total-recall AGENTS.md

total-recall AGENTS.md is an instructions file for Codex, OpenCode from strvmarv/total-recall. It costs 9,174 tokens per session, scanned B, original, MIT.

A contributor guide for Total Recall, a .NET 8 plug-in that stores, searches, and serves memory for coding assistants. It explains the current architecture, project history, release process, plug-in system, and development conventions.

In plain words
What is it for?
Use it when modifying, testing, packaging, releasing, or troubleshooting the Total Recall plug-in and its assistant integrations.
Why use it?
It tells agents and contributors how the current version works and which older instructions no longer apply. This prevents work based on outdated files, commands, or assumptions.

Instructions file for CodexOpenCode

Installs and runs on its own, but its text points at files inside the plugin that ships it — anything it tells you to read at a ${CLAUDE_PLUGIN_ROOT} path is only there once the plugin is installed.

Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

agentmods
npx agentmods add instructions/strvmarv/total-recall/agents-md
Clone the repo
git clone --depth 1 https://github.com/strvmarv/total-recall

Made for: Codex, OpenCode.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for total-recall AGENTS.md

README.md
[![agentmods](https://agentmods.dev/badge/instructions/strvmarv/total-recall/agents-md.svg)](https://agentmods.dev/instructions/strvmarv/total-recall/agents-md)
Your own site
<a href="https://agentmods.dev/instructions/strvmarv/total-recall/agents-md"><img src="https://agentmods.dev/badge/instructions/strvmarv/total-recall/agents-md.svg" alt="Measured on agentmods" height="20"></a>
Per session 9,174 This file is loaded in full into every session.
When invoked 9,174 The same file — it is already loaded in full.
Security scan B 1 finding. Scan, not verified.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5 $0.09174 $0.09174
Opus 5 $0.04587 $0.04587
Sonnet 5 $0.01835 $0.01835
Haiku 4.5 $0.00917 $0.00917

Measured 4d ago against content hash 0787a845384e, method: parsed. Prices are Anthropic first-party input rates as of 2026-08-30, from the pricing page.

Security

Grade B, and why

total-recall AGENTS.md scanned grade B with 1 finding against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 4d ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Reads agent configuration directoriesmediumAgent snooping

.claude/, .codex/, .gemini/ hold keys, settings and other credentials a mod has no legitimate need for.

- Entries in `~/.claude/settings.json`: `enabledPlugins["total-recall@..."]` and `extraKnownMarketplaces["strvmarv-..."]`
AGENTS.md · 387 lines

How it starts

The opening of the file, as written. The whole thing — 387 lines — stays where its author put it; the contents beside it link to each section on GitHub.

Agent & Contributor Guide

This file is the operational handbook for AI agents and human contributors working in this repo. For end-user docs see README.md; for the contributor onboarding flow see CONTRIBUTING.md. This file documents project-wide rules, the release flow, the plugin system, the session lifecycle, the schema migration framework, and the beta dogfood mechanics.

State as of 0.9.x: total-recall is a .NET 8 NativeAOT plugin (C# imperative shell + F# functional core). Shell: PowerShell (win32) — use PowerShell syntax for all bash commands. The TypeScript implementation that lived in src/ through 0.7.x was stripped during the 0.7.2 → 0.8.0 cutover. Anything in this file that mentions dist/, bun, tsup, vitest, publish.yml, bin/start.cjs, or src/db/schema.ts is either gone or renamed — see the strip series in CHANGELOG.md (commits 87975a77a8c437).


Quick Reference

Project Overview

.NET 8 NativeAOT MCP server plugin (C# imperative shell + F# functional core) with npm packaging for Claude Code / Copilot CLI / Cursor / Kiro / OpenCode marketplace distribution. Three-tier memory (Hot/Warm/Cold with a sticky flag — new entries default to warm and earn promotion to hot by access; sticky pins, set via memory_pin/memory_unpin, are always injected first and immune to decay/compaction) + hierarchical KB, all local by default (SQLite + sqlite-vec + bundled ONNX), optionally synced to Cortex (sticky pins are local-only, never synced). The single binary also exposes a third surface: a built-in local web UI (total-recall ui) serving an embedded React SPA with six sections (Dashboard, Memory, Knowledge Base, Usage, Insights, Config) via TotalRecall.Web.

Layer Diagram

TotalRecall.Host (C#)          ← AOT entry point + composition root
├── TotalRecall.Server (C#)    ← MCP JSON-RPC over stdio; 49 handlers (one file each)
├── TotalRecall.Web (C#)       ← embedded minimal-API + React SPA (web UI), dispatches to ToolRegistry
├── TotalRecall.Cli (C#)       ← CLI commands (Spectre.Console), including `total-recall ui`
├── TotalRecall.Infrastructure (C#) ← SQLite/Postgres, ONNX embedder, importers, migrations
└── TotalRecall.Core (F#)      ← Pure functions: tokenizer, decay, ranking, parsers, chunker

npm wrapper layer (zero-dep Node):
  bin/start.js (launcher) ← dispatches on argv: `serve` (or no args) runs the MCP
    bootstrap shim (IS the MCP server from the harness's view; comes up instantly;
    provisions [sha256-verified via release provisioning.manifest.json] + spawns +
    proxies the NativeAOT engine; supervises/restarts on crash; never drops the MCP
    connection). Every OTHER subcommand (`ui`, `reindex-embeddings`, `config`,
    `dump-catalog`, …) is run via bin/shim/direct.js — provision then spawn the engine
    directly with inherited stdio (NO shim/handshake), because those emit human-readable
    stdout, not MCP JSON-RPC. Shim modules: bin/shim/{jsonrpc-stdio,state,server-surface,
    provisioner,engine-proxy,orchestrator,direct}.js. catalog.json (repo root) seeds
    tools/list before the engine is ready; generated by
    `dotnet run --project src/TotalRecall.Host -- dump-catalog`.
  scripts/fetch-binary.js ← download helper (shared by postinstall + provisioner)
  scripts/postinstall.js, scripts/verify-binaries.js

Read the full file on GitHub · 387 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 4d ago First seen · 387 lines · 9,174 tokens per session scan B 0787a845384e

Subscribe to this mod's changes

total-recall AGENTS.md is an instructions file published in the GitHub repository strvmarv/total-recall (14 stars, last pushed yesterday), licensed MIT. It adds 9,174 tokens to every session, about $0.0459 per session on Opus 5. A static security scan graded it B with 1 finding (reads agent configuration directories). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.