total-recall-brain 3.46.2 → 3.47.1

package/frontend/src/components/workspace/PluginHome.tsx

@@ -18,7 +18,7 @@ export function PluginHome({ plugin, plugins, brainId, onCommand }: {
   const home = (plugin.manifest?.ui as { home?: string } | undefined)?.home || plugin.ui?.home
   const panel = panels.find(element => element.id === home) || panels[0]
   const operations = scopedPluginOperations(plugin)
-  const chunks = published?.chunks.length ? published.chunks : defaults
+  const chunks = published?.chunks.length ? published.chunks : (panel ? [] : defaults)
 
   useEffect(() => {
     const controller = new AbortController()
@@ -62,8 +62,8 @@ export function PluginHome({ plugin, plugins, brainId, onCommand }: {
     )}
     {!loading && !published?.chunks.length && panel && !chunks.some(chunk => chunk.panel === panel.id) &&
       <PluginPanel plugin={plugin} elementId={panel.id} designCss={designCss} brainId={brainId} />}
-    {!published?.chunks.length && !chunks.some(chunk => chunk.operations?.length) && operations.length > 0 && <section aria-label="Plugin operations">
-      <h2>Start a workflow</h2>
+    {!loading && !panel && !chunks.length && operations.length > 0 && <section aria-label="Plugin operations">
+      <h2>Quick actions</h2>
       <ul className="plugin-home-operations">
         {operations.slice(0, 6).map(command => <li key={command.name}>
           <button type="button" className="btn btn-ghost" onClick={() => onCommand(command.name)}>{command.name}</button>

package/frontend/src/index.css

@@ -132,17 +132,15 @@ code, pre { font-family: var(--font-mono); }
   inset: 0 auto 0 0;
   width: var(--sidebar-width);
   min-width: var(--sidebar-width);
-  background: var(--glass);
-  backdrop-filter: blur(20px) saturate(1.4);
-  -webkit-backdrop-filter: blur(20px) saturate(1.4);
-  border-right: 1px solid var(--glass-border);
+  background: var(--bg-secondary);
+  border-right: 1px solid var(--border);
   display: flex;
   flex-direction: column;
   padding: 14px 0 12px;
   transform: translateX(-100%);
   transition: transform var(--transition-normal);
   z-index: 100;
-  box-shadow: 4px 0 40px rgba(0, 0, 0, 0.25);
+  box-shadow: 4px 0 40px rgba(0, 0, 0, 0.45);
 }
 
 .sidebar-nav {
@@ -211,24 +209,56 @@ code, pre { font-family: var(--font-mono); }
   flex-direction: column;
   min-width: 0;
   min-height: 0;
+  max-width: 100%;
+  overflow-x: hidden;
 }
 
 .workspace-toolbar {
-  display: flex;
+  display: grid;
+  grid-template-columns: 1fr auto 1fr;
   align-items: center;
-  justify-content: space-between;
-  gap: 12px;
-  padding: 8px clamp(12px, 3vw, 24px);
+  gap: 8px 12px;
+  width: 100%;
+  max-width: 100%;
+  box-sizing: border-box;
+  padding: 10px clamp(12px, 3vw, 24px);
   border-bottom: 1px solid var(--border);
 }
 
 .workspace-logo {
+  grid-column: 2;
+  justify-self: center;
   border-radius: var(--radius-sm);
 }
 
+.workspace-toolbar-actions {
+  grid-column: 3;
+  justify-self: end;
+  display: flex;
+  align-items: center;
+  gap: 8px;
+}
+
+@media (max-width: 680px) {
+  .workspace-toolbar {
+    grid-template-columns: minmax(0, 1fr);
+    justify-items: center;
+  }
+  .workspace-toolbar-spacer {
+    display: none;
+  }
+  .workspace-logo,
+  .workspace-toolbar-actions {
+    grid-column: 1;
+    justify-self: center;
+  }
+}
+
 .workspace-body {
   flex: 1;
+  min-width: 0;
   min-height: 0;
+  max-width: 100%;
 }
 
