CLI Reference

Oore CI provides two command-line tools:

• oored — the daemon (control plane and API server)
• oore — the operator CLI for setup, administration, and daily use

Validate repository pipeline YAML locally with the exact parser used by the daemon and runner:

oore pipeline validate .oore.yaml

oored (Daemon)

The daemon serves the HTTP API and manages instance state.

Commands

Command	Description	Status
oored run	Start the daemon	Implemented
oored install-service	Install and optionally start a macOS launchd user service	Implemented
oored uninstall-service	Stop and remove the launchd user service	Implemented
oored version	Print version information	Implemented

oored run

oored run [--listen <addr>] [--state-file <path>]

Flag	Default	Env var	Description
--listen	127.0.0.1:8787	OORED_LISTEN_ADDR	Address and port to listen on
--state-file	Platform default	OORE_SETUP_STATE_FILE	Override database path

The default database path is ~/Library/Application Support/oore/oore.db. The encryption key is stored at ~/Library/Application Support/oore/encryption.key.

In default mode, oored starts an embedded local runner automatically. Set OORED_RUNNER_MODE=external to disable the embedded runner and require an external runner process.

oored install-service

oored install-service [--listen <addr>] [--state-file <path>] [--label <label>] [--env KEY=VALUE] [--no-start] [--system --user <name>]

Installs oored as a macOS launchd user service. The default service label is build.oore.oored, and the plist is written to ~/Library/LaunchAgents/build.oore.oored.plist.

Flag	Default	Env var	Description
--listen	127.0.0.1:8787	OORED_LISTEN_ADDR	Address and port used by the service
--state-file	Platform default	OORE_SETUP_STATE_FILE	Override database path
--label	build.oore.oored	none	Override the launchd service label and plist name
--env KEY=VALUE	none	none	Add or override an environment variable in the launchd plist. Repeat for multiple variables
--no-start	false	none	Write the plist without bootstrapping the service
--system	false	none	Install a boot-time LaunchDaemon; requires root
--user	none	none	Account that runs the LaunchDaemon; required with --system

The service uses the currently running oored executable, keeps the daemon alive with launchd, writes logs to ~/.oore/logs/oored.log, and preserves the same embedded-runner default as oored run.

Examples:

# Persistent local daemon on loopback
oored install-service --listen 127.0.0.1:8787

# Production reverse-proxy deployment
oored install-service \
  --listen 127.0.0.1:8787 \
  --env OORE_PUBLIC_URL=https://ci.mycompany.com \
  --env OORE_CORS_ORIGINS=https://ci.mycompany.com

# Custom database path
oored install-service \
  --state-file "$HOME/Library/Application Support/oore-prod/oore.db"

Useful launchd checks:

launchctl print gui/$(id -u)/build.oore.oored
sudo launchctl print system/build.oore.oored
tail -f ~/.oore/logs/oored.log

oored uninstall-service

oored uninstall-service [--label <label>] [--system]

Stops and removes the launchd user service. This deletes the plist but leaves the database, encryption key, and logs untouched.

oore (Operator CLI)

The operator CLI handles setup, authentication, and administration.

Commands

Command	Description	Status
oore setup	Interactive 4-step instance setup	Implemented
oore setup token	Generate a bootstrap token	Implemented
oore login	Authenticate in local mode or import a token	Implemented
oore status	Show setup status and authenticated operational summary	Implemented
oore runner register	Register an external build runner	Implemented
oore runner start	Start external runner process	Implemented
oore runner install-service	Install a macOS login-session runner service	Implemented
oore runner uninstall-service	Remove the managed macOS runner service	Implemented
oore config set <key> <value>	Set CLI configuration values	Implemented
oore config get <key>	Get CLI configuration values	Implemented
oore doctor	Run environment/signing diagnostics	Implemented
`oore backup create	verify	restore`
oore update	Safely install a verified release update	Implemented

Global behavior

• All commands that communicate with the daemon accept --daemon-url (default: http://127.0.0.1:8787, env: OORE_DAEMON_URL)
• The CLI stores local defaults in ~/.oore/config.json (override path via OORE_CONFIG_FILE)
• State database path can be overridden with --state-file or OORE_SETUP_STATE_FILE
• Default database location: ~/Library/Application Support/oore/oore.db

Embedded runner note

The single-host default flow does not require oore runner start. The daemon (oored) auto-starts an embedded local runner unless OORED_RUNNER_MODE=external.

iOS signing is the exception: use OORED_RUNNER_MODE=external and oore runner install-service so code signing runs in the logged-in macOS user session required by Apple Keychain Services.