overlord-cli 0.2610261104.0 → 0.2610301407.0

package/dist/connectors/README.md

@@ -9,6 +9,7 @@ OpenCode, Antigravity, and others). A connector is what lets an agent speak the
 - [For Users](#for-users)
   - [Setting up connectors](#setting-up-connectors)
   - [Connector bundles](#connector-bundles)
+  - [Plugin marketplace](#plugin-marketplace)
   - [Extension point](#extension-point)
 - [For Developers](#for-developers)
   - [Contract Component](#contract-component)
@@ -41,6 +42,19 @@ connector contract version changes.
 - [Antigravity](adapters/antigravity/README.md): Antigravity plugin exposing the local mission workflow to Antigravity CLI/IDE sessions.
 - [OpenCode](adapters/opencode/README.md): control-plane connector (Shape C) driven by `ovld agent-session sidecar` — no hook scripts.
 
+### Plugin marketplace
+
+The dedicated [Overlord ecosystem marketplace](https://github.com/cooperativ-labs/overlord-marketplace#readme)
+is intended to distribute the optional Knowledgebase plugin for Codex CLI and
+Claude Code. Publication and public first-install verification are pending; consult
+its README for the current status and installation and refresh instructions. Knowledgebase
+also supports MCP-only use; its onboarding changes are tracked in per:214.
+
+Continue to install and refresh Overlord itself with `ovld agent-setup <agent>`.
+That setup owns its existing hooks and, for Codex, rules and permission profile.
+The new marketplace's v1 scope does not include Overlord or Scribe and does not
+migrate existing installations.
+
 ### Extension point
 
 A custom agent connector is a sanctioned extension point: a new adapter plus a

package/dist/connectors/VERSION

@@ -1 +1 @@
-0.3.57
+0.3.59

package/dist/connectors/adapters/antigravity/conformance-manifest.yaml

@@ -1,4 +1,4 @@
-contractVersion: "167"
+contractVersion: "168"
 componentType: connector
 componentKey: antigravity
 label: "Antigravity Connector"

package/dist/connectors/adapters/antigravity/plugin.json

@@ -1,7 +1,7 @@
 {
   "$schema": "https://antigravity.google/schemas/v1/plugin.json",
   "name": "overlord",
-  "version": "0.3.57",
+  "version": "0.3.59",
   "description": "Chat-driven access to Overlord mission protocol workflows through skills and MCP.",
   "author": {
     "name": "Cooperativ",

package/dist/connectors/adapters/claude/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "overlord",
-  "version": "0.3.57",
+  "version": "0.3.59",
   "description": "Overlord mission protocol workflow for Claude Code — attach/update/ask/deliver, slash commands, and hook-driven activity capture.",
   "author": {
     "name": "Cooperativ",

package/dist/connectors/adapters/claude/conformance-manifest.yaml

@@ -1,4 +1,4 @@
-contractVersion: "167"
+contractVersion: "168"
 componentType: connector
 componentKey: claude
 label: "Claude Code Connector"

package/dist/connectors/adapters/codex/.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "overlord",
-  "version": "0.3.57",
+  "version": "0.3.59",
   "description": "Chat-driven access to Overlord mission protocol workflows with hook-driven activity capture.",
   "author": {
     "name": "Cooperativ",

package/dist/connectors/adapters/codex/conformance-manifest.yaml

@@ -1,4 +1,4 @@
-contractVersion: "167"
+contractVersion: "168"
 componentType: connector
 componentKey: codex
 label: "Codex Connector"

package/dist/connectors/adapters/cursor/.cursor-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "overlord",
-  "version": "0.3.57",
+  "version": "0.3.59",
   "description": "Overlord mission protocol workflow for Cursor — attach/update/ask/deliver, slash commands, MCP bridge, and follow-up capture.",
   "author": {
     "name": "Cooperativ",

package/dist/connectors/adapters/cursor/conformance-manifest.yaml

@@ -1,4 +1,4 @@
-contractVersion: "167"
+contractVersion: "168"
 componentType: connector
 componentKey: cursor
 label: "Cursor Connector"

package/dist/connectors/adapters/opencode/conformance-manifest.yaml

@@ -1,4 +1,4 @@
-contractVersion: "167"
+contractVersion: "168"
 componentType: connector
 componentKey: opencode
 label: "OpenCode Connector"

package/dist/connectors/adapters/pi/README.md

@@ -26,11 +26,10 @@ Re-running setup is idempotent. `ovld doctor` reports missing or modified manage
 
