session_key`, `device_fingerprint`). Some local-only operations (`connect`, `revert`, `prompt`, runner queue tools) intentionally remain out of hosted MCP for now.
 - `discover_project` accepts an explicit project id (`projectId` hosted, `project_id` local shim) or a working directory (`workingDirectory` hosted, `working_directory` local shim). When resolving by directory and a device fingerprint is available, include `deviceFingerprint` / `device_fingerprint` so resource-directory matching prefers the current device.
@@ -10,6 +10,6 @@
 - `overlord_record_work` (hosted MCP) and `ovld protocol record-work` (CLI) record already-completed chat work as a single review-column mission with a completed objective, file-change rationales, and the standard Gemini delivery summary — no `attach`/`deliver`. Hosted MCP requires `projectId` (it never chooses a project implicitly); the CLI resolves the project from the working directory or `--project-id`. The submission format is in [record-work.md](record-work.md). The route is `POST /api/protocol/record-work`.
 - `overlord_add_artifact` (hosted MCP) and `ovld protocol add-artifact` (CLI) create a mission artifact during a turn without delivering. Required: `type` / `--type`, `label` / `--label`, mission scope (`missionId` / `--mission-id`, or an objective display id as `objectiveId` / `--objective-id`), plus at least one of `contentText` / `--content-text`/`--content-text-file` or `externalUrl` / `--external-url`. Optional `sessionKey` / `--session-key` stamps session/objective provenance; `objectiveId` / `--objective-id` does the same when there is no live session, and the session key wins if both are given. Same service as REST `POST /api/missions/:id/artifacts`. The route is `POST /api/protocol/add-artifact`.
 - `overlord_update_artifact` (hosted MCP) and `ovld protocol update-artifact` (CLI) revise an existing mission artifact's label, Markdown content, and/or HTTP(S) URL in place. Required: `artifactId` / `--artifact-id`, `expectedRevision` / `--expected-revision`, and mission scope (`missionId` / `--mission-id`, or an objective display id as `objectiveId` / `--objective-id`). Provide at least one editable field. No session key is required. Same service as REST `PATCH /api/missions/:id/artifacts/:artifactId`. The route is `POST /api/protocol/update-artifact`.
-- `overlord_queue_objective` accepts `objectiveId`, optional `queue` / `after`, and `remove`; it forwards through Protocol to authoritative Run Queue membership and never directly launches work. `overlord_create_mission` / `overlord_add_objectives` optional `autoAdvance`, `overlord_update_objective.autoAdvance`, and `ovld protocol update-objective --auto-advance|--no-auto-advance` map to that same membership. `autoAdvance` is deprecated and derived from `queueEntry`; legacy storage writes retire next release and column removal requires a later contract bump. Instruction text remains editable only in `draft` or `future` state. The routes are `POST /api/protocol/queue-objective`, `dequeue-objective`, and `update-objective`.
+- Run Queue MCP stays a thin Protocol surface: `overlord_list_run_queues` reads compact/full state; `overlord_reorder_run_queue` atomically replaces one queue's complete entry order; and `overlord_queue_objective` accepts `objectiveId`, optional `queue` / `after` / `front` / `position`, and `remove`. `overlord_manage_run_queue` creates, updates, deletes, and reorders queue definitions. Entry operations use `execution_request:create`; definition operations use `project:update`, so they require a full-scope token. `overlord_create_mission` / `overlord_add_objectives` optional `autoAdvance`, `overlord_update_objective.autoAdvance`, and `ovld protocol update-objective --auto-advance|--no-auto-advance` map to that same membership. `autoAdvance` is deprecated and derived from `queueEntry`; legacy storage writes retire next release and column removal requires a later contract bump. Instruction text remains editable only in `draft` or `future` state. The routes are `POST /api/protocol/run-queue`, `reorder-run-queue`, `queue-objective`, `dequeue-objective`, `create-run-queue`, `update-run-queue`, `delete-run-queue`, `reorder-project-run-queues`, and `update-objective`.
