infinicode 2.8.108 → 2.8.113

package/dist/kernel/mcp/mcp-server.js

@@ -13,6 +13,9 @@
 import { McpServer } from '@modelcontextprotocol/sdk/server/mcp.js';
 import { StdioServerTransport } from '@modelcontextprotocol/sdk/server/stdio.js';
 import { z } from 'zod';
+import { existsSync, readFileSync } from 'node:fs';
+import { homedir } from 'node:os';
+import { join } from 'node:path';
 const text = (v) => ({
     content: [{ type: 'text', text: typeof v === 'string' ? v : JSON.stringify(v, null, 2) }],
 });
@@ -177,6 +180,64 @@ export function createMcpServer(deps) {
         kernel.notify(`[voice${room ? ':' + room : ''}] ${say}`);
         return text({ ok: true, spoken: say, room });
     });
+    // MCP never receives raw GPIO access. It may only request a saved sequence;
+    // the scheduler enforces the active room and assigned character allowlist.
+    const roboparkScheduler = (process.env.ROBOPARK_SCHEDULER_URL || 'http://127.0.0.1:8080').replace(/\/+$/, '');
+    const roboparkAgentToken = () => {
+        const configured = process.env.ROBOPARK_AGENT_TOKEN?.trim();
+        if (configured)
+            return configured;
+        const tokenFile = process.env.ROBOPARK_AGENT_TOKEN_FILE
+            || join(process.env.SCHEDULER_DATA_DIR || join(homedir(), '.robopark', 'scheduler'), '.robopark-agent-token');
+        try {
+            return existsSync(tokenFile) ? readFileSync(tokenFile, 'utf8').trim() : '';
+        }
+        catch {
+            return '';
+        }
+    };
+    server.registerTool('robopark_room_capabilities', {
+        title: 'RoboPark room capabilities',
+        description: 'Read the character and exact saved motor sequences allowed in an active RoboPark room.',
+        inputSchema: { room: z.string().min(1).describe('active LiveKit room name') },
+    }, async ({ room }) => {
+        const response = await fetch(`${roboparkScheduler}/api/devices/by-room/${encodeURIComponent(room)}/voice-config`, { signal: AbortSignal.timeout(5_000) });
+        if (!response.ok)
+            return text({ ok: false, status: response.status, error: await response.text() });
+        const config = await response.json();
+        return text({
+            ok: true,
+            characterId: config.character_id,
+            characterName: config.character_name,
+            allowedMotorSequences: config.allowed_motor_sequences ?? [],
+        });
+    });
+    server.registerTool('robopark_run_motor_sequence', {
+        title: 'Run an allowed RoboPark motor sequence',
+        description: 'Queue one validated saved sequence. Character policy is enforced server-side and raw GPIO is never accepted.',
+        inputSchema: {
+            room: z.string().min(1).describe('active LiveKit room name'),
+            sequenceId: z.string().regex(/^[a-z0-9][a-z0-9_-]{0,31}$/),
+        },
+    }, async ({ room, sequenceId }) => {
+        const agentToken = roboparkAgentToken();
+        if (!agentToken)
+            return text({ ok: false, error: 'RoboPark agent token is not initialized; start the scheduler first' });
+        const response = await fetch(`${roboparkScheduler}/api/devices/by-room/${encodeURIComponent(room)}/motor-sequences/${encodeURIComponent(sequenceId)}/run`, {
+            method: 'POST',
+            headers: { 'X-RoboPark-Agent-Token': agentToken },
+            signal: AbortSignal.timeout(8_000),
+        });
+        const body = await response.text();
+        let parsed = body;
+        try {
+            parsed = JSON.parse(body);
+        }
+        catch { /* retain diagnostic text */ }
+        return text(response.ok
+            ? { ok: true, queued: parsed }
+            : { ok: false, status: response.status, error: parsed });
+    });
     // ── Autonomy (proactive goals) — only if a goal loop is wired ───────────────
     if (deps.autonomy) {
         const auto = deps.autonomy;

package/dist/robopark/python-env.d.ts

@@ -1,6 +1,7 @@
 /** Modules app_pi_clean.py imports — kept in sync with requirements_pi_unified.txt. */
 export declare const VISION_REQUIRED_MODULES: string[];
 export declare function findSchedulerPath(): Promise<string | null>;
+export declare function findRobotSupervisorPath(): Promise<string | null>;
 export declare function findVisionPath(): Promise<string | null>;
 export declare function findVisionAudioPath(): Promise<string | null>;
 export declare function findVisionMotorPath(): Promise<string | null>;

package/dist/robopark/python-env.js

@@ -36,6 +36,9 @@ async function findPackageScript(relativePath) {
 export async function findSchedulerPath() {
     return findPackageScript('scheduler/preview_agent.py');
 }
+export async function findRobotSupervisorPath() {
+    return findPackageScript('scheduler/robot_supervisor.py');
+}
 export async function findVisionPath() {
     return findPackageScript('vision/app_pi_clean.py');
 }

