@lore-co/cli 0.1.24 → 0.1.26

package/README.md

@@ -164,7 +164,7 @@ content-free `guard_check` audit event.
 
 ```sh
 lore update
-lore update --version v0.1.24
+lore update --version v0.1.26
 ```
 
 `update` resolves the latest release to an exact tag, or uses the exact
@@ -194,6 +194,14 @@ The three commands above also support `--json`. `doctor` checks public
 unready, and unauthorized states remain distinct.
 
 `status` and `doctor` report the durable outbox, oldest pending capture,
+and the last observed invocation. `doctor` also asks Codex for its discovered
+Lore hooks and approval state. New or changed Codex hooks need review in
+`/hooks`; Lore never writes trust records or bypasses that review. Unsupported
+or unreachable host diagnostics are reported as unverified, not approved.
+After installation, restart the agent, complete a turn, and check for fresh
+activity. API access and installed files alone do not establish recording.
+
+The diagnostics also report
 verified snapshots and their local age, trust keys, local Guard coverage and
 latency, context fallback rate, declared agent capabilities, exact installation
 state, and last invocation health. `doctor` also reads the authenticated
@@ -365,8 +373,53 @@ after model turns. `lore connect` cannot intercept an arbitrary external model
 API or bot by itself. The Lore web/wiki service is optional; the bridge needs
 only a reachable headless Lore API.
 
+## Image attachments
+
+Image storage is shared across agents. Codex and Claude Code native hooks read
+embedded images from matching user messages in their local transcripts. OpenCode
+captures structured user and completed-assistant image parts. Devin CLI captures
+local image references in multimodal ATIF exports. Native hooks also accept image
+parts or explicit file attachments supplied by a host.
+
+Lore saves the supplied bytes separately from conversation text and shows private
+thumbnails in sessions and learning-source evidence. Transcript images must match
+the user message, session, and capture time. Paths in ordinary prose are never
+read, and remote image URLs are not fetched automatically.
+
+PNG, JPEG, WebP, and GIF are supported, up to 5 MiB and 40 megapixels per image,
+with six images per event. Capture retries at Stop if the transcript was not
+ready when the prompt hook ran. Uploads use the durable outbox and retry on later
+hooks, draining up to six images within a bounded upload window. Integrations
+without image data in their hooks use the shared SDK/API or MCP `attach_image`
+tool. Cursor currently omits pasted images from its prompt-hook attachments;
+text-only Copilot, Cowork, or cloud exports likewise need the source to explicitly
+provide the image bytes. A filename alone is not a captured image.
+
+The API and dashboard must include migration `0027_event_images`, and installed
+hooks must be refreshed with the updated CLI. Existing text-only events are not
+automatically backfilled; unavailable originals remain labeled in the session.
+
 ## Devin sessions
 
+For local Devin CLI sessions, connect Lore first, then run:
+
+```sh
+lore devin cli setup
+# Open a new terminal:
+devin
+```
+
+The shell integration enables `--export` automatically and records completed
+user/assistant turns, including resumed sessions. Lore supplies context through
+the prompt hook and reads assistant replies from the export, so Stop payloads
+without assistant text are supported. In scripts, use
+`lore devin cli -- -p "Your task"`. Run `lore devin cli status` to check the last
+capture, `lore devin cli sync` to retry uploads, and `lore devin cli off` to
+remove the integration. Sign-in, workspace trust, and Devin permissions remain
+under Devin's control. See [capture boundaries and storage](../../docs/guides/integrations.md#devin-cli).
+
+### Devin Cloud
+
 Create a Lore-enriched Devin session, then send later prompts through the same
 audited context-delivery path:
 
@@ -385,9 +438,11 @@ DEVIN_API_KEY=... DEVIN_ORG_ID=... \
 
 The Lore API must also have Devin polling enabled with the same
 `DEVIN_API_KEY` and `DEVIN_ORG_ID`, and the repository must appear in
-`DEVIN_REPOSITORY_ALLOWLIST`. `lore devin setup` checks Devin access and Lore
-reachability; `start` performs authenticated delivery and poller-registration
-checks.
+`DEVIN_REPOSITORY_ALLOWLIST`. `lore devin setup` checks Devin API access and
+authenticated Lore workspace access. It reports recording as unverified;
+it does not check the server's polling configuration or register a session.
+`start` performs authenticated delivery and poller-registration checks. Confirm
+a captured Devin entry in **Sessions** after the session has messages to poll.
 
