total-recall-brain 3.45.0 → 3.46.1

package/scaffold/.agent/skills/total-recall/plugins/automations/ui/chunks/control-ledger.md

@@ -0,0 +1,42 @@
+---
+type: ui-chunk:chunk
+plugin: automations
+id: control-ledger
+title: Automation control ledger
+description: Browse observed automation records, filter by trigger and state, and distinguish declarations from an actual run.
+timestamp: "2026-11-08T10:14:00Z"
+intents: [automation inventory, scheduled work control ledger, filter automation trigger state and source]
+surfaces: [page]
+panel: automations
+operations: [list]
+data:
+  - list:/schema_version
+  - list:/checked_at
+  - list:/complete
+  - list:/nodes/0/automations/0/id
+  - list:/nodes/0/automations/0/node_id
+  - list:/nodes/0/automations/0/source
+  - list:/nodes/0/automations/0/name
+  - list:/nodes/0/automations/0/intent
+  - list:/nodes/0/automations/0/origin
+  - list:/nodes/0/automations/0/trigger/kind
+  - list:/nodes/0/automations/0/trigger/summary
+  - list:/nodes/0/automations/0/trigger/timezone
+  - list:/nodes/0/automations/0/enabled
+  - list:/nodes/0/automations/0/state
+  - list:/nodes/0/automations/0/runner_available
+  - list:/nodes/0/automations/0/placement
+  - list:/nodes/0/automations/0/plugin_id
+  - list:/nodes/0/automations/0/plugin_name
+  - list:/nodes/0/automations/0/schedule
+  - list:/nodes/0/automations/0/valid
+  - list:/nodes/0/automations/0/last_handled_slot
+  - list:/nodes/0/automations/0/last_run/at
+  - list:/nodes/0/automations/0/last_run/state
+  - list:/nodes/0/automations/0/last_run/exit_code
+---
+<section data-design-component="ledger-note" aria-label="Automation control ledger">
+  <p data-design-component="ledger-label">Triggers · sources · outcomes</p>
+  <h2>Automation control ledger</h2>
+  <p>Filter the inventory by node, source, trigger or observed state. Start with this node and scan the mesh when you need remote coverage.</p>
+</section>

package/scaffold/.agent/skills/total-recall/plugins/automations/ui/chunks/local-inventory-triage.md

@@ -0,0 +1,17 @@
+---
+type: ui-chunk:chunk
+plugin: automations
+id: local-inventory-triage
+title: Triage missing automations in local inventory
+description: Inspect this machine's source coverage before treating an absent record as a missing automation.
+timestamp: "2026-11-08T23:12:00Z"
+intents: [why is an automation missing locally, check local automation inventory completeness, narrow fleet automation inventory to this host]
+surfaces: [page]
+panel: automations
+operations: [list, status]
+data: ["list:/complete", "list:/nodes/0/self", "list:/nodes/0/coverage/0/source", "list:/nodes/0/coverage/0/status"]
+---
+<section data-design-component="ledger-note">
+  <h2>Start with local source coverage</h2>
+  <p>Switch the ledger to this machine. Check whether the automation's source was read before looking elsewhere or deciding that its record is absent.</p>
+</section>

package/scaffold/.agent/skills/total-recall/plugins/automations/ui/chunks/pending-control.md

@@ -0,0 +1,39 @@
+---
+type: ui-chunk:chunk
+plugin: automations
+id: pending-control
+title: Confirm pending task cancellation
+description: Review the local source-owned control, confirm the pending task target, and verify its final cancellation receipt.
+timestamp: "2026-11-08T10:14:00Z"
+intents: [cancel pending local durable automation, source owned task cancellation receipt, pending task safety controls]
+surfaces: [page]
+operations: [list, show, cancel]
+data:
+  - list:/nodes/0/coverage/0/source
+  - list:/nodes/0/coverage/0/status
+  - list:/nodes/0/coverage/0/checked_at
+  - list:/nodes/0/coverage/0/error
+  - list:/nodes/0/automations/0/last_exit_code
+  - list:/nodes/0/automations/0/command
+  - list:/nodes/0/automations/0/actions/0/command
+  - list:/nodes/0/automations/0/actions/0/label
+  - list:/nodes/0/automations/0/actions/0/args/0
+  - list:/nodes/0/automations/0/actions/0/effect
+  - list:/nodes/0/automations/0/owner_ref/layer
+  - list:/nodes/0/automations/0/owner_ref/slug
+  - show:/automation/actions/0/command
+  - show:/automation/actions/0/label
+  - show:/automation/actions/0/args/0
+  - show:/automation/actions/0/effect
+  - show:/automation/owner_ref/layer
+  - show:/automation/owner_ref/slug
+  - show:/automation/last_exit_code
+  - cancel:/success
+  - cancel:/id
+  - cancel:/state
+---
+<section data-design-component="ledger-note" aria-label="Confirm pending task cancellation">
+  <p data-design-component="ledger-label">Local controls</p>
+  <h2>Confirm pending task cancellation</h2>
+  <p>Choose a pending record with an advertised cancellation action. Review its source and stable ID before confirming. The owner must report the final cancelled state.</p>
+</section>

package/scaffold/.agent/skills/total-recall/plugins/automations/ui/chunks/run-evidence.md