 - Objective attachment tools follow the `<verb>_<noun>` MCP naming: `list_attachments`, `prepare_attachment_upload`, `finalize_attachment_upload`, `get_attachment_download_url`, `upload_attachment_file`. CLI commands use `attachment-*`. `mission_id` / `missionId` is optional for attachment calls when the objective or attachment id lets the server derive mission scope.
 - "Artifacts" may be published mid-turn with `add-artifact` / `overlord_add_artifact`, revised with `update-artifact` / `overlord_update_artifact`, or attached at `deliver` time (next_steps, test_results, migration, decision, note, url) — not user-uploaded files. Files attached by users live on objectives via the attachment tools above.

package/dist/connectors/core/scripts/overlord-mcp.mjs

@@ -108,6 +108,34 @@ function compactSearchResponse(response) {
   };
 }
 
+function compactRunQueueResponse(response) {
+  const value = response?.structuredContent;
+  if (!value || !Array.isArray(value.queues)) return response;
+  const compact = {
+    projectId: value.projectId,
+    queues: value.queues.map(queue => ({
+      id: queue.id,
+      name: queue.name,
+      isDefault: queue.isDefault,
+      paused: queue.paused,
+      entries: Array.isArray(queue.entries)
+        ? queue.entries.map(entry => ({
+            position: entry.position,
+            state: entry.state,
+            objectiveDisplayId: entry.objectiveDisplayId,
+            objectiveTitle: entry.objectiveTitle,
+            missionTitle: entry.missionTitle,
+            blockedReason: entry.blockedReason
+          }))
+        : []
+    }))
+  };
+  return {
+    content: [{ type: 'text', text: JSON.stringify(compact, null, 2) }],
+    structuredContent: compact
+  };
+}
+
 const tools = [
   {
     name: 'overlord_resolve_project',
@@ -357,6 +385,49 @@ const tools = [
       ['objectiveId']
     )
   },
+  {
+    name: 'overlord_list_run_queues',
+    title: 'List Run Queues',
+    description:
+      "Use this to read a project's authoritative Run Queues before adding, moving, removing, or bulk-reordering entries. Compact detail is the default and includes ordering and blocking state; request full for the complete ProjectRunQueuesDto.",
+    inputSchema: objectSchema({
+      projectId: stringProperty('Optional project UUID, slug, or name.'),
+      objectiveId: stringProperty(
+        'Optional objective UUID or display id; derives the project when projectId is omitted.'
+      ),
+      missionId: stringProperty(
+        'Optional mission UUID or display id; derives the project when projectId is omitted.'
+      ),
+      queue: stringProperty('Optional Run Queue UUID or unambiguous name to return by itself.'),
+      detail: {
+        type: 'string',
+        enum: ['compact', 'full'],
+        description:
+          'Result detail: compact (default) returns queue ordering state; full returns the raw ProjectRunQueuesDto.'
+      }
+    })
+  },
+  {
+    name: 'overlord_reorder_run_queue',
+    title: 'Reorder Run Queue entries',
+    description:
+      'Use this only when the user explicitly asks to reorder every entry in one Run Queue. Supply every live entry exactly once, using entry UUIDs, objective UUIDs, or objective display ids. Running and dispatched entries cannot move. On a mismatch, the error returns the current order; re-read the queue and retry.',
+    inputSchema: objectSchema(
+      {
+        queue: stringProperty('Run Queue UUID or unambiguous name.'),
+        orderedObjectives: {
+          type: 'array',
+          description:
+            'Complete desired top-to-bottom entry order. Each item may be an entry UUID, objective UUID, or objective display id.',
+          items: stringProperty('Run Queue entry UUID, objective UUID, or objective display id.')
+        },
+        projectId: stringProperty(
+          'Optional project UUID, slug, or name; disambiguates queue names.'
