overlord-cli 0.2608271506.0 → 0.2608311101.0

package/dist/connectors/VERSION

@@ -1 +1 @@
-0.3.39
+0.3.40

package/dist/connectors/adapters/antigravity/conformance-manifest.yaml

@@ -1,4 +1,4 @@
-contractVersion: "129"
+contractVersion: "130"
 componentType: connector
 componentKey: antigravity
 label: "Antigravity Connector"

package/dist/connectors/adapters/antigravity/plugin.json

@@ -1,7 +1,7 @@
 {
   "$schema": "https://antigravity.google/schemas/v1/plugin.json",
   "name": "overlord",
-  "version": "0.3.39",
+  "version": "0.3.40",
   "description": "Chat-driven access to Overlord mission protocol workflows through skills and MCP.",
   "author": {
     "name": "Cooperativ",

package/dist/connectors/adapters/claude/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "overlord",
-  "version": "0.3.39",
+  "version": "0.3.40",
   "description": "Overlord mission protocol workflow for Claude Code — attach/update/ask/deliver, slash commands, and hook-driven activity capture.",
   "author": {
     "name": "Cooperativ",

package/dist/connectors/adapters/claude/conformance-manifest.yaml

@@ -1,4 +1,4 @@
-contractVersion: "129"
+contractVersion: "130"
 componentType: connector
 componentKey: claude
 label: "Claude Code Connector"

package/dist/connectors/adapters/codex/.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "overlord",
-  "version": "0.3.39",
+  "version": "0.3.40",
   "description": "Chat-driven access to Overlord mission protocol workflows with hook-driven activity capture.",
   "author": {
     "name": "Cooperativ",

