@lobu/cli 6.0.0 → 6.1.1

package/dist/db/migrations/20260501000000_drop_cli_sessions.sql

@@ -0,0 +1,27 @@
+-- migrate:up
+
+-- The bespoke `lobu login` device-code flow that backed `cli_sessions` has
+-- been replaced with standard OAuth 2.0 device-code (issued by the existing
+-- Lobu IdP). The CLI now mints OAuth bearer tokens, so `cli_sessions` is
+-- dead.
+DROP INDEX IF EXISTS public.cli_sessions_user_id_idx;
+DROP INDEX IF EXISTS public.cli_sessions_expires_at_idx;
+DROP TABLE IF EXISTS public.cli_sessions;
+
+-- migrate:down
+
+CREATE TABLE IF NOT EXISTS public.cli_sessions (
+    session_id text PRIMARY KEY,
+    user_id text NOT NULL,
+    email text,
+    name text,
+    refresh_token_id text NOT NULL,
+    expires_at timestamptz NOT NULL,
+    created_at timestamptz NOT NULL DEFAULT now()
+);
+
+CREATE INDEX IF NOT EXISTS cli_sessions_user_id_idx
+    ON public.cli_sessions (user_id);
+
+CREATE INDEX IF NOT EXISTS cli_sessions_expires_at_idx
+    ON public.cli_sessions (expires_at);

