total-recall-brain 3.40.7 → 3.41.0

package/scaffold/.agent/skills/total-recall/plugins/openwiki/package-lock.json

@@ -9,7 +9,7 @@
       "version": "0.1.1",
       "license": "MIT",
       "devDependencies": {
-        "total-recall-brain": "3.40.4"
+        "total-recall-brain": "^3.40.7"
       }
     },
     "node_modules/@hexagon/base64": {
@@ -2556,9 +2556,9 @@
       }
     },
     "node_modules/total-recall-brain": {
-      "version": "3.40.4",
-      "resolved": "https://registry.npmjs.org/total-recall-brain/-/total-recall-brain-3.40.4.tgz",
-      "integrity": "sha512-/9JfUWyzXcgHu3kV/rqsOvclMY25PpfW4jSrunsCrkt2MPDUDfGD+z22AoA/OG/jSHE4ZvD/A9QV4IYE2+O99w==",
+      "version": "3.40.7",
+      "resolved": "https://registry.npmjs.org/total-recall-brain/-/total-recall-brain-3.40.7.tgz",
+      "integrity": "sha512-G+sEWXVucI5Zs8uV1ie8P+mV/6cncWX76ES72T5dnPB3sFAwlcG9ous2SYTUaYUOETGB2vHTSo3cV4XWkHQ0Ww==",
       "dev": true,
       "license": "MIT",
       "workspaces": [

package/scaffold/.agent/skills/total-recall/plugins/openwiki/package.json

@@ -6,7 +6,6 @@
   "scripts": {
     "test": "node --test test/*.test.mjs"
   },
-  "dependencies": {},
   "license": "MIT",
   "files": [
     "cli.mjs",

package/scaffold/.agent/skills/total-recall/plugins/openwiki/plugin.json

@@ -131,33 +131,5 @@
   "status": {
     "command": "status",
     "refresh_seconds": 300
-  },
-  "card_layout": {
-    "template": "dashboard",
-    "regions": [
-      {
-        "widget": "status",
-        "title": "Status"
-      },
-      {
-        "widget": "live",
-        "title": "Live view"
-      },
-      {
-        "widget": "list",
-        "title": "Details",
-        "source": {
-          "command": "hubs"
-        }
-      },
-      {
-        "widget": "actions",
-        "title": "Commands"
-      },
-      {
-        "widget": "activity",
-        "title": "Recent activity"
-      }
-    ]
   }
 }

package/scaffold/.agent/skills/total-recall/plugins/security/package-lock.json

@@ -10,7 +10,7 @@
       "license": "MIT",
       "devDependencies": {
         "jsdom": "^26.1.0",
-        "total-recall-brain": "3.40.4"
+        "total-recall-brain": "^3.40.7"
       }
     },
     "node_modules/@asamuzakjp/css-color": {
@@ -2916,9 +2916,9 @@
       }
     },
     "node_modules/total-recall-brain": {
-      "version": "3.40.4",
-      "resolved": "https://registry.npmjs.org/total-recall-brain/-/total-recall-brain-3.40.4.tgz",
-      "integrity": "sha512-/9JfUWyzXcgHu3kV/rqsOvclMY25PpfW4jSrunsCrkt2MPDUDfGD+z22AoA/OG/jSHE4ZvD/A9QV4IYE2+O99w==",
+      "version": "3.40.7",
+      "resolved": "https://registry.npmjs.org/total-recall-brain/-/total-recall-brain-3.40.7.tgz",
+      "integrity": "sha512-G+sEWXVucI5Zs8uV1ie8P+mV/6cncWX76ES72T5dnPB3sFAwlcG9ous2SYTUaYUOETGB2vHTSo3cV4XWkHQ0Ww==",
       "dev": true,
       "license": "MIT",
       "workspaces": [

package/scaffold/.agent/skills/total-recall/plugins/security/plugin.json

@@ -259,37 +259,5 @@
   "distribution": {
     "tier": "official",
     "license": "open"
-  },
-  "card_layout": {
-    "template": "vault",
-    "regions": [
-      {
-        "widget": "status",
-        "title": "Status"
-      },
-      {
-        "widget": "live",
-        "title": "Live view"
-      },
-      {
-        "widget": "list",
-        "title": "Details",
-        "source": {
-          "command": "platforms"
-        }
-      },
-      {
-        "widget": "actions",
-        "title": "Commands"
-      },
-      {
-        "widget": "credentials",
-        "title": "Credentials"
-      },
-      {
-        "widget": "activity",
-        "title": "Recent activity"
-      }
-    ]
   }
 }

package/scaffold/.agent/skills/total-recall/references/auth.md

@@ -4,7 +4,7 @@ Auth is the credential owner and is shipped in Total Recall scaffold. Its source
 