package/dist/connectors/adapters/codex/README.md

@@ -29,7 +29,7 @@ From an OpenOverlord checkout:
 ovld agent-setup codex
 ```
 
-This copies managed plugin files to `~/.codex/plugins/overlord`, merges protocol permission rules into `~/.codex/rules/default.rules`, writes the personal marketplace entry at `~/.agents/plugins/marketplace.json`, and runs `codex plugin add overlord@overlord-local` when the Codex CLI is available.
+This copies managed plugin files to `~/.codex/plugins/overlord`, merges protocol permission rules into `~/.codex/rules/default.rules`, asks before merging the Overlord workspace permission profile into `~/.codex/config.toml`, writes the personal marketplace entry at `~/.agents/plugins/marketplace.json`, and runs `codex plugin add overlord@overlord-local` when the Codex CLI is available. The profile makes `overlord` the default, disables the JS REPL, enables Codex's network proxy, and permits network access only to `**.ovld.ai`.
 
 Re-run safely any time the connector contract version changes:
 

package/dist/connectors/adapters/codex/conformance-manifest.yaml

@@ -1,4 +1,4 @@
-contractVersion: "129"
+contractVersion: "130"
 componentType: connector
 componentKey: codex
 label: "Codex Connector"

package/dist/connectors/adapters/cursor/.cursor-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "overlord",
-  "version": "0.3.39",
+  "version": "0.3.40",
   "description": "Overlord mission protocol workflow for Cursor — attach/update/ask/deliver, slash commands, MCP bridge, and follow-up capture.",
   "author": {
     "name": "Cooperativ",

package/dist/connectors/adapters/cursor/conformance-manifest.yaml

@@ -1,4 +1,4 @@
-contractVersion: "129"
+contractVersion: "130"
 componentType: connector
 componentKey: cursor
 label: "Cursor Connector"

package/dist/connectors/adapters/opencode/conformance-manifest.yaml

@@ -1,4 +1,4 @@
-contractVersion: "129"
+contractVersion: "130"
 componentType: connector
 componentKey: opencode
 label: "OpenCode Connector"

package/dist/connectors/adapters/pi/conformance-manifest.yaml

@@ -1,4 +1,4 @@
-contractVersion: "129"
+contractVersion: "130"
 componentType: connector
 componentKey: pi
 label: "PI Connector"

package/dist/connectors/core/overlord-mission/SKILL.md

@@ -173,8 +173,9 @@ opened file, and never make a separate call just to declare paths.
 Artifacts, optional change rationales, and a delivery report remain current annotations when
 they add review value. Use `--payload-json` when the full delivery object fits comfortably inline
 (roughly under 8 KB). Larger inline `--*-json` values are rejected; stream them through the
-corresponding `--*-file -` flag. A real scratch path belongs under `.overlord/tmp` and should be
-removed after delivery.
+corresponding `--*-file -` flag. A real scratch path belongs under `$OVERLORD_TMPDIR` (this launch's private
+`.overlord/tmp/sessions/<id>/` directory); `deliver` removes that directory for you, and nothing
+else under `.overlord/tmp` is yours to delete.
 
 If `heartbeat` succeeds but `deliver` or `update` fails, the session is likely fine — retry with the corresponding `--*-file -` flag instead of inline `--*-json`.
 

package/dist/connectors/core/overlord-mission/reference/mcp.md

@@ -10,6 +10,7 @@
 - `overlord_record_work` (hosted MCP) and `ovld protocol record-work` (CLI) record already-completed chat work as a single review-column mission with a completed objective, explicitly supplied changed files, optional rationales, and the standard Gemini delivery summary — no `attach`/`deliver`. Hosted MCP requires `projectId` (it never chooses a project implicitly); the CLI resolves the project from the working directory or `--project-id`. The submission format is in [record-work.md](record-work.md). The route is `POST /api/protocol/record-work`.
 - `overlord_add_artifact` (hosted MCP) and `ovld protocol add-artifact` (CLI) create a mission artifact during a turn without delivering. Required: `type` / `--type`, `label` / `--label`, mission scope (`missionId` / `--mission-id`, or an objective display id as `objectiveId` / `--objective-id`), plus at least one of `contentText` / `--content-text`/`--content-text-file` or `externalUrl` / `--external-url`. Optional `sessionKey` / `--session-key` stamps session/objective provenance; `objectiveId` / `--objective-id` does the same when there is no live session, and the session key wins if both are given. Same service as REST `POST /api/missions/:id/artifacts`. The route is `POST /api/protocol/add-artifact`.
 - `overlord_update_artifact` (hosted MCP) and `ovld protocol update-artifact` (CLI) revise an existing mission artifact's label, Markdown content, and/or HTTP(S) URL in place. Required: `artifactId` / `--artifact-id`, `expectedRevision` / `--expected-revision`, and mission scope (`missionId` / `--mission-id`, or an objective display id as `objectiveId` / `--objective-id`). Provide at least one editable field. No session key is required. Same service as REST `PATCH /api/missions/:id/artifacts/:artifactId`. The route is `POST /api/protocol/update-artifact`.