 Both commands retrieve Lore context with a stable delivery event and receipt.
 `devin start` registers the created session for transcript polling.
@@ -427,7 +482,7 @@ same-repository, non-draft pull requests bearing the corresponding
 `lore:codex-review` or `lore:devin-review` label.
 
 Generated jobs require a published standalone binary release and default to
-`treadiehq/lore-releases` at `v0.1.24`. Set `LORE_CLI_REPOSITORY` to the publicly
+`treadiehq/lore-releases` at `v0.1.26`. Set `LORE_CLI_REPOSITORY` to the publicly
 readable `owner/repository` and `LORE_CLI_VERSION` to an existing release tag
 when using another release source.
 
@@ -461,3 +516,19 @@ The correction and current behavior go here.
 
 For source builds, self-hosting, tests, and release internals, see the
 [documentation index](../../docs/README.md).
+
+## Private links
+
+Use `lore share learning <id>`, `lore share session <id> --event <event-id>`,
+or `lore share delivery <id> --learning <learning-id>` to return an existing
+workspace link. The anchor flags are optional. Add `--json` for structured output.
+IDs come from Lore results, such as `lore ask --json`.
+
+MCP exposes the read-only `share_lore` tool with `kind`, `id`, and optional
+`eventId` or `learningId`. The SDK offers `client.share(...)`. These resolve the
+resource using the current credential before returning a link. They do not
+publish content or grant access; recipients must sign in to the same workspace.
+
+Hosted connections use `https://uselore.co`. For self-hosting, connect with
+`--dashboard-url https://lore.example.com`, set `LORE_DASHBOARD_URL` for MCP,
+or pass `dashboardUrl` to the SDK. The URL must be an HTTP(S) origin.

