@lore-co/cli 0.1.3 → 0.1.4

package/README.md

@@ -1,10 +1,11 @@
 # Lore CLI
 
-The Lore connector installs native Codex and Claude Code lifecycle hooks. For
-each supported prompt, Lore attempts to retrieve relevant engineering context.
-A first prompt is observed on its own; later prompts are paired with the
-previous assistant response when valid pending state is available. Hook and
-network failures fail open so they do not block the agent.
+The Lore connector installs native Codex and Claude Code lifecycle hooks and
+the Lore OpenCode plugin. For each supported prompt, Lore attempts to retrieve
+relevant engineering context. A first prompt is observed on its own; later
+prompts are paired with the previous assistant response when valid pending
+state is available. Integration and network failures fail open so they do not
+block the agent.
 
 ## Install and connect
 
@@ -15,21 +16,32 @@ lore connect \
   --url https://lore.example.com \
   --token "$LORE_WORKSPACE_TOKEN" \
   --agent claude \
-  --agent codex
+  --agent codex \
+  --agent opencode
 
 lore doctor
 ```
 
 The package requires Node.js 22 or newer and installs the `lore` command.
 
-`connect` auto-detects `codex` and `claude`. Use `--agent codex` or
-`--agent claude` for an explicit headless install. Configuration is stored in
-`~/.lore/config.json` with mode `0600`.
+`connect` auto-detects the `codex`, `claude`, and `opencode` executables and an
+existing `~/.config/opencode/opencode.json`. Repeat `--agent claude`,
+`--agent codex`, or `--agent opencode` for an explicit headless install.
+Configuration is stored in `~/.lore/config.json` with mode `0600`.
+Before writing that file or any agent integration, `connect` calls the
+authenticated workspace identity endpoint and validates the strict response
+and server version. Revoked credentials, unreachable servers, timeouts, and
+incompatible servers leave local configuration untouched. Either
+`LORE_WORKSPACE_TOKEN` or the legacy `LORE_TOKEN` can provide the token; if
+both are set, they must match.
+For a review-first rollout in a personal vault or component catalog, follow the
+[OpenCode pilot runbook](../../docs/opencode-pilot.md).
 
 The command merges Lore-owned entries into `~/.codex/hooks.json` and
-`~/.claude/settings.json`. Existing settings and hooks are retained, changed
-files receive timestamped backups, and rerunning `connect` does not duplicate
-entries.
+`~/.claude/settings.json`, and merges `@lore-co/opencode` into the
+`plugin` array in `~/.config/opencode/opencode.json`. Existing settings, hooks,
+keys, and plugins are retained. Changed agent config files receive timestamped
+backups, and rerunning `connect` does not duplicate entries or backups.
 
 ## Inspect or remove
 
@@ -39,14 +51,43 @@ lore doctor
 lore disconnect
 ```
 
-The three commands above also support `--json`. `disconnect` removes only hook handlers
-marked as Lore-owned, then deletes Lore's credential, legacy hook runtime,
-pending state, and retry queue. It does not remove the installed `lore` binary
-or restore a whole backup over newer agent settings.
+The three commands above also support `--json`. `doctor` checks public
+`/health/ready` separately from authenticated workspace identity so unreachable,
+unready, and unauthorized states remain distinct. `disconnect` removes only hook
+handlers marked as Lore-owned and Lore's OpenCode plugin entry, then deletes
+Lore's credential, legacy hook runtime, pending state, and retry queue. It does
+not remove the installed `lore` binary or restore a whole backup over newer
+agent settings.
+
+## One-command self-hosting
+
+The published CLI embeds the canonical production Compose asset, so no
+repository clone is needed:
+
+```sh
+lore self-host up
+lore self-host status --json
+lore self-host reset-owner-password --email owner@example.com
+lore self-host down
+```
+
+`up` creates `~/.lore/self-host` with mode `0700` and stores its Compose,
+environment, and state files with mode `0600`. It generates independent
+PostgreSQL, workspace, and owner-bootstrap secrets, starts semver-pinned images,
+waits for `/health/ready`, and prints the setup URL and owner bootstrap token.
+The bootstrap token is printed only by the first successful `up`; retries reuse
+all state and secrets. Use `--headless`, `--state-dir`, `--image-tag`,
+`--api-port`, `--dashboard-port`, `--origin`, `--organization`, and `--name`
+for automated deployments. Every command has subcommand-specific `--help`, and
+`up`, `down`, and `status` support `--json`.
+
+`down` preserves the PostgreSQL volume. Destructive removal requires both
+`--volumes --yes`. Password reset links are printed once or can be written to a
+new mode-`0600` file with `--output`.
 
