total-recall-brain 3.44.0 → 3.45.0

package/scaffold/.agent/skills/total-recall/plugins/automations/ui/card.js

@@ -0,0 +1,273 @@
+/** Automations control ledger. Values come only from the inventory owner. */
+const SCREENS = [
+  { id: 'scheduled', label: 'Scheduled' }, { id: 'nodes', label: 'Nodes' },
+  { id: 'audit', label: 'Audit' }, { id: 'run', label: 'Run' },
+];
+const escape = (value) => String(value ?? '').replace(/[&<>"']/g, (c) => ({ '&': '&amp;', '<': '&lt;', '>': '&gt;', '"': '&quot;', "'": '&#39;' }[c]));
+const words = (value) => String(value ?? 'unknown').replaceAll('_', ' ').replaceAll('-', ' ');
+const date = (value) => value && Number.isFinite(Date.parse(value)) ? new Date(value).toLocaleString() : '— not recorded';
+const stateClass = (value) => ['error', 'failed', 'offline', 'unreachable', 'unauthorized'].includes(value) ? 'bad' : 'neutral';
+
+/** Decode the host wrapper without turning command failures into inventory. */
+export function decodeInventory(result) {
+  if (result?.success === false || (typeof result?.exitCode === 'number' && result.exitCode !== 0) || (typeof result?.code === 'number' && result.code !== 0)) {
+    throw new Error(result.error || 'Inventory command failed');
+  }
+  let data = result?.output !== undefined ? result.output : result;
+  if (typeof data === 'string') {
+    try { data = JSON.parse(data); } catch { throw new Error('Inventory returned invalid JSON'); }
+  }
+  if (!data || !Array.isArray(data.nodes) || data.nodes.some((node) => !node || !Array.isArray(node.automations))) {
+    throw new Error('Inventory response is incomplete or unsupported');
+  }
+  return data;
+}
+
+export class AutomationsCard extends HTMLElement {
+  constructor() {
+    super();
+    this.attachShadow({ mode: 'open' });
+    this.screen = 'scheduled';
+    this.filters = { node: '', source: '', trigger: '', state: '' };
+    this.inventory = null;
+    this.phase = 'unchecked';
+    this.error = '';
+    this.feedback = '';
+    this.selected = '';
+    this.request = 0;
+    this.attemptedAt = null;
+    this.pendingControl = null;
+    this.boundClick = (event) => this.click(event);
+    this.boundChange = (event) => this.change(event);
+    this.boundKey = (event) => this.key(event);
+    this.boundScreen = (event) => {
+      if (event.detail?.pluginId === this.host?.pluginId) this.selectScreen(event.detail.screen);
+    };
+  }
+
+  get host() { return this._host; }
+  set host(value) {
+    this._host = value;
+    if (this.isConnected && value?.run) void this.refresh();
+  }
+  get screens() { return SCREENS; }
+
+  connectedCallback() {
+    this.shadowRoot.addEventListener('click', this.boundClick);
+    this.shadowRoot.addEventListener('change', this.boundChange);
+    this.shadowRoot.addEventListener('keydown', this.boundKey);
+    window.addEventListener('plugin-show-screen', this.boundScreen);
+    this.render();
+    void this.refresh();
+  }
+
+  disconnectedCallback() {
+    this.request++;
+    this.controller?.abort();
+    this.shadowRoot.removeEventListener('click', this.boundClick);
+    this.shadowRoot.removeEventListener('change', this.boundChange);
+    this.shadowRoot.removeEventListener('keydown', this.boundKey);
+    window.removeEventListener('plugin-show-screen', this.boundScreen);
+  }
+
+  async invoke(command, args = []) {
+    if (this.host?.run) return this.host.run(command, args);
+    const response = await fetch('/api/plugins/automations/run', {
+      method: 'POST', credentials: 'same-origin', signal: this.controller?.signal,
+      headers: { 'Content-Type': 'application/json' },
+      body: JSON.stringify({ subcommand: command, args }),
+    });
+    if (!response.ok) throw new Error(`Automation request failed (${response.status})`);
+    return response.json();
+  }
+
+  async refresh() {
+    const request = ++this.request;
+    this.controller?.abort();
+    this.controller = new AbortController();
+    this.phase = 'loading'; this.inventory = null; this.error = ''; this.feedback = ''; this.pendingControl = null;
+    this.attemptedAt = new Date().toISOString();
+    this.render();
+    try {
+      const data = decodeInventory(await this.invoke('list'));
+      if (request !== this.request || !this.isConnected) return;
+      this.inventory = data; this.phase = 'ready';
+    } catch (error) {
+      if (request !== this.request || !this.isConnected) return;
+      this.inventory = null; this.phase = 'error';
+      this.error = error.message || 'Automation inventory unavailable';
+    }
+    this.render();
+  }
+
+  records() {
+    return (this.inventory?.nodes || []).flatMap((node) => node.automations.map((item) => ({
+      ...item, _node: node, _key: `${node.node_id || node.ip || node.hostname}:${item.id || `${item.plugin_id}:${item.command}`}`,
+    })));
+  }
+  filteredRecords() {
+    return this.records().filter((item) =>
+      (!this.filters.node || this.nodeKey(item._node) === this.filters.node) &&
+      (!this.filters.source || item.source === this.filters.source) &&
+      (!this.filters.trigger || item.trigger?.kind === this.filters.trigger) &&
+      (!this.filters.state || item.state === this.filters.state));
+  }
+  nodeKey(node) { return String(node.node_id || node.ip || node.hostname || ''); }
+  selectedRecord() {
