total-recall-brain 3.46.2 → 3.47.1

package/scaffold/.agent/skills/total-recall/plugins/git/plugin.json

@@ -2,7 +2,7 @@
   "$schema": "https://github.com/gregiteen/total-recall/blob/main/metadata.plugin.schema.json",
   "id": "git",
   "name": "Git",
-  "version": "2.2.0",
+  "version": "2.3.1",
   "description": "The whole git CLI through Total Recall: sign-in from the auth store, guarded commits and pushes, undo, fleet state, and the intent behind every change.",
   "author": "Total Recall",
   "license": "MIT",
@@ -10,13 +10,28 @@
     "software-development"
   ],
   "gate": {
-    "tasks": ["Run any git command", "Commit or push with identity, secret and rule checks", "Sign git in through the auth store", "Undo a destructive git command", "Check repository state across the mesh", "Keep the git CLI current on every node"],
+    "tasks": [
+      "Run any git command",
+      "Commit or push with identity, secret and rule checks",
+      "Sign git in through the auth store",
+      "Undo a destructive git command",
+      "Check repository state across the mesh",
+      "Keep the git CLI current on every node"
+    ],
     "owned_commands": [
-      { "pattern": "(^|[;&|(]\\s*)git(\\s+-C\\s+\\S+)?\\s+[a-z]", "use": "total-recall git <same git command and arguments>" }
+      {
+        "pattern": "(^|[;&|(]\\s*)git(\\s+-C\\s+\\S+)?\\s+[a-z]",
+        "use": "total-recall git <same git command and arguments>"
+      }
     ]
   },
   "tasks": [
-    { "intent": "Check and update the git CLI", "schedule": "17 6 * * *", "command": "cli update --scheduled", "placement": "per-node" }
+    {
+      "intent": "Check and update the git CLI",
+      "schedule": "17 6 * * *",
+      "command": "cli update --scheduled",
+      "placement": "per-node"
+    }
   ],
   "cli": {
     "answers_help": true,
@@ -33,57 +48,253 @@
         "description": "Read a stat or patch for unstaged, staged or base-relative changes",
         "effect": "read",
         "args": [
-          { "name": "patch", "flag": "--patch", "type": "boolean", "label": "Show patch" },
-          { "name": "cached", "flag": "--cached", "type": "boolean", "label": "Use staged changes" },
-          { "name": "base", "flag": "--base", "type": "string", "label": "Base ref" }
+          {
+            "name": "patch",
+            "flag": "--patch",
+            "type": "boolean",
+            "label": "Show patch"
+          },
+          {
+            "name": "cached",
+            "flag": "--cached",
+            "type": "boolean",
+            "label": "Use staged changes"
+          },
+          {
+            "name": "base",
+            "flag": "--base",
+            "type": "string",
+            "label": "Base ref"
+          }
+        ]
+      },
+      {
+        "name": "commit",
+        "description": "Check identity, conflicts, HEAD, secrets and repository rules, then run git's own commit with your arguments",
+        "effect": "write",
+        "timeout_ms": 600000,
+        "args": [
+          {
+            "name": "args",
+            "type": "string",
+            "label": "git commit arguments",
+            "positional": true
+          }
+        ]
+      },
+      {
+        "name": "push",
+        "description": "Check outgoing commits for secrets and rules, turn --force into --force-with-lease, then run git's own push",
+        "effect": "write",
+        "timeout_ms": 600000,
+        "args": [
+          {
+            "name": "args",
+            "type": "string",
+            "label": "git push arguments",
+            "positional": true
+          }
+        ]
+      },
+      {
+        "name": "credential-helper",
+        "description": "Git credential helper: give git the mapped auth-store credential (get); store and erase do nothing",
+        "effect": "read"
+      },
+      {
+        "name": "auth",
+        "description": "Sign-in: status (live check, no secret shown), map <host> <KEY>, setup (helper entries for this machine)",
+        "effect": "write",
+        "args": [
+          {
+            "name": "action",
+            "type": "string",
+            "label": "status | map | setup",
+            "positional": true
+          }
+        ]
+      },
+      {
+        "name": "cli",
+        "description": "Git CLI metadata (version, path, install source, upstream, release notes); --all-nodes for the mesh; cli update updates git through its installer",
+        "effect": "write",
+        "timeout_ms": 600000
+      },
+      {
+        "name": "undo",
+        "description": "Restore refs, index and files from the snapshot taken before a destructive git command; --list shows snapshots",
+        "effect": "destructive",
+        "args": [
+          {
+            "name": "event",
+            "type": "string",
+            "label": "Snapshot",
+            "positional": true
+          },
+          {
+            "name": "list",
+            "flag": "--list",
+            "type": "boolean",
+            "label": "List snapshots"
+          }
+        ]
+      },
+      {
+        "name": "fleet",
+        "description": "Dirty, unpushed, behind, diverged, stale stashes and abandoned worktrees across registered repositories; --all-nodes for the mesh",
+        "effect": "read",
+        "timeout_ms": 600000
+      },
+      {
+        "name": "unmerged",
+        "description": "Branches with commits not in the default branch, worktrees with uncommitted changes and detached worktrees holding commits on no branch; --registered for every registered repository",
+        "effect": "read",
+        "output": "json",
+        "timeout_ms": 600000,
+        "args": [
+          {
