overlord-cli 0.2608250836.0 → 0.2608261137.0

package/dist/connectors/AGENTS.md

@@ -316,7 +316,7 @@ connectors/
   README.md              ← architectural overview
 ```
 
-No adapter implementations have landed yet. When they do, the Claude and Codex adapters serve as the reference implementations.
+The Claude and Codex adapters are the reference implementations; Cursor, Pi, Antigravity, and OpenCode adapters have also shipped. See `connectors/HARNESS-MATRIX.md` for the current per-adapter capability matrix.
 
 ---
 

package/dist/connectors/VERSION

@@ -1 +1 @@
-0.3.36
+0.3.39

package/dist/connectors/adapters/antigravity/conformance-manifest.yaml

@@ -1,4 +1,4 @@
-contractVersion: "117"
+contractVersion: "125"
 componentType: connector
 componentKey: antigravity
 label: "Antigravity Connector"

package/dist/connectors/adapters/antigravity/plugin.json

@@ -1,7 +1,7 @@
 {
   "$schema": "https://antigravity.google/schemas/v1/plugin.json",
   "name": "overlord",
-  "version": "0.3.36",
+  "version": "0.3.39",
   "description": "Chat-driven access to Overlord mission protocol workflows through skills and MCP.",
   "author": {
     "name": "Cooperativ",

package/dist/connectors/adapters/claude/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "overlord",
-  "version": "0.3.36",
+  "version": "0.3.39",
   "description": "Overlord mission protocol workflow for Claude Code — attach/update/ask/deliver, slash commands, and hook-driven activity capture.",
   "author": {
     "name": "Cooperativ",

package/dist/connectors/adapters/claude/CAPABILITIES.md

@@ -6,7 +6,7 @@
 
 **Harness version verified** `2.1.227` · **range** `>=2.1.0` · **scheme** `semver`
 
-**Descriptor digest** `c7e52ce7d4698d35888a533b42d67c56d7616b3bb90e8537e4afcc39e1b6cc5d`
+**Descriptor digest** `0f708197c1306226e137a332532fabbc68c41023ba0bd46614468d9fef38a14e`
 
 > The tier is derived from passing fixtures, never authored. `unsupported` means the harness
 > cannot do it — do not attempt it. `not-implemented` means it is buildable and unbuilt: that is
@@ -61,7 +61,7 @@ callbacks, record unavailable evidence health.
 | `observe.prompt` | ✅ supported | `UserPromptSubmit` | fixtures: `fixtures/normalize-user-prompt-submit.json` |
 | `observe.toolCall` | 🚧 not-implemented | `PreToolUse` | tracked as `agent-session-phase-2` |
 | `observe.toolResult` | 🚧 not-implemented | `PostToolUse` | tracked as `latch-engine` |
-| `observe.fileEdit` | ✅ supported | `PostToolUse` | fixtures: `fixtures/normalize-post-tool-use-write.json`, `fixtures/post-tool-use-parity.json`, `fixtures/post-tool-use-capture.json` |
+| `observe.fileEdit` | ✅ supported | `PostToolUse` | fixtures: `fixtures/normalize-post-tool-use-write.json`, `fixtures/normalize-post-tool-use-notebook.json`, `fixtures/post-tool-use-parity.json`, `fixtures/post-tool-use-capture.json` |
 | `observe.sessionLifecycle` | 🚧 not-implemented | `SessionStart` | tracked as `latch-engine` |
 | `decide.shell` | 🚧 not-implemented | `PermissionRequest` | tracked as `latch-engine` |
 | `decide.mcp` | 🚧 not-implemented | `PermissionRequest` | tracked as `latch-engine` |

package/dist/connectors/adapters/claude/codec/claude.codec.yaml

@@ -40,6 +40,9 @@ events:
     # no generic path-key fallback.
     filePathPaths:
       - file_path
+      - notebook_path
+      - filePath
+      - path
 
