infinicode 2.6.0 → 2.6.2

package/dist/kernel/federation/dashboard-html.js

@@ -358,6 +358,7 @@ button.act:disabled{opacity:0.5;cursor:default;}
   <input id="cmdInput" placeholder="/status   /nodes   /health   (Enter to run)" autocomplete="off" spellcheck="false">
   <button class="act" id="runBtn">Run</button>
   <button class="act ghost" id="applyBtn">Apply config to fleet</button>
+  <button class="act ghost" id="updateBtn" title="npm-update every node to the latest release and restart (supervised nodes come back on their own)">Update fleet</button>
 </footer>
 <div id="out"><button class="x" id="outClose">close</button><span id="outText"></span></div>
 
@@ -554,6 +555,16 @@ button.act:disabled{opacity:0.5;cursor:default;}
       .catch(function(e){ showOut('apply failed: '+e.message); })
       .then(function(){ $('applyBtn').disabled=false; });
   });
+  $('updateBtn').addEventListener('click', function(){
+    if(!confirm('Update every node to the latest npm release and restart them?\\n\\nSupervised nodes relaunch automatically; the hub itself will blip while it restarts.')) return;
+    $('updateBtn').disabled = true;
+    showOut('Updating fleet — installing latest on each node…');
+    fetch('/fed/command'+QS, { method:'POST', headers:{'content-type':'application/json'}, body: JSON.stringify({ input:'/update all' }) })
+      .then(function(r){ return r.json().catch(function(){ return { ok:false, text:'HTTP '+r.status }; }); })
+      .then(function(res){ showOut('Update fleet:\\n' + ((res&&(res.text!=null?res.text:JSON.stringify(res,null,2)))||'done')); poll(); })
+      .catch(function(e){ showOut('update failed: '+e.message); })
+      .then(function(){ $('updateBtn').disabled=false; });
+  });
 
   // ── tabs: Fleet + Park + RoboPark sessions/telemetry ──
   var tabs = document.querySelectorAll('.tab');
@@ -694,13 +705,28 @@ button.act:disabled{opacity:0.5;cursor:default;}
   //  Robot cam targets a LiveKit track via /robopark/api/robots/:id/stream.
   // ══════════════════════════════════════════════════════════════════
   var Park = (function(){
-    var C, X, DPR=1, W=0, H=0, cam={x:0,y:0,z:1};
+    var C, X, DPR=1, W=0, H=0, cam={x:0,y:0,z:1}, fitted=false;
     var nodes=[], byId={}, orbs=[], pulses=[], t0=0, raf=null, running=false, es=null, animSeq=-1;
-    var TW=124, TH=62;
     var drawerId=null, camRAF=null, meterRAF=null, camAbort=null, drawerTimer=null;
-    var RING=[[2,0],[1,2],[-1,2],[-2,0],[-1,-2],[1,-2],[3,1],[3,-1],[0,3],[-3,1],[-3,-1],[0,-3],[2,3],[-2,3],[2,-3],[-2,-3],[4,0],[0,4],[-4,0],[0,-4]];
+    var lkRoom=null, micAnalyser=null, audioCtx=null;
+    var TW=44, TH=22, PARK_W=15, PARK_D=8;
+    // The real park (from the aerial): named robot pads at their ground
+    // positions, plus palms, pond, and the street. A mesh node binds to a pad
+    // when its display name matches the pad keywords (robobmw → VIXEN/BMW).
+    var SLOTS=[
+      {label:'VOLT',   keys:['volt'],          nx:0.30, ny:0.22},
+      {label:'TESLA',  keys:['tesla'],         nx:0.44, ny:0.36},
+      {label:'JAGUAR', keys:['jaguar','jag'],  nx:0.60, ny:0.40},
+      {label:'VIXEN',  keys:['vixen','bmw'],   nx:0.55, ny:0.66, sub:'BMW'},
+      {label:'PANDA',  keys:['panda'],         nx:0.84, ny:0.58}
+    ];
+    var HUBSLOT={label:'CONTROL', keys:[], nx:0.09, ny:0.12};
+    var PALMS=[[0.11,0.55],[0.15,0.74],[0.19,0.42],[0.23,0.64],[0.17,0.31],[0.25,0.82],[0.37,0.24],[0.41,0.56],[0.49,0.74],[0.52,0.29],[0.59,0.62],[0.66,0.26],[0.71,0.69],[0.76,0.42],[0.82,0.74],[0.89,0.42],[0.92,0.68],[0.67,0.83],[0.34,0.71]];
+    var POND={cx:0.33*15, cy:0.99*8, rx:3.1, ry:1.4};
+    var CARS=[[4,-0.95,'#e0a23c'],[6,-0.8,'#7fb4ff'],[8,-1.0,'#ff7e6e'],[10.5,-0.78,'#d8d8e0'],[12.8,-0.95,'#f2c14e']];
 
     function mono(){ return 'ui-monospace,Menlo,Consolas,monospace'; }
+    function W2(nx,ny){ return [nx*PARK_W, ny*PARK_D]; }
     function kindOf(n){
       var r=(n.role||'').toLowerCase();
       if(r==='hub'||r==='scheduler') return 'hub';
@@ -712,19 +738,41 @@ button.act:disabled{opacity:0.5;cursor:default;}
     function loadColor(l){ return l>=75?getVar('--bad'):l>=45?getVar('--warn'):getVar('--ok'); }
     function getVar(v){ try{ return getComputedStyle(document.documentElement).getPropertyValue(v).trim()||'#ccc'; }catch(e){ return '#ccc'; } }
 
