overlord-cli 0.2610242007.0 → 0.2610281354.0

package/dist/connectors/README.md

@@ -9,6 +9,7 @@ OpenCode, Antigravity, and others). A connector is what lets an agent speak the
 - [For Users](#for-users)
   - [Setting up connectors](#setting-up-connectors)
   - [Connector bundles](#connector-bundles)
+  - [Plugin marketplace](#plugin-marketplace)
   - [Extension point](#extension-point)
 - [For Developers](#for-developers)
   - [Contract Component](#contract-component)
@@ -41,6 +42,19 @@ connector contract version changes.
 - [Antigravity](adapters/antigravity/README.md): Antigravity plugin exposing the local mission workflow to Antigravity CLI/IDE sessions.
 - [OpenCode](adapters/opencode/README.md): control-plane connector (Shape C) driven by `ovld agent-session sidecar` — no hook scripts.
 
+### Plugin marketplace
+
+The dedicated [Overlord ecosystem marketplace](https://github.com/cooperativ-labs/overlord-marketplace#readme)
+is intended to distribute the optional Knowledgebase plugin for Codex CLI and
+Claude Code. Publication and public first-install verification are pending; consult
+its README for the current status and installation and refresh instructions. Knowledgebase
+also supports MCP-only use; its onboarding changes are tracked in per:214.
+
+Continue to install and refresh Overlord itself with `ovld agent-setup <agent>`.
+That setup owns its existing hooks and, for Codex, rules and permission profile.
+The new marketplace's v1 scope does not include Overlord or Scribe and does not
+migrate existing installations.
+
 ### Extension point
 
 A custom agent connector is a sanctioned extension point: a new adapter plus a

package/dist/connectors/VERSION

@@ -1 +1 @@
-0.3.57
+0.3.58

package/dist/connectors/adapters/antigravity/plugin.json

@@ -1,7 +1,7 @@
 {
   "$schema": "https://antigravity.google/schemas/v1/plugin.json",
   "name": "overlord",
-  "version": "0.3.57",
+  "version": "0.3.58",
   "description": "Chat-driven access to Overlord mission protocol workflows through skills and MCP.",
   "author": {
     "name": "Cooperativ",

package/dist/connectors/adapters/claude/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "overlord",
-  "version": "0.3.57",
+  "version": "0.3.58",
   "description": "Overlord mission protocol workflow for Claude Code — attach/update/ask/deliver, slash commands, and hook-driven activity capture.",
   "author": {
     "name": "Cooperativ",

package/dist/connectors/adapters/codex/.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "overlord",
-  "version": "0.3.57",
+  "version": "0.3.58",
   "description": "Chat-driven access to Overlord mission protocol workflows with hook-driven activity capture.",
   "author": {
     "name": "Cooperativ",

package/dist/connectors/adapters/cursor/.cursor-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "overlord",
-  "version": "0.3.57",
+  "version": "0.3.58",
   "description": "Overlord mission protocol workflow for Cursor — attach/update/ask/deliver, slash commands, MCP bridge, and follow-up capture.",
   "author": {
     "name": "Cooperativ",

package/dist/connectors/adapters/pi/README.md

@@ -26,11 +26,10 @@ Re-running setup is idempotent. `ovld doctor` reports missing or modified manage
 
 PI accepts provider-qualified models with `--model` and an independent `--thinking` level. The built-in catalog includes:
 
-| Display name    | PI model ID                  |
-| --------------- | ---------------------------- |
-| GLM 5.2         | `zai/glm-5.2`                |
-| Claude Opus 4.8 | `anthropic/claude-opus-4-8`  |
-| GPT-5.6 Terra   | `openai-codex/gpt-5.6-terra` |
+| Display name    | PI model ID                 |
+| --------------- | --------------------------- |
+| GLM 5.2         | `zai/glm-5.2`               |
+| Claude Opus 4.8 | `anthropic/claude-opus-4-8` |
 
 Authenticate the matching PI provider through PI's login/configuration flow or its supported environment variables. Use `pi --list-models` to inspect the models available to the current PI configuration.
 

package/dist/connectors/core/overlord-mission/SKILL.md

@@ -389,7 +389,7 @@ ovld protocol create --project-id <project-id> --agent <agent-identifier> --obje
 # One call: a draft mission whose first objective is already assigned to Codex.
 ovld protocol create --agent <agent-identifier> \
   --project-id <project-id> \
-  --objectives-json '[{"objective":"Implement the API","agent":"codex","model":"gpt-5.6-terra"},{"objective":"Add CLI docs","agent":"claude"}]'
+  --objectives-json '[{"objective":"Implement the API","agent":"codex","model":"gpt-6.1-terra"},{"objective":"Add CLI docs","agent":"claude"}]'
 ```
 
