Keyboard shortcuts

Press ← or → to navigate between chapters

Press S or / to search in the book

Press ? to show this help

Press Esc to hide this help

Client GUI

Brain Server ships with a Dioxus control surface (client/) — a single Rust codebase that runs as a web app, desktop app, iOS app, and Android app. It gives operators a visual, accessible surface for everything the API and CLI can do. The web build is served by the server at /app.

What the GUI provides

The client has 15 wired panels, plus a connect-first onboarding flow, grouped under a sidebar rail (desktop) / bottom tab bar (mobile):

PanelRouteWhat it shows
Overview/Decision-first home: a 4-card status row (Health / Snapshot / Retention / UMP), a DAR-chain alert list, and a top-5 pending-proposal queue with one-click Approve/Reject
Review/reviewThe human-in-the-loop write-back queue — approve, reject, or suggest re-ingest with the A/S/R/J/K keyboard (WCAG 2.1.4 toggle for sticky keys)
Recall/recallSearch + the decision-path viewer: per-retriever ranks, fused score, relevance tiers, min_relevance slider, deep-linkable trace artifact
Graph/graphBrowse + traverse the knowledge graph: debounced entity lookup and typed multi-hop hop-chains with a kind filter
Create/createThe write workspace hub — Ingest (structured / markdown / memory), Procedures step-builder + classify + decision evaluation, and Consolidate propose/apply/undo
Subjects/subjectsThe DSAR certificate card — found/purged/tombstone-root/chain-head/certified-at + a live green/red chain badge
Security/securityThe audit chain card, quarantine review, and the auth-failure feed
Audit/auditAudit filters + JSON export
Data/dataData & Rights: purge (by ids or owner), portable export (JSON / UMP / UMP-Markdown), per-kind retention editor, the /decayed review list, and the /tombstones deletion registry
UMP/umpUniversal Memory Protocol: capabilities card + integrity badge, remember, recall (kind filter + max_recall), and audit + verify chain
System/systemThe operator console: domains, snapshot integrity, Art 30 register, reindex, connectors + reconcile, and a Try-it console with request-line building + secret redaction
Health/healthService + corpus status
Ops/opsThe live alert feed (SSE) + Memory Operations panel with per-proposal SLA clocks and the gate-health strip
Register/registerThe Agent Memory Register: provenance ledger by origin (human / model / imported) with owner/source/kind filters and drill-down evidence
Clients/clientsBPO client register (role-gated): the console renders only the client(s) your token is granted (client-auditor) or the all-clients operations board (bpo-ops/admin)

Command palette

The ⌘K / Ctrl+K overlay (v1.16.7) was upgraded to a fused nav + lookup + action palette (v1.17.6): grouped Recent/Go to/Lookup/Run rows, 5-per-group cap, persisted recents, / re-focus, a two-step destructive confirm, and per-row aria-labels.

Honest-batch review

The Review panel tracks every row’s outcome individually — a failed call is surfaced, never silently dropped. A 404 with nothing pending is treated as success. You can reject with a reason and suggest re-ingest. It is one surface of the human-in-the-loop control room — alongside the Memory Operations panel (live SLA clocks + gate health + flagged inventory) and the Agent Memory Register (provenance ledger). See Human in the loop for how to evaluate proposals as a critical operator, not a queue-clearer.

Recall decision-path viewer

With ?trace=true, /recall returns a trace_id; the GUI opens a deep-linkable artifact at /recall/:trace_id showing exactly which chunks were injected and why.

Connection state machine

The client has a robust connection layer:

  • A single probe with a false-offline guard — N failures before the indicator turns amber.
  • Chain-verify-before-writes — writes stay frozen until /audit/verify confirms the audit chain is intact, then they re-enable.
  • Reads degrade gracefully when the connection is amber; mutations freeze.

Accessibility

The client is built to WCAG 2.2 AA:

  • Focus-to-<h1> on navigation + per-route document titles.
  • No <div onclick> — every interactive element is a real <button> or <link> (grep-guarded in CI).
  • Aria-live regions, dir="auto" RTL, scroll-margin-top, and ≥44px touch targets.
  • A hand-rolled drawer focus trap with Tab/Shift+Tab cycling.

See client/a11y-checklist.md in the repo for the manual VoiceOver/NVDA checklist.

Deployment

# In the client/ directory — build the web bundle and deploy it
./deploy-web.sh

The web build ships as a PWA with an offline shell (the service worker caches only the shell + assets, never the API). The desktop / mobile builds use the same codebase.

Next steps