total-recall-brain 3.41.0 → 3.41.2

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "total-recall-brain",
-  "version": "3.41.0",
+  "version": "3.41.2",
   "description": "The Vibe Coding Brain & Autonomous Software Factory: memory, rules, secrets, and 33 visual plugins automatically managed across all your devices.",
   "type": "module",
   "bin": {

package/scaffold/.agent/skills/meta-harness/references/optimized/original.md

@@ -23,7 +23,7 @@ Total Recall connects to every major IDE, CLI harness, and local neural runtime:
   - **Lovable**: Repository root `AGENTS.md` and `CLAUDE.md`.
   - **DeepSeek Harness (`dsh`)**: `.dsh/memory/MEMORY.md` and `AGENTS.md`.
   - **OpenClaw**: `SOUL.md`, `AGENTS.md`, `USER.md`, and `MEMORY.md`.
-  - **Hermes Agent**: `.hermes/memories/MEMORY.md`, `USER.md`, and `AGENTS.md`.
+  - **Hermes Agent**: `AGENTS.md` (loaded as a context file from the git root to cwd) and `.hermes/skills/`. `~/.hermes/memories/` is Hermes' own notes store and is never written.
   - **Cline**: `.clinerules/total-recall.md` and `.cline/skills/`.
   - **VS Code**: `.github/copilot-instructions.md` and `.vscode/copilot-instructions.md`.
 

package/scaffold/.agent/skills/total-recall/plugins/auth/README.md

@@ -46,3 +46,13 @@ Google OAuth credentials use the selected auth brain's encrypted store. Configur
 Google lifecycle metadata, role policies, key registries and request audit ledgers use the native host SSSS state contract. Ciphertext remains in the auth-owned opaque resource adapter. This source requires the updated native host contract; older published hosts need an explicit compatible update. Fixture tests do not certify live Google consent or deployed CRM consumer adapters.
 
 Native-only state: new installations use validated SSSS records and the shared auth owner. Legacy imports and compatibility fallback formats are not supported.
+
+### Host credential-store binding
+
+Runtime consumers that need the host's credential authority use the declared
+`host-secrets-store` module and its `hostSecretsBrainDir()` export. The auth CLI
+uses the same selector. A caller's project `AGENT_DIR`, `TR_BRAIN` or working
+directory never selects a second store. `TR_SECRETS_BRAIN` is the operational
+override; `_TR_TEST_BRAIN_DIR` and `_TR_TEST_AGENT_DIR` preserve disposable test
+isolation. Resolving this path performs no credential read or initialization.
+Explicit low-level store APIs retain their existing selected-store semantics.