package/dist/cli.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"cli.d.ts","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":";AAsBA,OAAO,EAwBL,KAAK,yBAAyB,EAC/B,MAAM,eAAe,CAAC;AACvB,OAAO,EACL,KAAK,oBAAoB,EAE1B,MAAM,cAAc,CAAC;AAgCtB,eAAO,MAAM,oBAAoB,sBAAsB,CAAC;AACxD,eAAO,MAAM,sBAAsB,2BAA2B,CAAC;AAC/D,eAAO,MAAM,4BAA4B,uBAAuB,CAAC;AACjE,QAAA,MAAM,sBAAsB,kGAA4B,CAAC;AACzD,MAAM,MAAM,mBAAmB,GAAG,CAAC,OAAO,sBAAsB,CAAC,CAAC,MAAM,CAAC,CAAC;AAC1E,MAAM,MAAM,gBAAgB,GACxB,mBAAmB,GACnB,SAAS,GACT,QAAQ,GACR,QAAQ,CAAC;AAiCb,MAAM,WAAW,SAAS;IACxB,IAAI,EAAE,MAAM,CAAC;IACb,aAAa,EAAE,MAAM,CAAC;IACtB,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,CAAC;IAChB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,uBAAuB,EAAE,MAAM,CAAC;IAChC,qBAAqB,EAAE,MAAM,CAAC;IAC9B,oBAAoB,EAAE,MAAM,CAAC;IAC7B,sBAAsB,EAAE,MAAM,CAAC;IAC/B,6BAA6B,EAAE,MAAM,CAAC;IACtC,cAAc,EAAE,MAAM,CAAC;IACvB,cAAc,EAAE,MAAM,CAAC;IACvB,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;IACd,UAAU,EAAE,MAAM,CAAC;IACnB,eAAe,EAAE,MAAM,CAAC;IACxB,kBAAkB,EAAE,MAAM,CAAC;IAC3B,cAAc,EAAE,MAAM,CAAC;IACvB,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;IAClB,cAAc,EAAE,MAAM,CAAC;IACvB,cAAc,EAAE,MAAM,CAAC;IACvB,cAAc,EAAE,MAAM,CAAC;IACvB,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,eAAe;IAC9B,OAAO,EAAE,CAAC,CAAC;IACX,MAAM,EAAE,MAAM,CAAC;IACf,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,mBAAmB,EAAE,CAAC;IAC9B,gBAAgB,CAAC,EAAE,OAAO,CAAC,MAAM,CAAC,mBAAmB,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC;IAClE,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;CACnB;AA0MD,wBAAgB,YAAY,CAC1B,IAAI,CAAC,EAAE,MAAM,EACb,WAAW,GAAE,MAAM,CAAC,UAAwB,EAC5C,GAAG,GAAE,MAAsB,GAC1B,SAAS,CAuEX;AAyFD,wBAAgB,cAAc,CAC5B,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC9B,KAAK,EAAE,oBAAoB,EAC3B,KAAK,EAAE,SAAS,GACf,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAqBzB;AAED,wBAAgB,eAAe,CAC7B,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC7B,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAsBzB;AAED,wBAAgB,cAAc,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,MAAM,CAiBrE;AAkCD,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAQ5F;AAED,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAK3E;AAMD,wBAAgB,oBAAoB,CAClC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC9B,KAAK,EAAE,SAAS,GACf,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAqBzB;AAED,wBAAgB,qBAAqB,CACnC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC7B,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAuBzB;AAED,wBAAgB,oBAAoB,CAClC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC7B,MAAM,CAWR;AA0CD,wBAAgB,wBAAwB,CACtC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC9B,KAAK,EAAE,SAAS,GACf,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAqBzB;AAED,wBAAgB,yBAAyB,CACvC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC7B,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAuBzB;AAED,wBAAgB,wBAAwB,CACtC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC7B,MAAM,CAWR;AAoBD,wBAAgB,2BAA2B,CACzC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC9B,KAAK,EAAE,SAAS,GACf,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAqBzB;AAED,wBAAgB,4BAA4B,CAC1C,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC7B,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAuBzB;AAED,wBAAgB,2BAA2B,CACzC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC7B,MAAM,CAWR;AAyBD,wBAAgB,uBAAuB,CACrC,KAAK,EAAE,OAAO,EACd,KAAK,EAAE,SAAS,GACf,OAAO,EAAE,CAWX;AAED,wBAAgB,wBAAwB,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,EAAE,CAKlE;AAED,wBAAgB,uBAAuB,