package/dist/db/migrations/20260501133000_lobu_memory_mcp_id.sql

@@ -0,0 +1,117 @@
+-- migrate:up
+
+UPDATE public.agents
+SET mcp_servers = (mcp_servers - 'lobu') || jsonb_build_object('lobu-memory', mcp_servers->'lobu'),
+    updated_at = now()
+WHERE mcp_servers ? 'lobu'
+  AND NOT (mcp_servers ? 'lobu-memory');
+
+UPDATE public.agents
+SET mcp_servers = mcp_servers - 'lobu',
+    updated_at = now()
+WHERE mcp_servers ? 'lobu';
+
+UPDATE public.agents a
+SET pre_approved_tools = COALESCE((
+  SELECT jsonb_agg(DISTINCT mapped.value)
+  FROM (
+    SELECT CASE
+      WHEN tool.value #>> '{}' LIKE '/mcp/lobu/tools/%'
+        OR tool.value #>> '{}' LIKE '/mcp/lobu-memory/tools/%'
+        THEN to_jsonb('/mcp/lobu-memory/tools/*'::text)
+      ELSE tool.value
+    END AS value
+    FROM jsonb_array_elements(COALESCE(a.pre_approved_tools, '[]'::jsonb)) AS tool(value)
+
+    UNION ALL
+
+    SELECT to_jsonb('/mcp/lobu-memory/tools/*'::text) AS value
+    WHERE a.mcp_servers ? 'lobu-memory'
+  ) AS mapped
+), '[]'::jsonb),
+    updated_at = now()
+WHERE a.mcp_servers ? 'lobu-memory'
+   OR EXISTS (
+     SELECT 1
+     FROM jsonb_array_elements(COALESCE(a.pre_approved_tools, '[]'::jsonb)) AS tool(value)
+     WHERE tool.value #>> '{}' LIKE '/mcp/lobu/tools/%'
+        OR tool.value #>> '{}' LIKE '/mcp/lobu-memory/tools/%'
+   );
+
+INSERT INTO public.grants (agent_id, kind, pattern, expires_at, granted_at, denied)
+SELECT g.agent_id,
+       g.kind,
+       '/mcp/lobu-memory/tools/*',
+       CASE
+         WHEN bool_or(g.expires_at IS NULL) THEN NULL::timestamptz
+         ELSE max(g.expires_at)
+       END,
+       now(),
+       bool_or(g.denied)
+FROM public.grants g
+WHERE g.kind = 'mcp_tool'
+  AND (g.pattern LIKE '/mcp/lobu/tools/%' OR g.pattern LIKE '/mcp/lobu-memory/tools/%')
+GROUP BY g.agent_id, g.kind
+ON CONFLICT (agent_id, kind, pattern) DO UPDATE SET
+  expires_at = CASE
+    WHEN public.grants.expires_at IS NULL THEN EXCLUDED.expires_at
+    WHEN EXCLUDED.expires_at IS NULL THEN public.grants.expires_at
+    ELSE LEAST(public.grants.expires_at, EXCLUDED.expires_at)
+  END,
+  granted_at = EXCLUDED.granted_at,
+  denied = public.grants.denied OR EXCLUDED.denied;
+
+DELETE FROM public.grants
+WHERE kind = 'mcp_tool'
+  AND pattern LIKE '/mcp/lobu/tools/%';
+
+-- migrate:down
+
+UPDATE public.agents
+SET mcp_servers = (mcp_servers - 'lobu-memory') || jsonb_build_object('lobu', mcp_servers->'lobu-memory'),
+    updated_at = now()
+WHERE mcp_servers ? 'lobu-memory'
+  AND NOT (mcp_servers ? 'lobu');
+
+UPDATE public.agents a
+SET pre_approved_tools = COALESCE((
+  SELECT jsonb_agg(DISTINCT CASE
+    WHEN tool.value #>> '{}' LIKE '/mcp/lobu-memory/tools/%'
+      THEN to_jsonb('/mcp/lobu/tools/*'::text)
+    ELSE tool.value
+  END)
+  FROM jsonb_array_elements(COALESCE(a.pre_approved_tools, '[]'::jsonb)) AS tool(value)
+), '[]'::jsonb),
+    updated_at = now()
+WHERE EXISTS (
+  SELECT 1
+  FROM jsonb_array_elements(COALESCE(a.pre_approved_tools, '[]'::jsonb)) AS tool(value)
+  WHERE tool.value #>> '{}' LIKE '/mcp/lobu-memory/tools/%'
+);
+
+INSERT INTO public.grants (agent_id, kind, pattern, expires_at, granted_at, denied)
+SELECT g.agent_id,
+       g.kind,
+       '/mcp/lobu/tools/*',
+       CASE
+         WHEN bool_or(g.expires_at IS NULL) THEN NULL::timestamptz
+         ELSE max(g.expires_at)
+       END,
+       now(),
+       bool_or(g.denied)
+FROM public.grants g
+WHERE g.kind = 'mcp_tool'
+  AND g.pattern LIKE '/mcp/lobu-memory/tools/%'
+GROUP BY g.agent_id, g.kind
+ON CONFLICT (agent_id, kind, pattern) DO UPDATE SET
+  expires_at = CASE
+    WHEN public.grants.expires_at IS NULL THEN EXCLUDED.expires_at
+    WHEN EXCLUDED.expires_at IS NULL THEN public.grants.expires_at
+    ELSE LEAST(public.grants.expires_at, EXCLUDED.expires_at)
+  END,
+  granted_at = EXCLUDED.granted_at,
+  denied = public.grants.denied OR EXCLUDED.denied;
+
+DELETE FROM public.grants
+WHERE kind = 'mcp_tool'
+  AND pattern LIKE '/mcp/lobu-memory/tools/%';

