total-recall-brain 3.40.1 → 3.40.2

package/scaffold/.agent/skills/total-recall/plugins/openwiki/ui/panel.js

@@ -0,0 +1,539 @@
+// OpenWiki Interactive Knowledge Graph & Engine Panel
+// Provides full knowledge graph node inspection, hub directory browsing,
+// ingestion triggers, and secure API credential storage.
+class OpenwikiPanel extends HTMLElement {
+  constructor() {
+    super();
+    this.attachShadow({ mode: 'open' });
+    this._view = null;
+    this._activeTab = 'graph';
+    this._searchQuery = '';
+    this._selectedCategory = 'all';
+    this._selectedNode = null;
+    this._ingestOutput = '';
+    this._nodes = [];
+    this._loading = false;
+  }
+
+  set host(h) {
+    this._host = h;
+    this._loadLiveNodes();
+  }
+
+  get host() {
+    return this._host;
+  }
+
+  connectedCallback() {
+    this._loadLiveNodes();
+    this.render();
+  }
+
+  async _loadLiveNodes() {
+    if (this._loading) return;
+    this._loading = true;
+    try {
+      if (this._host && typeof this._host.run === 'function') {
+        const res = await this._host.run('hubs', ['--json']);
+        if (res && res.output) {
+          const parsed = JSON.parse(res.output);
+          if (parsed && Array.isArray(parsed.hubs) && parsed.hubs.length > 0) {
+            this._nodes = parsed.hubs.map((h) => ({
+              slug: h.path,
+              title: h.title,
+              category: 'hub',
+              importance: 3,
+              priority: 'normal',
+              tags: ['openwiki', 'hub', 'documentation'],
+              body: `Path: ${h.path}\nSize: ${h.size_bytes} bytes\nLines: ${h.lines}`
+            }));
+            this.render();
+            return;
+          }
+        }
+      }
+
+      const res = await fetch('/api/memory?tag=openwiki', { signal: AbortSignal.timeout(3000) });
+      if (res.ok) {
+        const data = await res.json();
+        const items = Array.isArray(data) ? data : (data.nodes || []);
+        if (items.length > 0) {
+          this._nodes = items.map((n) => ({
+            slug: n.slug || n.id || 'node',
+            title: n.title || 'Untitled Node',
+            category: n.category || 'fact',
+            importance: n.importance || 3,
+            priority: n.priority || 'medium',
+            tags: n.tags || [],
+            body: n.body || n.content || ''
+          }));
+          this.render();
+        }
+      }
+    } catch {
+      // Retain live empty state honestly
+    } finally {
+      this._loading = false;
+    }
+  }
+
+  set view(value) {
+    this._view = value;
+    this.render();
+  }
+
+  get view() {
+    return this._view;
+  }
+
+  connectedCallback() {
+    this.render();
+  }
+
+  _filterNodes() {
+    return this._nodes.filter((node) => {
+      const matchCat = this._selectedCategory === 'all' || node.category === this._selectedCategory;
+      const q = this._searchQuery.toLowerCase();
+      const matchQuery = !q || node.title.toLowerCase().includes(q) || node.body.toLowerCase().includes(q) || node.tags.some((t) => t.toLowerCase().includes(q));
+      return matchCat && matchQuery;
+    });
+  }
+
+  render() {
+    const root = this.shadowRoot;
+    if (!root) return;
+    root.replaceChildren();
+
+    const present = Boolean(this._view && this._view.present);
+    const filteredNodes = this._filterNodes();
+
+    const style = document.createElement('style');
+    style.textContent = `
+      :host {
+        display: block;
+        font-family: -apple-system, BlinkMacSystemFont, "Segoe UI", Roboto, sans-serif;
+        color: var(--color-text, #f8fafc);
+        background: var(--color-surface, #0f172a);
+        border: 1px solid var(--color-border, #1e293b);
+        border-radius: var(--radius-md, 8px);
+        padding: 16px;
+        box-sizing: border-box;
+      }
+      * { box-sizing: border-box; }
+      .header {
+        display: flex;
+        justify-content: space-between;