+    // Bind mesh nodes onto the fixed park pads; unmatched pads render as
+    // offline placeholders so the whole park is always visible.
     function layout(src){
-      var list=(src||[]).slice().sort(function(a,b){ return (a.nodeId<b.nodeId?-1:1); });
-      var hub=null; for(var i=0;i<list.length;i++){ if(kindOf(list[i])==='hub'){ hub=list[i]; break; } }
-      if(!hub && list.length) hub=list[0];
-      var out=[], oi=0;
-      list.forEach(function(n){
-        var cell = (n===hub)? [0,0] : RING[(oi++)%RING.length];
-        var prev = byId[n.nodeId];
-        out.push({
-          id:n.nodeId, name:n.displayName||n.nodeId, role:n.role||'?', kind:kindOf(n),
-          connected:!!n.connected, load:(n.load!=null?n.load:0), platform:n.platform||'', version:n.version||'?',
-          site:n.site||'', caps:n.capabilities||[], gx:cell[0], gy:cell[1], _hit:prev?prev._hit:null
-        });
+      var list=(src||[]).slice(), used={}, out=[];
+      function prevHit(id){ for(var p=0;p<nodes.length;p++){ if(nodes[p].id===id) return nodes[p]._hit; } return null; }
+      function bind(slot, wx, wy, kind){
+        var match=null;
+        for(var i=0;i<list.length;i++){ var n=list[i]; if(used[n.nodeId]) continue;
+          var nm=(n.displayName||n.nodeId||'').toLowerCase(), isHub=kindOf(n)==='hub';
+          if(kind==='hub'){ if(isHub){ match=n; break; } }
+          else if(!isHub){ for(var k=0;k<slot.keys.length;k++){ if(slot.keys[k] && nm.indexOf(slot.keys[k])>-1){ match=n; break; } } if(match) break; }
+        }
+        var id = match?match.nodeId:('pad:'+slot.label);
+        if(match) used[match.nodeId]=1;
+        return {
+          id:id, kind:kind, label:slot.label,
+          name: match?(match.displayName||match.nodeId):slot.label.toLowerCase(),
+          sub: match?(slot.sub||''):'not joined',
+          connected: match?!!match.connected:false,
+          load: (match&&match.load!=null)?match.load:0,
+          platform: match?(match.platform||''):'', version: match?(match.version||'?'):'—',
+          site: match?(match.site||''):'', caps: match?(match.capabilities||[]):[],
+          telemKeys: [slot.label.toLowerCase()].concat(slot.keys||[]).concat(match?[(match.displayName||'').toLowerCase()]:[]),
+          wx:wx, wy:wy, _hit:prevHit(id)
+        };
+      }
+      var h=W2(HUBSLOT.nx,HUBSLOT.ny); out.push(bind(HUBSLOT,h[0],h[1],'hub'));
+      SLOTS.forEach(function(s){ var w=W2(s.nx,s.ny); out.push(bind(s,w[0],w[1],'robot')); });
+      // Any extra live node that matched no pad → line it along the near edge.
+      var ex=0;
+      list.forEach(function(n){ if(used[n.nodeId]) return; used[n.nodeId]=1;
+        var w=W2(0.20+ex*0.13, 0.90); ex++;
+        out.push({ id:n.nodeId, kind:kindOf(n), label:(n.displayName||n.nodeId), name:(n.displayName||n.nodeId),
+          sub:n.role||'', connected:!!n.connected, load:(n.load!=null?n.load:0), platform:n.platform||'', version:n.version||'?',
+          site:n.site||'', caps:n.capabilities||[], telemKeys:[(n.displayName||'').toLowerCase()], wx:w[0], wy:w[1], _hit:prevHit(n.nodeId) });
       });
       return out;
     }
@@ -739,8 +787,11 @@ button.act:disabled{opacity:0.5;cursor:default;}
 