+    const records = this.filteredRecords();
+    return records.find((item) => item._key === this.selected) || records[0];
+  }
+  selectScreen(screen, focus = false) {
+    if (!SCREENS.some((item) => item.id === screen)) return;
+    this.screen = screen; this.feedback = ''; this.pendingControl = null; this.render();
+    this.host?.screenChanged?.(screen);
+    if (focus) this.shadowRoot.querySelector(`[data-screen="${screen}"]`)?.focus();
+  }
+  key(event) {
+    const tab = event.target.closest('[data-screen]');
+    if (!tab) return;
+    const index = SCREENS.findIndex((item) => item.id === tab.dataset.screen);
+    const next = event.key === 'ArrowRight' ? (index + 1) % SCREENS.length
+      : event.key === 'ArrowLeft' ? (index + SCREENS.length - 1) % SCREENS.length
+        : event.key === 'Home' ? 0 : event.key === 'End' ? SCREENS.length - 1 : null;
+    if (next === null) return;
+    event.preventDefault(); this.selectScreen(SCREENS[next].id, true);
+  }
+  change(event) {
+    const filter = event.target.dataset.filter;
+    if (!(filter in this.filters)) return;
+    this.filters[filter] = event.target.value; this.selected = ''; this.pendingControl = null; this.render();
+    this.shadowRoot.querySelector(`[data-filter="${filter}"]`)?.focus();
+  }
+  click(event) {
+    const button = event.target.closest('button');
+    if (!button || button.disabled) return;
+    if (button.dataset.screen) this.selectScreen(button.dataset.screen, true);
+    else if (button.dataset.record) {
+      this.selected = button.dataset.record; this.pendingControl = null; this.render();
+      const selected = [...this.shadowRoot.querySelectorAll('[data-record]')].find((item) => item.dataset.record === this.selected);
+      selected?.focus();
+    } else if (button.dataset.action === 'refresh') void this.refresh();
+    else if (button.dataset.action === 'copy') void this.copyOutput();
+    else if (button.dataset.action === 'confirm-control') void this.executeControl(this.pendingControl?.index, true);
+    else if (button.dataset.action === 'dismiss-control') { this.pendingControl = null; this.render(); }
+    else if (button.dataset.control) void this.executeControl(Number(button.dataset.control));
+  }
+
+  async copyOutput() {
+    if (!this.inventory) return;
+    try {
+      if (!navigator.clipboard?.writeText) throw new Error('Clipboard is unavailable');
+      await navigator.clipboard.writeText(JSON.stringify(this.inventory, null, 2));
+      if (this.isConnected) this.feedback = 'Inventory copied';
+    } catch (error) { if (this.isConnected) this.feedback = `Copy failed: ${error.message}`; }
+    if (this.isConnected) this.render();
+  }
+
+  async executeControl(index, confirmed = false) {
+    const item = this.selectedRecord();
+    const action = item?.actions?.[index];
+    if (!action || typeof action.command !== 'string' || !Array.isArray(action.args) || !action.args.every((arg) => typeof arg === 'string')) return;
+    if (Array.isArray(this.host?.operations) && !this.host.operations.includes(action.command)) {
+      this.feedback = 'Action unavailable for this access level'; this.render(); return;
+    }
+    if (!['read', 'write', 'destructive', 'send'].includes(action.effect)) {
+      this.feedback = 'Action unavailable: source did not declare its effect'; this.render(); return;
+    }
+    if (action.effect !== 'read') {
+      if (!confirmed) { this.pendingControl = { key: item._key, index }; this.render(); return; }
+      if (this.pendingControl?.key !== item._key || this.pendingControl.index !== index) return;
+    }
+    this.pendingControl = null;
+    this.feedback = 'Submitting source action…'; this.render();
+    const request = this.request;
+    try {
+      const result = await this.invoke(action.command, action.args);
+      if (request !== this.request || !this.isConnected) return;
+      if (result?.success === false || result?.code > 0 || result?.exitCode > 0) throw new Error(result.error || 'Source rejected the action');
+      await this.refresh();
+      if (this.isConnected) this.feedback = 'Source action completed; inventory refreshed';
+    } catch (error) {
+      if (request !== this.request || !this.isConnected) return;
+      this.feedback = `Action failed: ${error.message}`;
+    }
+    if (this.isConnected) this.render();
+  }
+
+  renderFilters() {
+    const records = this.records();
+    const options = (values, selected) => '<option value="">All</option>' + [...new Set(values.filter(Boolean))].sort().map((value) => `<option value="${escape(value)}" ${selected === value ? 'selected' : ''}>${escape(words(value))}</option>`).join('');
+    return `<div class="filters">
+      <label>Node<select data-filter="node">${'<option value="">All</option>' + (this.inventory?.nodes || []).map((node) => `<option value="${escape(this.nodeKey(node))}" ${this.filters.node === this.nodeKey(node) ? 'selected' : ''}>${escape(node.hostname || node.ip || 'Unnamed node')}</option>`).join('')}</select></label>
+      <label>Source<select data-filter="source">${options(records.map((item) => item.source), this.filters.source)}</select></label>
+      <label>Trigger<select data-filter="trigger">${options(records.map((item) => item.trigger?.kind), this.filters.trigger)}</select></label>