 PI accepts provider-qualified models with `--model` and an independent `--thinking` level. The built-in catalog includes:
 
-| Display name    | PI model ID                  |
-| --------------- | ---------------------------- |
-| GLM 5.2         | `zai/glm-5.2`                |
-| Claude Opus 4.8 | `anthropic/claude-opus-4-8`  |
-| GPT-5.6 Terra   | `openai-codex/gpt-5.6-terra` |
+| Display name    | PI model ID                 |
+| --------------- | --------------------------- |
+| GLM 5.2         | `zai/glm-5.2`               |
+| Claude Opus 4.8 | `anthropic/claude-opus-4-8` |
 
 Authenticate the matching PI provider through PI's login/configuration flow or its supported environment variables. Use `pi --list-models` to inspect the models available to the current PI configuration.
 

package/dist/connectors/adapters/pi/conformance-manifest.yaml

@@ -1,4 +1,4 @@
-contractVersion: "167"
+contractVersion: "168"
 componentType: connector
 componentKey: pi
 label: "PI Connector"

package/dist/connectors/core/overlord-mission/SKILL.md

@@ -186,6 +186,16 @@ with a JSON string array when a path contains a comma or the list is long. They
 Declared, never as native capture. Never use it to enumerate every changed or opened file, and
 never make a separate call just to declare paths.
 
+If attach warns that its local binding or ledger is unavailable, keep the explicit
+`--session-key` and `--objective-id` on `update` / `deliver` and include the known missed
+paths normally. The CLI still submits them through the authenticated session as Declared;
+do not omit paths or replace the file evidence with a list in the summary. Check stderr for
+acceptance/sync warnings. If fallback synchronization fails, repeat those declarations on a
+later update/deliver because no local retry copy exists. Re-run attach in the intended checkout
+with the same `OVLD_HOME` to restore native capture. `changes` reports the local coverage gap
+in `capture.healthCodes`; `objective-changes` reads synchronized evidence, including fallback
+declarations, from the server.
+
 Artifacts and a delivery report remain optional annotations when they add review value. There
 is no per-file explanation input. Use `--payload-json` when the full delivery object fits comfortably inline
 (roughly under 8 KB). Larger inline `--*-json` values are rejected; stream them through the
@@ -233,12 +243,12 @@ human implementation follow-up such as deploy, secrets, or migrations (those bel
 
 #### Writing a deferred-work item
 
-| Field      | Limit     | What to write                                                       |
-| ---------- | --------- | ------------------------------------------------------------------- |
-| `title`    | 80 chars  | The work, as an imperative phrase. Shown as the row title.          |
-| `change`   | 400 chars | The specific change that is needed, in one or two sentences.        |
-| `location` | 200 chars | Where to find it: the file, function, component, or command.        |
-| `doneWhen` | 200 chars | The observable result, in one sentence.                             |
+| Field      | Limit     | What to write                                                |
+| ---------- | --------- | ------------------------------------------------------------ |
+| `title`    | 80 chars  | The work, as an imperative phrase. Shown as the row title.   |
+| `change`   | 400 chars | The specific change that is needed, in one or two sentences. |
+| `location` | 200 chars | Where to find it: the file, function, component, or command. |
+| `doneWhen` | 200 chars | The observable result, in one sentence.                      |
 
 All four fields are required. A plain string item is rejected with `invalid_input`.
 