package/dist/db/migrations/20260502000000_drop_chat_connections.sql

@@ -0,0 +1,60 @@
+-- migrate:up
+-- Drop chat_connections table. Connection state is now unified in
+-- agent_connections, which ChatInstanceManager reads/writes directly.
+-- Secret fields (botToken, signingSecret, etc.) live as `secret://`
+-- refs inside the row's `config` JSON and resolve at runtime through
+-- SecretStoreRegistry — backed by Postgres by default, pluggable to
+-- AWS Secrets Manager / Vault / k8s for ops who need it.
+
+-- Copy any existing chat_connections rows into agent_connections so a
+-- live deployment with provisioned chat bots doesn't lose them. Configs
+-- carrying the legacy `enc:v1:` ciphertext are handled at read time by
+-- decryptLegacyEncryptedConfig in postgres-stores.ts; refs pass through
+-- unchanged. ON CONFLICT DO NOTHING covers the case where rows have
+-- already been mirrored by an in-flight write through the manager.
+-- agent_connections.agent_id is NOT NULL, but chat_connections.template_agent_id
+-- was nullable. Skip orphaned rows (no parent agent) — they could not start
+-- in the current model anyway.
+-- Guarded by to_regclass: deployments that never had chat_connections
+-- (table created with IF NOT EXISTS in 20260429140000 and never used) skip
+-- the copy entirely instead of erroring on the missing relation.
+DO $$
+BEGIN
+    IF to_regclass('public.chat_connections') IS NOT NULL THEN
+        INSERT INTO public.agent_connections (
+            id, agent_id, platform, config, settings, metadata,
+            status, error_message, created_at, updated_at
+        )
+        SELECT
+            id, template_agent_id, platform, config, settings, metadata,
+            status, error_message, created_at, updated_at
+        FROM public.chat_connections
+        WHERE template_agent_id IS NOT NULL
+        ON CONFLICT (id) DO NOTHING;
+    END IF;
+END $$;
+
+DROP TABLE IF EXISTS public.chat_connections;
+
+-- migrate:down
+-- Recreate chat_connections for rollback. Data would need to be re-seeded.
+
+CREATE TABLE IF NOT EXISTS public.chat_connections (
+    id text PRIMARY KEY,
+    platform text NOT NULL,
+    template_agent_id text REFERENCES public.agents(id) ON DELETE CASCADE,
+    config jsonb NOT NULL,
+    settings jsonb NOT NULL DEFAULT '{}'::jsonb,
+    metadata jsonb NOT NULL DEFAULT '{}'::jsonb,
+    status text NOT NULL DEFAULT 'active',
+    error_message text,
+    created_at timestamptz NOT NULL DEFAULT now(),
+    updated_at timestamptz NOT NULL DEFAULT now()
+);
+
+CREATE INDEX IF NOT EXISTS chat_connections_template_agent_id_idx
+    ON public.chat_connections (template_agent_id)
+    WHERE template_agent_id IS NOT NULL;
+
+CREATE INDEX IF NOT EXISTS chat_connections_platform_idx
+    ON public.chat_connections (platform);

package/dist/db/migrations/20260503000000_agent_secrets_org_scope.sql

@@ -0,0 +1,56 @@
+-- migrate:up
+
+-- agent_secrets used a global `(name)` namespace, so two organizations
+-- storing the same key (e.g. `ANTHROPIC_API_KEY`) would silently overwrite
+-- each other. Scope rows by organization while keeping legacy rows
+-- addressable: empty-string organization_id means "global" (used by
+-- system env-store and any pre-existing rows from the global era).
+--
+-- ROLLOUT NOTE: this migration replaces the primary key on `(name)` with
+-- `(organization_id, name)` non-atomically. Lobu's deployment model is a
+-- single embedded Node process with atomic swap (see "Embedded-only
+-- deployment" in AGENTS.md), so old + new processes never run concurrently
+-- against the same database. If you're running Lobu under a rolling-deploy
+-- supervisor, stop traffic before applying this migration — old pods using
+-- `ON CONFLICT (name)` will fail writes against the new schema.
+
+ALTER TABLE public.agent_secrets
+    ADD COLUMN IF NOT EXISTS organization_id text NOT NULL DEFAULT '';
+
+ALTER TABLE public.agent_secrets
+    DROP CONSTRAINT IF EXISTS agent_secrets_pkey;
+
+ALTER TABLE public.agent_secrets
+    ADD CONSTRAINT agent_secrets_pkey PRIMARY KEY (organization_id, name);
+
+CREATE INDEX IF NOT EXISTS agent_secrets_org_id_idx
+    ON public.agent_secrets (organization_id);
+
+-- migrate:down
+
+ALTER TABLE public.agent_secrets
+    DROP CONSTRAINT IF EXISTS agent_secrets_pkey;
+
+DROP INDEX IF EXISTS public.agent_secrets_org_id_idx;
+
+-- Down-step is destructive by design: collapses per-org rows back to the
+-- global namespace. The two DELETEs below pick a survivor non-deterministically
+-- when multiple orgs hold the same name (global wins first; otherwise the
+-- lexicographically-smaller org_id survives). Acceptable because rollback
+-- after multi-org writes is already lossy — there is no "right" winner.
+DELETE FROM public.agent_secrets a
+USING public.agent_secrets b
+WHERE a.name = b.name
+  AND a.organization_id <> ''
+  AND b.organization_id = '';
+
+DELETE FROM public.agent_secrets a
+USING public.agent_secrets b
+WHERE a.name = b.name
+  AND a.organization_id > b.organization_id;
+
+ALTER TABLE public.agent_secrets
+    ADD CONSTRAINT agent_secrets_pkey PRIMARY KEY (name);
+
+ALTER TABLE public.agent_secrets
+    DROP COLUMN IF EXISTS organization_id;