+- `overlord_delete_missions` / `overlord_delete_objectives` (hosted MCP) and `ovld protocol delete-missions` / `delete-objectives` (CLI) bulk soft-delete one to 100 mission or objective UUID/display-id references atomically. They require `confirm: true` / `--confirm`; before setting it, agents must show the resolved list to the user and receive affirmative approval. A missing, duplicate, deleted, or unauthorized target rejects the entire request. Mission deletion includes live child objectives; objective deletion removes live Run Queue membership.
 - Run Queue MCP stays a thin Protocol surface: `overlord_list_run_queues` reads compact/full state; `overlord_reorder_run_queue` atomically replaces one queue's complete entry order; and `overlord_queue_objective` accepts `objectiveId`, optional `queue` / `after` / `front` / `position`, and `remove`. `overlord_manage_run_queue` creates, updates, deletes, and reorders queue definitions. Entry operations use `execution_request:create`; definition operations use `project:update`, so they require a full-scope token. Instruction text remains editable only in `draft` or `future` state. The routes are `POST /api/protocol/run-queue`, `reorder-run-queue`, `queue-objective`, `dequeue-objective`, `create-run-queue`, `update-run-queue`, `delete-run-queue`, `reorder-project-run-queues`, and `update-objective`.
 - Objective attachment tools follow the `<verb>_<noun>` MCP naming: `list_attachments`, `prepare_attachment_upload`, `finalize_attachment_upload`, `get_attachment_download_url`, `upload_attachment_file`. CLI commands use `attachment-*`. `mission_id` / `missionId` is optional for attachment calls when the objective or attachment id lets the server derive mission scope.
 - "Artifacts" may be published mid-turn with `add-artifact` / `overlord_add_artifact`, revised with `update-artifact` / `overlord_update_artifact`, or attached at `deliver` time (next_steps, test_results, migration, decision, note, url) — not user-uploaded files. Files attached by users live on objectives via the attachment tools above.

package/dist/connectors/core/scripts/overlord-mcp.mjs

@@ -110,16 +110,14 @@ function compactSearchResponse(response) {
     results: value.results.map(result => ({
       ...result,
       matches: Array.isArray(result.matches)
-        ? result.matches
-            .slice(0, 2)
-            .map(match => {
-              const compactMatch = { ...match };
-              delete compactMatch.snippet;
-              delete compactMatch.matchedTerms;
-              delete compactMatch.createdAt;
-              delete compactMatch.updatedAt;
-              return compactMatch;
-            })
+        ? result.matches.slice(0, 2).map(match => {
+            const compactMatch = { ...match };
+            delete compactMatch.snippet;
+            delete compactMatch.matchedTerms;
+            delete compactMatch.createdAt;
+            delete compactMatch.updatedAt;
+            return compactMatch;
+          })
         : result.matches
     }))
   };
@@ -312,7 +310,7 @@ const tools = [
     name: 'overlord_list_deliveries',
     title: 'List mission deliveries',
     description:
-      'Use this to read a mission\'s delivered work after locating it. Returns newest-first normalized delivery records including summary, verification, follow-up notes, and authoritative delivery evidence; it never exposes raw delivery payloads.',
+      "Use this to read a mission's delivered work after locating it. Returns newest-first normalized delivery records including summary, verification, follow-up notes, and authoritative delivery evidence; it never exposes raw delivery payloads.",
     inputSchema: objectSchema({
       missionId: stringProperty(
         'Mission UUID or workspace display id. Optional when objectiveId is a display id such as coo:756.k7xm, which already names its mission.'
@@ -336,7 +334,7 @@ const tools = [
           'Optional reasoning-effort setting to snapshot onto the execution request.'
         ),
         executionTargetId: stringProperty(
-          'Optional eligible execution target id. Omit to use the project\'s normal target selection.'
+          "Optional eligible execution target id. Omit to use the project's normal target selection."
         )
       },
       ['objectiveId', 'agent']
@@ -407,6 +405,44 @@ const tools = [
       ['objectiveId']
     )
   },
+  {
+    name: 'overlord_delete_missions',
+    title: 'Delete missions',
+    description:
+      'Use this only after showing the resolved mission list to the user and receiving an affirmative response. Soft-deletes one to 100 missions atomically; any missing, duplicate, deleted, or unauthorized target rejects the entire request. Deleting a mission also soft-deletes its live objectives.',
+    inputSchema: objectSchema(
+      {
+        missionIds: {
+          type: 'array',
+          description: 'One to 100 unique mission UUIDs or display IDs to delete.',
+          items: stringProperty('Mission UUID or workspace display ID.')
+        },
+        confirm: booleanProperty(