   # The one place raw user content flows, deliberately: the activity feed exists to show
   # follow-up prompts. Secret redaction still runs over the text.

package/dist/connectors/adapters/claude/conformance-manifest.yaml

@@ -1,4 +1,4 @@
-contractVersion: "117"
+contractVersion: "125"
 componentType: connector
 componentKey: claude
 label: "Claude Code Connector"
@@ -14,7 +14,7 @@ connector:
   harnessCapabilities:
     path: connectors/adapters/claude/harness-capabilities.yaml
     schemaVersion: 1
-    digest: "c7e52ce7d4698d35888a533b42d67c56d7616b3bb90e8537e4afcc39e1b6cc5d"
+    digest: "0f708197c1306226e137a332532fabbc68c41023ba0bd46614468d9fef38a14e"
   # ── END GENERATED ────────────────────────────────────────────────────────────
   installPath: "~/.ovld/claude/marketplace/plugins/overlord"
   managedFiles:

package/dist/connectors/adapters/claude/fixtures/normalize-post-tool-use-notebook.json

@@ -0,0 +1,40 @@
+{
+  "fixtureVersion": 1,
+  "kind": "normalized-event",
+  "description": "Claude NotebookEdit supplies notebook_path rather than file_path; the connector-owned fallback records only the relative path.",
+  "codec": "codec/claude.codec.yaml",
+  "occurredAt": "2026-08-26T00:00:00.000Z",
+  "payload": {
+    "session_id": "claude-notebook-1",
+    "cwd": "/repo",
+    "hook_event_name": "PostToolUse",
+    "tool_name": "NotebookEdit",
+    "tool_input": {
+      "notebook_path": "/repo/notebooks/analysis.ipynb",
+      "new_source": "token=AKIAIOSFODNN7EXAMPLE"
+    }
+  },
+  "expect": {
+    "eventId": "ev_47e3742894f673ce3e71298321a3ee6d",
+    "producerSequence": null,
+    "occurredAt": "2026-08-26T00:00:00.000Z",
+    "kind": "file.edited",
+    "severity": "info",
+    "nativeEvent": "PostToolUse",
+    "nativeTurnId": null,
+    "nativeCallId": null,
+    "subagentId": null,
+    "correlationId": "claude-notebook-1",
+    "origin": "agent",
+    "summary": "Write a file: notebooks/analysis.ipynb: 26 bytes",
+    "payload": {
+      "tool": "edit",
+      "action": "Write a file",
+      "subject": "notebooks/analysis.ipynb",
+      "detail": "26 bytes",
+      "paths": ["notebooks/analysis.ipynb"],
+      "formatterVersion": 1
+    }
+  },
+  "mustNotContain": ["AKIAIOSFODNN7EXAMPLE", "/repo"]
+}

package/dist/connectors/adapters/claude/harness-capabilities.yaml

@@ -83,6 +83,7 @@ capabilities:
     native: PostToolUse
     fixtures:
       - fixtures/normalize-post-tool-use-write.json
+      - fixtures/normalize-post-tool-use-notebook.json
       - fixtures/post-tool-use-parity.json
       - fixtures/post-tool-use-capture.json
     notes: >-

package/dist/connectors/adapters/codex/.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "overlord",
-  "version": "0.3.36",
+  "version": "0.3.39",
   "description": "Chat-driven access to Overlord mission protocol workflows with hook-driven activity capture.",
   "author": {
     "name": "Cooperativ",

package/dist/connectors/adapters/codex/CAPABILITIES.md

@@ -6,7 +6,7 @@
 
 **Harness version verified** `0.147.0` · **range** `>=0.124.0` · **scheme** `semver`
 
-**Descriptor digest** `bc823089f8c0fc97b888dec6b4e10eb55b596b1194664e1fe200468fe2c622c0`
+**Descriptor digest** `4d4908a81023cf7943ebbcb35d8477751f97d916597adc3bf3cec63bdb58dc4b`
 
 > The tier is derived from passing fixtures, never authored. `unsupported` means the harness
 > cannot do it — do not attempt it. `not-implemented` means it is buildable and unbuilt: that is
@@ -47,7 +47,7 @@ Per-hook timeouts in seconds; the documentation gives a 600-second default. The
 | Classification | `post-only` |
 | Executable fixture | `fixtures/mutation-window-evidence.json` |
 
-Recorded pre/post shapes are separate calls and do not prove a paired window. A directly named native edit path normalized by the Codex codec as `file.edited` may record objective-bound, non-exclusive `declared_edit`/`direct` evidence. The recorded apply_patch completion has no normalized edit path, so it records unavailable evidence health.