+        )
+      },
+      ['queue', 'orderedObjectives']
+    )
+  },
   {
     name: 'overlord_queue_objective',
     title: 'Queue objective',
@@ -369,6 +440,11 @@ const tools = [
         after: stringProperty(
           'Optional queued predecessor entry id, objective UUID, or objective display id. Its queue is used when queue is omitted.'
         ),
+        front: booleanProperty('When true, place this objective first in the selected queue.'),
+        position: {
+          type: 'number',
+          description: 'Optional one-based insertion position in the selected queue.'
+        },
         remove: booleanProperty(
           'When true, remove this objective from the Run Queue instead of adding or moving it.'
         )
@@ -376,6 +452,40 @@ const tools = [
       ['objectiveId']
     )
   },
+  {
+    name: 'overlord_manage_run_queue',
+    title: 'Manage Run Queues',
+    description:
+      "Use this only when the user explicitly asks to create, rename, pause, resume, delete, or reorder the project's Run Queue definitions. These are administrative project-configuration actions and require a full-scope token; adding, moving, or removing objectives inside a queue uses overlord_queue_objective and overlord_reorder_run_queue instead.",
+    inputSchema: objectSchema(
+      {
+        action: {
+          type: 'string',
+          enum: ['create', 'update', 'delete', 'reorder_queues'],
+          description:
+            'create a queue, update (rename/pause/resume) one, delete one, or reorder the queue definitions.'
+        },
+        projectId: stringProperty(
+          'Project UUID, slug, or name. Required for create and reorder_queues.'
+        ),
+        queue: stringProperty('Run Queue UUID or unambiguous name. Required for update and delete.'),
+        name: stringProperty('New queue name for create, or the replacement name for update.'),
+        paused: booleanProperty(
+          'update only: true pauses dispatching from the queue, false resumes it.'
+        ),
+        moveEntriesTo: stringProperty(
+          'delete only: destination queue UUID or unambiguous name. Required when the queue still holds entries.'
+        ),
+        orderedQueues: {
+          type: 'array',
+          description:
+            'reorder_queues only: every live queue exactly once, top to bottom, by UUID or unambiguous name. The default queue must stay first.',
+          items: stringProperty('Run Queue UUID or unambiguous name.')
+        }
+      },
+      ['action']
+    ),
+  },
   {
     name: 'overlord_attach_session',
     title: 'Attach to mission',
@@ -721,17 +831,120 @@ async function callOverlordTool(name, args) {
       ...(hasInstructionText ? { 'instruction-text': requiredString(args, 'instructionText') } : {})
     });
   }
+  if (name === 'overlord_list_run_queues') {
+    const detail = optionalString(args, 'detail') || 'compact';
+    if (detail !== 'compact' && detail !== 'full') {
+      throw new Error("detail must be 'compact' or 'full'");
+    }
+    const response = await runProtocol('run-queue', {
+      ...(optionalString(args, 'projectId')
+        ? { 'project-id': requiredString(args, 'projectId') }
+        : {}),
+      ...(optionalString(args, 'objectiveId')
+        ? { 'objective-id': requiredString(args, 'objectiveId') }
+        : {}),
+      ...(optionalString(args, 'missionId')
+        ? { 'mission-id': requiredString(args, 'missionId') }
+        : {}),
+      ...(optionalString(args, 'queue') ? { queue: requiredString(args, 'queue') } : {})
+    });
+    return detail === 'compact' ? compactRunQueueResponse(response) : response;
+  }
+  if (name === 'overlord_reorder_run_queue') {
+    if (
+      !Array.isArray(args.orderedObjectives) ||
+      !args.orderedObjectives.every(item => typeof item === 'string')
+    ) {
+      throw new Error('orderedObjectives must be an array of strings');
+    }
+    return runProtocol('reorder-run-queue', {
+      queue: requiredString(args, 'queue'),
+      'ordered-entries-json': args.orderedObjectives,
+      ...(optionalString(args, 'projectId')