 Discover `total-recall auth --help` and `total-recall auth secret --help`. The auth namespace is the only credential command path. Use `auth secret set KEY --stdin` for values, never argv, chat, logs or vault content. `auth secret list` and `catalog` expose metadata. Avoid `get` in a tool transcript; consumers resolve through the auth runtime in-process. Auth API lives under `/api/plugins/auth/secrets`; any retained legacy HTTP route is implemented by auth, never core.
 
-Select the store explicitly with the supported brain/store configuration. Existing carrier paths and encrypted data are preserved; no migration may overwrite credentials. No implicit merging of project/global stores or environment credential fallback. Auth alone manages its unlock carriers. Failed unlock/decryption must propagate; never report the store empty after failure. Rekey changes the master carrier, not provider keys: read the current rekey CLI and runbook, update every selected carrier, verify fresh-shell reads and retired-password rejection without exposing either password.
+There is one secrets store per host: the global auth store. The CLI never selects a store from the cwd (`--project` and `--layer` are refused); `TR_SECRETS_BRAIN` is the only override, for deploy, ops and tests. A per-repo `secrets.enc` is breakage: fold it in with `auth secret merge-store <dir>` (a dry run unless `--apply`; conflicts are settled only with `--take` or `--rename`) and archive it encrypted. Existing carrier paths and encrypted data are preserved; no migration may overwrite credentials. No environment credential fallback. Auth alone manages its unlock carriers. Failed unlock/decryption must propagate; never report the store empty after failure. Rekey changes the master carrier, not provider keys: read the current rekey CLI and runbook, update every selected carrier, verify fresh-shell reads and retired-password rejection without exposing either password.
 
 For provider key setup, verify against an authenticated provider operation before saving; format-only checks and timeouts are not verification. Require HTTPS except explicit loopback development, reject redirects containing credentials, and return safe errors. Rotation follows verify → store/project → deploy/verify → revoke, respecting the provider's supported recipe and user authorization. Manual provider steps remain manual. Exported environment files are deployment projections, not an alternate credential authority.
 
@@ -22,6 +22,8 @@ Before uninstall, auth decrypts/verifies the source and retains byte-identical e
 
 Auth card/panel results represent completed operations only. Passkey registration requires browser credential creation and successful server verification. HTTP reachability is not provider authentication or a security audit. Configuration is not an active rotation schedule. The scaffold installs auth and resolves declared dependencies to compatible installed host packages; missing/incompatible dependencies fail initialization.
 
+Production services own distinct, app-named keys bound to their repo with `provides` naming the app-facing variable; `auth secret get KEY` or `set KEY` run inside that repo resolves to the app's key, and elsewhere to the plain (developer) key. Read bindings, tags and provides with `auth secret list --json` (metadata only). Metadata writes never move a value's `updated_at`.
+
 Internal CLI consumers may use `auth secret get KEY --json`: a missing key returns `{found:false}`; found values remain private to the consuming process. Unlock, parsing and decryption failures are errors. `TR_SECRETS_BRAIN` selects one store for the complete operation; no project-to-global retry is permitted. Consumer transports must parse structured results, propagate failures, use stdin for writes and verify readback. Never run a value-returning command into an agent transcript.
 
 ## Mesh-identity secret sync

package/scaffold/.agent/skills/total-recall/references/memory.md

@@ -5,3 +5,7 @@
 Context returns the complete required rule set, not just a relevance-ranked search result. Treat unknown applicability conservatively. Explicit budgets govern readiness. `context:universal` is a curated permanent bootstrap, not an automatic property of every global rule. Do not infer local applicability from global descriptive facts.
 
