@lore-co/cli 0.2.4 → 0.2.7

package/README.md

@@ -224,7 +224,7 @@ content-free `guard_check` audit event.
 
 ```sh
 lore update
-lore update --version v0.2.4
+lore update --version v0.2.7
 ```
 
 `update` resolves the latest release to an exact tag, or uses the exact
@@ -570,7 +570,7 @@ same-repository, non-draft pull requests bearing the corresponding
 `lore:codex-review` or `lore:devin-review` label.
 
 Generated jobs require a published standalone binary release and default to
-`treadiehq/lore-releases` at `v0.2.4`. Set `LORE_CLI_REPOSITORY` to the publicly
+`treadiehq/lore-releases` at `v0.2.7`. Set `LORE_CLI_REPOSITORY` to the publicly
 readable `owner/repository` and `LORE_CLI_VERSION` to an existing release tag
 when using another release source.
 
@@ -629,3 +629,11 @@ to launch an installed agent after dashboard acceptance. Provider setup, SSH
 workers, managed destinations, paired workspace exports with verified restoration,
 and the pushed-checkpoint fallback when no exporter is available
 are documented in [recovery](../../docs/recovery.md#managed-cloud-recovery).
+
+## Limit where Lore runs
+
+Owners and admins choose team repositories in **Settings → Repositories**. Members use `lore config open` to set their own folder rules. Both must allow the project.
+
+For multiple accounts or workspaces, connect each with `lore connect --login --name <name>` and edit its folders with `lore config open --connection <name>`. Each folder must match exactly one connection. Run `lore connections` to list them and `lore scope check [folder]` to check a project.
+
+See [folder and repository settings](../../docs/guides/repository-access.md) for setup and examples.

package/dist/cli.d.ts

@@ -1,4 +1,6 @@
 #!/usr/bin/env node
+import { type DirectoryRules } from "./directory-policy.js";
+import { type ConnectionReference } from "./directory-policy.js";
 import { type WorkspaceIdentityResponse } from "@lore-co/core";
 import { type CommandHookAgentName } from "./runtime.js";
 export declare const LORE_OPENCODE_PLUGIN = "@lore-co/opencode";
@@ -34,6 +36,12 @@ export interface LorePaths {
     t3Settings: string;
 }
 export interface ConnectorConfig {
+    connectionId?: string;
+    connectionName?: string;
+    accountId?: string;
+    workspaceName?: string;
+    savedConnections?: ConnectionReference[];
+    directories?: DirectoryRules;
     version: 2;
     apiUrl: string;
     dashboardUrl?: string;
@@ -65,7 +73,7 @@ export declare function countLorePolytokenHooks(input: unknown): number;
 export declare function mergeLoreOpenCodePlugin(input: Record<string, unknown>): Record<string, unknown>;
 export declare function removeLoreOpenCodePlugin(input: Record<string, unknown>): Record<string, unknown>;
 export declare function countLoreOpenCodePlugins(input: Record<string, unknown>): number;
-export declare function readConnectorConfig(paths: LorePaths): Promise<ConnectorConfig | null>;
+export declare function readConnectorConfig(paths: LorePaths, cwd?: string): Promise<ConnectorConfig | null>;
 export declare function resolveConnectEndpoints(options?: {
     apiUrl?: string;
     dashboardUrl?: string;
@@ -79,6 +87,7 @@ export interface AgentInstallation {
 }
 export declare function t3CodeProviderInstallations(settings: unknown, paths: LorePaths): AgentInstallation[];
 export interface ConnectWithCredentialOptions {
+    connectionName?: string;
     fallback?: string;
     /** CLI setup opts in automatically; embedded callers can choose explicitly. */
     recovery?: boolean;

package/dist/cli.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"cli.d.ts","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":";AA4BA,OAAO,EAwBL,KAAK,yBAAyB,EAC/B,MAAM,eAAe,CAAC;AACvB,OAAO,EACL,KAAK,oBAAoB,EAE1B,MAAM,cAAc,CAAC;AAiCtB,eAAO,MAAM,oBAAoB,sBAAsB,CAAC;AACxD,eAAO,MAAM,sBAAsB,2BAA2B,CAAC;AAC/D,eAAO,MAAM,4BAA4B,uBAAuB,CAAC;AACjE,QAAA,MAAM,sBAAsB,kGAA4B,CAAC;AACzD,MAAM,MAAM,mBAAmB,GAAG,CAAC,OAAO,sBAAsB,CAAC,CAAC,MAAM,CAAC,CAAC;AAC1E,MAAM,MAAM,gBAAgB,GACxB,mBAAmB,GACnB,SAAS,GACT,QAAQ,GACR,QAAQ,CAAC;AAiCb,MAAM,WAAW,SAAS;IACxB,IAAI,EAAE,MAAM,CAAC;IACb,aAAa,EAAE,MAAM,CAAC;IACtB,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,CAAC;IAChB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,uBAAuB,EAAE,MAAM,CAAC;IAChC,qBAAqB,EAAE,MAAM,CAAC;IAC9B,oBAAoB,EAAE,MAAM,CAAC;IAC7B,sBAAsB,EAAE,MAAM,CAAC;IAC/B,6BAA6B,EAAE,MAAM,CAAC;IACtC,cAAc,EAAE,MAAM,CAAC;IACvB,cAAc,EAAE,MAAM,CAAC;IACvB,