package/dist/db/migrations/20260504000000_flatten_agents_drop_sandbox_model.sql

@@ -0,0 +1,48 @@
+-- migrate:up
+
+-- Flatten the agents table: there is no longer a template/sandbox split.
+-- One agents row = one logical agent. Definitions, providers, settings all
+-- live on this row and are agent-only (not per-user).
+--
+-- Per-user state has its own homes:
+--   - user_auth_profiles (per-user-per-agent OAuth tokens) — already canonical
+--   - agent_channel_bindings (where the agent operates)
+--   - agent_users (who has interacted)
+--
+-- ROLLOUT NOTE: this migration deletes every sandbox row. There is no
+-- pre-cutover production data to preserve (per buremba). If that ever
+-- changes, the rollback below restores the columns but NOT the deleted
+-- rows.
+
+-- 1. Drop sandbox rows. Anything with template_agent_id or parent_connection_id
+--    set was a per-user / per-connection sandbox.
+DELETE FROM public.agents
+WHERE template_agent_id IS NOT NULL
+   OR parent_connection_id IS NOT NULL;
+
+-- 2. Drop indexes on the going-away columns.
+DROP INDEX IF EXISTS public.agents_template_agent_id_idx;
+DROP INDEX IF EXISTS public.agents_parent_connection_id_idx;
+
+-- 3. Drop the columns themselves.
+ALTER TABLE public.agents DROP COLUMN IF EXISTS template_agent_id;
+ALTER TABLE public.agents DROP COLUMN IF EXISTS parent_connection_id;
+
+-- 4. Drop legacy / dead-code columns.
+--    auth_profiles: superseded by user_auth_profiles table (per-user-per-agent).
+--    mcp_install_notified: per-user UI dismissal state, never used at runtime.
+ALTER TABLE public.agents DROP COLUMN IF EXISTS auth_profiles;
+ALTER TABLE public.agents DROP COLUMN IF EXISTS mcp_install_notified;
+
+-- migrate:down
+
+-- Restore columns (data is gone — the DELETE is irreversible).
+ALTER TABLE public.agents ADD COLUMN IF NOT EXISTS template_agent_id text;
+ALTER TABLE public.agents ADD COLUMN IF NOT EXISTS parent_connection_id text;
+ALTER TABLE public.agents ADD COLUMN IF NOT EXISTS auth_profiles jsonb DEFAULT '[]'::jsonb;
+ALTER TABLE public.agents ADD COLUMN IF NOT EXISTS mcp_install_notified jsonb DEFAULT '{}'::jsonb;
+
+CREATE INDEX IF NOT EXISTS agents_template_agent_id_idx
+    ON public.agents (template_agent_id);
+CREATE INDEX IF NOT EXISTS agents_parent_connection_id_idx
+    ON public.agents (parent_connection_id);

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AA8BA,wBAAsB,MAAM,CAC1B,IAAI,GAAE,SAAS,MAAM,EAAiB,GACrC,OAAO,CAAC,IAAI,CAAC,CA2qBf"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AA8BA,wBAAsB,MAAM,CAC1B,IAAI,GAAE,SAAS,MAAM,EAAiB,GACrC,OAAO,CAAC,IAAI,CAAC,CAs3Bf"}

