@lore-co/cli 0.2.14 → 0.2.15

package/README.md

@@ -13,6 +13,7 @@ do not block the agent.
 pnpm install --global @lore-co/cli
 
 lore connect \
+  --folder . \
   --login \
   --agent claude \
   --agent codex \
@@ -25,6 +26,10 @@ lore doctor
 
 The package requires Node.js 22 or newer and installs the `lore` command.
 
+In Connect, **This project** asks your agent to confirm the current folder. **Choose another project** offers a native folder picker, GitHub selection, and manual path entry. The CLI also supports `--current-project` (interactive confirmation), `--choose-folder` (a picker on this machine), and `--repository github.com/owner/repo` alongside a folder choice to verify its Git origin. Cancelling or choosing a mismatched checkout stops setup before recording. GitHub selection does not change workspace policy.
+
+Run setup from the project you want to record: `--folder .` includes that folder and its subfolders. Repeat `--folder <path>` for additional folders, or choose `--all-projects` explicitly. New connections stay paused without a capture choice; reconnecting without one preserves your existing rules. Existing exclusions remain in effect. Use `lore scope check <folder>` to verify. Learning repository scope controls where knowledge applies and is separate from capture scope.
+
 ### Windows
 
 Native Windows support is available in Lore 0.2.0 and newer.
@@ -34,7 +39,7 @@ The npm package uses the same commands as macOS and Linux:
 
 ```powershell
 npm.cmd install --global @lore-co/cli
-lore.cmd connect --login --agent claude --agent codex
+lore.cmd connect --login --agent claude --agent codex --folder .
 lore.cmd doctor
 ```
 
@@ -112,6 +117,7 @@ dashboard:
 
 ```sh
 lore connect \
+  --folder . \
   --token "your_workspace_token" \
   --agent claude
 ```
@@ -126,6 +132,7 @@ credential internal while connecting agents:
 
 ```sh
 lore self-host up --headless --connect --agent claude --agent codex
+lore connect --folder .
 ```
 
 Dashboard self-hosting uses `lore self-host up`, human signup, then:
@@ -172,6 +179,34 @@ excerpts. `--repo` and
 response. Requires a connected workspace (`lore connect`) and a server that
 exposes `POST /v1/ask`.
 
+## Use Lore with your agent
+
+Choose **lore** in your agent's skills to find shared knowledge or save what you
+learned. For example:
+
+- “Ask Lore what we decided about authentication.”
+- “Remember this session for acme/app.”
+- “Save only the design decisions in Lore.”
+
+When asked to remember, the skill saves confirmed decisions and their reasoning,
+checks existing learnings, and uses the current repository's connection. Saving
+requires write access and may need workspace review; it does not make a learning
+a Required rule.
+
+After updating the CLI, run `lore connect` and restart your agent. Setup replaces
+the previous `lore-remember` skill with `lore`, preserving customer-edited files.
+Claude Code also supports `/lore`; Codex supports `$lore`.
+
+The skill is installed in `~/.agents/skills/lore` for Codex, Cursor, Copilot and
+OpenCode, and in the configured Claude directory's `skills/lore`. Cowork and
+Copilot bundles include it too. Polytoken does not receive a skill installation.
+
+Installation paths follow the official [Codex](https://developers.openai.com/codex/skills),
+[Claude Code](https://code.claude.com/docs/en/skills),
+[Copilot](https://docs.github.com/en/copilot/concepts/agents/about-agent-skills),
+[Cursor](https://cursor.com/docs/skills), and [OpenCode](https://opencode.ai/docs/skills/)
+skill conventions.
+
 ## Save knowledge manually
 
 ```sh
@@ -188,7 +223,8 @@ workspace-wide; the current repository is not inferred. The connected workspace
 determines the organization.
 
 `--category` defaults to `other`; run `lore remember --help` for the supported
-categories. `--agent` identifies the source and defaults to `human`. The command
+categories. `--agent` identifies the source and defaults to `human`; `--session`
+preserves its actual session ID when known. The command
 prints the saved learning's ID, content, scope, category, and status, and reports
 an existing learning when the server deduplicates it. `--json` returns the full
 `{ memory, inserted }` response for scripts. Use `--` before statement text that
@@ -207,8 +243,46 @@ an updated CLI and API. MCP hosts can use the equivalent tools with writes
 enabled. See [Make this repeatable](../../docs/guides/repeatable-work.md) for the
 workflow and its limits.
 
+## Repository skills
+
+Use **Learnings → Skills** to add selected `SKILL.md` files and enable or disable
+them for a repository. Product discipline is included for all repositories by default.
+
+```sh
+lore skill list
+lore skill show llm-product-discipline
+lore skill discover --folder ./my-project
+lore skill import --file .agents/skills/my-skill/SKILL.md
+```
+
+Discovery is local. CLI imports propose skills for a workspace member to review
+and enable. Use `--all-repositories` when importing to propose a workspace-wide
+skill; an owner or admin must enable it. Skills guide agents under their existing permissions; supporting
+scripts and assets stay in the source repository. See
+[Repository skills](../../docs/guides/skills.md) for imports and MCP tools.
+
 ## Context Guard
 
+In Learnings, select a rule template for pushes, edits to a file or folder,
+deployments, commits, or terminal commands. Push rules can cover **selected
+branches** (for example `main` and `release/v1`) or **all branches**. Settings
+are saved separately from your explanation; changing the wording does not
+silently change the check. An owner or admin enables **Ask before conflicting
+actions**, and Enforce mode pauses conflicting actions for approval in supported
+pre-action integrations.
+
+Branch checks use the remote destination, including `HEAD:main`, multiple
+refspecs and branch deletion. Native hooks can read local Git configuration to
+resolve a simple implicit push or a source-only refspec. Unknown destinations,
+wildcard pushes and broad operations such as `--mirror` require approval. A
+known push to another branch is unaffected by this rule. This is a check of
+reported agent actions, not a replacement for server-side branch protection;
+arbitrary scripts and tools without pre-action support are not covered.
+
+Update connected clients before enabling the new templates. An older client
+cannot evaluate a structured saved policy offline and will pause until it can
+verify enforcement again. Existing supported written rules remain valid.
+
 ```sh
 lore guard status                  # effective mode here, and why
 lore guard assist                  # set the workspace default
@@ -237,7 +311,7 @@ content-free `guard_check` audit event.
 
 ```sh
 lore update
-lore update --version v0.2.14
+lore update --version v0.2.15
 ```
 
 `update` resolves the latest release to an exact tag, or uses the exact
@@ -582,7 +656,7 @@ same-repository, non-draft pull requests bearing the corresponding
 `lore:codex-review` or `lore:devin-review` label.
 
 Generated jobs require a published standalone binary release and default to
-`treadiehq/lore-releases` at `v0.2.14`. Set `LORE_CLI_REPOSITORY` to the publicly
+`treadiehq/lore-releases` at `v0.2.15`. Set `LORE_CLI_REPOSITORY` to the publicly
 readable `owner/repository` and `LORE_CLI_VERSION` to an existing release tag
 when using another release source.
 

package/dist/capture-scope.d.ts

@@ -0,0 +1,12 @@
+import type { DirectoryRules } from "./directory-policy.js";
+export interface CaptureScopeOptions {
+    folders?: readonly string[];
+    allProjects?: boolean;
+    repository?: string;
+}
+/** Validate the choice on the recording machine before installing any hooks. */
+export declare function captureDirectories(options: CaptureScopeOptions, home: string, cwd?: string): Promise<DirectoryRules | null | undefined>;
+/** Ignore inherited Git location overrides: inspect the selected folder itself. */
+export declare function captureGit(folder: string, args: string[]): Promise<string>;
+export declare function verifyCaptureRepository(folder: string, repository: string): Promise<void>;
+//# sourceMappingURL=capture-scope.d.ts.map

package/dist/capture-scope.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"capture-scope.d.ts","sourceRoot":"","sources":["../src/capture-scope.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AAE5D,MAAM,WAAW,mBAAmB;IAAG,OAAO,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAAC,WAAW,CAAC,EAAE,OAAO,CAAC;IAAC,UAAU,CAAC,EAAE,MAAM,CAAA;CAAE;AAEhH,gFAAgF;AAChF,wBAAsB,kBAAkB,CAAC,OAAO,EAAE,mBAAmB,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,SAAgB,GAAG,OAAO,CAAC,cAAc,GAAG,IAAI,GAAG,SAAS,CAAC,CAgBpJ;AAID,mFAAmF;AACnF,wBAAsB,UAAU,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC,CAIhF;AAED,wBAAsB,uBAAuB,CAAC,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAI/F"}

package/dist/capture-scope.js

@@ -0,0 +1,45 @@
+import { realpath, stat } from "node:fs/promises";
+import { resolve } from "node:path";
+import { execFile } from "node:child_process";
+import { promisify } from "node:util";
+import { repositoryIdentity } from "@lore-co/core";
+/** Validate the choice on the recording machine before installing any hooks. */
+export async function captureDirectories(options, home, cwd = process.cwd()) {
+    if (options.repository !== undefined && (!/^github\.com\/[^/]+\/[^/]+$/u.test(repositoryIdentity(options.repository) ?? "") || options.allProjects || !options.folders?.length))
+        throw new Error("--repository needs a GitHub repository and a local --folder or --choose-folder selection.");
+    if (options.allProjects && options.folders !== undefined)
+        throw new Error("Use --folder or --all-projects, not both.");
+    if (options.allProjects)
+        return null;
+    if (options.folders === undefined)
+        return undefined;
+    if (!options.folders.length || options.folders.length > 100)
+        throw new Error("Choose between 1 and 100 folders with --folder.");
+    const include = [];
+    for (const folder of options.folders) {
+        if (!folder.trim() || folder.length > 2000 || /[\[\]{}!*?\x00-\x1f]/u.test(folder))
+            throw new Error("--folder needs a folder path, without wildcards or control characters.");
+        const expanded = folder.startsWith("~/") || folder.startsWith("~\\") ? resolve(home, folder.slice(2)) : resolve(cwd, folder);
+        const path = await realpath(expanded).catch(() => { throw new Error(`Folder does not exist: ${folder}`); });
+        if (!(await stat(path)).isDirectory())
+            throw new Error(`Not a folder: ${folder}`);
+        if (options.repository !== undefined)
+            await verifyCaptureRepository(path, options.repository);
+        include.push(path);
+    }
+    return { include: [...new Set(include)], exclude: [] };
+}
+const runGit = promisify(execFile);
+/** Ignore inherited Git location overrides: inspect the selected folder itself. */
+export async function captureGit(folder, args) {
+    const env = Object.fromEntries(Object.entries(process.env).filter(([key]) => !key.startsWith("GIT_")));
+    const { stdout } = await runGit("git", ["-C", folder, "-c", "core.fsmonitor=false", ...args], { env, encoding: "utf8", timeout: 5000, maxBuffer: 16_384, windowsHide: true });
+    return stdout.trim();
+}
+export async function verifyCaptureRepository(folder, repository) {
+    const expected = repositoryIdentity(repository);
+    const remote = await captureGit(folder, ["config", "--local", "--get", "remote.origin.url"]).catch(() => "");
+    if (!expected || repositoryIdentity(remote) !== expected)
+        throw new Error(`This folder does not match ${repository}. Choose its local checkout; capture settings were not changed.`);
+}
+//# sourceMappingURL=capture-scope.js.map

package/dist/capture-scope.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"capture-scope.js","sourceRoot":"","sources":["../src/capture-scope.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AAClD,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAC9C,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AACtC,OAAO,EAAE,kBAAkB,EAAE,MAAM,eAAe,CAAC;AAKnD,gFAAgF;AAChF,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,OAA4B,EAAE,IAAY,EAAE,GAAG,GAAG,OAAO,CAAC,GAAG,EAAE;IACtG,IAAI,OAAO,CAAC,UAAU,KAAK,SAAS,IAAI,CAAC,CAAC,8BAA8B,CAAC,IAAI,CAAC,kBAAkB,CAAC,OAAO,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC,IAAI,OAAO,CAAC,WAAW,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,MAAM,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,2FAA2F,CAAC,CAAC;IAC9R,IAAI,OAAO,CAAC,WAAW,IAAI,OAAO,CAAC,OAAO,KAAK,SAAS;QAAE,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;IACvH,IAAI,OAAO,CAAC,WAAW;QAAE,OAAO,IAAI,CAAC;IACrC,IAAI,OAAO,CAAC,OAAO,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IACpD,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,IAAI,OAAO,CAAC,OAAO,CAAC,MAAM,GAAG,GAAG;QAAE,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC;IAChI,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,KAAK,MAAM,MAAM,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;QACrC,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,MAAM,CAAC,MAAM,GAAG,IAAI,IAAI,uBAAuB,CAAC,IAAI,CAAC,MAAM,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,wEAAwE,CAAC,CAAC;QAC9K,MAAM,QAAQ,GAAG,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;QAC7H,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,QAAQ,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAG,MAAM,IAAI,KAAK,CAAC,0BAA0B,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAC5G,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,WAAW,EAAE;YAAE,MAAM,IAAI,KAAK,CAAC,iBAAiB,MAAM,EAAE,CAAC,CAAC;QAClF,IAAI,OAAO,CAAC,UAAU,KAAK,SAAS;YAAE,MAAM,uBAAuB,CAAC,IAAI,EAAE,OAAO,CAAC,UAAU,CAAC,CAAC;QAC9F,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACrB,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,CAAC,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;AACzD,CAAC;AAED,MAAM,MAAM,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC;AAEnC,mFAAmF;AACnF,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,MAAc,EAAE,IAAc;IAC7D,MAAM,GAAG,GAAG,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;IACvG,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,sBAAsB,EAAE,GAAG,IAAI,CAAC,EAAE,EAAE,GAAG,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,CAAC;IAC9K,OAAO,MAAM,CAAC,IAAI,EAAE,CAAC;AACvB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAAC,MAAc,EAAE,UAAkB;IAC9E,MAAM,QAAQ,GAAG,kBAAkB,CAAC,UAAU,CAAC,CAAC;IAChD,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,SAAS,EAAE,OAAO,EAAE,mBAAmB,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;IAC7G,IAAI,CAAC,QAAQ,IAAI,kBAAkB,CAAC,MAAM,CAAC,KAAK,QAAQ;QAAE,MAAM,IAAI,KAAK,CAAC,8BAA8B,UAAU,iEAAiE,CAAC,CAAC;AACvL,CAAC"}

package/dist/cli.d.ts

@@ -1,5 +1,6 @@
 #!/usr/bin/env node
 import { type DirectoryRules } from "./directory-policy.js";
+import { type CaptureScopeOptions } from "./capture-scope.js";
 import { type ConnectionReference } from "./directory-policy.js";
 import { type WorkspaceIdentityResponse } from "@lore-co/core";
 import { type CommandHookAgentName } from "./runtime.js";
@@ -86,7 +87,7 @@ export interface AgentInstallation {
     configPath: string;
 }
 export declare function t3CodeProviderInstallations(settings: unknown, paths: LorePaths): AgentInstallation[];
-export interface ConnectWithCredentialOptions {
+export interface ConnectWithCredentialOptions extends CaptureScopeOptions {
     connectionName?: string;
     fallback?: string;
     /** CLI setup opts in automatically; embedded callers can choose explicitly. */
@@ -102,6 +103,11 @@ export interface ConnectWithCredentialOptions {
     timeoutMs?: number;
 }
 export interface ConnectResult {
+    capture: {
+        folders: string[] | null;
+        excludedFolders: string[];
+    };
+    skillFiles: string[];
     recoveryNotice?: string;
     connected: true;
     apiUrl: string;

package/dist/cli.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"cli.d.ts","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":";AACA,OAAO,EAAwD,KAAK,cAAc,EAAE,MAAM,uBAAuB,CAAC;AAMlH,OAAO,EAAgD,KAAK,mBAAmB,EAAE,MAAM,uBAAuB,CAAC;AA0B/G,OAAO,EAwBL,KAAK,yBAAyB,EAC/B,MAAM,eAAe,CAAC;AACvB,OAAO,EACL,KAAK,oBAAoB,EAE1B,MAAM,cAAc,CAAC;AAkCtB,eAAO,MAAM,oBAAoB,sBAAsB,CAAC;AACxD,eAAO,MAAM,sBAAsB,2BAA2B,CAAC;AAC/D,eAAO,MAAM,4BAA4B,uBAAuB,CAAC;AACjE,QAAA,MAAM,sBAAsB,kGAA4B,CAAC;AACzD,MAAM,MAAM,mBAAmB,GAAG,CAAC,OAAO,sBAAsB,CAAC,CAAC,MAAM,CAAC,CAAC;AAC1E,MAAM,MAAM,gBAAgB,GACxB,mBAAmB,GACnB,SAAS,GACT,QAAQ,GACR,QAAQ,CAAC;AAiCb,MAAM,WAAW,SAAS;IACxB,IAAI,EAAE,MAAM,CAAC;IACb,aAAa,EAAE,MAAM,CAAC;IACtB,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,CAAC;IAChB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,uBAAuB,EAAE,MAAM,CAAC;IAChC,qBAAqB,EAAE,MAAM,CAAC;IAC9B,oBAAoB,EAAE,MAAM,CAAC;IAC7B,sBAAsB,EAAE,MAAM,CAAC;IAC/B,6BAA6B,EAAE,MAAM,CAAC;IACtC,cAAc,EAAE,MAAM,CAAC;IACvB,cAAc,EAAE,MAAM,CAAC;IACvB,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;IACd,UAAU,EAAE,MAAM,CAAC;IACnB,eAAe,EAAE,MAAM,CAAC;IACxB,kBAAkB,EAAE,MAAM,CAAC;IAC3B,cAAc,EAAE,MAAM,CAAC;IACvB,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;IAClB,cAAc,EAAE,MAAM,CAAC;IACvB,cAAc,EAAE,MAAM,CAAC;IACvB,cAAc,EAAE,MAAM,CAAC;IACvB,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,eAAe;IAC9B,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,gBAAgB,CAAC,EAAE,mBAAmB,EAAE,CAAC;IACzC,WAAW,CAAC,EAAE,cAAc,CAAC;IAC7B,OAAO,EAAE,CAAC,CAAC;IACX,MAAM,EAAE,MAAM,CAAC;IACf,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,mBAAmB,EAAE,CAAC;IAC9B,gBAAgB,CAAC,EAAE,OAAO,CAAC,MAAM,CAAC,mBAAmB,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC;IAClE,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;CACnB;AAsJD,wBAAgB,YAAY,CAC1B,IAAI,CAAC,EAAE,MAAM,EACb,WAAW,GAAE,MAAM,CAAC,UAAwB,EAC5C,GAAG,GAAE,MAAsB,GAC1B,SAAS,CAwEX;AAmGD,wBAAgB,cAAc,CAC5B,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC9B,KAAK,EAAE,oBAAoB,EAC3B,KAAK,EAAE,SAAS,GACf,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAqBzB;AAED,wBAAgB,eAAe,CAC7B,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC7B,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAsBzB;AAED,wBAAgB,cAAc,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,MAAM,CAiBrE;AAkCD,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAQ5F;AAED,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAK3E;AAMD,wBAAgB,oBAAoB,CAClC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC9B,KAAK,EAAE,SAAS,GACf,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAqBzB;AAED,wBAAgB,qBAAqB,CACnC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC7B,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAuBzB;AAED,wBAAgB,oBAAoB,CAClC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC7B,MAAM,CAWR;AA2CD,wBAAgB,wBAAwB,CACtC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC9B,KAAK,EAAE,SAAS,GACf,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAqBzB;AAED,wBAAgB,yBAAyB,CACvC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC7B,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAuBzB;AAED,wBAAgB,wBAAwB,CACtC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC7B,MAAM,CAWR;AAoBD,wBAAgB,2BAA2B,CACzC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC9B,KAAK,EAAE,SAAS,GACf,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAqBzB;AAED,wBAAgB,4BAA4B,CAC1C,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC7B,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAuBzB;AAED,wBAAgB,2BAA2B,CACzC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC7B,MAAM,CAWR;AAyBD,wBAAgB,uBAAuB,CACrC,KAAK,EAAE,OAAO,EACd,KAAK,EAAE,SAAS,GACf,OAAO,EAAE,CAWX;AAED,wBAAgB,wBAAwB,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,EAAE,CAKlE;AAED,wBAAgB,uBAAuB,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAI9D;AASD,wBAAgB,uBAAuB,CACrC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC7B,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAazB;AAED,wBAAgB,wBAAwB,CACtC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC7B,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAczB;AAED,wBAAgB,wBAAwB,CACtC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC7B,MAAM,CAIR;AAsYD,wBAAsB,mBAAmB,CACvC,KAAK,EAAE,SAAS,EAChB,GAAG,CAAC,EAAE,MAAM,GACX,OAAO,CAAC,eAAe,GAAG,IAAI,CAAC,CAYjC;AAqBD,wBAAgB,uBAAuB,CACrC,OAAO,GAAE;IACP,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,WAAW,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;IAChC,QAAQ,CAAC,EAAE,IAAI,CAAC,eAAe,EAAE,QAAQ,GAAG,cAAc,CAAC,GAAG,IAAI,CAAC;IACnE,mBAAmB,CAAC,EAAE,OAAO,CAAC;CAC1B,GACL,IAAI,CAAC,eAAe,EAAE,QAAQ,GAAG,cAAc,CAAC,CA8BlD;AAuSD,MAAM,WAAW,iBAAiB;IAChC,KAAK,EAAE,mBAAmB,CAAC;IAC3B,UAAU,EAAE,MAAM,CAAC;CACpB;AA0MD,wBAAgB,2BAA2B,CACzC,QAAQ,EAAE,OAAO,EACjB,KAAK,EAAE,SAAS,GACf,iBAAiB,EAAE,CAErB;AA2VD,MAAM,WAAW,4BAA4B;IAC3C,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,+EAA+E;IAC/E,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,qFAAqF;IACrF,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,sEAAsE;IACtE,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,SAAS,gBAAgB,EAAE,CAAC;IACpC,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,aAAa;IAC5B,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,SAAS,EAAE,IAAI,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,yBAAyB,CAAC;IACpC,MAAM,EAAE,gBAAgB,EAAE,CAAC;IAC3B,MAAM,EAAE,MAAM,CAAC;IACf,gBAAgB,EAAE,MAAM,EAAE,CAAC;IAC3B,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,QAAQ,EAAE,MAAM,EAAE,CAAC;CACpB;AAED,wBAAsB,qBAAqB,CAAC,OAAO,EAAE,4BAA4B,GAAG,OAAO,CAAC,aAAa,CAAC,CAYzG;AA2YD,wBAAgB,uBAAuB,CAAC,MAAM,EAAE,eAAe,GAAG,MAAM,CAKvE;AAED,wBAAgB,iCAAiC,CAC/C,MAAM,EAAE,MAAM,EACd,KAAK,EAAE,MAAM,GACZ,MAAM,CAKR;AAqbD,wBAAsB,sBAAsB,CAAC,KAAK,GAAE,SAA0B,EAAE,oBAAoB,UAAQ,GAAG,OAAO,CAAC;IAAE,SAAS,EAAE,KAAK,CAAC;IAAC,gBAAgB,EAAE,MAAM,EAAE,CAAC;IAAC,OAAO,EAAE,MAAM,EAAE,CAAA;CAAE,CAAC,CAiE1L;AAuVD,wBAAsB,MAAM,CAAC,IAAI,GAAE,SAAS,MAAM,EAA0B,GAAG,OAAO,CAAC,IAAI,CAAC,CAmB3F"}
+{"version":3,"file":"cli.d.ts","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":";AACA,OAAO,EAAwD,KAAK,cAAc,EAAE,MAAM,uBAAuB,CAAC;AAMlH,OAAO,EAAsB,KAAK,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AAElF,OAAO,EAAgD,KAAK,mBAAmB,EAAE,MAAM,uBAAuB,CAAC;AA0B/G,OAAO,EAwBL,KAAK,yBAAyB,EAC/B,MAAM,eAAe,CAAC;AACvB,OAAO,EACL,KAAK,oBAAoB,EAE1B,MAAM,cAAc,CAAC;AAoCtB,eAAO,MAAM,oBAAoB,sBAAsB,CAAC;AACxD,eAAO,MAAM,sBAAsB,2BAA2B,CAAC;AAC/D,eAAO,MAAM,4BAA4B,uBAAuB,CAAC;AACjE,QAAA,MAAM,sBAAsB,kGAA4B,CAAC;AACzD,MAAM,MAAM,mBAAmB,GAAG,CAAC,OAAO,sBAAsB,CAAC,CAAC,MAAM,CAAC,CAAC;AAC1E,MAAM,MAAM,gBAAgB,GACxB,mBAAmB,GACnB,SAAS,GACT,QAAQ,GACR,QAAQ,CAAC;AAiCb,MAAM,WAAW,SAAS;IACxB,IAAI,EAAE,MAAM,CAAC;IACb,aAAa,EAAE,MAAM,CAAC;IACtB,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,CAAC;IAChB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,uBAAuB,EAAE,MAAM,CAAC;IAChC,qBAAqB,EAAE,MAAM,CAAC;IAC9B,oBAAoB,EAAE,MAAM,CAAC;IAC7B,sBAAsB,EAAE,MAAM,CAAC;IAC/B,6BAA6B,EAAE,MAAM,CAAC;IACtC,cAAc,EAAE,MAAM,CAAC;IACvB,cAAc,EAAE,MAAM,CAAC;IACvB,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;IACd,UAAU,EAAE,MAAM,CAAC;IACnB,eAAe,EAAE,MAAM,CAAC;IACxB,kBAAkB,EAAE,MAAM,CAAC;IAC3B,cAAc,EAAE,MAAM,CAAC;IACvB,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;IAClB,cAAc,EAAE,MAAM,CAAC;IACvB,cAAc,EAAE,MAAM,CAAC;IACvB,cAAc,EAAE,MAAM,CAAC;IACvB,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,eAAe;IAC9B,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,gBAAgB,CAAC,EAAE,mBAAmB,EAAE,CAAC;IACzC,WAAW,CAAC,EAAE,cAAc,CAAC;IAC7B,OAAO,EAAE,CAAC,CAAC;IACX,MAAM,EAAE,MAAM,CAAC;IACf,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,mBAAmB,EAAE,CAAC;IAC9B,gBAAgB,CAAC,EAAE,OAAO,CAAC,MAAM,CAAC,mBAAmB,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC;IAClE,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;CACnB;AAgKD,wBAAgB,YAAY,CAC1B,IAAI,CAAC,EAAE,MAAM,EACb,WAAW,GAAE,MAAM,CAAC,UAAwB,EAC5C,GAAG,GAAE,MAAsB,GAC1B,SAAS,CAwEX;AAmGD,wBAAgB,cAAc,CAC5B,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC9B,KAAK,EAAE,oBAAoB,EAC3B,KAAK,EAAE,SAAS,GACf,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAqBzB;AAED,wBAAgB,eAAe,CAC7B,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC7B,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAsBzB;AAED,wBAAgB,cAAc,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,MAAM,CAiBrE;AAkCD,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAQ5F;AAED,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAK3E;AAMD,wBAAgB,oBAAoB,CAClC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC9B,KAAK,EAAE,SAAS,GACf,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAqBzB;AAED,wBAAgB,qBAAqB,CACnC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC7B,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAuBzB;AAED,wBAAgB,oBAAoB,CAClC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC7B,MAAM,CAWR;AA2CD,wBAAgB,wBAAwB,CACtC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC9B,KAAK,EAAE,SAAS,GACf,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAqBzB;AAED,wBAAgB,yBAAyB,CACvC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC7B,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAuBzB;AAED,wBAAgB,wBAAwB,CACtC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC7B,MAAM,CAWR;AAoBD,wBAAgB,2BAA2B,CACzC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC9B,KAAK,EAAE,SAAS,GACf,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAqBzB;AAED,wBAAgB,4BAA4B,CAC1C,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC7B,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAuBzB;AAED,wBAAgB,2BAA2B,CACzC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC7B,MAAM,CAWR;AAyBD,wBAAgB,uBAAuB,CACrC,KAAK,EAAE,OAAO,EACd,KAAK,EAAE,SAAS,GACf,OAAO,EAAE,CAWX;AAED,wBAAgB,wBAAwB,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,EAAE,CAKlE;AAED,wBAAgB,uBAAuB,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAI9D;AASD,wBAAgB,uBAAuB,CACrC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC7B,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAazB;AAED,wBAAgB,wBAAwB,CACtC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC7B,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAczB;AAED,wBAAgB,wBAAwB,CACtC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC7B,MAAM,CAIR;AAsYD,wBAAsB,mBAAmB,CACvC,KAAK,EAAE,SAAS,EAChB,GAAG,CAAC,EAAE,MAAM,GACX,OAAO,CAAC,eAAe,GAAG,IAAI,CAAC,CAYjC;AAqBD,wBAAgB,uBAAuB,CACrC,OAAO,GAAE;IACP,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,WAAW,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;IAChC,QAAQ,CAAC,EAAE,IAAI,CAAC,eAAe,EAAE,QAAQ,GAAG,cAAc,CAAC,GAAG,IAAI,CAAC;IACnE,mBAAmB,CAAC,EAAE,OAAO,CAAC;CAC1B,GACL,IAAI,CAAC,eAAe,EAAE,QAAQ,GAAG,cAAc,CAAC,CA8BlD;AAuSD,MAAM,WAAW,iBAAiB;IAChC,KAAK,EAAE,mBAAmB,CAAC;IAC3B,UAAU,EAAE,MAAM,CAAC;CACpB;AA0MD,wBAAgB,2BAA2B,CACzC,QAAQ,EAAE,OAAO,EACjB,KAAK,EAAE,SAAS,GACf,iBAAiB,EAAE,CAErB;AAiXD,MAAM,WAAW,4BAA6B,SAAQ,mBAAmB;IACvE,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,+EAA+E;IAC/E,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,qFAAqF;IACrF,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,sEAAsE;IACtE,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,SAAS,gBAAgB,EAAE,CAAC;IACpC,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,aAAa;IAC5B,OAAO,EAAE;QAAE,OAAO,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC;QAAC,eAAe,EAAE,MAAM,EAAE,CAAA;KAAE,CAAC;IACjE,UAAU,EAAE,MAAM,EAAE,CAAC;IACrB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,SAAS,EAAE,IAAI,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,yBAAyB,CAAC;IACpC,MAAM,EAAE,gBAAgB,EAAE,CAAC;IAC3B,MAAM,EAAE,MAAM,CAAC;IACf,gBAAgB,EAAE,MAAM,EAAE,CAAC;IAC3B,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,QAAQ,EAAE,MAAM,EAAE,CAAC;CACpB;AAED,wBAAsB,qBAAqB,CAAC,OAAO,EAAE,4BAA4B,GAAG,OAAO,CAAC,aAAa,CAAC,CAYzG;AAqZD,wBAAgB,uBAAuB,CAAC,MAAM,EAAE,eAAe,GAAG,MAAM,CAKvE;AAED,wBAAgB,iCAAiC,CAC/C,MAAM,EAAE,MAAM,EACd,KAAK,EAAE,MAAM,GACZ,MAAM,CAKR;AAkcD,wBAAsB,sBAAsB,CAAC,KAAK,GAAE,SAA0B,EAAE,oBAAoB,UAAQ,GAAG,OAAO,CAAC;IAAE,SAAS,EAAE,KAAK,CAAC;IAAC,gBAAgB,EAAE,MAAM,EAAE,CAAC;IAAC,OAAO,EAAE,MAAM,EAAE,CAAA;CAAE,CAAC,CAsE1L;AAwVD,wBAAsB,MAAM,CAAC,IAAI,GAAE,SAAS,MAAM,EAA0B,GAAG,OAAO,CAAC,IAAI,CAAC,CAmB3F"}

package/dist/cli.js

@@ -4,6 +4,8 @@ import { reportCommand, runTelemetryCommand, telemetryEnabled, trackedCommand, T
 import { secureWindowsDirectory, windowsPermissionsArePrivate } from "./windows-permissions.js";
 import { COMMAND_GUIDES, ROOT_HELP, helpTopic } from "./command-help.js";
 import { runShareCommand } from "./share.js";
+import { resolveConnectProject, validateConnectProjectOptions } from "./connect-project.js";
+import { captureDirectories } from "./capture-scope.js";
 import { prepareConnection, persistConnection, listConnections } from "./connections.js";
 import { connectionReferences, resolveLocalConnection } from "./directory-policy.js";
 import { withDirectoryLock } from "./reliability-store.js";
@@ -23,7 +25,9 @@ import { runHook, } from "./runtime.js";
 import { readInvocationHealthWriteInput, runInvocationHealthWrite, } from "./invocation-health-writer.js";
 import { runAskCommand } from "./ask.js";
 import { runRememberCommand } from "./remember.js";
+import { installLoreSkill, removeLoreSkill } from "./skills.js";
 import { runApproachCommand } from "./approach.js";
+import { runSkillCommand } from "./skill-command.js";
 import { runGuardCommand } from "./guard.js";
 import { runContinueCommand, runResumeCommand } from "./handoff.js";
 import { disableRecovery, prepareAutomaticRecovery, prepareRecoveryInstallation, runRecoveryCommand, runRecoveryHook, runWrappedAgent } from "./recovery.js";
@@ -97,6 +101,11 @@ Usage:
 
 Options:
   --name <name>           Name this account/workspace connection (e.g. work)
+  --current-project    Confirm and record the current Git project
+  --choose-folder      Open a folder picker on this machine
+  --repository <repo>  Verify the selected folder matches this GitHub repository
+  --folder <path>        Record only in this folder and subfolders (repeatable)
+  --all-projects         Record in all projects allowed by your workspace
   --url <url>           Lore API base URL (default: https://api.uselore.co)
   --dashboard-url <url> Lore dashboard URL (default: https://uselore.co for hosted Lore)
   --login               Approve access securely in the Lore dashboard
@@ -109,8 +118,12 @@ Options:
   --json                Print machine-readable output
   --help                Show this command's help
 
+New connections stay paused until you choose a project, a folder, or --all-projects.
+Reconnecting without a capture option keeps your saved folder rules.
+Folder choices control capture; learning scope controls where knowledge applies.
+
 Examples:
-  lore connect --login --agent claude
+  lore connect --login --agent claude --folder .
   lore connect --login --agent cowork
   lore connect --token "$LORE_WORKSPACE_TOKEN" --agent claude
   lore connect --url http://localhost:3004 --token dev-token --agent codex
@@ -1421,7 +1434,11 @@ async function installRuntime(paths) {
             rm(resolve(dirname(paths.runtime), "image-bytes.js"), { force: true }),
             rm(resolve(dirname(paths.runtime), "image-capture.js"), { force: true }),
             rm(resolve(dirname(paths.runtime), "retained-context.js"), { force: true }),
+            rm(resolve(dirname(paths.runtime), "retrieval-task.js"), { force: true }),
+            rm(resolve(dirname(paths.runtime), "runtime-redaction.js"), { force: true }),
+            rm(resolve(dirname(paths.runtime), "user-message.js"), { force: true }),
             rm(resolve(dirname(paths.runtime), "approach-guidance.js"), { force: true }),
+            rm(resolve(dirname(paths.runtime), "skill-guidance.js"), { force: true }),
             rm(paths.runtimeContextFallback, { force: true }),
             rm(paths.runtimeInvocationHealthWriter, { force: true }),
             rm(paths.runtimeVersion, { force: true }),
@@ -1454,7 +1471,11 @@ async function installRuntime(paths) {
         "image-bytes.js": imageBytes,
         "image-capture.js": imageCapture,
         "retained-context.js": await readFile(resolve(sourceDirectory, "retained-context.js"), "utf8"),
+        "retrieval-task.js": (await readFile(resolve(sourceDirectory, "retrieval-task.js"), "utf8")).replaceAll("@lore-co/core/user-message", "./user-message.js"),
+        "runtime-redaction.js": await readFile(resolve(sourceDirectory, "runtime-redaction.js"), "utf8"),
+        "user-message.js": await readFile(fileURLToPath(import.meta.resolve("@lore-co/core/user-message")), "utf8"),
         "approach-guidance.js": await readFile(resolve(sourceDirectory, "approach-guidance.js"), "utf8"),
+        "skill-guidance.js": await readFile(resolve(sourceDirectory, "skill-guidance.js"), "utf8"),
         "repository.js": repository,
         "repository-address.js": await readFile(resolve(dirname(fileURLToPath(import.meta.resolve("@lore-co/core/repository-location"))), "repository-address.js"), "utf8"),
         "directory-policy.js": (await readFile(fileURLToPath(import.meta.resolve("@lore-co/core/local-scope")), "utf8")).replaceAll("./repository-location.js", "./repository.js"),
@@ -1481,7 +1502,11 @@ async function installRuntime(paths) {
         atomicWrite(resolve(dirname(paths.runtime), "image-bytes.js"), imageBytes, 0o600),
         atomicWrite(resolve(dirname(paths.runtime), "image-capture.js"), imageCapture, 0o600),
         atomicWrite(resolve(dirname(paths.runtime), "retained-context.js"), runtimeFiles["retained-context.js"], 0o600),
+        atomicWrite(resolve(dirname(paths.runtime), "retrieval-task.js"), runtimeFiles["retrieval-task.js"], 0o600),
+        atomicWrite(resolve(dirname(paths.runtime), "runtime-redaction.js"), runtimeFiles["runtime-redaction.js"], 0o600),
+        atomicWrite(resolve(dirname(paths.runtime), "user-message.js"), runtimeFiles["user-message.js"], 0o600),
         atomicWrite(resolve(dirname(paths.runtime), "approach-guidance.js"), runtimeFiles["approach-guidance.js"], 0o600),
+        atomicWrite(resolve(dirname(paths.runtime), "skill-guidance.js"), runtimeFiles["skill-guidance.js"], 0o600),
         atomicWrite(paths.runtimeRepository, repository, 0o600),
         atomicWrite(resolve(dirname(paths.runtime), "repository-address.js"), runtimeFiles["repository-address.js"], 0o600),
         atomicWrite(resolve(dirname(paths.runtime), "directory-policy.js"), runtimeFiles["directory-policy.js"], 0o600),
@@ -1555,7 +1580,21 @@ function parseConnectArguments(args) {
             parsed.recovery = false;
             continue;
         }
-        if (argument !== "--name" &&
+        if (argument === "--current-project") {
+            parsed.currentProject = true;
+            continue;
+        }
+        if (argument === "--choose-folder") {
+            parsed.chooseFolder = true;
+            continue;
+        }
+        if (argument === "--all-projects") {
+            parsed.allProjects = true;
+            continue;
+        }
+        if (argument !== "--repository" &&
+            argument !== "--folder" &&
+            argument !== "--name" &&
             argument !== "--url" &&
             argument !== "--dashboard-url" &&
             argument !== "--token" &&
@@ -1566,7 +1605,13 @@ function parseConnectArguments(args) {
         }
         const [value, valueIndex] = valueAfter(args, index, argument);
         index = valueIndex;
-        if (argument === "--name") {
+        if (argument === "--repository") {
+            parsed.repository = value;
+        }
+        else if (argument === "--folder") {
+            (parsed.folders ??= []).push(value);
+        }
+        else if (argument === "--name") {
             parsed.connectionName = value;
         }
         else if (argument === "--fallback") {
@@ -1597,6 +1642,7 @@ function parseConnectArguments(args) {
             throw new Error("--agent must be claude, codex, copilot, copilot-cli, copilot-vscode, cowork, cursor, opencode, polytoken, or t3code");
         }
     }
+    validateConnectProjectOptions(parsed);
     if (parsed.login && parsed.token !== undefined) {
         throw new Error("--login and --token cannot be used together");
     }
@@ -1661,7 +1707,8 @@ async function connectWithCredentialLocked(options, identity) {
         ? existing.apiUrl === apiUrl && existing.token === token ? identity
             : await authenticatedIdentity(existing.apiUrl, existing.token, timeoutMs).catch(() => undefined)
         : undefined;
-    const connection = await prepareConnection(paths, identity, { apiUrl, token, ...(options.connectionName ? { connectionName: options.connectionName } : {}) }, previousIdentity);
+    const directories = await captureDirectories(options, paths.home, options.cwd);
+    const connection = await prepareConnection(paths, identity, { apiUrl, token, ...(directories === undefined ? {} : { directories }), ...(options.connectionName ? { connectionName: options.connectionName } : {}) }, previousIdentity);
     await secureWindowsDirectory(paths.loreDirectory);
     const recoveryEnv = options.home === undefined ? process.env : { ...process.env, ZDOTDIR: paths.home };
     let recoveryWarning;
@@ -1708,6 +1755,31 @@ async function connectWithCredentialLocked(options, identity) {
             cursorMcpDocuments.set(mcpPath, { document: mcp, merged: mergeLoreCursorMcp(mcp.exists ? mcp.value : {}, paths) });
         }
     }
+    const agentConfigPaths = {};
+    for (const agent of agents) {
+        agentConfigPaths[agent] = installations
+            .filter((installation) => installation.agent === agent)
+            .map((installation) => installation.configPath);
+    }
+    const config = {
+        ...connection.fields,
+        version: 2,
+        apiUrl,
+        ...(dashboardUrl === undefined ? {} : { dashboardUrl }),
+        workspaceId: identity.workspaceId,
+        token: token.trim(),
+        agents,
+        agentConfigPaths,
+        connectedAt: connection.profiles.find(value => value.connectionId === connection.fields.connectionId)?.connectedAt ?? now.toISOString(),
+        timeoutMs,
+    };
+    const reliabilityStore = new ReliabilityStore(identity.workspaceId, {
+        home: paths.home,
+        connectionId: config.connectionId,
+    });
+    await reliabilityStore.initialize();
+    // Folder restrictions must be durable before any new hook can run.
+    await persistConnection(paths, config, connection.profiles);
     if (installations.some((installation) => targetFor(installation.agent).runtimeRequired)) {
         await installRuntime(paths);
     }
@@ -1735,30 +1807,6 @@ async function connectWithCredentialLocked(options, identity) {
             backups.push(result.backup);
         }
     }
-    const agentConfigPaths = {};
-    for (const agent of agents) {
-        agentConfigPaths[agent] = installations
-            .filter((installation) => installation.agent === agent)
-            .map((installation) => installation.configPath);
-    }
-    const config = {
-        ...connection.fields,
-        version: 2,
-        apiUrl,
-        ...(dashboardUrl === undefined ? {} : { dashboardUrl }),
-        workspaceId: identity.workspaceId,
-        token: token.trim(),
-        agents,
-        agentConfigPaths,
-        connectedAt: connection.profiles.find(value => value.connectionId === connection.fields.connectionId)?.connectedAt ?? now.toISOString(),
-        timeoutMs,
-    };
-    const reliabilityStore = new ReliabilityStore(identity.workspaceId, {
-        home: paths.home,
-        connectionId: config.connectionId,
-    });
-    await reliabilityStore.initialize();
-    await persistConnection(paths, config, connection.profiles);
     if (existing && !existing.connectionId && existing.apiUrl === apiUrl && existing.token === token) {
         await new ReliabilityStore(identity.workspaceId, { home: paths.home }).transferPendingTo(reliabilityStore);
         await reliabilityStore.migrateLegacyQueue(paths.queue);
@@ -1778,7 +1826,10 @@ async function connectWithCredentialLocked(options, identity) {
             .catch((error) => [`Host recovery setup: ${error.message}`]) : [];
     if (options.recovery === false)
         await disableRecovery(paths.home);
+    const skills = await installLoreSkill(paths, installations);
     return {
+        capture: { folders: config.directories?.include ?? null, excludedFolders: config.directories?.exclude ?? [] },
+        skillFiles: skills.files,
         connected: true,
         apiUrl: config.apiUrl,
         identity,
@@ -1786,7 +1837,7 @@ async function connectWithCredentialLocked(options, identity) {
         config: paths.config,
         changedHookFiles,
         backups,
-        warnings: [...(connection.needsFolders ? [`Lore is off for ${config.connectionName} until you add folder rules. Run lore config open --connection ${config.connectionName}.`] : []), ...requestedExpansion.warnings, ...hostRecoveryWarnings, ...(agents.includes("codex")
+        warnings: [...skills.warnings, ...(connection.needsFolders ? [`Lore is off for ${config.connectionName} until you choose where to record. Reconnect with --folder <path> or --all-projects, or run lore config open --connection ${config.connectionName}.`] : []), ...requestedExpansion.warnings, ...hostRecoveryWarnings, ...(agents.includes("codex")
                 ? ["Codex requires hook approval. Open /hooks in Codex and review any new or changed Lore hooks, then start a fresh session. Run lore doctor to verify approval and the first invocation."]
                 : [])],
         ...(recoveryNotice ? { recoveryNotice } : {}),
@@ -1940,6 +1991,7 @@ async function connectCommand(args) {
     if (parsed.login && hasProvidedToken) {
         throw new Error("--login cannot be combined with an explicit or environment workspace token. Unset it or use the token directly.");
     }
+    const capture = await resolveConnectProject(parsed, paths.home);
     const authorization = parsed.login
         ? await requestDeviceAuthorization({
             apiUrl,
@@ -1953,6 +2005,7 @@ async function connectCommand(args) {
         throw new Error("Workspace token is required. Use --login, --token <token>, LORE_WORKSPACE_TOKEN, or LORE_TOKEN.");
     }
     const result = await connectWithCredential({
+        ...capture,
         ...(parsed.connectionName === undefined ? {} : { connectionName: parsed.connectionName }),
         ...(parsed.fallback === undefined ? {} : { fallback: parsed.fallback }),
         recovery: parsed.recovery ?? true,
@@ -1964,7 +2017,9 @@ async function connectCommand(args) {
     });
     if (authorization)
         await acknowledgeDeviceAuthorization(apiUrl, authorization);
-    writeResult(result, parsed.json, `access authorized; integrations installed: ${result.agents.join(", ")}\napi_url: ${result.apiUrl}\nconfig: ${result.config}\nRestart your agent and complete a turn, then run lore doctor to verify recording.\n${result.recoveryNotice ? `${result.recoveryNotice}\n` : ""}${result.warnings.map((warning) => `warning: ${warning}\n`).join("")}`);
+    const captureSummary = result.capture.folders === null ? "all projects allowed by the workspace"
+        : result.capture.folders.length ? result.capture.folders.join(", ") : "paused — choose folders with --folder <path>";
+    writeResult(result, parsed.json, `access authorized; integrations installed: ${result.agents.join(", ")}\napi_url: ${result.apiUrl}\nconfig: ${result.config}\ncapture: ${captureSummary}${result.capture.excludedFolders.length ? `; excluded: ${result.capture.excludedFolders.join(", ")}` : ""}\nRestart your agent and complete a turn, then run lore doctor to verify recording.\n${result.skillFiles.length ? 'Choose lore in your agent’s skills to find knowledge or remember this session.\n' : ''}${result.recoveryNotice ? `${result.recoveryNotice}\n` : ""}${result.warnings.map((warning) => `warning: ${warning}\n`).join("")}`);
 }
 async function queueCount(paths) {
     try {
@@ -2052,7 +2107,11 @@ async function inspectRuntimeInstallation(required, paths) {
         "image-bytes.js": resolve(dirname(paths.runtime), "image-bytes.js"),
         "image-capture.js": resolve(dirname(paths.runtime), "image-capture.js"),
         "retained-context.js": resolve(dirname(paths.runtime), "retained-context.js"),
+        "retrieval-task.js": resolve(dirname(paths.runtime), "retrieval-task.js"),
+        "runtime-redaction.js": resolve(dirname(paths.runtime), "runtime-redaction.js"),
+        "user-message.js": resolve(dirname(paths.runtime), "user-message.js"),
         "approach-guidance.js": resolve(dirname(paths.runtime), "approach-guidance.js"),
+        "skill-guidance.js": resolve(dirname(paths.runtime), "skill-guidance.js"),
         "repository.js": paths.runtimeRepository,
         "repository-address.js": resolve(dirname(paths.runtime), "repository-address.js"),
         "directory-policy.js": resolve(dirname(paths.runtime), "directory-policy.js"),
@@ -2238,8 +2297,18 @@ async function getAgentStatus(agent, config, paths, runtime) {
         invocationError: invocation.error,
     };
 }
+// Diagnostics remain available when the current folder has capture disabled.
+// A fallback reads only the last saved connection; it never enables capture.
+async function diagnosticConfig(paths, cwd) {
+    try {
+        return await readConnectorConfig(paths, cwd);
+    }
+    catch {
+        return readConnectorConfig(paths);
+    }
+}
 async function statusData(paths, cwd) {
-    const config = await readConnectorConfig(paths, cwd);
+    const config = await diagnosticConfig(paths, cwd);
     let configMode = null;
     try {
         const metadata = await stat(paths.config);
@@ -2256,6 +2325,7 @@ async function statusData(paths, cwd) {
         Promise.all(CONFIGURED_AGENT_NAMES.map(async (agent) => getAgentStatus(agent, config, paths, runtime))),
     ]);
     return {
+        folderAccess: await checkDirectory(cwd, paths.home, config ?? undefined),
         schemaVersion: "lore-cli-status-v1",
         integrationContractVersion: RELIABILITY_INTEGRATION_CONTRACT_VERSION,
         connected: config !== null,
@@ -2290,7 +2360,7 @@ async function statusCommand(args) {
     const metricRate = (value) => value === null || value === undefined
         ? "-"
         : `${(value * 100).toFixed(1)}%`;
-    writeResult(data, parsed.json, `connected: ${data.connected ? "yes" : "no"}\napi_url: ${data.apiUrl ?? "-"}\nconfig_mode: ${data.configMode ?? "-"}\nruntime: ${data.runtimeRequired ? (data.runtimeInstalled ? `installed (${data.runtimeVersion})` : data.runtimeVersion === null ? "missing" : `stale (${data.runtimeVersion})`) : "not required"}\ndurable_outbox: ${data.reliability?.outbox.total ?? 0} ready=${data.reliability?.outbox.ready ?? 0} auth_blocked=${data.reliability?.outbox.authBlocked ?? 0} dead=${data.reliability?.outbox.dead ?? 0}\noldest_capture: ${data.reliability?.outbox.oldestEnqueuedAt ?? "-"}\ncontext_snapshots: ${data.reliability?.cache.context ?? 0}\noldest_context_snapshot: ${data.reliability?.cache.oldestContextWrittenAt ?? "-"}\npolicy_snapshots: ${data.reliability?.cache.policy ?? 0}\nlocal_context_fallback_rate: ${metricRate(data.reliability?.operational.retrieval.fallbackRate)}\nlocal_guard_coverage: ${metricRate(data.reliability?.operational.guard.coverageRate)}\nlocal_guard_failures: ${data.reliability?.operational.guard.failures ?? 0}\nlocal_retrieval_failures: ${data.reliability?.operational.retrieval.failed ?? 0}\n${data.reliabilityError === null ? "" : `reliability_error: ${data.reliabilityError}\n`}${agentLines}\n${externalSurfaceLines}\n`);
+    writeResult(data, parsed.json, `connected: ${data.connected ? "yes" : "no"}\ncurrent_folder: ${data.folderAccess.allowed ? "allowed" : "off"} (${data.folderAccess.reason})\napi_url: ${data.apiUrl ?? "-"}\nconfig_mode: ${data.configMode ?? "-"}\nruntime: ${data.runtimeRequired ? (data.runtimeInstalled ? `installed (${data.runtimeVersion})` : data.runtimeVersion === null ? "missing" : `stale (${data.runtimeVersion})`) : "not required"}\ndurable_outbox: ${data.reliability?.outbox.total ?? 0} ready=${data.reliability?.outbox.ready ?? 0} auth_blocked=${data.reliability?.outbox.authBlocked ?? 0} dead=${data.reliability?.outbox.dead ?? 0}\noldest_capture: ${data.reliability?.outbox.oldestEnqueuedAt ?? "-"}\ncontext_snapshots: ${data.reliability?.cache.context ?? 0}\noldest_context_snapshot: ${data.reliability?.cache.oldestContextWrittenAt ?? "-"}\npolicy_snapshots: ${data.reliability?.cache.policy ?? 0}\nlocal_context_fallback_rate: ${metricRate(data.reliability?.operational.retrieval.fallbackRate)}\nlocal_guard_coverage: ${metricRate(data.reliability?.operational.guard.coverageRate)}\nlocal_guard_failures: ${data.reliability?.operational.guard.failures ?? 0}\nlocal_retrieval_failures: ${data.reliability?.operational.retrieval.failed ?? 0}\n${data.reliabilityError === null ? "" : `reliability_error: ${data.reliabilityError}\n`}${agentLines}\n${externalSurfaceLines}\n`);
 }
 async function disconnectCommand(args) {
     const parsed = parseOutputArguments(args, DISCONNECT_HELP, "disconnect");
@@ -2336,6 +2406,7 @@ export async function disconnectInstallation(paths = getLorePaths(), preservePen
             backups.push(result.backup);
         }
     }
+    await removeLoreSkill(paths, installations);
     await Promise.all([
         rm(paths.config, { force: true }),
         rm(resolve(paths.loreDirectory, "connections"), { recursive: true, force: true }),
@@ -2351,6 +2422,10 @@ export async function disconnectInstallation(paths = getLorePaths(), preservePen
         rm(resolve(dirname(paths.runtime), "image-bytes.js"), { force: true }),
         rm(resolve(dirname(paths.runtime), "image-capture.js"), { force: true }),
         rm(resolve(dirname(paths.runtime), "retained-context.js"), { force: true }),
+        rm(resolve(dirname(paths.runtime), "retrieval-task.js"), { force: true }),
+        rm(resolve(dirname(paths.runtime), "runtime-redaction.js"), { force: true }),
+        rm(resolve(dirname(paths.runtime), "user-message.js"), { force: true }),
+        rm(resolve(dirname(paths.runtime), "skill-guidance.js"), { force: true }),
         rm(paths.runtimeInvocationHealthWriter, { force: true }),
         rm(paths.runtimeVersion, { force: true }),
         rm(paths.runtimePackage, { force: true }),
@@ -2475,9 +2550,9 @@ async function doctorCommand(args) {
         return;
     }
     const paths = getLorePaths();
-    const config = await readConnectorConfig(paths, process.cwd());
+    const config = await diagnosticConfig(paths, process.cwd());
     const status = await statusData(paths, process.cwd());
-    const checks = [];
+    const checks = [{ name: "capture-folder", status: status.folderAccess.allowed ? "ok" : "warning", detail: status.folderAccess.allowed ? status.folderAccess.reason : `Recording is off here: ${status.folderAccess.reason}. Run lore scope check <folder> to verify a selected folder.` }];
     checks.push({
         name: "platform",
         status: platform() === "darwin" || platform() === "linux" || isWindows() ? "ok" : "error",
@@ -2664,6 +2739,9 @@ async function printCommandHelp(path) {
         case "approach":
             await runApproachCommand(args, null);
             return;
+        case "skill":
+            await runSkillCommand(args, null);
+            return;
         case "guard":
             await runGuardCommand(args, null);
             return;
@@ -2752,8 +2830,8 @@ async function executeCli(args = process.argv.slice(2)) {
         return;
     }
     const commandArgs = args.slice(1);
-    if (["ask", "remember", "share", "resume", "continue", "approach"].includes(command)) {
-        const decision = await checkDirectory(process.cwd(), getLorePaths(command === "approach" ? process.env.LORE_HOME : undefined).home);
+    if (["ask", "remember", "share", "resume", "continue", "approach", "skill"].includes(command) && !(command === "skill" && commandArgs[0] === "discover")) {
+        const decision = await checkDirectory(process.cwd(), getLorePaths(["approach", "skill"].includes(command) ? process.env.LORE_HOME : undefined).home);
         if (!decision.allowed)
             throw new Error(`Lore is off in this folder. ${decision.reason}`);
     }
@@ -2798,6 +2876,9 @@ async function executeCli(args = process.argv.slice(2)) {
         case "approach":
             await runApproachCommand(commandArgs, await readConnectorConfig(getLorePaths(process.env.LORE_HOME), process.cwd()));
             return;
+        case "skill":
+            await runSkillCommand(commandArgs, commandArgs[0] === "discover" ? null : await readConnectorConfig(getLorePaths(process.env.LORE_HOME), process.cwd()));
+            return;
         case "guard":
             await runGuardCommand(commandArgs, await readConnectorConfig(getLorePaths(), process.cwd()));
             return;
@@ -2863,6 +2944,7 @@ async function executeCli(args = process.argv.slice(2)) {
                     });
                     return {
                         agents: connected.agents,
+                        warnings: connected.warnings,
                         verified: await verifyConnectedInstallation(),
                     };
                 },