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;IACd,UAAU,EAAE,MAAM,CAAC;IACnB,eAAe,EAAE,MAAM,CAAC;IACxB,kBAAkB,EAAE,MAAM,CAAC;IAC3B,cAAc,EAAE,MAAM,CAAC;IACvB,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;IAClB,cAAc,EAAE,MAAM,CAAC;IACvB,cAAc,EAAE,MAAM,CAAC;IACvB,cAAc,EAAE,MAAM,CAAC;IACvB,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,eAAe;IAC9B,OAAO,EAAE,CAAC,CAAC;IACX,MAAM,EAAE,MAAM,CAAC;IACf,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,mBAAmB,EAAE,CAAC;IAC9B,gBAAgB,CAAC,EAAE,OAAO,CAAC,MAAM,CAAC,mBAAmB,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC;IAClE,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;CACnB;AAoJD,wBAAgB,YAAY,CAC1B,IAAI,CAAC,EAAE,MAAM,EACb,WAAW,GAAE,MAAM,CAAC,UAAwB,EAC5C,GAAG,GAAE,MAAsB,GAC1B,SAAS,CAwEX;AAmGD,wBAAgB,cAAc,CAC5B,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC9B,KAAK,EAAE,oBAAoB,EAC3B,KAAK,EAAE,SAAS,GACf,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAqBzB;AAED,wBAAgB,eAAe,CAC7B,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC7B,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAsBzB;AAED,wBAAgB,cAAc,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,MAAM,CAiBrE;AAkCD,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAQ5F;AAED,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAK3E;AAMD,wBAAgB,oBAAoB,CAClC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC9B,KAAK,EAAE,SAAS,GACf,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAqBzB;AAED,wBAAgB,qBAAqB,CACnC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC7B,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAuBzB;AAED,wBAAgB,oBAAoB,CAClC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC7B,MAAM,CAWR;AA2CD,wBAAgB,wBAAwB,CACtC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC9B,KAAK,EAAE,SAAS,GACf,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAqBzB;AAED,wBAAgB,yBAAyB,CACvC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC7B,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAuBzB;AAED,wBAAgB,wBAAwB,CACtC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC7B,MAAM,CAWR;AAoBD,wBAAgB,2BAA2B,CACzC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC9B,KAAK,EAAE,SAAS,GACf,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAqBzB;AAED,wBAAgB,4BAA4B,CAC1C,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC7B,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAuBzB;AAED,wBAAgB,2BAA2B,CACzC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC7B,MAAM,CAWR;AAyBD,wBAAgB,uBAAuB,CACrC,KAAK,EAAE,OAAO,EACd,KAAK,EAAE,SAAS,GACf,OAAO,EAAE,CAWX;AAED,wBAAgB,wBAAwB,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,EAAE,CAKlE;AAED,wBAAgB,uBAAuB,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAI9D;AASD,wBAAgB,uBAAuB,CACrC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC7B,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAazB;AAED,wBAAgB,wBAAwB,CACtC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC7B,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAczB;AAED,wBAAgB,wBAAwB,CACtC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC7B,MAAM,CAIR;AAgYD,wBAAsB,mBAAmB,CACvC,KAAK,EAAE,SAAS,GACf,OAAO,CAAC,eAAe,GAAG,IAAI,CAAC,CAQjC;AAqBD,wBAAgB,uBAAuB,CACrC,OAAO,GAAE;IACP,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,WAAW,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;IAChC,QAAQ,CAAC,EAAE,IAAI,CAAC,eAAe,EAAE,QAAQ,GAAG,cAAc,CAAC,GAAG,IAAI,CAAC;IACnE,mBAAmB,CAAC,EAAE,OAAO,CAAC;CAC1B,GACL,IAAI,CAAC,eAAe,EAAE,QAAQ,GAAG,cAAc,CAAC,CA8BlD;AAsSD,MAAM,WAAW,iBAAiB;IAChC,KAAK,EAAE,mBAAmB,CAAC;IAC3B,UAAU,EAAE,MAAM,CAAC;CACpB;AA0MD,wBAAgB,2BAA2B,CACzC,QAAQ,EAAE,OAAO,EACjB,KAAK,EAAE,SAAS,GACf,iBAAiB,EAAE,CAErB;AA4UD,MAAM,WAAW,4BAA4B;IAC3C,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,+EAA+E;IAC/E,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,qFAAqF;IACrF,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,sEAAsE;IACtE,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,SAAS,gBAAgB,EAAE,CAAC;IACpC,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,aAAa;IAC5B,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,SAAS,EAAE,IAAI,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,yBAAyB,CAAC;IACpC,MAAM,EAAE,gBAAgB,EAAE,CAAC;IAC3B,MAAM,EAAE,MAAM,CAAC;IACf,gBAAgB,EAAE,MAAM,EAAE,CAAC;IAC3B,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,QAAQ,EAAE,MAAM,EAAE,CAAC;CACpB;AAED,wBAAsB,qBAAqB,CACzC,OAAO,EAAE,4BAA4B,GACpC,OAAO,CAAC,aAAa,CAAC,CAiKxB;AA0ND,wBAAgB,uBAAuB,CAAC,MAAM,EAAE,eAAe,GAAG,MAAM,CAKvE;AAED,wBAAgB,iCAAiC,CAC/C,MAAM,EAAE,MAAM,EACd,KAAK,EAAE,MAAM,GACZ,MAAM,CAKR;AA4aD,wBAAsB,sBAAsB,CAAC,KAAK,GAAE,SAA0B,EAAE,oBAAoB,UAAQ,GAAG,OAAO,CAAC;IAAE,SAAS,EAAE,KAAK,CAAC;IAAC,gBAAgB,EAAE,MAAM,EAAE,CAAC;IAAC,OAAO,EAAE,MAAM,EAAE,CAAA;CAAE,CAAC,CA6D1L;AAsVD,wBAAsB,MAAM,CAAC,IAAI,GAAE,SAAS,MAAM,EAA0B,GAAG,OAAO,CAAC,IAAI,CAAC,CAmB3F"}