 Use `compile` to rebuild instruction surfaces and indexes after externally maintained skill/rule sources change. Do not delete embeddings databases to force work. Inspect proposals through proposal operations; memory node enumeration excludes proposal documents. Embedding coverage counts eligible memory documents. SSSS registry/envelope validation and event receipts define persistence; projections are derived.
+
+Compilation verifies instruction output bytes and canonical file bindings before recording disposable `surface-artifacts.json`; incremental skips require intact outputs as well as unchanged inputs. Missing or edited managed instruction outputs trigger repair. Actual client consumption remains a separate verification step.
+
+OKF conversion, import/export, metadata checks and explicit `okf project` index/log generation belong to the OKF plugin. Core `export --okf`, `ingest okf` and `lint --okf` delegate to its declared active adapter and fail if the owner is unavailable. Core compilation never generates OKF index.md or log.md.

package/scaffold/.agent/skills/total-recall/references/openwiki.md

@@ -2,6 +2,8 @@
 
 OpenWiki is a plugin-owned documentation hub and ingestion capability. Discover `total-recall openwiki --help`, then `openwiki hubs --json`. Current hubs discovery reads Markdown files directly under the current project's `openwiki/` directory; ingestion recursively reads a supplied directory. The hub count is a filesystem inventory, not proof of prior graph indexing.
 
+Core initialization does not create wiki pages. Use `total-recall openwiki bootstrap --brain <absolute-brain-dir> [--project-root <absolute-repo-dir>] --json` explicitly when seed documentation is wanted. `--dry-run` previews missing pages; existing authored pages and page symlinks are preserved. The OpenWiki plugin owns these templates and their bootstrap implementation.
+
 Read existing relevant hubs before changing architecture or capability boundaries. Maintain source-linked hubs for core architecture, plugin ownership, auth/secrets, CRM and current implementation/verification state. Use normal source edits for documentation Markdown; never edit canonical memory files directly. Keep secrets, personal vault contents and generated state out of hubs.
 
 Review `openwiki ingest <absolute-directory> --dry-run --project`, then ingest through the plugin without `--dry-run`. `--global` explicitly selects the global brain. The plugin routes each document through validated `remember`; read import/error totals and actual exit status. Verify resulting `openwiki-<path-slug>` documents with local recall. A dry run does not index anything. A backend health probe does not prove graph coverage. Partial imports must be reported and repaired.

package/scaffold/.agent/skills/total-recall/references/operations.md

@@ -12,6 +12,18 @@ For research queues, discover `research --help`, select project/global scope exp
 
 Publication/deployment use the owning push/deploy procedures when authorized. Shared production services require staged health-checked zero-downtime switching and rollback. Do not use a generated restart command as permission to interrupt a serving process.
 
+## Optional developer API
+
+The full server's `/v1/invoke` requires a named auth-owned PAT with a literal `invoke:full` or `invoke:restricted` mode; legacy wildcards and dashboard sessions do not opt in. Full mode requires full grants throughout the issuer chain and intentionally grants trusted host administration, including auth-owned credentials and nested owner execution. Do not describe it as a sandbox or give it to a restricted consumer to bypass a denial.
+
+Restricted `ssss.read` additionally requires `ssss:read` and `brain:server`, uses local server-brain retrieval and spends no provider credits. Restricted `ssss.write` requires `ssss:write` and `brain:server` and creates descriptive facts only through the shared memory owner with generated create-only paths, exact schemas and generator-free local indexing. The same owner supports local `remember fact "content" --confined-fact`. Arbitrary mutation metadata, rule categories, CLI/plugin/composed execution and paid decisions remain unavailable. Capabilities omit denied operations. Fresh role/issuer/expiry/revocation checks, controlled child environment, filesystem permissions, concurrency/time/output bounds and validated SSSS execution audit apply. Mutation errors preserve known commit/index state or report unknown commit state after interruption; effects already committed cannot be rolled back. Provider quotas, broader owner adapters and the complete API/launch journey remain separate acceptance work. Read the shipped `docs/reference/cli-reference.md` developer API contract before migration or execution.
+
 ## Uniform dependency updates
 