 ## Runtime behavior
 
-The hook handler:
+The Claude/Codex command-hook handler:
 
 - reads native hook JSON from standard input;
 - observes and enriches the first prompt in a new session;
@@ -58,12 +99,19 @@ The hook handler:
 
 First prompts use `POST /v1/observations` and audited
 `POST /v1/context/deliveries`. Paired turns use `POST /v1/turns` with a
-workspace bearer token and an `Idempotency-Key` header. Teachings default to
-workspace scope so connected agents can share them; the inferred repository
-still guides task retrieval. A correction made in one native repository is
-therefore workspace-global by default; only an integration that supplies a
-narrower learning scope changes that behavior. Observations, paired turns, and
-deliveries are visible through Lore activity.
+workspace bearer token and an `Idempotency-Key` header. Automatic teachings
+default to repository scope and follow the workspace learning policy. In
+`proposal_only` mode, every automatic capture remains proposed and cannot be
+retrieved or injected until dashboard review activates it. Rejected,
+suppressed, superseded, and deleted learnings are also excluded. Dirty files
+and the current directory remain task relevance evidence and do not narrow
+every learning. A reconciled correction inherits its target's scope. Only an
+explicit correction with clear team-, company-, organization-, or
+all-repositories evidence may become organization-only and apply across
+repositories. Native retrieval still requires a strong lexical, structural,
+symbol, or semantic match. Observations, paired turns, OpenCode plugin events,
+and deliveries are visible through Lore activity. OpenCode uses its plugin
+lifecycle and never runs through the Claude/Codex command-hook parser.
 
 ## External hosts
 
@@ -163,7 +211,7 @@ same-repository, non-draft pull requests bearing the corresponding
 `lore:codex-review` or `lore:devin-review` label.
 
 Generated jobs require a published standalone binary release and default to
-`treadiehq/lore` at `v0.1.3`. Set `LORE_CLI_REPOSITORY` to the publicly
+`treadiehq/lore` at `v0.1.4`. Set `LORE_CLI_REPOSITORY` to the publicly
 readable `owner/repository` and `LORE_CLI_VERSION` to an existing release tag
 when using another release source.
 

package/dist/cli.d.ts

@@ -1,5 +1,8 @@
 #!/usr/bin/env node
-import { type AgentName } from "./runtime.js";
+import { type CommandHookAgentName } from "./runtime.js";
+export declare const LORE_OPENCODE_PLUGIN = "@lore-co/opencode";
+declare const CONFIGURED_AGENT_NAMES: readonly ["claude", "codex", "opencode"];
+export type ConfiguredAgentName = (typeof CONFIGURED_AGENT_NAMES)[number];
 export interface LorePaths {
     home: string;
     loreDirectory: string;
@@ -11,19 +14,24 @@ export interface LorePaths {
     queue: string;
     codexHooks: string;
     claudeSettings: string;
+    openCodeConfig: string;
 }
 export interface ConnectorConfig {
     version: 1;
     apiUrl: string;
     dashboardUrl?: string;
     token: string;
-    agents: AgentName[];
+    agents: ConfiguredAgentName[];
     connectedAt: string;
     timeoutMs: number;
 }
 export declare function getLorePaths(home?: string): LorePaths;
-export declare function mergeLoreHooks(input: Record<string, unknown>, agent: AgentName, paths: LorePaths): Record<string, unknown>;
+export declare function mergeLoreHooks(input: Record<string, unknown>, agent: CommandHookAgentName, paths: LorePaths): Record<string, unknown>;
 export declare function removeLoreHooks(input: Record<string, unknown>): Record<string, unknown>;
 export declare function countLoreHooks(input: Record<string, unknown>): number;
+export declare function mergeLoreOpenCodePlugin(input: Record<string, unknown>): Record<string, unknown>;
+export declare function removeLoreOpenCodePlugin(input: Record<string, unknown>): Record<string, unknown>;
+export declare function countLoreOpenCodePlugins(input: Record<string, unknown>): number;
 export declare function runCli(args?: readonly string[]): Promise<void>;
+export {};
 //# sourceMappingURL=cli.d.ts.map