+Recorded pre/post shapes are separate calls and do not prove a paired window. A directly named native edit path normalized by the Codex codec as `file.edited` may record objective-bound, non-exclusive `declared_edit`/`direct` evidence. `apply_patch` destinations are reduced only from its declared `*** Add|Update|Delete File:` headers; patch text itself is never retained.
 
 The completion fixture proves post-only timing but exposes no normalized `file.edited`
 path. Runtime file evidence is unavailable for this adapter.
@@ -77,7 +77,7 @@ path. Runtime file evidence is unavailable for this adapter.
 ### Capability notes
 
 - **`observe.toolCall`** — There is no mechanical observation path until Overlord has a native Conversation Hub client.
-- **`observe.fileEdit`** — The lifecycle PostToolUse registration forwards Codex's native payload to local `capture-change` only when `OVERLORD_OBJECTIVE_ID` resolves an exact active-session binding. Native paths normalized by the Codex codec as `file.edited` record non-exclusive `declared_edit`/`direct` evidence. Codec-normalized read, search, and fetch callbacks are silent no-ops; mutation-capable callbacks without a normalized edit path, plus shell, generic, unknown, and unmapped callbacks, record unavailable evidence health. It remains separate from mechanical agent-session observation.
+- **`observe.fileEdit`** — The lifecycle PostToolUse registration forwards Codex's native payload to local `capture-change` only when `OVERLORD_OBJECTIVE_ID` resolves an exact active-session binding. Native paths and declared `apply_patch` headers normalized by the Codex codec as `file.edited` record non-exclusive `declared_edit`/`direct` evidence. Codec-normalized read, search, and fetch callbacks are silent no-ops; mutation-capable callbacks without a normalized edit path, plus shell, generic, unknown, and unmapped callbacks, record unavailable evidence health. It remains separate from mechanical agent-session observation.
 - **`decide.universal`** — The native Codex prompt owns approvals; Overlord exposes no remote decision control.
 - **`answer.structuredQuestion`** — `codex app-server` exposes ToolRequestUserInput with per-option label/description and an autoResolutionMs — an ACP-shaped structured question in everything but name. It is unreachable until the single-subscriber question is settled.
 - **`inject.midTurn`** — ThreadInjectItems/TurnSteer exist on the experimental app-server surface only. The binary carries "expected exactly one client subscribed to the thread, found {}", so if the TUI is that one client Overlord cannot also subscribe and this path is closed.

package/dist/connectors/adapters/codex/codec/codex.codec.yaml

@@ -31,6 +31,13 @@ events:
     fileEditKind: file.edited
     filePathPaths:
       - file_path
+      - filePath
+      - path
+    # Codex apply_patch carries destinations in bounded patch headers rather
+    # than a standalone path field. The codec extracts only those headers.
+    filePathPatchTextPaths:
+      - command
+      - patch
 
   - native: UserPromptSubmit
     kind: prompt.submitted

package/dist/connectors/adapters/codex/conformance-manifest.yaml

@@ -1,4 +1,4 @@
-contractVersion: "117"
+contractVersion: "125"
 componentType: connector
 componentKey: codex
 label: "Codex Connector"
@@ -14,7 +14,7 @@ connector:
   harnessCapabilities:
     path: connectors/adapters/codex/harness-capabilities.yaml
     schemaVersion: 1
-    digest: "bc823089f8c0fc97b888dec6b4e10eb55b596b1194664e1fe200468fe2c622c0"
+    digest: "4d4908a81023cf7943ebbcb35d8477751f97d916597adc3bf3cec63bdb58dc4b"
   # ── END GENERATED ────────────────────────────────────────────────────────────
   installPath: "~/.codex/plugins/overlord"
   managedFiles:

package/dist/connectors/adapters/codex/fixtures/normalize-post-tool-use.json

@@ -16,7 +16,7 @@
     "tool_response": { "text": "changed with postgres://user:hunter2@db/app" }
   },
   "expect": {
-    "eventId": "ev_b6414915d58f532e1e3eea254578e9b9",
+    "eventId": "ev_bf289659aca425896e8c26747d35c87e",
     "producerSequence": null,
     "occurredAt": "2026-08-01T00:00:00.000Z",
     "kind": "file.edited",
@@ -28,7 +28,12 @@
     "correlationId": "codex-session-1",
     "origin": "agent",
     "summary": "Write a file",
-    "payload": { "tool": "edit", "action": "Write a file", "formatterVersion": 1 }
+    "payload": {
+      "tool": "edit",
+      "action": "Write a file",
+      "paths": ["src/token.ts"],
+      "formatterVersion": 1
+    }
   },
   "mustNotContain": ["AKIAIOSFODNN7EXAMPLE", "hunter2", "secret.jsonl", "/Users/jake"]
 }

package/dist/connectors/adapters/codex/harness-capabilities.yaml

@@ -52,8 +52,8 @@ mutationHooks:
   notes: >-
     Recorded pre/post shapes are separate calls and do not prove a paired window. A directly named
     native edit path normalized by the Codex codec as `file.edited` may record objective-bound,
-    non-exclusive `declared_edit`/`direct` evidence. The recorded apply_patch completion has no
-    normalized edit path, so it records unavailable evidence health.
