infinicode 2.8.36 → 2.8.38

package/dist/kernel/federation/transport-http.d.ts

@@ -53,6 +53,8 @@ export declare class MeshServer {
     start(): Promise<void>;
     /** Proxy a dashboard request to the RoboPark scheduler (product data). */
     private proxyToScheduler;
+    /** Protected local runtime controls for the RoboPark operator dashboard. */
+    private runtimeDocker;
     /** Push a frame to every connected stream subscriber. */
     broadcast(frame: StreamFrame): void;
     /** Token presented on a request — Bearer header (peers/CLI) OR ?token= query

package/dist/kernel/federation/transport-http.js

@@ -15,10 +15,13 @@
  */
 import { createServer } from 'node:http';
 import { createServer as createHttpsServer } from 'node:https';
+import { execFile } from 'node:child_process';
+import { promisify } from 'node:util';
 import { timingSafeEqual } from 'node:crypto';
 import { readFileSync } from 'node:fs';
 import { createRequire } from 'node:module';
 import { frameToSSE, parseSSE } from './protocol.js';
+const execFileAsync = promisify(execFile);
 /** Read the livekit-client UMD bundle from the installed dependency, once.
  *  Returns null (cached) if the package isn't present — the dashboard then
  *  falls back to an idle camera panel instead of erroring. */
@@ -120,6 +123,51 @@ export class MeshServer {
             res.end(JSON.stringify({ ok: false, error: `scheduler unreachable: ${err instanceof Error ? err.message : String(err)}` }));
         });
     }
+    /** Protected local runtime controls for the RoboPark operator dashboard. */
+    async runtimeDocker(req, res, path) {
+        const send = (status, body) => {
+            res.writeHead(status, { 'content-type': 'application/json', 'cache-control': 'no-store' });
+            res.end(JSON.stringify(body));
+        };
+        const run = async (args, timeout = 8000) => {
+            const out = await execFileAsync('docker', args, { timeout, maxBuffer: 2_000_000, windowsHide: true });
+            return out.stdout.trim();
+        };
+        try {
+            if (req.method === 'GET' && path === '/robopark/runtime/health') {
+                const schedulerUrl = this.opts.schedulerUrl?.replace(/\/+$/, '');
+                const [docker, containers, scheduler] = await Promise.all([
+                    run(['info', '--format', '{{json .}}']).then(v => ({ ok: true, data: JSON.parse(v) })).catch(e => ({ ok: false, error: String(e.message ?? e) })),
+                    run(['ps', '-a', '--format', '{{json .}}']).then(v => ({ ok: true, data: v ? v.split(/\r?\n/).filter(Boolean).map(x => JSON.parse(x)) : [] })).catch(e => ({ ok: false, error: String(e.message ?? e) })),
+                    schedulerUrl ? fetch(`${schedulerUrl}/api/telemetry`, { signal: AbortSignal.timeout(5000) }).then(async (r) => ({ ok: r.ok, data: r.ok ? await r.json() : await r.text() })).catch(e => ({ ok: false, error: String(e.message ?? e) })) : Promise.resolve({ ok: false, error: 'scheduler not linked' }),
+                ]);
+                send(200, { ts: Date.now(), docker, containers, scheduler });
+                return;
+            }
+            if (req.method !== 'POST' || path !== '/robopark/runtime/docker') {
+                send(404, { ok: false, error: 'not found' });
+                return;
+            }
+            const body = JSON.parse(await this.readBody(req) || '{}');
+            const action = body.action;
+            const container = body.container?.trim();
+            if (!container || !/^[a-zA-Z0-9_.-]+$/.test(container)) {
+                send(400, { ok: false, error: 'container is required and must be a Docker container name' });
+                return;
+            }
+            if (!['start', 'stop', 'restart', 'logs'].includes(action ?? '')) {
+                send(400, { ok: false, error: 'action must be start, stop, restart, or logs' });
+                return;
+            }
+            const output = action === 'logs'
+                ? await run(['logs', '--tail', '100', '--timestamps', container], 30_000)
+                : await run([action, container], 30_000);
+            send(200, { ok: true, action, container, output });
+        }
+        catch (e) {
+            send(500, { ok: false, error: String(e.message ?? e) });
+        }
+    }
     /** Push a frame to every connected stream subscriber. */
     broadcast(frame) {
         if (this.sse.size === 0)
@@ -158,6 +206,10 @@ export class MeshServer {
     handle(req, res) {
         const url = req.url ?? '/';
         const path = url.split('?', 1)[0];
+        if (req.method === 'GET' && path === '/favicon.ico') {
+            res.writeHead(204).end();
+            return;
+        }
         if (!this.authOk(req)) {
             res.writeHead(401).end('unauthorized');
             return;
@@ -220,6 +272,10 @@ export class MeshServer {
                 res.end(JSON.stringify({ ok: false, readonly: true, error: 'this node is network-exposed without a token — control actions are disabled. Restart with --token <secret> to enable them.' }));
                 return;
             }
+            if (path.startsWith('/robopark/runtime/')) {
+                void this.runtimeDocker(req, res, path);
+                return;
+            }
             this.proxyToScheduler(req, res, path);
             return;
         }

