total-recall-brain 3.44.0 → 3.45.0

package/scaffold/.agent/skills/total-recall/plugins/code-quality/package-lock.json

@@ -1,18 +1,18 @@
 {
   "name": "tr-plugin-code-quality",
-  "version": "0.2.6",
+  "version": "0.2.7",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "tr-plugin-code-quality",
-      "version": "0.2.6",
+      "version": "0.2.7",
       "license": "MIT",
       "dependencies": {
         "@gregiteen/ssss-cli": "0.14.5"
       },
       "devDependencies": {
-        "total-recall-brain": "3.43.3"
+        "total-recall-brain": "3.44.0"
       }
     },
     "node_modules/@alcalzone/ansi-tokenize": {
@@ -5543,9 +5543,9 @@
       }
     },
     "node_modules/total-recall-brain": {
-      "version": "3.43.3",
-      "resolved": "https://registry.npmjs.org/total-recall-brain/-/total-recall-brain-3.43.3.tgz",
-      "integrity": "sha512-yjfPN/BQxEEa+iodyFXQov/6fRt1pZg/7RcmgsbpALwBt6Ki3JJjT3tzArBC7NxHQmXgGYyKnCYId6xe/W2rPg==",
+      "version": "3.44.0",
+      "resolved": "https://registry.npmjs.org/total-recall-brain/-/total-recall-brain-3.44.0.tgz",
+      "integrity": "sha512-VNPaIO9zsSwoxAsJ5ByIQBP9zPpLq4RiQO7Vrex4rBOHFQJT50P7utcZiLMSZTyZJU4C/m5uB8qTCSBMp6+l6Q==",
       "dev": true,
       "license": "MIT",
       "workspaces": [
@@ -5553,7 +5553,7 @@
       ],
       "dependencies": {
         "@simplewebauthn/server": "^13.3.2",
-        "@ssss/cli": "npm:@gregiteen/ssss-cli@0.14.4",
+        "@ssss/cli": "npm:@gregiteen/ssss-cli@0.14.5",
         "bcrypt": "^6.0.0",
         "better-sqlite3": "^12.11.1",
         "cookie-parser": "^1.4.7",

package/scaffold/.agent/skills/total-recall/plugins/code-quality/package.json

@@ -1,6 +1,6 @@
 {
   "name": "tr-plugin-code-quality",
-  "version": "0.2.6",
+  "version": "0.2.7",
   "type": "module",
   "description": "Total Recall code-quality plugin: shared gate runner core and per-repo gate configuration.",
   "license": "MIT",

package/scaffold/.agent/skills/total-recall/plugins/code-quality/plugin.json

@@ -2,7 +2,7 @@
   "$schema": "https://github.com/gregiteen/total-recall/blob/main/metadata.plugin.schema.json",
   "id": "code-quality",
   "name": "Code Quality Gates",
-  "version": "0.2.6",
+  "version": "0.2.7",
   "description": "Fail-closed deterministic code-quality gates, lint rules, and test compliance reporting.",
   "author": "Total Recall contributors",
   "license": "MIT",

package/scaffold/.agent/skills/total-recall/plugins/composable-cli/package-lock.json

@@ -1,18 +1,18 @@
 {
   "name": "tr-plugin-composable-cli",
-  "version": "0.2.5",
+  "version": "0.2.6",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "tr-plugin-composable-cli",
-      "version": "0.2.5",
+      "version": "0.2.6",
       "license": "MIT",
       "dependencies": {
         "@gregiteen/ssss-cli": "0.14.5"
       },
       "devDependencies": {
-        "total-recall-brain": "3.43.3"
+        "total-recall-brain": "3.44.0"
       }
     },
     "node_modules/@alcalzone/ansi-tokenize": {
@@ -5543,9 +5543,9 @@
       }
     },
     "node_modules/total-recall-brain": {
-      "version": "3.43.3",
-      "resolved": "https://registry.npmjs.org/total-recall-brain/-/total-recall-brain-3.43.3.tgz",
-      "integrity": "sha512-yjfPN/BQxEEa+iodyFXQov/6fRt1pZg/7RcmgsbpALwBt6Ki3JJjT3tzArBC7NxHQmXgGYyKnCYId6xe/W2rPg==",
+      "version": "3.44.0",
+      "resolved": "https://registry.npmjs.org/total-recall-brain/-/total-recall-brain-3.44.0.tgz",
+      "integrity": "sha512-VNPaIO9zsSwoxAsJ5ByIQBP9zPpLq4RiQO7Vrex4rBOHFQJT50P7utcZiLMSZTyZJU4C/m5uB8qTCSBMp6+l6Q==",
       "dev": true,
       "license": "MIT",
       "workspaces": [
@@ -5553,7 +5553,7 @@
       ],
       "dependencies": {
         "@simplewebauthn/server": "^13.3.2",
-        "@ssss/cli": "npm:@gregiteen/ssss-cli@0.14.4",
+        "@ssss/cli": "npm:@gregiteen/ssss-cli@0.14.5",
         "bcrypt": "^6.0.0",
         "better-sqlite3": "^12.11.1",
         "cookie-parser": "^1.4.7",

package/scaffold/.agent/skills/total-recall/plugins/composable-cli/package.json

@@ -1,6 +1,6 @@
 {
   "name": "tr-plugin-composable-cli",
-  "version": "0.2.5",
+  "version": "0.2.6",
   "type": "module",
   "description": "Total Recall composable CLI plugin: create, compose, register, test and safely run custom verbs; every command listed in the instruction surfaces.",
   "scripts": {

package/scaffold/.agent/skills/total-recall/plugins/composable-cli/plugin.json

@@ -2,7 +2,7 @@
   "$schema": "https://github.com/gregiteen/total-recall/blob/main/metadata.plugin.schema.json",
   "id": "composable-cli",
   "name": "Composable CLI",
-  "version": "0.2.5",
+  "version": "0.2.6",
   "description": "Dynamic agent command composition engine with pipeline registration, versioning, and execution.",
   "author": "Total Recall contributors",
   "license": "MIT",

package/scaffold/.agent/skills/total-recall/plugins/embeddings/package-lock.json

@@ -1,18 +1,18 @@
 {
   "name": "tr-plugin-embeddings",
-  "version": "0.1.3",
+  "version": "0.1.4",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "tr-plugin-embeddings",
-      "version": "0.1.3",
+      "version": "0.1.4",
       "license": "MIT",
       "dependencies": {
         "@gregiteen/ssss-cli": "0.14.5"
       },
       "devDependencies": {
-        "total-recall-brain": "3.43.3"
+        "total-recall-brain": "3.44.0"
       }
     },
     "node_modules/@alcalzone/ansi-tokenize": {
@@ -5539,9 +5539,9 @@
       }
     },
     "node_modules/total-recall-brain": {
-      "version": "3.43.3",
-      "resolved": "https://registry.npmjs.org/total-recall-brain/-/total-recall-brain-3.43.3.tgz",
-      "integrity": "sha512-yjfPN/BQxEEa+iodyFXQov/6fRt1pZg/7RcmgsbpALwBt6Ki3JJjT3tzArBC7NxHQmXgGYyKnCYId6xe/W2rPg==",
+      "version": "3.44.0",
+      "resolved": "https://registry.npmjs.org/total-recall-brain/-/total-recall-brain-3.44.0.tgz",
+      "integrity": "sha512-VNPaIO9zsSwoxAsJ5ByIQBP9zPpLq4RiQO7Vrex4rBOHFQJT50P7utcZiLMSZTyZJU4C/m5uB8qTCSBMp6+l6Q==",
       "dev": true,
       "license": "MIT",
       "workspaces": [
@@ -5549,7 +5549,7 @@
       ],
       "dependencies": {
         "@simplewebauthn/server": "^13.3.2",
-        "@ssss/cli": "npm:@gregiteen/ssss-cli@0.14.4",
+        "@ssss/cli": "npm:@gregiteen/ssss-cli@0.14.5",
         "bcrypt": "^6.0.0",
         "better-sqlite3": "^12.11.1",
         "cookie-parser": "^1.4.7",

package/scaffold/.agent/skills/total-recall/plugins/embeddings/package.json

@@ -1,6 +1,6 @@
 {
   "name": "tr-plugin-embeddings",
-  "version": "0.1.3",
+  "version": "0.1.4",
   "type": "module",
   "description": "Local embedding model management: provider/model status, benchmark, index build and coverage",
   "scripts": {

package/scaffold/.agent/skills/total-recall/plugins/embeddings/plugin.json

@@ -2,7 +2,7 @@
   "$schema": "https://github.com/gregiteen/total-recall/blob/main/metadata.plugin.schema.json",
   "id": "embeddings",
   "name": "Embeddings",
-  "version": "0.1.3",
+  "version": "0.1.4",
   "description": "Local embedding model management: provider/model status, benchmark, index build and coverage",
   "license": "MIT",
   "branding": {

package/scaffold/.agent/skills/total-recall/plugins/git/README.md

@@ -0,0 +1,112 @@
+# Git
+
+The whole git CLI through Total Recall. Every git command works: anything that is not a plugin
+operation runs git itself, with your arguments, git's hooks, output and exit status. On top of git,
+the plugin signs git in from the auth store, checks commits and pushes, takes a snapshot before
+destructive commands, and records the intent behind each change.
+
+```bash
+total-recall git status
+total-recall git pull --rebase
+total-recall git help rebase        # git's own help for a command
+total-recall git --help             # the plugin's operations
+total-recall git commit --help      # one plugin operation's help (-h is git's usage)
+```
+
+## Install
+
+```bash
+npx total-recall plugin install git
+```
+
+## Commit and push
+
+- `commit [git commit arguments]` refuses a missing or machine-derived identity, unresolved
+  conflicts and a detached HEAD, then runs git's own `commit` with your arguments unchanged.
+- Before `commit` and `push`, guards run:
+  - **Secret firewall:** the staged content and outgoing commits are compared with fingerprints of
+    every value in the auth store. A match refuses the command and names the key, never the value.
+  - **Rules:** workflow files (`.github/workflows`), internal project records in public
+    repositories, and machine-derived identities are refused.
+  - **Force-push guard:** `--force` becomes `--force-with-lease`. Deleting a remote branch needs
+    `--reason <text>`, which is recorded.
+
+## Undo
+
+Before a destructive command (`reset --hard`, `checkout -- <paths>`, `restore`, `clean`,
+`branch -D`, `stash drop|clear`, `rebase`, `filter-branch`, `update-ref -d`) the plugin records a
+snapshot of refs, the index and files.
+
+```bash
+total-recall git undo --list
+total-recall git undo <event>
+```
+
+## Sign-in
+
+```bash
+total-recall git auth status          # live check against the remote; no secret is shown
+total-recall git auth map <host> <KEY>
+total-recall git auth setup           # helper entries for this machine
+```
+
+git asks the auth store through `credential-helper`; the credential goes only to git.
+
+## The git CLI on every node
+
+```bash
+total-recall git cli --json           # version, path, install source, upstream, release notes
+total-recall git cli --all-nodes
+total-recall git cli update           # update git through its installer
+```
+
+The task `cli update --scheduled` runs daily on every node.
+
+## Across the mesh
+
+```bash
+total-recall git fleet --all-nodes    # dirty, unpushed, behind, diverged, stale stashes, abandoned worktrees
+total-recall git where <commit>       # machines and checkouts that contain a commit
+```
+
+## Intent
+
+```bash
+total-recall git why <file>:<line>    # blame plus the session, tracker item and rules recorded at commit time
+total-recall git message              # draft a commit message from the diff, tracker and action log
+total-recall git group [--apply]      # split a dirty tree into commits by agent session
+total-recall git resolve [--apply]    # propose conflict resolutions from both sides' intent
+total-recall git bisect-agent <good> <bad>   # first bad commit, with the quality gate as the test
+total-recall git handoff <branch> [--out <file>]   # branch, tracker and memory as one SSSS bundle
+```
+
+Successful commits are recorded with their session and tracker items. A commit message that names
+a decision is saved to memory.
+
+## Repository state
+
+```bash
+total-recall git audit [--json]       # branch, worktree, upstream and stash state
+total-recall git identity [--json]    # commit identity and the identities history publishes
+total-recall git diff --json [--patch] [--cached] [--base <ref>]
+```
+
+An unknown upstream is never reported as zero unpushed commits.
+
+## Using this from an agent
+
+Send every git command here: `total-recall git <git command and arguments>` runs git itself, with
+the same output and exit status, plus sign-in from the auth store and the guards above. Push your
+finished, tested work yourself; never push unfinished work.
+
+```bash
+total-recall git status --short
+total-recall git add -A
+total-recall git commit -m "<message>"
+total-recall git push
+total-recall git fleet --json
+total-recall git undo --list
+```
+
+A refused commit or push names the rule or the auth key that matched; fix the cause, never bypass
+the guard. Raw commands this plugin owns: `git <command>`.

package/scaffold/.agent/skills/total-recall/plugins/{git-sentinel → git}/cli.mjs

@@ -1,24 +1,25 @@
 #!/usr/bin/env node
-import { execFileSync } from 'node:child_process';
-import { realpathSync } from 'node:fs';
+import { execFileSync, spawnSync } from 'node:child_process';
+import { readdirSync, realpathSync } from 'node:fs';
 import path from 'node:path';
+import { fileURLToPath, pathToFileURL } from 'node:url';
 import { parseArgs } from 'node:util';
 
 const GIT_TIMEOUT_MS = 15000;
 const GIT_MAX_BUFFER = 64 * 1024 * 1024;
-const VERBS = ['audit', 'diff', 'identity', 'worktree-list', 'worktree-create', 'worktree-remove', 'help'];
+const VERBS = ['audit', 'diff', 'identity', 'worktree-list', 'worktree-create', 'worktree-remove'];
 
 /**
  * Run git without throwing. Never trims stdout (porcelain rows begin with
  * significant spaces) and never forwards stderr to the caller's terminal.
  * @returns {{ ok: boolean, code: number|null, stdout: string, stderr: string, missing: boolean }}
  */
-export function git(args, cwd = process.cwd()) {
+export function git(args, cwd = process.cwd(), input) {
   try {
     const stdout = execFileSync('git', args, {
       cwd,
       encoding: 'utf8',
-      stdio: ['ignore', 'pipe', 'pipe'],
+      ...(input === undefined ? { stdio: ['ignore', 'pipe', 'pipe'] } : { input, stdio: ['pipe', 'pipe', 'pipe'] }),
       timeout: GIT_TIMEOUT_MS,
       maxBuffer: GIT_MAX_BUFFER,
       env: { ...process.env, LC_ALL: 'C', GIT_OPTIONAL_LOCKS: '0', GIT_TERMINAL_PROMPT: '0' },
@@ -210,14 +211,20 @@ function printIdentity(r) {
   console.log('');
 }
 
-function usage() {
-  return `Usage: total-recall git-sentinel [operation] [--json]
-  audit | identity
-  diff [--patch] [--cached] [--base <ref>]
-  worktree list
-  worktree create <path> [--base <ref>]
-  worktree remove <path> [--force]
-  worktree-list | worktree-create | worktree-remove (separate operation effects)`;
+function usage(operations = {}) {
+  const features = Object.entries(operations).sort(([a], [b]) => a.localeCompare(b))
+    .map(([name, op]) => `  ${(op.usage || name).split('\n')[0].padEnd(46)} ${op.summary}`).join('\n');
+  return `Usage: total-recall git <command> [arguments] [--json]
+
+Every git command works here: anything that is not listed below runs git itself, with your
+arguments, git's hooks, output and exit status. Example: total-recall git pull --rebase.
+Git's own help for a command: total-recall git help <command>.
+
+Plugin operations:
+  audit | identity                               Repository state; commit identity and its history
+  diff --json [--patch] [--cached] [--base <ref>]  The card's diff (plain diff is git's)
+  worktree-list | worktree-create <path> [--base <ref>] | worktree-remove <path> [--force]
+${features ? features + '\n' : ''}  --help                                         This help; <operation> --help for one operation`;
 }
 
 function gitResult(args, cwd) {
@@ -303,36 +310,141 @@ function printAudit(r) {
   console.log(`  Head Commit:        ${fmt(r.lastCommit, unk)}\n`);
 }
 
+/**
+ * Feature operations live in src/ops/<name>.mjs, one file per feature. Each module may export:
+ * - `operations`: { <name>: { summary, usage, run(args, ctx) } }; `run` returns an exit status.
+ * - `guards`: [{ name, before(args, ctx) }] run before git's own commands, in file order. `before`
+ *   returns nothing to allow, `{ args }` to rewrite the arguments, or `{ refuse: <message> }`.
+ *   An optional `after(args, ctx, status)` runs after git finishes; its failure is reported, never fatal.
+ * `ctx` is { cwd, env, json, git(args) -> spawnSync result with captured output }.
+ * Help is built from this registry, so every operation is in `--help`.
+ */
+const OPS_DIR = path.join(path.dirname(fileURLToPath(import.meta.url)), 'src', 'ops');
+let GIT_COMMANDS;
+function isGitCommand(name) {
+  if (!GIT_COMMANDS) GIT_COMMANDS = new Set(String(spawnSync('git', ['--list-cmds=main,others,alias,nohelpers'], { encoding: 'utf8' }).stdout || '').split('\n').filter(Boolean));
+  return GIT_COMMANDS.has(name);
+}
+
+export async function loadRegistry(dir = OPS_DIR) {
+  const operations = {}, guards = [];
+  let files = [];
+  try { files = readdirSync(dir).filter(f => f.endsWith('.mjs') && !f.includes('.spec.') && !f.includes('.test.')).sort(); } catch { /* no feature modules */ }
+  for (const file of files) {
+    // One module that fails to load disables only its own operations; git and every other operation keep working.
+    let mod;
+    try { mod = await import(pathToFileURL(path.join(dir, file)).href); }
+    catch (error) {
+      const name = file.replace(/\.mjs$/, '');
+      if (!operations[name]) operations[name] = { summary: `unavailable: ${String(error.message).split('\n')[0]}`, usage: name, file, broken: true,
+        run: () => { console.error(`${name} is unavailable: ${error.message.split('\n')[0]}`); return 1; } };
+      continue;
+    }
+    for (const [name, op] of Object.entries(mod.operations || {})) {
+      if (operations[name]) throw new Error(`Operation "${name}" is defined twice (${file})`);
+      operations[name] = { ...op, file };
+    }
+    for (const guard of mod.guards || []) guards.push({ ...guard, file });
+  }
+  return { operations, guards };
+}
+
+function context(cwd, json) {
+  return {
+    cwd, env: process.env, json,
+    git: (args, options = {}) => spawnSync('git', args, { cwd, env: process.env, encoding: 'utf8', maxBuffer: GIT_MAX_BUFFER, ...options }),
+  };
+}
+
+/**
+ * Plugin operations: audit, identity, help, the checked commit, the hyphenated worktree-* operations
+ * and `diff` with --json or --base (the card's diff). Everything else is git's own CLI.
+ * `commit` stays a plugin operation only in its checked form (-m/--message, -a/--all, paths).
+ * Any other git commit flag (--amend, --fixup, -S and the rest) goes to git's own commit.
+ */
+export function isPassthrough(args, featureOps = []) {
+  const [first] = args;
+  if (first === undefined) return false;
+  if (featureOps.includes(first)) return false;
+  if (first.startsWith('-')) return !['--json', '--help', '-h'].includes(first);
+  if (['audit', 'identity', 'worktree-list', 'worktree-create', 'worktree-remove'].includes(first)) return false;
+  if (first === 'diff') return !args.includes('--json') && !args.some(a => a === '--base' || a.startsWith('--base='));
+  return true;
+}
+
 export async function run(argv = []) {
-  // argv: ["node", "total-recall", "git-sentinel", "<subcommand>", ...flags]
+  // argv: ["node", "total-recall", "git", "<subcommand>", ...flags]
   // Never process.exit(): a host running this in-process would be stopped too.
   const clean = Array.isArray(argv) ? argv.slice(3) : [];
+  const registry = await loadRegistry();
+  const cwd0 = process.cwd();
+  const featureOp = registry.operations[clean[0]];
+  const wantsOpHelp = clean.includes('--help') || clean.includes('-h');
+  // Guards see every command, plugin operations included (a plugin `commit` is still a commit).
+  // Each guard decides from args[0] whether the command concerns it.
+  const runGuards = async (args, phase, status) => {
+    for (const guard of registry.guards) {
+      if (phase === 'before') {
+        const verdict = await guard.before?.(args, context(cwd0, false));
+        if (verdict?.refuse) return { refuse: `${args[0]} refused by ${guard.name}: ${verdict.refuse}` };
+        if (verdict?.args) args = verdict.args;
+      } else if (guard.after) {
+        try { await guard.after(args, context(cwd0, false), status); }
+        catch (error) { console.error(`${guard.name} after ${args[0]}: ${error.message}`); }
+      }
+    }
+    return { args };
+  };
+  // `-h` on a plugin operation that is also a git command (commit, bundle) is git's own usage;
+  // `--help` shows the plugin operation's help.
+  const gitUsage = featureOp && clean.includes('-h') && !clean.includes('--help') && isGitCommand(clean[0]);
+  if (featureOp && !wantsOpHelp || gitUsage) {
+    if (gitUsage) {
+      const ran = spawnSync('git', clean, { cwd: cwd0, stdio: 'inherit', env: process.env });
+      process.exitCode = ran.status ?? 1;
+      return;
+    }
+    const checked = await runGuards(clean, 'before');
+    if (checked.refuse) { console.error(checked.refuse); process.exitCode = 1; return; }
+    const status = await featureOp.run(checked.args.slice(1).filter(a => a !== '--json'), context(cwd0, clean.includes('--json')));
+    process.exitCode = typeof status === 'number' ? status : 0;
+    await runGuards(checked.args, 'after', process.exitCode);
+    return;
+  }
+  if (featureOp) { console.log(`total-recall git ${clean[0]} — ${featureOp.summary}\n${featureOp.usage || ''}`.trimEnd()); return; }
+  // The whole git CLI: every command that is not a plugin operation runs git itself, with the
+  // caller's arguments unchanged (unless a guard rewrites them), git's own hooks, output and exit status.
+  if (isPassthrough(clean, Object.keys(registry.operations))) {
+    const checked = await runGuards(clean, 'before');
+    if (checked.refuse) { console.error(`git ${checked.refuse}`); process.exitCode = 1; return; }
+    const ran = spawnSync('git', checked.args, { cwd: cwd0, stdio: 'inherit', env: process.env });
+    if (ran.error) console.error(`git could not start: ${ran.error.message}`);
+    process.exitCode = ran.status ?? 1;
+    await runGuards(checked.args, 'after', process.exitCode);
+    return;
+  }
   const isJson = clean.includes('--json');
   const wantsHelp = clean.includes('--help') || clean.includes('-h');
   let [action = 'audit', ...args] = clean.filter(arg => arg !== '--json');
-  if (action === 'worktree') {
-    const [verb = 'list', ...rest] = args;
-    action = `worktree-${verb}`;
-    args = rest;
-  }
   const fail = (message, code = 1, extra = {}) => {
     process.exitCode = code;
     if (isJson) console.log(JSON.stringify({ ok: false, error: message, ...extra }, null, 2));
     else console.error(message);
   };
 
-  if (wantsHelp || action === 'help') {
-    console.log(usage());
+  if (wantsHelp) {
+    console.log(usage(registry.operations));
     return;
   }
   if (!VERBS.includes(action)) {
-    fail(`Unknown git-sentinel command "${action}". ${usage()}`, 2);
+    fail(`Unknown git plugin command "${action}". ${usage()}`, 2);
     return;
   }
 
   const options = action === 'diff' ? { patch: { type: 'boolean' }, cached: { type: 'boolean' }, base: { type: 'string' } }
     : action === 'worktree-create' ? { base: { type: 'string' } }
-    : action === 'worktree-remove' ? { force: { type: 'boolean' } } : {};
+    : action === 'worktree-remove' ? { force: { type: 'boolean' } }
+    : {};
   const targetRequired = action === 'worktree-create' || action === 'worktree-remove';
   let parsed;
   try {

package/scaffold/.agent/skills/total-recall/plugins/{git-sentinel → git}/package-lock.json

@@ -1,18 +1,18 @@
 {
-  "name": "tr-plugin-git-sentinel",
+  "name": "tr-plugin-git",
   "version": "1.1.5",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
-      "name": "tr-plugin-git-sentinel",
+      "name": "tr-plugin-git",
       "version": "1.1.5",
       "license": "MIT",
       "dependencies": {
         "@gregiteen/ssss-cli": "0.14.5"
       },
       "devDependencies": {
-        "total-recall-brain": "3.43.3",
+        "total-recall-brain": "3.44.0",
         "vitest": "^4.1.10"
       }
     },
@@ -6533,9 +6533,9 @@
       }
     },
     "node_modules/total-recall-brain": {
-      "version": "3.43.3",
-      "resolved": "https://registry.npmjs.org/total-recall-brain/-/total-recall-brain-3.43.3.tgz",
-      "integrity": "sha512-yjfPN/BQxEEa+iodyFXQov/6fRt1pZg/7RcmgsbpALwBt6Ki3JJjT3tzArBC7NxHQmXgGYyKnCYId6xe/W2rPg==",
+      "version": "3.44.0",
+      "resolved": "https://registry.npmjs.org/total-recall-brain/-/total-recall-brain-3.44.0.tgz",
+      "integrity": "sha512-VNPaIO9zsSwoxAsJ5ByIQBP9zPpLq4RiQO7Vrex4rBOHFQJT50P7utcZiLMSZTyZJU4C/m5uB8qTCSBMp6+l6Q==",
       "dev": true,
       "license": "MIT",
       "workspaces": [
@@ -6543,7 +6543,7 @@
       ],
       "dependencies": {
         "@simplewebauthn/server": "^13.3.2",
-        "@ssss/cli": "npm:@gregiteen/ssss-cli@0.14.4",
+        "@ssss/cli": "npm:@gregiteen/ssss-cli@0.14.5",
         "bcrypt": "^6.0.0",
         "better-sqlite3": "^12.11.1",
         "cookie-parser": "^1.4.7",

package/scaffold/.agent/skills/total-recall/plugins/{git-sentinel → git}/package.json

@@ -1,5 +1,5 @@
 {
-  "name": "tr-plugin-git-sentinel",
+  "name": "tr-plugin-git",
   "version": "1.1.5",
   "type": "module",
   "description": "Reports the state of the current git repository: branch, dirty files, unpushed commits and stashes.",
@@ -11,6 +11,7 @@
   "files": [
     "cli.mjs",
     "plugin.json",
+    "src/",
     "README.md",
     "LICENSE",
     "ui/"