+    non-exclusive `declared_edit`/`direct` evidence. `apply_patch` destinations are reduced only
+    from its declared `*** Add|Update|Delete File:` headers; patch text itself is never retained.
 
 capabilities:
   observe.prompt:
@@ -81,8 +81,9 @@ capabilities:
     notes: >-
       The lifecycle PostToolUse registration forwards Codex's native payload to local
       `capture-change` only when `OVERLORD_OBJECTIVE_ID` resolves an exact active-session binding.
-      Native paths normalized by the Codex codec as `file.edited` record non-exclusive
-      `declared_edit`/`direct` evidence. Codec-normalized read, search, and fetch callbacks are
+      Native paths and declared `apply_patch` headers normalized by the Codex codec as
+      `file.edited` record non-exclusive `declared_edit`/`direct` evidence. Codec-normalized
+      read, search, and fetch callbacks are
       silent no-ops; mutation-capable callbacks without a normalized edit path, plus shell,
       generic, unknown, and unmapped callbacks, record unavailable evidence health. It remains
       separate from mechanical agent-session observation.

package/dist/connectors/adapters/cursor/.cursor-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "overlord",
-  "version": "0.3.36",
+  "version": "0.3.39",
   "description": "Overlord mission protocol workflow for Cursor — attach/update/ask/deliver, slash commands, MCP bridge, and follow-up capture.",
   "author": {
     "name": "Cooperativ",

package/dist/connectors/adapters/cursor/conformance-manifest.yaml

@@ -1,4 +1,4 @@
-contractVersion: "117"
+contractVersion: "125"
 componentType: connector
 componentKey: cursor
 label: "Cursor Connector"

package/dist/connectors/adapters/opencode/conformance-manifest.yaml

@@ -1,4 +1,4 @@
-contractVersion: "117"
+contractVersion: "125"
 componentType: connector
 componentKey: opencode
 label: "OpenCode Connector"

package/dist/connectors/adapters/pi/conformance-manifest.yaml

@@ -1,4 +1,4 @@
-contractVersion: "117"
+contractVersion: "125"
 componentType: connector
 componentKey: pi
 label: "PI Connector"

package/dist/connectors/core/overlord-mission/SKILL.md

@@ -165,6 +165,11 @@ ovld protocol deliver --session-key <sessionKey> \
 This is the normal delivery shape: a summary is sufficient. The CLI syncs objective-ledger
 evidence independently before the lifecycle transition.
 
+After running a generator, migration, or script that writes files, you may add its known outputs
+to this existing call with `--paths path/one.ts,path/two.ts`. This is optional, paths-only
+metadata for outputs the native hook cannot name; never use it to enumerate every changed or
+opened file, and never make a separate call just to declare paths.
+
 Artifacts, optional change rationales, and a delivery report remain current annotations when
 they add review value. Use `--payload-json` when the full delivery object fits comfortably inline
 (roughly under 8 KB). Larger inline `--*-json` values are rejected; stream them through the

package/dist/connectors/core/overlord-mission/reference/cli.md

@@ -113,6 +113,10 @@ Native paths normalized by the connector-owned codec as `file.edited` are valid,
 no-ops. Mutation-capable callbacks without a normalized edit path, plus shell, generic, unknown,
 and unmapped callbacks, report unavailable evidence health.