package/dist/robopark/add-robot.d.ts

@@ -7,5 +7,7 @@ export interface AddRobotOptions extends ExplicitContextOpts {
     /** Force a specific park-map pad/character preset id instead of the
      * fuzzy name-based match below — e.g. `--character jaguar`. */
     character?: string;
+    lan?: boolean;
+    tailscale?: boolean;
 }
 export declare function roboparkAddRobot(config: Conf<InfinicodeConfig>, opts: AddRobotOptions): Promise<void>;

package/dist/robopark/add-robot.js

@@ -73,6 +73,11 @@ export async function roboparkAddRobot(config, opts) {
         console.log(chalk.red('  ✗ --name is required, e.g. --name robobmw'));
         process.exit(1);
     }
+    if (opts.lan && opts.tailscale) {
+        console.log(chalk.red('  ✗ choose exactly one network mode: --lan or --tailscale'));
+        process.exit(1);
+    }
+    const network = opts.tailscale ? 'tailscale' : 'lan';
     const ctx = await resolveContext(opts);
     if (!ctx.schedulerUrl) {
         console.log(chalk.red('  ✗ no scheduler URL resolved. Pass --scheduler-url/--hub-url, run `robopark hub-use` first, or run this on/near the hub.'));
@@ -80,6 +85,7 @@ export async function roboparkAddRobot(config, opts) {
     }
     console.log(`  scheduler: ${chalk.cyan(ctx.schedulerUrl)}`);
     console.log(`  name:      ${chalk.cyan(opts.name)}${ctx.site ? chalk.dim('  @ ' + ctx.site) : ''}`);
+    console.log(`  network:   ${chalk.cyan(network)}`);
     console.log();
     const characterId = opts.character?.trim() || await pickCharacterPreset(ctx.schedulerUrl, opts.name);
     if (characterId) {
@@ -114,6 +120,8 @@ export async function roboparkAddRobot(config, opts) {
             schedulerPort: ctx.schedulerUrl ? String(new URL(ctx.schedulerUrl).port || '8080') : undefined,
             enrollmentToken: minted.enrollment_token,
             start: true,
+            lan: opts.lan,
+            tailscale: opts.tailscale,
         });
         return;
     }
@@ -131,6 +139,7 @@ export async function roboparkAddRobot(config, opts) {
         const schedulerPort = new URL(ctx.schedulerUrl).port || '8080';
         argv.push('--scheduler-port', schedulerPort);
     }
+    argv.push(network === 'tailscale' ? '--tailscale' : '--lan');
     argv.push('--enrollment-token', minted.enrollment_token, '--start', '--auto-start');
     console.log(chalk.dim(`  run this ON THE ROBOT${characterId ? ` (binds to pad: ${characterId})` : ''}:`));
     console.log('  ' + chalk.cyan(commandString(argv)));