@@ -361,6 +371,9 @@ ovld protocol deliver --session-key <sessionKey> --objective-id $OBJECTIVE_ID \
 EOF
 ```
 
+For spaces, quote the whole inline value, for example
+`--paths "planning/demo environment.md,src/generated.ts"`, or use the JSON array form.
+
 Paths are normalized against the checkout. Traversal, symlinks that leave the checkout, ignored
 paths, and Overlord-managed paths are rejected with a reason on stderr and never fail the call.
 
@@ -389,7 +402,7 @@ ovld protocol create --project-id <project-id> --agent <agent-identifier> --obje
 # One call: a draft mission whose first objective is already assigned to Codex.
 ovld protocol create --agent <agent-identifier> \
   --project-id <project-id> \
-  --objectives-json '[{"objective":"Implement the API","agent":"codex","model":"gpt-5.6-terra"},{"objective":"Add CLI docs","agent":"claude"}]'
+  --objectives-json '[{"objective":"Implement the API","agent":"codex","model":"gpt-6.1-terra"},{"objective":"Add CLI docs","agent":"claude"}]'
 ```
 
 ```bash

package/dist/connectors/core/overlord-mission/reference/cli.md

@@ -143,6 +143,15 @@ paths, and Overlord-managed paths are rejected with a reason on stderr and never
 Absent targets (deleted or renamed-away files) are valid. Never enumerate every changed or
 opened file, and when unsure, describe the coverage gap in the summary instead of guessing.
 
+Quote an inline value containing spaces: `--paths "planning/demo environment.md,src/generated.ts"`.
+If the local binding or ledger is unavailable, pass `--session-key` and `--objective-id`
+explicitly and keep the path flags. The CLI warns and submits normalized paths through the
+authenticated session as Declared; do not drop the paths from delivery. Fallback sync failures
+warn and need the declarations repeated on a later update/deliver (no local retry copy).
+Use `objective-changes` to read synchronized fallback evidence. Local `changes` instead reports
+the missing/invalid binding in `capture.healthCodes` and stderr. Restore native capture by
+re-running attach in the intended checkout with the same `OVLD_HOME` and writable storage.
+
 ### Shared worktree safety (critical)
 
 The working tree may contain file changes from **other agents, missions, or objectives** running concurrently in the same checkout or worktree. Those changes are **not yours to undo**.
@@ -188,7 +197,7 @@ ovld protocol create --project-id <project-id> --agent <agent-identifier> --obje
 # One call: a draft mission whose first objective is already assigned to Codex.
 ovld protocol create --agent <agent-identifier> \
   --project-id <project-id> \
-  --objectives-json '[{"objective":"Implement the API","agent":"codex","model":"gpt-5.6-terra"},{"objective":"Add CLI docs","agent":"claude"}]'
+  --objectives-json '[{"objective":"Implement the API","agent":"codex","model":"gpt-6.1-terra"},{"objective":"Add CLI docs","agent":"claude"}]'
 ```
 
 ```bash

package/dist/connectors/core/scripts/overlord-mcp.mjs

@@ -1837,7 +1837,7 @@ process.stdin.on('data', async chunk => {
         result: {
           protocolVersion: PROTOCOL_VERSION,
           capabilities: { tools: { listChanged: false } },
-          serverInfo: { name: 'overlord-__OVERLORD_ADAPTER_KEY__', version: '0.3.57' }
+          serverInfo: { name: 'overlord-__OVERLORD_ADAPTER_KEY__', version: '0.3.59' }
         }
       });
       continue;

package/dist/connectors/docs/05-connectors-and-agent-plugins.md

@@ -41,6 +41,7 @@ Required content:
 - Deliver last with a summary written by behavior or component, plus artifacts when they add review value.
 - Never revert, restore, or delete concurrent work from other agents or missions to deliver; ask instead.
 - Declare only known shell/script/generator outputs, deletes, and rename endpoints that capture missed (`--paths` / `--paths-file`); there is no per-file explanation input.