package/dist/robopark/robot-runtime.d.ts

@@ -6,6 +6,7 @@ export interface RobotRuntimeOptions {
     port?: string;
     network?: 'lan' | 'tailscale';
     enrollmentToken?: string;
+    character?: string;
     videoDevice?: string;
     audioDevice?: string;
     vision?: boolean;

package/dist/robopark/robot-runtime.js

@@ -14,8 +14,10 @@ import { dirname, join } from 'node:path';
 import { fileURLToPath } from 'node:url';
 import chalk from 'chalk';
 import { resolveInfinicodeBin } from './serve.js';
+import { findPython, findRobotSupervisorPath, prepareRobotPython } from './python-env.js';
 const VISION_URL = 'http://127.0.0.1:5000/api/media/inventory';
 const VISION_STATUS_URL = 'http://127.0.0.1:5000/api/camera/status';
+const MOTOR_SERVER_URL = 'http://127.0.0.1:8001';
 const RESTART_DELAY_MS = 5_000;
 const MEDIA_WATCHDOG_INTERVAL_MS = 10_000;
 const SCHEDULER_HEARTBEAT_INTERVAL_MS = 5_000;
@@ -64,6 +66,8 @@ function startSchedulerHeartbeat(opts, livekitUrl) {
     let identity = readSchedulerIdentity();
     let stopped = false;
     let inFlight = false;
+    let motorDiscoveryQueued = false;
+    let lastMotorDiscoveryAttempt = 0;
     const bootstrap = async () => {
         const response = await fetch(`${opts.schedulerUrl.replace(/\/+$/, '')}/api/devices/bootstrap`, {
             method: 'POST',
@@ -71,7 +75,13 @@ function startSchedulerHeartbeat(opts, livekitUrl) {
                 'content-type': 'application/json',
                 'x-robopark-mesh-token': opts.token,
             },
-            body: JSON.stringify({ name: opts.name, lan_ip: currentLanIp(), livekit_url: livekitUrl }),
+            body: JSON.stringify({
+                name: opts.name,
+                character_id: opts.character,
+                lan_ip: currentLanIp(),
+                livekit_url: livekitUrl,
+                motor_server_url: opts.vision === false ? undefined : MOTOR_SERVER_URL,
+            }),
             signal: AbortSignal.timeout(10_000),
         });
         if (!response.ok)
@@ -101,7 +111,10 @@ function startSchedulerHeartbeat(opts, livekitUrl) {
                     'content-type': 'application/json',
                     'x-robopark-mesh-token': opts.token,
                 },
-                body: JSON.stringify({ status: 'online', ip: currentLanIp(), livekit_url: livekitUrl }),
+                body: JSON.stringify({
+                    status: 'online', ip: currentLanIp(), livekit_url: livekitUrl,
+                    motor_server_url: opts.vision === false ? undefined : MOTOR_SERVER_URL,
+                }),
                 signal: AbortSignal.timeout(10_000),
             });
             if (response.status === 401 || response.status === 404) {
@@ -113,12 +126,29 @@ function startSchedulerHeartbeat(opts, livekitUrl) {
                         'content-type': 'application/json',
                         'x-robopark-mesh-token': opts.token,
                     },
-                    body: JSON.stringify({ status: 'online', ip: currentLanIp(), livekit_url: livekitUrl }),
+                    body: JSON.stringify({
+                        status: 'online', ip: currentLanIp(), livekit_url: livekitUrl,
+                        motor_server_url: opts.vision === false ? undefined : MOTOR_SERVER_URL,
+                    }),
                     signal: AbortSignal.timeout(10_000),
                 });
             }
             if (!response.ok)
                 throw new Error(`heartbeat HTTP ${response.status}`);
+            if (opts.vision !== false && !motorDiscoveryQueued && Date.now() - lastMotorDiscoveryAttempt > 30_000) {
+                lastMotorDiscoveryAttempt = Date.now();
+                const discovery = await fetch(`${opts.schedulerUrl.replace(/\/+$/, '')}/api/robots/${encodeURIComponent(identity.deviceId)}/motors/discover`, {
+                    method: 'POST',
+                    headers: {
+                        authorization: `Bearer ${identity.deviceToken}`,
+                        'x-robopark-mesh-token': opts.token,
+                    },
+                    signal: AbortSignal.timeout(10_000),
+                });
+                motorDiscoveryQueued = discovery.ok;
+                if (discovery.ok)
+                    console.log(chalk.green('  motor registry discovery queued'));
+            }
         }
         catch (error) {
             console.error(chalk.yellow(`  scheduler heartbeat watchdog: ${error instanceof Error ? error.message : String(error)}`));
@@ -206,6 +236,12 @@ export async function roboparkRobotRuntime(opts) {
     const infinicode = await resolveInfinicodeBin();
     if (!infinicode)
         throw new Error('could not resolve infinicode CLI');
+    const supervisorScript = await findRobotSupervisorPath();
+    if (!supervisorScript)
+        throw new Error('could not resolve RoboPark robot supervisor');
+    const supervisorPython = prepareRobotPython(findPython(), supervisorScript, ['httpx'], 'requirements-robot.txt');
+    if (!supervisorPython)
+        throw new Error('could not prepare RoboPark robot supervisor Python environment');
     children.push({
         label: 'mesh',
         command: infinicode.node,
@@ -221,9 +257,17 @@ export async function roboparkRobotRuntime(opts) {
                 '--motion-webhook-url', 'http://127.0.0.1:5057/'],
             env: {
                 ROBOPARK_CAMERA_DEVICE: hardwareVideo,
+                ROBOPARK_MESH_TOKEN: opts.token,
+                ROBOPARK_MOTOR_TOKEN: opts.token,
             },
         });
     }
+    children.push({
+        label: 'supervisor',
+        command: supervisorPython,
+        args: [supervisorScript, '--commands-only'],
+        env: { ROBOPARK_MESH_TOKEN: opts.token },
+    });
     const previewArgs = [cli, 'preview-agent', '--foreground',
         '--scheduler-url', opts.schedulerUrl, '--robot-id', opts.name,
         '--video-device', hardwareVideo,
@@ -375,10 +419,8 @@ export async function roboparkRobotRuntime(opts) {
         await Promise.all([...children.filter(entry => entry.label !== 'mesh'), preview].map(stopChild));
         if (stopping)
             return;
-        start(children[0]);
-        if (opts.vision !== false) {
-            start(children[1]);
-        }
+        for (const entry of children)
+            start(entry);
         start(preview);
         recycling = false;
         console.log(chalk.green('  robot runtime updated and healthy'));
@@ -396,7 +438,7 @@ export async function roboparkRobotRuntime(opts) {
     console.log(`  robot:     ${chalk.cyan(opts.name)}`);
     console.log(`  scheduler: ${chalk.cyan(opts.schedulerUrl)}`);
     console.log(`  network:   ${chalk.cyan(network)}`);
-    console.log(`  services:  ${opts.vision === false ? 'mesh + preview' : 'mesh + RoboVision camera/audio/motors + preview'}`);
+    console.log(`  services:  ${opts.vision === false ? 'mesh + preview + command supervisor' : 'mesh + RoboVision camera/audio/motors + preview + command supervisor'}`);
     console.log();
     if (opts.enrollmentToken) {
         console.log(chalk.dim('  clearing stale device identity for fresh enrollment…'));
@@ -405,10 +447,10 @@ export async function roboparkRobotRuntime(opts) {
     // Identity and inventory reporting start immediately. RoboVision may still
     // be installing or recovering without making the robot disappear.
     const stopSchedulerHeartbeat = startSchedulerHeartbeat(opts, livekitUrl);
-    start(children[0]);
+    for (const entry of children)
+        start(entry);
     start(preview);
     if (opts.vision !== false) {
-        start(children[1]);
         console.log(chalk.dim('  RoboVision health check running in background…'));
         void waitForVision().then(ready => {
             if (!stopping)