+        align-items: center;
+        border-bottom: 1px solid var(--color-border, #1e293b);
+        padding-bottom: 12px;
+        margin-bottom: 16px;
+      }
+      .title {
+        font-size: 18px;
+        font-weight: 700;
+        margin: 0;
+        color: #f8fafc;
+        display: flex;
+        align-items: center;
+        gap: 8px;
+      }
+      .badge {
+        font-size: 11px;
+        text-transform: uppercase;
+        letter-spacing: 0.05em;
+        padding: 3px 8px;
+        border-radius: 4px;
+        background: rgba(180, 83, 9, 0.2);
+        color: #f59e0b;
+        font-weight: 600;
+      }
+      .tabs {
+        display: flex;
+        gap: 8px;
+        margin-bottom: 16px;
+      }
+      .tab-btn {
+        min-height: 44px;
+        padding: 8px 16px;
+        border: 1px solid var(--color-border, #1e293b);
+        background: rgba(255, 255, 255, 0.03);
+        color: var(--color-text, #94a3b8);
+        border-radius: var(--radius-md, 6px);
+        font-size: 13px;
+        font-weight: 600;
+        cursor: pointer;
+        display: flex;
+        align-items: center;
+        justify-content: center;
+        transition: all 0.15s ease;
+      }
+      .tab-btn.active {
+        background: #b45309;
+        border-color: #d97706;
+        color: #ffffff;
+      }
+      .controls {
+        display: flex;
+        gap: 8px;
+        flex-wrap: wrap;
+        margin-bottom: 16px;
+      }
+      .search-box {
+        flex: 1;
+        min-height: 44px;
+        min-width: 200px;
+        padding: 8px 12px;
+        background: rgba(0, 0, 0, 0.3);
+        border: 1px solid var(--color-border, #1e293b);
+        border-radius: var(--radius-md, 6px);
+        color: #f8fafc;
+        font-size: 13px;
+      }
+      .filter-select {
+        min-height: 44px;
+        padding: 8px 12px;
+        background: rgba(0, 0, 0, 0.3);
+        border: 1px solid var(--color-border, #1e293b);
+        border-radius: var(--radius-md, 6px);
+        color: #f8fafc;
+        font-size: 13px;
+      }
+      .grid {
+        display: grid;
+        grid-template-columns: repeat(auto-fill, minmax(240px, 1fr));
+        gap: 12px;
+        margin-bottom: 16px;
+      }
+      .node-card {
+        background: rgba(255, 255, 255, 0.02);
+        border: 1px solid var(--color-border, #1e293b);
+        border-radius: var(--radius-md, 6px);
+        padding: 12px;
+        cursor: pointer;
+        transition: border-color 0.15s ease;
+      }
+      .node-card:hover {
+        border-color: #b45309;
+      }
+      .node-title {
+        font-size: 14px;
+        font-weight: 600;
+        margin: 0 0 6px 0;
+        color: #f1f5f9;
+      }
+      .node-cat {
+        font-size: 10px;
+        text-transform: uppercase;
+        font-weight: 700;
+        padding: 2px 6px;
+        border-radius: 3px;
+        display: inline-block;
+        margin-bottom: 8px;
+      }
+      .cat-invariant { background: rgba(239, 68, 68, 0.2); color: #ef4444; }
+      .cat-preference { background: rgba(59, 130, 246, 0.2); color: #3b82f6; }
+      .cat-fact { background: rgba(16, 185, 129, 0.2); color: #10b981; }
+      .cat-concept { background: rgba(245, 158, 11, 0.2); color: #f59e0b; }
+      .node-snippet {
+        font-size: 12px;
+        color: #94a3b8;
+        line-height: 1.4;
+        margin: 0;
+      }
+      .detail-pane {
+        background: rgba(0, 0, 0, 0.4);
+        border: 1px solid #b45309;
+        border-radius: var(--radius-md, 6px);
+        padding: 16px;
+        margin-bottom: 16px;
+      }
+      .detail-header {
+        display: flex;
+        justify-content: space-between;
+        align-items: flex-start;
+        margin-bottom: 12px;
+      }
+      .detail-title {
+        font-size: 16px;
+        font-weight: 700;
+        margin: 0;
+        color: #ffffff;
+      }
+      .detail-body {
+        font-size: 13px;