 ```bash

package/dist/connectors/core/overlord-mission/reference/cli.md

@@ -188,7 +188,7 @@ ovld protocol create --project-id <project-id> --agent <agent-identifier> --obje
 # One call: a draft mission whose first objective is already assigned to Codex.
 ovld protocol create --agent <agent-identifier> \
   --project-id <project-id> \
-  --objectives-json '[{"objective":"Implement the API","agent":"codex","model":"gpt-5.6-terra"},{"objective":"Add CLI docs","agent":"claude"}]'
+  --objectives-json '[{"objective":"Implement the API","agent":"codex","model":"gpt-6.1-terra"},{"objective":"Add CLI docs","agent":"claude"}]'
 ```
 
 ```bash

package/dist/connectors/core/scripts/overlord-mcp.mjs

@@ -1837,7 +1837,7 @@ process.stdin.on('data', async chunk => {
         result: {
           protocolVersion: PROTOCOL_VERSION,
           capabilities: { tools: { listChanged: false } },
-          serverInfo: { name: 'overlord-__OVERLORD_ADAPTER_KEY__', version: '0.3.57' }
+          serverInfo: { name: 'overlord-__OVERLORD_ADAPTER_KEY__', version: '0.3.58' }
         }
       });
       continue;

package/dist/index.js

@@ -5888,6 +5888,15 @@ function removeChangeLedger(input2) {
     return false;
   }
 }
+function prepareDeclaredChangeEvidence(input2) {
+  const ledger = emptyLedger(input2);
+  const result = appendEvidenceToLedger(ledger, {
+    filePaths: input2.filePaths,
+    source: "agent_declared",
+    hookHealth: AGENT_DECLARED_HEALTH
+  });
+  return { evidence: ledger.evidence, rejected: result.rejected };
+}
 var LEDGER_SCHEMA_VERSION, MAX_PATHS_PER_APPEND, MAX_LEDGER_EVIDENCE, MAX_HEALTH_ENTRIES, STICKY_HEALTH_CODES, MAX_HEALTH_CODE_LENGTH, MAX_IGNORE_FILE_BYTES, MAX_IGNORE_LINES, MAX_IGNORE_RULES, MAX_IGNORE_LINE_LENGTH, MAX_LEDGER_FILE_BYTES, LEDGER_EVIDENCE_KEYS, LEDGER_HEALTH_KEYS, LEDGER_CAPTURE_KEYS, CAPTURE_BINDING_STATES, AGENT_DECLARED_HEALTH, LEGACY_GENERATOR_DECLARATION_HEALTH, LEGACY_WINDOW_DISCARDED_HEALTH, LEGACY_V2_EVIDENCE_KEYS;
 var init_change_ledger = __esm({
   "src/change-ledger.ts"() {
@@ -5934,6 +5943,7 @@ var init_change_ledger = __esm({
 var active_objective_sessions_exports = {};
 __export(active_objective_sessions_exports, {
   MAX_ACTIVE_OBJECTIVE_SESSION_BINDINGS: () => MAX_ACTIVE_OBJECTIVE_SESSION_BINDINGS,
+  diagnoseObjectiveBinding: () => diagnoseObjectiveBinding,
   finalizeActiveSession: () => finalizeActiveSession,
   readActiveSessions: () => readActiveSessions,
   readObjectiveSessions: () => readObjectiveSessions,
@@ -5996,7 +6006,7 @@ function readManifest(workingDirectory) {
     const raw = readBoundedUtf8File(target, MAX_ACTIVE_SESSION_MANIFEST_BYTES);
     if (raw === null) return null;
     const value2 = JSON.parse(raw);
-    if (value2.schemaVersion !== 3 || value2.workingDirectory !== expected.workingDirectory || !Array.isArray(value2.entries) || value2.entries.length > MAX_ACTIVE_OBJECTIVE_SESSION_BINDINGS) {
+    if (value2.schemaVersion !== 3 || value2.workingDirectory !== expected.workingDirectory || !Array.isArray(value2.entries)) {
       return null;
     }
     return {
@@ -6012,7 +6022,11 @@ function readManifest(workingDirectory) {
 }
 function writeManifest(workingDirectory, entries) {
