total-recall-brain 3.47.0 → 3.47.1

package/bin/total-recall.mjs

@@ -166,6 +166,11 @@ async function main() {
             const { runPluginCommand } = await import('../src/core/plugin-runner.mjs');
             const pluginArgs = args.slice(1);
             const result = await runPluginCommand(p, { args: pluginArgs, stdin: 'inherit', projectRoot, activateOnUse: true });
+            // A router's choice binds the gate: other harnesses may not write until it is replaced.
+            if (p.manifest.gate?.router) {
+              const { noteRouteSelection } = await import('../src/cli/preflight.mjs');
+              noteRouteSelection({ manifest: p.manifest, args: pluginArgs, stdout: result.stdout ?? result.output });
+            }
             if (result.stdout !== undefined) {
               if(result.stdout)process.stdout.write(result.stdout);
               if(result.stderr)process.stderr.write(result.stderr);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "total-recall-brain",
-  "version": "3.47.0",
+  "version": "3.47.1",
   "description": "The Vibe Coding Brain & Autonomous Software Factory: memory, rules, secrets, and 33 visual plugins automatically managed across all your devices.",
   "type": "module",
   "bin": {

package/scaffold/.agent/skills/total-recall/plugins/auth/package-lock.json

@@ -19,7 +19,7 @@
       },
       "devDependencies": {
         "supertest": "^7.3.1",
-        "total-recall-brain": "3.45.0",
+        "total-recall-brain": "3.47.0",
         "vitest": "^4.1.12"
       }
     },
@@ -6704,9 +6704,9 @@
       }
     },
     "node_modules/total-recall-brain": {
-      "version": "3.45.0",
-      "resolved": "https://registry.npmjs.org/total-recall-brain/-/total-recall-brain-3.45.0.tgz",
-      "integrity": "sha512-HDYfROazZbsLHQsFPnlBcSpe1HL1QEi7JG8x/eNRUI06RxVQsZWl8LwBo2lTWjWRDrKmCy7BUmSXQDuWF3lrEw==",
+      "version": "3.47.0",
+      "resolved": "https://registry.npmjs.org/total-recall-brain/-/total-recall-brain-3.47.0.tgz",
+      "integrity": "sha512-S4UIdbbTyxw7C4+rix+7oHMm/6gYkcxwNBcP6kRDySX40p5IgqVTKgHk1n8rmaKiyYFoIX/HZHlHSjNrHgn0Gw==",
       "dev": true,
       "license": "MIT",
       "workspaces": [

package/scaffold/.agent/skills/total-recall/plugins/auth/package.json

@@ -1,6 +1,6 @@
 {
   "name": "tr-plugin-auth",
-  "version": "1.3.0",
+  "version": "1.3.1",
   "description": "White-label Total Recall auth plugin: Passkey biometric FIDO2 and Google OAuth2 authentication.",
   "type": "module",
   "main": "cli.mjs",
@@ -34,7 +34,8 @@
     "scripts/",
     "!src/**/*.spec.mjs",
     "ui/",
-    "!src/**/*.test.mjs"
+    "!src/**/*.test.mjs",
+    "skills/"
   ],
   "publishConfig": {
     "access": "public"

package/scaffold/.agent/skills/total-recall/plugins/auth/plugin.json

@@ -2,7 +2,7 @@
   "$schema": "https://github.com/gregiteen/total-recall/blob/main/metadata.plugin.schema.json",
   "id": "auth",
   "name": "Auth & Secrets",
-  "version": "1.3.0",
+  "version": "1.3.1",
   "description": "Encrypted credentials, repository bindings, dashboard sign-in and access across brains and machines.",
   "author": "Total Recall contributors",
   "license": "MIT",
@@ -49,9 +49,17 @@
     }
   ],
   "gate": {
-    "tasks": ["Read, store or rotate a credential", "Issue or revoke API keys", "Passkeys, passwords and sign-in sessions", "Audit where secrets are used"],
+    "tasks": [
+      "Read, store or rotate a credential",
+      "Issue or revoke API keys",
+      "Passkeys, passwords and sign-in sessions",
+      "Audit where secrets are used"
+    ],
     "owned_commands": [
-      { "pattern": "security\\s+find-generic-password\\b", "use": "total-recall auth secret get <KEY>" }
+      {
+        "pattern": "security\\s+find-generic-password\\b",
+        "use": "total-recall auth secret get <KEY>"
+      }
     ]
   },
   "cli": {
@@ -129,10 +137,20 @@
         "tag": "tr-auth-home",
         "module": "ui/home.js",
         "description": "Credential inventory, brains, machines and sign-in checks",
-        "events": ["auth-inventory", "auth-credential-mutate"]
+        "events": [
+          "auth-inventory",
+          "auth-credential-mutate"
+        ]
       }
     ]
   },
+  "reuse": {
+    "commands": [
+      "total-recall ssss status",
+      "total-recall decision status"
+    ],
+    "owned": "Encrypted credential store, OAuth/passkey sign-in, session tokens, scoped keys, and auth secrets across Total Recall plugins."
+  },
   "configuration": {
     "fields": [
       {
@@ -237,5 +255,12 @@
   "distribution": {
     "tier": "official",
     "license": "open"
-  }
+  },
+  "skills": [
+    {
+      "id": "auth",
+      "path": "./skills/auth/SKILL.md",
+      "description": "Encrypted credentials, repository bindings, dashboard sign-in and access across brains and machines."
+    }
+  ]
 }

package/scaffold/.agent/skills/total-recall/plugins/auth/skills/auth/SKILL.md

@@ -0,0 +1,35 @@
+---
+name: auth
+description: "Encrypted credentials, repository bindings, dashboard sign-in and access across brains and machines."
+version: 1.3.0
+repo_scoped: false
+---
+
+# Auth & Secrets
+
+Encrypted credentials, repository bindings, dashboard sign-in and access across brains and machines.
+
+## When to Use
+
+Use the `auth` Total Recall plugin (`total-recall auth`) instead of ad-hoc scripts or raw commands whenever working on auth & secrets tasks.
+
+## Commands
+
+```bash
+total-recall auth --help
+total-recall auth status  # Display auth system status and active providers
+total-recall auth audit  # Audit permissions, session secrets, and credential integrity
+total-recall auth rotate  # Generate and securely rotate SESSION_SECRET in store
+total-recall auth passkey  # Manage FIDO2 WebAuthn passkeys
+total-recall auth google  # Google OAuth status, connect, accounts, refresh and verified disconnect
+total-recall auth probe  # Run HTTP 200 health verification probe
+total-recall auth session  # Inspect active session tokens
+total-recall auth agent  # Sign in an agent CLI that authenticates on its own terminal
+total-recall auth secret  # Manage and inspect auth secrets in the Total Recall store
+total-recall auth password  # Set dashboard password through encrypted auth store: set --stdin [--force-reset]
+total-recall auth key  # Issue, list, revoke and audit scoped tokens; inspect and update role policy
+```
+
+## Owned Raw Commands
+
+This plugin owns: `security\s+find-generic-password\b`.