 .workspace-body[hidden] {
@@ -399,14 +429,16 @@ code, pre { font-family: var(--font-mono); }
 .drawer-shortcut-edit { display: grid; grid-template-columns: minmax(0, 1fr) minmax(0, 2fr) auto; gap: 8px; }
 .drawer-code, .drawer-context { font-family: var(--font-mono), monospace; white-space: pre-wrap; overflow-wrap: anywhere; }
 .drawer-code { width: 100%; resize: vertical; }
-.drawer-html { display: block; width: 100%; height: clamp(160px, 35vh, 340px); border: 1px solid var(--border); border-radius: var(--radius-sm); }
+.drawer-html { display: block; width: 100%; height: 110px; border: 1px solid var(--border); border-radius: var(--radius-sm); }
 .help-content { display: grid; gap: 10px; min-width: 0; }
 .help-topic-picker { display: grid; gap: 4px; font-size: 13px; color: var(--text-secondary); }
 .help-topic-description { font-size: 12px; color: var(--text-secondary); }
 .help-article { min-width: 0; overflow-wrap: anywhere; }
 
 @media (max-width: 540px) {
-  .app-layout { --workspace-right-width: calc(100vw - 48px); --workspace-bottom-height: min(72dvh, 600px); }
+  .app-layout { --workspace-right-width: calc(100vw - 48px); --workspace-bottom-height: min(72dvh, 600px); overflow-x: clip; }
+  .workspace-toolbar { gap: 6px 8px; padding: 6px 10px; }
+  .workspace-toolbar .btn { padding-inline: 10px; font-size: 13px; }
   .workspace-edge-handle--right { font-size: 11px; padding-inline: 5px; }
   .workspace-edge-handle--right[aria-expanded="true"] { font-size: 0; }
   .drawer-shortcut-edit { grid-template-columns: minmax(0, 1fr); }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "total-recall-brain",
-  "version": "3.46.2",
+  "version": "3.47.1",
   "description": "The Vibe Coding Brain & Autonomous Software Factory: memory, rules, secrets, and 33 visual plugins automatically managed across all your devices.",
   "type": "module",
   "bin": {

package/scaffold/.agent/skills/total-recall/plugins/auth/package-lock.json

@@ -19,7 +19,7 @@
       },
       "devDependencies": {
         "supertest": "^7.3.1",
-        "total-recall-brain": "3.45.0",
+        "total-recall-brain": "3.47.0",
         "vitest": "^4.1.12"
       }
     },
@@ -6704,9 +6704,9 @@
       }
     },
     "node_modules/total-recall-brain": {
-      "version": "3.45.0",
-      "resolved": "https://registry.npmjs.org/total-recall-brain/-/total-recall-brain-3.45.0.tgz",
-      "integrity": "sha512-HDYfROazZbsLHQsFPnlBcSpe1HL1QEi7JG8x/eNRUI06RxVQsZWl8LwBo2lTWjWRDrKmCy7BUmSXQDuWF3lrEw==",
+      "version": "3.47.0",
+      "resolved": "https://registry.npmjs.org/total-recall-brain/-/total-recall-brain-3.47.0.tgz",
+      "integrity": "sha512-S4UIdbbTyxw7C4+rix+7oHMm/6gYkcxwNBcP6kRDySX40p5IgqVTKgHk1n8rmaKiyYFoIX/HZHlHSjNrHgn0Gw==",
       "dev": true,
       "license": "MIT",
       "workspaces": [

package/scaffold/.agent/skills/total-recall/plugins/auth/package.json

@@ -1,6 +1,6 @@
 {
   "name": "tr-plugin-auth",
-  "version": "1.3.0",
+  "version": "1.3.1",
   "description": "White-label Total Recall auth plugin: Passkey biometric FIDO2 and Google OAuth2 authentication.",
   "type": "module",
   "main": "cli.mjs",
@@ -34,7 +34,8 @@
     "scripts/",
     "!src/**/*.spec.mjs",
     "ui/",
-    "!src/**/*.test.mjs"
+    "!src/**/*.test.mjs",
+    "skills/"
   ],
   "publishConfig": {
     "access": "public"