   const manifest = { ...emptyManifest(workingDirectory), entries };
-  writeOwnerOnlyFileAtomically(manifestPath2(workingDirectory), JSON.stringify(manifest));
+  const contents = JSON.stringify(manifest);
+  if (Buffer.byteLength(contents) > MAX_ACTIVE_SESSION_MANIFEST_BYTES) {
+    throw new Error("Local binding manifest exceeds its storage limit.");
+  }
+  writeOwnerOnlyFileAtomically(manifestPath2(workingDirectory), contents);
 }
 function resolveEntry(entries, requestedObjectiveId) {
   const matching = entries.filter(
@@ -6063,7 +6077,7 @@ function writeActiveSession({
         });
         if (!removed) entries.push({ ...prior, deliveryPendingSync: true });
       }
-      if (entries.length >= MAX_ACTIVE_OBJECTIVE_SESSION_BINDINGS) {
+      if (entries.filter((entry) => entry.objectiveId === trimmedObjective).length >= MAX_ACTIVE_OBJECTIVE_SESSION_BINDINGS) {
         if (prior && prior.sessionKey !== trimmedKey) writeManifest(workingDirectory, entries);
         return false;
       }
@@ -6224,6 +6238,17 @@ function finalizeActiveSession({
     return false;
   }
 }
+function diagnoseObjectiveBinding(workingDirectory, objectiveId) {
+  const target = manifestPath2(workingDirectory);
+  if (!existsSync11(target)) return "binding_file_missing";
+  const manifest = readManifest(workingDirectory);
+  if (!manifest) return "binding_file_unreadable_or_invalid";
+  const matches = manifest.entries.filter((entry) => entryMatchesObjective(entry, objectiveId));
+  if (matches.length >= MAX_ACTIVE_OBJECTIVE_SESSION_BINDINGS)
+    return "objective_binding_capacity_reached";
+  if (matches.length === 0) return "objective_binding_missing_in_working_directory";
+  return "binding_or_ledger_storage_unavailable";
+}
 var MAX_ACTIVE_OBJECTIVE_SESSION_BINDINGS, MAX_OBJECTIVE_ALIASES, MAX_ID_LENGTH, MAX_ACTIVE_SESSION_MANIFEST_BYTES, MAX_ACTIVE_SESSION_MANIFEST_FILES;
 var init_active_objective_sessions = __esm({
   "src/active-objective-sessions.ts"() {
@@ -44619,7 +44644,8 @@ function bareHealthCode(code) {
 function buildLocalObjectiveChanges({
   objectiveId,
   snapshots,
-  syncFailed
+  syncFailed,
+  unavailableDiagnosis = "objective_binding_missing_in_working_directory"
 }) {
   if (snapshots.length === 0) {
     return {
@@ -44631,8 +44657,12 @@ function buildLocalObjectiveChanges({
       limit: OBJECTIVE_FILE_CHANGES_LIMIT,
       truncated: false,
       sync: { synced: 0, pending: 0, failed: syncFailed },
-      capture: { bindingState: "unknown", callbackObserved: false, healthCodes: [] },
-      warnings: []
+      capture: {
+        bindingState: "unknown",
+        callbackObserved: false,
+        healthCodes: [unavailableDiagnosis]
+      },
+      warnings: ["unknown_binding"]
     };
   }
   const byPath = /* @__PURE__ */ new Map();
@@ -45344,7 +45374,7 @@ add-objectives:
         --objective-model requires --objective-agent.
   Notes:
     Each item is { "objective": "...", "title": "...", "agent": "codex",
-    "model": "gpt-5.6-terra", "autoAdvance": true|false, "resourceKey": "..." }.
+    "model": "gpt-6.1-terra", "autoAdvance": true|false, "resourceKey": "..." }.
     model requires agent. Per-item autoAdvance and agent win over the flags.
 