@@ -0,0 +1,41 @@
+---
+type: ui-chunk:chunk
+plugin: automations
+id: run-evidence
+title: Automation run evidence
+description: Inspect the source-owned automation record, schedule, last handled slot and actual outcome by stable ID.
+timestamp: "2026-11-08T10:14:00Z"
+intents: [inspect automation run outcome, audit handled slot and exit code, show automation by stable ID]
+surfaces: [page]
+operations: [show]
+data:
+  - show:/schema_version
+  - show:/checked_at
+  - show:/automation/id
+  - show:/automation/node_id
+  - show:/automation/source
+  - show:/automation/name
+  - show:/automation/intent
+  - show:/automation/command
+  - show:/automation/origin
+  - show:/automation/trigger/kind
+  - show:/automation/trigger/summary
+  - show:/automation/trigger/timezone
+  - show:/automation/enabled
+  - show:/automation/state
+  - show:/automation/runner_available
+  - show:/automation/last_run/at
+  - show:/automation/last_run/state
+  - show:/automation/last_run/exit_code
+  - show:/automation/placement
+  - show:/automation/plugin_id
+  - show:/automation/plugin_name
+  - show:/automation/schedule
+  - show:/automation/valid
+  - show:/automation/last_handled_slot
+---
+<section data-design-component="ledger-note" aria-label="Automation run evidence">
+  <p data-design-component="ledger-label">Observed runs</p>
+  <h2>Automation run evidence</h2>
+  <p>Read the record by stable ID. A handled slot records scheduler activity. The run timestamp, state and exit code describe execution when the owner reports them.</p>
+</section>

package/scaffold/.agent/skills/total-recall/plugins/automations/ui/chunks/schedule-vs-run-evidence.md

@@ -0,0 +1,17 @@
+---
+type: ui-chunk:chunk
+plugin: automations
+id: schedule-vs-run-evidence
+title: Verify that a scheduled automation actually ran
+description: Compare the declared schedule and last handled slot with the observed run time and exit state for an automation.
+timestamp: "2026-11-08T23:12:00Z"
+intents: [verify scheduled automation actually ran, investigate missed schedule slot, compare schedule with observed automation outcome]
+surfaces: [page]
+panel: automations
+operations: [list, show]
+data: ["show:/automation/schedule", "show:/automation/last_handled_slot", "show:/automation/last_run/at", "show:/automation/last_run/state", "show:/automation/last_run/exit_code"]
+---
+<section data-design-component="ledger-note">
+  <h2>Find observed run evidence</h2>
+  <p>Open the automation in the ledger. Compare the schedule and last handled slot with the observed run time and exit state. A schedule identifies when work should run.</p>
+</section>

package/scaffold/.agent/skills/total-recall/plugins/automations/ui/chunks/source-coverage.md

@@ -0,0 +1,41 @@
+---
+type: ui-chunk:chunk
+plugin: automations
+id: source-coverage
+title: Mesh automation source coverage
+description: Inspect node reachability, per-source coverage and observed state counts before relying on an inventory.
+timestamp: "2026-11-08T10:14:00Z"
+intents: [automation node coverage, offline or unauthorized automation source, observed automation state counts]
+surfaces: [page]
+operations: [list, status]
+data:
+  - status:/schema_version
+  - status:/checked_at
+  - status:/complete
+  - status:/nodes/0/node_id
+  - status:/nodes/0/hostname
+  - status:/nodes/0/ip
+  - status:/nodes/0/self
+  - status:/nodes/0/online
+  - status:/nodes/0/checked_at
+  - status:/nodes/0/status
+  - status:/nodes/0/error
+  - status:/nodes/0/counts
+  - status:/nodes/0/coverage/0/source
+  - status:/nodes/0/coverage/0/status
+  - status:/nodes/0/coverage/0/checked_at
+  - status:/nodes/0/coverage/0/error
+  - list:/nodes/0/node_id
+  - list:/nodes/0/hostname
+  - list:/nodes/0/ip
+  - list:/nodes/0/self
+  - list:/nodes/0/online
+  - list:/nodes/0/checked_at
+  - list:/nodes/0/status
+  - list:/nodes/0/error
+---
+<section data-design-component="ledger-note" aria-label="Mesh automation source coverage">
+  <p data-design-component="ledger-label">Coverage</p>
+  <h2>Mesh automation source coverage</h2>
+  <p>Review the node check time and each source outcome. A count is meaningful only beside its coverage, including unsupported sources and offline nodes.</p>
+</section>

package/scaffold/.agent/skills/total-recall/plugins/automations/ui/{card.js → home.js}

@@ -23,7 +23,7 @@ export function decodeInventory(result) {
   return data;
 }
 
-export class AutomationsCard extends HTMLElement {
+export class AutomationsElement extends HTMLElement {
   constructor() {
     super();
     this.attachShadow({ mode: 'open' });
@@ -37,6 +37,8 @@ export class AutomationsCard extends HTMLElement {
     this.request = 0;
     this.attemptedAt = null;
     this.pendingControl = null;
+    this.localOnly = true;
+    this.showInventoryJson = false;
     this.boundClick = (event) => this.click(event);
     this.boundChange = (event) => this.change(event);
     this.boundKey = (event) => this.key(event);
@@ -58,7 +60,7 @@ export class AutomationsCard extends HTMLElement {
     this.shadowRoot.addEventListener('keydown', this.boundKey);
     window.addEventListener('plugin-show-screen', this.boundScreen);
     this.render();
-    void this.refresh();
+    if (this.host?.run) void this.refresh();
   }
 
   disconnectedCallback() {
@@ -71,14 +73,8 @@ export class AutomationsCard extends HTMLElement {
   }
 
   async invoke(command, args = []) {
-    if (this.host?.run) return this.host.run(command, args);
-    const response = await fetch('/api/plugins/automations/run', {
-      method: 'POST', credentials: 'same-origin', signal: this.controller?.signal,
-      headers: { 'Content-Type': 'application/json' },
-      body: JSON.stringify({ subcommand: command, args }),
-    });
-    if (!response.ok) throw new Error(`Automation request failed (${response.status})`);
-    return response.json();
+    if (!this.host?.run) throw new Error('Authenticated automation bridge unavailable');
+    return this.host.run(command, args);
   }
 
   async refresh() {
@@ -86,10 +82,11 @@ export class AutomationsCard extends HTMLElement {
     this.controller?.abort();
     this.controller = new AbortController();
     this.phase = 'loading'; this.inventory = null; this.error = ''; this.feedback = ''; this.pendingControl = null;
+    this.showInventoryJson = false;
     this.attemptedAt = new Date().toISOString();
     this.render();
     try {
-      const data = decodeInventory(await this.invoke('list'));
+      const data = decodeInventory(await this.invoke('list', this.localOnly ? ['--local'] : []));
       if (request !== this.request || !this.isConnected) return;
       this.inventory = data; this.phase = 'ready';
     } catch (error) {
@@ -148,20 +145,24 @@ export class AutomationsCard extends HTMLElement {
       const selected = [...this.shadowRoot.querySelectorAll('[data-record]')].find((item) => item.dataset.record === this.selected);
       selected?.focus();
     } else if (button.dataset.action === 'refresh') void this.refresh();
-    else if (button.dataset.action === 'copy') void this.copyOutput();
+    else if (button.dataset.action === 'scope') { this.localOnly = !this.localOnly; void this.refresh(); }
+    else if (button.dataset.action === 'inventory-json') this.toggleInventoryJson();
     else if (button.dataset.action === 'confirm-control') void this.executeControl(this.pendingControl?.index, true);
     else if (button.dataset.action === 'dismiss-control') { this.pendingControl = null; this.render(); }
     else if (button.dataset.control) void this.executeControl(Number(button.dataset.control));
   }
 
-  async copyOutput() {
+  toggleInventoryJson() {
     if (!this.inventory) return;
-    try {
-      if (!navigator.clipboard?.writeText) throw new Error('Clipboard is unavailable');
-      await navigator.clipboard.writeText(JSON.stringify(this.inventory, null, 2));
-      if (this.isConnected) this.feedback = 'Inventory copied';
-    } catch (error) { if (this.isConnected) this.feedback = `Copy failed: ${error.message}`; }
-    if (this.isConnected) this.render();
+    this.showInventoryJson = !this.showInventoryJson;
+    this.render();
+    if (this.showInventoryJson) {
+      const field = this.shadowRoot.querySelector('#inventory-json-value');
+      field.focus();
+      field.select();
+    } else {
+      this.shadowRoot.querySelector('[data-action="inventory-json"]').focus();
+    }
   }
 
   async executeControl(index, confirmed = false) {
@@ -251,23 +252,27 @@ export class AutomationsCard extends HTMLElement {
       : this.phase === 'ready' ? (this.inventory.complete === true ? 'Discovery complete' : 'Partial discovery — inspect source coverage') : 'Not checked';
     const content = this.phase !== 'ready' ? `<div class="empty"><h3>${escape(status)}</h3><p>${escape(this.phase === 'error' ? this.error : this.phase === 'loading' ? 'Reading automation sources and node availability…' : 'Refresh to inspect automation sources.')}</p></div>`
       : this.screen === 'nodes' ? this.renderNodes() : this.screen === 'audit' ? this.renderAudit() : this.screen === 'run' ? this.renderRun() : this.renderScheduled();
+    const inventoryJson = this.showInventoryJson ? `
+      <label for="inventory-json-value">Inventory JSON</label>
+      <p id="inventory-json-help" class="note">Copy the selection with your browser’s Copy command or Ctrl+C / ⌘C.</p>
+      <textarea id="inventory-json-value" aria-describedby="inventory-json-help" rows="8" readonly>${escape(JSON.stringify(this.inventory, null, 2))}</textarea>` : '';
     this.shadowRoot.innerHTML = `
       <style>
-      :host { --face-bg:#181713; --face-surface:#24221c; --face-text:#f4efe5; --face-muted:#c5bca9; --face-border:#726652; --face-accent:#f2bd63; --face-error:#ffb5a9; --face-focus:#b8d9ff; --automation-bg:var(--bg-card,var(--face-bg)); --automation-surface:var(--bg-elevated,var(--face-surface)); --automation-text:var(--text-primary,var(--face-text)); --automation-muted:var(--text-secondary,var(--face-muted)); --automation-border:var(--border,var(--face-border)); --automation-accent:var(--accent,var(--face-accent)); --automation-error:var(--face-error); --automation-focus:var(--face-focus); display:block; color:var(--automation-text); font:14px/1.45 system-ui,sans-serif; min-width:0; color-scheme:dark; }
+      .inventory-json { padding:0 16px 16px; }
+      .inventory-json .note { margin:4px 0 8px; }
+      .inventory-json textarea { width:100%; resize:vertical; padding:8px; border:1px solid var(--automation-border); border-radius:5px; background:var(--automation-surface); color:var(--automation-text); font:12px/1.5 ui-monospace,monospace; }
+      .inventory-json textarea:focus-visible { outline:3px solid var(--automation-focus); outline-offset:3px; }
+      :host { --automation-bg:var(--color-background,#181713); --automation-surface:var(--color-surface,#24221c); --automation-text:var(--color-text,#f4efe5); --automation-muted:var(--color-muted,#c5bca9); --automation-border:var(--color-border,#726652); --automation-accent:var(--color-primary,#f2bd63); --automation-error:var(--color-error,#ffb5a9); --automation-focus:var(--color-focus,#b8d9ff); display:block; color:var(--automation-text); font:var(--typography-body-font-size,14px)/1.45 var(--typography-body-font-family,system-ui,sans-serif); min-width:0; color-scheme:dark; }
       *,*::before,*::after { box-sizing:border-box; } button,select { font:inherit; color:inherit; min-height:44px; min-width:44px; } button { cursor:pointer; } button:disabled { cursor:wait; opacity:.6; } button:focus-visible,select:focus-visible { outline:3px solid var(--automation-focus); outline-offset:3px; } .workspace { border:1px solid var(--automation-border); border-radius:12px; background:var(--automation-bg); overflow:hidden; } .masthead { padding:20px; display:flex; gap:16px; align-items:center; flex-wrap:wrap; } .brand { display:flex; gap:12px; align-items:center; flex:1; min-width:0; } svg { width:40px; height:40px; color:var(--automation-accent); flex:none; } h2,h3,p { margin:0; } h2 { font-size:20px; letter-spacing:-.03em; } h3 { font-size:15px; } .eyebrow { text-transform:uppercase; letter-spacing:.11em; font-size:10px; color:var(--automation-muted); margin-bottom:4px; } .subtle,small,.note { color:var(--automation-muted); } small { display:block; font-size:11px; margin-top:3px; overflow-wrap:anywhere; } .refresh { border:1px solid var(--automation-accent); background:var(--automation-accent); color:var(--automation-bg); border-radius:7px; padding:8px 14px; font-weight:700; } .status-line { padding:12px 20px; background:var(--automation-surface); border-block:1px solid var(--automation-border); display:flex; justify-content:space-between; gap:12px; flex-wrap:wrap; } .status-line strong { font-size:12px; font-weight:600; } .tabs { display:flex; padding:8px 12px 0; gap:4px; border-bottom:1px solid var(--automation-border); } .tabs button { flex:1; background:transparent; border:0; border-bottom:3px solid transparent; padding:10px 4px; color:var(--automation-muted); } .tabs button[aria-selected=true] { border-color:var(--automation-accent); color:var(--automation-text); font-weight:700; } .body { padding:16px; min-height:200px; animation:reveal .16s ease-out; } .filters { display:grid; grid-template-columns:repeat(4,minmax(0,1fr)); gap:10px; margin-bottom:16px; } label { font-size:11px; color:var(--automation-muted); display:grid; gap:4px; } select { width:100%; max-width:100%; background:var(--automation-surface); border:1px solid var(--automation-border); border-radius:5px; padding:6px; } .ledger { display:grid; grid-template-columns:minmax(0,1fr) minmax(0,1fr); gap:16px; } .index,.detail,.node { min-width:0; } .index h3 { margin-bottom:8px; } ul { list-style:none; padding:0; margin:0; } .index ul { max-height:380px; overflow:auto; } .index li+li { margin-top:6px; } .index button { width:100%; display:flex; justify-content:space-between; gap:12px; align-items:center; text-align:left; padding:12px; background:transparent; border:1px solid var(--automation-border); border-radius:7px; } .index button[aria-pressed=true] { border-color:var(--automation-accent); background:var(--automation-surface); } strong { overflow-wrap:anywhere; } .state { display:inline-block; text-transform:none; font:11px/1.4 ui-monospace,monospace; border:1px solid var(--automation-border); border-radius:4px; padding:3px 6px; overflow-wrap:anywhere; } .bad { color:var(--automation-error); } .detail { border-left:2px solid var(--automation-accent); padding:0 0 0 16px; } .detail h3 { font-size:19px; margin-bottom:12px; overflow-wrap:anywhere; } dl { display:grid; grid-template-columns:minmax(80px,.7fr) minmax(0,1fr); gap:9px 12px; margin:0; } dt { color:var(--automation-muted); font-size:11px; } dd { margin:0; overflow-wrap:anywhere; font-size:12px; } .mono { font-family:ui-monospace,monospace; overflow-wrap:anywhere; font-size:11px; } .note { font-size:11px; margin-top:16px; } .count { font:11px ui-monospace,monospace; margin-left:4px; color:var(--automation-muted); } .node-grid { display:grid; grid-template-columns:repeat(auto-fit,minmax(min(260px,100%),1fr)); gap:16px; } .node { border:1px solid var(--automation-border); border-radius:8px; padding:14px; } .node header { display:flex; justify-content:space-between; align-items:start; gap:12px; margin-bottom:4px; } .coverage { margin-top:12px; } .coverage li { border-top:1px solid var(--automation-border); padding:10px 0; } .coverage li>div { display:flex; justify-content:space-between; align-items:center; gap:12px; } .coverage strong { font-size:12px; } .coverage p { font-size:12px; margin-top:6px; } .audit li { display:flex; justify-content:space-between; gap:16px; padding:12px 0; border-bottom:1px solid var(--automation-border); } .audit li>div { min-width:0; } .audit li>div:last-child { text-align:right; } .audit { margin-top:12px; } .source-actions { display:flex; flex-wrap:wrap; gap:8px; margin-top:16px; } .source-actions button { border:1px solid var(--automation-accent); border-radius:5px; background:var(--automation-surface); padding:8px 12px; } .effect { display:block; font:10px ui-monospace,monospace; color:var(--automation-muted); } .footer { display:flex; align-items:center; justify-content:space-between; padding:8px 16px; gap:12px; border-top:1px solid var(--automation-border); } .footer button { background:transparent; border:0; color:var(--automation-muted); padding:8px; font-size:12px; } .feedback { font-size:12px; overflow-wrap:anywhere; } .empty { padding:26px 12px; } .empty p { color:var(--automation-muted); margin-top:8px; } @keyframes reveal { from { opacity:.65; } to { opacity:1; } } @media(max-width:600px) { .masthead { padding:16px; gap:10px; } .filters { grid-template-columns:repeat(2,minmax(0,1fr)); } .ledger { grid-template-columns:minmax(0,1fr); } .detail { border-left:0; border-top:2px solid var(--automation-accent); padding:16px 0 0; } .index ul { max-height:260px; } .status-line { padding:10px 16px; } .body { padding:12px; } h2 { font-size:18px; } } @media(prefers-reduced-motion:reduce) { .body { animation:none; } }
       </style>
       <div class="workspace"><header class="masthead"><div class="brand"><svg viewBox="0 0 40 40" fill="none" aria-hidden="true"><path d="M4 20h9m0 0 7-11h12m-19 11 7 11h12M13 20h19" stroke="currentColor" stroke-width="2"/><circle cx="5" cy="20" r="3" fill="currentColor"/><path d="M30 6h6v6h-6zM30 17h6v6h-6zM30 28h6v6h-6z" stroke="currentColor" stroke-width="2"/></svg><div><p class="eyebrow">Triggers · sources · outcomes</p><h2>Automations</h2></div></div><button class="refresh" data-action="refresh" ${this.phase === 'loading' ? 'disabled' : ''}>Refresh</button></header>
-      <div class="status-line" role="status" aria-live="polite"><strong class="${this.phase === 'error' ? 'bad' : ''}">${escape(status)}</strong><small>${this.phase === 'ready' ? 'Checked' : 'Last attempt'} ${escape(date(this.phase === 'ready' ? this.inventory.checked_at : this.attemptedAt))}</small></div>
+      <div class="status-line"><div role="status" aria-live="polite"><strong class="${this.phase === 'error' ? 'bad' : ''}">${escape(status)} · ${this.localOnly ? 'This node' : 'Mesh'}</strong><small>${this.phase === 'ready' ? 'Checked' : 'Last attempt'} ${escape(date(this.phase === 'ready' ? this.inventory.checked_at : this.attemptedAt))}</small></div><button data-action="scope" ${this.phase === 'loading' ? 'disabled' : ''}>${this.localOnly ? 'Scan mesh' : 'Use this node'}</button></div>
       <nav class="tabs" role="tablist" aria-label="Automation views">${SCREENS.map((screen) => `<button id="tab-${screen.id}" role="tab" aria-controls="panel-${screen.id}" aria-selected="${this.screen === screen.id}" tabindex="${this.screen === screen.id ? '0' : '-1'}" data-screen="${screen.id}">${screen.label}</button>`).join('')}</nav>
       <div class="body" id="panel-${this.screen}" role="tabpanel" aria-labelledby="tab-${this.screen}" tabindex="0" aria-busy="${this.phase === 'loading'}">${content}</div>
-      <footer class="footer"><span class="feedback" role="status">${escape(this.feedback || (this.phase === 'ready' ? 'Coverage determines completeness.' : 'No current inventory.'))}</span><button data-action="copy" ${this.inventory ? '' : 'disabled'}>Copy inventory</button></footer></div>`;
+      <footer class="footer"><span class="feedback" role="status">${escape(this.feedback || (this.phase === 'ready' ? 'Coverage determines completeness.' : 'No current inventory.'))}</span><button type="button" data-action="inventory-json" aria-expanded="${this.showInventoryJson}" aria-controls="inventory-json" ${this.inventory ? '' : 'disabled'}>${this.showInventoryJson ? 'Hide inventory JSON' : 'Select inventory JSON'}</button></footer>
+      <div class="inventory-json" id="inventory-json" ${this.showInventoryJson ? '' : 'hidden'}>${inventoryJson}</div></div>`;
     if (focusedAction) this.shadowRoot.querySelector(`[data-action="${focusedAction}"]`)?.focus();
   }
 }
 
-// Card and panel share the same inventory contract.
-export const ChronosAutomationsCard = AutomationsCard;
-export class AutomationsElement extends AutomationsCard {}
-if (!customElements.get('tr-automations-card')) customElements.define('tr-automations-card', AutomationsCard);
-if (!customElements.get('automations-card')) customElements.define('automations-card', class extends AutomationsCard {});
 if (!customElements.get('tr-automations')) customElements.define('tr-automations', AutomationsElement);

package/scaffold/.agent/skills/total-recall/plugins/code-quality/DESIGN.md

@@ -0,0 +1,53 @@
+---
+name: "Code Quality Gates"
+plugin: code-quality
+tokens:
+  color-primary: "#eab308"
+  color-primary-strong: "#facc15"
+  color-background: "#0f172a"
+  color-surface: "#1e293b"
+  color-border: "#334155"
+  color-text: "#f8fafc"
+  color-muted: "#94a3b8"
+  color-accent: "#38bdf8"
+  color-success: "#10b981"
+  color-warning: "#f59e0b"
+  color-danger: "#ef4444"
+  color-on-primary: "#0f172a"
+  font-body: "'Space Grotesk', system-ui, sans-serif"
+  font-mono: "'JetBrains Mono', 'Fira Code', monospace"
+  radius-md: "8px"
+  space-4: "16px"
+components:
+  report:
+    backgroundColor: "{tokens.color-surface}"
+    textColor: "{tokens.color-text}"
+    rounded: "{tokens.radius-md}"
+    padding: "{tokens.space-4}"
+  workflow:
+    backgroundColor: "{tokens.color-background}"
+    textColor: "{tokens.color-text}"
+    rounded: "{tokens.radius-md}"
+    padding: "{tokens.space-4}"
+---
+
+# Code Quality Gates — design
+
+The plugin's own visual language, for the Home panel, the SSSS UI chunks and any
+host that themes them. Values follow `branding.color` in `plugin.json` and the
+card palette in `ui/DESIGN.md`.
+
+## Meaning of colour
+
+- `color-success`: a report with status `clean` and nothing else.
+- `color-warning`: `partial`, `stale`, `unknown-freshness`, `zero-scope`, and skipped gates.
+- `color-danger`: `failed`, `unparsed-failure`, `infrastructure`, `unreadable`, `missing`, and failing gates.
+- `color-primary`: the one action that runs gates.
+
+No colour ever signals "passing" without a `clean` report view. Absent data is
+shown as absent, in `color-muted`.
+
+## Type
+
+`font-mono` for gate ids, file paths, revisions and commands; `font-body` for
+everything else.

package/scaffold/.agent/skills/total-recall/plugins/code-quality/cli.mjs

@@ -2,6 +2,7 @@
  * `total-recall code-quality <verb>` for the repository you run it from.
  *
  *   report [view] [arg]      read the latest gate report; never starts a check
+ *   run --tier fast|full    run the configured gates once
  *   snapshot --node <name>   put the exact source under test on the test node (git file list only)
  *   gate list|add|remove     edit the repo's gate list
  *   config get|set|…, detect [--apply], init
@@ -74,6 +75,28 @@ export async function run(argv = []) {
     return;
   }
 
+  if (verb === 'run') {
+    const usage = 'Usage: total-recall code-quality run [--tier fast|full] [--json]';
+    if (rest.includes('--help') || rest.includes('-h')) { console.log(usage); return; }
+    const json = rest.includes('--json');
+    const options = rest.filter((arg) => arg !== '--json');
+    const tier = options.length ? options[1] : 'fast';
+    const emitFailure = (exitCode, error) => {
+      if (json) console.log(JSON.stringify({ ok: false, exitCode, error }));
+      else console.error(error);
+      process.exitCode = exitCode;
+    };
+    if ((options.length && (options.length !== 2 || options[0] !== '--tier')) || !['fast', 'full'].includes(tier)) {
+      return emitFailure(2, usage);
+    }
+    try {
+      const { exitCode } = runCore('check.mjs', ['--tier', tier], { quiet: json });
+      if (json) console.log(JSON.stringify({ ok: exitCode === 0, exitCode, tier }));
+      if (exitCode) process.exitCode = exitCode;
+    } catch (error) { emitFailure(error.exitCode || 1, error.message); }
+    return;
+  }
+
   const moduleUrl = skillConfigModule();
   if (!moduleUrl) {
     return fail('Run this through the total-recall CLI: config verbs need a Total Recall install with skill config support.', 2);

package/scaffold/.agent/skills/total-recall/plugins/code-quality/commands/run-core.mjs

@@ -15,13 +15,15 @@ export function findSkillDir(start = process.cwd()) {
   return stateDir(start);
 }
 
-export function runCore(script, args) {
+export function runCore(script, args, { quiet = false } = {}) {
   if (!fs.existsSync(stateDir())) {
     const error = new Error('No code-quality state in this repository (.agent/skills/code-quality). Create configuration: total-recall code-quality detect --apply');
     error.exitCode = 2;
     throw error;
   }
-  const result = spawnSync(process.execPath, [path.join(CORE_DIR, script), ...args], { stdio: 'inherit' });
+  const result = spawnSync(process.execPath, [path.join(CORE_DIR, script), ...args], {
+    stdio: quiet ? ['ignore', 'ignore', 'inherit'] : 'inherit',
+  });
   if (result.error) throw result.error;
   return { exitCode: result.status ?? 1, data: { state_dir: stateDir(), script } };
 }

package/scaffold/.agent/skills/total-recall/plugins/code-quality/core/check.mjs

@@ -204,12 +204,14 @@ function acquireLock(lockPath, label) {
   const ageMs = held?.startedAt ? Date.now() - Date.parse(held.startedAt) : Infinity;
   const expired = Number.isFinite(ageMs) && ageMs > STALE_AFTER_MS;
 
-  if (STEAL_LOCK && state === 'alive') {
+  const protectedHolder = state === 'alive' || state === 'alive-foreign' ||
+    (state === 'unverifiable' && !expired);
+  if (STEAL_LOCK && protectedHolder) {
     // The machine-wide lock is shared by every repo on this host. A verified
     // live holder is another repo's (or this repo's) real run: stealing its
     // lock, or killing it, silently destroys that run's result.
     fail(
-      `--steal-lock refused: the ${label} lock is held by a verified running check ` +
+      `--steal-lock refused: the ${label} lock has a protected holder (state=${state}) ` +
       `(pid ${held.pid}, ${held.repoRoot ?? 'unknown repo'}, started ${held.startedAt ?? 'unknown'}).\n` +
       `   Wait for it to finish, or stop that process yourself if you own it.`,
       3

package/scaffold/.agent/skills/total-recall/plugins/code-quality/package-lock.json

@@ -1,18 +1,18 @@
 {
   "name": "tr-plugin-code-quality",
-  "version": "0.2.7",
+  "version": "0.3.0",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "tr-plugin-code-quality",
-      "version": "0.2.7",
+      "version": "0.3.0",
       "license": "MIT",
       "dependencies": {
         "@gregiteen/ssss-cli": "0.14.5"
       },
       "devDependencies": {
-        "total-recall-brain": "3.44.0"
+        "total-recall-brain": "3.45.0"
       }
     },
     "node_modules/@alcalzone/ansi-tokenize": {
@@ -5543,9 +5543,9 @@
       }
     },
     "node_modules/total-recall-brain": {
-      "version": "3.44.0",
-      "resolved": "https://registry.npmjs.org/total-recall-brain/-/total-recall-brain-3.44.0.tgz",
-      "integrity": "sha512-VNPaIO9zsSwoxAsJ5ByIQBP9zPpLq4RiQO7Vrex4rBOHFQJT50P7utcZiLMSZTyZJU4C/m5uB8qTCSBMp6+l6Q==",
+      "version": "3.45.0",
+      "resolved": "https://registry.npmjs.org/total-recall-brain/-/total-recall-brain-3.45.0.tgz",
+      "integrity": "sha512-HDYfROazZbsLHQsFPnlBcSpe1HL1QEi7JG8x/eNRUI06RxVQsZWl8LwBo2lTWjWRDrKmCy7BUmSXQDuWF3lrEw==",
       "dev": true,
       "license": "MIT",
       "workspaces": [