+Project registration automatically creates and records its stable UUID through the existing identity owner. Malformed/non-object identities are preserved and fail explicitly; provisioning failure must not register an incomplete fallback. `project-id --all` is for legacy reconciliation, not a required step after ordinary registration.
+
+Restricted memory also accepts `project:<uuid>` with the effective auth scope `brain:project-<uuid>` plus its read/write scope. Use existing brain registration/on/off, project-id and auth-key commands. Only registered, enabled, canonical identity-matched brains execute; discovery lists granted usable IDs, never paths. Running work pins and revalidates that binding; removal, disablement or identity/path changes stop continuation. Project-only keys have no implicit server access. Writes retain the closed descriptive fact schema and validated SSSS owner.
+
+Full-mode `decision.run` and `decision.predict` execute the installed owner in bounded children, with auth-owner credential resolution inside the child. Timeout, output overflow, client disconnect and revoked authority terminate local continuation. Decision failure envelopes suppress child diagnostics; credential/provider failures are explicit. Cancellation cannot reverse accepted remote billing. Spending quotas and broader restricted adapters remain separate acceptance work.
+
 Use `total-recall update --all-brains` to plan both SSSS and Total Recall updates across registered brains, installed plugin owners and nested consumers. Add `--apply` to pin the resolved published releases, refresh npm/pnpm locks and verify actual package resolution; `--json` returns per-consumer results and failures. Extra roots use repeatable `--repo` or `TR_SYNC_REPOS`. Every consumer owns a local installation: a shared node_modules link is detached without mutating its former target and restored on failure. Missing versions, unsupported managers, newer previews and verification mismatches fail explicitly. This updates local dependencies; it does not deploy services or merge brains.

package/src/cli/brain.mjs

@@ -108,7 +108,7 @@ async function handleEnsure(targetArgs, globalBrainDir) {
   console.log(`     Repo:  ${result.repoRoot}`);
   console.log(`     Brain: ${result.brainDir}`);
   console.log(`     complete=${health.complete} full_brain=${health.full_brain}`);
-  console.log(`     openwiki files +${result.openwiki?.files_added || 0}, dirs +${result.dirs_created}`);
+  console.log(`     directories created +${result.dirs_created}`);
   console.log('');
 }
 
@@ -213,7 +213,7 @@ async function handleRegister(registryPath, targetArgs) {
     process.exit(1);
   }
 
-  // Full project brain for any user repo (vault, openwiki, sessions, …)
+  // Full project brain for any user repo (vault, sessions, registry, …)
   try {
     const { ensureFullProjectBrain } = await import('../core/project-brain.mjs');
     const globalBrainDir = path.join(getGlobalAgentDir(), 'skills', 'total-recall');
@@ -226,6 +226,8 @@ async function handleRegister(registryPath, targetArgs) {
     console.log(`  ✅ Full project brain ready at ${path.join(absoluteRoot, '.agent', 'skills', 'total-recall')}`);
   } catch (err) {
     console.error(`  ⚠️  Could not fully provision brain layout: ${err.message}`);
+    process.exitCode = 1;
+    return;
   }
 
   const brainDir = path.join(absoluteRoot, '.agent', 'skills', 'total-recall');