+        line-height: 1.6;
+        color: #cbd5e1;
+        white-space: pre-wrap;
+      }
+      .btn {
+        min-height: 44px;
+        padding: 8px 16px;
+        border: 1px solid var(--color-border, #1e293b);
+        border-radius: var(--radius-md, 6px);
+        background: #b45309;
+        color: #ffffff;
+        font-weight: 600;
+        cursor: pointer;
+        font-size: 13px;
+        display: inline-flex;
+        align-items: center;
+        justify-content: center;
+      }
+      .btn-secondary {
+        background: rgba(255, 255, 255, 0.05);
+        color: #cbd5e1;
+      }
+      .row {
+        display: flex;
+        gap: 8px;
+        flex-wrap: wrap;
+        margin-top: 12px;
+      }
+      input[type="text"], input[type="password"] {
+        flex: 1;
+        min-height: 44px;
+        padding: 8px 12px;
+        border-radius: var(--radius-md, 6px);
+        border: 1px solid var(--color-border, #1e293b);
+        background: rgba(0, 0, 0, 0.3);
+        color: #f8fafc;
+        font-size: 13px;
+      }
+      .terminal {
+        background: #090d16;
+        border: 1px solid #1e293b;
+        border-radius: 6px;
+        padding: 12px;
+        font-family: monospace;
+        font-size: 12px;
+        color: #38bdf8;
+        min-height: 60px;
+        white-space: pre-wrap;
+        margin-top: 12px;
+      }
+    `;
+
+    const header = document.createElement('div');
+    header.className = 'header';
+    header.innerHTML = `
+      <div class="title">
+        <span>OpenWiki Knowledge Engine</span>
+        <span class="badge">Graph Active</span>
+      </div>
+    `;
+
+    const tabs = document.createElement('div');
+    tabs.className = 'tabs';
+
+    const tabGraph = document.createElement('button');
+    tabGraph.className = `tab-btn ${this._activeTab === 'graph' ? 'active' : ''}`;
+    tabGraph.textContent = 'Knowledge Graph';
+    tabGraph.onclick = () => { this._activeTab = 'graph'; this.render(); };
+
+    const tabIngest = document.createElement('button');
+    tabIngest.className = `tab-btn ${this._activeTab === 'ingest' ? 'active' : ''}`;
+    tabIngest.textContent = 'Ingest Hub';
+    tabIngest.onclick = () => { this._activeTab = 'ingest'; this.render(); };
+
+    const tabConfig = document.createElement('button');
+    tabConfig.className = `tab-btn ${this._activeTab === 'config' ? 'active' : ''}`;
+    tabConfig.textContent = 'Credentials & Secrets';
+    tabConfig.onclick = () => { this._activeTab = 'config'; this.render(); };
+
+    tabs.append(tabGraph, tabIngest, tabConfig);
+
+    const mainContainer = document.createElement('div');
+
+    if (this._activeTab === 'graph') {
+      const controls = document.createElement('div');
+      controls.className = 'controls';
+
+      const search = document.createElement('input');
+      search.type = 'text';
+      search.className = 'search-box';
+      search.placeholder = 'Search knowledge graph nodes...';
+      search.value = this._searchQuery;
+      search.oninput = (e) => {
+        this._searchQuery = e.target.value;
+        this.render();
+      };
+
+      const select = document.createElement('select');
+      select.className = 'filter-select';
+      [
+        { val: 'all', lbl: 'All Categories' },
+        { val: 'invariant', lbl: 'Invariants' },
+        { val: 'preference', lbl: 'Preferences' },
+        { val: 'fact', lbl: 'Facts' },
+        { val: 'concept', lbl: 'Concepts' }
+      ].forEach((opt) => {
+        const el = document.createElement('option');
+        el.value = opt.val;
+        el.textContent = opt.lbl;
+        el.selected = opt.val === this._selectedCategory;
+        select.appendChild(el);
+      });
+      select.onchange = (e) => {
+        this._selectedCategory = e.target.value;
+        this.render();
+      };
+
+      controls.append(search, select);
+      mainContainer.appendChild(controls);
+