package/dist/index.js

@@ -29,14 +29,74 @@ export async function runCli(argv = process.argv) {
         .name("lobu")
         .description("CLI for deploying and managing AI agents on Lobu")
         .version(version);
+    // Group commands in --help output. Commander v14 has no native grouping,
+    // so we override the help formatter via addHelpText to print our own
+    // categorized list. The flat command list is still available.
+    program.addHelpText("after", `
+Local dev:
+  init [name]              Scaffold a new agent project
+  run | dev | start        Boot the embedded Lobu stack
+  chat <prompt>            Send a prompt to an agent and stream the response
+  eval [name]              Run agent evaluations
+  validate                 Validate lobu.toml
+  doctor                   Health checks (deps, DB, pgvector, ports, keys)
+  telemetry                Show / toggle anonymous error reporting
+
+Cloud:
+  login | logout           OAuth device-code login (or --token for CI)
+  whoami | status          Show user / agent state
+  context <subcmd>         Manage API contexts
+  org <subcmd>             Manage active org slug
+  link | unlink            Bind this directory to a (context, org)
+  apply | deploy           Sync lobu.toml to cloud (idempotent)
+  agent <subcmd>           CRUD agents via REST
+  token [create]           Print or mint personal access tokens
+
+Memory:
+  memory run [tool]        Invoke a memory MCP tool
+  memory exec <script>     Run a ClientSDK script
+  memory health            Validate login + MCP connectivity
+  memory configure         Wire OpenClaw config
+  memory seed [path]       Provision a memory workspace
+  memory init              Wire agents to a memory MCP endpoint
+`);
     // ─── init ───────────────────────────────────────────────────────────
     program
         .command("init [name]")
         .description("Scaffold a new agent project (lobu.toml + agent files + .env)")
-        .action(async (name) => {
+        .option("-y, --yes", "Skip prompts; use defaults / flag values")
+        .option("--here", "Scaffold into the current directory (alias for `init .`)")
+        .option("--port <port>", "Gateway port (default 8787)")
+        .option("--public-url <url>", "Public gateway URL (OAuth/webhooks)")
+        .option("--network <policy>", "Worker network policy: restricted | open | isolated")
+        .option("--provider <id>", "Provider id from `config/providers.json`")
+        .option("--provider-key <key>", "Provider API key (else read from env)")
+        .option("--platform <type>", "Chat platform: telegram | slack | discord | whatsapp | teams | gchat")
+        .option("--memory <choice>", "Memory backend: none | lobu-cloud | lobu-custom")
+        .option("--memory-url <url>", "Custom memory MCP URL (with --memory lobu-custom)")
+        .option("--otel-endpoint <url>", "OpenTelemetry collector endpoint")
+        .option("--sentry", "Enable Sentry error reporting")
+        .option("--no-sentry", "Disable Sentry without prompting")
+        .action(async (name, options) => {
         try {
             const { initCommand } = await import("./commands/init.js");
-            await initCommand(process.cwd(), name);
+            // Commander gives a tristate: true for --sentry, false for
+            // --no-sentry, undefined for neither.
+            await initCommand(process.cwd(), name, {
+                yes: options.yes,
+                here: options.here,
+                port: options.port,
+                publicUrl: options.publicUrl,
+                network: options.network,
+                provider: options.provider,
+                providerKey: options.providerKey,
+                platform: options.platform,
+                memory: options.memory,
+                memoryUrl: options.memoryUrl,
+                otelEndpoint: options.otelEndpoint,
+                sentry: options.sentry === true,
+                noSentry: options.sentry === false,
+            });
         }
         catch (error) {
             console.error(chalk.red("\n  Error:"), error);
@@ -46,20 +106,23 @@ export async function runCli(argv = process.argv) {
     // ─── chat ──────────────────────────────────────────────────────────
     program
         .command("chat <prompt>")
-        .description("Send a prompt to an agent and stream the response")
+        .description("Send a prompt to an agent and stream the response. With --user, routes through Telegram/Slack.")
         .option("-a, --agent <id>", "Agent ID (defaults to first in lobu.toml)")
         .option("-u, --user <id>", "User ID to impersonate (e.g. telegram:12345)")
         .option("-t, --thread <id>", "Thread/conversation ID for multi-turn")
         .option("-g, --gateway <url>", `Gateway URL (default: ${GATEWAY_DEFAULT_URL})`)
         .option("--dry-run", "Process without persisting history")
         .option("--new", "Force new session (ignore existing)")