 
+For outputs of a generator, migration, or file-writing script that the hook cannot name, an agent
+may add `--paths path/one.ts,path/two.ts` to its existing `update` or `deliver` call. It is
+optional, paths-only metadata; it is never a request to enumerate every changed or opened file.
+
 ### Shared worktree safety (critical)
 
 The working tree may contain file changes from **other agents, missions, or objectives** running concurrently in the same checkout or worktree. Those changes are **not yours to undo**.

package/dist/connectors/core/scripts/overlord-mcp.mjs

@@ -478,14 +478,14 @@ const tools = [
     name: 'overlord_manage_run_queue',
     title: 'Manage Run Queues',
     description:
-      "Use this only when the user explicitly asks to create, rename, pause, resume, delete, or reorder the project's Run Queue definitions. These are administrative project-configuration actions and require a full-scope token; adding, moving, or removing objectives inside a queue uses overlord_queue_objective and overlord_reorder_run_queue instead.",
+      "Use this only when the user explicitly asks to create, rename, pause, resume, delete, or reorder the project's Run Queue definitions, or to retry one held queue entry. The queue-definition actions are administrative project-configuration and require a full-scope token; adding, moving, or removing objectives inside a queue uses overlord_queue_objective and overlord_reorder_run_queue instead.",
     inputSchema: objectSchema(
       {
         action: {
           type: 'string',
-          enum: ['create', 'update', 'delete', 'reorder_queues'],
+          enum: ['create', 'update', 'delete', 'reorder_queues', 'retry_entry'],
           description:
-            'create a queue, update (rename/pause/resume) one, delete one, or reorder the queue definitions.'
+            'create a queue, update (rename/pause/resume) one, delete one, reorder the queue definitions, or retry_entry to clear one held entry\'s hold and attempt budget so the dispatcher tries it again.'
         },
         projectId: stringProperty(
           'Project UUID, slug, or name. Required for create and reorder_queues.'
@@ -498,6 +498,12 @@ const tools = [
         moveEntriesTo: stringProperty(
           'delete only: destination queue UUID or unambiguous name. Required when the queue still holds entries.'
         ),
+        entry: stringProperty(
+          'retry_entry only: entry UUID, objective UUID, or objective display id. One of entry or objectiveId is required.'
+        ),
+        objectiveId: stringProperty(
+          'retry_entry only: objective UUID or display id whose live entry should be retried.'
+        ),
         orderedQueues: {
           type: 'array',
           description:
@@ -953,6 +959,19 @@ async function callOverlordTool(name, args) {
       });
     }
 
+    if (action === 'retry_entry') {
+      const entry = optionalString(args, 'entry');
+      const objectiveRef = optionalString(args, 'objectiveId');
+      if (!entry && !objectiveRef) {
+        throw new Error("action 'retry_entry' requires entry or objectiveId");
+      }
+      return runProtocol('retry-queue-entry', {
+        ...(entry ? { entry } : {}),
+        ...(objectiveRef ? { 'objective-id': objectiveRef } : {}),
+        ...(projectRef ? { 'project-id': projectRef } : {})
+      });
+    }
+
     if (action === 'reorder_queues') {
       if (!projectRef) throw new Error("action 'reorder_queues' requires projectId");
       if (
@@ -1091,7 +1110,7 @@ process.stdin.on('data', async chunk => {
         result: {
           protocolVersion: PROTOCOL_VERSION,
           capabilities: { tools: { listChanged: false } },
-          serverInfo: { name: 'overlord-__OVERLORD_ADAPTER_KEY__', version: '0.3.36' }
+          serverInfo: { name: 'overlord-__OVERLORD_ADAPTER_KEY__', version: '0.3.39' }
         }
       });
       continue;

package/dist/connectors/docs/05-connectors-and-agent-plugins.md

@@ -132,7 +132,11 @@ Requirements:
 
 - Install local Cursor plugin/rules/commands.
 - Add `beforeSubmitPrompt` hook to record follow-ups.
-- Map `beforeShellExecution` and `beforeMCPExecution` onto the canonical observational `PermissionRequest` hook without overriding Cursor's permission decision.
+- Wire `beforeShellExecution`, `beforeMCPExecution`, and `preToolUse` to the Agent
+  Session Module's blocking Decide capability (`ovld agent-session request`) per
+  the descriptor — Cursor has no single universal `PermissionRequest` event, so
+  do not route all three through one shared hook. See
+  `connectors/adapters/cursor/CAPABILITIES.md` for current per-capability status.
 - Add `postToolUse` edit capture for file tools and shell-mediated changes.
 - Add a bounded `stop` hook for pending-delivery reminders.
 - Add permission allow rules for protocol commands.
@@ -212,13 +216,24 @@ Requirements:
 - Records native session/resume ID when the harness exposes one.
 - Does not restart execution by itself.
 
-### Permission Hook
+### Permission Hook (Decide capability)
+
+This is the Agent Session Module's **Decide** capability, not a one-way event
+push. See `planning/feature-plans/agent-session-module.md` and
+`docs/src/content/docs/docs-for-agents/agent-sessions.mdx` for the current
+architecture; `connectors/HARNESS-MATRIX.md` for live per-adapter status.
 
 Requirements:
 
-- Publishes `permission_request` with tool/request payload.
+- Creates an answerable request (`ovld agent-session request`) carrying the
+  tool/request payload, one of the four request kinds (`permission`,
+  `question`, `choice`, `retry`), and a decision window.
+- Blocks the harness's tool call until the request is answered, the window
+  elapses, or a fallback decision applies — it does not merely publish an
+  event and continue.
 - Does not leak secrets.
-- Works without requiring a web app.
+- Degrades gracefully without a web app open: the harness's own fallback
+  decision (allow/deny/ask) applies when no one answers in time.
 
 ### Stop Hook
 

package/dist/index.js

@@ -4458,7 +4458,7 @@ var init_catalog_generated = __esm({
         "codec": "claude",
         "integrationShape": "callback",
         "capabilityTier": 1,
-        "descriptorDigest": "c7e52ce7d4698d35888a533b42d67c56d7616b3bb90e8537e4afcc39e1b6cc5d",
+        "descriptorDigest": "0f708197c1306226e137a332532fabbc68c41023ba0bd46614468d9fef38a14e",
         "descriptorSchemaVersion": 1,
         "harness": {
           "name": "Claude Code",
@@ -4660,7 +4660,7 @@ var init_catalog_generated = __esm({
         "codec": "codex",
         "integrationShape": "callback",
         "capabilityTier": 1,
-        "descriptorDigest": "bc823089f8c0fc97b888dec6b4e10eb55b596b1194664e1fe200468fe2c622c0",
+        "descriptorDigest": "4d4908a81023cf7943ebbcb35d8477751f97d916597adc3bf3cec63bdb58dc4b",
         "descriptorSchemaVersion": 1,
         "harness": {
           "name": "Codex CLI",
@@ -4690,7 +4690,7 @@ var init_catalog_generated = __esm({
           "fixture": "fixtures/mutation-window-evidence.json",
           "reason": null,
           "evidenceRef": null,
-          "notes": "Recorded pre/post shapes are separate calls and do not prove a paired window. A directly named native edit path normalized by the Codex codec as `file.edited` may record objective-bound, non-exclusive `declared_edit`/`direct` evidence. The recorded apply_patch completion has no normalized edit path, so it records unavailable evidence health."
+          "notes": "Recorded pre/post shapes are separate calls and do not prove a paired window. A directly named native edit path normalized by the Codex codec as `file.edited` may record objective-bound, non-exclusive `declared_edit`/`direct` evidence. `apply_patch` destinations are reduced only from its declared `*** Add|Update|Delete File:` headers; patch text itself is never retained."