package/src/cli/context-stats.mjs

@@ -0,0 +1,104 @@
+/**
+ * total-recall context-stats — read the capsule measurement ledger.
+ *
+ * Answers the questions a context-policy decision actually needs:
+ *   - Which actions overflow, and how often (a rate, not an anecdote)?
+ *   - How close is the required set to the budget, per action?
+ *   - Which rules are force-included on every call?
+ *
+ * Read-only. Measurement is recorded by `total-recall context`.
+ */
+import path from 'node:path';
+import { getBothBrains, parseLayerFlag } from './agent-dir.mjs';
+import { readLedger, summariseLedger, ledgerPath, telemetryEnabled } from '../core/context-telemetry.mjs';
+import { readConfigValue } from './config.mjs';
+
+const pct = (n) => `${Math.round(n * 100)}%`;
+
+function renderSummary(summary, { budget, ledger }) {
+  const lines = [];
+  if (summary.samples === 0) {
+    lines.push('No capsule measurements recorded yet.');
+    lines.push('');
+    lines.push('Every `total-recall context` call records one line. Run a few, then re-check.');
+    return lines.join('\n');
+  }
+  lines.push(`Capsule measurements: ${summary.samples} sample(s)`);
+  lines.push(`Range: ${summary.first_at} → ${summary.last_at}`);
+  if (budget) lines.push(`Configured budget: ${budget}`);
+  lines.push('');
+  lines.push('By action:');
+  lines.push('  action        samples  overflow    required(avg/max)  excluded');
+  for (const a of summary.actions) {
+    lines.push(`  ${String(a.action).padEnd(12)}  ${String(a.samples).padStart(7)}  ${pct(a.overflow_rate).padStart(8)}  ${String(a.required_avg).padStart(8)}/${String(a.required_max).padEnd(8)}  ${a.excluded_total}`);
+  }
+  if (budget) {
+    const worst = summary.actions[0];
+    if (worst) {
+      lines.push('');
+      const head = worst.required_max - budget;
+      lines.push(head > 0
+        ? `Headroom: NEGATIVE on '${worst.action}' by ${head} tokens at its largest sample.`
+        : `Headroom: ${budget - worst.required_max} tokens at the largest required set ('${worst.action}').`);
+    }
+  }
+  if (summary.most_required.length) {
+    lines.push('');
+    lines.push('Rules included most often (candidates for action-scoping):');
+    for (const r of summary.most_required.slice(0, 15)) {
+      lines.push(`  ${String(r.appearances).padStart(6)}x  ${r.id}`);
+    }
+  }
+  lines.push('');
+  lines.push(`Ledger: ${ledger}`);
+  lines.push('Identifiers and counts only; never rule text or capsule content.');
+  return lines.join('\n');
+}
+
+export default async function contextStats(args = []) {
+  if (args.includes('--help') || args.includes('-h')) {
+    console.log('Usage: total-recall context-stats [--json] [--limit N] [--project|--global]\n\nRead-only summary of capsule measurements recorded by `total-recall context`.\nReports overflow rate per action, required-token headroom, and which rules are\nincluded most often (the input to action-scoping a rule).\n\nEnvironment: TR_CONTEXT_TELEMETRY=off stops recording (this command then reports\nno samples). TR_CONTEXT_LEDGER_MAX_BYTES caps the ledger (default 8 MiB).');
+    return;
+  }
+  // parseLayerFlag consumes --global/--project and returns what is left, so the
+  // loop must read `remainingArgs`; reading `args` re-rejected the layer flag.
+  const { layer, remainingArgs } = parseLayerFlag(args);
+  let isJson = false, limit = 0;
+  for (let i = 0; i < remainingArgs.length; i++) {
+    if (remainingArgs[i] === '--json') { isJson = true; continue; }
+    if (remainingArgs[i] === '--limit') { limit = Number(remainingArgs[++i]) || 0; continue; }
+    // Reject an unknown flag rather than ignoring it: a silently dropped
+    // --globel would report project scope while the operator believed
+    // otherwise, and this command exists to be trusted about scope.
+    throw new Error(`Unknown context-stats option: ${remainingArgs[i]}`);
+  }
+
+  const brains = getBothBrains();
+  const own = layer !== 'global' && brains.project ? brains.project.brainDir : null;
+  const global = layer !== 'project' && brains.global ? brains.global.brainDir : null;
+  const brainDir = own || global;
+  if (!brainDir) throw new Error('No enabled brain in selected scope');
+  const derivedDir = path.join(brainDir, 'memory-derived');
+
+  const records = readLedger(derivedDir, { limit });
+  const summary = summariseLedger(records);
+  const budget = (() => {
+    for (const candidate of [layer === 'global' ? 'global' : 'project', 'global']) {
+      try { const v = readConfigValue('context_budget', candidate); if (Number.isFinite(v) && v > 0) return v; } catch { /* next layer */ }
+    }
+    return null;
+  })();
+
+  if (isJson) {
+    console.log(JSON.stringify({
+      enabled: telemetryEnabled(), budget, ledger: ledgerPath(derivedDir),
+      ...summary,
+    }, null, 2));
+    return;
+  }
+  if (!telemetryEnabled()) {
+    console.log('Capsule telemetry is off (TR_CONTEXT_TELEMETRY=off). No measurements are recorded.');
+    return;
+  }
+  console.log(renderSummary(summary, { budget, ledger: ledgerPath(derivedDir) }));
+}

package/src/cli/context.mjs

@@ -6,6 +6,7 @@ import { compileContext, capsuleResponse, renderCapsule } from '../core/context-
 import { isBrainEnabled } from '../core/brain-registry.mjs';
 import { surfaceInputsHash } from '../core/command-surface.mjs';
 import { readConfigValue } from './config.mjs';
+import { recordCapsule } from '../core/context-telemetry.mjs';
 
 export default async function context(args = []) {
   if (!args.length || args.includes('--help')) {
@@ -46,6 +47,13 @@ export default async function context(args = []) {
     derivedDir, contributions: legacyRuleContributions(skillsDir), versionInputs: surfaceInputsHash({ skillsDir }) });
   if (debug && format === 'text') throw new Error('--debug requires --format json');
   const response = capsuleResponse(result, { total: budget, debug, format });
+  // Measured before the admission branch, so a capsule that failed to fit is
+  // recorded too. Those refusals are the samples the budget decision needs, and
+  // a measurement that only counts successes would hide the exact case it
+  // exists to explain.
+  recordCapsule({ ...result.stats, total_tokens: result.stats.total_tokens }, {
+    derivedDir, action: actions, query, consumer: 'cli',
+  });
   if (!response.ready && !debug) {
     // Admission failed: emitting bodies here makes each budget retry load the
     // same rules again. Keep the full set in the compiler/API, and admit it only

