overlord-cli 0.2610081212.0 → 0.2610201032.0

package/dist/connectors/VERSION

@@ -1 +1 @@
-0.3.50
+0.3.51

package/dist/connectors/adapters/antigravity/conformance-manifest.yaml

@@ -1,4 +1,4 @@
-contractVersion: "153"
+contractVersion: "160"
 componentType: connector
 componentKey: antigravity
 label: "Antigravity Connector"

package/dist/connectors/adapters/antigravity/plugin.json

@@ -1,7 +1,7 @@
 {
   "$schema": "https://antigravity.google/schemas/v1/plugin.json",
   "name": "overlord",
-  "version": "0.3.50",
+  "version": "0.3.51",
   "description": "Chat-driven access to Overlord mission protocol workflows through skills and MCP.",
   "author": {
     "name": "Cooperativ",

package/dist/connectors/adapters/claude/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "overlord",
-  "version": "0.3.50",
+  "version": "0.3.51",
   "description": "Overlord mission protocol workflow for Claude Code — attach/update/ask/deliver, slash commands, and hook-driven activity capture.",
   "author": {
     "name": "Cooperativ",

package/dist/connectors/adapters/claude/conformance-manifest.yaml

@@ -1,4 +1,4 @@
-contractVersion: "153"
+contractVersion: "160"
 componentType: connector
 componentKey: claude
 label: "Claude Code Connector"

package/dist/connectors/adapters/claude/hooks/hooks.json

@@ -6,7 +6,7 @@
         "hooks": [
           {
             "type": "command",
-            "command": "${CLAUDE_PLUGIN_ROOT}/scripts/user-prompt-submit-hook.sh"
+            "command": "\"${CLAUDE_PLUGIN_ROOT}/scripts/user-prompt-submit-hook.sh\""
           }
         ]
       }
@@ -17,7 +17,7 @@
         "hooks": [
           {
             "type": "command",
-            "command": "${CLAUDE_PLUGIN_ROOT}/scripts/post-tool-use-hook.sh"
+            "command": "\"${CLAUDE_PLUGIN_ROOT}/scripts/post-tool-use-hook.sh\""
           }
         ]
       }
@@ -28,7 +28,7 @@
         "hooks": [
           {
             "type": "command",
-            "command": "${CLAUDE_PLUGIN_ROOT}/scripts/stop-hook.sh"
+            "command": "\"${CLAUDE_PLUGIN_ROOT}/scripts/stop-hook.sh\""
           }
         ]
       }

package/dist/connectors/adapters/codex/.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "overlord",
-  "version": "0.3.50",
+  "version": "0.3.51",
   "description": "Chat-driven access to Overlord mission protocol workflows with hook-driven activity capture.",
   "author": {
     "name": "Cooperativ",

package/dist/connectors/adapters/codex/conformance-manifest.yaml

@@ -1,4 +1,4 @@
-contractVersion: "153"
+contractVersion: "160"
 componentType: connector
 componentKey: codex
 label: "Codex Connector"

package/dist/connectors/adapters/cursor/.cursor-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "overlord",
-  "version": "0.3.50",
+  "version": "0.3.51",
   "description": "Overlord mission protocol workflow for Cursor — attach/update/ask/deliver, slash commands, MCP bridge, and follow-up capture.",
   "author": {
     "name": "Cooperativ",

package/dist/connectors/adapters/cursor/conformance-manifest.yaml

@@ -1,4 +1,4 @@
-contractVersion: "153"
+contractVersion: "160"
 componentType: connector
 componentKey: cursor
 label: "Cursor Connector"

package/dist/connectors/adapters/opencode/conformance-manifest.yaml

@@ -1,4 +1,4 @@
-contractVersion: "153"
+contractVersion: "160"
 componentType: connector
 componentKey: opencode
 label: "OpenCode Connector"

package/dist/connectors/adapters/pi/conformance-manifest.yaml

@@ -1,4 +1,4 @@
-contractVersion: "153"
+contractVersion: "160"
 componentType: connector
 componentKey: pi
 label: "PI Connector"

package/dist/connectors/core/scripts/overlord-mcp.mjs

@@ -1271,7 +1271,7 @@ process.stdin.on('data', async chunk => {
         result: {
           protocolVersion: PROTOCOL_VERSION,
           capabilities: { tools: { listChanged: false } },
-          serverInfo: { name: 'overlord-__OVERLORD_ADAPTER_KEY__', version: '0.3.50' }
+          serverInfo: { name: 'overlord-__OVERLORD_ADAPTER_KEY__', version: '0.3.51' }
         }
       });
       continue;

package/dist/connectors/docs/testing.md

@@ -17,6 +17,57 @@ invoke `ovld protocol …`). Tests enforce that it never reaches further.
 