+{"version":3,"file":"cli.d.ts","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":";AACA,OAAO,EAAwD,KAAK,cAAc,EAAE,MAAM,uBAAuB,CAAC;AAMlH,OAAO,EAAgD,KAAK,mBAAmB,EAAE,MAAM,uBAAuB,CAAC;AA0B/G,OAAO,EAwBL,KAAK,yBAAyB,EAC/B,MAAM,eAAe,CAAC;AACvB,OAAO,EACL,KAAK,oBAAoB,EAE1B,MAAM,cAAc,CAAC;AAiCtB,eAAO,MAAM,oBAAoB,sBAAsB,CAAC;AACxD,eAAO,MAAM,sBAAsB,2BAA2B,CAAC;AAC/D,eAAO,MAAM,4BAA4B,uBAAuB,CAAC;AACjE,QAAA,MAAM,sBAAsB,kGAA4B,CAAC;AACzD,MAAM,MAAM,mBAAmB,GAAG,CAAC,OAAO,sBAAsB,CAAC,CAAC,MAAM,CAAC,CAAC;AAC1E,MAAM,MAAM,gBAAgB,GACxB,mBAAmB,GACnB,SAAS,GACT,QAAQ,GACR,QAAQ,CAAC;AAiCb,MAAM,WAAW,SAAS;IACxB,IAAI,EAAE,MAAM,CAAC;IACb,aAAa,EAAE,MAAM,CAAC;IACtB,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,CAAC;IAChB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,uBAAuB,EAAE,MAAM,CAAC;IAChC,qBAAqB,EAAE,MAAM,CAAC;IAC9B,oBAAoB,EAAE,MAAM,CAAC;IAC7B,sBAAsB,EAAE,MAAM,CAAC;IAC/B,6BAA6B,EAAE,MAAM,CAAC;IACtC,cAAc,EAAE,MAAM,CAAC;IACvB,cAAc,EAAE,MAAM,CAAC;IACvB,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;IACd,UAAU,EAAE,MAAM,CAAC;IACnB,eAAe,EAAE,MAAM,CAAC;IACxB,kBAAkB,EAAE,MAAM,CAAC;IAC3B,cAAc,EAAE,MAAM,CAAC;IACvB,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;IAClB,cAAc,EAAE,MAAM,CAAC;IACvB,cAAc,EAAE,MAAM,CAAC;IACvB,cAAc,EAAE,MAAM,CAAC;IACvB,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,eAAe;IAC9B,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,gBAAgB,CAAC,EAAE,mBAAmB,EAAE,CAAC;IACzC,WAAW,CAAC,EAAE,cAAc,CAAC;IAC7B,OAAO,EAAE,CAAC,CAAC;IACX,MAAM,EAAE,MAAM,CAAC;IACf,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,mBAAmB,EAAE,CAAC;IAC9B,gBAAgB,CAAC,EAAE,OAAO,CAAC,MAAM,CAAC,mBAAmB,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC;IAClE,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;CACnB;AAsJD,wBAAgB,YAAY,CAC1B,IAAI,CAAC,EAAE,MAAM,EACb,WAAW,GAAE,MAAM,CAAC,UAAwB,EAC5C,GAAG,GAAE,MAAsB,GAC1B,SAAS,CAwEX;AAmGD,wBAAgB,cAAc,CAC5B,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC9B,KAAK,EAAE,oBAAoB,EAC3B,KAAK,EAAE,SAAS,GACf,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAqBzB;AAED,wBAAgB,eAAe,CAC7B,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC7B,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAsBzB;AAED,wBAAgB,cAAc,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,MAAM,CAiBrE;AAkCD,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAQ5F;AAED,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAK3E;AAMD,wBAAgB,oBAAoB,CAClC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC9B,KAAK,EAAE,SAAS,GACf,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAqBzB;AAED,wBAAgB,qBAAqB,CACnC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC7B,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAuBzB;AAED,wBAAgB,oBAAoB,CAClC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC7B,MAAM,CAWR;AA2CD,wBAAgB,wBAAwB,CACtC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC9B,KAAK,EAAE,SAAS,GACf,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAqBzB;AAED,wBAAgB,yBAAyB,CACvC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC7B,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAuBzB;AAED,wBAAgB,wBAAwB,CACtC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC7B,MAAM,CAWR;AAoBD,wBAAgB,2BAA2B,CACzC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC9B,KAAK,EAAE,SAAS,GACf,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAqBzB;AAED,wBAAgB,4BAA4B,CAC1C,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC7B,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAuBzB;AAED,wBAAgB,2BAA2B,CACzC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC7B,MAAM,CAWR;AAyBD,wBAAgB,uBAAuB,CACrC,KAAK,EAAE,OAAO,EACd,KAAK,EAAE,SAAS,GACf,OAAO,EAAE,CAWX;AAED,wBAAgB,wBAAwB,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,EAAE,CAKlE;AAED,wBAAgB,uBAAuB,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAI9D;AASD,wBAAgB,uBAAuB,CACrC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC7B,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAazB;AAED,wBAAgB,wBAAwB,CACtC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC7B,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAczB;AAED,wBAAgB,wBAAwB,CACtC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC7B,MAAM,CAIR;AAsYD,wBAAsB,mBAAmB,CACvC,KAAK,EAAE,SAAS,EAChB,GAAG,CAAC,EAAE,MAAM,GACX,OAAO,CAAC,eAAe,GAAG,IAAI,CAAC,CAYjC;AAqBD,wBAAgB,uBAAuB,CACrC,OAAO,GAAE;IACP,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,WAAW,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;IAChC,QAAQ,CAAC,EAAE,IAAI,CAAC,eAAe,EAAE,QAAQ,GAAG,cAAc,CAAC,GAAG,IAAI,CAAC;IACnE,mBAAmB,CAAC,EAAE,OAAO,CAAC;CAC1B,GACL,IAAI,CAAC,eAAe,EAAE,QAAQ,GAAG,cAAc,CAAC,CA8BlD;AAuSD,MAAM,WAAW,iBAAiB;IAChC,KAAK,EAAE,mBAAmB,CAAC;IAC3B,UAAU,EAAE,MAAM,CAAC;CACpB;AA0MD,wBAAgB,2BAA2B,CACzC,QAAQ,EAAE,OAAO,EACjB,KAAK,EAAE,SAAS,GACf,iBAAiB,EAAE,CAErB;AAkVD,MAAM,WAAW,4BAA4B;IAC3C,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,+EAA+E;IAC/E,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,qFAAqF;IACrF,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,sEAAsE;IACtE,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,SAAS,gBAAgB,EAAE,CAAC;IACpC,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,aAAa;IAC5B,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,SAAS,EAAE,IAAI,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,yBAAyB,CAAC;IACpC,MAAM,EAAE,gBAAgB,EAAE,CAAC;IAC3B,MAAM,EAAE,MAAM,CAAC;IACf,gBAAgB,EAAE,MAAM,EAAE,CAAC;IAC3B,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,QAAQ,EAAE,MAAM,EAAE,CAAC;CACpB;AAED,wBAAsB,qBAAqB,CAAC,OAAO,EAAE,4BAA4B,GAAG,OAAO,CAAC,aAAa,CAAC,CAYzG;AA2YD,wBAAgB,uBAAuB,CAAC,MAAM,EAAE,eAAe,GAAG,MAAM,CAKvE;AAED,wBAAgB,iCAAiC,CAC/C,MAAM,EAAE,MAAM,EACd,KAAK,EAAE,MAAM,GACZ,MAAM,CAKR;AAkbD,wBAAsB,sBAAsB,CAAC,KAAK,GAAE,SAA0B,EAAE,oBAAoB,UAAQ,GAAG,OAAO,CAAC;IAAE,SAAS,EAAE,KAAK,CAAC;IAAC,gBAAgB,EAAE,MAAM,EAAE,CAAC;IAAC,OAAO,EAAE,MAAM,EAAE,CAAA;CAAE,CAAC,CA+D1L;AAsVD,wBAAsB,MAAM,CAAC,IAAI,GAAE,SAAS,MAAM,EAA0B,GAAG,OAAO,CAAC,IAAI,CAAC,CAmB3F"}

package/dist/cli.js

@@ -1,8 +1,13 @@
 #!/usr/bin/env node
+import { parseDirectoryRules, checkDirectory, checkLoreAccess } from "./directory-policy.js";
 import { reportCommand, runTelemetryCommand, telemetryEnabled, trackedCommand, TELEMETRY_HELP } from "./telemetry.js";
 import { secureWindowsDirectory, windowsPermissionsArePrivate } from "./windows-permissions.js";
 import { COMMAND_GUIDES, ROOT_HELP, helpTopic } from "./command-help.js";
 import { runShareCommand } from "./share.js";
+import { prepareConnection, persistConnection, listConnections } from "./connections.js";
+import { connectionReferences, resolveLocalConnection } from "./directory-policy.js";
+import { withDirectoryLock } from "./reliability-store.js";
+import { runConfigCommand } from "./config-command.js";
 import { codexApprovalDetail, inspectCodexHookApproval } from "./codex-hook-approval.js";
 import { claudeOnlyCommand, disableDevinCli, runDevinCliHook } from "./devin-cli.js";
 import { access, chmod, copyFile, mkdir, open, readFile, readdir, rename, rm, stat, writeFile, } from "node:fs/promises";
@@ -90,6 +95,7 @@ Usage:
   lore connect --token <token> [options]
 
 Options:
+  --name <name>           Name this account/workspace connection (e.g. work)
   --url <url>           Lore API base URL (default: https://api.uselore.co)
   --dashboard-url <url> Lore dashboard URL (default: https://uselore.co for hosted Lore)
   --login               Approve access securely in the Lore dashboard
@@ -936,7 +942,13 @@ function parseConnectorConfig(value) {
         : undefined;
     return {
         version: 2,
+        ...(typeof value.connectionId === "string" ? { connectionId: value.connectionId } : {}),
+        ...(typeof value.connectionName === "string" ? { connectionName: value.connectionName } : {}),
+        ...(typeof value.accountId === "string" ? { accountId: value.accountId } : {}),
+        ...(typeof value.workspaceName === "string" ? { workspaceName: value.workspaceName } : {}),
+        ...(value.savedConnections === undefined ? {} : { savedConnections: connectionReferences(value.savedConnections) }),
         apiUrl: value.apiUrl,
+        ...(value.directories === undefined ? {} : { directories: parseDirectoryRules(value.directories) }),
         ...(dashboardUrl === undefined ? {} : { dashboardUrl }),
         ...(workspaceId === undefined ? {} : { workspaceId }),
         token: value.token,
@@ -949,7 +961,12 @@ function parseConnectorConfig(value) {
         timeoutMs,
     };
 }
-export async function readConnectorConfig(paths) {
+export async function readConnectorConfig(paths, cwd) {