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAI9D;AASD,wBAAgB,uBAAuB,CACrC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC7B,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAazB;AAED,wBAAgB,wBAAwB,CACtC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC7B,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAczB;AAED,wBAAgB,wBAAwB,CACtC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC7B,MAAM,CAIR;AA+ZD,wBAAgB,uBAAuB,CACrC,OAAO,GAAE;IACP,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,WAAW,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;IAChC,QAAQ,CAAC,EAAE,IAAI,CAAC,eAAe,EAAE,QAAQ,GAAG,cAAc,CAAC,GAAG,IAAI,CAAC;IACnE,mBAAmB,CAAC,EAAE,OAAO,CAAC;CAC1B,GACL,IAAI,CAAC,eAAe,EAAE,QAAQ,GAAG,cAAc,CAAC,CA8BlD;AA+SD,MAAM,WAAW,iBAAiB;IAChC,KAAK,EAAE,mBAAmB,CAAC;IAC3B,UAAU,EAAE,MAAM,CAAC;CACpB;AA0MD,wBAAgB,2BAA2B,CACzC,QAAQ,EAAE,OAAO,EACjB,KAAK,EAAE,SAAS,GACf,iBAAiB,EAAE,CAErB;AAgUD,MAAM,WAAW,4BAA4B;IAC3C,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,qFAAqF;IACrF,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,sEAAsE;IACtE,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,SAAS,gBAAgB,EAAE,CAAC;IACpC,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,aAAa;IAC5B,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,SAAS,EAAE,IAAI,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,yBAAyB,CAAC;IACpC,MAAM,EAAE,gBAAgB,EAAE,CAAC;IAC3B,MAAM,EAAE,MAAM,CAAC;IACf,gBAAgB,EAAE,MAAM,EAAE,CAAC;IAC3B,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,QAAQ,EAAE,MAAM,EAAE,CAAC;CACpB;AAED,wBAAsB,qBAAqB,CACzC,OAAO,EAAE,4BAA4B,GACpC,OAAO,CAAC,aAAa,CAAC,CAiJxB;AA6LD,wBAAgB,uBAAuB,CAAC,MAAM,EAAE,eAAe,GAAG,MAAM,CAKvE;AAED,wBAAgB,iCAAiC,CAC/C,MAAM,EAAE,MAAM,EACd,KAAK,EAAE,MAAM,GACZ,MAAM,CAKR;AAywBD,wBAAsB,MAAM,CAC1B,IAAI,GAAE,SAAS,MAAM,EAA0B,GAC9C,OAAO,CAAC,IAAI,CAAC,CAqJf"}
+{"version":3,"file":"cli.d.ts","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":";AAyBA,OAAO,EAwBL,KAAK,yBAAyB,EAC/B,MAAM,eAAe,CAAC;AACvB,OAAO,EACL,KAAK,oBAAoB,EAE1B,MAAM,cAAc,CAAC;AAgCtB,eAAO,MAAM,oBAAoB,sBAAsB,CAAC;AACxD,eAAO,MAAM,sBAAsB,2BAA2B,CAAC;AAC/D,eAAO,MAAM,4BAA4B,uBAAuB,CAAC;AACjE,QAAA,MAAM,sBAAsB,kGAA4B,CAAC;AACzD,MAAM,MAAM,mBAAmB,GAAG,CAAC,OAAO,sBAAsB,CAAC,CAAC,MAAM,CAAC,CAAC;AAC1E,MAAM,MAAM,gBAAgB,GACxB,mBAAmB,GACnB,SAAS,GACT,QAAQ,GACR,QAAQ,CAAC;AAiCb,MAAM,WAAW,SAAS;IACxB,IAAI,EAAE,MAAM,CAAC;IACb,aAAa,EAAE,MAAM,CAAC;IACtB,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,CAAC;IAChB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,uBAAuB,EAAE,MAAM,CAAC;IAChC,qBAAqB,EAAE,MAAM,CAAC;IAC9B,oBAAoB,EAAE,MAAM,CAAC;IAC7B,sBAAsB,EAAE,MAAM,CAAC;IAC/B,6BAA6B,EAAE,MAAM,CAAC;IACtC,cAAc,EAAE,MAAM,CAAC;IACvB,cAAc,EAAE,MAAM,CAAC;IACvB,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;IACd,UAAU,EAAE,MAAM,CAAC;IACnB,eAAe,EAAE,MAAM,CAAC;IACxB,kBAAkB,EAAE,MAAM,CAAC;IAC3B,cAAc,EAAE,MAAM,CAAC;IACvB,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;IAClB,cAAc,EAAE,MAAM,CAAC;IACvB,cAAc,EAAE,MAAM,CAAC;IACvB,cAAc,EAAE,MAAM,CAAC;IACvB,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,eAAe;IAC9B,OAAO,EAAE,CAAC,CAAC;IACX,MAAM,EAAE,MAAM,CAAC;IACf,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,mBAAmB,EAAE,CAAC;IAC9B,gBAAgB,CAAC,EAAE,OAAO,CAAC,MAAM,CAAC,mBAAmB,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC;IAClE,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;CACnB;AA2MD,wBAAgB,YAAY,CAC1B,IAAI,CAAC,EAAE,MAAM,EACb,WAAW,GAAE,MAAM,CAAC,UAAwB,EAC5C,GAAG,GAAE,MAAsB,GAC1B,SAAS,CAuEX;AA2FD,wBAAgB,cAAc,CAC5B,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC9B,KAAK,EAAE,oBAAoB,EAC3B,KAAK,EAAE,SAAS,GACf,