 ---
 
+## Claude plugin CI
+
+`.github/workflows/claude-plugin.yml` runs on relevant pull requests and manual
+dispatch. `yarn connectors:check` includes `yarn connectors:claude:check`, which
+uses the setup managed-file renderer to stage the complete Claude plugin in a
+temporary directory, including the shared skill, references and post-tool hook.
+It runs `claude plugin validate --strict` and removes staging on success or
+failure. Install Claude Code 2.1.303, the CI tooling pin, to run it locally.
+This pin does not update the fixture-backed verified `HARNESS-MATRIX` version.
+
+`claude plugin test` runs mod handler tests (`.test.ts`/`.test.tsx`). Overlord's
+shell-hook/skill plugin has no mod handlers, so the checker reports it as not
+applicable. Hook behavior remains covered by executable descriptor fixtures in
+`connectors:capabilities:check`. A future mod must add native tests and wire
+`claude plugin test` into this job when it ships.
+
+The manual workflow's `run_evals` input enables `yarn connectors:claude:eval`
+only on the default branch, after validation. Configure the repository secret
+`ANTHROPIC_API_KEY` for that job; PR checks receive no model credential.
+Two cases in `test/fixtures/claude-plugin-evals` test inspection without
+attachment and draft creation without execution. They consult the rendered
+mission skill but cannot run shell commands or mutate real missions. They use
+deterministic graders, one run per case, no baseline, a perfect-score threshold,
+a $2 launch ceiling and 90-second per-case timeouts. Claude checks the ceiling
+before launching each run, so one in-flight run can exceed it. This is a small
+behavior smoke suite, not a statistical quality certification.
+
+Reports stay local (`--no-publish`) and are uploaded as GitHub artifacts for
+14 days, including on failure when reports exist. Locally, set
+`CLAUDE_PLUGIN_REPORT_DIR` to a persistent output directory; otherwise the
+checker prints a newly created temporary report directory. Native nonzero
+exit codes propagate, including failed graders, unavailable eval service,
+authentication errors and budget exhaustion. There is no skip-to-green path.
+
+### Hook failure policy
+
+Keep `onFailure` unset for current Claude hooks. `UserPromptSubmit` records
+activity, `PostToolUse` observes an action that already ran, and `Stop` offers
+guidance. Blocking on capture outages would impede prompts without enforcing
+attach-before-edit. Scripts also deliberately suppress transport failures, so
+a manifest field alone would not turn them into policy gates. The dormant
+permission hook must continue to defer to Claude on failure under the contract.
+
+Claude Code 2.1.295 added `onFailure: "block"` for command/HTTP hooks; it has no
+effect on `Stop` or background command hooks. A future attach-before-edit gate
+needs a separate opt-in pre-action policy, explicit unbound-session behavior,
+failure fixtures and contract review before adoption. See Anthropic's
+[hook failure reference](https://code.claude.com/docs/en/hooks#block-the-action-when-a-hook-fails),
+[plugin command reference](https://code.claude.com/docs/en/plugins/cli-reference#plugin-test)
+and [eval documentation](https://code.claude.com/docs/en/plugin-evals).
+
 ## A. Conformance Manifest (shared with Layer 3 §3.1)
 
 For each connector's `conformance-manifest.yaml`

package/dist/index.js

@@ -39260,6 +39260,8 @@ Environment fallback:
   --session-key  <- SESSION_KEY printed on stderr after attach/connect/prompt/resume-follow-up
   --mission-id    <- mission display id (e.g. coo:8) or UUID
   --objective-id  <- OVERLORD_OBJECTIVE_ID (objective display id, e.g. coo:8.k7xm)
+                     Read commands inherit it only with no explicit mission or a matching
+                     parent mission display id; explicit objective flags are always validated.
   backend URL    <- overlord.toml backend_url, OVERLORD_BACKEND_URL, or dev OVERLORD_BACKEND_URL_DEV
   auth token     <- OVERLORD_USER_TOKEN, OVLD_USER_TOKEN, or USER_TOKEN
 