 update-objective:
@@ -46943,10 +46973,14 @@ function declaredOutputPathInputs({
   }
   return paths;
 }
-function appendDeclaredOutputPaths({
+async function appendDeclaredOutputPaths({
   flags,
   fileInputs,
   active,
+  runtime,
+  missionId,
+  objectiveRef,
+  sessionKey,
   workingDirectory
 }) {
   const paths = declaredOutputPathInputs({ flags, fileInputs });
@@ -46954,19 +46988,63 @@ function appendDeclaredOutputPaths({
   delete flags["--paths-file"];
   delete fileInputs["--paths-file"];
   if (paths === null) return;
-  if (!active) {
+  if (!sessionKey || !active && !objectiveRef) {
     throw new CliError({
-      message: "--paths/--paths-file requires the attached objective session in this working directory."
+      message: "--paths/--paths-file requires --session-key and --objective-id (or a cached attached session). Run protocol attach from this checkout."
     });
   }
-  const result = declareChangePaths({
+  const identity = {
     workingDirectory,
-    objectiveId: active.objectiveId,
-    sessionKey: active.sessionKey,
-    filePaths: paths
-  });
-  if (!result.recorded) {
-    console.error("[overlord] Declared paths could not be recorded in the local change ledger.");
+    objectiveId: active?.objectiveId ?? objectiveRef,
+    sessionKey
+  };
+  const result = active ? declareChangePaths({ ...identity, filePaths: paths }) : null;
+  if (!result?.recorded) {
+    const prepared = prepareDeclaredChangeEvidence({ ...identity, filePaths: paths });
+    console.error(
+      `[overlord] ${diagnoseObjectiveBinding(workingDirectory, identity.objectiveId)}. Submitting declared paths directly through the authenticated session. Re-run protocol attach in this checkout; check OVLD_HOME permissions if capture remains unavailable.`
+    );
+    for (const rejected of prepared.rejected.slice(0, 20)) {
+      console.error(
+        `[overlord] Ignored declared path ${JSON.stringify(rejected.path)}: ${rejected.reason}`
+      );
+    }
+    for (let offset = 0; offset < prepared.evidence.length; offset += 25) {
+      const batch = prepared.evidence.slice(offset, offset + 25);
+      try {
+        const response = asRecord5(
+          await runtime.backend.post({
+            path: "/api/protocol/sync-changes",
+            body: {
+              args: [],
+              positional: [],
+              fileInputs: {},
+              externalSessionId: null,
+              flags: {
+                "--mission-id": missionId,
+                "--objective-id": identity.objectiveId,
+                "--session-key": sessionKey,
+                "--changes-json": JSON.stringify(batch)
+              }
+            }
+          })
+        );
+        const outcomes = Array.isArray(response.outcomes) ? response.outcomes.map(asRecord5) : [];
+        if (batch.some(
+          (entry) => !outcomes.some(
+            (outcome) => outcome.idempotencyKey === entry.idempotencyKey && outcome.filePath === entry.filePath && (outcome.status === "accepted" || outcome.status === "ignored")
+          )
+        )) {
+          console.error(
+            "[overlord] Some declared paths were not accepted. Retry --paths on update/deliver; no local retry copy is available."
+          );
+        }
+      } catch {
+        console.error(
+          "[overlord] Declared path synchronization failed. Retry --paths on update/deliver; no local retry copy is available."
+        );
+      }
+    }
     return;
   }
   for (const rejected of result.rejected.slice(0, 20)) {
@@ -47168,8 +47246,14 @@ Run \`${primaryCommand} protocol help\` for usage.`
     const local = buildLocalObjectiveChanges({
       objectiveId: objectiveSessions[0]?.objectiveId ?? objectiveRef,
       snapshots,
-      syncFailed
+      syncFailed,
+      unavailableDiagnosis: diagnoseObjectiveBinding(workingDirectory, objectiveRef)
     });
+    if (local.coverage === "unavailable") {
+      console.error(
+        `[overlord] ${local.capture.healthCodes[0]}. Run protocol attach for this objective in this checkout and check OVLD_HOME permissions. Explicit --paths with a valid session key can still synchronize declarations.`
+      );
+    }
     for (const entry of objectiveSessions.filter((candidate) => candidate.deliveryPendingSync)) {
       const stillUnsynced = readUnsyncedChangeEvidence({
         workingDirectory,
@@ -47240,7 +47324,16 @@ Run \`${primaryCommand} protocol help\` for usage.`
     const sessionKey = typeof flags["--session-key"] === "string" ? flags["--session-key"] : null;
     const active = sessionKey ? readActiveSessions(workingDirectory).find((entry) => entry.sessionKey === sessionKey) : void 0;
     lifecycleActive = active;
-    appendDeclaredOutputPaths({ flags, fileInputs, active, workingDirectory });
+    await appendDeclaredOutputPaths({
+      flags,
+      fileInputs,
+      active,
+      workingDirectory,
+      runtime,
+      missionId,
+      objectiveRef,
+      sessionKey
+    });
     if (sessionKey && active) {
       await syncObjectiveLedger({ runtime, workingDirectory, missionId, sessionKey, active });
     }
@@ -47361,6 +47454,11 @@ Run \`${primaryCommand} protocol help\` for usage.`
           objectiveAliases: [...objectiveAliases],
           sessionKey: resultRecord.sessionKey
         });
+        if (!bound) {
+          console.error(
+            `[overlord] Attach succeeded, but native file capture is unavailable: ${diagnoseObjectiveBinding(workingDirectory, objectiveIdentity)}. Check OVLD_HOME storage/permissions and re-run attach in this checkout. Explicit --paths can still synchronize through the session key.`
+          );
+        }
         if (bound) {
           recordChangeLedgerBinding({
             workingDirectory,