package/scaffold/.agent/skills/total-recall/plugins/auth/plugin.json

@@ -2,7 +2,7 @@
   "$schema": "https://github.com/gregiteen/total-recall/blob/main/metadata.plugin.schema.json",
   "id": "auth",
   "name": "Auth & Secrets",
-  "version": "1.3.0",
+  "version": "1.3.1",
   "description": "Encrypted credentials, repository bindings, dashboard sign-in and access across brains and machines.",
   "author": "Total Recall contributors",
   "license": "MIT",
@@ -49,9 +49,17 @@
     }
   ],
   "gate": {
-    "tasks": ["Read, store or rotate a credential", "Issue or revoke API keys", "Passkeys, passwords and sign-in sessions", "Audit where secrets are used"],
+    "tasks": [
+      "Read, store or rotate a credential",
+      "Issue or revoke API keys",
+      "Passkeys, passwords and sign-in sessions",
+      "Audit where secrets are used"
+    ],
     "owned_commands": [
-      { "pattern": "security\\s+find-generic-password\\b", "use": "total-recall auth secret get <KEY>" }
+      {
+        "pattern": "security\\s+find-generic-password\\b",
+        "use": "total-recall auth secret get <KEY>"
+      }
     ]
   },
   "cli": {
@@ -129,10 +137,20 @@
         "tag": "tr-auth-home",
         "module": "ui/home.js",
         "description": "Credential inventory, brains, machines and sign-in checks",
-        "events": ["auth-inventory", "auth-credential-mutate"]
+        "events": [
+          "auth-inventory",
+          "auth-credential-mutate"
+        ]
       }
     ]
   },
+  "reuse": {
+    "commands": [
+      "total-recall ssss status",
+      "total-recall decision status"
+    ],
+    "owned": "Encrypted credential store, OAuth/passkey sign-in, session tokens, scoped keys, and auth secrets across Total Recall plugins."
+  },
   "configuration": {
     "fields": [
       {
@@ -237,5 +255,12 @@
   "distribution": {
     "tier": "official",
     "license": "open"
-  }
+  },
+  "skills": [
+    {
+      "id": "auth",
+      "path": "./skills/auth/SKILL.md",
+      "description": "Encrypted credentials, repository bindings, dashboard sign-in and access across brains and machines."
+    }
+  ]
 }

package/scaffold/.agent/skills/total-recall/plugins/auth/skills/auth/SKILL.md

@@ -0,0 +1,35 @@
+---
+name: auth
+description: "Encrypted credentials, repository bindings, dashboard sign-in and access across brains and machines."
+version: 1.3.0
+repo_scoped: false
+---
+
+# Auth & Secrets
+
+Encrypted credentials, repository bindings, dashboard sign-in and access across brains and machines.
+
+## When to Use
+
+Use the `auth` Total Recall plugin (`total-recall auth`) instead of ad-hoc scripts or raw commands whenever working on auth & secrets tasks.
+
+## Commands
+
+```bash
+total-recall auth --help
+total-recall auth status  # Display auth system status and active providers
+total-recall auth audit  # Audit permissions, session secrets, and credential integrity
+total-recall auth rotate  # Generate and securely rotate SESSION_SECRET in store
+total-recall auth passkey  # Manage FIDO2 WebAuthn passkeys
+total-recall auth google  # Google OAuth status, connect, accounts, refresh and verified disconnect
+total-recall auth probe  # Run HTTP 200 health verification probe
+total-recall auth session  # Inspect active session tokens
+total-recall auth agent  # Sign in an agent CLI that authenticates on its own terminal
+total-recall auth secret  # Manage and inspect auth secrets in the Total Recall store
+total-recall auth password  # Set dashboard password through encrypted auth store: set --stdin [--force-reset]
+total-recall auth key  # Issue, list, revoke and audit scoped tokens; inspect and update role policy
+```
+
+## Owned Raw Commands
+
+This plugin owns: `security\s+find-generic-password\b`.