package/src/cli/daemon.mjs

@@ -18,7 +18,7 @@ import os from 'node:os';
 import path from 'node:path';
 import { fileURLToPath } from 'node:url';
 import { resolveBrainDir } from './agent-dir.mjs';
-import { startDaemon, stopDaemon, readPid } from '../core/daemon-control.mjs';
+import { startDaemon, stopDaemon, readPid, getDaemonObservation } from '../core/daemon-control.mjs';
 
 const __dirname = path.dirname(fileURLToPath(import.meta.url));
 const ROOT = path.join(__dirname, '..', '..');
@@ -208,6 +208,14 @@ export default async function daemon(args) {
   const useSystemd = hasSystemd();
   const useLaunchd = !useSystemd && hasLaunchd();
 
+  // Managers must honor the same brain lock as direct lifecycle operations.
+  if (['start', 'ensure', 'stop'].includes(subcommand)) {
+    const observation = getDaemonObservation();
+    if (['conflict', 'unknown'].includes(observation.status)) {
+      throw new Error(`Daemon ${subcommand} refused: ${observation.reason || observation.status}; expected ${observation.expected_entry}${observation.entry ? `, observed ${observation.entry}` : ''}`);
+    }
+  }
+
   switch (subcommand) {
     case 'ensure': {
       if(!useSystemd)throw new Error('Managed daemon ensure currently requires systemd on the daemon host');
@@ -253,6 +261,7 @@ export default async function daemon(args) {
       else await directStop();
       break;
     case 'status':
+      console.log(JSON.stringify({ daemon: getDaemonObservation() }));
       if (useSystemd) systemdStatus();
       else if (useLaunchd) launchctlStatus();
       else directStatus();

package/src/cli/export.mjs

@@ -1,7 +1,7 @@
 import fs from 'node:fs';
 import path from 'node:path';
 import { parseLayerFlag, resolveBrainDir } from './agent-dir.mjs';
-import { exportBundle } from '../core/okf-adapter.mjs';
+import { loadPluginModule } from '../core/plugin-runtime.mjs';
 
 export default async function exportCommand(args) {
   const { layer, remainingArgs } = parseLayerFlag(args);
@@ -51,6 +51,7 @@ export default async function exportCommand(args) {
   console.log(`  📂 Destination:  ${opts.outputPath} (Format: ${opts.format})`);
 
   try {
+    const { exportBundle } = await loadPluginModule('okf', 'adapter', { activeRequired: true });
     const report = await exportBundle(vaultDir, opts.outputPath, {
       format: opts.format,
       stripSsss: opts.stripSsss
@@ -63,7 +64,7 @@ export default async function exportCommand(args) {
     console.log(`  ✅ Export completed successfully.\n`);
   } catch (err) {
     console.error(`\n  ❌ Export failed: ${err.message}\n`);
-    process.exit(1);
+    process.exitCode = 1;
   }
 }
 

package/src/cli/ingest-okf.mjs

@@ -1,7 +1,7 @@
 import fs from 'node:fs';
 import path from 'node:path';
 import { parseLayerFlag, resolveBrainDir } from './agent-dir.mjs';
-import { importBundle } from '../core/okf-adapter.mjs';
+import { loadPluginModule } from '../core/plugin-runtime.mjs';
 
 export async function runOkfIngest(args) {
   const { layer, remainingArgs } = parseLayerFlag(args);
@@ -69,6 +69,7 @@ export async function runOkfIngest(args) {
   console.log(`  🧠 Target Brain: ${layer} (${vaultDir})`);
   if (opts.dryRun) console.log('  ⚠️  DRY RUN: No actual writes will be committed.');
 