+        .option("-C, --continue", "Resume the last thread for this (context, agent)")
+        .option("--auto-approve", "Auto-approve every tool call (use only in trusted environments)")
+        .option("--json", "Emit raw SSE events as JSON lines instead of text")
         .option("-c, --context <name>", "Use a named context")
         .action(async (prompt, options) => {
         const { chatCommand } = await import("./commands/chat.js");
         await chatCommand(process.cwd(), prompt, options);
     });
     // ─── eval ──────────────────────────────────────────────────────────
-    program
+    const evalCmd = program
         .command("eval [name]")
         .description("Run agent evaluations")
         .option("-a, --agent <id>", "Agent ID (defaults to first in lobu.toml)")
@@ -74,6 +137,16 @@ export async function runCli(argv = process.argv) {
         const { evalCommand } = await import("./commands/eval.js");
         await evalCommand(process.cwd(), name, options);
     });
+    evalCmd
+        .command("new <name>")
+        .description("Scaffold a new YAML eval into the agent's evals/ directory")
+        .option("-a, --agent <id>", "Agent ID (defaults to first in lobu.toml)")
+        .option("--description <text>", "Eval description")
+        .option("--trials <n>", "Trial count", parseInt)
+        .action(async (name, options) => {
+        const { evalNewCommand } = await import("./commands/eval.js");
+        await evalNewCommand(name, options);
+    });
     // ─── validate ───────────────────────────────────────────────────────
     program
         .command("validate")
@@ -84,18 +157,17 @@ export async function runCli(argv = process.argv) {
         if (!valid)
             process.exit(1);
     });
-    // ─── apply ──────────────────────────────────────────────────────────
-    // One-way `lobu.toml` → cloud org converger. GETs current state, renders
-    // a diff, prompts to confirm, then loops over the existing CRUD endpoints
-    // in dependency order. Re-running converges on partial failure.
+    // ─── apply / deploy ─────────────────────────────────────────────────
     program
         .command("apply")
+        .alias("deploy")
         .description("Sync lobu.toml + agent dirs to your Lobu Cloud org (idempotent)")
         .option("--dry-run", "Show the plan and exit without mutating")
         .option("--yes", "Skip the confirmation prompt (CI mode)")
         .option("--only <kind>", "Restrict to one resource family: 'agents' | 'memory'")
         .option("--org <slug>", "Org slug override (defaults to active session)")
         .option("--url <url>", "Server URL override")
+        .option("--force", "Bypass the project-link guard if context/org don't match")
         .action(async (options) => {
         if (options.only !== undefined &&
             options.only !== "agents" &&
@@ -103,26 +175,28 @@ export async function runCli(argv = process.argv) {
             console.error(chalk.red("\n  Error:"), `--only must be 'agents' or 'memory' (got: ${options.only})`);
             process.exit(2);
         }
-        const { lobuApplyCommand } = await import("./commands/apply.js");
-        await lobuApplyCommand({
+        const { applyCommand } = await import("./commands/_lib/apply/apply-cmd.js");
+        await applyCommand({
             dryRun: options.dryRun,
             yes: options.yes,
             only: options.only,
             org: options.org,
             url: options.url,
+            force: options.force,
         });
     });
-    // ─── run ────────────────────────────────────────────────────────────
-    // Boots the embedded Lobu stack (gateway + workers + memory backend) as
-    // a single Node process. Extra args are forwarded to the bundle entry.
+    // ─── run / dev / start ──────────────────────────────────────────────
     program
         .command("run")
+        .aliases(["dev", "start"])
         .description("Run the embedded Lobu stack (gateway + workers in one Node process)")
-        .allowUnknownOption(true)
-        .helpOption(false)
-        .action(async (_opts, cmd) => {
+        .option("--port <port>", "Gateway port (overrides GATEWAY_PORT in .env)")
+        .option("--quiet", "Suppress startup banner; raise log level to warn")
+        .option("--verbose", "Lower log level to debug")
+        .option("--log-level <level>", "Forwarded as LOG_LEVEL to the bundle")
+        .action(async (options) => {
         const { devCommand } = await import("./commands/dev.js");
-        await devCommand(process.cwd(), cmd.args);
+        await devCommand(process.cwd(), options);
     });
     // ─── login ──────────────────────────────────────────────────────────
     program
@@ -253,6 +327,23 @@ export async function runCli(argv = process.argv) {
         const { orgSetCommand } = await import("./commands/org.js");
         await orgSetCommand(slug, options);
     });