package/dist/robopark/secrets.d.ts

@@ -0,0 +1,8 @@
+type Options = {
+    schedulerUrl: string;
+    workerEnv: string;
+    rotate?: boolean;
+};
+/** Provision the scheduler's shared worker secret into a ROBOVOICE .env file. */
+export declare function roboparkSecrets(opts: Options): Promise<void>;
+export {};

package/dist/robopark/secrets.js

@@ -0,0 +1,41 @@
+import { mkdir, readFile, rename, writeFile } from 'node:fs/promises';
+import { dirname } from 'node:path';
+import chalk from 'chalk';
+function updateEnv(contents, token) {
+    const line = `ROBOPARK_AGENT_TOKEN=${token}`;
+    const re = /^ROBOPARK_AGENT_TOKEN=.*$/m;
+    return re.test(contents)
+        ? contents.replace(re, line)
+        : `${contents.trimEnd()}\n${line}\n`;
+}
+/** Provision the scheduler's shared worker secret into a ROBOVOICE .env file. */
+export async function roboparkSecrets(opts) {
+    const base = opts.schedulerUrl.replace(/\/$/, '');
+    const response = await fetch(`${base}/api/settings/agent-token/provision`, {
+        method: 'POST',
+        headers: { 'content-type': 'application/json' },
+        body: JSON.stringify({ rotate: Boolean(opts.rotate) }),
+    });
+    if (!response.ok) {
+        throw new Error(`scheduler rejected secret provisioning (${response.status})`);
+    }
+    const body = await response.json();
+    if (!body.agent_token)
+        throw new Error('scheduler returned no agent token');
+    let current = '';
+    try {
+        current = await readFile(opts.workerEnv, 'utf8');
+    }
+    catch (err) {
+        if (err?.code !== 'ENOENT')
+            throw err;
+    }
+    const next = updateEnv(current, body.agent_token);
+    await mkdir(dirname(opts.workerEnv), { recursive: true });
+    const temp = `${opts.workerEnv}.tmp-${process.pid}`;
+    await writeFile(temp, next, { encoding: 'utf8', mode: 0o600 });
+    await rename(temp, opts.workerEnv);
+    console.log(chalk.green(`  ✓ ROBOVOICE secret synchronized to ${opts.workerEnv}`));
+    if (opts.rotate)
+        console.log(chalk.yellow('  Restart the ROBOVOICE worker to use the rotated secret.'));
+}

package/dist/robopark/setup.d.ts

@@ -21,5 +21,8 @@ export interface SetupOptions {
     autoStart?: boolean;
     yes?: boolean;
     foreground?: boolean;
+    /** Robot transport. Defaults to LAN for backwards compatibility. */
+    lan?: boolean;
+    tailscale?: boolean;
 }
 export declare function roboparkSetup(config: Conf<InfinicodeConfig>, opts: SetupOptions): Promise<void>;