     function hub(){ for(var i=0;i<nodes.length;i++) if(nodes[i].kind==='hub') return nodes[i]; return nodes[0]; }
     function findByFrame(f){
-      var key=f.n; if(key==null) return null;
-      for(var i=0;i<nodes.length;i++){ if(nodes[i].name===key||nodes[i].id===key) return nodes[i]; }
+      var key=(f.n==null?'':String(f.n)).toLowerCase(); if(!key) return null;
+      for(var i=0;i<nodes.length;i++){ var n=nodes[i];
+        if(n.id===f.n || (n.name||'').toLowerCase()===key) return n;
+        for(var k=0;k<n.telemKeys.length;k++){ if(n.telemKeys[k] && key.indexOf(n.telemKeys[k])>-1) return n; }
+      }
       return null;
     }
     function ingest(f, fromPoll){
@@ -786,30 +837,67 @@ button.act:disabled{opacity:0.5;cursor:default;}
       C.addEventListener('click',function(e){
         var r=C.getBoundingClientRect(), mx=e.clientX-r.left, my=e.clientY-r.top, hit=null;
         for(var i=0;i<nodes.length;i++){ var hb=nodes[i]._hit; if(hb&&mx>=hb.x&&mx<=hb.x+hb.w&&my>=hb.y&&my<=hb.y+hb.h) hit=nodes[i]; }
-        if(hit){ openDrawer(hit.id); selectNode(hit.id, hit.name); }
+        if(hit){ openDrawer(hit.id); if(String(hit.id).indexOf('pad:')!==0) selectNode(hit.id, hit.name); }
       });
       window.addEventListener('resize', function(){ if(running) resize(); });
     }
     function resize(){
       var st=$('pk-stage'); if(!st) return;
       W=st.clientWidth; H=st.clientHeight; C.width=W*DPR; C.height=H*DPR; X.setTransform(DPR,0,0,DPR,0,0);
+      if(!fitted){ fit(); fitted=true; }
     }
-    function iso(gx,gy){ return { x: W/2 + cam.x + (gx-gy)*TW/2*cam.z, y: H*0.42 + cam.y + (gx+gy)*TH/2*cam.z }; }
-
-    function tile(gx,gy,raised){
-      var p=iso(gx,gy), z=cam.z, hw=TW/2*z, hh=TH/2*z, dz=raised?13*z:0;
-      X.beginPath(); X.moveTo(p.x,p.y-hh-dz); X.lineTo(p.x+hw,p.y-dz); X.lineTo(p.x,p.y+hh-dz); X.lineTo(p.x-hw,p.y-dz); X.closePath();
-      var g=X.createLinearGradient(p.x-hw,p.y-hh,p.x+hw,p.y+hh);
-      g.addColorStop(0,raised?'rgba(60,52,86,0.55)':'rgba(30,26,44,0.32)'); g.addColorStop(1,raised?'rgba(20,17,32,0.6)':'rgba(16,14,26,0.28)');
-      X.fillStyle=g; X.fill();
-      X.strokeStyle=raised?'rgba(255,214,112,0.55)':'rgba(255,255,255,0.08)'; X.lineWidth=1; X.stroke();
-      if(raised){
-        X.beginPath(); X.moveTo(p.x-hw,p.y-dz); X.lineTo(p.x-hw,p.y); X.lineTo(p.x,p.y+hh); X.lineTo(p.x,p.y+hh-dz); X.closePath();
-        X.fillStyle='rgba(10,8,18,0.55)'; X.fill(); X.strokeStyle='rgba(255,214,112,0.28)'; X.stroke();
-        X.beginPath(); X.moveTo(p.x+hw,p.y-dz); X.lineTo(p.x+hw,p.y); X.lineTo(p.x,p.y+hh); X.lineTo(p.x,p.y+hh-dz); X.closePath();
-        X.fillStyle='rgba(14,11,24,0.55)'; X.fill(); X.strokeStyle='rgba(255,214,112,0.2)'; X.stroke();
-      }
-      return p;
+    function fit(){
+      var span=PARK_W+PARK_D;
+      var zx=(W-330)/(span*TW*0.5+120), zy=H/(span*TH+220);
+      cam.z=Math.max(0.5,Math.min(1.5, Math.min(zx,zy))); cam.x=0; cam.y=0;
+    }
+    // World (park) coords → screen. Origin biased left so the right-docked feed
+    // doesn't cover the plaza; the park is centered on (PARK_W/2, PARK_D/2).
+    function iso(wx,wy){
+      var dx=(wx-PARK_W/2)-(wy-PARK_D/2), dy=(wx-PARK_W/2)+(wy-PARK_D/2);
+      return { x:(W-300)/2 + cam.x + dx*TW*cam.z, y:H*0.42 + cam.y + dy*TH*cam.z };
+    }
+    function poly(pts, fill, stroke, lw){
+      X.beginPath();
+      for(var i=0;i<pts.length;i++){ var p=iso(pts[i][0],pts[i][1]); if(i===0)X.moveTo(p.x,p.y); else X.lineTo(p.x,p.y); }
+      X.closePath();
+      if(fill){ X.fillStyle=fill; X.fill(); }
+      if(stroke){ X.strokeStyle=stroke; X.lineWidth=lw||1; X.stroke(); }
+    }
+    function drawGround(){
+      // grass base
+      var g=X.createLinearGradient(0,0,0,H); g.addColorStop(0,'rgba(38,68,44,0.55)'); g.addColorStop(1,'rgba(22,44,28,0.5)');
+      poly([[-2,-2.2],[PARK_W+2,-2.2],[PARK_W+2,PARK_D+2],[-2,PARK_D+2]], g, 'rgba(120,180,120,0.10)',1);
+      // street band along the far edge + dashed centerline + cars
+      poly([[0,-1.5],[PARK_W,-1.5],[PARK_W,-0.35],[0,-0.35]], 'rgba(26,26,32,0.88)', 'rgba(255,255,255,0.08)',1);
+      X.strokeStyle='rgba(232,210,120,0.5)'; X.setLineDash([9*cam.z,9*cam.z]);
+      var r1=iso(0.2,-0.92), r2=iso(PARK_W-0.2,-0.92); X.beginPath(); X.moveTo(r1.x,r1.y); X.lineTo(r2.x,r2.y); X.stroke(); X.setLineDash([]);
+      CARS.forEach(function(c){ drawCar(c[0],c[1],c[2]); });
+      // paved plaza
+      var px0=0.4,py0=-0.15,px1=PARK_W-0.4,py1=PARK_D-0.6;
+      var pg=X.createLinearGradient(0,0,0,H); pg.addColorStop(0,'rgba(74,70,92,0.66)'); pg.addColorStop(1,'rgba(46,42,60,0.62)');
+      poly([[px0,py0],[px1,py0],[px1,py1],[px0,py1]], pg, 'rgba(255,255,255,0.07)',1);
+      X.strokeStyle='rgba(255,255,255,0.05)'; X.lineWidth=1;
+      for(var gx=Math.ceil(px0);gx<px1;gx++){ var a=iso(gx,py0), b=iso(gx,py1); X.beginPath(); X.moveTo(a.x,a.y); X.lineTo(b.x,b.y); X.stroke(); }
+      for(var gy=Math.ceil(py0);gy<py1;gy++){ var c=iso(px0,gy), d=iso(px1,gy); X.beginPath(); X.moveTo(c.x,c.y); X.lineTo(d.x,d.y); X.stroke(); }
+      // pond
+      var pts=[]; for(var t=0;t<Math.PI*2;t+=Math.PI/9){ pts.push([POND.cx+POND.rx*Math.cos(t), POND.cy+POND.ry*Math.sin(t)]); }
+      var wg=X.createLinearGradient(0,0,0,H); wg.addColorStop(0,'rgba(44,116,156,0.72)'); wg.addColorStop(1,'rgba(26,74,116,0.72)');
+      poly(pts, wg, 'rgba(130,205,235,0.32)',1.5);
+    }
+    function drawCar(wx,wy,col){
+      var p=iso(wx,wy), z=cam.z;
+      X.fillStyle='rgba(0,0,0,0.3)'; X.beginPath(); X.ellipse(p.x,p.y+3*z,11*z,5*z,0,0,7); X.fill();
+      X.fillStyle=col; X.beginPath(); X.roundRect(p.x-11*z,p.y-7*z,22*z,12*z,3*z); X.fill();
+      X.fillStyle='rgba(255,255,255,0.25)'; X.beginPath(); X.roundRect(p.x-6*z,p.y-6*z,12*z,5*z,2*z); X.fill();
+    }
+    function drawPalm(wx,wy){
+      var p=iso(wx,wy), z=cam.z;
