overlord-cli 0.2610281354.0 → 0.2610301407.0

package/dist/connectors/VERSION

@@ -1 +1 @@
-0.3.58
+0.3.59

package/dist/connectors/adapters/antigravity/conformance-manifest.yaml

@@ -1,4 +1,4 @@
-contractVersion: "167"
+contractVersion: "168"
 componentType: connector
 componentKey: antigravity
 label: "Antigravity Connector"

package/dist/connectors/adapters/antigravity/plugin.json

@@ -1,7 +1,7 @@
 {
   "$schema": "https://antigravity.google/schemas/v1/plugin.json",
   "name": "overlord",
-  "version": "0.3.58",
+  "version": "0.3.59",
   "description": "Chat-driven access to Overlord mission protocol workflows through skills and MCP.",
   "author": {
     "name": "Cooperativ",

package/dist/connectors/adapters/claude/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "overlord",
-  "version": "0.3.58",
+  "version": "0.3.59",
   "description": "Overlord mission protocol workflow for Claude Code — attach/update/ask/deliver, slash commands, and hook-driven activity capture.",
   "author": {
     "name": "Cooperativ",

package/dist/connectors/adapters/claude/conformance-manifest.yaml

@@ -1,4 +1,4 @@
-contractVersion: "167"
+contractVersion: "168"
 componentType: connector
 componentKey: claude
 label: "Claude Code Connector"

package/dist/connectors/adapters/codex/.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "overlord",
-  "version": "0.3.58",
+  "version": "0.3.59",
   "description": "Chat-driven access to Overlord mission protocol workflows with hook-driven activity capture.",
   "author": {
     "name": "Cooperativ",

package/dist/connectors/adapters/codex/conformance-manifest.yaml

@@ -1,4 +1,4 @@
-contractVersion: "167"
+contractVersion: "168"
 componentType: connector
 componentKey: codex
 label: "Codex Connector"

package/dist/connectors/adapters/cursor/.cursor-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "overlord",
-  "version": "0.3.58",
+  "version": "0.3.59",
   "description": "Overlord mission protocol workflow for Cursor — attach/update/ask/deliver, slash commands, MCP bridge, and follow-up capture.",
   "author": {
     "name": "Cooperativ",

package/dist/connectors/adapters/cursor/conformance-manifest.yaml

@@ -1,4 +1,4 @@
-contractVersion: "167"
+contractVersion: "168"
 componentType: connector
 componentKey: cursor
 label: "Cursor Connector"

package/dist/connectors/adapters/opencode/conformance-manifest.yaml

@@ -1,4 +1,4 @@
-contractVersion: "167"
+contractVersion: "168"
 componentType: connector
 componentKey: opencode
 label: "OpenCode Connector"

package/dist/connectors/adapters/pi/conformance-manifest.yaml

@@ -1,4 +1,4 @@
-contractVersion: "167"
+contractVersion: "168"
 componentType: connector
 componentKey: pi
 label: "PI Connector"

package/dist/connectors/core/overlord-mission/SKILL.md

@@ -186,6 +186,16 @@ with a JSON string array when a path contains a comma or the list is long. They
 Declared, never as native capture. Never use it to enumerate every changed or opened file, and
 never make a separate call just to declare paths.
 
+If attach warns that its local binding or ledger is unavailable, keep the explicit
+`--session-key` and `--objective-id` on `update` / `deliver` and include the known missed
+paths normally. The CLI still submits them through the authenticated session as Declared;
+do not omit paths or replace the file evidence with a list in the summary. Check stderr for
+acceptance/sync warnings. If fallback synchronization fails, repeat those declarations on a
+later update/deliver because no local retry copy exists. Re-run attach in the intended checkout
+with the same `OVLD_HOME` to restore native capture. `changes` reports the local coverage gap
+in `capture.healthCodes`; `objective-changes` reads synchronized evidence, including fallback
+declarations, from the server.
+
 Artifacts and a delivery report remain optional annotations when they add review value. There
 is no per-file explanation input. Use `--payload-json` when the full delivery object fits comfortably inline
 (roughly under 8 KB). Larger inline `--*-json` values are rejected; stream them through the
@@ -233,12 +243,12 @@ human implementation follow-up such as deploy, secrets, or migrations (those bel
 