+        ? { 'project-id': requiredString(args, 'projectId') }
+        : {})
+    });
+  }
   if (name === 'overlord_queue_objective') {
+    const hasAfter = optionalString(args, 'after') !== null;
+    const hasFront = args.front === true;
+    const hasPosition = args.position !== undefined;
+    if (Number(hasAfter) + Number(hasFront) + Number(hasPosition) > 1) {
+      throw new Error('Choose only one placement option: after, front, or position');
+    }
+    if (hasPosition && (!Number.isInteger(args.position) || args.position < 1)) {
+      throw new Error('position must be a positive integer');
+    }
     return runProtocol(args.remove === true ? 'dequeue-objective' : 'queue-objective', {
       'objective-id': requiredString(args, 'objectiveId'),
       ...(args.remove === true
         ? {}
         : {
             ...(optionalString(args, 'queue') ? { queue: requiredString(args, 'queue') } : {}),
-            ...(optionalString(args, 'after') ? { after: requiredString(args, 'after') } : {})
+            ...(hasAfter ? { after: requiredString(args, 'after') } : {}),
+            ...(hasFront ? { front: true } : {}),
+            ...(hasPosition ? { position: String(args.position) } : {})
           })
     });
   }
+  if (name === 'overlord_manage_run_queue') {
+    const action = optionalString(args, 'action');
+    if (action === null) throw new Error('action is required');
+    const projectRef = optionalString(args, 'projectId');
+    const queue = optionalString(args, 'queue');
+    const queueName = optionalString(args, 'name');
+
+    if (action === 'create') {
+      if (!projectRef) throw new Error("action 'create' requires projectId");
+      if (!queueName) throw new Error("action 'create' requires name");
+      return runProtocol('create-run-queue', { 'project-id': projectRef, name: queueName });
+    }
+
+    if (action === 'update') {
+      if (!queue) throw new Error("action 'update' requires queue");
+      const paused = args.paused;
+      if (paused !== undefined && typeof paused !== 'boolean') {
+        throw new Error('paused must be a boolean');
+      }
+      if (!queueName && paused === undefined) {
+        throw new Error("action 'update' requires name or paused");
+      }
+      return runProtocol('update-run-queue', {
+        queue,
+        ...(projectRef ? { 'project-id': projectRef } : {}),
+        ...(queueName ? { name: queueName } : {}),
+        ...(paused === true ? { pause: true } : {}),
+        ...(paused === false ? { resume: true } : {})
+      });
+    }
+
+    if (action === 'delete') {
+      if (!queue) throw new Error("action 'delete' requires queue");
+      const moveEntriesTo = optionalString(args, 'moveEntriesTo');
+      return runProtocol('delete-run-queue', {
+        queue,
+        ...(projectRef ? { 'project-id': projectRef } : {}),
+        ...(moveEntriesTo ? { 'move-entries-to': moveEntriesTo } : {})
+      });
+    }
+
+    if (action === 'reorder_queues') {
+      if (!projectRef) throw new Error("action 'reorder_queues' requires projectId");
+      if (
+        !Array.isArray(args.orderedQueues) ||
+        args.orderedQueues.length === 0 ||
+        !args.orderedQueues.every(item => typeof item === 'string')
+      ) {
+        throw new Error("action 'reorder_queues' requires orderedQueues as an array of strings");
+      }
+      return runProtocol('reorder-project-run-queues', {
+        'project-id': projectRef,
+        'ordered-queues-json': args.orderedQueues
+      });
+    }
+
+    throw new Error(`Unsupported Run Queue action: ${action}`);
+  }
   if (name === 'overlord_attach_session') {
     return runProtocol('attach', {
       ...missionScopeFlags(args),
@@ -869,7 +1082,7 @@ process.stdin.on('data', async chunk => {
         result: {
           protocolVersion: PROTOCOL_VERSION,
           capabilities: { tools: { listChanged: false } },
-          serverInfo: { name: 'overlord-__OVERLORD_ADAPTER_KEY__', version: '0.3.31' }
+          serverInfo: { name: 'overlord-__OVERLORD_ADAPTER_KEY__', version: '0.3.32' }
         }
       });
       continue;