+      X.fillStyle='rgba(0,0,0,0.26)'; X.beginPath(); X.ellipse(p.x,p.y,10*z,4.5*z,0,0,7); X.fill();
+      X.strokeStyle='#6b4a24'; X.lineWidth=3*z; X.beginPath(); X.moveTo(p.x,p.y); X.quadraticCurveTo(p.x+3*z,p.y-14*z,p.x+1*z,p.y-24*z); X.stroke();
+      var tx=p.x+1*z, ty=p.y-24*z; X.strokeStyle='#3f8f4a'; X.lineWidth=2.4*z;
+      for(var a=0;a<6;a++){ var ang=(-Math.PI/2)+(a-2.5)*0.52; X.beginPath(); X.moveTo(tx,ty); X.quadraticCurveTo(tx+Math.cos(ang)*10*z, ty+Math.sin(ang)*8*z-4*z, tx+Math.cos(ang)*20*z, ty+Math.sin(ang)*11*z+3*z); X.stroke(); }
+      X.fillStyle='#caa23a'; X.beginPath(); X.arc(tx,ty+1*z,2*z,0,7); X.fill();
     }
     function ring(cx,cy,r,frac,color){
       X.beginPath(); X.arc(cx,cy,r,0,Math.PI*2); X.strokeStyle='rgba(255,255,255,0.12)'; X.lineWidth=3*cam.z; X.stroke();
@@ -820,62 +908,68 @@ button.act:disabled{opacity:0.5;cursor:default;}
       X.font='700 '+(11*z)+'px '+mono(); X.fillStyle=col; X.fillText(txt,cx,cy);
       X.font=(8.5*z)+'px '+mono(); X.fillStyle='rgba(200,185,150,0.9)'; X.fillText(sub,cx,cy+11*z);
     }
+    function padMark(bx,by,z){ X.strokeStyle='rgba(255,255,255,0.10)'; X.lineWidth=1; X.beginPath(); X.ellipse(bx,by,15*z,7*z,0,0,7); X.stroke(); }
     function drawHub(n){
-      var p=tile(n.gx,n.gy,true), z=cam.z, bob=Math.sin((performance.now()-t0)/700)*2*z, bx=p.x, by=p.y-14*z-bob;
-      X.fillStyle='rgba(40,34,58,0.9)'; X.strokeStyle=getVar('--gold-bright'); X.lineWidth=1.2;
+      var p=iso(n.wx,n.wy), z=cam.z, bob=Math.sin((performance.now()-t0)/700)*2*z, bx=p.x, by=p.y-6*z-bob;
+      X.fillStyle='rgba(0,0,0,0.3)'; X.beginPath(); X.ellipse(bx,p.y+2*z,16*z,7*z,0,0,7); X.fill();
+      X.fillStyle='rgba(40,34,58,0.92)'; X.strokeStyle=getVar('--gold-bright'); X.lineWidth=1.2;
       X.beginPath(); X.rect(bx-16*z,by-40*z,32*z,44*z); X.fill(); X.stroke();
       for(var i=0;i<4;i++){ X.fillStyle=i%2?getVar('--ok'):getVar('--gold-bright'); X.globalAlpha=0.4+0.6*Math.abs(Math.sin((performance.now()-t0)/300+i)); X.fillRect(bx-11*z,by-34*z+i*9*z,22*z,4*z); X.globalAlpha=1; }
       X.strokeStyle=getVar('--gold'); X.beginPath(); X.moveTo(bx,by-40*z); X.lineTo(bx,by-52*z); X.stroke();
       X.fillStyle=getVar('--gold-bright'); X.beginPath(); X.arc(bx,by-53*z,3*z,0,7); X.fill();
-      label(bx,p.y+18*z,n.name,getVar('--gold-bright'), (n.connected?'HUB · '+Math.round(n.load)+'%':'offline'));
+      label(bx,p.y+16*z,n.name,getVar('--gold-bright'), (n.connected?'HUB · '+Math.round(n.load)+'%':'offline'));
       n._hit={x:bx-20*z,y:by-54*z,w:40*z,h:80*z};
     }
     function drawRobot(n){
-      var p=tile(n.gx,n.gy,true), z=cam.z, bob=Math.sin((performance.now()-t0)/500+n.gx)*2.4*z, bx=p.x, by=p.y-10*z-bob;
-      ring(bx,p.y+2*z,20*z,n.load/100,loadColor(n.load));
-      X.fillStyle='rgba(0,0,0,0.35)'; X.beginPath(); X.ellipse(bx,p.y+2*z,15*z,7*z,0,0,7); X.fill();
-      var col=n.connected?getVar('--gold-bright'):'rgba(150,140,120,0.5)';
-      X.fillStyle='rgba(24,20,38,0.9)'; X.strokeStyle=col; X.lineWidth=1.6;
-      X.beginPath(); X.roundRect(bx-12*z,by-24*z,24*z,26*z,5*z); X.fill(); X.stroke();
-      X.beginPath(); X.roundRect(bx-9*z,by-38*z,18*z,15*z,4*z); X.fillStyle='rgba(30,24,44,0.95)'; X.fill(); X.stroke();
-      X.fillStyle=n.connected?getVar('--ok'):'#654'; X.beginPath(); X.arc(bx-4*z,by-30*z,2.1*z,0,7); X.arc(bx+4*z,by-30*z,2.1*z,0,7); X.fill();
-      X.strokeStyle=col; X.beginPath(); X.moveTo(bx,by-38*z); X.lineTo(bx,by-45*z); X.stroke();
-      X.fillStyle=n.connected?'#FF5B4A':'#654'; X.beginPath(); X.arc(bx,by-46*z,2.2*z,0,7); X.fill();
-      label(bx,p.y+18*z,n.name,col,(n.connected?'load '+Math.round(n.load)+'%':'offline'));
-      n._hit={x:bx-16*z,y:by-48*z,w:32*z,h:62*z};
+      var p=iso(n.wx,n.wy), z=cam.z, bob=n.connected?Math.sin((performance.now()-t0)/500+n.wx)*2.3*z:0, bx=p.x, by=p.y-4*z-bob;
+      if(n.connected) ring(bx,p.y+3*z,18*z,n.load/100,loadColor(n.load)); else padMark(bx,p.y+3*z,z);
+      X.fillStyle='rgba(0,0,0,0.3)'; X.beginPath(); X.ellipse(bx,p.y+3*z,13*z,6*z,0,0,7); X.fill();
+      var col=n.connected?getVar('--gold-bright'):'rgba(150,143,120,0.5)';
+      X.globalAlpha=n.connected?1:0.7;
+      X.fillStyle='rgba(24,20,38,0.92)'; X.strokeStyle=col; X.lineWidth=1.6;
+      X.beginPath(); X.roundRect(bx-11*z,by-24*z,22*z,25*z,5*z); X.fill(); X.stroke();
+      X.beginPath(); X.roundRect(bx-8*z,by-37*z,16*z,14*z,4*z); X.fillStyle='rgba(30,24,44,0.95)'; X.fill(); X.stroke();
+      X.fillStyle=n.connected?getVar('--ok'):'#655'; X.beginPath(); X.arc(bx-3.5*z,by-30*z,2*z,0,7); X.arc(bx+3.5*z,by-30*z,2*z,0,7); X.fill();
+      X.strokeStyle=col; X.beginPath(); X.moveTo(bx,by-37*z); X.lineTo(bx,by-44*z); X.stroke();
+      X.fillStyle=n.connected?'#FF5B4A':'#655'; X.beginPath(); X.arc(bx,by-45*z,2*z,0,7); X.fill();
+      X.globalAlpha=1;
+      var sub=n.connected?((n.sub&&n.sub!==n.name?n.sub+' · ':'')+Math.round(n.load)+'%'):'not joined';
+      label(bx,p.y+17*z,n.label,col,sub);
+      n._hit={x:bx-15*z,y:by-47*z,w:30*z,h:60*z};
     }
     function drawPeer(n){
-      var p=tile(n.gx,n.gy,true), z=cam.z, bx=p.x, by=p.y-8*z;
-      var col=n.connected?getVar('--info'):'rgba(150,140,120,0.5)';
+      var p=iso(n.wx,n.wy), z=cam.z, bx=p.x, by=p.y-3*z;
+      X.fillStyle='rgba(0,0,0,0.3)'; X.beginPath(); X.ellipse(bx,p.y+2*z,13*z,6*z,0,0,7); X.fill();
+      var col=n.connected?getVar('--info'):'rgba(150,143,120,0.5)';
       X.fillStyle='rgba(24,22,40,0.9)'; X.strokeStyle=col; X.lineWidth=1.4;
       X.beginPath(); X.roundRect(bx-13*z,by-22*z,26*z,22*z,4*z); X.fill(); X.stroke();
       X.fillStyle=col; X.globalAlpha=0.5+0.5*Math.abs(Math.sin((performance.now()-t0)/500)); X.fillRect(bx-8*z,by-14*z,16*z,3*z); X.globalAlpha=1;
-      label(bx,p.y+16*z,n.name,col,(n.connected?n.role:'offline'));
+      label(bx,p.y+15*z,n.label,col,(n.connected?n.sub:'offline'));
       n._hit={x:bx-15*z,y:by-24*z,w:30*z,h:42*z};
     }
 