+            "name": "registered",
+            "flag": "--registered",
+            "type": "boolean",
+            "label": "Every registered repository"
+          }
         ]
       },
-      { "name": "commit", "description": "Check identity, conflicts, HEAD, secrets and repository rules, then run git's own commit with your arguments", "effect": "write", "timeout_ms": 600000, "args": [
-        { "name": "args", "type": "string", "label": "git commit arguments", "positional": true }
-      ] },
-      { "name": "push", "description": "Check outgoing commits for secrets and rules, turn --force into --force-with-lease, then run git's own push", "effect": "write", "timeout_ms": 600000, "args": [
-        { "name": "args", "type": "string", "label": "git push arguments", "positional": true }
-      ] },
-      { "name": "credential-helper", "description": "Git credential helper: give git the mapped auth-store credential (get); store and erase do nothing", "effect": "read" },
-      { "name": "auth", "description": "Sign-in: status (live check, no secret shown), map <host> <KEY>, setup (helper entries for this machine)", "effect": "write", "args": [
-        { "name": "action", "type": "string", "label": "status | map | setup", "positional": true }
-      ] },
-      { "name": "cli", "description": "Git CLI metadata (version, path, install source, upstream, release notes); --all-nodes for the mesh; cli update updates git through its installer", "effect": "write", "timeout_ms": 600000 },
-      { "name": "undo", "description": "Restore refs, index and files from the snapshot taken before a destructive git command; --list shows snapshots", "effect": "destructive", "args": [
-        { "name": "event", "type": "string", "label": "Snapshot", "positional": true },
-        { "name": "list", "flag": "--list", "type": "boolean", "label": "List snapshots" }
-      ] },
-      { "name": "fleet", "description": "Dirty, unpushed, behind, diverged, stale stashes and abandoned worktrees across registered repositories; --all-nodes for the mesh", "effect": "read", "timeout_ms": 600000 },
-      { "name": "unmerged", "description": "Branches with commits not in the default branch, worktrees with uncommitted changes and detached worktrees holding commits on no branch; --registered for every registered repository", "effect": "read", "output": "json", "timeout_ms": 600000, "args": [
-        { "name": "registered", "flag": "--registered", "type": "boolean", "label": "Every registered repository" }
-      ] },
-      { "name": "where", "description": "Machines and checkouts that contain a commit", "effect": "read", "args": [
-        { "name": "commit", "type": "string", "label": "Commit", "required": true, "positional": true }
-      ] },
-      { "name": "why", "description": "Blame one line plus the session, tracker item, decision and rules recorded when it was committed", "effect": "read", "args": [
-        { "name": "location", "type": "string", "label": "file:line", "required": true, "positional": true }
-      ] },
-      { "name": "group", "description": "Group a dirty tree into commits by the agent session that wrote each change; --apply commits the groups", "effect": "write" },
-      { "name": "message", "description": "Draft a commit message from the staged diff, the active tracker and its action log", "effect": "read" },
-      { "name": "bisect-agent", "description": "Find the first bad commit with the repository's quality gate as the test", "effect": "write", "timeout_ms": 600000, "args": [
-        { "name": "good", "type": "string", "label": "Good commit", "required": true, "positional": true },
-        { "name": "bad", "type": "string", "label": "Bad commit", "required": true, "positional": true }
-      ] },
-      { "name": "resolve", "description": "Propose a resolution for each conflicted file from both sides' recorded intent; --apply writes it", "effect": "write" },
-      { "name": "handoff", "description": "Pack a branch, its tracker and related memory into one SSSS bundle for another agent or machine", "effect": "write", "args": [
-        { "name": "branch", "type": "string", "label": "Branch", "required": true, "positional": true },
-        { "name": "out", "flag": "--out", "type": "string", "label": "Output file" }
-      ] },
-      { "name": "worktree-list", "description": "Read registered worktrees for the current repository", "effect": "read" },
-      { "name": "worktree-create", "description": "Create a detached worktree at a specified path and base ref", "effect": "write", "args": [
-        { "name": "path", "type": "string", "label": "Worktree path", "required": true, "positional": true },
-        { "name": "base", "flag": "--base", "type": "string", "label": "Base ref" }
-      ] },
-      { "name": "worktree-remove", "description": "Remove an owned linked worktree, with explicit force for dirty content", "effect": "destructive", "args": [
-        { "name": "path", "type": "string", "label": "Worktree path", "required": true, "positional": true },
-        { "name": "force", "flag": "--force", "type": "boolean", "label": "Allow removal of dirty content" }
-      ] },
-      { "name": "worktree", "description": "Compatibility form: worktree list, create or remove", "effect": "destructive" },
+      {
+        "name": "where",
+        "description": "Machines and checkouts that contain a commit",
+        "effect": "read",
+        "args": [
+          {
+            "name": "commit",
+            "type": "string",
+            "label": "Commit",
+            "required": true,
+            "positional": true
+          }
+        ]
+      },
+      {
+        "name": "why",
+        "description": "Blame one line plus the session, tracker item, decision and rules recorded when it was committed",
+        "effect": "read",
+        "args": [
+          {
+            "name": "location",
+            "type": "string",
+            "label": "file:line",
+            "required": true,
+            "positional": true
+          }
+        ]
+      },
+      {
+        "name": "group",
+        "description": "Group a dirty tree into commits by the agent session that wrote each change; --apply commits the groups",
+        "effect": "write"
+      },
+      {
+        "name": "message",
+        "description": "Draft a commit message from the staged diff, the active tracker and its action log",
+        "effect": "read"
+      },
+      {
+        "name": "bisect-agent",
+        "description": "Find the first bad commit with the repository's quality gate as the test",
+        "effect": "write",
+        "timeout_ms": 600000,
+        "args": [
+          {
+            "name": "good",
+            "type": "string",
+            "label": "Good commit",
+            "required": true,
+            "positional": true
+          },
+          {
+            "name": "bad",
+            "type": "string",
+            "label": "Bad commit",
+            "required": true,
+            "positional": true
+          }
+        ]
+      },
+      {
+        "name": "resolve",
+        "description": "Propose a resolution for each conflicted file from both sides' recorded intent; --apply writes it",
+        "effect": "write"
+      },
+      {
+        "name": "handoff",
+        "description": "Pack a branch, its tracker and related memory into one SSSS bundle for another agent or machine",
+        "effect": "write",
+        "args": [
+          {
+            "name": "branch",
+            "type": "string",
+            "label": "Branch",
+            "required": true,
+            "positional": true
+          },
+          {
+            "name": "out",
+            "flag": "--out",
+            "type": "string",
+            "label": "Output file"
+          }
+        ]
+      },
+      {
+        "name": "worktree-list",
+        "description": "Read registered worktrees for the current repository",
+        "effect": "read"
+      },
+      {
+        "name": "worktree-create",
+        "description": "Create a detached worktree at a specified path and base ref",
+        "effect": "write",
+        "args": [
+          {
+            "name": "path",
+            "type": "string",
+            "label": "Worktree path",
+            "required": true,
+            "positional": true
+          },
+          {
+            "name": "base",
+            "flag": "--base",
+            "type": "string",
+            "label": "Base ref"
+          }
+        ]
+      },
+      {
+        "name": "worktree-remove",
+        "description": "Remove an owned linked worktree, with explicit force for dirty content",
+        "effect": "destructive",
+        "args": [
+          {
+            "name": "path",
+            "type": "string",
+            "label": "Worktree path",
+            "required": true,
+            "positional": true
+          },
+          {
+            "name": "force",
+            "flag": "--force",
+            "type": "boolean",
+            "label": "Allow removal of dirty content"
+          }
+        ]
+      },
+      {
+        "name": "worktree",
+        "description": "Compatibility form: worktree list, create or remove",
+        "effect": "destructive"
+      },
       {
         "name": "identity",
         "description": "Show who commits here and which identities the history publishes; exits 1 on a missing or machine-derived identity (--json for machine output)",
@@ -101,10 +312,21 @@
         "tag": "tr-git-home",
         "module": "ui/home.js",
         "description": "Repository audit, diff stats, and linked worktrees",
-        "tokens": ["color-text", "color-surface", "color-border", "spacing-md", "radius-md"],
+        "tokens": [
+          "color-text",
+          "color-surface",
+          "color-border",
+          "spacing-md",
+          "radius-md"
+        ],
         "optional_tokens": [
-          "color-background", "color-accent", "color-muted", "color-danger",
-          "typography-body-font-family", "typography-heading-font-family", "typography-mono-font-family"
+          "color-background",
+          "color-accent",
+          "color-muted",
+          "color-danger",
+          "typography-body-font-family",
+          "typography-heading-font-family",
+          "typography-mono-font-family"
         ]
       }
     ]
@@ -139,7 +361,13 @@
     "badge": "Repository Hygiene",
     "font": "space-grotesk"
   },
-  "startup_check": { "command": "unmerged", "args": ["--json"], "timeout_ms": 20000 },
+  "startup_check": {
+    "command": "unmerged",
+    "args": [
+      "--json"
+    ],
+    "timeout_ms": 20000
+  },
   "status": {
     "command": "audit",
     "refresh_seconds": 60
@@ -147,5 +375,19 @@
   "distribution": {
     "tier": "official",
     "license": "open"
-  }
+  },
+  "reuse": {
+    "commands": [
+      "total-recall auth secret",
+      "total-recall ssss status"
+    ],
+    "owned": "Secret-firewalled commits and pushes, worktree management, unmerged branch detection, and fleet repository hygiene."
+  },
+  "skills": [
+    {
+      "id": "git",
+      "path": "./skills/git/SKILL.md",
+      "description": "The whole git CLI through Total Recall: sign-in from the auth store, guarded commits and pushes, undo, fleet state, and the intent behind every change."
+    }
+  ]
 }

package/scaffold/.agent/skills/total-recall/plugins/git/skills/git/SKILL.md

@@ -0,0 +1,36 @@
+---
+name: git
+description: "The whole git CLI through Total Recall: sign-in from the auth store, guarded commits and pushes, undo, fleet state, and the intent behind every change."
+version: 2.3.0
+repo_scoped: false
+---
+
+# Git
+
+The whole git CLI through Total Recall: sign-in from the auth store, guarded commits and pushes, undo, fleet state, and the intent behind every change.
+
+## When to Use
+
+Use the `git` Total Recall plugin (`total-recall git`) instead of ad-hoc scripts or raw commands whenever working on git tasks.
+
+## Commands
+
+```bash
+total-recall git --help
+total-recall git audit  # Summarise branch, worktree, upstream and stash state (--json for machine output)
+total-recall git diff  # Read a stat or patch for unstaged, staged or base-relative changes
+total-recall git commit  # Check identity, conflicts, HEAD, secrets and repository rules, then run git's own commit with your arguments
+total-recall git push  # Check outgoing commits for secrets and rules, turn --force into --force-with-lease, then run git's own push
+total-recall git credential-helper  # Git credential helper: give git the mapped auth-store credential (get); store and erase do nothing
+total-recall git auth  # Sign-in: status (live check, no secret shown), map <host> <KEY>, setup (helper entries for this machine)
+total-recall git cli  # Git CLI metadata (version, path, install source, upstream, release notes); --all-nodes for the mesh; cli update updates git through its installer
+total-recall git undo  # Restore refs, index and files from the snapshot taken before a destructive git command; --list shows snapshots
+total-recall git fleet  # Dirty, unpushed, behind, diverged, stale stashes and abandoned worktrees across registered repositories; --all-nodes for the mesh
+total-recall git unmerged  # Branches with commits not in the default branch, worktrees with uncommitted changes and detached worktrees holding commits on no branch; --registered for every registered repository
+total-recall git where  # Machines and checkouts that contain a commit
+total-recall git why  # Blame one line plus the session, tracker item, decision and rules recorded when it was committed
+```
+
+## Owned Raw Commands
+
+This plugin owns: `(^|[;&|(]\s*)git(\s+-C\s+\S+)?\s+[a-z]`.

package/scaffold/.agent/skills/total-recall/plugins/git/src/ops/commit-memory.mjs

@@ -1,26 +1,9 @@
-import { spawn } from 'node:child_process';
 import { git, tr, ledger, intent, session } from '../lib/context.mjs';
-import { defaultBranch } from './unmerged.mjs';
 
-/**
- * Ask OpenWiki to refresh this repository without waiting for it. A due refresh
- * regenerates pages with a model for minutes; OpenWiki throttles repeats, keeps
- * its own 30-minute limit and writes the outcome to openwiki/.refresh-attempt.json.
- * Waiting here held every commit for 30 s, then killed only the CLI: the
- * generator finished on its own while the commit reported the refresh as failed.
- */
-export function requestWikiRefresh(ctx, launch = spawn) {
-  try {
-    const child = launch(ctx.env.GIT_PLUGIN_TR_BIN || 'total-recall', ['openwiki', 'refresh', '--repo', ctx.cwd, '--apply', '--json'], {
-      cwd: ctx.cwd, env: ctx.env, detached: true, stdio: 'ignore', shell: false,
-    });
-    child.on?.('error', () => {});
-    child.unref?.();
-    return child.pid ? { status: 'requested', command: 'openwiki refresh', outcome: 'openwiki/.refresh-attempt.json' } : { status: 'failed', command: 'openwiki refresh', reason: 'could not start' };
-  } catch {
-    return { status: 'failed', command: 'openwiki refresh', reason: 'could not start' };
-  }
-}
+// A commit never starts an OpenWiki refresh. Requesting one after every commit on the default
+// branch paid a model to re-check wiki pages after each automatic version-pin commit, in about
+// 40 repositories per Total Recall release. OpenWiki refreshes from its own nightly task on one
+// selected node (total-recall openwiki schedule).
 
 export const guards = [{
   name: 'commit-memory',
@@ -37,18 +20,7 @@ export const guards = [{
     // Save the commit before any optional provider call.
     store.append(record, { idempotencyKey: `commit-${sha}` });
     const memory = record.decisions.length ? tr(ctx, ['remember', 'decision', `${record.decisions.join('\n')}\nCommit: ${sha}`, '--project', '--slug', `git-decision-${sha}`]) : null;
-    let wiki;
-    // The wiki documents the default branch. Regenerating it from a feature branch spends model
-    // calls on pages that only conflict when the branch merges.
-    const branch = ctx.git(['symbolic-ref', '--quiet', '--short', 'HEAD']);
-    const base = defaultBranch(ctx);
-    if (!base || branch.status !== 0 || String(branch.stdout).trim() !== base.name) wiki = { status: 'skipped', reason: 'not on the default branch' };
-    else {
-      const available = tr(ctx, ['openwiki', '--help']);
-      wiki = available.status !== 0 || available.error ? { status: 'skipped', reason: 'OpenWiki is unavailable' } : requestWikiRefresh(ctx);
-    }
-    store.append({ type: 'git.commit_memory', sha, timestamp: new Date().toISOString(), memory: memory === null ? 'skipped: no named decision' : memory.status === 0 && !memory.error ? 'recorded' : 'failed', openwiki: wiki });
+    store.append({ type: 'git.commit_memory', sha, timestamp: new Date().toISOString(), memory: memory === null ? 'skipped: no named decision' : memory.status === 0 && !memory.error ? 'recorded' : 'failed' });
     if (memory && (memory.status !== 0 || memory.error)) console.error('Commit saved. Repository decision memory failed.');
-    if (wiki.status === 'failed') console.error('Commit saved. The OpenWiki refresh could not be started.');
   },
 }];

package/scaffold/.agent/skills/total-recall/plugins/git/ui/chunks/git-fleet-ops.md