+    // ─── link / unlink ──────────────────────────────────────────────────
+    program
+        .command("link")
+        .description("Bind the current directory to a (context, org). Stored at .lobu/project.json.")
+        .option("-c, --context <name>", "Use a named context")
+        .option("--org <slug>", "Org slug to link (defaults to active)")
+        .action(async (options) => {
+        const { linkCommand } = await import("./commands/link.js");
+        await linkCommand(options);
+    });
+    program
+        .command("unlink")
+        .description("Remove the project link file")
+        .action(async () => {
+        const { unlinkCommand } = await import("./commands/link.js");
+        await unlinkCommand();
+    });
     // ─── agent ──────────────────────────────────────────────────────────
     const agent = program
         .command("agent")
@@ -288,6 +379,15 @@ export async function runCli(argv = process.argv) {
         const { agentCreateCommand } = await import("./commands/agent.js");
         await agentCreateCommand(agentId, options);
     });
+    agent
+        .command("scaffold <agentId>")
+        .description("Add a new local agent (agents/<id>/* + lobu.toml entry) without overwriting existing ones")
+        .option("--name <name>", "Display name")
+        .option("--description <text>", "Description")
+        .action(async (agentId, options) => {
+        const { agentScaffoldCommand } = await import("./commands/agent.js");
+        await agentScaffoldCommand(agentId, options);
+    });
     agent
         .command("update <agentId>")
         .description("Update agent metadata")
@@ -337,15 +437,39 @@ export async function runCli(argv = process.argv) {
     // ─── doctor ─────────────────────────────────────────────────────────
     program
         .command("doctor")
-        .description("Health checks (system deps, memory MCP)")
+        .description("Health checks (deps, DB, pgvector, ports, provider keys)")
         .option("--memory-only", "Only check memory MCP connectivity + auth")
         .action(async (options) => {
         const { doctorCommand } = await import("./commands/doctor.js");
         await doctorCommand(options);
     });
+    // ─── telemetry ──────────────────────────────────────────────────────
+    const telemetry = program
+        .command("telemetry")
+        .description("Show or toggle anonymous error reporting (Sentry)");
+    telemetry
+        .command("status", { isDefault: true })
+        .description("Show whether telemetry is on or off")
+        .action(async () => {
+        const { telemetryStatusCommand } = await import("./commands/telemetry.js");
+        await telemetryStatusCommand();
+    });
+    telemetry
+        .command("on")
+        .description("Enable telemetry (writes SENTRY_DSN to .env)")
+        .option("--dsn <dsn>", "Custom Sentry DSN (defaults to Lobu's)")
+        .action(async (options) => {
+        const { telemetryOnCommand } = await import("./commands/telemetry.js");
+        await telemetryOnCommand(options);
+    });
+    telemetry
+        .command("off")
+        .description("Disable telemetry (removes SENTRY_DSN from .env)")
+        .action(async () => {
+        const { telemetryOffCommand } = await import("./commands/telemetry.js");
+        await telemetryOffCommand();
+    });
     // ─── memory ─────────────────────────────────────────────────────────
-    // Memory operations live under the Lobu CLI. Auth is top-level (`lobu login`);
-    // memory subcommands only configure endpoints and call tools.
     const memory = program
         .command("memory")
         .description("Lobu memory MCP — tools, seeding, and client configuration");
@@ -386,7 +510,7 @@ export async function runCli(argv = process.argv) {
         .option("-c, --context <name>", "Use a named context")
         .action(async (script, options) => {
         const { memoryRunCommand } = await import("./commands/memory/run.js");
-        await memoryRunCommand("run", JSON.stringify({ script }), options);
+        await memoryRunCommand("run_sdk", JSON.stringify({ script }), options);
     });
     memory
         .command("health")
@@ -412,9 +536,9 @@ export async function runCli(argv = process.argv) {
     });
     memory
         .command("seed [path]")
-        .description("Provision a Lobu memory workspace from [memory.owletto] in lobu.toml + ./models + optional ./data")
+        .description("Provision a Lobu memory workspace from [memory] in lobu.toml + ./models + optional ./data")
         .option("--dry-run", "Log what would be created without mutating")
-        .option("--org <slug>", "Org slug override (defaults to [memory.owletto].org)")
+        .option("--org <slug>", "Org slug override (defaults to [memory].org)")
         .option("--url <url>", "Server URL override")
         .option("-c, --context <name>", "Use a named context")
         .action(async (pathArg, options) => {