         },
         "capabilities": {
           "observe.prompt": {
@@ -5438,7 +5438,7 @@ var init_catalog_generated = __esm({
         }
       }
     ];
-    HARNESS_CATALOG_DIGEST = "9cc9f237fc308dec078f5a3c6fc89741fa46005d76cce4b2250dc4c82d12f847";
+    HARNESS_CATALOG_DIGEST = "9b5e5074ad777fa04280b57040141eab441d4d386da054cc415f8f2166460672";
   }
 });
 
@@ -7621,6 +7621,23 @@ function readOutcome(value) {
   }
   return void 0;
 }
+function declaredPatchPaths(input, paths, projectRoot) {
+  const output = [];
+  for (const declaredPath of paths ?? []) {
+    const patch = readPath2(input, declaredPath);
+    if (typeof patch !== "string" || patch.length > 1048576)
+      continue;
+    PATCH_HEADER.lastIndex = 0;
+    for (const match of patch.matchAll(PATCH_HEADER)) {
+      const reduced = reduceEvidencePath(match[1], projectRoot);
+      if (reduced && !output.includes(reduced))
+        output.push(reduced);
+      if (output.length >= MAX_PATCH_PATHS)
+        return output;
+    }
+  }
+  return output;
+}
 function findCodecRule(codec, nativeEventName) {
   if (!nativeEventName)
     return null;
@@ -7667,10 +7684,19 @@ function normalizeNativeEvent({ codec, payload, nativeEventName, nativeSessionId
     sealedInput.formatterVersion = FORMATTER_VERSION;
     if (rule.fileEditKind && (tool === "write" || tool === "edit")) {
       kind = rule.fileEditKind;
-      const evidencePath = (rule.filePathPaths ?? []).reduce((accepted, declaredPath) => accepted ?? reduceEvidencePath(readPath2(input, declaredPath), projectRoot), null);
-      if (evidencePath) {
-        sealedInput.paths = [evidencePath];
-        idParts.push(evidencePath);
+      const exactPaths = [];
+      for (const declaredPath of rule.filePathPaths ?? []) {
+        const reduced = reduceEvidencePath(readPath2(input, declaredPath), projectRoot);
+        if (reduced && !exactPaths.includes(reduced))
+          exactPaths.push(reduced);
+      }
+      for (const extracted of declaredPatchPaths(input, rule.filePathPatchTextPaths, projectRoot)) {
+        if (!exactPaths.includes(extracted))
+          exactPaths.push(extracted);
+      }
+      if (exactPaths.length > 0) {
+        sealedInput.paths = exactPaths;
+        idParts.push(...exactPaths);
       }
     }
     idParts.push(tool, description.subject ?? "", description.detail ?? "");
@@ -7738,6 +7764,7 @@ function summarizeEvent(kind, payload) {
     riskMarkers: payload.riskMarkers ?? []
   });
 }
+var PATCH_HEADER, MAX_PATCH_PATHS;
 var init_codec = __esm({
   "../packages/core/dist/service/agent-session/pure/codec.js"() {
     "use strict";
@@ -7748,6 +7775,8 @@ var init_codec = __esm({
     init_redact();
     init_text();
     init_tool_normalize();
+    PATCH_HEADER = /^\*\*\* (?:Add|Update|Delete) File: (.+)$/gm;
+    MAX_PATCH_PATHS = 32;
   }
 });
 
@@ -8017,7 +8046,10 @@ var init_codec_registry_generated = __esm({
             "inputPath": "tool_input",
             "fileEditKind": "file.edited",
             "filePathPaths": [
-              "file_path"
+              "file_path",
+              "notebook_path",
+              "filePath",
+              "path"
             ]
           },
           {
@@ -8064,7 +8096,13 @@ var init_codec_registry_generated = __esm({
             "turnIdPath": "turn_id",
             "fileEditKind": "file.edited",
             "filePathPaths": [
-              "file_path"
+              "file_path",
+              "filePath",
+              "path"
+            ],
+            "filePathPatchTextPaths": [
+              "command",
+              "patch"
             ]
           },
           {
@@ -22176,6 +22214,21 @@ dequeue-objective:
   Returns:
     { removed, objectiveId }. Already-unqueued objectives return removed: false.
 
+retry-queue-entry:
+  Purpose:
+    Retry one held Run Queue entry: clears its hold and resets the attempt
+    budget so the dispatcher tries it again on the next tick.
+  Required (one of):
+    --objective-id <id>         Objective UUID or display id with a live entry
+    --entry <id>                Entry UUID, objective UUID, or display id
+  Optional:
+    --project-id <id|slug|name> Confirms the entry's project
+  Returns:
+    The RunQueueEntryDto, back in waiting with attempt_count reset to 0.
+  Rules:
+    An entry already dispatched or running cannot be retried \u2014 remove it with
+    \`dequeue-objective\` (or a forced entry delete) first.
+
 search:
   Purpose:
     Find grouped mission, objective, and delivery matches by keyword, status type, or project.
