@lore-co/cli 0.1.3 → 0.1.8

package/README.md

@@ -1,10 +1,11 @@
 # Lore CLI
 
-The Lore connector installs native Codex and Claude Code lifecycle hooks. For
-each supported prompt, Lore attempts to retrieve relevant engineering context.
-A first prompt is observed on its own; later prompts are paired with the
-previous assistant response when valid pending state is available. Hook and
-network failures fail open so they do not block the agent.
+The Lore connector installs native Codex and Claude Code lifecycle hooks and
+the Lore OpenCode plugin. For each supported prompt, Lore attempts to retrieve
+relevant engineering context. A first prompt is observed on its own; later
+prompts are paired with the previous assistant response when valid pending
+state is available. Integration and network failures fail open so they do not
+block the agent.
 
 ## Install and connect
 
@@ -15,21 +16,46 @@ lore connect \
   --url https://lore.example.com \
   --token "$LORE_WORKSPACE_TOKEN" \
   --agent claude \
-  --agent codex
+  --agent codex \
+  --agent opencode
 
 lore doctor
 ```
 
 The package requires Node.js 22 or newer and installs the `lore` command.
 
-`connect` auto-detects `codex` and `claude`. Use `--agent codex` or
-`--agent claude` for an explicit headless install. Configuration is stored in
-`~/.lore/config.json` with mode `0600`.
+`connect` auto-detects the `codex`, `claude`, and `opencode` executables and an
+existing `~/.config/opencode/opencode.json`. Repeat `--agent claude`,
+`--agent codex`, or `--agent opencode` for an explicit headless install.
+Configuration is stored in `~/.lore/config.json` with mode `0600`.
+Before writing that file or any agent integration, `connect` calls the
+authenticated workspace identity endpoint and validates the strict response
+and server version. Revoked credentials, unreachable servers, timeouts, and
+incompatible servers leave local configuration untouched. Either
+`LORE_WORKSPACE_TOKEN` or the legacy `LORE_TOKEN` can provide the token; if
+both are set, they must match.
+For a review-first rollout in a personal vault or component catalog, follow the
+[OpenCode pilot runbook](../../docs/opencode-pilot.md).
+
+## Update the standalone CLI
+
+```sh
+lore update
+lore update --version v0.1.8
+```
+
+`update` resolves the latest release to an exact tag, or uses the exact
+v-prefixed semantic version passed with `--version`. It verifies the selected
+binary against that release's `SHA256SUMS` and checks the staged binary's
+version before replacing the current target. `LORE_REPO` selects another
+GitHub repository and `LORE_RELEASE_BASE_URL` selects an HTTPS release mirror;
+`LORE_BIN_DIR` overrides the standalone install directory.
 
 The command merges Lore-owned entries into `~/.codex/hooks.json` and
-`~/.claude/settings.json`. Existing settings and hooks are retained, changed
-files receive timestamped backups, and rerunning `connect` does not duplicate
-entries.
+`~/.claude/settings.json`, and merges `@lore-co/opencode` into the
+`plugin` array in `~/.config/opencode/opencode.json`. Existing settings, hooks,
+keys, and plugins are retained. Changed agent config files receive timestamped
+backups, and rerunning `connect` does not duplicate entries or backups.
 
 ## Inspect or remove
 
@@ -39,14 +65,44 @@ lore doctor
 lore disconnect
 ```
 
-The three commands above also support `--json`. `disconnect` removes only hook handlers
-marked as Lore-owned, then deletes Lore's credential, legacy hook runtime,
-pending state, and retry queue. It does not remove the installed `lore` binary
-or restore a whole backup over newer agent settings.
+The three commands above also support `--json`. `doctor` checks public
+`/health/ready` separately from authenticated workspace identity so unreachable,
+unready, and unauthorized states remain distinct. `disconnect` removes only hook
+handlers marked as Lore-owned and Lore's OpenCode plugin entry, then deletes
+Lore's credential, legacy hook runtime, pending state, and retry queue. It does
+not remove the installed `lore` binary or restore a whole backup over newer
+agent settings.
+
+## One-command self-hosting
+
+The published CLI embeds the canonical production Compose asset, so no
+repository clone is needed:
+
+```sh
+lore self-host up
+lore self-host status --json
+lore self-host down
+```
+
+`up` creates `~/.lore/self-host` with mode `0700` and stores its Compose,
+environment, and state files with mode `0600`. It generates a PostgreSQL secret,
+starts semver-pinned images, waits for `/health/ready`, and prints the signup and
+login URLs. Sign up normally, then create connector tokens on **Connect**.
+Loopback deployments write magic links to the API container logs; public origins
+require `RESEND_API_KEY` and `AUTH_EMAIL_FROM`. Retries reuse all state and
+secrets. `--headless` additionally generates an environment-provisioned
+workspace token because no dashboard is available. Use `--state-dir`,
+`--image-tag`, `--api-port`, `--dashboard-port`, and `--origin` for dashboard
+deployments; `--organization` and `--name` configure headless workspaces. Every
+command has subcommand-specific `--help`, and `up`, `down`, and `status` support
+`--json`.
+
+`down` preserves the PostgreSQL volume. Destructive removal requires both
+`--volumes --yes`.
 
