infinicode 2.8.113 → 2.8.114

package/dist/kernel/federation/dashboard-html.js

@@ -1258,7 +1258,7 @@ footer.cmd{left:var(--global-nav-width);transition:left .24s cubic-bezier(.2,.8,
             <div class="rp-field"><label>Enrollment token</label><input id="rp-command-enrollment" placeholder="optional" spellcheck="false"></div>
             <div class="rp-field"><label>Control token</label><input id="rp-command-token" type="password" spellcheck="false"></div>
             <div class="rp-field"><label>RoboVoice folder on livekit-1</label><input id="rp-command-robovoice" value="C:\ROBOVOICE-main" spellcheck="false"></div>
-            <div class="rp-field"><label>Release</label><input id="rp-command-release" value="2.8.113" spellcheck="false"></div>
+            <div class="rp-field"><label>Release</label><input id="rp-command-release" value="2.8.114" spellcheck="false"></div>
           </div>
           <div class="rp-command-toolbar">
             <input type="search" id="rp-command-search" placeholder="Search logs, camera, Docker, motors, npm...">
@@ -2843,7 +2843,7 @@ footer.cmd{left:var(--global-nav-width);transition:left .24s cubic-bezier(.2,.8,
   var RP_COMMAND_ENV_KEY='rp-command-env-v2';
   var RP_CUSTOM_COMMANDS_KEY='rp-custom-commands-v1';
   var rpVisibleCommands=[];
-  function rpCommandDefaults(){return {lan:'192.168.0.9',tail:'100.84.147.24',site:'Tel Aviv',robot:'bmw',character:'vixen',device:'',enrollment:'',token:dashboardMeshToken(),robovoice:'C:\\ROBOVOICE-main',release:'2.8.113',network:'lan'};}
+  function rpCommandDefaults(){return {lan:'192.168.0.9',tail:'100.84.147.24',site:'Tel Aviv',robot:'bmw',character:'vixen',device:'',enrollment:'',token:dashboardMeshToken(),robovoice:'C:\\ROBOVOICE-main',release:'2.8.114',network:'lan'};}
   function rpLoadStoredJson(key,fallback){try{var value=JSON.parse(localStorage.getItem(key)||'null');return value&&typeof value==='object'?value:fallback;}catch(e){return fallback;}}
   function rpCommandEnv(){
     var d=rpCommandDefaults(),s=rpLoadStoredJson(RP_COMMAND_ENV_KEY,{});
@@ -2852,7 +2852,7 @@ footer.cmd{left:var(--global-nav-width);transition:left .24s cubic-bezier(.2,.8,
   }
   function rpSaveCommandEnv(){try{localStorage.setItem(RP_COMMAND_ENV_KEY,JSON.stringify(rpCommandEnv()));}catch(e){}}
   function rpShellArg(value){var text=String(value||'');return /^[A-Za-z0-9._:\/-]+$/.test(text)?text:'"'+text.replace(/"/g,'\\"')+'"';}
-  function rpCompleteRobotCommand(setupCommand){var release=rpCommandEnv().release||'2.8.113';return 'sudo npm install -g infinicode@'+rpShellArg(release)+' --force && hash -r && (sudo robopark stop || true) && '+setupCommand;}
+  function rpCompleteRobotCommand(setupCommand){var release=rpCommandEnv().release||'2.8.114';return 'sudo npm install -g infinicode@'+rpShellArg(release)+' --force && hash -r && (sudo robopark stop || true) && '+setupCommand;}
   function rpRobotSetupCommand(){
     var e=rpCommandEnv(),control=rpControlUrl(e.network),argv=['sudo','robopark','setup','--robot','--name',e.robot,'--site',e.site,'--hub-url',control,'--token',e.token,'--port','47913',e.network==='tailscale'?'--tailscale':'--lan'];
     if(e.enrollment)argv.push('--enrollment-token',e.enrollment);if(e.character)argv.push('--character',e.character);argv.push('--start','--auto-start','--yes');
@@ -2860,11 +2860,11 @@ footer.cmd{left:var(--global-nav-width);transition:left .24s cubic-bezier(.2,.8,
   }
   function rpCommandCatalog(){
     var e=rpCommandEnv(),control=rpControlUrl(e.network),device=e.device||e.robot,enroll=e.enrollment?' --enrollment-token '+rpShellArg(e.enrollment):'',auth='?token='+encodeURIComponent(e.token);
-    var api=control+'/robopark/api',release=e.release||'2.8.113';
+    var api=control+'/robopark/api',release=e.release||'2.8.114';
     return [
       {id:'hub-up',category:'Provision',title:'Install and start RoboVoice-first control host',description:'Run in elevated PowerShell on livekit-1. Starts the private compatibility data service, proven RoboVoice stack, mesh relay, and full Control Center.',command:'npm install -g infinicode@'+rpShellArg(release)+' --force; robopark serve --port 8080 --no-open; robopark agent-up --path '+rpShellArg(e.robovoice)+' --scheduler-url http://127.0.0.1:8080 --token '+rpShellArg(e.token)+'; infinicode serve --hub --name livekit-1 --port 47913 --token '+rpShellArg(e.token)+' --lan --dashboard --scheduler-url http://127.0.0.1:8080 --auto-update --supervised'},
       {id:'robot-install',category:'Provision',title:'Install or repair selected robot',description:'Run on the Pi. One control URL, one token, one supervised runtime; camera, audio, motion, motor server, and mesh start together.',command:rpRobotSetupCommand()},
-      {id:'operator-tail',category:'Provision',title:'Connect operator agents to control mesh',description:'Connects Codex/OpenCode tools through the livekit-1 control URL without exposing the private data service.',command:'infinicode mcp --lan --tailscale --seed '+rpControlUrl('tailscale').replace(/^http:\\/\\//,'')+' --name dev-laptop --token '+rpShellArg(e.token)+' --mesh-port 47913'},
+      {id:'operator-tail',category:'Provision',title:'Direct agent mesh link',description:'Copy only this URL and give it to the agent on the other Tailscale device. It contains the exact control endpoint and mesh credential; the agent can run infinicode mesh join <link>.',command:rpControlUrl('tailscale')+'/fed/join?token='+encodeURIComponent(e.token)},
       {id:'production-on',category:'Production',title:'Arm always-on motion conversations',description:'Enables local motion-triggered RoboVoice calls for the canonical device.',command:'Invoke-RestMethod -Method Patch -ContentType "application/json" -Body (@{production_mode=$true} | ConvertTo-Json) "'+api+'/devices/'+encodeURIComponent(device)+auth+'"'},
       {id:'production-off',category:'Production',title:'Disarm production conversations',description:'Stops new motion-triggered calls without taking camera monitoring or remote control offline.',command:'Invoke-RestMethod -Method Patch -ContentType "application/json" -Body (@{production_mode=$false} | ConvertTo-Json) "'+api+'/devices/'+encodeURIComponent(device)+auth+'"'},
       {id:'session-start',category:'Voice',title:'Start one production conversation',description:'Runs the same robot motion-to-RoboVoice path used onsite.',command:'Invoke-RestMethod -Method Post "'+api+'/robots/'+encodeURIComponent(device)+'/pipeline-test/start'+auth+'" | ConvertTo-Json -Depth 8'},

package/dist/kernel/federation/index.d.ts

@@ -25,6 +25,8 @@ export type { ComputeCandidate, ComputeNeed } from './compute-router.js';
 export { loadRole, saveRole, rolePreamble } from './role-context.js';
 export { discoverTailscalePeers, tailscaleAvailable } from './discovery.js';
 export type { DiscoverOptions } from './discovery.js';
+export { buildMeshJoinLink, parseMeshJoinLink, redactMeshJoinLink, MESH_JOIN_PATH } from './mesh-link.js';
+export type { MeshJoinLink } from './mesh-link.js';
 export { LanBeacon, DEFAULT_LAN_DISCOVERY_PORT } from './lan-discovery.js';
 export type { LanBeaconOptions, DiscoveredLanPeer } from './lan-discovery.js';
 export { envelope, reply, frame, frameToSSE, parseSSE, newId } from './protocol.js';

package/dist/kernel/federation/index.js

@@ -18,6 +18,7 @@ export { AutoUpdate, compareVersions } from './auto-update.js';
 export { ComputeRouter } from './compute-router.js';
 export { loadRole, saveRole, rolePreamble } from './role-context.js';
 export { discoverTailscalePeers, tailscaleAvailable } from './discovery.js';
+export { buildMeshJoinLink, parseMeshJoinLink, redactMeshJoinLink, MESH_JOIN_PATH } from './mesh-link.js';
 export { LanBeacon, DEFAULT_LAN_DISCOVERY_PORT } from './lan-discovery.js';
 export { envelope, reply, frame, frameToSSE, parseSSE, newId } from './protocol.js';
 export * as moltfed from './moltfed-adapter.js';

package/dist/kernel/federation/mesh-link.d.ts

@@ -0,0 +1,16 @@
+/** Canonical, copyable connection link for one Infinicode mesh node. */
+export declare const MESH_JOIN_PATH = "/fed/join";
+export interface MeshJoinLink {
+    /** Authenticated HTTP base URL consumed by Federation.connect(). */
+    seed: string;
+    /** Shared mesh bearer token, when the target mesh is protected. */
+    token?: string;
+    /** Original normalized link, suitable for MCP --connect. */
+    link: string;
+}
+/** Build a single shareable URL from a reachable mesh base URL. */
+export declare function buildMeshJoinLink(baseUrl: string, token?: string): string;
+/** Parse and validate a canonical mesh URL without making a network request. */
+export declare function parseMeshJoinLink(value: string): MeshJoinLink;
+/** Safe for terminals and logs while retaining enough information to identify the link. */
+export declare function redactMeshJoinLink(value: string): string;

