CoTrinity — trusted programming assistant (members)

SoT key: tribal:shared:member:cotrinity-ide
As-of: 2026-08-17T16:20Z · Extension tip: 1.0.47 · CLI tip: 0.8.7

What it is

OmniLore CoTrinity is a trusted programming assistant for VS Code and Cursor.

It helps with code, reviews, tests, and docs on your machine first. When connected to OmniLore, it can use approved company knowledge and permissioned tools — not unrestricted shell.

Two product shapes:

| Shape | What you get |
|-------|----------------|
| IDE extension | CoTrinity Chat, Control Center, desk workflows, Agent Runs, RepoHub forge commands |
| Fabric CLI / TUI | Terminal doctor, product answers, agent/orch ladder, forge helpers — COTRINITY_CLI.md |

Primary product for day-to-day coding is the IDE extension. The CLI is the terminal twin (not full IDE parity).

What “trusted” means

| Means | Does not mean |
|-------|-------------------|
| Local-first private code help | Never wrong about code |
| Org answers grounded or fail-closed | Fully autonomous merge/deploy |
| Tools only within allowlists | Better pure autocomplete than every cloud IDE |
| RepoHub (not GitHub.com) for forge | Free shell or unrestricted forge write |

IDE hosts (honest)

| Host | CoTrinity | Account wall |
|------|-----------|--------------|
| VS Code | Supported — recommended | No Cursor account |
| Cursor | Supported (same extension package) | Cursor account required to run Cursor |

OmniLore does not issue Cursor accounts.
CoTrinity Chat + local models + OmniLore fabric tools do not require Cursor Pro.
Cursor’s own Agent / Tab / Composer still follow Cursor’s plan.

Install (summary)

Use the versioned VSIX from your org ops pack (current tip 1.0.47 — package.json + provenance on disk):

# Prefer CLI install helper (finds VSIX under ops):
~/omnilore/ops/bin/cotrinity vsix
~/omnilore/ops/bin/cotrinity install --host code    # or cursor

# Manual:
code --install-extension /path/to/omnilore-cotrinity-1.0.47.vsix --force
# or:
cursor --install-extension /path/to/omnilore-cotrinity-1.0.47.vsix --force

Verify checksum when provided (SHA256SUMS-1.0.47.txt next to the VSIX).
Then Developer: Reload Window. Prefer VS Code if you want fewer third-party account walls.

Full guide: ops docs/USER_GUIDE_COTRINITY_VSCODE_CURSOR_2026-08-08.md
Team front door: tribal:shared:member:product-front-door

Tip history (members)

| Version | What landed (high-signal) |
|---------|---------------------------|
| 1.0.40–1.0.42 | RepoHub project list + dashboard scaffold; URL/DOM harden; drop settings-token fallback (PR-0) |
| 1.0.45 | Live MCP endpoint fingerprint + trust gates (CT-1/5/6) |
| 1.0.46 | Dist-only VSIX packaging (CT-4/9) — no dual-tree legacy entry |
| 1.0.47 | Grant fingerprint SHA-256 aligned with CLI (CT-7); awake honesty fail-closed on store errors (CT-8); rejects chat baseUrl=api.omnilore.ai (MCP is not a coding model host) |

Reinstall 1.0.47 on any seat still on older VSIX so grants and packaging match the CLI.

Planes (mental model)

| Plane | Purpose | Needs fabric? |
|-------|---------|----------------|
| Desk (local) | Local chat (Ollama), review/tests/docs, private index, desk FS tools | No |
| Fabric (MCP) | SoT product answers, forge/RepoHub, fabric health, continuity | Yes (tunnel or public API) |

Product questions must use fabric tools (product_answer / Ask with Fabric) — local models alone invent.

Do not point the chat provider (coding model) at https://api.omnilore.ai — that host is fabric MCP, not Ollama. Daily coding stays local (http://127.0.0.1:11434) when you have a seat model.

RepoHub integration (forge)

CoTrinity and Chat both talk to RepoHub (Forgejo) — not GitHub.com — under membership / PAT policy.

In CoTrinity Chat (agent mode)

| Ask | Agent / tool | Result |
|-----|--------------|--------|
| “What are my projects in RepoHub?” | forge_list_projects | Table: name, full_name, private, updated, link |
| “Build a lightweight dashboard for these projects” | scaffold_repohub_dashboard | Writes repohub-dashboard/index.html + projects.json (confirm dialog) |
| Read / write / PR | Production forge commands + MCP coding profile | API commits; default-branch writes need Owner ack (ST-4) |

Requirements

Extension ≥ 1.0.47 recommended, mode agent, desk tools enabled
MCP signed in (Production — Sign In or MCP token; shared path with CLI ~/.config/omnilore/mcp-http-bearer.token)
A workspace folder open (dashboard path is path-jailed)

Safety: Dashboard links allow only http(s) on RepoHub/LAN hosts; render uses DOM textContent/setAttribute (no untrusted innerHTML href injection).