+      <label>State<select data-filter="state">${options(records.map((item) => item.state), this.filters.state)}</select></label>
+    </div>`;
+  }
+
+  renderDetails(item, controls = false) {
+    if (!item) return '<section class="detail"><h3>No automation selected</h3><p>Select a record after discovery.</p></section>';
+    const knownBool = (value, yes, no) => value === true ? yes : value === false ? no : '— not reported';
+    const run = item.last_run;
+    return `<section class="detail"><p class="eyebrow">${escape(words(item.source || 'source not reported'))}</p><h3>${escape(item.name || item.intent || item.id || item.command)}</h3>
+      <dl>
+        <dt>Trigger</dt><dd>${escape(item.trigger?.summary || item.schedule || '— not reported')} <span class="subtle">${escape(item.trigger?.kind || '')}</span></dd>
+        <dt>Enabled</dt><dd>${escape(knownBool(item.enabled, 'Enabled', 'Disabled'))}</dd>
+        <dt>Runner</dt><dd>${escape(knownBool(item.runner_available, 'Available', 'Unavailable'))}</dd>
+        <dt>Node</dt><dd>${escape(item._node.hostname || item._node.ip || '— not reported')}</dd>
+        <dt>Placement</dt><dd>${escape(words(item.placement || 'not reported'))}</dd>
+        <dt>Origin</dt><dd class="mono">${escape(item.origin || item.id || '— not reported')}</dd>
+        <dt>Last handled slot</dt><dd>${escape(item.last_handled_slot || '— not recorded')}</dd>
+        <dt>Observed run</dt><dd>${run ? `${escape(words(run.state))} · ${escape(date(run.at))}${run.exit_code != null ? ` · exit ${escape(run.exit_code)}` : ''}` : '— no run outcome recorded'}</dd>
+      </dl>
+      ${controls ? this.renderControls(item) : '<p class="note">A handled slot is scheduling evidence. It does not establish a successful run.</p>'}
+    </section>`;
+  }
+  renderControls(item) {
+    const actions = Array.isArray(item.actions) ? item.actions : [];
+    const pending = this.pendingControl?.key === item._key ? actions[this.pendingControl.index] : null;
+    return `<div class="source-actions">${actions.length ? actions.map((action, index) => `<button data-control="${index}" ${this.feedback === 'Submitting source action…' ? 'disabled' : ''}>${escape(action.label || words(action.command))}<span class="effect">${escape(action.effect || 'effect not declared')}</span></button>`).join('') : '<p>No executable controls were advertised by this source.</p>'}</div>${pending ? `<section class="confirmation" role="group" aria-label="Confirm source action"><p>${escape(pending.label || words(pending.command))}: <strong>${escape(item.name || item.id)}</strong>?</p><div class="source-actions"><button data-action="confirm-control">Confirm ${escape(pending.label || words(pending.command))}</button><button data-action="dismiss-control">Keep unchanged</button></div></section>` : ''}<p class="note">Actions are delegated to the source owner. Available controls depend on its capabilities and your access.</p>`;
+  }
+  renderScheduled() {
+    const records = this.filteredRecords();
+    return `${this.renderFilters()}<div class="ledger"><section class="index"><h3>Automation index <span class="count">${records.length}</span></h3>${records.length ? `<ul>${records.map((item) => `<li><button data-record="${escape(item._key)}" aria-pressed="${this.selectedRecord()?._key === item._key}"><span><strong>${escape(item.name || item.intent || item.id || item.command)}</strong><small>${escape(item._node.hostname || item._node.ip)} · ${escape(words(item.source || 'source not reported'))}</small></span><span class="state ${stateClass(item.state)}">${escape(words(item.state))}</span></button></li>`).join('')}</ul>` : '<p>No records match these filters.</p>'}</section>${this.renderDetails(this.selectedRecord())}</div>`;
+  }
+  renderNodes() {
+    const nodes = this.inventory?.nodes || [];
+    return `<div class="node-grid">${nodes.map((node) => `<section class="node"><header><h3>${escape(node.hostname || node.ip || 'Unnamed node')}</h3><span class="state ${stateClass(node.status)}">${escape(words(node.status))}</span></header><p class="mono">${escape(node.ip || node.node_id || '— address not reported')}</p>${node.error ? `<p class="bad">${escape(node.error)}</p>` : ''}${Array.isArray(node.coverage) && node.coverage.length ? `<ul class="coverage">${node.coverage.map((coverage) => `<li><div><strong>${escape(words(coverage.source))}</strong><span class="state ${stateClass(coverage.status)}">${escape(words(coverage.status))}</span></div>${coverage.error ? `<p>${escape(coverage.error)}</p>` : ''}<small>${escape(date(coverage.checked_at))}</small></li>`).join('')}</ul>` : '<p>— source coverage was not reported. This node cannot establish complete discovery.</p>'}</section>`).join('') || '<p>No mesh nodes were reported.</p>'}</div>`;
+  }
+  renderAudit() {
+    const records = this.filteredRecords();
+    return `${this.renderFilters()}<p class="note">Observed outcomes only. Declarations and handled slots do not prove execution.</p><ul class="audit">${records.map((item) => `<li><div><strong>${escape(item.name || item.id || item.command)}</strong><small>${escape(item._node.hostname || item._node.ip)} · ${escape(words(item.source))}</small></div><div><span class="state ${stateClass(item.last_run?.state)}">${escape(item.last_run ? words(item.last_run.state) : 'No observed run')}</span><small>${escape(date(item.last_run?.at))}</small>${item.last_run?.exit_code != null ? `<small>Exit ${escape(item.last_run.exit_code)}</small>` : ''}</div></li>`).join('') || '<li>No records match these filters.</li>'}</ul>`;