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAqBzB;AAED,wBAAgB,eAAe,CAC7B,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC7B,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAsBzB;AAED,wBAAgB,cAAc,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,MAAM,CAiBrE;AAkCD,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAQ5F;AAED,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAK3E;AAMD,wBAAgB,oBAAoB,CAClC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC9B,KAAK,EAAE,SAAS,GACf,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAqBzB;AAED,wBAAgB,qBAAqB,CACnC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC7B,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAuBzB;AAED,wBAAgB,oBAAoB,CAClC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC7B,MAAM,CAWR;AA0CD,wBAAgB,wBAAwB,CACtC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC9B,KAAK,EAAE,SAAS,GACf,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAqBzB;AAED,wBAAgB,yBAAyB,CACvC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC7B,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAuBzB;AAED,wBAAgB,wBAAwB,CACtC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC7B,MAAM,CAWR;AAoBD,wBAAgB,2BAA2B,CACzC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC9B,KAAK,EAAE,SAAS,GACf,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAqBzB;AAED,wBAAgB,4BAA4B,CAC1C,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC7B,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAuBzB;AAED,wBAAgB,2BAA2B,CACzC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC7B,MAAM,CAWR;AAyBD,wBAAgB,uBAAuB,CACrC,KAAK,EAAE,OAAO,EACd,KAAK,EAAE,SAAS,GACf,OAAO,EAAE,CAWX;AAED,wBAAgB,wBAAwB,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,EAAE,CAKlE;AAED,wBAAgB,uBAAuB,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAI9D;AASD,wBAAgB,uBAAuB,CACrC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC7B,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAazB;AAED,wBAAgB,wBAAwB,CACtC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC7B,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAczB;AAED,wBAAgB,wBAAwB,CACtC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC7B,MAAM,CAIR;AA+ZD,wBAAgB,uBAAuB,CACrC,OAAO,GAAE;IACP,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,WAAW,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;IAChC,QAAQ,CAAC,EAAE,IAAI,CAAC,eAAe,EAAE,QAAQ,GAAG,cAAc,CAAC,GAAG,IAAI,CAAC;IACnE,mBAAmB,CAAC,EAAE,OAAO,CAAC;CAC1B,GACL,IAAI,CAAC,eAAe,EAAE,QAAQ,GAAG,cAAc,CAAC,CA8BlD;AA+SD,MAAM,WAAW,iBAAiB;IAChC,KAAK,EAAE,mBAAmB,CAAC;IAC3B,UAAU,EAAE,MAAM,CAAC;CACpB;AA0MD,wBAAgB,2BAA2B,CACzC,QAAQ,EAAE,OAAO,EACjB,KAAK,EAAE,SAAS,GACf,iBAAiB,EAAE,CAErB;AAwUD,MAAM,WAAW,4BAA4B;IAC3C,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,qFAAqF;IACrF,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,sEAAsE;IACtE,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,SAAS,gBAAgB,EAAE,CAAC;IACpC,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,aAAa;IAC5B,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,SAAS,EAAE,IAAI,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,yBAAyB,CAAC;IACpC,MAAM,EAAE,gBAAgB,EAAE,CAAC;IAC3B,MAAM,EAAE,MAAM,CAAC;IACf,gBAAgB,EAAE,MAAM,EAAE,CAAC;IAC3B,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,QAAQ,EAAE,MAAM,EAAE,CAAC;CACpB;AAED,wBAAsB,qBAAqB,CACzC,OAAO,EAAE,4BAA4B,GACpC,OAAO,CAAC,aAAa,CAAC,CAmJxB;AA6LD,wBAAgB,uBAAuB,CAAC,MAAM,EAAE,eAAe,GAAG,MAAM,CAKvE;AAED,wBAAgB,iCAAiC,CAC/C,MAAM,EAAE,MAAM,EACd,KAAK,EAAE,MAAM,GACZ,MAAM,CAKR;AA0xBD,wBAAsB,MAAM,CAC1B,IAAI,GAAE,SAAS,MAAM,EAA0B,GAC9C,OAAO,CAAC,IAAI,CAAC,CAgKf"}