Also without chat: OmniLore: Production — Forge List Projects · CLI cotrinity forge projects.

Command palette (high-signal forge)

| Command | Use |
|---------|-----|
| Production — Forge List Projects | Your private repos |
| Production — Forge Create Project | New private repo |
| Production — Forge Read / Write File(s) | API commit (size-capped) |
| Production — Forge Create / List / Get Pull | PR control plane |

Heavy multi-file work is still better with a local clone + CoTrinity desk workflows. Chat also has a Code workspace rail — CODE_WORKSPACES_CHAT.md.

Member forge law: REPOHUB_CODE_ACCESS.md.

Bounded agent runtime (1.0.41+ — Phase 4/5 library)

CoTrinity ships a shared agentRuntime plane with the terminal orchestrator:

| Means | Does not mean |
|-------|-------------------|
| User-scoped verified runtime install (workspace-writable paths refused) | Auto-download of untrusted engines |
| Digest-bound approve/reject (same digest as CLI orch resume) | One-key approve while focus is elsewhere |
| Secrets stay in VS Code SecretStorage / host adapters | Bearer tokens in the child process journal |
| Default engine bounded_v1; legacy desk loop quarantined (default off) | A second GA autonomous coding engine |

Settings (User/Application): omnilore.agent.orchestratorEngine, omnilore.agent.runtimeInstallRoot, omnilore.agent.runtimeManifestPath.
Terminal twin: COTRINITY_CLI.md (cotrinity orch …, cotrinity agent …).

Agent Runs (IDE): digest-bound Agent Runs Approve resumes orch via the CLI spawn path (same law as cotrinity orch resume --approve).

Project intent / risk (predictive coach)

CoTrinity 1.0.35+ re-absorbs dual-seat project coach patterns (not Core blackbox):

| Capability | How to use |
|------------|------------|
| Classify workspace | Desk command / ask CoTrinity to classify project class |
| Test / change risk | Risk card from git file names (heuristic HIGH/MEDIUM/SAFE) |
| Intent scaffold | Pair with Chat project_intent_propose / accept for INTENT.md |

Member how-to: PROJECT_INTENT_POSTURE_AND_CONTINUITY.md.

Terminal fabric CLI (optional — LIVE)

CoTrinity / OmniLore fabric CLI — terminal doctor + allowlisted MCP client + agent/orch.

| Item | Detail |
|------|--------|
| Binary | ops/bin/cotrinity (alias omnilore-cotrinity) |
| Version | 0.8.7 LIVE (chat Wave C+D cockpit, login/whoami, agent + orch TUI) |
| Member how-to | COTRINITY_CLI.md |

| Is | Is not |
|----|--------|
| doctor, answer, continuity, allowlisted MCP, vsix/install, tunnel-check, seat status | Full CoTrinity IDE in a terminal |
| agent / orch / forge under coding profile | Free shell / unrestricted tools |
| Same fabric law as the extension (fail-closed product truth) | “Cursor via API only” |

~/omnilore/ops/bin/cotrinity doctor
~/omnilore/ops/bin/cotrinity answer "What is OmniLore?"
~/omnilore/ops/bin/cotrinity chat --mode auto          # multi-turn OmniLore + agent
~/omnilore/ops/bin/cotrinity forge projects
~/omnilore/ops/bin/cotrinity orch tui --line --workspace .

Desktop seat capture (screenshots)

CoTrinity can request a screenshot of this machine when the seat implementer is running and you granted capture.

| Item | Detail |
|------|--------|
| Extension | ≥ 1.0.39 recommended (tip 1.0.47) |
| On this PC | ~/omnilore/ops/bin/omnilore-desk enroll · seat agent active · grant-capture — DESKTOP_SEAT_CAPTURE |
| In chat | “Take a screenshot” / “seat status” |
| Commands | OmniLore: Seat screenshot · Seat implementer status |

Same implementer powers remote Chat capture when this PC stays online.

Related product surfaces

| Surface | Role |
|---------|------|
| chat.omnilore.ai | Fabric chat — OmniLore / CodeHub modes; Code workspaces rail |
| repohub.omnilore.ai | Private git host (RepoHub) |
| CoTrinity IDE | Local coding + forge MCP |
| CoTrinity CLI | Terminal fabric + agent/orch |

End member CoTrinity IDE page.