+  }
+  renderRun() {
+    const records = this.filteredRecords();
+    return `${this.renderFilters()}<div class="ledger"><section class="index"><h3>Choose a source-owned action</h3><p>Only advertised controls are executable.</p><ul>${records.map((item) => `<li><button data-record="${escape(item._key)}" aria-pressed="${this.selectedRecord()?._key === item._key}"><span><strong>${escape(item.name || item.id || item.command)}</strong><small>${escape(item._node.hostname || item._node.ip)} · ${(item.actions || []).length} advertised controls</small></span></button></li>`).join('')}</ul></section>${this.renderDetails(this.selectedRecord(), true)}</div>`;
+  }
+  render() {
+    const focus = this.shadowRoot.activeElement;
+    const focusedAction = focus?.dataset.action;
+    const status = this.phase === 'loading' ? 'Checking sources' : this.phase === 'error' ? 'Inventory unavailable'
+      : this.phase === 'ready' ? (this.inventory.complete === true ? 'Discovery complete' : 'Partial discovery — inspect source coverage') : 'Not checked';
+    const content = this.phase !== 'ready' ? `<div class="empty"><h3>${escape(status)}</h3><p>${escape(this.phase === 'error' ? this.error : this.phase === 'loading' ? 'Reading automation sources and node availability…' : 'Refresh to inspect automation sources.')}</p></div>`
+      : this.screen === 'nodes' ? this.renderNodes() : this.screen === 'audit' ? this.renderAudit() : this.screen === 'run' ? this.renderRun() : this.renderScheduled();
+    this.shadowRoot.innerHTML = `
+      <style>
+      :host { --face-bg:#181713; --face-surface:#24221c; --face-text:#f4efe5; --face-muted:#c5bca9; --face-border:#726652; --face-accent:#f2bd63; --face-error:#ffb5a9; --face-focus:#b8d9ff; --automation-bg:var(--bg-card,var(--face-bg)); --automation-surface:var(--bg-elevated,var(--face-surface)); --automation-text:var(--text-primary,var(--face-text)); --automation-muted:var(--text-secondary,var(--face-muted)); --automation-border:var(--border,var(--face-border)); --automation-accent:var(--accent,var(--face-accent)); --automation-error:var(--face-error); --automation-focus:var(--face-focus); display:block; color:var(--automation-text); font:14px/1.45 system-ui,sans-serif; min-width:0; color-scheme:dark; }
+      *,*::before,*::after { box-sizing:border-box; } button,select { font:inherit; color:inherit; min-height:44px; min-width:44px; } button { cursor:pointer; } button:disabled { cursor:wait; opacity:.6; } button:focus-visible,select:focus-visible { outline:3px solid var(--automation-focus); outline-offset:3px; } .workspace { border:1px solid var(--automation-border); border-radius:12px; background:var(--automation-bg); overflow:hidden; } .masthead { padding:20px; display:flex; gap:16px; align-items:center; flex-wrap:wrap; } .brand { display:flex; gap:12px; align-items:center; flex:1; min-width:0; } svg { width:40px; height:40px; color:var(--automation-accent); flex:none; } h2,h3,p { margin:0; } h2 { font-size:20px; letter-spacing:-.03em; } h3 { font-size:15px; } .eyebrow { text-transform:uppercase; letter-spacing:.11em; font-size:10px; color:var(--automation-muted); margin-bottom:4px; } .subtle,small,.note { color:var(--automation-muted); } small { display:block; font-size:11px; margin-top:3px; overflow-wrap:anywhere; } .refresh { border:1px solid var(--automation-accent); background:var(--automation-accent); color:var(--automation-bg); border-radius:7px; padding:8px 14px; font-weight:700; } .status-line { padding:12px 20px; background:var(--automation-surface); border-block:1px solid var(--automation-border); display:flex; justify-content:space-between; gap:12px; flex-wrap:wrap; } .status-line strong { font-size:12px; font-weight:600; } .tabs { display:flex; padding:8px 12px 0; gap:4px; border-bottom:1px solid var(--automation-border); } .tabs button { flex:1; background:transparent; border:0; border-bottom:3px solid transparent; padding:10px 4px; color:var(--automation-muted); } .tabs button[aria-selected=true] { border-color:var(--automation-accent); color:var(--automation-text); font-weight:700; } .body { padding:16px; min-height:200px; animation:reveal .16s ease-out; } .filters { display:grid; grid-template-columns:repeat(4,minmax(0,1fr)); gap:10px; margin-bottom:16px; } label { font-size:11px; color:var(--automation-muted); display:grid; gap:4px; } select { width:100%; max-width:100%; background:var(--automation-surface); border:1px solid var(--automation-border); border-radius:5px; padding:6px; } .ledger { display:grid; grid-template-columns:minmax(0,1fr) minmax(0,1fr); gap:16px; } .index,.detail,.node { min-width:0; } .index h3 { margin-bottom:8px; } ul { list-style:none; padding:0; margin:0; } .index ul { max-height:380px; overflow:auto; } .index li+li { margin-top:6px; } .index button { width:100%; display:flex; justify-content:space-between; gap:12px; align-items:center; text-align:left; padding:12px; background:transparent; border:1px solid var(--automation-border); border-radius:7px; } .index