     function frame(){
       if(!running) return;
       X.clearRect(0,0,W,H);
-      for(var gx=-4;gx<=4;gx++) for(var gy=-4;gy<=4;gy++){ if(!nodes.some(function(n){return n.gx===gx&&n.gy===gy;})) faint(gx,gy); }
-      var sorted=nodes.slice().sort(function(a,b){ return (a.gx+a.gy)-(b.gx+b.gy); });
-      sorted.forEach(function(n){ if(n.kind==='hub') drawHub(n); else if(n.kind==='robot') drawRobot(n); else drawPeer(n); });
-      for(var i=orbs.length-1;i>=0;i--){ var o=orbs[i]; o.t+=0.024; if(o.t>=1){orbs.splice(i,1);continue;}
-        var a=iso(o.a.gx,o.a.gy), b=iso(o.b.gx,o.b.gy), e=o.t<.5?2*o.t*o.t:-1+(4-2*o.t)*o.t;
-        var x=a.x+(b.x-a.x)*e, y=a.y+(b.y-a.y)*e-Math.sin(o.t*Math.PI)*40*cam.z;
-        X.beginPath(); X.arc(x,y,4*cam.z,0,7); X.fillStyle=o.color; X.shadowColor=o.color; X.shadowBlur=12; X.fill(); X.shadowBlur=0;
+      drawGround();
+      // depth-sort palms + nodes so nearer objects overlap farther ones
+      var objs=[];
+      for(var pi=0;pi<PALMS.length;pi++){ var w=W2(PALMS[pi][0],PALMS[pi][1]); objs.push({wx:w[0],wy:w[1],palm:true}); }
+      for(var ni=0;ni<nodes.length;ni++){ objs.push({wx:nodes[ni].wx,wy:nodes[ni].wy,n:nodes[ni]}); }
+      objs.sort(function(a,b){ return (a.wx+a.wy)-(b.wx+b.wy); });
+      objs.forEach(function(o){ if(o.palm) drawPalm(o.wx,o.wy); else { var n=o.n; if(n.kind==='hub')drawHub(n); else if(n.kind==='robot')drawRobot(n); else drawPeer(n); } });
+      for(var i=orbs.length-1;i>=0;i--){ var o2=orbs[i]; o2.t+=0.024; if(o2.t>=1){orbs.splice(i,1);continue;}
+        var a=iso(o2.a.wx,o2.a.wy), b=iso(o2.b.wx,o2.b.wy), e=o2.t<.5?2*o2.t*o2.t:-1+(4-2*o2.t)*o2.t;
+        var x=a.x+(b.x-a.x)*e, y=a.y+(b.y-a.y)*e-Math.sin(o2.t*Math.PI)*40*cam.z;
+        X.beginPath(); X.arc(x,y,4*cam.z,0,7); X.fillStyle=o2.color; X.shadowColor=o2.color; X.shadowBlur=12; X.fill(); X.shadowBlur=0;
       }
       for(var j=pulses.length-1;j>=0;j--){ var pu=pulses[j]; pu.t+=0.02; if(pu.t>=1){pulses.splice(j,1);continue;}
-        var pp=iso(pu.n.gx,pu.n.gy), yy=pp.y-58*cam.z-pu.t*24*cam.z;
+        var pp=iso(pu.n.wx,pu.n.wy), yy=pp.y-56*cam.z-pu.t*24*cam.z;
         X.globalAlpha=1-pu.t; X.font='700 '+(15*cam.z)+'px '+mono(); X.textAlign='center'; X.fillStyle=getVar('--gold-bright'); X.fillText(pu.g,pp.x,yy);
-        X.beginPath(); X.arc(pp.x,pp.y-20*cam.z,(10+pu.t*22)*cam.z,0,7); X.strokeStyle='rgba(255,214,112,'+(1-pu.t)+')'; X.lineWidth=2; X.stroke(); X.globalAlpha=1;
+        X.beginPath(); X.arc(pp.x,pp.y-18*cam.z,(10+pu.t*22)*cam.z,0,7); X.strokeStyle='rgba(255,214,112,'+(1-pu.t)+')'; X.lineWidth=2; X.stroke(); X.globalAlpha=1;
       }
       raf=requestAnimationFrame(frame);
     }
-    function faint(gx,gy){ var p=iso(gx,gy),z=cam.z,hw=TW/2*z,hh=TH/2*z;
-      X.beginPath(); X.moveTo(p.x,p.y-hh); X.lineTo(p.x+hw,p.y); X.lineTo(p.x,p.y+hh); X.lineTo(p.x-hw,p.y); X.closePath();
-      X.strokeStyle='rgba(255,255,255,0.045)'; X.lineWidth=1; X.stroke();
-    }
 
     function connectStream(){
       if(es) return;
@@ -887,8 +981,15 @@ button.act:disabled{opacity:0.5;cursor:default;}
       }catch(e){ es=null; }
     }
 
+    var sdkLoading=false;
+    function loadSDK(){
+      if(window.LivekitClient || sdkLoading) return; sdkLoading=true;
+      var s=document.createElement('script'); s.src='/vendor/livekit-client.umd.js'+QS; s.async=true;
+      s.onerror=function(){ sdkLoading=false; }; document.head.appendChild(s);
+    }
     function activate(){
       ensure();
+      loadSDK();
       if(lastStatus) onStatus(lastStatus);
       resize();
       connectStream();
@@ -902,9 +1003,9 @@ button.act:disabled{opacity:0.5;cursor:default;}
       var n=byId[id]; if(!n) return; drawerId=id;
       $('pk-drawer').classList.add('open');
       $('pk-av').textContent = n.kind==='hub'?'🖥':(n.kind==='robot'?'🤖':'🧩');
-      $('pk-name').textContent=n.name;
-      $('pk-sub').textContent=n.role+' · '+(n.platform||'?')+' · v'+n.version+(n.site?(' · '+n.site):'');
-      var st=$('pk-state'); st.textContent=n.connected?'live':'idle'; st.className='pk-pill '+(n.connected?'live':'idle');
+      $('pk-name').textContent=n.label||n.name;
+      $('pk-sub').textContent = n.connected ? (n.name+' · '+(n.platform||'?')+' · v'+n.version+(n.site?(' · '+n.site):'')) : 'pad reserved · not joined';
+      var st=$('pk-state'); st.textContent=n.connected?'live':'offline'; st.className='pk-pill '+(n.connected?'live':'idle');
       buildDrawer(n);
       pollRoboparkQuiet();   // fill session telemetry right away instead of waiting for the tick
       if(drawerTimer) clearInterval(drawerTimer);
@@ -916,6 +1017,8 @@ button.act:disabled{opacity:0.5;cursor:default;}
       if(meterRAF)cancelAnimationFrame(meterRAF); meterRAF=null;
       if(camAbort){ try{camAbort.abort();}catch(e){} camAbort=null; }
       if(drawerTimer){ clearInterval(drawerTimer); drawerTimer=null; }
+      if(lkRoom){ try{ lkRoom.disconnect(); }catch(e){} lkRoom=null; }
+      micAnalyser=null;
     }
     function pollRoboparkQuiet(){
       fetch('/robopark/api/telemetry'+QS,{cache:'no-store'}).then(function(r){return r.json();}).then(function(d){
@@ -926,6 +1029,12 @@ button.act:disabled{opacity:0.5;cursor:default;}
     }
     function buildDrawer(n){
       var b=$('pk-body');
+      if(n.kind==='robot' && !n.connected){
+        b.innerHTML =
+          sect('🅿 park pad · '+esc(n.label), '<div class="pk-note" style="opacity:1;color:var(--muted)">No robot has joined this pad yet. When a node named <b>'+esc((n.telemKeys[1]||n.label).toString())+'</b> connects to the mesh, its live camera, mic, speaker, and telemetry appear here automatically.</div>')
+        + sect('📍 location', '<div class="pk-grid2"><div class="pk-kv"><div class="v">'+esc(n.label)+'</div><div class="l">pad</div></div><div class="pk-kv"><div class="v" style="color:var(--muted)">idle</div><div class="l">status</div></div></div>');
+        return;
+      }
       if(n.kind==='robot'){
         b.innerHTML =
           sect('👁 camera feed',
@@ -955,6 +1064,7 @@ button.act:disabled{opacity:0.5;cursor:default;}
       var lv=$('pk-tv-load'); if(lv) lv.textContent=Math.round(n.load)+'%';
       var hc=$('pk-hw-conn'); if(hc) hc.style.width=n.connected?'100%':'12%';
       var row=roboparkByName[n.name];
+      if(!row){ var keys=n.telemKeys||[]; for(var rk in roboparkByName){ var lk=rk.toLowerCase(); for(var ki=0;ki<keys.length;ki++){ if(keys[ki] && (lk===keys[ki]||lk.indexOf(keys[ki])>-1)){ row=roboparkByName[rk]; break; } } if(row) break; } }
       if(row){
         set('pk-tv-trig', row.trigger_count!=null?row.trigger_count:0);
         set('pk-tv-sess', row.sessions_total!=null?row.sessions_total:0);
@@ -969,30 +1079,54 @@ button.act:disabled{opacity:0.5;cursor:default;}
 