package/dist/robopark/setup.d.ts

@@ -14,6 +14,7 @@ export interface SetupOptions {
     tag?: string;
     schedulerPort?: string;
     enrollmentToken?: string;
+    character?: string;
     videoDevice?: string;
     audioDevice?: string;
     vision?: boolean;

package/dist/robopark/setup.js

@@ -212,6 +212,8 @@ async function setupRobot(config, opts, ctx, internal) {
     ];
     if (opts.enrollmentToken)
         runtimeArgs.push('--enrollment-token', opts.enrollmentToken);
+    if (opts.character)
+        runtimeArgs.push('--character', opts.character);
     if (!visionEnabled)
         runtimeArgs.push('--no-vision');
     console.log(chalk.dim('  single robot command:'));

package/dist/robopark-cli.js

@@ -170,6 +170,7 @@ robotProgram
     .requiredOption('--token <token>', 'shared mesh token')
     .option('--scheduler-url <url>', 'scheduler URL (derived from --hub-url when omitted)')
     .option('--enrollment-token <token>', 'one-time scheduler enrollment token for a fresh device')
+    .option('--character <id>', 'character preset assigned during canonical device bootstrap')
     .option('--port <port>', 'robot mesh port', '47913')
     .option('--lan', 'use LAN transport (default)')
     .option('--tailscale', 'use Tailscale transport')
@@ -188,6 +189,7 @@ robotProgram
         port: opts.port,
         network: opts.tailscale ? 'tailscale' : 'lan',
         enrollmentToken: opts.enrollmentToken,
+        character: opts.character,
         videoDevice: opts.videoDevice,
         audioDevice: opts.audioDevice,
         vision: opts.vision,
@@ -330,6 +332,7 @@ program
     .option('--tailscale-auth <token>', 'Tailscale auth key for the hub')
     .option('--tag <tag>', 'Tailscale tag filter')
     .option('--enrollment-token <token>', 'one-time scheduler enrollment token for robots')
+    .option('--character <id>', 'character preset assigned during canonical device bootstrap')
     .option('--lan', 'use LAN discovery and LAN hub/scheduler addresses (default for robots)')
     .option('--tailscale', 'use Tailscale discovery and Tailscale hub/scheduler addresses')
     .option('--video-device <dev>', 'default camera for robot preview agent', 'auto')
@@ -357,6 +360,7 @@ program
         tailscaleAuth: opts.tailscaleAuth,
         tag: opts.tag,
         enrollmentToken: opts.enrollmentToken,
+        character: opts.character,
         videoDevice: opts.videoDevice,
         audioDevice: opts.audioDevice,
         vision: opts.vision,