+  const { importBundle } = await loadPluginModule('okf', 'adapter', { activeRequired: true });
   const report = await importBundle(opts.bundlePath, vaultDir, {
     dryRun: opts.dryRun,
     category: opts.category,
@@ -94,23 +95,19 @@ export async function runOkfIngest(args) {
     for (const item of report.errors) {
       console.log(`    • ${item.file}: ${item.error}`);
     }
-    process.exit(1);
+    process.exitCode = 1;
+    return;
   }
 
   if (report.imported.length > 0 && !opts.dryRun) {
-    // Recompile active memory surfaces and indexes in the background to avoid blocking the CLI call.
-    console.log('\n  ⏳ Recompiling active memory surfaces and indexes in the background...');
-    try {
-      const { spawn } = await import('node:child_process');
-      const child = spawn(process.argv[0], [process.argv[1], 'compile'], {
-        detached: true,
-        stdio: 'ignore'
-      });
-      child.unref();
-      console.log('  ✅ Background compilation started.');
-    } catch (err) {
-      console.warn(`  ⚠️  Background recompilation spawn failed: ${err.message}`);
-    }
+    console.log('\n  ⏳ Recompiling memory surfaces and indexes...');
+    const { spawn } = await import('node:child_process');
+    await new Promise((resolve, reject) => {
+      const child = spawn(process.argv[0], [process.argv[1], 'compile', ...(layer === 'project' ? ['--project'] : layer === 'global' ? ['--global'] : [])], { stdio: 'inherit' });
+      child.once('error', reject);
+      child.once('exit', (code, signal) => code === 0 ? resolve() : reject(new Error(`Compilation failed (${signal || code})`)));
+    });
+    console.log('  ✅ Compilation completed.');
   }
 }
 

package/src/cli/init.mjs

@@ -77,63 +77,6 @@ function copyDirMerge(src, dest, dryRun) {
   }
 }
 
-/**
- * Ship openwiki with the brain (global or project). Prefer packaged templates;
- * fall back to a minimal set of pages so every brain has docs.
- */
-async function ensureOpenWiki(brainDir, isProject, dryRun) {
-  const wikiDirs = [path.join(brainDir, 'openwiki')];
-  if (isProject) {
-    wikiDirs.push(path.join(process.cwd(), 'openwiki'));
-  }
-  const templateRoot = fs.existsSync(path.join(ROOT, 'scaffold', 'openwiki'))
-    ? path.join(ROOT, 'scaffold', 'openwiki')
-    : path.join(ROOT, 'templates', 'openwiki');
-
-  for (const wikiDir of wikiDirs) {
-    if (ensureDir(wikiDir, dryRun)) {
-      logOk(`Created openwiki at ${path.relative(process.cwd(), wikiDir) || wikiDir}`);
-    }
-    if (fs.existsSync(templateRoot)) {
-      copyDirMerge(templateRoot, wikiDir, dryRun);
-    } else {
-      // Minimal fallback pages when templates/ not packaged yet
-      const pages = {
-        'README.md': `# OpenWiki\n\nPortable knowledge docs for this Total Recall brain (${isProject ? 'project' : 'global'}).\n\n- Not the SSSS memory vault — use vault nodes for rules/facts.\n- Use these pages for architecture, stack, and how-to knowledge.\n`,
-        'architecture.md': `# Architecture\n\nComponent overview, domain boundaries, and runtime execution flow.\n`,
-        'stack.md': `# Stack\n\nRuntime dependencies, frameworks, and system tools.\n`,
-        'memory.md': `# Memory\n\nHow this brain stores invariants, preferences, and facts.\n\nUse \`npx total-recall remember\` / \`recall\` / \`compile\`.\n`,
-        'ide.md': `# IDE personalization\n\nConnect surfaces with \`npx total-recall connect <ide>\`.\nInjected blocks live inside BEGIN/END INJECTED MEMORY markers only.\n`,
-        'skills.md': `# Skills\n\nUser skills live in \`.agent/skills/<name>/\` (siblings of total-recall).\nTotal Recall tracks and deploys skills; it does not nest product skills inside itself.\n`,
-        'secrets.md': `# Secrets\n\nAPI keys and credentials belong in the encrypted secrets store — never in openwiki or instruction shims.\n`,
-      };
-      for (const [name, body] of Object.entries(pages)) {
-        const dest = path.join(wikiDir, name);
-        if (fs.existsSync(dest)) continue;
-        if (!dryRun) fs.writeFileSync(dest, body);
-        logOk(`Seeded openwiki/${name}`);
-      }
-    }
-  }
-
-  // Auto-ingest into memory graph when project is initialized
-  if (isProject && !dryRun) {
-    try {
-      const { discoverPlugins } = await import('../core/plugin-loader.mjs');
-      const { runPluginCommand } = await import('../core/plugin-runner.mjs');
-      const plugins = discoverPlugins(process.cwd());
-      const openwikiPlugin = plugins.find((p) => p.id === 'openwiki');
-      const targetWiki = path.join(process.cwd(), 'openwiki');
-      if (openwikiPlugin && fs.existsSync(targetWiki)) {
-        await runPluginCommand(openwikiPlugin, { subcommand: 'ingest', args: [targetWiki] });
-        logOk('Ingested openwiki into semantic knowledge graph');
-      }
-    } catch {
-      // Best-effort ingestion
-    }
-  }
-}
-
 function parseArgs(args) {
   const opts = {
     dryRun: false,
@@ -565,33 +508,11 @@ export default async function init(args) {
       }
     }
 