+          'Must be true only after the user has reviewed the resolved mission list and affirmatively approved deletion.'
+        )
+      },
+      ['missionIds', 'confirm']
+    )
+  },
+  {
+    name: 'overlord_delete_objectives',
+    title: 'Delete objectives',
+    description:
+      'Use this only after showing the resolved objective list to the user and receiving an affirmative response. Soft-deletes one to 100 objectives atomically; any missing, duplicate, deleted, or unauthorized target rejects the entire request. Deleting an objective also removes its live Run Queue membership.',
+    inputSchema: objectSchema(
+      {
+        objectiveIds: {
+          type: 'array',
+          description: 'One to 100 unique objective UUIDs or display IDs to delete.',
+          items: stringProperty('Objective UUID or display ID.')
+        },
+        confirm: booleanProperty(
+          'Must be true only after the user has reviewed the resolved objective list and affirmatively approved deletion.'
+        )
+      },
+      ['objectiveIds', 'confirm']
+    )
+  },
   {
     name: 'overlord_list_run_queues',
     title: 'List Run Queues',
@@ -485,12 +521,14 @@ const tools = [
           type: 'string',
           enum: ['create', 'update', 'delete', 'reorder_queues', 'retry_entry'],
           description:
-            'create a queue, update (rename/pause/resume) one, delete one, reorder the queue definitions, or retry_entry to clear one held entry\'s hold and attempt budget so the dispatcher tries it again.'
+            "create a queue, update (rename/pause/resume) one, delete one, reorder the queue definitions, or retry_entry to clear one held entry's hold and attempt budget so the dispatcher tries it again."
         },
         projectId: stringProperty(
           'Project UUID, slug, or name. Required for create and reorder_queues.'
         ),
-        queue: stringProperty('Run Queue UUID or unambiguous name. Required for update and delete.'),
+        queue: stringProperty(
+          'Run Queue UUID or unambiguous name. Required for update and delete.'
+        ),
         name: stringProperty('New queue name for create, or the replacement name for update.'),
         paused: booleanProperty(
           'update only: true pauses dispatching from the queue, false resumes it.'
@@ -512,7 +550,7 @@ const tools = [
         }
       },
       ['action']
-    ),
+    )
   },
   {
     name: 'overlord_attach_session',
@@ -862,6 +900,33 @@ async function callOverlordTool(name, args) {
       ...(hasInstructionText ? { 'instruction-text': requiredString(args, 'instructionText') } : {})
     });
   }
+  if (name === 'overlord_delete_missions') {
+    if (!Array.isArray(args.missionIds) || !args.missionIds.every(id => typeof id === 'string')) {
+      throw new Error('missionIds must be an array of strings');
+    }
+    if (args.confirm !== true) {
+      throw new Error('confirm must be true after the user has affirmatively approved deletion');
+    }
+    return runProtocol('delete-missions', {
+      'mission-ids-json': args.missionIds,
+      confirm: true
+    });
+  }
+  if (name === 'overlord_delete_objectives') {
+    if (
+      !Array.isArray(args.objectiveIds) ||
+      !args.objectiveIds.every(id => typeof id === 'string')
+    ) {
+      throw new Error('objectiveIds must be an array of strings');
+    }
+    if (args.confirm !== true) {
+      throw new Error('confirm must be true after the user has affirmatively approved deletion');
+    }
+    return runProtocol('delete-objectives', {
+      'objective-ids-json': args.objectiveIds,
+      confirm: true
+    });
+  }
   if (name === 'overlord_list_run_queues') {
     const detail = optionalString(args, 'detail') || 'compact';
     if (detail !== 'compact' && detail !== 'full') {
@@ -1110,7 +1175,7 @@ process.stdin.on('data', async chunk => {
         result: {
           protocolVersion: PROTOCOL_VERSION,
           capabilities: { tools: { listChanged: false } },
-          serverInfo: { name: 'overlord-__OVERLORD_ADAPTER_KEY__', version: '0.3.39' }
+          serverInfo: { name: 'overlord-__OVERLORD_ADAPTER_KEY__', version: '0.3.40' }
         }
       });
       continue;

package/dist/connectors/docs/05-connectors-and-agent-plugins.md

@@ -97,6 +97,7 @@ Requirements:
   code changes.
 - Include permission hook to record tool permission requests.
 - Install protocol permission rules for `ovld protocol`.
+- During interactive Codex setup, ask `Configure Codex permissions to allow it to communicate with the Overlord server?` (default yes). On acceptance, merge the `overlord` workspace permission profile into `~/.codex/config.toml`: make it the default permission profile, disable `js_repl`, enable the network proxy, and allow only `**.ovld.ai` network access for that profile. Non-interactive `ovld agent-setup codex` applies the same idempotent merge so scripted setup remains usable.
 - Avoid generating or relying on a repository-local `AGENTS.md` for Overlord itself.
 - Detect or receive Codex native session/thread IDs when possible.
 - Launch with model and reasoning effort mapping: