total-recall-brain 3.45.0 → 3.46.0

package/scaffold/.agent/skills/total-recall/plugins/mesh/ui/{card.js → home.js}

@@ -1,4 +1,4 @@
-/** The mesh operator's five views. All observations arrive through the scoped host. */
+/** Mesh Home uses owner commands for independent fleet observations. */
 const DASH = '—';
 const words = value => typeof value === 'string' && value ? value : DASH;
 const list = value => Array.isArray(value) ? value : [];
@@ -65,9 +65,9 @@ export function capabilityState(node, column) {
 function hostName(url) { try { return new URL(url).host; } catch { return DASH; } }
 const sourceLabels = { grants: 'Secrets', plugins: 'Plugins', updates: 'Updates', tasks: 'Scheduled work', agents: 'Agents', alerts: 'Alerts', deployments: 'Deployments', policy: 'Policy', presence: 'Presence' };
 
-export class MeshlinkControlCard extends HTMLElement {
+export class MeshHome extends HTMLElement {
   constructor() {
-    super(); this.status = null; this.doctor = null; this.leader = null;
+    super(); this.status = null; this.nodes = null; this.credential = null; this.doctor = null; this.leader = null;
     this.errors = {}; this.views = {}; this.loading = {}; this.pings = {};
     this.screen = 'machines'; this.selected = null; this.filters = new Set();
     this.loginDrafts = {};
@@ -80,11 +80,8 @@ export class MeshlinkControlCard extends HTMLElement {
   connectedCallback() {
     if (!this.shadowRoot) this.attachShadow({ mode: 'open' });
     this.render();
-    this.onScreen = event => { if ((!event.detail?.pluginId || event.detail.pluginId === this.host?.pluginId) && this.screens.some(s => s.id === event.detail?.screen)) void this.show(event.detail.screen); };
-    window.addEventListener('plugin-show-screen', this.onScreen);
     void this.read();
   }
-  disconnectedCallback() { window.removeEventListener('plugin-show-screen', this.onScreen); }
   async call(operation, args = []) {
     if (!this.host?.run) throw new Error('Mesh command runner unavailable. Open this view in the dashboard.');
     const result = await this.host.run(operation, args);
@@ -96,19 +93,29 @@ export class MeshlinkControlCard extends HTMLElement {
     try {
       const value = asObject(await this.call(op, args));
       if (!value || key === 'doctor' && !Array.isArray(value) || key !== 'doctor' && Array.isArray(value)) throw new Error('Command returned an unreadable observation.');
+      if (key === 'nodes' && !Array.isArray(value.nodes)) throw new Error('Mesh did not return a node list.');
+      if (key === 'credential' && typeof value.present !== 'boolean') throw new Error('Auth did not return credential presence.');
       this[key] = value;
-    } catch (error) { this.errors[key] = error.message; }
+    } catch (error) { this.errors[key] = key === 'credential' ? 'Credential status is unavailable from Auth.' : error.message; }
     this.paint();
   }
   read() {
     if (this.busy) return this.readPromise;
+    if (!this.loading.doctor) { this.doctor = null; delete this.errors.doctor; }
     this.busy = true; this.lastAttempt = new Date().toISOString(); this.pings = {}; this.paint();
     this.readPromise = Promise.all([
-      this.readOne('status', 'status', ['--json']), this.readOne('doctor', 'doctor', ['--json']),
+      this.readOne('status', 'status', ['--json']), this.readOne('nodes', 'nodes', ['--json']),
+      this.readOne('credential', 'token-status', ['--json']),
       this.readOne('leader', 'leader', ['--json']), this.readView(this.screen, true),
     ]).finally(() => { this.busy = false; this.paint(); });
     return this.readPromise;
   }
+  async readDoctor() {
+    if (this.loading.doctor) return;
+    this.loading.doctor = true;
+    try { await this.readOne('doctor', 'doctor', ['--json']); }
+    finally { delete this.loading.doctor; this.paint(); }
+  }
   async readView(screen, force = false) {
     if (this.loading[screen]) return this.loading[screen];
     if (this.views[screen] && !force) return;
@@ -126,7 +133,6 @@ export class MeshlinkControlCard extends HTMLElement {
   async show(screen) {
     if (!this.screens.some(s => s.id === screen)) return;
     this.screen = screen; this.confirmEnrollment = false; this.paint();
-    this.host?.screenChanged?.(screen);
     if (this.busy) await this.readPromise;
     await this.readView(screen);
   }
@@ -168,29 +174,92 @@ export class MeshlinkControlCard extends HTMLElement {
   render() {
     this.shadowRoot.innerHTML = `
       <style>
-      :host { --face-bg:var(--bg-primary,#0b1020); --face-panel:var(--bg-secondary,#121933); --face-line:var(--border,#26305a); --face-text:var(--text-primary,#e8ecff); --face-muted:var(--text-secondary,#aab5d7); --face-brand:var(--accent,#818cf8); --face-ok:#34d399; --face-warn:#fbbf24; --face-danger:#f87171; display:block; color:var(--face-text); background:var(--face-bg); font:14px/1.5 system-ui,sans-serif; padding:16px; container-type:inline-size; border:1px solid var(--face-line); border-radius:8px; }
-      * { box-sizing:border-box; min-width:0; } h2,h3,p { margin:0 0 8px; } h2 { font-size:18px; } h3 { font-size:14px; } button,input { font:inherit; min-height:44px; color:inherit; background:var(--face-bg); border:1px solid var(--face-line); border-radius:5px; padding:8px 12px; } button { cursor:pointer; text-align:left; } button:hover { border-color:var(--face-brand); } button:disabled { opacity:.65; cursor:wait; } button:focus-visible,input:focus-visible,summary:focus-visible { outline:2px solid var(--face-brand); outline-offset:2px; } [data-tone=ok] { color:var(--face-ok); } [data-tone=warn] { color:var(--face-warn); } [data-tone=danger] { color:var(--face-danger); } .muted,dt,small { color:var(--face-muted); } .strip { display:grid; grid-template-columns:repeat(3,minmax(0,1fr)); gap:12px; margin-bottom:14px; } .strip strong { display:block; overflow-wrap:anywhere; } .verdict { border-left:3px solid currentColor; padding:8px 12px; background:var(--face-panel); } nav { display:flex; flex-wrap:wrap; gap:6px; margin:14px 0; } nav button[aria-selected=true] { border-color:var(--face-brand); background:var(--face-panel); } .refresh { margin-left:auto; } .block { padding:14px; background:var(--face-panel); border:1px solid var(--face-line); border-radius:6px; margin-bottom:12px; overflow-wrap:anywhere; } .panes { display:grid; grid-template-columns:minmax(190px,.8fr) minmax(0,1.6fr); gap:12px; align-items:start; } .roster { display:grid; gap:6px; } .roster button { display:grid; gap:3px; width:100%; } .roster button[aria-pressed=true] { border-color:var(--face-brand); } .ladder { display:grid; gap:8px; } .rung { display:grid; grid-template-columns:70px 1fr; gap:8px; border:1px dashed var(--face-line); padding:10px; border-radius:4px; } .rung[data-state=passed] { border-style:solid; border-left:4px solid var(--face-ok); } .rung[data-state=failed] { border-style:double; border-left:4px solid var(--face-danger); } .rung[data-state=na] { border-style:dotted; color:var(--face-muted); } .actions,.filters { display:flex; flex-wrap:wrap; gap:8px; margin:10px 0; } .filters label { display:flex; align-items:center; gap:6px; min-height:44px; padding:0 8px; border:1px solid var(--face-line); border-radius:4px; } .filters input { min-height:20px; width:20px; } dl { display:grid; grid-template-columns:minmax(80px,.6fr) minmax(0,1.4fr); gap:5px 12px; margin:10px 0; } dd { margin:0; overflow-wrap:anywhere; } .command { white-space:pre-wrap; overflow-wrap:anywhere; font:12px/1.6 ui-monospace,monospace; background:var(--face-bg); padding:12px; border:1px solid var(--face-line); border-radius:4px; } .error { color:var(--face-danger); padding:10px; border:1px solid var(--face-danger); border-radius:4px; margin:8px 0; overflow-wrap:anywhere; } .flow { border-bottom:1px solid var(--face-line); padding:12px 0; } .flow:last-child { border:0; } .table-wrap { max-width:100%; overflow:auto; } table { border-collapse:collapse; width:100%; font-size:12px; } th,td { text-align:left; padding:9px; border:1px solid var(--face-line); vertical-align:top; } th { background:var(--face-bg); } summary { min-height:44px; cursor:pointer; padding:10px 0; } .recorded { margin-top:12px; } .login-form { display:grid; grid-template-columns:repeat(2,minmax(0,1fr)); gap:8px; } .login-form label { display:grid; gap:3px; } .login-form button { grid-column:1/-1; } .danger { border-color:var(--face-danger); } .foot { margin-top:12px; font-size:12px; color:var(--face-muted); }
-      @container(max-width:690px) { .panes,.strip { grid-template-columns:1fr; } .strip { gap:6px; } .strip strong { display:inline; margin-right:8px; } .login-form { grid-template-columns:1fr; } } @media(prefers-reduced-motion:reduce) { * { animation:none; transition:none; } }
+      :host {
+        display:block; container-type:inline-size;
+        color:var(--color-text,CanvasText); background:var(--color-background,Canvas);
+        border:1px solid var(--color-border,currentColor); border-radius:var(--radius-md,8px);
+        padding:var(--spacing-md,16px); font:14px/1.5 var(--typography-body-font-family,system-ui,sans-serif);
+      }
+      * { box-sizing:border-box; min-width:0; }
+      h2,h3,p { margin:0 0 8px; }
+      h2 { font:600 clamp(1.5rem,5vw,2rem)/1.2 var(--typography-heading-font-family,Georgia,serif); }
+      h3 { font-size:1rem; }
+      header svg { width:1.1em; height:1.1em; vertical-align:middle; color:var(--color-accent,currentColor); }
+      button,input {
+        font:inherit; min-height:44px; color:inherit; background:var(--color-background,Canvas);
+        border:1px solid var(--color-border,currentColor); border-radius:var(--radius-md,8px); padding:8px 12px;
+      }
+      button { cursor:pointer; text-align:left; }
+      button:disabled { opacity:.65; cursor:wait; }
+      button:hover,nav button[aria-selected=true],.roster button[aria-pressed=true] { border-color:var(--color-accent,currentColor); }
+      button:focus-visible,input:focus-visible,summary:focus-visible { outline:2px solid var(--color-accent,currentColor); outline-offset:2px; }
+      [data-tone=ok] { color:var(--color-ok,currentColor); }
+      [data-tone=warn] { color:var(--color-warn,currentColor); }
+      [data-tone=danger],.error { color:var(--color-danger,currentColor); }
+      .muted,dt,small { color:var(--color-muted,currentColor); }
+      .strip { display:grid; grid-template-columns:repeat(4,minmax(0,1fr)); gap:12px; margin:14px 0; }
+      .strip div { border-top:1px solid var(--color-border,currentColor); padding-top:8px; }
+      .strip strong { display:block; overflow-wrap:anywhere; }
+      .verdict { border-inline-start:3px solid currentColor; padding:8px 12px; background:var(--color-surface,Canvas); }
+      nav,.actions,.filters { display:flex; flex-wrap:wrap; gap:8px; margin:12px 0; }
+      nav button[aria-selected=true] { background:var(--color-surface,Canvas); }
+      .block { padding:14px; background:var(--color-surface,Canvas); border:1px solid var(--color-border,currentColor); border-radius:var(--radius-md,8px); margin-bottom:12px; overflow-wrap:anywhere; }
+      .panes { display:grid; grid-template-columns:minmax(190px,.8fr) minmax(0,1.6fr); gap:12px; align-items:start; }
+      .roster,.ladder { display:grid; gap:8px; }
+      .roster button { display:grid; gap:3px; width:100%; }
+      .rung { display:grid; grid-template-columns:70px 1fr; gap:8px; border:1px dashed var(--color-border,currentColor); padding:10px; }
+      .rung[data-state=passed] { border-style:solid; border-inline-start:4px solid var(--color-ok,currentColor); }
+      .rung[data-state=failed] { border-style:double; border-inline-start:4px solid var(--color-danger,currentColor); }
+      .rung[data-state=na] { border-style:dotted; color:var(--color-muted,currentColor); }
+      .filters label { display:flex; align-items:center; gap:6px; min-height:44px; padding:0 8px; border:1px solid var(--color-border,currentColor); }
+      .filters input { min-height:20px; width:20px; }
+      dl { display:grid; grid-template-columns:minmax(80px,.6fr) minmax(0,1.4fr); gap:5px 12px; margin:10px 0; }
+      dd { margin:0; overflow-wrap:anywhere; }
+      .command { white-space:pre-wrap; overflow-wrap:anywhere; font:12px/1.6 var(--typography-mono-font-family,ui-monospace,monospace); background:var(--color-background,Canvas); padding:12px; border:1px solid var(--color-border,currentColor); }
+      .error { padding:10px; border:1px solid currentColor; margin:8px 0; overflow-wrap:anywhere; }
+      .flow { border-bottom:1px solid var(--color-border,currentColor); padding:12px 0; }
+      .flow:last-child { border:0; }
+      .table-wrap { max-width:100%; overflow:auto; }
+      table { border-collapse:collapse; width:100%; font-size:12px; }
+      th,td { text-align:left; padding:9px; border:1px solid var(--color-border,currentColor); vertical-align:top; }
+      th { background:var(--color-background,Canvas); }
+      summary { min-height:44px; cursor:pointer; padding:10px 0; }
+      .recorded,.foot { margin-top:12px; }
+      .login-form { display:grid; grid-template-columns:repeat(2,minmax(0,1fr)); gap:8px; }
+      .login-form label { display:grid; gap:3px; }
+      .login-form button { grid-column:1/-1; }
+      .danger { border-color:var(--color-danger,currentColor); }
+      .foot { font-size:12px; color:var(--color-muted,currentColor); }
+      @container(max-width:690px) {
+        .panes,.login-form { grid-template-columns:1fr; }
+        .strip { grid-template-columns:repeat(2,minmax(0,1fr)); }
+      }
       </style>
-      <header><h2><svg width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" aria-hidden="true"><circle cx="12" cy="4" r="3"/><circle cx="4" cy="19" r="3"/><circle cx="20" cy="19" r="3"/><path d="M10 7 5 16m9-9 5 9M7 19h10"/></svg> HEADSCALE <small>· Your machines</small></h2><div id="strip" class="strip"></div><p id="verdict" class="verdict"></p></header>
-      <nav id="tabs" role="tablist" aria-label="Mesh views"></nav><div id="errors" role="status"></div><main id="body" role="tabpanel"></main><footer id="foot" class="foot"></footer>`;
+      <header><h2><svg viewBox="0 0 24 24" fill="none" stroke="currentColor" aria-hidden="true"><circle cx="12" cy="4" r="3"/><circle cx="4" cy="19" r="3"/><circle cx="20" cy="19" r="3"/><path d="M10 7 5 16m9-9 5 9M7 19h10"/></svg> Network atlas</h2><div id="strip" class="strip"></div><p id="verdict" class="verdict"></p></header>
+      <div id="controls" class="actions"></div><nav id="tabs" role="tablist" aria-label="Mesh views"></nav><div id="errors" role="status"></div><main id="body" role="tabpanel"></main><footer id="foot" class="foot"></footer>`;
     this.paint();
   }
   paint() {
     const root = this.shadowRoot; if (!root?.querySelector('#body')) return;
     const focused = root.activeElement;
     const focusKey = focused && ['id', 'aria-label', 'name'].map(attribute => [attribute, focused.getAttribute(attribute)]).find(([, value]) => value);
-    const verdict = meshVerdict(this.status, this.doctor, this.leader);
+    const roster = this.nodes ? { ...this.status, nodes: this.nodes.nodes } : this.status;
+    const verdict = meshVerdict(this.status && roster, this.doctor, this.leader);
     root.querySelector('#verdict').textContent = verdict.text; root.querySelector('#verdict').dataset.tone = verdict.tone;
     const status = this.status;
     root.querySelector('#strip').replaceChildren(...[
       ['Control', `${hostName(status?.control?.url)} · ${status?.control?.verified === true ? 'Verified' : 'Not verified'}`],
+      ['Auth credential', this.credential?.present === true ? 'Saved in Auth' : this.credential?.present === false ? 'Missing' : this.errors.credential ? 'Unavailable' : 'Checking'],
       ['Leader', `${words(this.leader?.leader?.hostname)} · ${words(this.leader?.leader?.strategy)}`],
       ['This machine', `${words(status?.enrollment?.hostname)} · ${words(status?.enrollment?.state)}`],
     ].map(([title, value]) => this.el('div', {}, this.el('strong', { text: title }), this.el('span', { text: value }))));
-    root.querySelector('#tabs').replaceChildren(...this.screens.map(screen => this.button(screen.label, () => void this.show(screen.id), { role: 'tab', id: `tab-${screen.id}`, 'aria-selected': String(this.screen === screen.id), 'aria-controls': 'body' })), this.button(this.busy ? 'Reading…' : 'Refresh', () => void this.read(), { class: 'refresh', ...(this.busy ? { disabled: '' } : {}) }));
+    root.querySelector('#tabs').replaceChildren(...this.screens.map(screen => this.button(screen.label, () => void this.show(screen.id), { role: 'tab', id: `tab-${screen.id}`, 'aria-selected': String(this.screen === screen.id), 'aria-controls': 'body' })));
+    root.querySelector('#controls').replaceChildren(
+      this.button(this.busy ? 'Reading…' : 'Refresh network', () => void this.read(), { id: 'refresh', ...(this.busy ? { disabled: '' } : {}) }),
+      ...(this.canRun('doctor') ? [this.button(this.loading.doctor ? 'Verifying…' : 'Verify fleet execution', () => void this.readDoctor(), { id: 'verify-fleet', ...(this.loading.doctor ? { disabled: '' } : {}) })] : [])
+    );
     root.querySelector('#errors').replaceChildren(...Object.entries(this.errors).map(([key, error]) => this.text(`${key}: ${error}`, 'error')), ...(status?.control?.error || status?.control?.reason ? [this.text(`Control: ${status.control.error || status.control.reason}`, 'error')] : []), ...(this.actionMessage ? [this.text(this.actionMessage)] : []));
-    const nodes = joinNodes(status, this.doctor);
+    const nodes = joinNodes(roster, this.doctor);
     const body = root.querySelector('#body'); body.setAttribute('aria-labelledby', `tab-${this.screen}`);
     const firstRun = status?.configured === false && ['no-headscale-api-key', 'no-control-url'].includes(status.control?.reason);
     body.replaceChildren(firstRun ? this.firstRun() : this.screen === 'machines' ? this.machines(nodes) : this.screen === 'flows' ? this.flows() : this.screen === 'placement' ? this.placement(nodes) : this.screen === 'boundary' ? this.boundary(nodes) : this.join());
@@ -216,7 +285,8 @@ export class MeshlinkControlCard extends HTMLElement {
     [...roster.children].forEach((button, index) => button.append(this.el('strong', { text: words(live[index].hostname) }), this.el('span', { text: live[index].label, dataset: { tone: live[index].tone } }), this.el('small', { text: this.presenceFor(live[index]) })));
     const recorded = nodes.filter(node => node.vaultOnly);
     if (recorded.length) roster.append(this.el('details', { class: 'recorded' }, this.el('summary', { text: `${recorded.length} recorded-only record${recorded.length === 1 ? '' : 's'}` }), recorded.map(node => this.text(`${words(node.hostname)} · recorded ${words(node.last_heartbeat)}`, 'muted'))));
-    return this.el('div', { class: 'panes' }, this.section(`${this.status ? live.length : DASH} members`, roster), selected ? this.machineDetail(selected) : this.section('Machines', this.text(this.status ? 'No member machines returned.' : 'Machine inventory is unreadable.')));
+    const inventoryRead = Boolean(this.nodes || this.status);
+    return this.el('div', { class: 'panes' }, this.section(`${inventoryRead ? live.length : DASH} members`, roster), selected ? this.machineDetail(selected) : this.section('Machines', this.text(inventoryRead ? 'No member machines returned.' : 'Machine inventory is unreadable.')));
   }
   machineDetail(node) {
     const ping = this.pings[node.ip];
@@ -227,11 +297,12 @@ export class MeshlinkControlCard extends HTMLElement {
       ['Login', node.self || !applicable ? 'na' : node.access_state === 'configured' ? 'passed' : 'failed', node.self ? 'Not applicable · local execution' : !applicable ? 'Not applicable · no remote shell on this device' : node.access_state === 'configured' ? `Recorded ${words(node.access?.ssh_user)} · verified ${words(node.access?.verified_at)}` : 'No SSH login recorded'],
       ['Run', !applicable ? 'na' : node.reach === 'reachable' ? 'passed' : node.reach === 'unreachable' ? 'failed' : 'checking', !applicable ? 'Not applicable' : node.reach === 'reachable' ? 'Probe command executed' : node.reason || 'Not yet checked'],
     ];
-    const actions = this.el('div', { class: 'actions' }, !node.self && node.ip ? this.button('Ping now', () => void this.ping(node)) : null, applicable ? this.button('Verify execution', () => void this.readOne('doctor', 'doctor', ['--json'])) : null);
+    const actions = !node.self && node.ip && this.canRun('ping')
+      ? this.el('div', { class: 'actions' }, this.button('Ping now', () => void this.ping(node))) : null;
     const detail = this.section(words(node.hostname), this.text(`${words(node.ip)} · ${words(node.os)}`, 'muted'), this.el('div', { class: 'ladder' }, rungs.map(([name, state, evidence]) => this.el('div', { class: 'rung', dataset: { state } }, this.el('strong', { text: name }), this.el('div', {}, this.el('b', { text: state === 'na' ? 'Not applicable' : state === 'checking' ? 'Not yet checked' : state === 'passed' ? 'Passed' : 'Failed' }), this.text(evidence, 'muted'))))), actions);
     if (node.loginApplicable && node.access_state !== 'configured') {
       if (this.canRun('access')) detail.append(this.button('Find a login', () => void this.action('access', ['discover', node.ip], 'Login discovery')), this.loginForm(node));
-      else detail.append(this.text('This card is read-only. Find or record a login through the CLI.'), this.command(`total-recall mesh access discover ${node.ip}\ntotal-recall mesh access ${node.ip} --user <login>`));
+      else detail.append(this.text('This Home is read-only. Find or record a login through the CLI.'), this.command(`total-recall mesh access discover ${node.ip}\ntotal-recall mesh access ${node.ip} --user <login>`));
     }
     if (node.reach === 'reachable' && !node.self) detail.append(this.text('SSH handoff'), this.command(`total-recall mesh ssh ${node.ip}`));
     detail.append(this.el('h3', { text: 'Recorded earlier' }), this.fields([
@@ -362,8 +433,8 @@ export class MeshlinkControlCard extends HTMLElement {
       view.append(this.button(`Re-enroll ${target}`, () => { this.confirmEnrollment = true; this.paint(); }, { class: 'danger' }));
       if (this.confirmEnrollment) view.append(this.text(`Re-enroll ${target}? This may interrupt its mesh connection.`, 'error'), this.button(`Confirm re-enrollment of ${target}`, () => { this.confirmEnrollment = false; void this.action('enroll', ['--force'], 'Re-enrollment'); }, { class: 'danger', 'data-action': 'confirm-enroll' }), this.button('Cancel', () => { this.confirmEnrollment = false; this.paint(); }));
     }
-    else if (enrollment.hostname) view.append(this.text(`This card is read-only. Re-enrolling ${target} can interrupt its connection; use the CLI after confirming that target.`), this.command('total-recall mesh enroll --force'));
+    else if (enrollment.hostname) view.append(this.text(`This Home is read-only. Re-enrolling ${target} can interrupt its connection. Use the CLI after confirming that target.`), this.command('total-recall mesh enroll --force'));
     return view;
   }
 }
-if (!customElements.get('tr-mesh-card')) customElements.define('tr-mesh-card', MeshlinkControlCard);
+customElements.define('mesh-home', MeshHome);

package/scaffold/.agent/skills/total-recall/plugins/meta-harness/DESIGN.md

@@ -0,0 +1,86 @@
+---
+name: Metaharness
+description: A clear handoff from Total Recall's brain selection to the operator's chosen Chat harness.
+colors:
+  canvas: '#0c1427'
+  background: '{colors.canvas}'
+  surface: '#1e293b'
+  text: '#f1f5f9'
+  muted: '#94a3b8'
+  signal: '#38bdf8'
+  primary: '#3b82f6'
+  line: '#334155'
+  success: '#10b981'
+  warning: '#f59e0b'
+  danger: '#ef4444'
+typography:
+  title:
+    fontFamily: system-ui, sans-serif
+    fontSize: 18px
+    fontWeight: 650
+    lineHeight: 1.2
+  body:
+    fontFamily: system-ui, sans-serif
+    fontSize: 14px
+    lineHeight: 1.5
+  label:
+    fontFamily: ui-monospace, monospace
+    fontSize: 11px
+    fontWeight: 600
+    letterSpacing: 0.08em
+rounded:
+  frame: 8px
+spacing:
+  inset: 16px
+  row: 12px
+components:
+  chat-handoff:
+    backgroundColor: '{colors.canvas}'
+    textColor: '{colors.text}'
+    typography: '{typography.body}'
+    rounded: '{rounded.frame}'
+    padding: '{spacing.inset}'
+---
+
+## Overview
+
+Metaharness works like a dispatch board. Readers should understand the selected
+harness, the brain scope and the next action from a quick scan.
+
+## Colors
+
+Use the deep navy {colors.canvas} under pale {colors.text}. Reserve blue
+{colors.signal} for the route between the brain selection and its destination.
+Use status colors for verified outcomes from the host.
+
+## Typography
+
+Use the quiet, compact {typography.label} for handoff stages. Use
+{typography.title} for the section heading and {typography.body} for instructions.
+
+## Layout
+
+Give the heading and route a full-width row at narrow drawer sizes. Stack route
+stages when their labels would wrap. In a wider drawer, use one route line.
+
+## Elevation & Depth
+
+Separate the saved route from its controls with a single border. Keep the
+workflow blocks flat so their order stays clear when combined in a drawer.
+
+## Shapes
+
+Use compact rounded frames and controls. Label the route stages with text.
+
+## Components
+
+The Chat handoff block explains the route. The native Home shows the saved
+harness, registered choices and the optional destination. The bottom drawer
+supplies brain selection and the launch and copy controls. Each operational
+block describes one separate workflow and its observed owner data.
+
+## Do's and Don'ts
+
+Show the route in reading order. Keep operational state sourced from Metaharness.
+Keep the handoff marker still and show clear focus and loading states. Use text
+to distinguish saved configuration, draft behavior and unavailable reads.

package/scaffold/.agent/skills/total-recall/plugins/meta-harness/README.md

@@ -173,6 +173,25 @@ follows this foundation and requires its own current audit and plan.
 
 Use the installed plugin for CLI execution and maintenance. The repository has a pure planning capability under `capability/`. The current manifest does not declare it for vendoring. See the [Metaharness tracker](docs/projects/in-progress/META_HARNESS_UNIFICATION/META_HARNESS_UNIFICATION_PROJECT_TRACKER.md) for current package, execution and hook acceptance.
 
+## Default Chat
+
+Open **Metaharness** from the dashboard's Plugins folder to select and save a
+default harness. The Chat drawer uses that default with the selected brains.
+Customize the native Home in `DESIGN.md`. The owner blocks in `ui/chunks/`
+cover execution, routing, usage, documentation, maintenance and run evidence.
+
+`total-recall meta-harness chat-default codex --json` sets the host's default
+Chat harness. Choose an adapter from the catalog or from the choices returned
+by `total-recall meta-harness chat-target --json`. The default applies to every
+brain selection.
+
+For example, `total-recall meta-harness chat-target --brains global,project:docs --json`
+returns the chosen harness and draft context for those two brain IDs. A Codex
+target opens a native draft that the operator can review before sending. Other
+harnesses can use an explicit HTTPS launch URL configured with `--url` and
+copyable context. Use a launch URL without embedded credentials, a query, or a
+fragment. Omitting `--url` selects the adapter's built-in handoff, if available.
+
 ## Using this from an agent
 
 Send work here to run it in another agent harness, or to find out which harness should take it. Native subagents are separate and never need this.

package/scaffold/.agent/skills/total-recall/plugins/meta-harness/cli.mjs

@@ -29,7 +29,9 @@ import { appendCommand, waitingRequests } from './src/control.mjs';
 import { sessionOptions } from './src/session/run.mjs';
 import { continueJob } from './src/session-jobs.mjs';
 
-const VALUE_FLAGS = ['--result-schema-json', '--goal', '--max-turns', '--max-budget-usd', '--max-tokens', '--result-schema', '--at', '--node', '--mode', '--orchestrator', '--branch', '--reviewer', '--thread', '--status', '--platform', '--agent', '--url', '--query', '--tier', '--threshold', '--author', '--explorer', '--architect', '--implementer', '--verifier', '--title', '--summary', '--cwd', '--tools', '--setting-sources', '--model', '--name', '--tail', '--timeout-ms', '--void', '--reason', '--approvals', '--question-timeout-ms'];
+import { chatTarget, setChatDefault } from './src/chat.mjs';
+
+const VALUE_FLAGS = ['--result-schema-json', '--goal', '--max-turns', '--max-budget-usd', '--max-tokens', '--result-schema', '--at', '--node', '--mode', '--orchestrator', '--branch', '--reviewer', '--thread', '--status', '--platform', '--agent', '--url', '--query', '--tier', '--threshold', '--author', '--explorer', '--architect', '--implementer', '--verifier', '--title', '--summary', '--cwd', '--tools', '--setting-sources', '--model', '--name', '--tail', '--timeout-ms', '--void', '--reason', '--approvals', '--question-timeout-ms', '--brains'];
 export function parseArguments(args) {
   const positional = [];
   for (let index = 1; index < args.length; index += 1) {
@@ -135,6 +137,8 @@ async function runOperation(argv) {
   let result;
   if (operation === 'status') result = {...await inspectNode(value('--node') || 'local'),documentation:documentationStatus()};
   else if (operation === 'catalog') result = { adapters: getActiveAdapters(), permissions: ['read', 'write', 'send', 'destructive'] };
+  else if (operation === 'chat-target') result = chatTarget(value('--brains'));
+  else if (operation === 'chat-default') result = setChatDefault(positional[0], value('--url'));
   else if (operation === 'nodes') result = await listTargets();
   else if (operation === 'adoption') {
     const node = value('--node');

package/scaffold/.agent/skills/total-recall/plugins/meta-harness/package-lock.json

@@ -1,17 +1,17 @@
 {
   "name": "tr-plugin-meta-harness",
-  "version": "0.3.13",
+  "version": "0.4.0",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "tr-plugin-meta-harness",
-      "version": "0.3.13",
+      "version": "0.4.0",
       "dependencies": {
         "@gregiteen/ssss-cli": "0.14.5"
       },
       "devDependencies": {
-        "total-recall-brain": "3.44.0"
+        "total-recall-brain": "3.45.0"
       }
     },
     "node_modules/@alcalzone/ansi-tokenize": {
@@ -5546,9 +5546,9 @@
       }
     },
     "node_modules/total-recall-brain": {
-      "version": "3.44.0",
-      "resolved": "https://registry.npmjs.org/total-recall-brain/-/total-recall-brain-3.44.0.tgz",
-      "integrity": "sha512-VNPaIO9zsSwoxAsJ5ByIQBP9zPpLq4RiQO7Vrex4rBOHFQJT50P7utcZiLMSZTyZJU4C/m5uB8qTCSBMp6+l6Q==",
+      "version": "3.45.0",
+      "resolved": "https://registry.npmjs.org/total-recall-brain/-/total-recall-brain-3.45.0.tgz",
+      "integrity": "sha512-HDYfROazZbsLHQsFPnlBcSpe1HL1QEi7JG8x/eNRUI06RxVQsZWl8LwBo2lTWjWRDrKmCy7BUmSXQDuWF3lrEw==",
       "dev": true,
       "license": "MIT",
       "workspaces": [

package/scaffold/.agent/skills/total-recall/plugins/meta-harness/package.json

@@ -1,6 +1,6 @@
 {
   "name": "tr-plugin-meta-harness",
-  "version": "0.3.13",
+  "version": "0.4.0",
   "description": "Total Recall Metaharness plugin",
   "type": "module",
   "scripts": {
@@ -12,6 +12,7 @@
     "cli.mjs",
     "plugin.json",
     "README.md",
+    "DESIGN.md",
     "src/",
     "!src/**/*.spec.mjs",
     "ui/",

package/scaffold/.agent/skills/total-recall/plugins/meta-harness/plugin.json

@@ -1,7 +1,7 @@
 {
   "id": "meta-harness",
   "name": "Metaharness",
-  "version": "0.3.13",
+  "version": "0.4.0",
   "description": "Discover, configure, document, track, and run coding agent harnesses through Total Recall across mesh nodes.",
   "gate": {
     "tasks": ["Run work in another agent harness", "Choose which harness takes a task", "Check harness versions, sign-in and quota", "Read a harness's official documentation"],
@@ -45,6 +45,41 @@
         "output": "json",
         "args": []
       },
+      {
+        "name": "chat-target",
+        "description": "Resolve the default Chat harness and prepare a draft for the selected brains",
+        "effect": "read",
+        "output": "json",
+        "args": [
+          {
+            "name": "brains",
+            "flag": "--brains",
+            "type": "string",
+            "label": "Selected brain IDs, comma separated"
+          }
+        ]
+      },
+      {
+        "name": "chat-default",
+        "description": "Save the default Chat harness for every brain selection",
+        "effect": "write",
+        "output": "json",
+        "args": [
+          {
+            "name": "adapter",
+            "type": "string",
+            "label": "Metaharness adapter ID",
+            "required": true,
+            "positional": true
+          },
+          {
+            "name": "url",
+            "flag": "--url",
+            "type": "string",
+            "label": "Optional Chat launch URL"
+          }
+        ]
+      },
       {
         "name": "nodes",
         "description": "List recorded mesh targets without probing or changing them",
@@ -815,29 +850,15 @@
     "font": "system"
   },
   "ui": {
+    "home": "home",
+    "design_tokens": "DESIGN.md",
     "elements": [
       {
-        "id": "meta-harness-card",
-        "kind": "card",
-        "tag": "meta-harness-card",
-        "module": "ui/card.js",
-        "description": "Metaharness multi-agent coordination matrix"
-      }
-    ]
-  },
-  "card_face": {
-    "quick_actions": [
-      {
-        "subcommand": "status",
-        "label": "Local agents"
-      },
-      {
-        "subcommand": "nodes",
-        "label": "Mesh nodes"
-      },
-      {
-        "subcommand": "catalog",
-        "label": "Adapters"
+        "id": "home",
+        "kind": "panel",
+        "tag": "tr-metaharness-home",
+        "module": "ui/home.js",
+        "description": "Default Chat harness and launch destination"
       }
     ]
   },

package/scaffold/.agent/skills/total-recall/plugins/meta-harness/src/chat.mjs

@@ -0,0 +1,80 @@
+import path from 'node:path';
+import { configDir } from './paths.mjs';
+import { PluginStateStore } from './ssss-store.mjs';
+import { getActiveAdapters } from './worker.mjs';
+
+const CODEX_DRAFT = 'codex://threads/new';
+const MAX_SELECTION_BYTES = 16_384;
+const MAX_DRAFT_LINK_LENGTH = 8_192;
+const UNSAFE_TEXT = /[\p{Cc}\p{Cf}\p{Zl}\p{Zp}]/u;
+const BRAIN_ID = /^(?:global|project:[^,]+|tenant:[a-zA-Z0-9._-]+)$/u;
+const ADAPTER_ID = /^[a-z][a-z0-9-]{0,63}$/;
+
+// Chat preferences follow the dashboard's brain. The auth store override is
+// exclusively for credentials and may point outside an isolated dashboard.
+const chatStore = () => new PluginStateStore(
+  path.join(configDir({ ...process.env, TR_SECRETS_BRAIN: undefined }), 'chat-default.json'),
+  'meta-harness',
+);
+const displayAdapter = ({ id, name }) => ({ id, name });
+
+function brainContext(selection) {
+  if (typeof selection !== 'string' || Buffer.byteLength(selection) > MAX_SELECTION_BYTES || UNSAFE_TEXT.test(selection)) {
+    throw new Error('Chat requires a bounded comma-separated list of brain IDs');
+  }
+  const ids = [...new Set(selection.split(',').map(id => id.trim()))];
+  if (ids.some(id => !BRAIN_ID.test(id))) throw new Error('Chat brain IDs must use global, project:<name>, or tenant:<name>');
+  return `Use this Total Recall brain selection for Chat: ${JSON.stringify(ids)}. Resolve the selected IDs through Total Recall before retrieving or writing memory.`;
+}
+
+function launchUrl(adapterId, value) {
+  if (value === undefined) return undefined;
+  const message = 'Use an HTTPS launch URL without credentials, a query or a fragment, or a Codex Chat link for Codex';
+  if (typeof value !== 'string' || value.length > 2048 || UNSAFE_TEXT.test(value) || /\s|\\/u.test(value)) {
+    throw new Error(message);
+  }
+  if (adapterId === 'codex' && /^codex:\/\/threads\/[a-zA-Z0-9_-]{1,128}$/.test(value)) return value;
+  if (!value.startsWith('https://') || /[?#]/.test(value)) throw new Error(message);
+  const url = URL.parse(value);
+  if (!url?.hostname || url.username || url.password) throw new Error(message);
+  return url.href;
+}
+
+function resolveTarget(settings, adapters, context) {
+  const choices = adapters.map(displayAdapter);
+  if (!settings) return { ok: true, configured: false, choices, context };
+  const adapter = adapters.find(({ id }) => id === settings.adapterId);
+  if (!adapter) {
+    return {
+      ok: true, configured: false, choices, context,
+      warning: 'The saved Chat harness is unavailable. Choose a new default.',
+    };
+  }
+
+  const target = launchUrl(adapter.id, settings.url) ?? (adapter.id === 'codex' ? CODEX_DRAFT : undefined);
+  let href = target;
+  if (target === CODEX_DRAFT) {
+    const draft = `${target}?prompt=${encodeURIComponent(context)}`;
+    if (draft.length <= MAX_DRAFT_LINK_LENGTH) href = draft;
+  }
+  return { ok: true, configured: true, choices, context, harness: displayAdapter(adapter), ...(href ? { href } : {}) };
+}
+
+/** Return a draft target. The caller decides when to open it and the operator submits in the harness. */
+export function chatTarget(brains = 'global') {
+  const context = brainContext(brains);
+  const settings = chatStore().read(null);
+  if (settings !== null && (!settings || typeof settings.adapterId !== 'string' || !ADAPTER_ID.test(settings.adapterId))) {
+    throw new Error('The saved Chat default is invalid');
+  }
+  return resolveTarget(settings, getActiveAdapters(), context);
+}
+
+/** Only the adapter and optional launch URL are persistent. */
+export function setChatDefault(adapterId, url) {
+  const adapters = getActiveAdapters();
+  if (!adapters.some(({ id }) => id === adapterId)) throw new Error('Choose a registered Metaharness adapter for Chat');
+  const settings = { adapterId, url: launchUrl(adapterId, url) };
+  chatStore().write(settings);
+  return resolveTarget(settings, adapters, brainContext('global'));
+}

package/scaffold/.agent/skills/total-recall/plugins/meta-harness/ui/chunks/adapter-docs-freshness.md

@@ -0,0 +1,16 @@
+---
+type: ui-chunk:chunk
+plugin: meta-harness
+id: adapter-docs-freshness
+title: Check harness documentation freshness
+description: Distinguish an absent documentation cache from an outdated snapshot, then inspect the official source that governs the adapter.
+timestamp: "2026-11-08T23:12:00Z"
+intents: [check harness docs freshness, find the official source for a harness, verify adapter behavior against current docs]
+surfaces: [page]
+operations: [docs-status, docs-sources, docs-search, docs-read]
+data: ["docs-status:/ok", "docs-sources:/sources"]
+---
+<section>
+  <h2>Check the documentation cache before using it</h2>
+  <p>Read documentation status and identify the official source. Search the current snapshot for the behavior you need. Refresh stale or missing documentation through the owner before relying on it.</p>
+</section>

package/scaffold/.agent/skills/total-recall/plugins/meta-harness/ui/chunks/chat-handoff.md

@@ -0,0 +1,26 @@
+---
+type: ui-chunk:chunk
+title: Chat handoff
+description: Explain how Total Recall passes the selected brain IDs to a draft in the default Metaharness Chat destination.
+timestamp: '2026-11-08T04:00:00Z'
+plugin: meta-harness
+id: chat-handoff
+intents:
+  - open the default chat harness
+  - carry selected brains into chat
+  - prepare a draft for review
+surfaces: [page, bottom]
+panel: home
+operations: [chat-target, chat-default]
+data: ["chat-target:/configured", "chat-target:/harness/id", "chat-default:/configured"]
+---
+<section aria-label="Metaharness Chat handoff" data-design-component="chat-handoff" style="box-sizing:border-box;min-width:0;padding:var(--spacing-inset,16px);border:1px solid var(--color-line,#334155);border-radius:var(--radius-frame,8px);background:var(--color-canvas,#0c1427);color:var(--color-text,#f1f5f9);font:14px/1.5 var(--typography-body-font-family,system-ui)">
+  <p style="margin:0 0 6px;color:var(--color-signal,#38bdf8);font:600 11px/1.4 var(--typography-label-font-family,monospace);letter-spacing:.08em;text-transform:uppercase">Metaharness / Chat</p>
+  <h2 style="margin:0 0 12px;font-size:var(--typography-title-font-size,18px);line-height:1.2;font-weight:650">Carry your brain selection into Chat</h2>
+  <ol aria-label="Handoff stages" style="display:flex;flex-wrap:wrap;gap:6px 24px;margin:0 0 12px;padding:8px 12px 8px 32px;border-left:2px solid var(--color-signal,#38bdf8);background:var(--color-surface,#1e293b)">
+    <li>Choose brains</li>
+    <li>Open the default harness</li>
+    <li>Review the draft</li>
+  </ol>
+  <p style="margin:0;color:var(--color-muted,#94a3b8)">Chat keeps the same default as you switch brains. The draft carries the selected brain IDs so the harness can resolve them through Total Recall.</p>
+</section>