@@ -39354,6 +39356,11 @@ connect:
 load-context:
   Purpose:
     Read mission details without creating a session.
+    An explicit mission (flag or positional) ignores an inherited objective unless
+    its parent mission display id matches. This also applies to read-context and
+    attachment reads, including bootstrap fallback. For UUID selectors, explicitly
+    pass the objective to pin the read. Explicit objective/mission pairs retain
+    validation. Reads never change the active execution binding or update/delivery target.
   Required:
     --mission-id <id>            Or --objective-id with a display id
   Optional:
@@ -39931,6 +39938,7 @@ hook-event:
 read-context:
   Purpose:
     Read persistent shared context written by earlier sessions.
+    Explicit mission selection ignores a different inherited objective (see load-context).
   Required:
     --mission-id <id>
   Optional:
@@ -39989,6 +39997,7 @@ attachment-list:
     with --objective-id).
     Each entry includes id, filename, mimeType, sizeBytes, status, storageKey, and url.
     The url field is a server-relative path; prepend the backend base URL to download.
+    Explicit mission selection ignores a different inherited objective (see load-context).
   Required:
     --mission-id <id>
   Optional:
@@ -39998,6 +40007,7 @@ attachment-download-url:
   Purpose:
     Return the authenticated download URL for a specific attachment, or save it
     to a new file using the CLI's existing authentication.
+    Explicit mission selection ignores a different inherited objective (see load-context).
   Required:
     --mission-id <id>
     --attachment-id <id>  (use the id from attachment-list output)
@@ -41164,6 +41174,25 @@ function missionDisplayId(mission) {
   const record2 = asRecord5(mission);
   return typeof record2.displayId === "string" ? record2.displayId : typeof record2.id === "string" ? record2.id : "unknown";
 }
+function createdObjectiveLines(mission) {
+  const objectives = asRecord5(mission).objectives;
+  if (!Array.isArray(objectives)) return [];
+  return objectives.map((entry, index) => {
+    const objective = asRecord5(entry);
+    const identifier = typeof objective.displayId === "string" && objective.displayId || typeof objective.id === "string" && objective.id || `#${index + 1}`;
+    const assignedAgent = typeof objective.assignedAgent === "string" ? objective.assignedAgent : "project default";
+    const model = typeof objective.model === "string" ? objective.model : "project default";
+    const resource = typeof objective.resourceKey === "string" ? objective.resourceKey : "project default";
+    const fields = [
+      `agent=${assignedAgent}`,
+      `model=${model}`,
+      `resource=${resource}`,
+      `autoAdvance=${objective.autoAdvance === true}`
+    ];
+    const title = typeof objective.title === "string" && objective.title.trim();
+    return `  Objective ${identifier}${title ? ` (${title})` : ""}: ${fields.join(", ")}`;
+  });
+}
 function appendDeclaredOutputPaths({
   flags,
   active,
@@ -41272,6 +41301,8 @@ Run \`${primaryCommand} protocol help\` for usage.`
   rejectOversizedInlineJson({ flags: parsed.flags });
   const workingDirectory = process.cwd();
   const flags = Object.fromEntries(parsed.flags);
+  const explicitMissionId = flagValue(parsed.flags, "--mission-id") ?? parsed.positional[0];
+  const mayInheritObjective = (objectiveId) => !READ_ONLY_MISSION_SUBCOMMANDS.has(subcommand) || explicitMissionId === void 0 || missionDisplayIdFromObjectiveRef(objectiveId) === explicitMissionId.trim();