+- Quote inline path lists containing spaces; use a JSON string array with `--paths-file <path|->` for commas or long lists. If local binding/storage is unavailable, retain the explicit session key, objective id, and path flags: the CLI warns and submits Declared evidence through the authenticated session. Read it with `objective-changes`; local `changes` explains the coverage gap. Failed fallback sync requires repeating the declarations because it has no local retry copy.
 - Use stdin/file flags for shell-special content.
 - Use stdin/file flags for oversized JSON payloads (`--*-json` values above ~8 KB are rejected; use `--*-file -`).
 - Do not continue implementation after delivery unless follow-up execution is explicitly requested.

package/dist/index.js

@@ -5888,6 +5888,15 @@ function removeChangeLedger(input2) {
     return false;
   }
 }
+function prepareDeclaredChangeEvidence(input2) {
+  const ledger = emptyLedger(input2);
+  const result = appendEvidenceToLedger(ledger, {
+    filePaths: input2.filePaths,
+    source: "agent_declared",
+    hookHealth: AGENT_DECLARED_HEALTH
+  });
+  return { evidence: ledger.evidence, rejected: result.rejected };
+}
 var LEDGER_SCHEMA_VERSION, MAX_PATHS_PER_APPEND, MAX_LEDGER_EVIDENCE, MAX_HEALTH_ENTRIES, STICKY_HEALTH_CODES, MAX_HEALTH_CODE_LENGTH, MAX_IGNORE_FILE_BYTES, MAX_IGNORE_LINES, MAX_IGNORE_RULES, MAX_IGNORE_LINE_LENGTH, MAX_LEDGER_FILE_BYTES, LEDGER_EVIDENCE_KEYS, LEDGER_HEALTH_KEYS, LEDGER_CAPTURE_KEYS, CAPTURE_BINDING_STATES, AGENT_DECLARED_HEALTH, LEGACY_GENERATOR_DECLARATION_HEALTH, LEGACY_WINDOW_DISCARDED_HEALTH, LEGACY_V2_EVIDENCE_KEYS;
 var init_change_ledger = __esm({
   "src/change-ledger.ts"() {
@@ -5934,6 +5943,7 @@ var init_change_ledger = __esm({
 var active_objective_sessions_exports = {};
 __export(active_objective_sessions_exports, {
   MAX_ACTIVE_OBJECTIVE_SESSION_BINDINGS: () => MAX_ACTIVE_OBJECTIVE_SESSION_BINDINGS,
+  diagnoseObjectiveBinding: () => diagnoseObjectiveBinding,
   finalizeActiveSession: () => finalizeActiveSession,
   readActiveSessions: () => readActiveSessions,
   readObjectiveSessions: () => readObjectiveSessions,
@@ -5996,7 +6006,7 @@ function readManifest(workingDirectory) {
     const raw = readBoundedUtf8File(target, MAX_ACTIVE_SESSION_MANIFEST_BYTES);
     if (raw === null) return null;
     const value2 = JSON.parse(raw);
-    if (value2.schemaVersion !== 3 || value2.workingDirectory !== expected.workingDirectory || !Array.isArray(value2.entries) || value2.entries.length > MAX_ACTIVE_OBJECTIVE_SESSION_BINDINGS) {
+    if (value2.schemaVersion !== 3 || value2.workingDirectory !== expected.workingDirectory || !Array.isArray(value2.entries)) {
       return null;
     }
     return {
@@ -6012,7 +6022,14 @@ function readManifest(workingDirectory) {
 }
 function writeManifest(workingDirectory, entries) {
   const manifest = { ...emptyManifest(workingDirectory), entries };
-  writeOwnerOnlyFileAtomically(manifestPath2(workingDirectory), JSON.stringify(manifest));
+  const contents = JSON.stringify(manifest);
+  if (Buffer.byteLength(contents) > MAX_ACTIVE_SESSION_MANIFEST_BYTES) {
+    throw new Error("Local binding manifest exceeds its storage limit.");
+  }
+  writeOwnerOnlyFileAtomically(manifestPath2(workingDirectory), contents);
+}
+function manifestFits(workingDirectory, entries) {
+  return Buffer.byteLength(JSON.stringify({ ...emptyManifest(workingDirectory), entries })) <= MAX_ACTIVE_SESSION_MANIFEST_BYTES;
 }
 function resolveEntry(entries, requestedObjectiveId) {
   const matching = entries.filter(
@@ -6052,7 +6069,7 @@ function writeActiveSession({
       const prior = current.find(
         (entry) => entry.objectiveId === trimmedObjective && !entry.deliveryPendingSync
       );
-      const entries = current.filter(
+      let entries = current.filter(
         (entry) => entry.objectiveId !== trimmedObjective || entry.deliveryPendingSync
       );
       if (prior && prior.sessionKey !== trimmedKey) {