package/dist/cli.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"cli.d.ts","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":";AAmBA,OAAO,EACL,KAAK,SAAS,EAEf,MAAM,cAAc,CAAC;AAYtB,MAAM,WAAW,SAAS;IACxB,IAAI,EAAE,MAAM,CAAC;IACb,aAAa,EAAE,MAAM,CAAC;IACtB,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,CAAC;IAChB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,cAAc,EAAE,MAAM,CAAC;IACvB,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;IACd,UAAU,EAAE,MAAM,CAAC;IACnB,cAAc,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,WAAW,eAAe;IAC9B,OAAO,EAAE,CAAC,CAAC;IACX,MAAM,EAAE,MAAM,CAAC;IACf,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,SAAS,EAAE,CAAC;IACpB,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;CACnB;AA+HD,wBAAgB,YAAY,CAAC,IAAI,CAAC,EAAE,MAAM,GAAG,SAAS,CAerD;AA2DD,wBAAgB,cAAc,CAC5B,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC9B,KAAK,EAAE,SAAS,EAChB,KAAK,EAAE,SAAS,GACf,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAiBzB;AAED,wBAAgB,eAAe,CAC7B,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC7B,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAsBzB;AAED,wBAAgB,cAAc,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,MAAM,CAiBrE;AA4nBD,wBAAsB,MAAM,CAC1B,IAAI,GAAE,SAAS,MAAM,EAA0B,GAC9C,OAAO,CAAC,IAAI,CAAC,CAoDf"}
+{"version":3,"file":"cli.d.ts","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":";AAuBA,OAAO,EACL,KAAK,oBAAoB,EAE1B,MAAM,cAAc,CAAC;AAUtB,eAAO,MAAM,oBAAoB,sBAAsB,CAAC;AACxD,QAAA,MAAM,sBAAsB,0CAA2C,CAAC;AACxE,MAAM,MAAM,mBAAmB,GAAG,CAAC,OAAO,sBAAsB,CAAC,CAAC,MAAM,CAAC,CAAC;AAI1E,MAAM,WAAW,SAAS;IACxB,IAAI,EAAE,MAAM,CAAC;IACb,aAAa,EAAE,MAAM,CAAC;IACtB,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,CAAC;IAChB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,cAAc,EAAE,MAAM,CAAC;IACvB,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;IACd,UAAU,EAAE,MAAM,CAAC;IACnB,cAAc,EAAE,MAAM,CAAC;IACvB,cAAc,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,WAAW,eAAe;IAC9B,OAAO,EAAE,CAAC,CAAC;IACX,MAAM,EAAE,MAAM,CAAC;IACf,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,mBAAmB,EAAE,CAAC;IAC9B,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;CACnB;AAmID,wBAAgB,YAAY,CAAC,IAAI,CAAC,EAAE,MAAM,GAAG,SAAS,CAqBrD;AAuED,wBAAgB,cAAc,CAC5B,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC9B,KAAK,EAAE,oBAAoB,EAC3B,KAAK,EAAE,SAAS,GACf,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAiBzB;AAED,wBAAgB,eAAe,CAC7B,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC7B,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAsBzB;AAED,wBAAgB,cAAc,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,MAAM,CAiBrE;AASD,wBAAgB,uBAAuB,CACrC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC7B,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAazB;AAED,wBAAgB,wBAAwB,CACtC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC7B,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAczB;AAED,wBAAgB,wBAAwB,CACtC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC7B,MAAM,CAIR;AAu1BD,wBAAsB,MAAM,CAC1B,IAAI,GAAE,SAAS,MAAM,EAA0B,GAC9C,OAAO,CAAC,IAAI,CAAC,CAuDf"}