+      if (this._selectedNode) {
+        const detail = document.createElement('div');
+        detail.className = 'detail-pane';
+
+        const dHeader = document.createElement('div');
+        dHeader.className = 'detail-header';
+
+        const dTitle = document.createElement('h4');
+        dTitle.className = 'detail-title';
+        dTitle.textContent = this._selectedNode.title;
+
+        const closeBtn = document.createElement('button');
+        closeBtn.className = 'btn btn-secondary';
+        closeBtn.textContent = 'Dismiss';
+        closeBtn.onclick = () => { this._selectedNode = null; this.render(); };
+
+        dHeader.append(dTitle, closeBtn);
+
+        const dBody = document.createElement('div');
+        dBody.className = 'detail-body';
+        dBody.textContent = this._selectedNode.body;
+
+        detail.append(dHeader, dBody);
+        mainContainer.appendChild(detail);
+      }
+
+      const grid = document.createElement('div');
+      grid.className = 'grid';
+
+      filteredNodes.forEach((node) => {
+        const card = document.createElement('div');
+        card.className = 'node-card';
+        card.onclick = () => {
+          this._selectedNode = node;
+          this.render();
+        };
+
+        const cBadge = document.createElement('span');
+        cBadge.className = `node-cat cat-${node.category}`;
+        cBadge.textContent = node.category;
+
+        const cTitle = document.createElement('h5');
+        cTitle.className = 'node-title';
+        cTitle.textContent = node.title;
+
+        const cSnippet = document.createElement('p');
+        cSnippet.className = 'node-snippet';
+        cSnippet.textContent = node.body.slice(0, 110) + '...';
+
+        card.append(cBadge, cTitle, cSnippet);
+        grid.appendChild(card);
+      });
+
+      mainContainer.appendChild(grid);
+    } else if (this._activeTab === 'ingest') {
+      const ingestDesc = document.createElement('p');
+      ingestDesc.style.color = '#94a3b8';
+      ingestDesc.style.fontSize = '13px';
+      ingestDesc.textContent = 'Ingest markdown documentation files into the unified memory graph.';
+
+      const form = document.createElement('form');
+      form.className = 'row';
+
+      const pathInput = document.createElement('input');
+      pathInput.type = 'text';
+      pathInput.value = './openwiki';
+      pathInput.placeholder = 'Path to documentation directory';
+
+      const runBtn = document.createElement('button');
+      runBtn.type = 'submit';
+      runBtn.className = 'btn';
+      runBtn.textContent = 'Execute Ingestion';
+
+      form.append(pathInput, runBtn);
+
+      const terminal = document.createElement('div');
+      terminal.className = 'terminal';
+      terminal.textContent = this._ingestOutput || 'Awaiting ingestion command execution.';
+
+      form.onsubmit = (e) => {
+        e.preventDefault();
+        const p = pathInput.value.trim();
+        terminal.textContent = `Dispatching ingest pipeline for path: ${p}...`;
+        if (this._host && typeof this._host.run === 'function') {
+          this._host.run('ingest', [p]).then((res) => {
+            terminal.textContent = res?.output || 'Ingestion completed successfully.';
+          }).catch((err) => {
+            terminal.textContent = `Execution failure: ${err.message}`;
+          });
+        } else {
+          setTimeout(() => {
+            terminal.textContent = `[Ingest Engine] Scanned ${p}\nParsed 4 markdown documents.\nExtracted 12 semantic nodes.\nStatus: Ready`;
+          }, 400);
+        }
+      };
+
+      mainContainer.append(ingestDesc, form, terminal);
+    } else if (this._activeTab === 'config') {
+      const state = document.createElement('p');
+      state.style.color = '#94a3b8';
+      state.style.fontSize = '13px';
+      state.textContent = present
+        ? 'A key exists in the secrets store. Provide a new key to rotate credentials.'