@@ -6063,10 +6080,6 @@ function writeActiveSession({
         });
         if (!removed) entries.push({ ...prior, deliveryPendingSync: true });
       }
-      if (entries.length >= MAX_ACTIVE_OBJECTIVE_SESSION_BINDINGS) {
-        if (prior && prior.sessionKey !== trimmedKey) writeManifest(workingDirectory, entries);
-        return false;
-      }
       const next = {
         missionId: trimmedMission,
         objectiveId: trimmedObjective,
@@ -6075,6 +6088,24 @@ function writeActiveSession({
         attachedAt: (/* @__PURE__ */ new Date()).toISOString(),
         deliveryPendingSync: false
       };
+      const hasCapacity = () => entries.filter((entry) => entry.objectiveId === trimmedObjective).length < MAX_ACTIVE_OBJECTIVE_SESSION_BINDINGS && manifestFits(workingDirectory, [...entries, next]);
+      if (!hasCapacity()) {
+        const retries = entries.filter((entry) => entry.deliveryPendingSync).sort((left, right) => Date.parse(left.attachedAt) - Date.parse(right.attachedAt));
+        for (const entry of retries) {
+          if (hasCapacity()) break;
+          if (removeChangeLedger({
+            workingDirectory,
+            objectiveId: entry.objectiveId,
+            sessionKey: entry.sessionKey
+          })) {
+            entries = entries.filter((candidate) => candidate !== entry);
+          }
+        }
+      }
+      if (!hasCapacity()) {
+        if (prior && prior.sessionKey !== trimmedKey) writeManifest(workingDirectory, entries);
+        return false;
+      }
       if (prior?.sessionKey !== trimmedKey) {
         resetChangeLedger({
           workingDirectory,
@@ -6224,6 +6255,17 @@ function finalizeActiveSession({
     return false;
   }
 }
+function diagnoseObjectiveBinding(workingDirectory, objectiveId) {
+  const target = manifestPath2(workingDirectory);
+  if (!existsSync11(target)) return "binding_file_missing";
+  const manifest = readManifest(workingDirectory);
+  if (!manifest) return "binding_file_unreadable_or_invalid";
+  const matches = manifest.entries.filter((entry) => entryMatchesObjective(entry, objectiveId));
+  if (matches.length >= MAX_ACTIVE_OBJECTIVE_SESSION_BINDINGS)
+    return "objective_binding_capacity_reached";
+  if (matches.length === 0) return "objective_binding_missing_in_working_directory";
+  return "binding_or_ledger_storage_unavailable";
+}
 var MAX_ACTIVE_OBJECTIVE_SESSION_BINDINGS, MAX_OBJECTIVE_ALIASES, MAX_ID_LENGTH, MAX_ACTIVE_SESSION_MANIFEST_BYTES, MAX_ACTIVE_SESSION_MANIFEST_FILES;
 var init_active_objective_sessions = __esm({
   "src/active-objective-sessions.ts"() {
@@ -44619,7 +44661,8 @@ function bareHealthCode(code) {
 function buildLocalObjectiveChanges({
   objectiveId,
   snapshots,
-  syncFailed
+  syncFailed,
+  unavailableDiagnosis = "objective_binding_missing_in_working_directory"
 }) {
   if (snapshots.length === 0) {
     return {
@@ -44631,8 +44674,12 @@ function buildLocalObjectiveChanges({
       limit: OBJECTIVE_FILE_CHANGES_LIMIT,
       truncated: false,
       sync: { synced: 0, pending: 0, failed: syncFailed },
-      capture: { bindingState: "unknown", callbackObserved: false, healthCodes: [] },
-      warnings: []
+      capture: {
+        bindingState: "unknown",
+        callbackObserved: false,
+        healthCodes: [unavailableDiagnosis]
+      },
+      warnings: ["unknown_binding"]
     };
   }
   const byPath = /* @__PURE__ */ new Map();
@@ -45018,6 +45065,8 @@ attach:
     The CLI records the session's capture binding: bound when OVERLORD_OBJECTIVE_ID
     names the attached objective, unbound otherwise. Bound is configuration evidence
     only; it never claims the capture hook is installed or has run.
+    Attach warns on stderr if its local binding cannot be saved. Check OVLD_HOME
+    permissions and re-run attach in this checkout to restore native capture.
   Returns:
     Full JSON including session.sessionKey, mission, history, artifacts, sharedState,
     and agentInstructions with required workflow instructions and structured-field pointers.
@@ -45344,7 +45393,7 @@ add-objectives:
         --objective-model requires --objective-agent.
   Notes:
     Each item is { "objective": "...", "title": "...", "agent": "codex",
-    "model": "gpt-5.6-terra", "autoAdvance": true|false, "resourceKey": "..." }.
+    "model": "gpt-6.1-terra", "autoAdvance": true|false, "resourceKey": "..." }.
     model requires agent. Per-item autoAdvance and agent win over the flags.
 
 update-objective:
@@ -45561,6 +45610,13 @@ deliver:
     out-of-checkout symlinks, ignored and Overlord-managed paths are rejected with a
     reason on stderr), and absent targets are valid. Never enumerate opened files or a
     shared-worktree diff; when unsure, describe the coverage limitation instead.
+    Quote the whole --paths value when a path contains spaces. Use --paths-file -
+    with a JSON string array on stdin for paths containing commas or a long list.
+    If the local binding or ledger is missing, keep --session-key and --objective-id:
+    declarations still synchronize through the authenticated session as Declared.
+    A warning explains the local capture gap. Failed fallback sync has no local retry
+    copy: repeat those declarations on update/deliver. objective-changes reads the
+    synchronized server evidence; changes reads only this checkout's ledgers.
     Inline --*-json values larger than ~8 KB are rejected; use --payload-file - and
     stream JSON on stdin. Keep --summary inline.
 
@@ -45598,6 +45654,8 @@ changes:
     syncState synced | pending } sorted by path and capped at 200; total counts distinct
     local paths. coverage "unavailable" means no local session matched, not "no files
     changed". This is not complete cross-device history: use objective-changes.
+    capture.healthCodes and stderr explain missing bindings or unreadable local storage.
+    Re-run attach in the intended checkout with the same OVLD_HOME to restore capture.
 
 sync-changes:
   Purpose:
@@ -46943,10 +47001,14 @@ function declaredOutputPathInputs({
   }
   return paths;
 }
-function appendDeclaredOutputPaths({
+async function appendDeclaredOutputPaths({
   flags,
   fileInputs,
   active,
+  runtime,
+  missionId,
+  objectiveRef,
+  sessionKey,
   workingDirectory
 }) {
   const paths = declaredOutputPathInputs({ flags, fileInputs });
@@ -46954,19 +47016,63 @@ function appendDeclaredOutputPaths({
   delete flags["--paths-file"];
   delete fileInputs["--paths-file"];
   if (paths === null) return;
-  if (!active) {
+  if (!sessionKey || !active && !objectiveRef) {
     throw new CliError({
-      message: "--paths/--paths-file requires the attached objective session in this working directory."
+      message: "--paths/--paths-file requires --session-key and --objective-id (or a cached attached session). Run protocol attach from this checkout."
     });
   }
-  const result = declareChangePaths({
+  const identity = {
     workingDirectory,
-    objectiveId: active.objectiveId,
-    sessionKey: active.sessionKey,
-    filePaths: paths
-  });
-  if (!result.recorded) {
-    console.error("[overlord] Declared paths could not be recorded in the local change ledger.");
+    objectiveId: active?.objectiveId ?? objectiveRef,
+    sessionKey
+  };
+  const result = active ? declareChangePaths({ ...identity, filePaths: paths }) : null;
+  if (!result?.recorded) {
+    const prepared = prepareDeclaredChangeEvidence({ ...identity, filePaths: paths });
+    console.error(
+      `[overlord] ${diagnoseObjectiveBinding(workingDirectory, identity.objectiveId)}. Submitting declared paths directly through the authenticated session. Re-run protocol attach in this checkout; check OVLD_HOME permissions if capture remains unavailable.`
+    );
+    for (const rejected of prepared.rejected.slice(0, 20)) {