package/docs/ROBOPARK_ROBOVOICE_SIMPLIFICATION_PLAN.html

@@ -0,0 +1,139 @@
+<!doctype html>
+<html lang="en">
+<head>
+  <meta charset="utf-8">
+  <meta name="viewport" content="width=device-width,initial-scale=1">
+  <title>RoboPark + RoboVoice Production Simplification Plan</title>
+  <style>
+    @import url('https://fonts.googleapis.com/css2?family=DM+Mono:wght@400;500&family=Manrope:wght@400;500;600;700;800&display=swap');
+    :root{--ink:#070706;--panel:#11110f;--panel2:#181712;--gold:#d8ad52;--gold2:#8d6725;--cream:#f3ead7;--muted:#a89f8e;--line:rgba(216,173,82,.22);--green:#72d39a;--red:#ef7b6f;--blue:#82b8ed}
+    *{box-sizing:border-box}html{scroll-behavior:smooth}body{margin:0;background:radial-gradient(circle at 78% 0,rgba(151,105,24,.18),transparent 31rem),radial-gradient(circle at 4% 40%,rgba(82,64,27,.12),transparent 28rem),var(--ink);color:var(--cream);font-family:Manrope,sans-serif;line-height:1.55}
+    body:before{content:"";position:fixed;inset:0;pointer-events:none;opacity:.18;background-image:linear-gradient(rgba(255,255,255,.018) 1px,transparent 1px),linear-gradient(90deg,rgba(255,255,255,.018) 1px,transparent 1px);background-size:40px 40px}
+    .shell{width:min(1280px,calc(100% - 40px));margin:auto;padding:34px 0 90px}.top{display:flex;align-items:center;justify-content:space-between;border-bottom:1px solid var(--line);padding-bottom:20px;position:sticky;top:0;z-index:5;background:rgba(7,7,6,.88);backdrop-filter:blur(18px)}
+    .brand{font-weight:800;letter-spacing:.08em}.brand span{color:var(--gold)}.tag{font:500 11px DM Mono,monospace;text-transform:uppercase;letter-spacing:.12em;border:1px solid var(--line);color:var(--gold);padding:8px 12px;border-radius:99px}.hero{padding:86px 0 54px;display:grid;grid-template-columns:1.25fr .75fr;gap:46px;align-items:end}.eyebrow{color:var(--gold);font:500 12px DM Mono,monospace;letter-spacing:.15em;text-transform:uppercase}.hero h1{font-size:clamp(42px,7vw,92px);line-height:.94;margin:18px 0 24px;letter-spacing:-.055em}.hero p{max-width:760px;font-size:18px;color:#c6bdad}.decision{border:1px solid var(--line);border-radius:22px;padding:26px;background:linear-gradient(145deg,rgba(216,173,82,.1),rgba(255,255,255,.015));box-shadow:0 28px 80px rgba(0,0,0,.35)}
+    h2{font-size:30px;letter-spacing:-.035em;margin:0 0 20px}h3{font-size:17px;margin:0 0 10px}.section{padding:54px 0;border-top:1px solid rgba(216,173,82,.13)}.section-head{display:grid;grid-template-columns:180px 1fr;gap:22px;margin-bottom:28px}.num{color:var(--gold);font:500 12px DM Mono,monospace;letter-spacing:.16em}.grid{display:grid;grid-template-columns:repeat(3,1fr);gap:16px}.card{background:linear-gradient(145deg,rgba(255,255,255,.035),rgba(255,255,255,.012));border:1px solid rgba(216,173,82,.16);border-radius:18px;padding:22px}.card p,.muted{color:var(--muted);font-size:14px}.owner{display:inline-flex;padding:5px 8px;border-radius:6px;background:rgba(216,173,82,.09);color:var(--gold);font:500 10px DM Mono,monospace;text-transform:uppercase;margin-bottom:16px}
+    .flow{display:grid;grid-template-columns:repeat(5,1fr);gap:10px}.node{position:relative;padding:20px 16px;min-height:135px;border-radius:16px;background:var(--panel);border:1px solid var(--line)}.node:not(:last-child):after{content:">";position:absolute;right:-10px;top:49%;z-index:2;color:var(--gold);font:600 16px DM Mono}.node b{display:block;margin-bottom:8px}.node small{color:var(--muted)}
+    .split{display:grid;grid-template-columns:1fr 1fr;gap:18px}.good,.remove{border-radius:18px;padding:24px;border:1px solid}.good{border-color:rgba(114,211,154,.25);background:rgba(114,211,154,.055)}.remove{border-color:rgba(239,123,111,.24);background:rgba(239,123,111,.045)}ul{padding-left:19px;margin:12px 0 0}li{margin:8px 0;color:#c9c0af}.command{font:400 12px/1.65 DM Mono,monospace;background:#050504;border:1px solid var(--line);border-radius:13px;padding:16px;overflow:auto;color:#ead59f;white-space:pre-wrap}.commands{display:grid;grid-template-columns:repeat(2,1fr);gap:14px}.cmd-title{display:flex;justify-content:space-between;align-items:center;margin-bottom:9px}.cmd-title span{font:500 10px DM Mono;color:var(--muted);text-transform:uppercase}
+    table{width:100%;border-collapse:collapse;background:rgba(255,255,255,.018);border-radius:18px;overflow:hidden}th,td{text-align:left;padding:15px;border-bottom:1px solid rgba(216,173,82,.12);vertical-align:top}th{font:500 10px DM Mono;color:var(--gold);letter-spacing:.1em;text-transform:uppercase}td{font-size:14px;color:#c9c0af}td:first-child{font-weight:700;color:var(--cream)}
+    .phase{display:grid;grid-template-columns:90px 1fr 160px;gap:20px;padding:22px 0;border-bottom:1px solid rgba(216,173,82,.12)}.phase-id{font:500 12px DM Mono;color:var(--gold)}.gate{color:var(--green);font:500 11px DM Mono}.state{display:flex;flex-wrap:wrap;gap:8px}.state span{padding:8px 11px;border-radius:8px;border:1px solid var(--line);background:var(--panel);font:500 11px DM Mono}.state i{color:var(--gold);font-style:normal;padding-top:7px}.callout{margin-top:22px;padding:20px 22px;border-left:3px solid var(--gold);background:rgba(216,173,82,.06);color:#d7cdbb}.footer{padding-top:36px;color:var(--muted);font-size:12px;font-family:DM Mono,monospace}
+    @media(max-width:850px){.hero,.section-head,.split{grid-template-columns:1fr}.grid,.flow,.commands{grid-template-columns:1fr}.node:not(:last-child):after{content:"v";right:50%;top:auto;bottom:-14px}.phase{grid-template-columns:1fr}.top{position:relative}.shell{width:min(100% - 24px,1280px)}}
+  </style>
+</head>
+<body><main class="shell">
+  <header class="top"><div class="brand">ROBO<span>PARK</span> / ROBOVOICE</div><div class="tag">Production simplification plan</div></header>
+  <section class="hero">
+    <div><div class="eyebrow">One proven call path. One control plane.</div><h1>Remove orchestration from the conversation.</h1><p>Keep the existing RoboVoice call stack exactly where it works. Make each Pi a headless participant with local motion detection, camera, microphone and speaker. Rebuild RoboPark as fleet control, monitoring, history and remote operations around that path.</p></div>
+    <aside class="decision"><div class="owner">Architecture decision</div><h3>RoboVoice owns every call</h3><p class="muted">RoboPark will no longer allocate, duplicate or reinterpret voice sessions. It observes and controls the same call lifecycle used by the existing RoboVoice web UI.</p></aside>
+  </section>
+
+  <section class="section"><div class="section-head"><div class="num">01 / TARGET</div><div><h2>Simplified production topology</h2><p class="muted">The session scheduler leaves the critical path. LiveKit remains media transport, not business orchestration.</p></div></div>
+    <div class="flow">
+      <div class="node"><b>Pi motion</b><small>Local detector decides when to start. No remote polling required.</small></div>
+      <div class="node"><b>Headless Pi call</b><small>Camera + mic publish. Speaker subscribes. Stable hardware profile.</small></div>
+      <div class="node"><b>LiveKit room</b><small>One robot and one RoboVoice agent. Strict 1:1 session.</small></div>
+      <div class="node"><b>RoboVoice</b><small>Existing STT, LLM, TTS, VAD, interruption and character behavior.</small></div>
+      <div class="node"><b>Control Center</b><small>Observes events, video, transcripts, health and remote commands.</small></div>
+    </div>
+    <div class="callout"><b>Control path:</b> browser -> livekit-1 -> robot LAN satellite. <b>Voice path:</b> Pi -> LiveKit -> RoboVoice -> LiveKit -> Pi. The Control Center is never required for an onsite conversation to continue.</div>
+  </section>
+
+  <section class="section"><div class="section-head"><div class="num">02 / OWNERSHIP</div><div><h2>One owner for every responsibility</h2></div></div>
+    <div class="grid">
+      <article class="card"><div class="owner">RoboVoice-main</div><h3>Conversation authority</h3><p>Characters, prompts, voice stacks, STT, LLM, TTS, VAD, endpointing, interruptions, LiveKit agent jobs, transcripts and call timing.</p></article>
+      <article class="card"><div class="owner">Robot Pi</div><h3>Hardware authority</h3><p>Motion detection, camera capture, microphone capture, speaker playback, local media locks, reconnects and device health.</p></article>
+      <article class="card"><div class="owner">RoboPark Control</div><h3>Operations authority</h3><p>Fleet identity, production toggles, health, history, audit, always-on preview, tests, configuration editing and remote lifecycle commands.</p></article>
+    </div>
+    <div class="split" style="margin-top:18px"><div class="good"><h3>Keep</h3><ul><li>Existing RoboVoice web-call AgentSession behavior</li><li>Existing Pi-local motion and trigger logic</li><li>Existing RoboVision camera feed and hardware access</li><li>LiveKit as the proven bidirectional audio transport</li><li>Infinicode mesh for remote management through livekit-1</li></ul></div><div class="remove"><h3>Remove from the critical path</h3><ul><li>Scheduler session allocation before a robot can talk</li><li>Duplicate character and voice-stack interpretations</li><li>Multiple media owners opening the same ALSA/V4L2 devices</li><li>Camera availability tied to conversation sessions</li><li>Alias records such as separate BMW and VIXEN devices</li></ul></div></div>
+  </section>
+
+  <section class="section"><div class="section-head"><div class="num">03 / CONTRACT</div><div><h2>Direct 1:1 call lifecycle</h2></div></div>
+    <div class="state"><span>IDLE</span><i>></i><span>MOTION</span><i>></i><span>CONNECTING</span><i>></i><span>GREETING</span><i>></i><span>LISTENING</span><i>></i><span>THINKING</span><i>></i><span>SPEAKING</span><i>></i><span>ENDED</span></div>
+    <table style="margin-top:24px"><thead><tr><th>Rule</th><th>Production contract</th></tr></thead><tbody>
+      <tr><td>Room identity</td><td>One deterministic room per active robot call. The second start request returns the current call instead of creating another room.</td></tr>
+      <tr><td>Motion mode</td><td>Local motion opens the same RoboVoice call used by the web UI, with the robot as the headless browser participant.</td></tr>
+      <tr><td>Manual mode</td><td>The operator starts the same call from Control Center or CLI. Only the initiation source differs.</td></tr>
+      <tr><td>Camera</td><td>RoboVision MJPEG remains always-on and independent of LiveKit calls. LiveKit video is optional for vision tools, not dashboard preview.</td></tr>
+      <tr><td>Events</td><td>Robot and RoboVoice emit state transitions to a thin event API. Events never block audio.</td></tr>
+      <tr><td>Failure</td><td>If Control Center or its database is down, the local motion-to-RoboVoice call still works.</td></tr>
+    </tbody></table>
+  </section>
+
+  <section class="section"><div class="section-head"><div class="num">04 / CONTROL API</div><div><h2>Thin management API inside RoboVoice</h2><p class="muted">Extend the proven backend instead of running a second scheduler database and state machine.</p></div></div>
+    <div class="grid">
+      <article class="card"><h3>Robot registry</h3><p>Canonical ID, display name, character, hardware profile, site, production mode and last heartbeat.</p></article>
+      <article class="card"><h3>Session history</h3><p>Call source, timestamps, state events, transcript, latency, errors, end reason and selected voice stack.</p></article>
+      <article class="card"><h3>Remote commands</h3><p>Start/stop call, arm motion, reconnect camera, media tests, restart runtime and update package.</p></article>
+    </div>
+    <table style="margin-top:18px"><thead><tr><th>Endpoint family</th><th>Purpose</th></tr></thead><tbody>
+      <tr><td>/api/control/robots</td><td>Registry, heartbeat, production mode, hardware inventory and effective configuration.</td></tr>
+      <tr><td>/api/control/sessions</td><td>Start, stop, active call, history, transcript, latency and end reason.</td></tr>
+      <tr><td>/api/control/events</td><td>Append-only lifecycle events and server-sent live updates.</td></tr>
+      <tr><td>/api/control/media</td><td>Always-on camera relay, microphone diagnostics and speaker test requests.</td></tr>
+      <tr><td>/api/control/config</td><td>Existing RoboVoice characters, prompts, voice stacks and provider settings.</td></tr>
+    </tbody></table>
+  </section>
+
+  <section class="section"><div class="section-head"><div class="num">05 / UI</div><div><h2>Port the complete Control Center</h2></div></div>
+    <div class="grid">
+      <article class="card"><h3>Fleet</h3><p>Rich robot cards, live state, production mode, camera thumbnail, current character, latency, health and alerts.</p></article>
+      <article class="card"><h3>Park</h3><p>Spatial robot view, always-on camera, fullscreen operations, current conversation stage and quick controls.</p></article>
+      <article class="card"><h3>Live operations</h3><p>Current transcript, listening/thinking/speaking state, audio levels, errors, timers and remote stop.</p></article>
+      <article class="card"><h3>Sessions</h3><p>Persistent paged history, full transcripts, timeline, latency breakdown, selected stack and end reason.</p></article>
+      <article class="card"><h3>Voice Studio</h3><p>Keep the original RoboVoice call UI, browser devices, character editor, prompt editor and voice-stack editor.</p></article>
+      <article class="card"><h3>Setup + diagnostics</h3><p>Copy-ready commands, camera/audio tests, heartbeat, logs, update, permissions and audit trail.</p></article>
+    </div>
+  </section>
+
+  <section class="section"><div class="section-head"><div class="num">06 / CLI</div><div><h2>Small idempotent command surface</h2><p class="muted">One control URL, one robot token, one runtime per Pi. Re-running setup repairs configuration instead of creating duplicates.</p></div></div>
+    <div class="commands">
+      <div class="card"><div class="cmd-title"><b>Start control host</b><span>livekit-1</span></div><div class="command">robopark hub up --robovoice-path C:\ROBOVOICE-main --port 47913 --lan --tailscale --auto-start</div></div>
+      <div class="card"><div class="cmd-title"><b>Provision robot</b><span>Pi</span></div><div class="command">robopark robot install --name bmw --control-url http://192.168.0.9:47913 --token &lt;robot-token&gt; --profile usb-standard --motion always --auto-start</div></div>
+      <div class="card"><div class="cmd-title"><b>Always-on production</b><span>Operator</span></div><div class="command">robopark production on bmw
+robopark production status bmw</div></div>
+      <div class="card"><div class="cmd-title"><b>Regular call</b><span>Operator</span></div><div class="command">robopark session start bmw
+robopark session stop bmw</div></div>
+      <div class="card"><div class="cmd-title"><b>Verify hardware</b><span>Remote</span></div><div class="command">robopark test camera bmw
+robopark test audio bmw
+robopark test motion bmw
+robopark test call bmw --require-turn</div></div>
+      <div class="card"><div class="cmd-title"><b>Operate runtime</b><span>Remote</span></div><div class="command">robopark status bmw
+robopark logs bmw --follow
+robopark restart bmw
+robopark update bmw</div></div>
+    </div>
+  </section>
+
+  <section class="section"><div class="section-head"><div class="num">07 / RELIABILITY</div><div><h2>Hard production rules</h2></div></div>
+    <div class="grid">
+      <article class="card"><h3>Single media owner</h3><p>One Pi runtime opens camera, microphone and speaker. All tests request access through that owner.</p></article>
+      <article class="card"><h3>Stable hardware profile</h3><p>Match USB product identity and udev aliases, not volatile hw:2,0 indexes. Persist tested gain and volume.</p></article>
+      <article class="card"><h3>Independent watchdogs</h3><p>Camera, call and control reconnect independently. A camera fault does not restart voice; a UI fault does not stop motion.</p></article>
+      <article class="card"><h3>Offline tolerance</h3><p>Local motion continues using cached effective config. Events queue locally and upload after reconnect.</p></article>
+      <article class="card"><h3>Canonical identity</h3><p>One immutable robot ID with editable display name. BMW and VIXEN cannot become separate device records.</p></article>
+      <article class="card"><h3>Evidence-based tests</h3><p>A call passes only after transcript input, LLM output, TTS output and physical playback are all recorded.</p></article>
+    </div>
+  </section>
+
+  <section class="section"><div class="section-head"><div class="num">08 / MIGRATION</div><div><h2>BMW-first migration with rollback</h2></div></div>
+    <div class="phase"><div class="phase-id">PHASE 0</div><div><h3>Freeze and measure</h3><p class="muted">Record a successful RoboVoice web call and Pi local motion call. Capture configuration, latency and device paths. No architecture changes yet.</p></div><div class="gate">Gate: baseline saved</div></div>
+    <div class="phase"><div class="phase-id">PHASE 1</div><div><h3>Direct headless call</h3><p class="muted">Point BMW motion directly at the existing RoboVoice call entrypoint. Remove scheduler allocation from this path while retaining current rollback command.</p></div><div class="gate">Gate: 10 real turns</div></div>
+    <div class="phase"><div class="phase-id">PHASE 2</div><div><h3>Native control events</h3><p class="muted">Persist call lifecycle and transcripts from RoboVoice. Add Pi heartbeat and effective hardware/config reporting.</p></div><div class="gate">Gate: full history</div></div>
+    <div class="phase"><div class="phase-id">PHASE 3</div><div><h3>Port Control Center</h3><p class="muted">Connect Fleet, Park, Sessions, Voice Studio and Setup pages to the RoboVoice-native control API and camera relay.</p></div><div class="gate">Gate: no old API calls</div></div>
+    <div class="phase"><div class="phase-id">PHASE 4</div><div><h3>Unattended BMW soak</h3><p class="muted">Run motion sessions for four hours. Test reconnects, silence endings, repeated triggers, camera continuity and Control Center restart.</p></div><div class="gate">Gate: zero manual repair</div></div>
+    <div class="phase"><div class="phase-id">PHASE 5</div><div><h3>Fleet rollout</h3><p class="muted">Apply the identical USB hardware profile and runtime to each robot. Keep per-robot differences limited to identity, character and site.</p></div><div class="gate">Gate: all five green</div></div>
+    <div class="phase"><div class="phase-id">PHASE 6</div><div><h3>Deprecate legacy scheduler path</h3><p class="muted">Make old session-allocation endpoints read-only, export historical data, remove UI calls, then delete only after the rollback window.</p></div><div class="gate">Gate: 7-day stability</div></div>
+  </section>
+
+  <section class="section"><div class="section-head"><div class="num">09 / MVP EXIT</div><div><h2>Definition of production-ready</h2></div></div>
+    <table><thead><tr><th>Acceptance gate</th><th>Required evidence</th></tr></thead><tbody>
+      <tr><td>Motion-to-greeting</td><td>BMW begins audible greeting within 1.5 seconds of accepted motion.</td></tr>
+      <tr><td>Real conversation</td><td>At least ten consecutive onsite turns persist user transcript, LLM response, TTS completion and robot playback.</td></tr>
+      <tr><td>Call parity</td><td>Same RoboVoice AgentSession, character, model, endpointing and interruption behavior as the web UI call.</td></tr>
+      <tr><td>Always-on video</td><td>Camera remains visible before, during and after calls and reconnects automatically.</td></tr>
+      <tr><td>Failure isolation</td><td>Restarting Control Center does not stop motion detection or an active conversation.</td></tr>
+      <tr><td>Remote recovery</td><td>Operator can inspect logs, test hardware, restart and update without onsite assistance.</td></tr>
+      <tr><td>Soak</td><td>Four-hour BMW run and one-hour five-robot run complete without duplicate sessions or media ownership conflicts.</td></tr>
+    </tbody></table>
+  </section>
+  <footer class="footer">ROBOpark production architecture / RoboVoice-first control plane / generated 2026-07-18</footer>
+</main></body></html>