+    if (cwd !== undefined) {
+        if (await readConnectorConfig(paths) === null)
+            return null;
+        return parseConnectorConfig(await resolveLocalConnection(cwd, paths.home));
+    }
     try {
         return parseConnectorConfig(JSON.parse(await readFile(paths.config, "utf8")));
     }
@@ -1039,6 +1056,7 @@ async function authenticatedIdentity(apiUrl, token, timeoutMs) {
             headers: {
                 accept: "application/json",
                 authorization: `Bearer ${token}`,
+                "x-lore-connection-identity": "1",
             },
             signal: AbortSignal.timeout(timeoutMs),
         });
@@ -1392,6 +1410,7 @@ async function installRuntime(paths) {
         await Promise.all([
             rm(paths.runtime, { force: true }),
             rm(paths.runtimeRepository, { force: true }),
+            rm(resolve(dirname(paths.runtime), "directory-policy.js"), { force: true }),
             rm(paths.runtimeReliabilityStore, { force: true }),
             rm(resolve(dirname(paths.runtime), "windows-permissions.js"), { force: true }),
             rm(paths.runtimeSignedSnapshot, { force: true }),
@@ -1413,7 +1432,7 @@ async function installRuntime(paths) {
     const imageCapture = (await readFile(resolve(sourceDirectory, "image-capture.js"), "utf8")).replaceAll("@lore-co/core/image-bytes", "./image-bytes.js");
     const [runtime, repository, reliabilityStore, signedSnapshot, canonicalJson, contextFallback, invocationHealthWriter,] = await Promise.all([
         readFile(resolve(sourceDirectory, "runtime.js"), "utf8"),
-        readFile(resolve(sourceDirectory, "repository.js"), "utf8"),
+        readFile(fileURLToPath(import.meta.resolve("@lore-co/core/repository-location")), "utf8"),
         readFile(resolve(sourceDirectory, "reliability-store.js"), "utf8"),
         readFile(resolve(sourceDirectory, "signed-snapshot.js"), "utf8"),
         readFile(canonicalJsonModule, "utf8"),
@@ -1431,6 +1450,7 @@ async function installRuntime(paths) {
         "image-bytes.js": imageBytes,
         "image-capture.js": imageCapture,
         "repository.js": repository,
+        "directory-policy.js": (await readFile(fileURLToPath(import.meta.resolve("@lore-co/core/local-scope")), "utf8")).replaceAll("./repository-location.js", "./repository.js"),
         "reliability-store.js": reliabilityStore,
         "windows-permissions.js": await readFile(resolve(sourceDirectory, "windows-permissions.js"), "utf8"),
         "signed-snapshot.js": standaloneSignedSnapshot,
@@ -1454,6 +1474,7 @@ async function installRuntime(paths) {
         atomicWrite(resolve(dirname(paths.runtime), "image-bytes.js"), imageBytes, 0o600),
         atomicWrite(resolve(dirname(paths.runtime), "image-capture.js"), imageCapture, 0o600),
         atomicWrite(paths.runtimeRepository, repository, 0o600),
+        atomicWrite(resolve(dirname(paths.runtime), "directory-policy.js"), runtimeFiles["directory-policy.js"], 0o600),
         atomicWrite(paths.runtimeReliabilityStore, reliabilityStore, 0o600),
         atomicWrite(resolve(dirname(paths.runtime), "windows-permissions.js"), runtimeFiles["windows-permissions.js"], 0o600),
         atomicWrite(paths.runtimeSignedSnapshot, standaloneSignedSnapshot, 0o600),
@@ -1524,7 +1545,8 @@ function parseConnectArguments(args) {
             parsed.recovery = false;
             continue;
         }
-        if (argument !== "--url" &&
+        if (argument !== "--name" &&
+            argument !== "--url" &&
             argument !== "--dashboard-url" &&
             argument !== "--token" &&
             argument !== "--agent" &&
@@ -1534,7 +1556,10 @@ function parseConnectArguments(args) {
         }
         const [value, valueIndex] = valueAfter(args, index, argument);
         index = valueIndex;
-        if (argument === "--fallback") {
+        if (argument === "--name") {
+            parsed.connectionName = value;
+        }
+        else if (argument === "--fallback") {
             if (!isLaunchable(value))
                 throw new Error(`--fallback must be ${LAUNCHABLE_AGENTS.join(", ")}`);
             parsed.fallback = value;
@@ -1591,6 +1616,21 @@ function writeResult(value, json, text) {
     process.stdout.write(json ? `${JSON.stringify(value, null, 2)}\n` : text);
 }
 export async function connectWithCredential(options) {
+    if (platform() !== "darwin" && platform() !== "linux" && !isWindows()) {