package/dist/robopark/setup.js

@@ -171,6 +171,12 @@ async function setupHub(config, opts, internal) {
     }
 }
 async function setupRobot(config, opts, ctx, internal) {
+    if (opts.lan && opts.tailscale) {
+        console.log(chalk.red('  ✗ choose exactly one robot network: --lan or --tailscale'));
+        return;
+    }
+    const network = opts.tailscale ? 'tailscale' : 'lan';
+    const networkFlag = network === 'tailscale' ? '--tailscale' : '--lan';
     const hubUrl = opts.hub ?? (ctx.hub ? `http://${ctx.hub.ip}:${internal.port}` : undefined);
     if (!hubUrl) {
         console.log(chalk.red('  ✗ no hub discovered. Pass --hub http://HUB_IP:47913'));
@@ -184,7 +190,7 @@ async function setupRobot(config, opts, ctx, internal) {
         displayName: internal.name,
         token: internal.token,
         seeds: [hubUrl],
-        lan: true,
+        lan: network === 'lan',
     };
     config.set('federation', fed);
     const args = [
@@ -193,7 +199,7 @@ async function setupRobot(config, opts, ctx, internal) {
         '--port', String(internal.port),
         '--token', internal.token,
         '--seed', hubUrl,
-        '--lan',
+        networkFlag,
         '--auto-update',
         '--supervised',
     ];
@@ -225,6 +231,7 @@ async function setupRobot(config, opts, ctx, internal) {
     console.log('  ' + chalk.cyan(`robopark ${previewAgentArgs.join(' ')}`));
     if (visionEnabled)
         console.log('  ' + chalk.cyan(`robopark ${visionAgentArgs.join(' ')}`));
+    console.log(chalk.dim(`  network: ${network} (scheduler: ${schedulerUrl})`));
     console.log();
     if (opts.start) {
         const robotArgv = await infinicodeArgv(args);

package/dist/robopark-cli.js

@@ -20,6 +20,7 @@ import { roboparkDoctor } from './robopark/doctor.js';
 import { roboparkAddRobot } from './robopark/add-robot.js';
 import { saveHubProfile, clearHubProfile } from './robopark/profile.js';
 import { roboparkAgentUp, roboparkAgentDown, roboparkAgentLogs } from './robopark/agent-ctl.js';
+import { roboparkSecrets } from './robopark/secrets.js';
 // Read the real version from package.json so `--version` never drifts from
 // what is actually installed (this was a hardcoded constant that went stale
 // across several releases — see the identical fix + comment in cli.ts).
@@ -97,6 +98,21 @@ program
     .action(async (opts) => {
     await roboparkServe(opts);
 });
+program
+    .command('secrets')
+    .description('Provision the scheduler-managed ROBOVOICE authentication secret')
+    .option('--scheduler-url <url>', 'scheduler base URL', 'http://localhost:8080')
+    .option('--worker-env <path>', 'ROBOVOICE worker .env file', '.env')
+    .option('--rotate', 'rotate the shared secret before synchronizing it')
+    .action(async (opts) => {
+    try {
+        await roboparkSecrets(opts);
+    }
+    catch (err) {
+        console.error(chalk.red(`  ✗ secret provisioning failed: ${err?.message ?? err}`));
+        process.exitCode = 1;
+    }
+});
 program
     .command('enroll')
     .description('Enroll this robot/satellite with the RoboPark scheduler')
@@ -227,6 +243,8 @@ program
     .option('--token <token>', 'shared mesh token (defaults to saved hub profile / auto-discovery)')
     .option('--scheduler-url <url>', 'scheduler base URL (defaults to saved hub profile / auto-discovery)')
     .option('--character <id>', 'force a specific park-map pad/character preset id (default: fuzzy-matched from the robot name)')
+    .option('--lan', 'generate a robot command for the same local network (default)')
+    .option('--tailscale', 'generate a robot command for a Tailscale-reachable hub')
     .option('--start', 'start the robot node on this machine now, instead of printing the one-liner')
     .action(async (name, opts) => {
     await roboparkAddRobot(config, { name, ...opts });
@@ -272,6 +290,8 @@ program
     .option('--tailscale-auth <token>', 'Tailscale auth key for the hub')
     .option('--tag <tag>', 'Tailscale tag filter')
     .option('--enrollment-token <token>', 'one-time scheduler enrollment token for robots')
+    .option('--lan', 'use LAN discovery and LAN hub/scheduler addresses (default for robots)')
+    .option('--tailscale', 'use Tailscale discovery and Tailscale hub/scheduler addresses')
     .option('--video-device <dev>', 'default camera for robot preview agent', 'auto')
     .option('--audio-device <dev>', 'default microphone for robot preview agent', 'default')
     .option('--no-vision', 'do not start the vision (camera/motion trigger) agent for a robot — armed by default')
@@ -303,6 +323,8 @@ program
         start: opts.start,
         autoStart: opts.autoStart,
         yes: opts.yes,
+        lan: opts.lan,
+        tailscale: opts.tailscale,
     });
 });
 // Keep legacy fleet/run/apply/dashboard commands available while migrating.

package/package.json

@@ -1,105 +1,105 @@
-{
-  "name": "infinicode",
-  "version": "2.8.36",
-  "description": "OpenKernel — provider-agnostic AI execution kernel. Native coding agent + mission-driven execution runtime.",
-  "type": "module",
-  "main": "./dist/kernel/index.js",
-  "types": "./dist/kernel/index.d.ts",
-  "bin": {
-    "infinicode": "./bin/infinicode.js",
-    "ic": "./bin/infinicode.js",
-    "robopark": "./bin/robopark.js"
-  },
-  "exports": {
-    ".": {
-      "types": "./dist/kernel/index.d.ts",
-      "import": "./dist/kernel/index.js"
-    },
-    "./kernel": {
-      "types": "./dist/kernel/index.d.ts",
-      "import": "./dist/kernel/index.js"
-    },
-    "./robopark": "./dist/robopark-cli.js",
-    "./package.json": "./package.json"
-  },
-  "files": [
-    "bin/infinicode.js",
-    "bin/robopark.js",
-    "dist",
-    "packages/robopark/scheduler",
-    "packages/robopark/pi-client",
-    "packages/robopark/vision",
-    ".opencode/plugins",
-    ".opencode/themes",
-    ".opencode/tui.json",
-    "README.md"
-  ],
-  "scripts": {
-    "build": "tsc",
-    "dev": "tsc --watch",
-    "clean": "node -e \"require('fs').rmSync('dist',{recursive:true,force:true})\"",
-    "test": "npm run build && node --test \"test/**/*.test.mjs\"",
-    "prepublishOnly": "npm run build",
-    "kernel": "node bin/infinicode.js mission",
-    "typecheck": "tsc --noEmit"
-  },
-  "keywords": [
-    "ai",
-    "kernel",
-    "execution",
-    "runtime",
-    "mission",
-    "orchestrator",
-    "agent",
-    "ollama",
-    "llm",
-    "cli",
-    "tui",
-    "coding-agent",
-    "local",
-    "self-hosted",
-    "provider-agnostic",
-    "openrouter",
-    "groq",
-    "gemini"
-  ],
-  "author": "Ra Kai'Un",
-  "license": "MIT",
-  "repository": {
-    "type": "git",
-    "url": "https://github.com/MrYungCEO/infinicode"
-  },
-  "engines": {
-    "node": ">=20"
-  },
-  "dependencies": {
-    "@anthropic-ai/claude-code": "^2.1.207",
-    "@modelcontextprotocol/sdk": "^1.29.0",
-    "chalk": "^5.3.0",
-    "commander": "^12.1.0",
-    "conf": "^12.0.0",
-    "execa": "^9.3.0",
-    "inquirer": "^9.2.23",
-    "livekit-client": "^2.20.1",
-    "mitt": "^3.0.1",
-    "nanoid": "^5.0.7",
-    "node-fetch": "^3.3.2",
-    "ora": "^8.0.1",
-    "yaml": "^2.5.0",
-    "zod": "^3.23.8"
-  },
-  "devDependencies": {
-    "@types/inquirer": "^9.0.9",
-    "@types/node": "^20.14.0",
-    "typescript": "^5.4.5"
-  },
-  "optionalDependencies": {
-    "infinicode-tui-darwin-arm64": "^2.3.0",
-    "infinicode-tui-darwin-x64": "^2.3.0",
-    "infinicode-tui-linux-arm64": "^2.3.0",
-    "infinicode-tui-linux-x64": "^2.3.0",
-    "infinicode-tui-win32-arm64": "^2.3.0",
-    "infinicode-tui-win32-x64": "^2.3.0",