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "infinicode",
-  "version": "2.8.108",
+  "version": "2.8.113",
   "description": "OpenKernel — provider-agnostic AI execution kernel. Native coding agent + mission-driven execution runtime.",
   "type": "module",
   "main": "./dist/kernel/index.js",
@@ -31,6 +31,8 @@
     "packages/robopark/pi-client",
     "packages/robopark/vision",
     "docs/ROBOPARK_PRODUCTION_MEMORY.md",
+    "docs/ROBOPARK_ROBOVOICE_SIMPLIFICATION_PLAN.html",
+    "scripts/integrate-robovoice-control-center.mjs",
     ".opencode/plugins",
     ".opencode/themes",
     ".opencode/tui.json",
@@ -43,7 +45,8 @@
     "test": "npm run build && node --test \"test/**/*.test.mjs\"",
     "prepublishOnly": "npm run build",
     "kernel": "node bin/infinicode.js mission",
-    "typecheck": "tsc --noEmit"
+    "typecheck": "tsc --noEmit",
+    "robovoice:integrate": "node scripts/integrate-robovoice-control-center.mjs"
   },
   "keywords": [
     "ai",

package/packages/robopark/pi-client/motor_bridge.py

@@ -10,7 +10,8 @@ Command wire format (JSON on the data channel):
     {"op": "stop"}
 """
 
-import asyncio
+import asyncio
+import os
 import json
 import logging
 from typing import Awaitable, Callable, Optional
@@ -20,10 +21,12 @@ import httpx
 log = logging.getLogger("robopark-pi.motor")
 
 
-class MotorBridge:
-    def __init__(self, motor_server_url: Optional[str], dry_run: bool = False):
+class MotorBridge:
+    def __init__(self, motor_server_url: Optional[str], dry_run: bool = False):
         self.motor_server_url = (motor_server_url or "").rstrip("/")
-        self.dry_run = dry_run
+        self.dry_run = dry_run
+        token = os.getenv("ROBOPARK_MOTOR_TOKEN", "").strip() or os.getenv("ROBOPARK_MESH_TOKEN", "").strip()
+        self.headers = {"X-RoboPark-Motor-Token": token} if token else {}
         self._lock = asyncio.Lock()  # the local motor server allows one motor at a time
 
     async def handle_command(self, raw: str | bytes) -> str:
@@ -60,7 +63,7 @@ class MotorBridge:
                 async with httpx.AsyncClient(timeout=seconds + 5.0) as c:
                     r = await c.post(
                         f"{self.motor_server_url}/trigger-motor",
-                        json={"motor_name": name, "seconds": seconds},
+                        json={"motor_name": name, "seconds": seconds}, headers=self.headers,
                     )
                 if r.status_code == 200:
                     return f"moved {name} for {seconds}s"
@@ -75,8 +78,8 @@ class MotorBridge:
             return "dry-run: stop"
         try:
             async with httpx.AsyncClient(timeout=5.0) as c:
-                r = await c.post(f"{self.motor_server_url}/stop-motors", json={})
+                r = await c.post(f"{self.motor_server_url}/stop-motors", json={}, headers=self.headers)
             return f"stop {r.status_code}"
         except Exception as e:
             log.error(f"stop_all failed: {e}")
-            return f"error: {e}"
+            return f"error: {e}"