 #### Writing a deferred-work item
 
-| Field      | Limit     | What to write                                                       |
-| ---------- | --------- | ------------------------------------------------------------------- |
-| `title`    | 80 chars  | The work, as an imperative phrase. Shown as the row title.          |
-| `change`   | 400 chars | The specific change that is needed, in one or two sentences.        |
-| `location` | 200 chars | Where to find it: the file, function, component, or command.        |
-| `doneWhen` | 200 chars | The observable result, in one sentence.                             |
+| Field      | Limit     | What to write                                                |
+| ---------- | --------- | ------------------------------------------------------------ |
+| `title`    | 80 chars  | The work, as an imperative phrase. Shown as the row title.   |
+| `change`   | 400 chars | The specific change that is needed, in one or two sentences. |
+| `location` | 200 chars | Where to find it: the file, function, component, or command. |
+| `doneWhen` | 200 chars | The observable result, in one sentence.                      |
 
 All four fields are required. A plain string item is rejected with `invalid_input`.
 
@@ -361,6 +371,9 @@ ovld protocol deliver --session-key <sessionKey> --objective-id $OBJECTIVE_ID \
 EOF
 ```
 
+For spaces, quote the whole inline value, for example
+`--paths "planning/demo environment.md,src/generated.ts"`, or use the JSON array form.
+
 Paths are normalized against the checkout. Traversal, symlinks that leave the checkout, ignored
 paths, and Overlord-managed paths are rejected with a reason on stderr and never fail the call.
 

package/dist/connectors/core/overlord-mission/reference/cli.md

@@ -143,6 +143,15 @@ paths, and Overlord-managed paths are rejected with a reason on stderr and never
 Absent targets (deleted or renamed-away files) are valid. Never enumerate every changed or
 opened file, and when unsure, describe the coverage gap in the summary instead of guessing.
 
+Quote an inline value containing spaces: `--paths "planning/demo environment.md,src/generated.ts"`.
+If the local binding or ledger is unavailable, pass `--session-key` and `--objective-id`
+explicitly and keep the path flags. The CLI warns and submits normalized paths through the
+authenticated session as Declared; do not drop the paths from delivery. Fallback sync failures
+warn and need the declarations repeated on a later update/deliver (no local retry copy).
+Use `objective-changes` to read synchronized fallback evidence. Local `changes` instead reports
+the missing/invalid binding in `capture.healthCodes` and stderr. Restore native capture by
+re-running attach in the intended checkout with the same `OVLD_HOME` and writable storage.
+
 ### Shared worktree safety (critical)
 
 The working tree may contain file changes from **other agents, missions, or objectives** running concurrently in the same checkout or worktree. Those changes are **not yours to undo**.

package/dist/connectors/core/scripts/overlord-mcp.mjs

@@ -1837,7 +1837,7 @@ process.stdin.on('data', async chunk => {
         result: {
           protocolVersion: PROTOCOL_VERSION,
           capabilities: { tools: { listChanged: false } },
-          serverInfo: { name: 'overlord-__OVERLORD_ADAPTER_KEY__', version: '0.3.58' }
+          serverInfo: { name: 'overlord-__OVERLORD_ADAPTER_KEY__', version: '0.3.59' }
         }
       });
       continue;

package/dist/connectors/docs/05-connectors-and-agent-plugins.md

@@ -41,6 +41,7 @@ Required content:
 - Deliver last with a summary written by behavior or component, plus artifacts when they add review value.
 - Never revert, restore, or delete concurrent work from other agents or missions to deliver; ask instead.
 - Declare only known shell/script/generator outputs, deletes, and rename endpoints that capture missed (`--paths` / `--paths-file`); there is no per-file explanation input.
+- Quote inline path lists containing spaces; use a JSON string array with `--paths-file <path|->` for commas or long lists. If local binding/storage is unavailable, retain the explicit session key, objective id, and path flags: the CLI warns and submits Declared evidence through the authenticated session. Read it with `objective-changes`; local `changes` explains the coverage gap. Failed fallback sync requires repeating the declarations because it has no local retry copy.
 - Use stdin/file flags for shell-special content.
 - Use stdin/file flags for oversized JSON payloads (`--*-json` values above ~8 KB are rejected; use `--*-file -`).
 - Do not continue implementation after delivery unless follow-up execution is explicitly requested.

package/dist/index.js