@@ -22396,6 +22449,10 @@ deliver:
     evidence automatically before update, changes, and deliver. Optional rationales,
     hook health, and path attribution cannot fail delivery. Do not continue implementation
     after delivery without explicit follow-up.
+
+    --paths <a,b,c> is optional, metadata-only evidence for outputs of a generator,
+    migration, or script. It is batched into this existing call, never inspects VCS,
+    and is not an instruction to list every changed or opened file.
     Inline --*-json values larger than ~8 KB are rejected; use --change-rationales-file -
     (or --payload-file -) and stream JSON on stdin. Keep --summary inline.
     Run \`${primaryCommand} protocol changes --objective-id <id>\` to inspect the attached
@@ -22576,6 +22633,7 @@ var init_protocol_help = __esm({
       "run-queue",
       "queue-objective",
       "resume-follow-up",
+      "retry-queue-entry",
       "search",
       "search-missions",
       "sync-changes",
@@ -23621,6 +23679,37 @@ function missionDisplayId(mission) {
   const record = asRecord5(mission);
   return typeof record.displayId === "string" ? record.displayId : typeof record.id === "string" ? record.id : "unknown";
 }
+function appendDeclaredOutputPaths({
+  flags,
+  active,
+  workingDirectory
+}) {
+  const value = flags["--paths"];
+  if (value === void 0) return;
+  delete flags["--paths"];
+  if (typeof value !== "string" || value.trim() === "") {
+    throw new CliError({ message: "--paths requires a comma-separated list of output paths." });
+  }
+  if (!active) {
+    throw new CliError({
+      message: "--paths requires the attached objective session in this working directory."
+    });
+  }
+  const paths = value.split(",").map((entry) => entry.trim()).filter(Boolean);
+  if (paths.length === 0) {
+    throw new CliError({ message: "--paths requires at least one output path." });
+  }
+  appendChangeEvidence({
+    workingDirectory,
+    objectiveId: active.objectiveId,
+    sessionKey: active.sessionKey,
+    filePaths: paths.slice(0, MAX_DECLARED_OUTPUT_PATHS),
+    source: "declared_edit",
+    quality: "direct",
+    overlap: false,
+    hookHealth: "agent_declared_generator_output"
+  });
+}
 async function resolveProtocolFileInputs({
   flags,
   stdin
@@ -23859,6 +23948,7 @@ async function runProtocolCommand({
     const sessionKey = typeof flags["--session-key"] === "string" ? flags["--session-key"] : null;
     const active = sessionKey ? readActiveSessions(workingDirectory).find((entry) => entry.sessionKey === sessionKey) : void 0;
     lifecycleActive = active;
+    appendDeclaredOutputPaths({ flags, active, workingDirectory });
     if (sessionKey && active) {
       await syncObjectiveLedger({ runtime, workingDirectory, missionId, sessionKey, active });
     }
@@ -25017,7 +25107,7 @@ Note: ${reinstallHint}`);
     message: "Usage: ovld runner service <install|start|stop|restart|status|uninstall> [--no-start] [--json]"
   });
 }
-var SYNC_CHANGE_EVIDENCE_KEYS, PROTOCOL_FILE_FLAGS, SESSION_KEY_SUBCOMMANDS, OBJECTIVE_SCOPED_SUBCOMMANDS, RETIRED_CHANGE_TRACKING_FLAGS, MAX_CHANGES_HEALTH_ENTRIES, MAX_RUNNER_FAILURE_MESSAGE_LENGTH;
+var SYNC_CHANGE_EVIDENCE_KEYS, PROTOCOL_FILE_FLAGS, SESSION_KEY_SUBCOMMANDS, OBJECTIVE_SCOPED_SUBCOMMANDS, RETIRED_CHANGE_TRACKING_FLAGS, MAX_CHANGES_HEALTH_ENTRIES, MAX_DECLARED_OUTPUT_PATHS, MAX_RUNNER_FAILURE_MESSAGE_LENGTH;
 var init_commands = __esm({
   "src/commands.ts"() {
     "use strict";
@@ -25119,6 +25209,7 @@ var init_commands = __esm({
       ]
     };
     MAX_CHANGES_HEALTH_ENTRIES = 128;
+    MAX_DECLARED_OUTPUT_PATHS = 512;
     MAX_RUNNER_FAILURE_MESSAGE_LENGTH = 1200;
   }
 });