feat(pi): lean substrate tool surface; feat(decisions): openlore decisions record CLI

[laurentftech]

Summary

Two related changes that give Pi and default-preset collaborators the same experience as the Claude Code default.

1. Pi starts with the substrate tool surface (closes #505)

• A Pi session now activates only the MCP substrate preset tools plus openlore_configure and the new openlore_activate_tools. Before, all 45 tools were active.
• openlore_activate_tools turns on task groups (specs, memory, review, quality, inspect), by group name or by any tool name in the group. It never turns on a tool the host allowlist excluded, and it never changes non-OpenLore tools.
• All tools stay registered, so the parity guard and the daemon (--preset full) are unchanged.
• "pi": { "toolSurface": "all" } in .openlore/config.json keeps every tool active.
• One-line promptSnippets replace the duplicated full descriptions. CI budgets bound the standing context: lean ≈ 3,089 tokens against 7,445 for all (chars/4 estimate).
• A test keeps the Pi lean set equal to TOOL_PRESETS.substrate.
• Decision: ADR-0034 (848b360d). OpenSpec change archived as 2026-09-15-add-pi-lean-tool-surface; mcp-quality spec synced.

2. openlore decisions record

• The substrate default does not expose record_decision, so collaborators on default settings could not record a decision for the commit gate.
• The new CLI command calls the same handler as the MCP tool: same ids, scope inference, anchors, already-decided verdict, and background consolidation.
• Fixes two CLI hints (including the commit-gate message) that named a non-existent openlore decisions --record.
• Generated agent guidance names the CLI command when record_decision is not wired.
• OpenSpec change archived as 2026-09-15-add-decisions-record-cli; cli spec synced.

Test plan

• tsc --noEmit: no errors
• ESLint on changed files: no issues
• Vitest: 239 passed, 0 failed (Pi extension, decisions record CLI, decisions handler and autopilot, guidance coherence, TLS coverage, doc-claim sync, config schema)
• openspec validate cli|mcp-quality --type spec --strict: valid
• Manual (Pi 0.85.1, dev build via global shim): session starts with read/bash/edit/write + the 17 lean OpenLore tools; openlore_activate_tools(["specs"]) activates the 6 specs tools and openlore_list_spec_domains returns 16 domains from the daemon; repeating it reports alreadyActive: ["specs"] with no change; ["openlore_remember"] activates the whole memory group; hostExcluded: []

Not in this PR

• openlore decisions --sync drops an approved decision that maps to no spec domain and has component/local scope. It reports "Synced", writes nothing, and purges the decision from the store. Found while syncing ADR-0034; to be tracked separately.

🤖 Generated with Claude Code