@@ -6028,6 +6028,9 @@ function writeManifest(workingDirectory, entries) {
   }
   writeOwnerOnlyFileAtomically(manifestPath2(workingDirectory), contents);
 }
+function manifestFits(workingDirectory, entries) {
+  return Buffer.byteLength(JSON.stringify({ ...emptyManifest(workingDirectory), entries })) <= MAX_ACTIVE_SESSION_MANIFEST_BYTES;
+}
 function resolveEntry(entries, requestedObjectiveId) {
   const matching = entries.filter(
     (entry2) => !entry2.deliveryPendingSync && entryMatchesObjective(entry2, requestedObjectiveId)
@@ -6066,7 +6069,7 @@ function writeActiveSession({
       const prior = current.find(
         (entry) => entry.objectiveId === trimmedObjective && !entry.deliveryPendingSync
       );
-      const entries = current.filter(
+      let entries = current.filter(
         (entry) => entry.objectiveId !== trimmedObjective || entry.deliveryPendingSync
       );
       if (prior && prior.sessionKey !== trimmedKey) {
@@ -6077,10 +6080,6 @@ function writeActiveSession({
         });
         if (!removed) entries.push({ ...prior, deliveryPendingSync: true });
       }
-      if (entries.filter((entry) => entry.objectiveId === trimmedObjective).length >= MAX_ACTIVE_OBJECTIVE_SESSION_BINDINGS) {
-        if (prior && prior.sessionKey !== trimmedKey) writeManifest(workingDirectory, entries);
-        return false;
-      }
       const next = {
         missionId: trimmedMission,
         objectiveId: trimmedObjective,
@@ -6089,6 +6088,24 @@ function writeActiveSession({
         attachedAt: (/* @__PURE__ */ new Date()).toISOString(),
         deliveryPendingSync: false
       };
+      const hasCapacity = () => entries.filter((entry) => entry.objectiveId === trimmedObjective).length < MAX_ACTIVE_OBJECTIVE_SESSION_BINDINGS && manifestFits(workingDirectory, [...entries, next]);
+      if (!hasCapacity()) {
+        const retries = entries.filter((entry) => entry.deliveryPendingSync).sort((left, right) => Date.parse(left.attachedAt) - Date.parse(right.attachedAt));
+        for (const entry of retries) {
+          if (hasCapacity()) break;
+          if (removeChangeLedger({
+            workingDirectory,
+            objectiveId: entry.objectiveId,
+            sessionKey: entry.sessionKey
+          })) {
+            entries = entries.filter((candidate) => candidate !== entry);
+          }
+        }
+      }
+      if (!hasCapacity()) {
+        if (prior && prior.sessionKey !== trimmedKey) writeManifest(workingDirectory, entries);
+        return false;
+      }
       if (prior?.sessionKey !== trimmedKey) {
         resetChangeLedger({
           workingDirectory,
@@ -45048,6 +45065,8 @@ attach:
     The CLI records the session's capture binding: bound when OVERLORD_OBJECTIVE_ID
     names the attached objective, unbound otherwise. Bound is configuration evidence
     only; it never claims the capture hook is installed or has run.
+    Attach warns on stderr if its local binding cannot be saved. Check OVLD_HOME
+    permissions and re-run attach in this checkout to restore native capture.
   Returns:
     Full JSON including session.sessionKey, mission, history, artifacts, sharedState,
     and agentInstructions with required workflow instructions and structured-field pointers.
@@ -45591,6 +45610,13 @@ deliver:
     out-of-checkout symlinks, ignored and Overlord-managed paths are rejected with a
     reason on stderr), and absent targets are valid. Never enumerate opened files or a
     shared-worktree diff; when unsure, describe the coverage limitation instead.
+    Quote the whole --paths value when a path contains spaces. Use --paths-file -
+    with a JSON string array on stdin for paths containing commas or a long list.
+    If the local binding or ledger is missing, keep --session-key and --objective-id:
+    declarations still synchronize through the authenticated session as Declared.
+    A warning explains the local capture gap. Failed fallback sync has no local retry
+    copy: repeat those declarations on update/deliver. objective-changes reads the
+    synchronized server evidence; changes reads only this checkout's ledgers.
     Inline --*-json values larger than ~8 KB are rejected; use --payload-file - and
     stream JSON on stdin. Keep --summary inline.
 
@@ -45628,6 +45654,8 @@ changes:
     syncState synced | pending } sorted by path and capped at 200; total counts distinct
     local paths. coverage "unavailable" means no local session matched, not "no files
     changed". This is not complete cross-device history: use objective-changes.
+    capture.healthCodes and stderr explain missing bindings or unreadable local storage.
+    Re-run attach in the intended checkout with the same OVLD_HOME to restore capture.
 
 sync-changes:
   Purpose: