total-recall-brain 3.9.0 → 3.11.0

package/bin/antigravity.mjs

@@ -1,17 +1,20 @@
 #!/usr/bin/env node
+// Antigravity CLI Agent Wrapper — routes through the running Antigravity IDE
+// via agentapi, using the user's logged-in Google account.
 
 import fs from 'node:fs';
 import path from 'node:path';
 import os from 'node:os';
+import { spawnSync } from 'node:child_process';
 
 const args = process.argv.slice(2);
 let prompt = '';
 let outputJson = false;
-let requestedModel = process.env.TR_CLI_MODEL || 'default';
+let requestedModel = process.env.TR_CLI_MODEL || 'flash';
 
 if (args.includes('-h') || args.includes('--help')) {
   console.log(`
-Antigravity CLI Agent Wrapper — Headless Zero-Dependency Cognitive Agent
+Antigravity CLI Agent Wrapper — Headless via agentapi (logged-in account)
 
 Usage:
   antigravity [options] [prompt]
@@ -19,39 +22,30 @@ Usage:
 
 Options:
   -p, --prompt    The text prompt to generate content for
-  -m, --model     Gemini API model identifier or alias (default: default / gemini-3.5-flash)
-                  Supported aliases:
-                    - default / gemini / flash / gemini-flash -> dynamically resolves best Flash model
-                    - pro / gemini-pro / 3.1-pro             -> dynamically resolves best Pro model
-  -o, --json      Output dynamic JSON response payload (choices: stream/json/default)
-  --json          Output dynamic JSON response payload
+  -m, --model     Model: flash_lite, flash, pro (default: flash)
+  -o json         Output JSON response payload
+  --json          Output JSON response payload
   -h, --help      Show this help information
-
-Examples:
-  antigravity "Say hello"
-  antigravity -p "Write an essay about AI" -m pro
-  antigravity -p "Get system stats" --json
 `);
   process.exit(0);
 }
 
+// Ignored flags for compatibility with tr-cli-agents dispatch
+const IGNORED = new Set(['--sandbox=false', '--yolo']);
+
 for (let i = 0; i < args.length; i++) {
-  if (args[i] === '-p' || args[i] === '--prompt') {
-    prompt = args[i + 1] || '';
-    i++;
-  } else if (args[i] === '-o' && args[i + 1] === 'json') {
-    outputJson = true;
-    i++;
-  } else if (args[i] === '--json') {
-    outputJson = true;
-  } else if (args[i] === '-m' || args[i] === '--model') {
-    requestedModel = args[i + 1] || requestedModel;
-    i++;
-  }
+  if (IGNORED.has(args[i])) continue;
+  if (args[i] === '-p' || args[i] === '--prompt') { prompt = args[i + 1] || ''; i++; }
+  else if (args[i] === '-o' && args[i + 1] === 'json') { outputJson = true; i++; }
+  else if (args[i] === '--json') { outputJson = true; }
+  else if (args[i] === '-m' || args[i] === '--model') { requestedModel = args[i + 1] || requestedModel; i++; }
 }
 
 if (!prompt && args.length > 0) {
-  prompt = args[args.length - 1];
+  // Last non-flag arg is the prompt
+  for (let i = args.length - 1; i >= 0; i--) {
+    if (!args[i].startsWith('-') && !IGNORED.has(args[i])) { prompt = args[i]; break; }
+  }
 }
 
 if (!prompt) {
@@ -59,165 +53,50 @@ if (!prompt) {
   process.exit(1);
 }
 
-// Robust fallback to load GOOGLE_API_KEY from .env files when executed standalone
-if (!process.env.GOOGLE_API_KEY) {
-  try {
-    let dir = process.cwd();
-    while (dir !== path.dirname(dir)) {
-      const envPath = path.join(dir, '.env');
-      if (fs.existsSync(envPath)) {
-        const content = fs.readFileSync(envPath, 'utf8');
-        for (const line of content.split('\n')) {
-          const match = line.match(/^\s*GOOGLE_API_KEY\s*=\s*(["']?)(.*?)\1\s*$/);
-          if (match) {
-            process.env.GOOGLE_API_KEY = match[2];
-            break;
-          }
-        }
-      }
-      if (process.env.GOOGLE_API_KEY) break;
-      dir = path.dirname(dir);
-    }
-  } catch {
-    // Silent ignore
-  }
+// Map model aliases
+const modelMap = {
+  default: 'flash', gemini: 'flash', 'gemini-flash': 'flash',
+  'gemini-3.5-flash': 'flash', '3.5-flash': 'flash',
+  pro: 'pro', 'gemini-pro': 'pro', '3.1-pro': 'pro',
+  lite: 'flash_lite', 'flash-lite': 'flash_lite',
+};
+const model = modelMap[requestedModel] || requestedModel;
+
+// Spawn agentapi new-conversation and capture the response
+const result = spawnSync('agentapi', [
+  'new-conversation',
+  `--model=${model}`,
+  '--title=antigravity-cli',
+  prompt,
+], {
+  encoding: 'utf8',
+  timeout: 300_000,
+  maxBuffer: 10 * 1024 * 1024,
+  env: process.env,
+});
+
+if (result.status !== 0) {
+  const err = result.stderr || result.stdout || 'agentapi failed';
+  console.error('Error:', err);
+  process.exit(1);
 }
 
-const apiKey = process.env.GOOGLE_API_KEY || '';
-if (!apiKey) {
-  console.warn('Warning: GOOGLE_API_KEY environment variable is not configured. Attempting connection via GCP Application Default Credentials or ambient environment...');
+const raw = result.stdout?.trim() || '';
+
+// Parse agentapi response
+let text = raw;
+try {
+  const parsed = JSON.parse(raw);
+  // agentapi returns { response: { conversationId, content } }
+  if (parsed.response?.content) text = parsed.response.content;
+  else if (parsed.content) text = parsed.content;
+  else if (parsed.response) text = typeof parsed.response === 'string' ? parsed.response : JSON.stringify(parsed.response);
+} catch {
+  // Not JSON, use raw output
 }
 
-// Resolve the model dynamically from the API registry based on the category/alias selected
-async function resolveGenerativeModel(selectedModel) {
-  const aliases = {
-    gemini: 'flash',
-    default: 'flash',
-    flash: 'flash',
-    'gemini-flash': 'flash',
-    '3.5-flash': 'flash',
-    pro: 'pro',
-    'gemini-pro': 'pro',
-    '3.1-pro': 'pro'
-  };
-
-  const category = aliases[selectedModel];
-  if (!category) {
-    // If it's a full model string, use it directly
-    return selectedModel;
-  }
-
-  try {
-    const keyParam = apiKey ? `key=${apiKey}` : '';
-    const headers = {};
-    if (!apiKey && process.env.GCLOUD_TOKEN) {
-      headers['Authorization'] = `Bearer ${process.env.GCLOUD_TOKEN}`;
-    }
-    const res = await fetch(`https://generativelanguage.googleapis.com/v1beta/models?${keyParam}`, {
-      headers,
-      signal: AbortSignal.timeout(5000)
-    });
-    if (res.ok) {
-      const data = await res.json();
-      const models = data.models || [];
-      
-      if (category === 'pro') {
-        const proPreferences = [
-          'gemini-3.1-pro-preview',
-          'gemini-2.5-pro',
-          'gemini-1.5-pro',
-          'gemini-pro-latest'
-        ];
-        for (const p of proPreferences) {
-          if (models.some(m => m.name === `models/${p}`)) {
-            return p;
-          }
-        }
-      } else {
-        const flashPreferences = [
-          'gemini-3.5-flash',
-          'gemini-3.1-flash-lite',
-          'gemini-2.5-flash',
-          'gemini-2.0-flash-lite',
-          'gemini-flash-latest'
-        ];
-        for (const p of flashPreferences) {
-          if (models.some(m => m.name === `models/${p}`)) {
-            return p;
-          }
-        }
-      }
-    }
-  } catch {
-    // Silent failover to hardcoded default targets
-  }
-
-  // Ultimate fallback
-  return category === 'pro' ? 'gemini-3.1-pro-preview' : 'gemini-3.5-flash';
+if (outputJson) {
+  console.log(JSON.stringify({ response: text }));
+} else {
+  console.log(text);
 }
-
-async function main() {
-  try {
-    const resolvedModel = await resolveGenerativeModel(requestedModel);
-    const keyParam = apiKey ? `?key=${apiKey}` : '';
-    const url = `https://generativelanguage.googleapis.com/v1beta/models/${resolvedModel}:generateContent${keyParam}`;
-
-    const headers = {
-      'Content-Type': 'application/json',
-    };
-    if (!apiKey && process.env.GCLOUD_TOKEN) {
-      headers['Authorization'] = `Bearer ${process.env.GCLOUD_TOKEN}`;
-    }
-
-    const res = await fetch(url, {
-      method: 'POST',
-      headers,
-      body: JSON.stringify({
-        contents: [{
-          parts: [{ text: prompt }]
-        }]
-      })
-    });
-
-    if (!res.ok) {
-      const errText = await res.text();
-      throw new Error(`Gemini API returned status ${res.status}: ${errText}`);
-    }
-
-    const data = await res.json();
-    const text = data.candidates?.[0]?.content?.parts?.[0]?.text || '';
-
-    // Save usage data for token monitoring/budget safety
-    try {
-      const promptTokens = data.usageMetadata?.promptTokenCount || 0;
-      const candidatesTokens = data.usageMetadata?.candidatesTokenCount || 0;
-      if (promptTokens > 0 || candidatesTokens > 0) {
-        const tmpDir = path.join(os.homedir(), '.gemini', 'tmp', 'antigravity', 'chats');
-        if (!fs.existsSync(tmpDir)) {
-          fs.mkdirSync(tmpDir, { recursive: true });
-        }
-        const usageLine = JSON.stringify({
-          timestamp: new Date().toISOString(),
-          tokens: {
-            input: promptTokens,
-            output: candidatesTokens
-          }
-        });
-        fs.appendFileSync(path.join(tmpDir, 'usage.jsonl'), usageLine + '\n', 'utf8');
-      }
-    } catch {
-      // Silent ignore
-    }
-
-    if (outputJson) {
-      console.log(JSON.stringify({ response: text }));
-    } else {
-      console.log(text);
-    }
-  } catch (err) {
-    console.error('Error calling Gemini API:', err.message);
-    process.exit(1);
-  }
-}
-
-main();

package/package.json

@@ -1,11 +1,11 @@
 {
   "name": "total-recall-brain",
-  "version": "3.9.0",
+  "version": "3.11.0",
   "description": "Sovereign AI system — database-free, SSSS-powered personal intelligence engine deployable to any POSIX host.",
   "type": "module",
   "bin": {
-    "total-recall": "./bin/total-recall.mjs",
-    "antigravity": "./bin/antigravity.mjs"
+    "total-recall": "bin/total-recall.mjs",
+    "antigravity": "bin/antigravity.mjs"
   },
   "files": [
     "bin/",
@@ -56,6 +56,7 @@
   },
   "homepage": "https://github.com/gregiteen/total-recall#readme",
   "dependencies": {
+    "@ssss/cli": "github:gregiteen/ssss#v0.7.0",
     "bcrypt": "^6.0.0",
     "cookie-parser": "^1.4.7",
     "cors": "^2.8.6",
@@ -64,9 +65,9 @@
     "gray-matter": "^4.0.3",
     "jsonwebtoken": "^9.0.3",
     "natural": "^8.1.1",
+    "ws": "^8.18.0",
     "yaml": "^2.9.0",
-    "zod": "^4.4.3",
-    "ws": "^8.18.0"
+    "zod": "^4.4.3"
   },
   "devDependencies": {
     "skills": "^1.5.7",

package/scaffold/.agent/skills/total-recall/SKILL.md

@@ -1,5 +1,6 @@
 ---
 name: total-recall
+provenance: total-recall
 description: "Use this skill as the master guide to understand the entire Total Recall Sovereign AI OS setup, VFS topologies, SSSS protocol, CLI parameter reference, troubleshooting, and automated upstream repository sync. MANDATORY: Read this file before attempting major setup modifications or diagnoses."
 ---
 

package/scaffold/.agent/skills/total-recall/skills/{cli-agents → tr-cli-agents}/SKILL.md

@@ -1,5 +1,6 @@
 ---
-name: cli-agents
+name: tr-cli-agents
+provenance: total-recall
 description: "Orchestrate headlessly spawned CLI agents from the central registry."
 ---
 
@@ -12,7 +13,7 @@ This system skill governs the discovery, configuration, and execution of headles
 ## 🎯 SYSTEM OVERVIEW
 
 The CLI Agent Dispatch Engine parses agent profiles from the central registry file:
-`.agent/skills/total-recall/skills/cli-agents/agents.yml`
+`.agent/skills/total-recall/skills/tr-cli-agents/agents.yml`
 
 ```mermaid
 flowchart TD

package/scaffold/.agent/skills/total-recall/skills/{research → tr-research}/SKILL.md

@@ -1,6 +1,7 @@
 ---
 type: skill
-name: research
+name: tr-research
+provenance: total-recall
 description: "Use this skill when queueing, searching, and managing long-horizon background research projects via the Total Recall REST API."
 ---
 

package/scaffold/.agent/skills/total-recall/skills/{skill → tr-skill}/SKILL.md

@@ -1,5 +1,6 @@
 ---
-name: skill
+name: tr-skill
+provenance: total-recall
 description: "Use this skill when creating, auditing, or modifying any skill in the .agent/skills/ ecosystem. MANDATORY: You MUST read the full SKILL.md file before executing."
 ---
 
@@ -186,7 +187,7 @@ Contains standalone prompt files for subtasks that can be delegated to parallel
 
 ### Quick method (script):
 ```bash
-bash .agent/skills/skill/scripts/create-skill.sh my-new-skill
+bash .agent/skills/tr-skill/scripts/create-skill.sh my-new-skill
 ```
 
 ### Manual method:

package/scaffold/.agent/skills/total-recall/skills/{skill → tr-skill}/evals/evals.json

@@ -2,19 +2,19 @@
   {
     "id": "skill-eval-1",
     "description": "SKILL.md exists",
-    "command": "test -f .agent/skills/skill/SKILL.md",
+    "command": "test -f .agent/skills/tr-skill/SKILL.md",
     "expected_exit_code": 0
   },
   {
     "id": "skill-eval-2",
     "description": "Evals validation",
-    "command": "test -f .agent/skills/skill/scripts/run-evals.mjs",
+    "command": "test -f .agent/skills/tr-skill/scripts/run-evals.mjs",
     "expected_exit_code": 0
   },
   {
     "id": "skill-eval-3",
     "description": "Optimization enforcement",
-    "command": "test -f .agent/skills/skill/scripts/enforce-skill-optimization.mjs",
+    "command": "test -f .agent/skills/tr-skill/scripts/enforce-skill-optimization.mjs",
     "expected_exit_code": 0
   }
 ]

package/scaffold/.agent/skills/total-recall/skills/{skill → tr-skill}/hooks/on-skill-add.sh

@@ -10,5 +10,5 @@ SCRIPT_DIR="$(cd "$(dirname "$0")" && pwd)"
 ROOT="$(cd "$SCRIPT_DIR/../../../.." && pwd)"
 
 echo "🔄 OnSkillAdd hook triggered — regenerating skill index..."
-node "$ROOT/.agent/skills/skill/scripts/update-skill-index.mjs"
+node "$ROOT/.agent/skills/tr-skill/scripts/update-skill-index.mjs"
 echo "✅ Routing table and INSTRUCTIONS.md updated."

package/scaffold/.agent/skills/total-recall/skills/{skill → tr-skill}/hooks/on-skill-delete.sh

@@ -10,5 +10,5 @@ SCRIPT_DIR="$(cd "$(dirname "$0")" && pwd)"
 ROOT="$(cd "$SCRIPT_DIR/../../../.." && pwd)"
 
 echo "🧹 OnSkillDelete hook triggered — cleaning skill index..."
-node "$ROOT/.agent/skills/skill/scripts/update-skill-index.mjs"
+node "$ROOT/.agent/skills/tr-skill/scripts/update-skill-index.mjs"
 echo "✅ Routing table and INSTRUCTIONS.md cleaned."

package/scaffold/.agent/skills/total-recall/skills/{skill → tr-skill}/scripts/create-skill.sh

@@ -1,8 +1,8 @@
 #!/bin/bash
 # create-skill.sh — Scaffold a new Dev Skill from the template
 #
-# Usage: bash .agent/skills/skill/scripts/create-skill.sh <skill-name>
-# Example: bash .agent/skills/skill/scripts/create-skill.sh my-new-skill
+# Usage: bash .agent/skills/tr-skill/scripts/create-skill.sh <skill-name>
+# Example: bash .agent/skills/tr-skill/scripts/create-skill.sh my-new-skill
 
 set -euo pipefail
 
@@ -60,6 +60,6 @@ echo ""
 echo "📝 Next steps:"
 echo "  1. Edit $TARGET/SKILL.md with real instructions"
 echo "  2. Write a trigger-optimized description in the frontmatter"
-echo "  3. Run: node .agent/skills/skill/scripts/update-skill-index.mjs"
+echo "  3. Run: node .agent/skills/tr-skill/scripts/update-skill-index.mjs"
 echo ""
 echo "🏁 Done."

package/scaffold/.agent/skills/total-recall/skills/{skill → tr-skill}/scripts/find-skills.mjs

@@ -77,6 +77,7 @@ export function parseFindOutput(rawOutput) {
 
     const name = skillMatch[1];
     const installs = parseInstalls(skillMatch[2], skillMatch[3] || '');
+    const installsStr = `${skillMatch[2]}${skillMatch[3] || ''}`;
 
     // Next non-empty line should be the URL (prefixed with └ or similar box-drawing chars)
     let url = '';
@@ -92,12 +93,19 @@ export function parseFindOutput(rawOutput) {
       break; // only check the very next non-empty line
     }
 
-    results.push({ name, installs, url });
+    results.push({ name, installs, installsStr, url });
   }
 
   return results;
 }
 
+function formatInstalls(installs) {
+  if (installs >= 1_000_000_000) return `${(installs / 1_000_000_000).toFixed(1).replace(/\.0$/, '')}B`;
+  if (installs >= 1_000_000) return `${(installs / 1_000_000).toFixed(1).replace(/\.0$/, '')}M`;
+  if (installs >= 1_000) return `${(installs / 1_000).toFixed(1).replace(/\.0$/, '')}K`;
+  return String(installs);
+}
+
 // ─── Live Registry Search ───────────────────────────────────────────────────
 
 /**
@@ -122,3 +130,19 @@ export function searchRegistry(query, { timeoutMs = 15_000 } = {}) {
     return [];
   }
 }
+
+/**
+ * Search skills.sh and sort by absolute install count, highest first.
+ *
+ * @param {string} query
+ * @param {object} [options]
+ * @returns {Array<{ name: string, installs: number, installsStr: string, url: string }>}
+ */
+export function searchAndSort(query, options = {}) {
+  return searchRegistry(query, options)
+    .map(result => ({
+      ...result,
+      installsStr: result.installsStr || formatInstalls(result.installs || 0),
+    }))
+    .sort((a, b) => (b.installs || 0) - (a.installs || 0));
+}

package/scaffold/.agent/skills/total-recall/skills/tr-skill/scripts/install-skill.mjs

@@ -0,0 +1,117 @@
+/**
+ * install-skill.mjs — safe wrapper around the Skills CLI installer.
+ */
+
+import fs from 'node:fs';
+import path from 'node:path';
+import { spawnSync } from 'node:child_process';
+import { scanDirectory, formatReport } from './scan-skill.mjs';
+
+const BLOCKED_SOURCE_CHARS = /[\0\r\n;&|<>`$]/;
+
+export function validateSkillSource(source) {
+  if (typeof source !== 'string') return false;
+  const trimmed = source.trim();
+  if (!trimmed || trimmed.length > 500) return false;
+  return !BLOCKED_SOURCE_CHARS.test(trimmed);
+}
+
+export function inferSkillName(source) {
+  const trimmed = String(source || '').trim().replace(/\/+$/, '');
+  if (!trimmed) return null;
+  if (!trimmed.startsWith('git@') && trimmed.includes('@')) {
+    return trimmed.split('@').pop() || null;
+  }
+  const last = trimmed.split('/').filter(Boolean).pop();
+  return last ? last.replace(/\.git$/i, '') : null;
+}
+
+function uniqueExistingDirs(paths) {
+  const seen = new Set();
+  const dirs = [];
+  for (const candidate of paths) {
+    if (!candidate) continue;
+    const resolved = path.resolve(candidate);
+    if (seen.has(resolved) || !fs.existsSync(resolved)) continue;
+    seen.add(resolved);
+    dirs.push(resolved);
+  }
+  return dirs;
+}
+
+export function installedSkillCandidates(source, { cwd = process.cwd(), agentDir = path.join(cwd, '.agent') } = {}) {
+  const skillName = inferSkillName(source);
+  if (!skillName) return [];
+  return [
+    path.join(agentDir, 'skills', skillName),
+    path.join(cwd, '.agent', 'skills', skillName),
+    path.join(cwd, '.agents', 'skills', skillName),
+    path.join(cwd, '.claude', 'skills', skillName),
+  ];
+}
+
+/**
+ * Install a skill with the Skills CLI, then scan installed script files.
+ *
+ * @param {string} source skills add source, e.g. owner/repo@skill or URL
+ * @param {object} [options]
+ * @param {string} [options.cwd]
+ * @param {string} [options.agentDir]
+ * @param {boolean} [options.dryRun=false]
+ * @returns {{ success: boolean, source: string, command?: string[], findings?: Array, error?: string }}
+ */
+export function installSkill(source, options = {}) {
+  const cwd = options.cwd || process.cwd();
+  const agentDir = options.agentDir || path.join(cwd, '.agent');
+  const normalized = String(source || '').trim();
+
+  if (!validateSkillSource(normalized)) {
+    const error = 'Invalid skill source. Use a repository, URL, git source, local path, or owner/repo@skill without shell metacharacters.';
+    console.error(`❌ ${error}`);
+    return { success: false, source: normalized, error };
+  }
+
+  const command = ['npx', '-y', 'skills', 'add', normalized, '-y'];
+  if (options.dryRun) {
+    return { success: true, source: normalized, command };
+  }
+
+  console.log(`📦 Installing skill: ${normalized}`);
+  const child = spawnSync(command[0], command.slice(1), {
+    cwd,
+    encoding: 'utf8',
+    stdio: ['ignore', 'pipe', 'pipe'],
+  });
+
+  if (child.stdout) process.stdout.write(child.stdout);
+  if (child.stderr) process.stderr.write(child.stderr);
+
+  if (child.error || child.status !== 0) {
+    const error = child.error?.message || `skills CLI exited with status ${child.status}`;
+    console.error(`❌ Skill installation failed: ${error}`);
+    return { success: false, source: normalized, command, error };
+  }
+
+  const installedDirs = uniqueExistingDirs(installedSkillCandidates(normalized, { cwd, agentDir }));
+  const findings = installedDirs.flatMap(dir => scanDirectory(dir));
+  const report = formatReport(findings);
+  console.log(report.trimEnd());
+
+  if (findings.some(f => f.severity === 'CRITICAL')) {
+    const error = 'Installed skill contains critical scanner findings.';
+    console.error(`❌ ${error}`);
+    return { success: false, source: normalized, command, findings, error };
+  }
+
+  const compile = spawnSync('npx', ['total-recall', 'compile'], {
+    cwd,
+    encoding: 'utf8',
+    stdio: ['ignore', 'pipe', 'pipe'],
+    env: { ...process.env, AGENT_DIR: agentDir },
+  });
+  if (compile.status !== 0) {
+    console.warn('⚠️  Skill installed, but surface recompilation returned a warning.');
+  }
+
+  return { success: true, source: normalized, command, findings };
+}

package/scaffold/.agent/skills/total-recall/skills/{skill → tr-skill}/scripts/scan-skill.mjs

@@ -205,3 +205,23 @@ export function formatReport(findings) {
 
   return report;
 }
+
+/**
+ * CLI-friendly scanner entrypoint.
+ *
+ * @param {string} targetDir
+ * @returns {{ success: boolean, findings: Array, report: string }}
+ */
+export function runScan(targetDir) {
+  if (!targetDir || !fs.existsSync(targetDir)) {
+    const report = `Skill directory not found: ${targetDir}\n`;
+    console.error(report.trim());
+    return { success: false, findings: [], report };
+  }
+
+  const findings = scanDirectory(targetDir);
+  const report = formatReport(findings);
+  const blocked = findings.some(f => f.severity === 'CRITICAL');
+  console.log(report.trimEnd());
+  return { success: !blocked, findings, report };
+}