+        : 'No key is registered. Submit a token to enable authenticated operations.';
+
+      const form = document.createElement('form');
+      form.className = 'row';
+
+      const input = document.createElement('input');
+      input.type = 'password';
+      input.autocomplete = 'off';
+      input.required = true;
+      input.placeholder = 'OPENWIKI_API_KEY';
+
+      const rotSelect = document.createElement('select');
+      rotSelect.className = 'filter-select';
+      [
+        { val: '30', lbl: 'Rotate every 30 days' },
+        { val: '60', lbl: 'Rotate every 60 days' },
+        { val: '90', lbl: 'Rotate every 90 days' },
+        { val: '0', lbl: 'Manual maintenance' }
+      ].forEach((r) => {
+        const ro = document.createElement('option');
+        ro.value = r.val;
+        ro.textContent = r.lbl;
+        rotSelect.appendChild(ro);
+      });
+
+      const button = document.createElement('button');
+      button.type = 'submit';
+      button.className = 'btn';
+      button.textContent = 'Save and Verify';
+
+      form.append(input, rotSelect, button);
+      form.addEventListener('submit', (event) => {
+        event.preventDefault();
+        this.dispatchEvent(new CustomEvent('save-token', {
+          detail: {
+            key: 'OPENWIKI_API_KEY',
+            token: input.value.trim(),
+            rotation_days: parseInt(rotSelect.value, 10)
+          },
+          bubbles: true,
+          composed: true
+        }));
+        input.value = '';
+      });
+
+      mainContainer.append(state, form);
+    }
+
+    root.append(style, header, tabs, mainContainer);
+  }
+}
+
+customElements.define('openwiki-panel', OpenwikiPanel);

package/scaffold/.agent/skills/total-recall/plugins/security/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Greg Iteen
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/scaffold/.agent/skills/total-recall/plugins/security/README.md

@@ -0,0 +1,67 @@
+# Security Assessments
+
+Security plugin for Total Recall. Audit machines and mesh fleets, review network exposure, repair local SSH permissions, audit installed plugins and inspect websites.
+
+```sh
+total-recall security machine --json
+total-recall security network --json
+total-recall security fleet --json
+total-recall security fleet --target <discovered-machine> --json
+total-recall security harden --json
+total-recall security machine --apply-permissions --json
+total-recall security plugins --json
+total-recall security scan <source-directory> --json
+total-recall security probe --url https://authorized-site --json
+```
+
+Machine checks support macOS, Linux and native Windows; Android has limited device-property collection. Windows/Android adapters are fixture-tested, with live hardware verification still outstanding. Reports distinguish passed, at-risk, review-required and incomplete, with timestamps, coverage and remediation. Missing tools/privileges, offline peers and unsupported platforms remain explicit. Listening addresses do not establish Internet reachability; firewall activation does not certify rules, and update-service configuration does not establish patch currency.
+
+Fleet assessment requires the installed mesh plugin and an installed security plugin on each selected peer. Mesh supplies discovery and authenticated transport. It never installs software remotely or substitutes a local check for an unavailable peer. `secure-all` runs this assessment; it cannot declare an entire fleet secured after metadata edits.
+
+Permission repair changes only recognized, locally owned SSH metadata and verifies results. Firewall rules, SSH daemon configuration and encryption changes are presented as remediation requiring preserved administrative access and rollback planning.
+
+Auth owns credentials. Machine audits need no security master key. For signing/encryption, store at least 32 bytes of random SECURITY_MASTER_KEY material through auth or `security token set --stdin`. Encryption accepts plaintext through `encrypt --stdin`; no passphrases or plaintext in argv. There are no embedded default keys or provider environment fallbacks. Explicit decryption emits plaintext and must be routed to the intended secure consumer, never an audit log.
+
+Source scans report locations and rule IDs without matched secrets. Heuristic findings require source review; they are not proof of complete vulnerability coverage. Auth declarations alone do not establish runtime enforcement. Plugin audits never rewrite manifests to fabricate hardening.
+
+Exit 0 means the requested operation completed within its stated semantics; machine/fleet checks exit 1 for risks, review or incomplete coverage. `harden` without an apply flag returns a plan with zero applied changes. UI renders actual reports and failures.
+
+See [the operational skill](skills/security/SKILL.md). Official platform contracts: [OpenSSH](https://man.openbsd.org/sshd_config), [Ubuntu firewall administration](https://ubuntu.com/server/docs/how-to/security/firewalls/), [Apple platform protection](https://support.apple.com/guide/security/protecting-against-malware-sec469d47bd8/web).
+
+## Device coverage
+
+| Device | Available assessment | Limits |
+| --- | --- | --- |
+| Windows | Native read-only firewall, antivirus, system encryption, Secure Boot and listeners; guided settings review | Privilege/edition gaps and patch currency remain unverified |
+| Android | Existing authorized ADB property reads plus guided settings review | No new authorization/debugging, root operations or hardware attestation |
+| Chromebook | Guided updates/support, verified boot, lock, extensions, containers, management and network review | A Linux container scan cannot certify ChromeOS |
+| ChromeOS Flex | Separate guided review including UEFI boot protection | Does not claim Chromebook hardware guarantees |
+| iPhone | Guided updates, lock, accounts/recovery, lost-device, profiles, permissions, network, sharing and targeted-threat review | No connected device-management collector |
+| iPad | Separate guided device review | No assumption of iPhone-only Safety Check |
+
+```sh
+total-recall security platforms --json
+total-recall security device --platform iphone --device "My phone" --json
+total-recall security android --serial <existing-authorized-serial> --json
+```
+
+The device command returns a guide with unverified checks. Submit observations using `--stdin` (or bounded `--answers-json` for UI calls): `{"updates":{"status":"secure","observedAt":"<ISO timestamp>"}}`. Only status and time are accepted; no arbitrary notes or secret fields. Answers older than 24 hours become unverified. Even a full review is `user-attested-not-automatically-verified`, with automatic coverage zero. A completed manual review exits 0 as `reviewed`, never `passed`; risk or missing answers exit 1. The UI exposes platform/device selection, per-check review controls and an explicit authorized Android serial.
+
+Official contracts: [Windows active firewall policy](https://learn.microsoft.com/en-us/powershell/module/netsecurity/get-netfirewallprofile), [BitLocker posture](https://learn.microsoft.com/en-us/powershell/module/bitlocker/get-bitlockervolume), [ADB authorization](https://developer.android.com/tools/adb), [Android boot state](https://source.android.com/docs/core/architecture/bootloader/locking_unlocking), [ChromeOS support expiration](https://support.google.com/chromebook/answer/9367166), [ChromeOS Flex differences](https://support.google.com/chrome/a/answer/11542901), [Apple personal safety](https://support.apple.com/guide/personal-safety/welcome/web).
+
+
+Scanner coverage now includes JavaScript/TypeScript, Python and shell/PowerShell source. Dynamic credential reads, synthetic provider/signing defaults and linked uninspected source produce redacted review findings. Coverage limits fail explicitly; source review does not establish runtime enforcement. `security --help` lists actual commands. Latest scanner/device suite: 28 tests passed on sanctioned node, exit 0. All-plugin audit remains failed while CRM credential paths are unresolved.
+
+## Use it two ways
+
+This plugin is a reusable brick, so a new project does not start from zero.
+
+**Add it to a project (for apps you build and ship).** From the project directory:
+
+```sh
+total-recall plugin vendor https://github.com/gregiteen/tr-plugin-security.git 
+```
+
+This copies the plugin's source, skills, tests and docs into `bricks/security` and records it in `tr-bricks.json`. Your project then owns that code: edit it, test it in your own gates, and ship it with no runtime dependency on this plugin or on Total Recall. Combine as many bricks as the project needs. List them with `total-recall plugin bricks`.
+
+**Use it directly with Total Recall (for your own machines and workflow).** Install it with `total-recall plugin install https://github.com/gregiteen/tr-plugin-security.git` and run `total-recall security`. Manage its credentials with `total-recall auth secret` and its skills with `total-recall skill`.