infinicode 2.8.37 → 2.8.39

package/dist/kernel/federation/dashboard-html.js

@@ -333,6 +333,89 @@ button.act:disabled{opacity:0.5;cursor:default;}
 .pk-svc-meta{color:var(--muted);flex:1;}
 .pk-svc-restart-btn{font-size:0.6rem;padding:0.2rem 0.5rem;flex-shrink:0;}
 
+/* ── C3: operator identity (top-bar badge + audit attribution) ── */
+.rp-operator-badge{font-family:var(--mono);font-size:0.66rem;padding:0.3rem 0.6rem;border-radius:7px;border:1px solid var(--border-strong);background:var(--panel-2);color:var(--ink);cursor:pointer;margin-left:0.4rem;user-select:none;}
+.rp-operator-badge:hover{border-color:var(--gold-bright);color:var(--gold-bright);}
+.rp-operator-badge.set{color:var(--muted);font-style:italic;}
+.rp-operator-badge.set:hover{color:var(--gold-bright);}
+.rp-actor-chip{font-family:var(--mono);font-size:0.62rem;padding:0.28em 0.7em;border-radius:100px;cursor:pointer;border:1px solid var(--border-strong);color:var(--muted);background:var(--panel-2);user-select:none;}
+.rp-actor-chip:hover{color:var(--ink);border-color:var(--border-strong);}
+.rp-actor-chip.active{color:var(--gold-bright);border-color:var(--gold-bright);background:color-mix(in srgb,var(--gold-bright) 10%,transparent);}
+.rp-actor-chip.disabled{opacity:0.45;cursor:not-allowed;}
+.rp-actor-mine{color:var(--gold-bright);}
+.rp-actor-mine b{color:var(--gold-bright);}
+.rp-actor-other{color:var(--muted);}
+.rp-actor-other b{color:var(--ink);font-weight:500;}
+.rp-audit-row-mine{background:color-mix(in srgb,var(--gold-bright) 6%,transparent);}
+
+/* ── C4: Incidents sub-tab ── */
+.rp-incidents-kpis{display:grid;grid-template-columns:repeat(4,1fr);gap:0.6rem;margin:0.5rem 0 0.8rem;}
+.rp-inc-kpi{background:var(--panel-2);border:1px solid var(--border-strong);border-radius:8px;padding:0.55rem 0.7rem;display:flex;flex-direction:column;gap:0.15rem;}
+.rp-inc-kpi .lab{font-family:var(--mono);font-size:0.6rem;color:var(--muted);text-transform:uppercase;letter-spacing:0.05em;display:flex;align-items:center;gap:0.35rem;}
+.rp-inc-kpi .v{font-family:var(--mono);font-size:1.1rem;color:var(--ink);font-weight:600;}
+.rp-inc-kpi .meta{font-family:var(--mono);font-size:0.58rem;color:var(--muted);}
+.pk-kpi-dot{width:8px;height:8px;border-radius:50%;background:var(--muted);display:inline-block;}
+.pk-kpi-dot.ok{background:var(--ok);box-shadow:0 0 6px var(--ok);}
+.pk-kpi-dot.warn{background:var(--warn,#e0a23a);box-shadow:0 0 6px var(--warn,#e0a23a);}
+.pk-kpi-dot.bad{background:var(--bad);box-shadow:0 0 6px var(--bad);}
+.rp-inc-table{width:100%;border-collapse:collapse;font-family:var(--mono);font-size:0.66rem;}
+.rp-inc-table th{text-align:left;padding:0.45rem 0.6rem;color:var(--muted);font-size:0.58rem;text-transform:uppercase;letter-spacing:0.05em;border-bottom:1px solid var(--glass-border);background:var(--panel-2);position:sticky;top:0;z-index:1;}