-    "playwright": "^1.47.0"
-  }
-}
+{
+  "name": "infinicode",
+  "version": "2.8.38",
+  "description": "OpenKernel — provider-agnostic AI execution kernel. Native coding agent + mission-driven execution runtime.",
+  "type": "module",
+  "main": "./dist/kernel/index.js",
+  "types": "./dist/kernel/index.d.ts",
+  "bin": {
+    "infinicode": "./bin/infinicode.js",
+    "ic": "./bin/infinicode.js",
+    "robopark": "./bin/robopark.js"
+  },
+  "exports": {
+    ".": {
+      "types": "./dist/kernel/index.d.ts",
+      "import": "./dist/kernel/index.js"
+    },
+    "./kernel": {
+      "types": "./dist/kernel/index.d.ts",
+      "import": "./dist/kernel/index.js"
+    },
+    "./robopark": "./dist/robopark-cli.js",
+    "./package.json": "./package.json"
+  },
+  "files": [
+    "bin/infinicode.js",
+    "bin/robopark.js",
+    "dist",
+    "packages/robopark/scheduler",
+    "packages/robopark/pi-client",
+    "packages/robopark/vision",
+    ".opencode/plugins",
+    ".opencode/themes",
+    ".opencode/tui.json",
+    "README.md"
+  ],
+  "scripts": {
+    "build": "tsc",
+    "dev": "tsc --watch",
+    "clean": "node -e \"require('fs').rmSync('dist',{recursive:true,force:true})\"",
+    "test": "npm run build && node --test \"test/**/*.test.mjs\"",
+    "prepublishOnly": "npm run build",
+    "kernel": "node bin/infinicode.js mission",
+    "typecheck": "tsc --noEmit"
+  },
+  "keywords": [
+    "ai",
+    "kernel",
+    "execution",
+    "runtime",
+    "mission",
+    "orchestrator",
+    "agent",
+    "ollama",
+    "llm",
+    "cli",
+    "tui",
+    "coding-agent",
+    "local",
+    "self-hosted",
+    "provider-agnostic",
+    "openrouter",
+    "groq",
+    "gemini"
+  ],
+  "author": "Ra Kai'Un",
+  "license": "MIT",
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/MrYungCEO/infinicode"
+  },
+  "engines": {
+    "node": ">=20"
+  },
+  "dependencies": {
+    "@anthropic-ai/claude-code": "^2.1.207",
+    "@modelcontextprotocol/sdk": "^1.29.0",
+    "chalk": "^5.3.0",
+    "commander": "^12.1.0",
+    "conf": "^12.0.0",
+    "execa": "^9.3.0",
+    "inquirer": "^9.2.23",
+    "livekit-client": "^2.20.1",
+    "mitt": "^3.0.1",
+    "nanoid": "^5.0.7",
+    "node-fetch": "^3.3.2",
+    "ora": "^8.0.1",
+    "yaml": "^2.5.0",
+    "zod": "^3.23.8"
+  },
+  "devDependencies": {
+    "@types/inquirer": "^9.0.9",
+    "@types/node": "^20.14.0",
+    "typescript": "^5.4.5"
+  },
+  "optionalDependencies": {
+    "infinicode-tui-darwin-arm64": "^2.3.0",
+    "infinicode-tui-darwin-x64": "^2.3.0",
+    "infinicode-tui-linux-arm64": "^2.3.0",
+    "infinicode-tui-linux-x64": "^2.3.0",
+    "infinicode-tui-win32-arm64": "^2.3.0",
+    "infinicode-tui-win32-x64": "^2.3.0",
+    "playwright": "^1.47.0"
+  }
+}