@@ -0,0 +1,16 @@
+---
+type: ui-chunk:chunk
+title: Fleet routing & agent coordination
+description: Inspect fleet locations, bisect regressions, resolve conflicts, and coordinate multi-agent git handoffs.
+timestamp: "2026-11-14T08:51:00Z"
+plugin: git
+id: git-fleet-ops
+intents: [inspect fleet repos, locate branch or worktree, bisect or resolve conflicts, hand off git state]
+surfaces: [page]
+operations: [fleet, where, why, group, message, bisect-agent, resolve, handoff]
+---
+
+<section>
+  <h2>Fleet &amp; coordination ops</h2>
+  <p>Track repository placement across the fleet, diagnose branch divergence, resolve conflicts, and hand off clean git state between agents.</p>
+</section>

package/scaffold/.agent/skills/total-recall/plugins/git/ui/chunks/git-publish.md

@@ -0,0 +1,16 @@
+---
+type: ui-chunk:chunk
+title: Secret-firewalled git publish & auth
+description: Commit, push, configure git credential helper/auth/cli bindings, and safely undo recent changes.
+timestamp: "2026-11-14T08:51:00Z"
+plugin: git
+id: git-publish
+intents: [commit changes, push branch, configure git auth, undo git change]
+surfaces: [page]
+operations: [commit, push, credential-helper, auth, cli, undo]
+---
+
+<section>
+  <h2>Publish &amp; credential guard</h2>
+  <p>Run secret-firewalled commits and pushes, bind Total Recall git credentials, or undo recent working-tree changes.</p>
+</section>

package/scaffold/.agent/skills/total-recall/plugins/mesh/package-lock.json

@@ -15,7 +15,7 @@
       "devDependencies": {
         "jsdom": "^29.1.1",
         "supertest": "^7.3.1",
-        "total-recall-brain": "3.45.0",
+        "total-recall-brain": "3.47.0",
         "vitest": "^4.1.12"
       }
     },
@@ -7177,9 +7177,9 @@
       }
     },
     "node_modules/total-recall-brain": {
-      "version": "3.45.0",
-      "resolved": "https://registry.npmjs.org/total-recall-brain/-/total-recall-brain-3.45.0.tgz",
-      "integrity": "sha512-HDYfROazZbsLHQsFPnlBcSpe1HL1QEi7JG8x/eNRUI06RxVQsZWl8LwBo2lTWjWRDrKmCy7BUmSXQDuWF3lrEw==",
+      "version": "3.47.0",
+      "resolved": "https://registry.npmjs.org/total-recall-brain/-/total-recall-brain-3.47.0.tgz",
+      "integrity": "sha512-S4UIdbbTyxw7C4+rix+7oHMm/6gYkcxwNBcP6kRDySX40p5IgqVTKgHk1n8rmaKiyYFoIX/HZHlHSjNrHgn0Gw==",
       "dev": true,
       "license": "MIT",
       "workspaces": [

package/scaffold/.agent/skills/total-recall/plugins/mesh/package.json

@@ -1,6 +1,6 @@
 {
   "name": "tr-plugin-mesh",
-  "version": "0.3.0",
+  "version": "0.3.1",
   "type": "module",
   "description": "Headscale and Tailscale SSH control-server mesh administration and node discovery",
   "scripts": {
@@ -22,7 +22,8 @@
     "capability/",
     "src/",
     "!src/**/*.spec.mjs",
-    "!src/**/*.test.mjs"
+    "!src/**/*.test.mjs",
+    "skills/"
   ],
   "overrides": {
     "@ssss/cli": "npm:@gregiteen/ssss-cli@0.14.5"