+      console.error(
+        `[overlord] Ignored declared path ${JSON.stringify(rejected.path)}: ${rejected.reason}`
+      );
+    }
+    for (let offset = 0; offset < prepared.evidence.length; offset += 25) {
+      const batch = prepared.evidence.slice(offset, offset + 25);
+      try {
+        const response = asRecord5(
+          await runtime.backend.post({
+            path: "/api/protocol/sync-changes",
+            body: {
+              args: [],
+              positional: [],
+              fileInputs: {},
+              externalSessionId: null,
+              flags: {
+                "--mission-id": missionId,
+                "--objective-id": identity.objectiveId,
+                "--session-key": sessionKey,
+                "--changes-json": JSON.stringify(batch)
+              }
+            }
+          })
+        );
+        const outcomes = Array.isArray(response.outcomes) ? response.outcomes.map(asRecord5) : [];
+        if (batch.some(
+          (entry) => !outcomes.some(
+            (outcome) => outcome.idempotencyKey === entry.idempotencyKey && outcome.filePath === entry.filePath && (outcome.status === "accepted" || outcome.status === "ignored")
+          )
+        )) {
+          console.error(
+            "[overlord] Some declared paths were not accepted. Retry --paths on update/deliver; no local retry copy is available."
+          );
+        }
+      } catch {
+        console.error(
+          "[overlord] Declared path synchronization failed. Retry --paths on update/deliver; no local retry copy is available."
+        );
+      }
+    }
     return;
   }
   for (const rejected of result.rejected.slice(0, 20)) {
@@ -47168,8 +47274,14 @@ Run \`${primaryCommand} protocol help\` for usage.`
     const local = buildLocalObjectiveChanges({
       objectiveId: objectiveSessions[0]?.objectiveId ?? objectiveRef,
       snapshots,
-      syncFailed
+      syncFailed,
+      unavailableDiagnosis: diagnoseObjectiveBinding(workingDirectory, objectiveRef)
     });
+    if (local.coverage === "unavailable") {
+      console.error(
+        `[overlord] ${local.capture.healthCodes[0]}. Run protocol attach for this objective in this checkout and check OVLD_HOME permissions. Explicit --paths with a valid session key can still synchronize declarations.`
+      );
+    }
     for (const entry of objectiveSessions.filter((candidate) => candidate.deliveryPendingSync)) {
       const stillUnsynced = readUnsyncedChangeEvidence({
         workingDirectory,
@@ -47240,7 +47352,16 @@ Run \`${primaryCommand} protocol help\` for usage.`
     const sessionKey = typeof flags["--session-key"] === "string" ? flags["--session-key"] : null;
     const active = sessionKey ? readActiveSessions(workingDirectory).find((entry) => entry.sessionKey === sessionKey) : void 0;
     lifecycleActive = active;
-    appendDeclaredOutputPaths({ flags, fileInputs, active, workingDirectory });
+    await appendDeclaredOutputPaths({
+      flags,
+      fileInputs,
+      active,
+      workingDirectory,
+      runtime,
+      missionId,
+      objectiveRef,
+      sessionKey
+    });
     if (sessionKey && active) {
       await syncObjectiveLedger({ runtime, workingDirectory, missionId, sessionKey, active });
     }
@@ -47361,6 +47482,11 @@ Run \`${primaryCommand} protocol help\` for usage.`
           objectiveAliases: [...objectiveAliases],
           sessionKey: resultRecord.sessionKey
         });
+        if (!bound) {
+          console.error(
+            `[overlord] Attach succeeded, but native file capture is unavailable: ${diagnoseObjectiveBinding(workingDirectory, objectiveIdentity)}. Check OVLD_HOME storage/permissions and re-run attach in this checkout. Explicit --paths can still synchronize through the session key.`
+          );
+        }
         if (bound) {
           recordChangeLedgerBinding({
             workingDirectory,