package/dist/cli.js

@@ -1,4 +1,7 @@
 #!/usr/bin/env node
+import { runShareCommand } from "./share.js";
+import { codexApprovalDetail, inspectCodexHookApproval } from "./codex-hook-approval.js";
+import { claudeOnlyCommand, disableDevinCli, runDevinCliHook } from "./devin-cli.js";
 import { access, chmod, copyFile, mkdir, open, readFile, readdir, rename, rm, stat, writeFile, } from "node:fs/promises";
 import { constants as fsConstants, realpathSync } from "node:fs";
 import { spawn } from "node:child_process";
@@ -83,6 +86,7 @@ Usage:
 
 Commands:
   connect      Configure Lore and install native agent integrations
+  share        Get a private workspace link to a learning, session, or delivery
   ask          Query shared knowledge and prior session context
   remember     Save a durable fact, convention, correction, or decision
   guard        Control Context Guard (off, assist, enforce)
@@ -249,9 +253,11 @@ function hookCommand(agent, paths, event) {
     const loreHome = `LORE_HOME=${shellQuote(paths.home)}`;
     const hookEvent = event === undefined ? "" : ` LORE_HOOK_EVENT=${shellQuote(event)}`;
     if (IS_STANDALONE_BINARY) {
-        return `env -u BUN_OPTIONS -u BUN_BE_BUN ${loreHome}${hookEvent} ${shellQuote(process.execPath)} hook --agent ${agent} ${LORE_OWNER_ARGUMENT}`;
+        const command = `env -u BUN_OPTIONS -u BUN_BE_BUN ${loreHome}${hookEvent} ${shellQuote(process.execPath)} hook --agent ${agent} ${LORE_OWNER_ARGUMENT}`;
+        return agent === "claude" ? claudeOnlyCommand(command) : command;
     }
-    return `env ${loreHome}${hookEvent} ${shellQuote(process.execPath)} ${shellQuote(paths.runtime)} --agent ${agent} ${LORE_OWNER_ARGUMENT}`;
+    const command = `env ${loreHome}${hookEvent} ${shellQuote(process.execPath)} ${shellQuote(paths.runtime)} --agent ${agent} ${LORE_OWNER_ARGUMENT}`;
+    return agent === "claude" ? claudeOnlyCommand(command) : command;
 }
 function isLoreHook(value) {
     if (!isObject(value) || value.type !== "command") {
@@ -1440,6 +1446,8 @@ async function installRuntime(paths) {
             rm(paths.runtimeSignedSnapshot, { force: true }),
             rm(paths.runtimeCanonicalJson, { force: true }),
             rm(resolve(dirname(paths.runtime), "guard-evaluation.js"), { force: true }),
+            rm(resolve(dirname(paths.runtime), "image-bytes.js"), { force: true }),
+            rm(resolve(dirname(paths.runtime), "image-capture.js"), { force: true }),
             rm(paths.runtimeContextFallback, { force: true }),
             rm(paths.runtimeInvocationHealthWriter, { force: true }),
             rm(paths.runtimeVersion, { force: true }),
@@ -1450,6 +1458,8 @@ async function installRuntime(paths) {
     const sourceDirectory = dirname(fileURLToPath(import.meta.url));
     const canonicalJsonModule = fileURLToPath(import.meta.resolve("@lore-co/core/canonical-json"));
     const guardEvaluation = await readFile(fileURLToPath(import.meta.resolve("@lore-co/core/guard-evaluation")), "utf8");
+    const imageBytes = await readFile(fileURLToPath(import.meta.resolve("@lore-co/core/image-bytes")), "utf8");
+    const imageCapture = (await readFile(resolve(sourceDirectory, "image-capture.js"), "utf8")).replaceAll("@lore-co/core/image-bytes", "./image-bytes.js");
     const [runtime, repository, reliabilityStore, signedSnapshot, canonicalJson, contextFallback, invocationHealthWriter,] = await Promise.all([
         readFile(resolve(sourceDirectory, "runtime.js"), "utf8"),
         readFile(resolve(sourceDirectory, "repository.js"), "utf8"),
@@ -1467,6 +1477,8 @@ async function installRuntime(paths) {
     const runtimeFiles = {
         "lore-hook.mjs": runtime.replaceAll("@lore-co/core/guard-evaluation", "./guard-evaluation.js"),
         "guard-evaluation.js": guardEvaluation,
+        "image-bytes.js": imageBytes,
+        "image-capture.js": imageCapture,
         "repository.js": repository,
         "reliability-store.js": reliabilityStore,
         "signed-snapshot.js": standaloneSignedSnapshot,
@@ -1487,6 +1499,8 @@ async function installRuntime(paths) {
     };
     await Promise.all([
         atomicWrite(resolve(dirname(paths.runtime), "guard-evaluation.js"), guardEvaluation, 0o600),
+        atomicWrite(resolve(dirname(paths.runtime), "image-bytes.js"), imageBytes, 0o600),
+        atomicWrite(resolve(dirname(paths.runtime), "image-capture.js"), imageCapture, 0o600),
         atomicWrite(paths.runtimeRepository, repository, 0o600),
         atomicWrite(paths.runtimeReliabilityStore, reliabilityStore, 0o600),
         atomicWrite(paths.runtimeSignedSnapshot, standaloneSignedSnapshot, 0o600),
@@ -1738,7 +1752,9 @@ export async function connectWithCredential(options) {
         config: paths.config,
         changedHookFiles,