package/dist/kernel/federation/mesh-link.js

@@ -0,0 +1,52 @@
+/** Canonical, copyable connection link for one Infinicode mesh node. */
+export const MESH_JOIN_PATH = '/fed/join';
+function parsedHttpUrl(value) {
+    let url;
+    try {
+        url = new URL(value.trim());
+    }
+    catch {
+        throw new Error('mesh link must be a valid http:// or https:// URL');
+    }
+    if (url.protocol !== 'http:' && url.protocol !== 'https:') {
+        throw new Error('mesh link must use http:// or https://');
+    }
+    if (url.username || url.password)
+        throw new Error('mesh link must not contain URL user credentials');
+    return url;
+}
+/** Build a single shareable URL from a reachable mesh base URL. */
+export function buildMeshJoinLink(baseUrl, token) {
+    const url = parsedHttpUrl(baseUrl);
+    url.pathname = MESH_JOIN_PATH;
+    url.search = '';
+    url.hash = '';
+    if (token)
+        url.searchParams.set('token', token);
+    return url.toString();
+}
+/** Parse and validate a canonical mesh URL without making a network request. */
+export function parseMeshJoinLink(value) {
+    const url = parsedHttpUrl(value);
+    if (url.pathname.replace(/\/+$/, '') !== MESH_JOIN_PATH) {
+        throw new Error(`mesh link path must be ${MESH_JOIN_PATH}`);
+    }
+    const token = url.searchParams.get('token')?.trim() || undefined;
+    for (const key of url.searchParams.keys()) {
+        if (key !== 'token')
+            throw new Error(`unsupported mesh link parameter: ${key}`);
+    }
+    url.hash = '';
+    const seed = `${url.protocol}//${url.host}`;
+    return { seed, token, link: buildMeshJoinLink(seed, token) };
+}
+/** Safe for terminals and logs while retaining enough information to identify the link. */
+export function redactMeshJoinLink(value) {
+    try {
+        const parsed = parseMeshJoinLink(value);
+        return buildMeshJoinLink(parsed.seed, parsed.token ? '<redacted>' : undefined);
+    }
+    catch {
+        return '<invalid mesh link>';
+    }
+}

package/dist/kernel/federation/transport-http.js

@@ -22,6 +22,7 @@ import { readFileSync } from 'node:fs';
 import { createRequire } from 'node:module';
 import { once } from 'node:events';
 import { frameToSSE, parseSSE } from './protocol.js';
+import { buildMeshJoinLink, MESH_JOIN_PATH } from './mesh-link.js';
 const execFileAsync = promisify(execFile);
 /** Read the livekit-client UMD bundle from the installed dependency, once.
  *  Returns null (cached) if the package isn't present — the dashboard then
@@ -363,6 +364,29 @@ export class MeshServer {
             return;
         }
         const remote = req.socket.remoteAddress ?? 'unknown';
+        if (req.method === 'GET' && path === MESH_JOIN_PATH) {
+            const rawHost = String(req.headers.host ?? '');
+            const authority = /^[A-Za-z0-9.:[\]-]+$/.test(rawHost) ? rawHost : `127.0.0.1:${this.opts.port}`;
+            const scheme = this.opts.tls ? 'https' : 'http';
+            const link = buildMeshJoinLink(`${scheme}://${authority}`, this.opts.token ? this.presentedToken(req) : undefined);
+            const manifest = this.opts.getManifest();
+            res.writeHead(200, {
+                'content-type': 'application/json; charset=utf-8',
+                'cache-control': 'no-store',
+                'referrer-policy': 'no-referrer',
+            });
+            res.end(JSON.stringify({
+                protocol: 'infinicode-mesh-join',
+                version: 1,
+                link,
+                node: { id: manifest.nodeId, name: manifest.displayName, role: manifest.role },
+                use: {
+                    direct: `infinicode mcp --connect "${link}"`,
+                    install: `infinicode mesh join "${link}" --host all`,
+                },
+            }));
+            return;
+        }
         if (req.method === 'GET' && path === '/fed/ui-build') {
             const marker = this.opts.dashboardHtml?.match(/<meta name="robopark-ui-build" content="([^"]+)">/)?.[1] ?? 'none';
             res.writeHead(200, {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "infinicode",
-  "version": "2.8.113",
+  "version": "2.8.114",
   "description": "OpenKernel — provider-agnostic AI execution kernel. Native coding agent + mission-driven execution runtime.",
   "type": "module",
   "main": "./dist/kernel/index.js",