Lore v0.1.0

First tagged release of Lore — a self-maintaining knowledge store for Claude Code and OpenAI Codex: capture non-obvious learnings, recall the relevant ones into context, and keep them fresh.

Highlights

The loop

• Recall (UserPromptSubmit hook) surfaces relevant past learnings into context — matches title + tags only, never echoes bodies.
• Capture (Stop hook + lore skill) records a learning when one is both non-obvious and reusable.
• Freshness — /lore:lint ref-check + drift triage + index regen, with an optional pre-push hook.

Security hardening (this release)

• Blocking secret scan at the push boundary — the store is committed/pushed by default and capture is autonomous, so scan_secrets.py runs in the pre-push hook and aborts the push if a learning contains a likely key, token, private key, JWT, credential URL, or hardcoded secret. Redacted output, placeholder filtering, and allowlisting (lore:allow-secret, secretAllow in .lore.json, LORE_SCAN_BLOCK=0, --no-verify).
• Capture-time prevention — the skill now references secrets instead of quoting them.
• New /lore:scan command to run the guard on demand.
• README Security section documenting the posture, the recall anti-injection design, and pinning the plugin to a reviewed tag.

Install

Claude Code:

/plugin marketplace add aoc81/lore
/plugin install lore@lore

Then /lore:init per project. OpenAI Codex: python3 codex/install.py.

Everything is stdlib Python — no dependencies, no network calls.