@tanagram/lore 0.1.53 → 0.1.55

package/README.md

@@ -2,9 +2,117 @@
 
 The command-line interface for Lore.
 
+## Privacy: Lore only uploads from directories you allow
+
+By default the Lore daemon does **not** auto-upload any Claude Code
+session. You have to opt in per directory. This is the consent-first
+contract:
+
+- Sessions whose cwd is not under one of your upload directories are
+  ignored by the daemon — they stay on your machine.
+- The explicit commands (`lore export`, `lore share-codex`,
+  `lore share-cowork`) are user-initiated and bypass the upload-dir
+  gate. You can always opt-in per session.
+- The allowlist lives in `~/.lore/upload_dirs.json` (`~/.lore-dev/` in
+  dev), written with 0600 mode so other users on the same machine can't
+  read it.
+
+Adding directories takes a single keystroke on first login — the TUI
+shows your most-recent Claude Code project cwds with the top three
+pre-checked, and pressing Enter accepts them. After that, manage the
+list with `lore listen`:
+
+```sh
+lore listen create ~/code/projectA            # watch ~/code/projectA
+lore listen create ~/work --org acme          # route work to a non-default org
+lore listen list                              # tabular output
+lore listen list --json                       # for scripts
+lore listen update ~/work --org other-corp    # reassign org
+lore listen delete ~/code/projectA            # stop uploading from
+```
+
+Matching uses path-separator-aware **prefix-tree** semantics, so adding
+`~/code` covers `~/code/projectA`, `~/code/projectA/src`, etc., but
+deliberately does **not** cover `~/code-other`. The most-specific
+matching entry wins, so you can have a broad personal `~/` allow plus a
+narrower `~/work` override that routes to a different org.
+
+## Interactive TUI
+
+Running `lore` with no subcommand drops you into an interactive Ink
+dashboard when stdin and stdout are TTYs:
+
+```
+┌── lore — matt@tanagram.ai · tanagram ─────────────────── v0.1.50 ──┐
+│                                                                    │
+│  ╭─ Daemon ──────────────────╮  ╭─ Workspace ─────────────────────╮ │
+│  │ ● Status     running       │  │ ● User      matt@tanagram.ai   │ │
+│  │ ● Enabled    yes           │  │ ● Display   Matt               │ │
+│  │ ● Running    yes           │  │ ● Org       tanagram           │ │
+│  │ ● Heartbeat  12s ago       │  │ ● Skills    8 installed · 3    │ │
+│  │ ● Last upload  3m ago      │  │             published          │ │
+│  ╰────────────────────────────╯  ╰────────────────────────────────╯ │
+│                                                                    │
+│  ╭─ Quick actions ───── ↑/↓ or j/k · Enter to choose · q to quit ─╮ │
+│  │ › Share Codex session       lore share-codex --session-file …  │ │
+│  │   Share Cowork session       lore share-cowork                  │ │
+│  │   Export latest Claude       lore export                        │ │
+│  │   Inspect background daemon  lore status                        │ │
+│  │   List installed skills      lore skills list                   │ │
+│  │   …                                                             │ │
+│  ╰─────────────────────────────────────────────────────────────────╯ │
+└────────────────────────────────────────────────────────────────────┘
+```
+
+Picking an action exits the dashboard and re-enters the matching
+subcommand exactly as if you had typed it yourself — auth checks,
+metrics, and error formatting all flow through the same path.
+
+The interactive flows (`lore login`, `lore enable` / `disable` /
+`restart` / `status`, and the three share/export commands) also render
+through Ink in TTY mode:
+
+- **`lore login`** — three labelled steps (negotiating with WorkOS →
+  device code panel → polling), then a success box with the resolved
+  LaunchAgent paths. Distinct copy for timed-out / denied / expired.
+  On first login the device-code flow is followed by a one-screen
+  "Configure upload directories" wizard so the daemon has explicit
+  consent to upload anything (see Privacy section above).
+- **`lore enable` / `disable` / `restart`** — spinner with mode-specific
+  copy while launchctl works, then a success or error MessageBox.
+- **`lore status`** — two-panel view (health on the left, paths on the
+  right) with severity dots and a "Not healthy" callout pointing at
+  `lore restart` / `lore logs` when something is off.
+- **`lore export` / `share-codex` / `share-cowork`** — four-step pipeline
+  display (resolving → uploading → parsing → updating visibility) with
+  the resulting URL highlighted in a success box.
+
+### Disabling the TUI
+
+The TUI is presentation only — every command produces identical
+stdout in non-TTY contexts (scripts, CI, piped output). To force the
+plain rendering even in a TTY:
+
+- pass `--no-tui` at the top level: `lore --no-tui status`
+- or set `LORE_NO_TUI=1` in the environment.
+
+`lore status --json` always prints JSON and never mounts the TUI.
+
+The plain path is also taken automatically whenever:
+
+- stdout or stdin is not a TTY (piped, redirected, or scripted)
+- `CI` is set to a truthy value
+- `TERM=dumb`
+
+### TUI architecture (for contributors)
+
+See [AGENTS.md](./AGENTS.md) for the contributor guide on adding new
+screens, the presentation/handler split, and the TTY-detection contract.
+
 ## Subcommands
 
-- `lore` — prints help text.
+- `lore` — opens the interactive dashboard in a TTY; prints help text
+  in non-TTY contexts.
 - `lore login` — authorizes the CLI against your Lore workspace using WorkOS
   CLI Auth's device-code flow. On macOS, also auto-runs `lore enable` to
   install and start the background uploader; if that step fails, login still
@@ -17,6 +125,14 @@ The command-line interface for Lore.
 - `lore disable` — stops and removes the macOS background uploader.
 - `lore restart` — restarts the macOS background uploader.
 - `lore status` / `lore status --json` — shows background uploader health.
+- `lore listen create <path> [--org <name>]` — allowlist a directory for
+  daemon auto-uploads. Defaults to your active organization; pass
+  `--org` to route a directory at a non-default workspace.
+- `lore listen list [--json]` — print the directories the daemon may
+  auto-upload from, with their target org.
+- `lore listen update <path> --org <name>` — reassign an existing
+  upload directory to a different organization.
+- `lore listen delete <path>` — stop uploading from a directory.
 - `lore organizations list` — calls `/api/whoami` and prints the WorkOS
   organizations the authenticated user currently belongs to.
 - `lore export` — uploads a single Claude Code session on demand and prints a