+        throw new Error("Lore agent integrations support macOS, Linux, and Windows");
+    }
+    if (options.recovery === false && options.fallback)
+        throw new Error("--no-recovery cannot be combined with --fallback.");
+    if (!options.token.trim())
+        throw new Error("Workspace token cannot be empty");
+    const paths = getLorePaths(options.home, options.home === undefined ? process.env : {}, options.cwd);
+    const previous = await readConnectorConfig(paths);
+    const verifiedIdentity = await authenticatedIdentity(normalizeApiUrl(options.apiUrl), options.token.trim(), options.timeoutMs ?? previous?.timeoutMs ?? 2500);
+    await secureWindowsDirectory(paths.loreDirectory);
+    await mkdir(paths.loreDirectory, { recursive: true, mode: 0o700 });
+    return withDirectoryLock(resolve(paths.loreDirectory, "connections.lock"), () => connectWithCredentialLocked(options, verifiedIdentity));
+}
+async function connectWithCredentialLocked(options, identity) {
     if (platform() !== "darwin" && platform() !== "linux" && !isWindows()) {
         throw new Error("Lore agent integrations support macOS, Linux, and Windows");
     }
@@ -1607,7 +1647,11 @@ export async function connectWithCredential(options) {
         throw new Error("Workspace token cannot be empty");
     }
     const timeoutMs = options.timeoutMs ?? existing?.timeoutMs ?? 2_500;
-    const identity = await authenticatedIdentity(apiUrl, token.trim(), timeoutMs);
+    const previousIdentity = existing && !existing.connectionId
+        ? existing.apiUrl === apiUrl && existing.token === token ? identity
+            : await authenticatedIdentity(existing.apiUrl, existing.token, timeoutMs).catch(() => undefined)
+        : undefined;
+    const connection = await prepareConnection(paths, identity, { apiUrl, token, ...(options.connectionName ? { connectionName: options.connectionName } : {}) }, previousIdentity);
     await secureWindowsDirectory(paths.loreDirectory);
     const recoveryEnv = options.home === undefined ? process.env : { ...process.env, ZDOTDIR: paths.home };
     let recoveryWarning;
@@ -1688,6 +1732,7 @@ export async function connectWithCredential(options) {
             .map((installation) => installation.configPath);
     }
     const config = {
+        ...connection.fields,
         version: 2,
         apiUrl,
         ...(dashboardUrl === undefined ? {} : { dashboardUrl }),
@@ -1695,16 +1740,21 @@ export async function connectWithCredential(options) {
         token: token.trim(),
         agents,
         agentConfigPaths,
-        connectedAt: existing?.connectedAt ?? now.toISOString(),
+        connectedAt: connection.profiles.find(value => value.connectionId === connection.fields.connectionId)?.connectedAt ?? now.toISOString(),
         timeoutMs,
     };
     const reliabilityStore = new ReliabilityStore(identity.workspaceId, {
         home: paths.home,
+        connectionId: config.connectionId,
     });
     await reliabilityStore.initialize();
-    await reliabilityStore.migrateLegacyQueue(paths.queue);
-    await atomicWrite(paths.config, `${JSON.stringify(config, null, 2)}\n`, 0o600);
+    await persistConnection(paths, config, connection.profiles);
+    if (existing && !existing.connectionId && existing.apiUrl === apiUrl && existing.token === token) {
+        await new ReliabilityStore(identity.workspaceId, { home: paths.home }).transferPendingTo(reliabilityStore);
+        await reliabilityStore.migrateLegacyQueue(paths.queue);
+    }
     if (existing !== null &&
+        !existing.connectionId &&
         existing.workspaceId === undefined &&
         existing.apiUrl === apiUrl &&
         existing.token === token.trim()) {
@@ -1726,7 +1776,7 @@ export async function connectWithCredential(options) {
         config: paths.config,
         changedHookFiles,
         backups,
-        warnings: [...requestedExpansion.warnings, ...hostRecoveryWarnings, ...(agents.includes("codex")
+        warnings: [...(connection.needsFolders ? [`Lore is off for ${config.connectionName} until you add folder rules. Run lore config open --connection ${config.connectionName}.`] : []), ...requestedExpansion.warnings, ...hostRecoveryWarnings, ...(agents.includes("codex")
                 ? ["Codex requires hook approval. Open /hooks in Codex and review any new or changed Lore hooks, then start a fresh session. Run lore doctor to verify approval and the first invocation."]