     // ── cam: target a LiveKit track; fall back to a styled preview ──
     function startCam(n){
-      var note=$('pk-camnote'), res=$('pk-camres');
+      var note=$('pk-camnote');
       camAbort = ('AbortController' in window)?new AbortController():null;
-      // The robot-side RoboPark plugin exposes this; returns {url, token, room, trackSid}.
+      idleCam('connecting');
+      // scheduler mints a subscribe-only viewer token for the robot's current
+      // LiveKit room; the Pi already publishes 'cam' (video) + 'mic' (audio).
       fetch('/robopark/api/robots/'+encodeURIComponent(n.name)+'/stream'+QS, {cache:'no-store', signal:camAbort?camAbort.signal:undefined})
-        .then(function(r){ if(!r.ok) throw new Error('no stream'); return r.json(); })
+        .then(function(r){ return r.json().catch(function(){ throw new Error('bad response'); }); })
         .then(function(info){
-          if(info && info.url && info.token && window.LivekitClient){ attachLiveKit(info, n); }
-          else if(info && info.url){ if(note) note.textContent='LiveKit track ready — load livekit-client to view'; previewCam(n); }
-          else throw new Error('no track');
+          if(info && info.active===false){ idleCam(info.reason||'idle'); return; }
+          if(info && info.url && info.token){
+            if(window.LivekitClient){ attachLiveKit(info, n); }
+            else { idleCam('no-sdk'); }
+          } else { idleCam('idle'); }
         })
-        .catch(function(){ if(note) note.textContent='no published cam track — showing preview (robot plugin pending)'; if(res) res.textContent='preview'; previewCam(n); });
+        .catch(function(){ idleCam('unreachable'); });
+    }
+    function idleCam(reason){
+      var cc=$('pk-camcv'), msg={connecting:'connecting to live session…', idle:'robot idle · no live session', production_mode_off:'production mode off', 'no-sdk':'live session up · loading video…', unreachable:'scheduler unreachable'}[reason]||'no live feed';
+      if(cc&&cc.getContext){ var cx=cc.getContext('2d'); cx.fillStyle='#0b0d12'; cx.fillRect(0,0,cc.width,cc.height); cx.strokeStyle='rgba(255,255,255,0.05)'; for(var y=0;y<cc.height;y+=4){cx.beginPath();cx.moveTo(0,y);cx.lineTo(cc.width,y);cx.stroke();} cx.fillStyle='#5a6a80'; cx.font='11px monospace'; cx.textAlign='center'; cx.fillText(msg, cc.width/2, cc.height/2); }
+      var res=$('pk-camres'); if(res) res.textContent = reason==='idle'?'idle':'—';
+      var note=$('pk-camnote'); if(note) note.textContent = reason==='idle'?'the feed goes live automatically when the robot opens a session':msg;
     }
     function attachLiveKit(info, n){
-      var mount=$('pk-cam'), note=$('pk-camnote'), res=$('pk-camres'); if(!mount) return;
+      var note=$('pk-camnote'), res=$('pk-camres');
+      try{
+        var LK=window.LivekitClient; lkRoom=new LK.Room();
+        lkRoom.on(LK.RoomEvent.TrackSubscribed, function(track){
+          if(track.kind==='video'){
+            var el=track.attach(); el.setAttribute('playsinline',''); el.muted=true; el.autoplay=true;
+            var cv=$('pk-camcv'); if(cv&&cv.parentNode) cv.parentNode.replaceChild(el, cv);
+            if(res) res.textContent='LIVE'; if(note) note.textContent='live camera via LiveKit · '+esc(info.room);
+          } else if(track.kind==='audio'){ hookMicAnalyser(track); track.attach(); }
+        });
+        lkRoom.on(LK.RoomEvent.Disconnected, function(){ micAnalyser=null; if(note) note.textContent='session ended'; if(res) res.textContent='—'; });
+        lkRoom.connect(info.url, info.token).then(function(){ if(note) note.textContent='connected · waiting for camera track…'; })
+          .catch(function(){ idleCam('unreachable'); });
+      }catch(e){ idleCam('no-sdk'); }
+    }
+    // Real mic level: tap the robot's subscribed 'mic' audio track with a Web
+    // Audio analyser and read RMS in startMeters (no invented levels).
+    function hookMicAnalyser(track){
       try{
-        var LK=window.LivekitClient, room=new LK.Room();
-        room.connect(info.url, info.token).then(function(){
-          if(note) note.textContent='LiveKit · connected';
-          room.on(LK.RoomEvent.TrackSubscribed, function(track){
-            if(track.kind==='video'){ var el=track.attach(); el.setAttribute('playsinline',''); el.muted=true;
-              var cv=$('pk-camcv'); if(cv&&cv.parentNode){ cv.parentNode.replaceChild(el, cv); } if(res) res.textContent='LiveKit · live'; }
-          });
-        }).catch(function(){ if(note) note.textContent='LiveKit connect failed — preview'; previewCam(n); });
-      }catch(e){ if(note) note.textContent='LiveKit error — preview'; previewCam(n); }
+        var AC=window.AudioContext||window.webkitAudioContext; if(!AC) return;
+        audioCtx=audioCtx||new AC();
+        var ms=track.mediaStreamTrack; if(!ms) return;
+        var src=audioCtx.createMediaStreamSource(new MediaStream([ms]));
+        var an=audioCtx.createAnalyser(); an.fftSize=256; src.connect(an); micAnalyser=an;
+      }catch(e){}
     }
     function previewCam(n){
       var cc=$('pk-camcv'); if(!cc||!cc.getContext) return; var cx=cc.getContext('2d'), w=cc.width, h=cc.height, s0=performance.now();
@@ -1015,18 +1149,19 @@ button.act:disabled{opacity:0.5;cursor:default;}
     function bars(el,n){ el.innerHTML=''; for(var i=0;i<n;i++){ var b=document.createElement('i'); el.appendChild(b); } return el.querySelectorAll('i'); }
     function startMeters(n){
       var mb=$('pk-micbars'), sb=$('pk-spkbars'); if(!mb) return;
-      var mi=bars(mb,18), si=bars(sb,18), sw=$('pk-spkwave'), swx=sw.getContext('2d'), s0=performance.now();
-      // Preview envelopes until the robot audio plugin streams real levels.
+      var mi=bars(mb,18), si=bars(sb,18), sw=$('pk-spkwave'), swx=sw?sw.getContext('2d'):null, buf=new Uint8Array(128);
       (function loop(){ if(!$('pk-micbars')||drawerId==null) return;
-        var tt=(performance.now()-s0)/1000;
-        var env=Math.max(0,Math.sin(tt*2.3))*Math.max(0,Math.sin(tt*0.7));
-        for(var i=0;i<mi.length;i++){ var v=env*(0.4+0.6*Math.random())*(i<env*mi.length?1:0.25); mi[i].style.height=(3+v*13)+'px'; mi[i].style.background=i<mi.length*0.7?'var(--ok)':i<mi.length*0.9?'var(--warn)':'var(--bad)'; }
-        set('pk-micval', Math.round(env*100)+'%'); set('pk-micstate', env>0.3?'preview · speech':'preview · quiet');
-        var spk=Math.max(0,Math.sin(tt*1.1-1)), speaking=spk>0.35;
-        for(var j=0;j<si.length;j++){ var vv=speaking?(0.3+0.7*Math.random()):0.05; si[j].style.height=(3+vv*13)+'px'; si[j].style.background=speaking?'var(--gold-bright)':'var(--glass-border)'; }
-        set('pk-spkval', speaking?Math.round(spk*100)+'%':'idle'); set('pk-spkstate', speaking?'preview · TTS':'preview · idle');
-        swx.clearRect(0,0,sw.width,sw.height); swx.strokeStyle=speaking?getVar('--gold-bright'):'rgba(255,255,255,0.12)'; swx.lineWidth=1.5; swx.beginPath();
-        for(var x=0;x<sw.width;x++){ var yy=sw.height/2+Math.sin(x*0.15+tt*8)*(speaking?spk*11:1.4)*Math.sin(x*0.03); if(x===0)swx.moveTo(x,yy); else swx.lineTo(x,yy); } swx.stroke();
+        // MIC — real RMS from the subscribed LiveKit mic track (else no signal).
+        var lvl=0;
+        if(micAnalyser){ micAnalyser.getByteTimeDomainData(buf); var sum=0; for(var q=0;q<buf.length;q++){ var v=(buf[q]-128)/128; sum+=v*v; } lvl=Math.min(1, Math.sqrt(sum/buf.length)*3.4); }
+        for(var i=0;i<mi.length;i++){ var on=i<lvl*mi.length; mi[i].style.height=(3+(on?lvl*13:0))+'px'; mi[i].style.background=on?(i<mi.length*0.7?'var(--ok)':i<mi.length*0.9?'var(--warn)':'var(--bad)'):'var(--glass-border)'; }
+        set('pk-micval', micAnalyser?Math.round(lvl*100)+'%':'—');
+        set('pk-micstate', micAnalyser?(lvl>0.12?'live · hearing audio':'live · quiet'):'no live mic track');
+        // SPEAKER — the Pi plays TTS out its own speaker; it is not published as a
+        // track, so report status honestly instead of inventing a level.
+        for(var j=0;j<si.length;j++){ si[j].style.height='3px'; si[j].style.background='var(--glass-border)'; }
+        set('pk-spkval','—'); set('pk-spkstate','TTS plays on the robot speaker (not streamed)');
+        if(swx){ swx.clearRect(0,0,sw.width,sw.height); swx.strokeStyle='rgba(255,255,255,0.12)'; swx.lineWidth=1.4; swx.beginPath(); for(var x=0;x<sw.width;x++){ var yy=sw.height/2+Math.sin(x*0.1)*1.1; if(x===0)swx.moveTo(x,yy); else swx.lineTo(x,yy); } swx.stroke(); }
         meterRAF=requestAnimationFrame(loop);
       })();
     }