package/scaffold/.agent/skills/total-recall/plugins/code-quality/package.json

@@ -1,6 +1,6 @@
 {
   "name": "tr-plugin-code-quality",
-  "version": "0.2.7",
+  "version": "0.3.0",
   "type": "module",
   "description": "Total Recall code-quality plugin: shared gate runner core and per-repo gate configuration.",
   "license": "MIT",
@@ -18,6 +18,7 @@
     "plugin.json",
     "README.md",
     "LICENSE",
+    "DESIGN.md",
     "core/",
     "commands/",
     "ui/"

package/scaffold/.agent/skills/total-recall/plugins/code-quality/plugin.json

@@ -2,7 +2,7 @@
   "$schema": "https://github.com/gregiteen/total-recall/blob/main/metadata.plugin.schema.json",
   "id": "code-quality",
   "name": "Code Quality Gates",
-  "version": "0.2.7",
+  "version": "0.3.0",
   "description": "Fail-closed deterministic code-quality gates, lint rules, and test compliance reporting.",
   "author": "Total Recall contributors",
   "license": "MIT",
@@ -22,6 +22,15 @@
         "description": "Read the latest gate report or --review-diagnostics, with --json for machine output. Never starts a check",
         "effect": "read"
       },
+      {
+        "name": "run",
+        "description": "Run the selected repository's configured fast or full gates once and persist the report",
+        "effect": "write",
+        "timeoutMs": 600000,
+        "args": [
+          { "name": "tier", "flag": "--tier", "type": "choice", "options": ["fast", "full"], "label": "Gate tier" }
+        ]
+      },
       {
         "name": "snapshot",
         "description": "Copy the exact source under test (git file lists of this repo and linked plugin repos, secrets refused) to the test node, with a SHA-256 manifest",
@@ -63,7 +72,37 @@
     }
   ],
   "ui": {
+    "home": "code-quality-home",
+    "design_tokens": "DESIGN.md",
     "elements": [
+      {
+        "id": "code-quality-home",
+        "kind": "panel",
+        "tag": "code-quality-home",
+        "module": "ui/home.mjs",
+        "description": "Home: verdict, freshness, coverage, findings and the declared operations for this repository. Data comes from `code-quality report --json`; absent data never renders as passing.",
+        "props": {
+          "view": {
+            "type": "object",
+            "description": "JSON printed by `total-recall code-quality report --json`. Absent view renders as no data, never as passing."
+          }
+        },
+        "optional_tokens": [
+          "font-body",
+          "font-mono",
+          "color-primary",
+          "color-primary-strong",
+          "color-on-primary",
+          "color-background",
+          "color-surface",
+          "color-border",
+          "color-text",
+          "color-muted",
+          "color-success",
+          "color-warning",
+          "color-danger"
+        ]
+      },
       {
         "id": "code-quality-report",
         "kind": "panel",
@@ -76,10 +115,6 @@
             "description": "JSON printed by `total-recall code-quality report json`. Absent view renders as no data, never as passing."
           }
         },
-        "events": [
-          "run-check",
-          "reload"
-        ],
         "optional_tokens": [
           "font-body",
           "color-text",
@@ -91,41 +126,6 @@
           "radius-md",
           "space-4"
         ]
-      },
-      {
-        "id": "card",
-        "kind": "card",
-        "tag": "tr-code-quality-card",
-        "module": "ui/card.js",
-        "description": "Gatekeeper Card Face"
-      }
-    ]
-  },
-  "card_face": {
-    "skin": "winamp-classic",
-    "theme": "vibrant",
-    "headline": "Deterministic Code Gates & Lint",
-    "primary_color": "#06b6d4",
-    "secondary_color": "#164e63",
-    "accent_color": "#22d3ee",
-    "touch_layout": "comfortable",
-    "interactive": true,
-    "quick_actions": [
-      {
-        "subcommand": "report",
-        "label": "REPORT"
-      },
-      {
-        "subcommand": "gate",
-        "label": "GATE"
-      },
-      {
-        "subcommand": "config",
-        "label": "CONFIG"
-      },
-      {
-        "subcommand": "detect",
-        "label": "DETECT"
       }
     ]
   },