                 : [])],
         ...(recoveryNotice ? { recoveryNotice } : {}),
@@ -1893,6 +1943,7 @@ async function connectCommand(args) {
         throw new Error("Workspace token is required. Use --login, --token <token>, LORE_WORKSPACE_TOKEN, or LORE_TOKEN.");
     }
     const result = await connectWithCredential({
+        ...(parsed.connectionName === undefined ? {} : { connectionName: parsed.connectionName }),
         ...(parsed.fallback === undefined ? {} : { fallback: parsed.fallback }),
         recovery: parsed.recovery ?? true,
         apiUrl,
@@ -1930,6 +1981,7 @@ async function inspectReliabilityStore(config, paths) {
     try {
         const store = new ReliabilityStore(reliabilityWorkspaceKey(config), {
             home: paths.home,
+            ...(config.connectionId ? { connectionId: config.connectionId } : {}),
         });
         return { inspection: await store.inspectExisting(), error: null };
     }
@@ -1990,6 +2042,7 @@ async function inspectRuntimeInstallation(required, paths) {
         "image-bytes.js": resolve(dirname(paths.runtime), "image-bytes.js"),
         "image-capture.js": resolve(dirname(paths.runtime), "image-capture.js"),
         "repository.js": paths.runtimeRepository,
+        "directory-policy.js": resolve(dirname(paths.runtime), "directory-policy.js"),
         "reliability-store.js": paths.runtimeReliabilityStore,
         "windows-permissions.js": resolve(dirname(paths.runtime), "windows-permissions.js"),
         "signed-snapshot.js": paths.runtimeSignedSnapshot,
@@ -2054,6 +2107,7 @@ async function invocationHealth(config, paths, manifest) {
     try {
         const store = new ReliabilityStore(reliabilityWorkspaceKey(config), {
             home: paths.home,
+            ...(config.connectionId ? { connectionId: config.connectionId } : {}),
         });
         const record = await store.readStateExisting(integrationInvocationStateKey(manifest.integrationId));
         const parsed = ReliabilityInvocationRecordSchema.safeParse(record);
@@ -2171,8 +2225,8 @@ async function getAgentStatus(agent, config, paths, runtime) {
         invocationError: invocation.error,
     };
 }
-async function statusData(paths) {
-    const config = await readConnectorConfig(paths);
+async function statusData(paths, cwd) {
+    const config = await readConnectorConfig(paths, cwd);
     let configMode = null;
     try {
         const metadata = await stat(paths.config);
@@ -2192,6 +2246,7 @@ async function statusData(paths) {
         schemaVersion: "lore-cli-status-v1",
         integrationContractVersion: RELIABILITY_INTEGRATION_CONTRACT_VERSION,
         connected: config !== null,
+        connection: config?.connectionName ?? null,
         apiUrl: config?.apiUrl ?? null,
         config: paths.config,
         configMode,
@@ -2210,7 +2265,9 @@ async function statusCommand(args) {
     if (parsed === null) {
         return;
     }
-    const data = await statusData(getLorePaths());
+    const data = await statusData(getLorePaths(), process.cwd());
+    if (!parsed.json && data.connection)
+        process.stdout.write(`connection: ${data.connection}\n`);
     const agentLines = data.agents
         .map((agent) => `${agent.agent}: ${agent.configured ? "configured" : "not configured"}, installation ${agent.installation.state}, invocation ${agent.invocation.state}${agent.invocationError === null ? "" : ` (${agent.invocationError})`}, capture ${agent.capabilities.captureDurability}, guard ${agent.capabilities.guardBoundaryCoverage}/${agent.capabilities.enforcement}`)
         .join("\n");
@@ -2268,8 +2325,10 @@ export async function disconnectInstallation(paths = getLorePaths(), preservePen
     }
     await Promise.all([
         rm(paths.config, { force: true }),
+        rm(resolve(paths.loreDirectory, "connections"), { recursive: true, force: true }),
         rm(paths.runtime, { force: true }),
         rm(paths.runtimeRepository, { force: true }),
+        rm(resolve(dirname(paths.runtime), "directory-policy.js"), { force: true }),
         rm(paths.runtimeReliabilityStore, { force: true }),
         rm(paths.runtimeSignedSnapshot, { force: true }),
         rm(paths.runtimeCanonicalJson, { force: true }),
@@ -2401,8 +2460,8 @@ async function doctorCommand(args) {
         return;
     }
     const paths = getLorePaths();
-    const config = await readConnectorConfig(paths);
-    const status = await statusData(paths);
+    const config = await readConnectorConfig(paths, process.cwd());
+    const status = await statusData(paths, process.cwd());
     const checks = [];
     checks.push({
         name: "platform",
@@ -2631,7 +2690,7 @@ export async function runCli(args = process.argv.slice(2)) {
     const directory = getLorePaths().loreDirectory;
     if (!await telemetryEnabled(directory))
         return executeCli(args);
-    const before = await readConnectorConfig(getLorePaths());
+    const before = await readConnectorConfig(getLorePaths(), command === "connect" || command === "disconnect" ? undefined : process.cwd()).catch(() => null);
     const started = performance.now();
     let succeeded = false;
     try {
@@ -2662,7 +2721,7 @@ async function executeCli(args = process.argv.slice(2)) {
     const helpIndex = args.findIndex((value, index) => index > 0 && (separator < 0 || index < separator) && (value === "--help" || value === "-h"));
     if (helpIndex > 0) {
         const subcommand = args[1];
-        const grouped = ["connect", "guard", "recovery", "github", "devin", "host", "self-host"].includes(command ?? "");