package/dist/kernel/federation/federation.js

@@ -4,6 +4,7 @@ import { PeerMesh } from './peer-mesh.js';
 import { EventBridge } from './event-bridge.js';
 import { ConfigSync } from './config-sync.js';
 import { AutoUpdate } from './auto-update.js';
+import { performSelfUpdate } from './self-update.js';
 import { ComputeRouter } from './compute-router.js';
 import { TelemetryCollector, loadFromSnapshot, selfNodeStatus, nodeStatusFromPeer } from './telemetry.js';
 import { buildManifest } from './node-identity.js';
@@ -58,6 +59,17 @@ export class Federation {
             version: deps.options.version,
             logger: deps.logger,
             enabled: deps.options.autoUpdate,
+            // Apply the announced update (npm install + supervised restart). Only ever
+            // reached for announces from a hub/relay with auto-update enabled — see
+            // AutoUpdate.onAnnounce. Supervision is read from INFINICODE_SUPERVISED.
+            applyUpdate: async (announce) => {
+                await performSelfUpdate({
+                    version: announce.version,
+                    channel: announce.channel === 'git' ? 'git' : 'npm',
+                    currentVersion: deps.options.version,
+                    logger: deps.logger,
+                });
+            },
         });
     }
     get identity() {

package/dist/kernel/federation/self-update.d.ts

@@ -0,0 +1,26 @@
+import type { Logger } from '../types.js';
+export interface SelfUpdateOptions {
+    /** Target version — 'latest' or a semver like '2.6.1'. Default 'latest'. */
+    version?: string;
+    /** npm package to install. Default 'infinicode' (override via INFINICODE_UPDATE_PKG). */
+    pkg?: string;
+    channel?: 'npm' | 'git' | 'manual';
+    /** The version currently running, for the from→to report. */
+    currentVersion?: string;
+    /** Node runs under a supervisor → safe to exit-for-restart. Falls back to
+     *  INFINICODE_SUPERVISED=1. */
+    supervised?: boolean;
+    /** Schedule a restart after a successful install. Defaults to `supervised`. */
+    restart?: boolean;
+    /** Delay before exiting so the command reply flushes back over the mesh. */
+    restartDelayMs?: number;
+    logger?: Logger;
+}
+export interface SelfUpdateResult {
+    ok: boolean;
+    from?: string;
+    to: string;
+    restarting: boolean;
+    message: string;
+}
+export declare function performSelfUpdate(opts?: SelfUpdateOptions): Promise<SelfUpdateResult>;

package/dist/kernel/federation/self-update.js

@@ -0,0 +1,68 @@
+/**
+ * OpenKernel — Self Update
+ *
+ * The apply side of mesh updates: install a newer npm release of this package
+ * globally, then (if the node runs under a process supervisor) exit so the
+ * supervisor relaunches it on the new version. Isolated here so the shell-out
+ * lives in exactly one place — the `/update` command and the AutoUpdate gossip
+ * path both call this, nothing else shells out for updates.
+ *
+ * Restart policy is deliberately conservative: a node only exits-for-restart
+ * when it is explicitly marked supervised (`serve --supervised`, which sets
+ * INFINICODE_SUPERVISED=1). An unsupervised node still installs the new version
+ * on disk but stays up on the old one, and says so — killing a hand-started
+ * process would just take the node offline with nothing to bring it back.
+ */
+import { execa } from 'execa';
+const SAFE_VERSION = /^[A-Za-z0-9._-]+$/; // 'latest', '2.6.1', 'next' — never a shell metachar
+const SAFE_PKG = /^[@A-Za-z0-9._/-]+$/;
+export async function performSelfUpdate(opts = {}) {
+    const version = (opts.version ?? 'latest').trim();
+    const pkg = (opts.pkg ?? process.env.INFINICODE_UPDATE_PKG ?? 'infinicode').trim();
+    const channel = opts.channel ?? 'npm';
+    const supervised = opts.supervised ?? process.env.INFINICODE_SUPERVISED === '1';
+    const restart = opts.restart ?? supervised;
+    const info = (m) => (opts.logger ? opts.logger.info(m) : console.log('  ' + m));
+    const warn = (m) => (opts.logger ? opts.logger.warn(m) : console.log('  ' + m));
+    if (channel !== 'npm') {
+        return { ok: false, to: version, restarting: false, message: `channel "${channel}" is not supported for self-update yet (npm only).` };
+    }
+    if (!SAFE_VERSION.test(version) || !SAFE_PKG.test(pkg)) {
+        return { ok: false, to: version, restarting: false, message: `refused: unsafe update spec "${pkg}@${version}".` };
+    }
+    const spec = `${pkg}@${version}`;
+    info(`[update] installing ${spec} (global)…`);
+    try {
+        // Use npm.cmd on Windows so we never need a shell (no injection surface).
+        const bin = process.platform === 'win32' ? 'npm.cmd' : 'npm';
+        const res = await execa(bin, ['install', '-g', spec], { all: true, timeout: 300_000 });
+        const tail = String(res.all ?? res.stdout ?? '').split('\n').filter(Boolean).slice(-2).join(' ').trim();
+        info(`[update] installed ${spec}${tail ? ' — ' + tail : ''}`);
+    }
+    catch (err) {
+        const detail = err;
+        const message = (detail.all || detail.shortMessage || detail.message || String(err)).replace(/\s+/g, ' ').slice(0, 300);
+        warn(`[update] npm install failed: ${message}`);
+        return { ok: false, from: opts.currentVersion, to: version, restarting: false, message: `npm install -g ${spec} failed: ${message}` };
+    }
+    let restarting = false;
+    if (restart && supervised) {
+        restarting = true;
+        const delay = opts.restartDelayMs ?? 2000;
+        info(`[update] restarting in ${delay}ms for the supervisor to relaunch on ${version}…`);
+        const timer = setTimeout(() => process.exit(0), delay);
+        timer.unref?.();
+    }
+    else if (restart && !supervised) {
+        warn('[update] installed but NOT restarting — node is not marked supervised (start serve with --supervised). Restart it to activate.');
+    }
+    return {
+        ok: true,
+        from: opts.currentVersion,
+        to: version,
+        restarting,
+        message: restarting
+            ? `updated to ${spec} — restarting now; the supervisor will relaunch on the new version.`
+            : `updated to ${spec} on disk — restart the node to activate${supervised ? '' : ' (not supervised, so no auto-restart)'}.`,
+    };
+}