 ## Runtime behavior
 
-The hook handler:
+The Claude/Codex command-hook handler:
 
 - reads native hook JSON from standard input;
 - observes and enriches the first prompt in a new session;
@@ -58,12 +114,19 @@ The hook handler:
 
 First prompts use `POST /v1/observations` and audited
 `POST /v1/context/deliveries`. Paired turns use `POST /v1/turns` with a
-workspace bearer token and an `Idempotency-Key` header. Teachings default to
-workspace scope so connected agents can share them; the inferred repository
-still guides task retrieval. A correction made in one native repository is
-therefore workspace-global by default; only an integration that supplies a
-narrower learning scope changes that behavior. Observations, paired turns, and
-deliveries are visible through Lore activity.
+workspace bearer token and an `Idempotency-Key` header. Automatic teachings
+default to repository scope and follow the workspace learning policy. In
+`proposal_only` mode, every automatic capture remains proposed and cannot be
+retrieved or injected until dashboard review activates it. Rejected,
+suppressed, superseded, and deleted learnings are also excluded. Dirty files
+and the current directory remain task relevance evidence and do not narrow
+every learning. A reconciled correction inherits its target's scope. Only an
+explicit correction with clear team-, company-, organization-, or
+all-repositories evidence may become organization-only and apply across
+repositories. Native retrieval still requires a strong lexical, structural,
+symbol, or semantic match. Observations, paired turns, OpenCode plugin events,
+and deliveries are visible through Lore activity. OpenCode uses its plugin
+lifecycle and never runs through the Claude/Codex command-hook parser.
 
 ## External hosts
 
@@ -163,7 +226,7 @@ same-repository, non-draft pull requests bearing the corresponding
 `lore:codex-review` or `lore:devin-review` label.
 
 Generated jobs require a published standalone binary release and default to
-`treadiehq/lore` at `v0.1.3`. Set `LORE_CLI_REPOSITORY` to the publicly
+`treadiehq/lore` at `v0.1.8`. Set `LORE_CLI_REPOSITORY` to the publicly
 readable `owner/repository` and `LORE_CLI_VERSION` to an existing release tag
 when using another release source.
 

package/dist/cli.d.ts

@@ -1,5 +1,8 @@
 #!/usr/bin/env node
-import { type AgentName } from "./runtime.js";
+import { type CommandHookAgentName } from "./runtime.js";
+export declare const LORE_OPENCODE_PLUGIN = "@lore-co/opencode";
+declare const CONFIGURED_AGENT_NAMES: readonly ["claude", "codex", "opencode"];
+export type ConfiguredAgentName = (typeof CONFIGURED_AGENT_NAMES)[number];
 export interface LorePaths {
     home: string;
     loreDirectory: string;
@@ -11,19 +14,24 @@ export interface LorePaths {
     queue: string;
     codexHooks: string;
     claudeSettings: string;
+    openCodeConfig: string;
 }
 export interface ConnectorConfig {
     version: 1;
     apiUrl: string;
     dashboardUrl?: string;
     token: string;
-    agents: AgentName[];
+    agents: ConfiguredAgentName[];
     connectedAt: string;
     timeoutMs: number;
 }
 export declare function getLorePaths(home?: string): LorePaths;
-export declare function mergeLoreHooks(input: Record<string, unknown>, agent: AgentName, paths: LorePaths): Record<string, unknown>;
+export declare function mergeLoreHooks(input: Record<string, unknown>, agent: CommandHookAgentName, paths: LorePaths): Record<string, unknown>;
 export declare function removeLoreHooks(input: Record<string, unknown>): Record<string, unknown>;
 export declare function countLoreHooks(input: Record<string, unknown>): number;
+export declare function mergeLoreOpenCodePlugin(input: Record<string, unknown>): Record<string, unknown>;
+export declare function removeLoreOpenCodePlugin(input: Record<string, unknown>): Record<string, unknown>;
+export declare function countLoreOpenCodePlugins(input: Record<string, unknown>): number;
 export declare function runCli(args?: readonly string[]): Promise<void>;
+export {};
 //# sourceMappingURL=cli.d.ts.map

package/dist/cli.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"cli.d.ts","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":";AAmBA,OAAO,EACL,KAAK,SAAS,EAEf,MAAM,cAAc,CAAC;AAYtB,MAAM,WAAW,SAAS;IACxB,IAAI,EAAE,MAAM,CAAC;IACb,aAAa,EAAE,MAAM,CAAC;IACtB,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,CAAC;IAChB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,cAAc,EAAE,MAAM,CAAC;IACvB,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;IACd,UAAU,EAAE,MAAM,CAAC;IACnB,cAAc,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,WAAW,eAAe;IAC9B,OAAO,EAAE,CAAC,CAAC;IACX,MAAM,EAAE,MAAM,CAAC;IACf,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,SAAS,EAAE,CAAC;IACpB,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;CACnB;AA+HD,wBAAgB,YAAY,CAAC,IAAI,CAAC,EAAE,MAAM,GAAG,SAAS,CAerD;AA2DD,wBAAgB,cAAc,CAC5B,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC9B,KAAK,EAAE,SAAS,EAChB,KAAK,EAAE,SAAS,GACf,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAiBzB;AAED,wBAAgB,eAAe,CAC7B,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC7B,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAsBzB;AAED,wBAAgB,cAAc,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,MAAM,CAiBrE;AA4nBD,wBAAsB,MAAM,CAC1B,IAAI,GAAE,SAAS,MAAM,EAA0B,GAC9C,OAAO,CAAC,IAAI,CAAC,CAoDf"}
+{"version":3,"file":"cli.d.ts","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":";AAuBA,OAAO,EACL,KAAK,oBAAoB,EAE1B,MAAM,cAAc,CAAC;AAUtB,eAAO,MAAM,oBAAoB,sBAAsB,CAAC;AACxD,QAAA,MAAM,sBAAsB,0CAA2C,CAAC;AACxE,MAAM,MAAM,mBAAmB,GAAG,CAAC,OAAO,sBAAsB,CAAC,CAAC,MAAM,CAAC,CAAC;AAI1E,MAAM,WAAW,SAAS;IACxB,IAAI,EAAE,MAAM,CAAC;IACb,aAAa,EAAE,MAAM,CAAC;IACtB,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,CAAC;IAChB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,cAAc,EAAE,MAAM,CAAC;IACvB,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;IACd,UAAU,EAAE,MAAM,CAAC;IACnB,cAAc,EAAE,MAAM,CAAC;IACvB,cAAc,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,WAAW,eAAe;IAC9B,OAAO,EAAE,CAAC,CAAC;IACX,MAAM,EAAE,MAAM,CAAC;IACf,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,mBAAmB,EAAE,CAAC;IAC9B,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;CACnB;AAmID,wBAAgB,YAAY,CAAC,IAAI,CAAC,EAAE,MAAM,GAAG,SAAS,CAqBrD;AAuED,wBAAgB,cAAc,CAC5B,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC9B,KAAK,EAAE,oBAAoB,EAC3B,KAAK,EAAE,SAAS,GACf,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAiBzB;AAED,wBAAgB,eAAe,CAC7B,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC7B,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAsBzB;AAED,wBAAgB,cAAc,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,MAAM,CAiBrE;AASD,wBAAgB,uBAAuB,CACrC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC7B,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAazB;AAED,wBAAgB,wBAAwB,CACtC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC7B,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAczB;AAED,wBAAgB,wBAAwB,CACtC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC7B,MAAM,CAIR;AAu1BD,wBAAsB,MAAM,CAC1B,IAAI,GAAE,SAAS,MAAM,EAA0B,GAC9C,OAAO,CAAC,IAAI,CAAC,CAuDf"}