button[aria-pressed=true] { border-color:var(--automation-accent); background:var(--automation-surface); } strong { overflow-wrap:anywhere; } .state { display:inline-block; text-transform:none; font:11px/1.4 ui-monospace,monospace; border:1px solid var(--automation-border); border-radius:4px; padding:3px 6px; overflow-wrap:anywhere; } .bad { color:var(--automation-error); } .detail { border-left:2px solid var(--automation-accent); padding:0 0 0 16px; } .detail h3 { font-size:19px; margin-bottom:12px; overflow-wrap:anywhere; } dl { display:grid; grid-template-columns:minmax(80px,.7fr) minmax(0,1fr); gap:9px 12px; margin:0; } dt { color:var(--automation-muted); font-size:11px; } dd { margin:0; overflow-wrap:anywhere; font-size:12px; } .mono { font-family:ui-monospace,monospace; overflow-wrap:anywhere; font-size:11px; } .note { font-size:11px; margin-top:16px; } .count { font:11px ui-monospace,monospace; margin-left:4px; color:var(--automation-muted); } .node-grid { display:grid; grid-template-columns:repeat(auto-fit,minmax(min(260px,100%),1fr)); gap:16px; } .node { border:1px solid var(--automation-border); border-radius:8px; padding:14px; } .node header { display:flex; justify-content:space-between; align-items:start; gap:12px; margin-bottom:4px; } .coverage { margin-top:12px; } .coverage li { border-top:1px solid var(--automation-border); padding:10px 0; } .coverage li>div { display:flex; justify-content:space-between; align-items:center; gap:12px; } .coverage strong { font-size:12px; } .coverage p { font-size:12px; margin-top:6px; } .audit li { display:flex; justify-content:space-between; gap:16px; padding:12px 0; border-bottom:1px solid var(--automation-border); } .audit li>div { min-width:0; } .audit li>div:last-child { text-align:right; } .audit { margin-top:12px; } .source-actions { display:flex; flex-wrap:wrap; gap:8px; margin-top:16px; } .source-actions button { border:1px solid var(--automation-accent); border-radius:5px; background:var(--automation-surface); padding:8px 12px; } .effect { display:block; font:10px ui-monospace,monospace; color:var(--automation-muted); } .footer { display:flex; align-items:center; justify-content:space-between; padding:8px 16px; gap:12px; border-top:1px solid var(--automation-border); } .footer button { background:transparent; border:0; color:var(--automation-muted); padding:8px; font-size:12px; } .feedback { font-size:12px; overflow-wrap:anywhere; } .empty { padding:26px 12px; } .empty p { color:var(--automation-muted); margin-top:8px; } @keyframes reveal { from { opacity:.65; } to { opacity:1; } } @media(max-width:600px) { .masthead { padding:16px; gap:10px; } .filters { grid-template-columns:repeat(2,minmax(0,1fr)); } .ledger { grid-template-columns:minmax(0,1fr); } .detail { border-left:0; border-top:2px solid var(--automation-accent); padding:16px 0 0; } .index ul { max-height:260px; } .status-line { padding:10px 16px; } .body { padding:12px; } h2 { font-size:18px; } } @media(prefers-reduced-motion:reduce) { .body { animation:none; } }
+      </style>
+      <div class="workspace"><header class="masthead"><div class="brand"><svg viewBox="0 0 40 40" fill="none" aria-hidden="true"><path d="M4 20h9m0 0 7-11h12m-19 11 7 11h12M13 20h19" stroke="currentColor" stroke-width="2"/><circle cx="5" cy="20" r="3" fill="currentColor"/><path d="M30 6h6v6h-6zM30 17h6v6h-6zM30 28h6v6h-6z" stroke="currentColor" stroke-width="2"/></svg><div><p class="eyebrow">Triggers · sources · outcomes</p><h2>Automations</h2></div></div><button class="refresh" data-action="refresh" ${this.phase === 'loading' ? 'disabled' : ''}>Refresh</button></header>
+      <div class="status-line" role="status" aria-live="polite"><strong class="${this.phase === 'error' ? 'bad' : ''}">${escape(status)}</strong><small>${this.phase === 'ready' ? 'Checked' : 'Last attempt'} ${escape(date(this.phase === 'ready' ? this.inventory.checked_at : this.attemptedAt))}</small></div>
+      <nav class="tabs" role="tablist" aria-label="Automation views">${SCREENS.map((screen) => `<button id="tab-${screen.id}" role="tab" aria-controls="panel-${screen.id}" aria-selected="${this.screen === screen.id}" tabindex="${this.screen === screen.id ? '0' : '-1'}" data-screen="${screen.id}">${screen.label}</button>`).join('')}</nav>
+      <div class="body" id="panel-${this.screen}" role="tabpanel" aria-labelledby="tab-${this.screen}" tabindex="0" aria-busy="${this.phase === 'loading'}">${content}</div>
+      <footer class="footer"><span class="feedback" role="status">${escape(this.feedback || (this.phase === 'ready' ? 'Coverage determines completeness.' : 'No current inventory.'))}</span><button data-action="copy" ${this.inventory ? '' : 'disabled'}>Copy inventory</button></footer></div>`;
+    if (focusedAction) this.shadowRoot.querySelector(`[data-action="${focusedAction}"]`)?.focus();
+  }
+}
+
+// Card and panel share the same inventory contract.
+export const ChronosAutomationsCard = AutomationsCard;
+export class AutomationsElement extends AutomationsCard {}
+if (!customElements.get('tr-automations-card')) customElements.define('tr-automations-card', AutomationsCard);
+if (!customElements.get('automations-card')) customElements.define('automations-card', class extends AutomationsCard {});
+if (!customElements.get('tr-automations')) customElements.define('tr-automations', AutomationsElement);