   const retiredFlags = RETIRED_CHANGE_TRACKING_FLAGS[subcommand] ?? [];
   const suppliedRetiredFlags = retiredFlags.filter((flag) => flag in flags);
   if (suppliedRetiredFlags.length > 0) {
@@ -41282,10 +41313,9 @@ Run \`${primaryCommand} protocol help\` for usage.`
   if (subcommand === "attach" && typeof flags["--execution-request-id"] !== "string" && process.env.OVERLORD_EXECUTION_REQUEST_ID) {
     flags["--execution-request-id"] = process.env.OVERLORD_EXECUTION_REQUEST_ID;
   }
-  if (OBJECTIVE_SCOPED_SUBCOMMANDS.has(subcommand) && typeof flags["--objective-id"] !== "string" && process.env.OVERLORD_OBJECTIVE_ID) {
+  if (OBJECTIVE_SCOPED_SUBCOMMANDS.has(subcommand) && typeof flags["--objective-id"] !== "string" && process.env.OVERLORD_OBJECTIVE_ID && mayInheritObjective(process.env.OVERLORD_OBJECTIVE_ID)) {
     flags["--objective-id"] = process.env.OVERLORD_OBJECTIVE_ID;
   }
-  const explicitMissionId = flagValue(parsed.flags, "--mission-id") ?? parsed.positional[0];
   if (subcommand === "attach" || OBJECTIVE_SCOPED_SUBCOMMANDS.has(subcommand)) {
     const needsChannelId = subcommand === "attach" && typeof flags["--session-channel-id"] !== "string";
     const needsExecutionRequestId = subcommand === "attach" && typeof flags["--execution-request-id"] !== "string";
@@ -41306,7 +41336,7 @@ Run \`${primaryCommand} protocol help\` for usage.`
         if (needsExecutionRequestId && recovered.executionRequestId) {
           flags["--execution-request-id"] = recovered.executionRequestId;
         }
-        if (needsObjectiveId && recovered.objectiveId) {
+        if (needsObjectiveId && recovered.objectiveId && mayInheritObjective(recovered.objectiveId)) {
           flags["--objective-id"] = recovered.objectiveId;
         }
       }
@@ -41864,7 +41894,10 @@ async function runManagementCommand({
         }
       }
       if (json2) printJson(mission);
-      else console.log(`Created mission ${missionDisplayId(mission)}`);
+      else {
+        console.log(`Created mission ${missionDisplayId(mission)}`);
+        for (const line of createdObjectiveLines(mission)) console.log(line);
+      }
       return;
     }
     case "attach":
@@ -42655,7 +42688,7 @@ Note: ${reinstallHint}`);
     message: "Usage: ovld runner service <install|start|stop|restart|status|uninstall> [--no-start] [--json]"
   });
 }
-var SYNC_CHANGE_EVIDENCE_KEYS, OBJECTIVE_DISPLAY_ID_RE, PROTOCOL_FILE_FLAGS, SESSION_KEY_SUBCOMMANDS, OBJECTIVE_SCOPED_SUBCOMMANDS, RETIRED_CHANGE_TRACKING_FLAGS, MAX_CHANGES_HEALTH_ENTRIES, MAX_DECLARED_OUTPUT_PATHS, MAX_RUNNER_FAILURE_MESSAGE_LENGTH;
+var SYNC_CHANGE_EVIDENCE_KEYS, OBJECTIVE_DISPLAY_ID_RE, PROTOCOL_FILE_FLAGS, SESSION_KEY_SUBCOMMANDS, OBJECTIVE_SCOPED_SUBCOMMANDS, READ_ONLY_MISSION_SUBCOMMANDS, RETIRED_CHANGE_TRACKING_FLAGS, MAX_CHANGES_HEALTH_ENTRIES, MAX_DECLARED_OUTPUT_PATHS, MAX_RUNNER_FAILURE_MESSAGE_LENGTH;
 var init_commands = __esm({
   "src/commands.ts"() {
     "use strict";
@@ -42748,6 +42781,12 @@ var init_commands = __esm({
       "update-artifact",
       "write-context"
     ]);
+    READ_ONLY_MISSION_SUBCOMMANDS = /* @__PURE__ */ new Set([
+      "load-context",
+      "read-context",
+      "attachment-list",
+      "attachment-download-url"
+    ]);
     RETIRED_CHANGE_TRACKING_FLAGS = {
       update: ["--track-changed-files", "--changed-files-json", "--changed-files-file"],
       deliver: [