+        const grouped = ["connect", "config", "guard", "recovery", "github", "devin", "host", "self-host", "scope"].includes(command ?? "");
         await printCommandHelp([command, ...(grouped && subcommand && !subcommand.startsWith("-") ? [subcommand] : [])]);
         return;
     }
@@ -2675,7 +2734,30 @@ async function executeCli(args = process.argv.slice(2)) {
         return;
     }
     const commandArgs = args.slice(1);
+    if (["ask", "remember", "share", "resume", "continue"].includes(command)) {
+        const decision = await checkDirectory(process.cwd(), getLorePaths().home);
+        if (!decision.allowed)
+            throw new Error(`Lore is off in this folder. ${decision.reason}`);
+    }
     switch (command) {
+        case "connections":
+            if (commandArgs.length)
+                throw new Error("Usage: lore connections");
+            await listConnections(getLorePaths().home);
+            return;
+        case "config":
+            await runConfigCommand(commandArgs, getLorePaths().config);
+            return;
+        case "scope": {
+            if (commandArgs[0] !== "check" || commandArgs.length > 2)
+                throw new Error("Usage: lore scope check [folder]");
+            const paths = getLorePaths();
+            const cwd = resolve(commandArgs[1] ?? process.cwd());
+            const config = await readConnectorConfig(paths, cwd);
+            const decision = config ? await checkLoreAccess(cwd, paths.home, config) : await checkDirectory(cwd, paths.home);
+            process.stdout.write(`Lore is ${decision.allowed ? "on" : "off"} in ${cwd}\n${config?.connectionName ? `Connection: ${config.connectionName}\n` : ""}${decision.reason}${decision.pattern ? `: ${decision.pattern}` : ""}\n`);
+            return;
+        }
         case "telemetry":
             await runTelemetryCommand(commandArgs, getLorePaths().loreDirectory);
             return;
@@ -2687,22 +2769,22 @@ async function executeCli(args = process.argv.slice(2)) {
             await connectCommand(commandArgs);
             return;
         case "share":
-            await runShareCommand(commandArgs, await readConnectorConfig(getLorePaths()));
+            await runShareCommand(commandArgs, await readConnectorConfig(getLorePaths(), process.cwd()));
             return;
         case "ask":
-            await runAskCommand(commandArgs, await readConnectorConfig(getLorePaths()));
+            await runAskCommand(commandArgs, await readConnectorConfig(getLorePaths(), process.cwd()));
             return;
         case "remember":
-            await runRememberCommand(commandArgs, await readConnectorConfig(getLorePaths()));
+            await runRememberCommand(commandArgs, await readConnectorConfig(getLorePaths(), process.cwd()));
             return;
         case "guard":
-            await runGuardCommand(commandArgs, await readConnectorConfig(getLorePaths()));
+            await runGuardCommand(commandArgs, await readConnectorConfig(getLorePaths(), process.cwd()));
             return;
         case "resume":
-            await runResumeCommand(commandArgs, await readConnectorConfig(getLorePaths()), getLorePaths());
+            await runResumeCommand(commandArgs, await readConnectorConfig(getLorePaths(), process.cwd()), getLorePaths());
             return;
         case "continue":
-            await runContinueCommand(commandArgs, await readConnectorConfig(getLorePaths()), getLorePaths());
+            await runContinueCommand(commandArgs, await readConnectorConfig(getLorePaths(), process.cwd()), getLorePaths());
             return;
         case "run":
             await runWrappedAgent(commandArgs, getLorePaths(process.env.LORE_HOME));
@@ -2724,16 +2806,16 @@ async function executeCli(args = process.argv.slice(2)) {
             }
             return;
         case "attach":
-            await runAttachCommand(commandArgs, await readConnectorConfig(getLorePaths()), getLorePaths());
+            await runAttachCommand(commandArgs, await readConnectorConfig(getLorePaths(), process.cwd()), getLorePaths());
             return;
         case "machines":
-            await runMachinesCommand(commandArgs, await readConnectorConfig(getLorePaths()), getLorePaths());
+            await runMachinesCommand(commandArgs, await readConnectorConfig(getLorePaths(), process.cwd()), getLorePaths());
             return;
         case "live-host":
-            await runLiveHostCommand(commandArgs, await readConnectorConfig(getLorePaths()), getLorePaths());
+            await runLiveHostCommand(commandArgs, await readConnectorConfig(getLorePaths(), process.cwd()), getLorePaths());
             return;
         case "live-run":
-            await runLiveRunCommand(commandArgs, await readConnectorConfig(getLorePaths()), getLorePaths());
+            await runLiveRunCommand(commandArgs, await readConnectorConfig(getLorePaths(), process.cwd()), getLorePaths());
             return;
         case "github":
             await runGithubCommand(commandArgs);
@@ -2766,7 +2848,7 @@ async function executeCli(args = process.argv.slice(2)) {
             });
             return;
         case "demo":
-            await runDemoCommand(commandArgs, await readConnectorConfig(getLorePaths()));
+            await runDemoCommand(commandArgs, await readConnectorConfig(getLorePaths(), process.cwd()));
             return;
         case "update":
             await updateCommand(commandArgs);