         backups,
-        warnings: requestedExpansion.warnings,
+        warnings: [...requestedExpansion.warnings, ...(agents.includes("codex")
+                ? ["Codex requires hook approval. Open /hooks in Codex and review any new or changed Lore hooks, then start a fresh session. Run lore doctor to verify approval and the first invocation."]
+                : [])],
         ...(recoveryNotice ? { recoveryNotice } : {}),
     };
 }
@@ -1879,7 +1895,7 @@ async function connectCommand(args) {
         agents: parsed.agents,
         ...(parsed.timeoutMs === undefined ? {} : { timeoutMs: parsed.timeoutMs }),
     });
-    writeResult(result, parsed.json, `connected: ${result.agents.join(", ")}\napi_url: ${result.apiUrl}\nconfig: ${result.config}\n${result.recoveryNotice ? `${result.recoveryNotice}\n` : ""}${result.warnings.map((warning) => `warning: ${warning}\n`).join("")}`);
+    writeResult(result, parsed.json, `access authorized; integrations installed: ${result.agents.join(", ")}\napi_url: ${result.apiUrl}\nconfig: ${result.config}\nRestart your agent and complete a turn, then run lore doctor to verify recording.\n${result.recoveryNotice ? `${result.recoveryNotice}\n` : ""}${result.warnings.map((warning) => `warning: ${warning}\n`).join("")}`);
 }
 async function queueCount(paths) {
     try {
@@ -1963,6 +1979,8 @@ async function inspectRuntimeInstallation(required, paths) {
     const runtimeFiles = {
         "lore-hook.mjs": paths.runtime,
         "guard-evaluation.js": resolve(dirname(paths.runtime), "guard-evaluation.js"),
+        "image-bytes.js": resolve(dirname(paths.runtime), "image-bytes.js"),
+        "image-capture.js": resolve(dirname(paths.runtime), "image-capture.js"),
         "repository.js": paths.runtimeRepository,
         "reliability-store.js": paths.runtimeReliabilityStore,
         "signed-snapshot.js": paths.runtimeSignedSnapshot,
@@ -2201,6 +2219,7 @@ async function disconnectCommand(args) {
     }
     const paths = getLorePaths();
     await disableRecovery(paths.home);
+    await disableDevinCli(paths.home);
     const config = await readConnectorConfig(paths);
     const now = new Date();
     const changedHookFiles = [];
@@ -2243,6 +2262,8 @@ async function disconnectCommand(args) {
         rm(paths.runtimeCanonicalJson, { force: true }),
         rm(paths.runtimeContextFallback, { force: true }),
         rm(resolve(dirname(paths.runtime), "guard-evaluation.js"), { force: true }),
+        rm(resolve(dirname(paths.runtime), "image-bytes.js"), { force: true }),
+        rm(resolve(dirname(paths.runtime), "image-capture.js"), { force: true }),
         rm(paths.runtimeInvocationHealthWriter, { force: true }),
         rm(paths.runtimeVersion, { force: true }),
         rm(paths.runtimePackage, { force: true }),
@@ -2437,6 +2458,18 @@ async function doctorCommand(args) {
                                 ? "installed, but no invocation has been observed yet"
                                 : "invocation health is unavailable",
         });
+        if (agent.agent === "codex" && agent.executable) {
+            const approval = await inspectCodexHookApproval({
+                home: paths.home,
+                cwd: process.cwd(),
+                configPaths: agent.configFiles ?? [agent.configFile],
+            });
+            checks.push({
+                name: "codex-hook-approval",
+                status: approval === "approved" ? "ok" : "warning",
+                detail: codexApprovalDetail(approval),
+            });
+        }
     }
     for (const surface of status.externalSurfaces) {
         checks.push({
@@ -2522,6 +2555,9 @@ export async function runCli(args = process.argv.slice(2)) {
             }
             await connectCommand(commandArgs);
             return;
+        case "share":
+            await runShareCommand(commandArgs, await readConnectorConfig(getLorePaths()));
+            return;
         case "ask":
             await runAskCommand(commandArgs, await readConnectorConfig(getLorePaths()));
             return;
@@ -2602,6 +2638,16 @@ export async function runCli(args = process.argv.slice(2)) {
         case "disconnect":
             await disconnectCommand(commandArgs);
             return;
+        case "devin-cli-hook":
+            try {
+                const result = await runDevinCliHook(getLorePaths(process.env.LORE_HOME).home);
+                if (result)
+                    process.stdout.write(`${JSON.stringify(result)}\n`);
+            }
+            catch {
+                process.stderr.write("Lore context is unavailable for this Devin turn. Session export capture will continue.\n");
+            }
+            return;
         case "hook":
             await runHook(commandArgs);
             return;