-    // Optional LLM OpenWiki agent (interactive only). openwiki CLI has no --yes flag.
-    // Non-interactive init always uses TR template openwiki via ensureOpenWiki() below.
-    const runOpenwiki = (await ask('\n  [3.8] Run OpenWiki agent to auto-document this codebase? (y/N): ')).trim().toLowerCase();
-    if (runOpenwiki === 'y' || runOpenwiki === 'yes') {
-      console.error('\n  Starting OpenWiki agent (--init). This is interactive / network-using.');
-      console.error('  Tip: skip this and use TR template openwiki (step 3.6) for offline setup.');
-      spawnSync('npx', ['-y', 'openwiki', '--init'], { stdio: 'inherit', cwd: process.cwd() });
-    }
-
-    const runOkf = (await ask('\n  [3.9] Would you like to import an existing OKF knowledge bundle? (y/N): ')).trim().toLowerCase();
-    if (runOkf === 'y' || runOkf === 'yes') {
-      const bundlePath = (await ask('  Enter path to OKF bundle: ')).trim();
-      if (bundlePath) {
-        spawnSync('npx', ['-y', 'total-recall', 'ingest', 'okf', bundlePath], { stdio: 'inherit', cwd: process.cwd() });
-      }
-    }
-
     rl.close();
   } else {
-    // Non-interactive (--yes / non-TTY): never call openwiki CLI (no --yes support; can hang).
-    // Step 3.6 ensureOpenWiki() ships portable template pages offline.
     if (!deployMode) {
       deployMode = 'local';
     }
-    if (!opts.dryRun) {
-      log('Skipping external openwiki agent in non-interactive mode (templates via ensureOpenWiki).');
-    }
   }
 
   // Verify cloudflared binary dependency if a tunnel mode is selected
@@ -683,12 +604,6 @@ export default async function init(args) {
   // (TR_CORE_FOCUS). Implementation lives in total-recall/modules/. User skills are
   // only those with SKILL.md directly under .agent/skills/<name>/.
 
-  // ── Step 3.6: Ensure openwiki ships with the brain (offline templates; always) ──
-  // This is the non-interactive openwiki path. External `openwiki --init` is optional
-  // and only offered interactively (that CLI has no --yes flag).
-  logStep('3.6/4', 'Ensuring openwiki is present');
-  await ensureOpenWiki(brainDir, isProject, opts.dryRun);
-
   if (isProject) {
     logStep('3.6/4', 'Ensuring repository-specific expert');
     try {

package/src/cli/lint.mjs

@@ -51,7 +51,7 @@ function printHelp() {
     --global           Lint the global vault (default)
     --project          Lint the project vault for the current repo
     --strict           Treat warnings as errors (exit 1 on any issue)
-    --okf              Verify OKF v0.1 draft metadata compliance
+    --okf              Inspect metadata through the installed OKF plugin
     --plugins          Validate all installed plugin manifests (plugin.json)
     --json             Output results as JSONL
     --help, -h         Show this help
@@ -72,7 +72,8 @@ export default async function lint(args) {
   const vaultDir = opts.vault || path.join(resolveBrainDir(effectiveLayer), 'memory-vault');
 
   if (opts.okf) {
-    const { lintOkfCompliance } = await import('../core/okf-adapter.mjs');
+    const { loadPluginModule } = await import('../core/plugin-runtime.mjs');
+    const { lintOkfCompliance } = await loadPluginModule('okf', 'adapter', { activeRequired: true });
     const report = lintOkfCompliance(vaultDir, { strict: opts.strict });
 
     if (opts.json) {