package/scaffold/.agent/skills/total-recall/plugins/code-quality/commands/run-core.mjs

@@ -17,7 +17,7 @@ export function findSkillDir(start = process.cwd()) {
 
 export function runCore(script, args) {
   if (!fs.existsSync(stateDir())) {
-    const error = new Error('No code-quality state in this repository (.agent/skills/code-quality). Create it: total-recall code-quality init');
+    const error = new Error('No code-quality state in this repository (.agent/skills/code-quality). Create configuration: total-recall code-quality detect --apply');
     error.exitCode = 2;
     throw error;
   }

package/scaffold/.agent/skills/total-recall/plugins/code-quality/core/check.mjs

@@ -80,7 +80,7 @@ function loadConfig() {
   if (!existsSync(CONFIG_PATH)) {
     fail(
       `No config.json at ${CONFIG_PATH}\n` +
-      `Run:  total-recall skill config code-quality init`
+      `Run:  total-recall code-quality detect --apply`
     );
   }
   let cfg;
@@ -678,6 +678,51 @@ function runCheck(check) {
 
 // ─── Main ─────────────────────────────────────────────────────────────────────
 
+/**
+ * Restore the repository's locked dependencies before any gate runs. Idle repositories have
+ * their node_modules removed by the scheduled disk cleanup, and a gate run against a missing
+ * tree reports import failures as if the code were broken. Installs exactly what the lockfile
+ * pins, only when the installed tree is missing or older than the lockfile.
+ */
+const LOCKFILES = [
+  { file: 'package-lock.json', manager: 'npm', marker: path.join('node_modules', '.package-lock.json'), args: ['ci', '--no-audit', '--no-fund'] },
+  { file: 'pnpm-lock.yaml', manager: 'pnpm', marker: path.join('node_modules', '.modules.yaml'), args: ['install', '--frozen-lockfile'] },
+  { file: 'yarn.lock', manager: 'yarn', marker: path.join('node_modules', '.yarn-integrity'), args: ['install', '--frozen-lockfile'] },
+];
+
+function dependencyState(root) {
+  if (!existsSync(path.join(root, 'package.json'))) return { action: 'none', reason: 'no package.json' };
+  const lock = LOCKFILES.find((entry) => existsSync(path.join(root, entry.file)));
+  if (!lock) return { action: 'none', reason: 'no lockfile' };
+  const marker = path.join(root, lock.marker);
+  const stale = !existsSync(marker) || statSync(marker).mtimeMs < statSync(path.join(root, lock.file)).mtimeMs;
+  return { action: stale ? 'install' : 'present', manager: lock.manager, lockfile: lock.file, args: lock.args };
+}
+
+function ensureDependencies() {
+  const state = dependencyState(REPO_ROOT);
+  if (config.installDependencies === false || state.action !== 'install') {
+    return { ...state, action: config.installDependencies === false && state.action === 'install' ? 'disabled' : state.action, args: undefined };
+  }
+  const started = Date.now();
+  console.error(`   → dependencies: ${state.manager} ${state.args.join(' ')} (${state.lockfile})`);
+  return new Promise((resolve) => {
+    const child = spawn(state.manager, state.args, { cwd: REPO_ROOT, stdio: ['ignore', 'pipe', 'pipe'], env: process.env });
+    currentChild = child;
+    let tail = '';
+    const keep = (chunk) => { tail = (tail + chunk).slice(-4000); };
+    child.stdout.on('data', keep);
+    child.stderr.on('data', keep);
+    const done = (code, error) => {
+      currentChild = null;
+      resolve({ action: code === 0 ? 'installed' : 'failed', manager: state.manager, lockfile: state.lockfile,
+        durationMs: Date.now() - started, ...(code === 0 ? {} : { error: error || tail.trim().split('\n').slice(-20).join('\n') }) });
+    };
+    child.on('error', (err) => done(null, err.message));
+    child.on('close', (code) => done(code));
+  });
+}
+
 async function main() {
   const wantTier = TIER_ORDER[TIER];
   if (!wantTier) fail(`Unknown --tier ${TIER} (expected: fast | full | remote)`);
@@ -709,10 +754,16 @@ async function main() {
 
   const startedAt = new Date().toISOString();
   const startedMs = Date.now();
+  const testedHead = gitHead();
   console.error(` [code-quality] ${config.toolchain} — ${checks.length} check(s) in ${REPO_ROOT}`);
 
+  const dependencies = await ensureDependencies();
+  if (dependencies.action === 'failed') {
+    console.error(`      dependency install failed (${dependencies.manager}, ${dependencies.lockfile}); no gate ran:\n${dependencies.error}`);
+  }
+
   const results = [];
-  for (const check of checks) {
+  for (const check of dependencies.action === 'failed' ? [] : checks) {
     const label = check.kind === 'grep-forbid'
       ? `grep-forbid (${(check.patterns || []).length} pattern(s))`
       : (check.cmd || []).join(' ');
@@ -739,15 +790,16 @@ async function main() {
     tier: TIER,
     // Coverage is stated explicitly so a partial run can never be mistaken
     // for a clean full run when someone reads the report later.
-    ranChecks: checks.map((c) => c.id),
+    ranChecks: results.map((r) => r.id),
     skippedChecks: config.checks.filter((c) => !checks.includes(c)).map((c) => ({ id: c.id, tier: c.tier || 'fast' })),
     startedAt,
     finishedAt: new Date().toISOString(),
     durationMs: Date.now() - startedMs,
-    gitHead: gitHead(),
+    gitHead: testedHead,
     sourceFileCount: sources.length,
+    dependencies,
     checks: results.map(({ raw, findings: _f, ...meta }) => meta),
-    infrastructureFailure: results.some((r) => r.spawnError || r.timedOut),
+    infrastructureFailure: dependencies.action === 'failed' || results.some((r) => r.spawnError || r.timedOut),
     totalFindings: findings.length,
     findings
   };

package/scaffold/.agent/skills/total-recall/plugins/code-quality/core/report-data.mjs

@@ -12,6 +12,7 @@
  * Status, most severe first:
  *   missing         no report file
  *   unreadable      report file is not valid JSON or has an unknown shape
+ *   foreign         report belongs to a different repository root
  *   infrastructure  a gate failed to spawn or timed out; results are incomplete
  *   unparsed-failure a gate exited non-zero with no parseable findings
  *   failed          findings or a failing gate
@@ -21,27 +22,34 @@
  *   partial         clean, but higher-tier gates were skipped
  *   clean           every gate ran, nothing changed since
  */
-import { readFileSync, existsSync, statSync } from 'node:fs';
+import { readFileSync, existsSync, statSync, realpathSync } from 'node:fs';
 import { execFileSync } from 'node:child_process';
 import path from 'node:path';
 import { fileURLToPath } from 'node:url';
+import { stateDir } from './state.mjs';
 
 const SOURCE_EXTS = new Set(['.ts', '.tsx', '.js', '.jsx', '.mjs', '.cjs', '.py', '.vue', '.svelte']);
 
 function git(cwd, args) {
-  return execFileSync('git', args, { cwd, encoding: 'utf8', maxBuffer: 64 * 1024 * 1024, timeout: 20_000 });
+  return execFileSync('git', args, { cwd, encoding: 'utf8', stdio: ['ignore', 'pipe', 'ignore'], maxBuffer: 64 * 1024 * 1024, timeout: 20_000 });
+}
+
+// Resolve the caller's working tree independently of cached report metadata.
+function repositoryRoot(cwd) {
+  try { return realpathSync(git(cwd, ['rev-parse', '--show-toplevel']).trim()); }
+  catch { return realpathSync(cwd); }
 }
 
 /** Returns { head, changed } or null when git cannot be read. */
-function freshness(report) {
+function freshness(report, repoRoot) {
   try {
-    const head = git(report.repoRoot, ['rev-parse', 'HEAD']).trim();
+    const head = git(repoRoot, ['rev-parse', '--verify', 'HEAD']).trim();
     const startedMs = Date.parse(report.startedAt);
     const changed = [];
-    for (const rel of git(report.repoRoot, ['ls-files', '-z']).split('\0')) {
+    for (const rel of git(repoRoot, ['ls-files', '-z']).split('\0')) {
       if (!rel || !SOURCE_EXTS.has(path.extname(rel))) continue;
       try {
-        if (statSync(path.join(report.repoRoot, rel)).mtimeMs > startedMs) changed.push(rel);
+        if (statSync(path.join(repoRoot, rel)).mtimeMs > startedMs) changed.push(rel);
       } catch { /* deleted since the run */ }
     }
     return { head, changed };
@@ -50,10 +58,13 @@ function freshness(report) {
   }
 }
 
-export function buildReportView(reportFile, { now = Date.now(), inspectGit = true } = {}) {
-  const base = { reportFile, status: 'missing', reasons: [] };
+export function buildReportView(reportFile, { now = Date.now(), inspectGit = true, cwd = process.cwd() } = {}) {
+  const base = { reportFile, status: 'missing', clean: false, reasons: [] };
   if (!existsSync(reportFile)) {
-    return { ...base, reasons: ['No report file. Run code-quality-check, then reload.'] };
+    const configured = existsSync(path.join(stateDir(cwd), 'config.json'));
+    return { ...base, reasons: [configured
+      ? 'No report file. Run code-quality-check, then reload.'
+      : 'No code-quality configuration. Run total-recall code-quality detect --apply, then run code-quality-check.'] };
   }
   let report;
   try {
@@ -67,6 +78,19 @@ export function buildReportView(reportFile, { now = Date.now(), inspectGit = tru
     return { ...base, status: 'unreadable', reasons: ['Report does not have the code-quality schema (checks, ranChecks, startedAt).'] };
   }
 
+  if (typeof report.repoRoot !== 'string' || !path.isAbsolute(report.repoRoot)) {
+    return { ...base, status: 'unreadable', reasons: ['Report has no absolute repository root. Run code-quality-check in this repository.'] };
+  }
+  let repoRoot;
+  try {
+    repoRoot = repositoryRoot(cwd);
+    if (realpathSync(report.repoRoot) !== repoRoot) {
+      return { ...base, status: 'foreign', reasons: ['Report belongs to another repository. Run code-quality-check in this repository.'] };
+    }
+  } catch {
+    return { ...base, status: 'unreadable', reasons: ['Cannot verify report repository root. Run code-quality-check in this repository.'] };
+  }
+
   const findings = Array.isArray(report.findings) ? report.findings : [];
   const hard = findings.filter((f) => f.severity !== 'warning' && f.severity !== 'info');
   const skipped = Array.isArray(report.skippedChecks) ? report.skippedChecks : [];
@@ -87,8 +111,9 @@ export function buildReportView(reportFile, { now = Date.now(), inspectGit = tru
     (c) => !c.ok && !c.spawnError && !c.timedOut && !findings.some((f) => f.check === c.id)
   );
   const zeroScope = report.checks.filter((c) => c.scanned === 0);
-  const fresh = inspectGit ? freshness(report) : null;
-  const headMoved = Boolean(fresh && report.gitHead && fresh.head !== report.gitHead);
+  const fresh = inspectGit ? freshness(report, repoRoot) : null;
+  const revisionKnown = typeof report.gitHead === 'string' && /^(?:[a-f0-9]{40}|[a-f0-9]{64})$/i.test(report.gitHead);
+  const headMoved = Boolean(fresh && revisionKnown && fresh.head !== report.gitHead);
 
   const reasons = [];
   let status = 'clean';
@@ -102,7 +127,8 @@ export function buildReportView(reportFile, { now = Date.now(), inspectGit = tru
   }
   if (report.ranChecks.length === 0) set('zero-scope', 'No gates ran');
   if (zeroScope.length) set('zero-scope', `${zeroScope.map((c) => c.id).join(', ')}: scanned 0 files`);
-  if (fresh === null && inspectGit) set('unknown-freshness', 'git could not be read; cannot tell whether this report matches the tree');
+  if (!revisionKnown) set('unknown-freshness', 'Report has no verified revision. Run code-quality-check in this repository.');
+  if (fresh === null) set('unknown-freshness', 'git freshness could not be verified; cannot tell whether this report matches the tree');
   else if (fresh && (fresh.changed.length || headMoved)) {
     set('stale', headMoved
       ? `HEAD moved from ${String(report.gitHead).slice(0, 8)} to ${fresh.head.slice(0, 8)}`
@@ -116,7 +142,7 @@ export function buildReportView(reportFile, { now = Date.now(), inspectGit = tru
     reasons,
     clean: status === 'clean',
     toolchain: report.toolchain,
-    repoRoot: report.repoRoot,
+    repoRoot,
     tier: report.tier,
     gitHead: report.gitHead ?? null,
     currentHead: fresh?.head ?? null,
@@ -172,7 +198,7 @@ export async function printCachedReport(args, reportFile) {
 }
 
 export function defaultReportFile() {
-  return path.resolve(path.dirname(fileURLToPath(import.meta.url)), '..', 'reports', 'latest.json');
+  return path.join(stateDir(), 'reports', 'latest.json');
 }
 
 if (process.argv[1] && path.resolve(process.argv[1]) === fileURLToPath(import.meta.url)) {

package/scaffold/.agent/skills/total-recall/plugins/code-quality/core/report.mjs

@@ -17,12 +17,11 @@
  *   report.mjs --review-diagnostics [--json]  cached gate and finding details
  */
 
-import { readFileSync, existsSync, statSync } from 'node:fs';
-import { execFileSync } from 'node:child_process';
+import { readFileSync, existsSync } from 'node:fs';
 import path from 'node:path';
 import { fileURLToPath } from 'node:url';
 import { stateDir } from './state.mjs';
-import { printCachedReport, wantsStructuredReport } from './report-data.mjs';
+import { buildReportView, printCachedReport, wantsStructuredReport } from './report-data.mjs';
 
 const __filename = fileURLToPath(import.meta.url);
 const __dirname = path.dirname(__filename);
@@ -39,39 +38,15 @@ if (wantsStructuredReport(process.argv.slice(2))) {
   process.exit(await printCachedReport(process.argv.slice(2), REPORT_JSON));
 }
 
-if (!existsSync(REPORT_JSON)) {
-  console.log(' No report yet.\n');
-  console.log('Run a check as a BACKGROUND job, then come back:');
-  console.log(`   ${CHECK_CMD}`);
-  process.exit(0);
+const view = buildReportView(REPORT_JSON);
+if (['missing', 'unreadable', 'foreign'].includes(view.status)) {
+  console.error(`Code Quality report: ${view.status}\n${view.reasons.join('\n')}`);
+  process.exit(1);
 }
+process.exitCode = view.clean ? 0 : 1;
 
 const report = JSON.parse(readFileSync(REPORT_JSON, 'utf8'));
-const startedMs = Date.parse(report.startedAt);
-
-// ─── Staleness: which files changed after the run started? ────────────────────
-
-function changedSinceRun() {
-  let files = [];
-  try {
-    const out = execFileSync('git', ['ls-files', '-z'], {
-      cwd: report.repoRoot, encoding: 'utf8', maxBuffer: 64 * 1024 * 1024, timeout: 20_000
-    });
-    const exts = new Set(['.ts', '.tsx', '.js', '.jsx', '.mjs', '.cjs', '.py', '.vue', '.svelte']);
-    files = out.split('\0').filter((f) => f && exts.has(path.extname(f)));
-  } catch {
-    return null; // cannot determine — say so rather than implying freshness
-  }
-  const changed = [];
-  for (const rel of files) {
-    try {
-      if (statSync(path.join(report.repoRoot, rel)).mtimeMs > startedMs) changed.push(rel);
-    } catch { /* deleted since */ }
-  }
-  return changed;
-}
-
-const changed = changedSinceRun();
+const changed = view.changedSinceRun;
 const ageMin = Math.round((Date.now() - Date.parse(report.finishedAt)) / 60000);
 
 // ─── Header ───────────────────────────────────────────────────────────────────
@@ -114,11 +89,11 @@ if (opaque.length) {
   }
 }
 
-if (changed === null) {
-  console.log(`    Could not read git — cannot tell whether this report matches your tree.`);
-} else if (changed.length === 0) {
+console.log(`    Report status: ${view.status}`);
+for (const reason of view.reasons) console.log(`    ${reason}`);
+if (changed !== null && changed.length === 0 && view.currentHead === view.gitHead) {
   console.log(`    FRESH — no tracked source file has changed since this run started.`);
-} else {
+} else if (changed?.length) {
   console.log(`    STALE for ${changed.length} file(s) edited after the run started:`);
   for (const f of changed.slice(0, 8)) console.log(`      ${f}`);
   if (changed.length > 8) console.log(`      … and ${changed.length - 8} more`);
@@ -146,15 +121,15 @@ const staleMark = (file) => (changed?.includes(file) ? ' ' : '');
 if (mode === 'raw') {
   if (!existsSync(REPORT_TXT)) { console.error('No raw output stored.'); process.exit(1); }
   const raw = readFileSync(REPORT_TXT, 'utf8');
-  if (!arg) { console.log(raw.slice(0, 20000)); process.exit(0); }
+  if (!arg) { console.log(raw.slice(0, 20000)); process.exit(view.clean ? 0 : 1); }
   const section = raw.split(/^# /m).find((s) => s.startsWith(arg));
   console.log(section ? `# ${section}`.slice(0, 40000) : `No raw section for check "${arg}".`);
-  process.exit(section ? 0 : 1);
+  process.exit(section && view.clean ? 0 : 1);
 }
 
 if (findings.length === 0) {
   console.log(' No findings.');
-  process.exit(0);
+  process.exit(view.clean ? 0 : 1);
 }
 
 switch (mode) {