+.rp-inc-table td{padding:0.45rem 0.6rem;border-bottom:1px solid rgba(255,255,255,0.04);vertical-align:middle;}
+.rp-inc-table tr.rp-inc-sev-bad td{background:rgba(220,80,80,0.06);}
+.rp-inc-table tr.rp-inc-sev-warn td{background:rgba(224,162,58,0.05);}
+.rp-inc-sev{display:inline-block;padding:0.05em 0.55em;border-radius:5px;font-size:0.6rem;font-weight:600;text-transform:uppercase;letter-spacing:0.04em;}
+.rp-inc-sev-bad .rp-inc-sev{color:var(--bad);border:1px solid color-mix(in srgb,var(--bad) 40%,transparent);background:rgba(220,80,80,0.10);}
+.rp-inc-sev-warn .rp-inc-sev{color:var(--warn,#e0a23a);border:1px solid color-mix(in srgb,var(--warn,#e0a23a) 40%,transparent);background:rgba(224,162,58,0.10);}
+.rp-inc-sev-info .rp-inc-sev{color:var(--muted);border:1px solid var(--border-strong);background:var(--panel-2);}
+.rp-inc-id{color:var(--muted);font-size:0.6rem;margin-left:0.4rem;}
+.rp-inc-acked-tag{display:inline-block;padding:0.05em 0.5em;border-radius:5px;font-size:0.58rem;color:var(--ok);border:1px solid color-mix(in srgb,var(--ok) 40%,transparent);background:rgba(60,180,110,0.12);margin-left:0.5rem;}
+.rp-inc-acked-row td{opacity:0.7;font-style:italic;}
+.rp-btn.ghost{background:transparent;}
+@media (max-width:900px){ .rp-incidents-kpis{grid-template-columns:repeat(2,1fr);} }
+
+/* ── C2: speaker roundtrip test panel ── */
+#pk-spk-test{font-family:var(--mono);}
+#pk-spk-test-stateline{font-family:var(--mono);font-size:0.62rem;color:var(--muted);}
+.pk-spk-result{margin-top:0.45rem;padding:0.55rem 0.65rem;border-radius:8px;border:1px solid var(--border-strong);background:var(--panel-2);font-family:var(--mono);font-size:0.66rem;}
+.pk-spk-result.ok{border-color:var(--ok);background:rgba(60,180,110,0.10);}
+.pk-spk-result.bad{border-color:var(--bad);background:rgba(220,80,80,0.10);}
+.pk-spk-banner{font-weight:600;font-size:0.78rem;margin-bottom:0.35rem;}
+.pk-spk-banner.ok{color:var(--ok);}
+.pk-spk-banner.bad{color:var(--bad);}
+.pk-spk-meta{display:grid;grid-template-columns:repeat(2,1fr);gap:0.2rem 0.6rem;margin:0.3rem 0;}
+.pk-spk-meta>div{display:flex;justify-content:space-between;gap:0.4rem;}
+.pk-spk-meta .l{color:var(--muted);text-transform:uppercase;font-size:0.58rem;letter-spacing:0.04em;}
+.pk-spk-meta .v{color:var(--ink);font-size:0.66rem;}
+.pk-spk-err{color:var(--bad);font-style:italic;margin-top:0.2rem;}
+.pk-spk-diag{color:var(--muted);font-style:italic;margin-top:0.3rem;font-size:0.6rem;line-height:1.4;}
+.pk-spk-hist-head{font-family:var(--mono);font-size:0.6rem;color:var(--muted);text-transform:uppercase;letter-spacing:0.04em;margin-top:0.5rem;padding-top:0.4rem;border-top:1px solid var(--glass-border);}
+.pk-spk-hist-row{display:grid;grid-template-columns:1em 4em 4em 8em 1fr;gap:0.45rem;padding:2px 0;font-family:var(--mono);font-size:0.62rem;align-items:baseline;}
+.pk-spk-mark{font-weight:700;}
+.pk-spk-when{color:var(--muted);}
+.pk-spk-freq{color:var(--ink);}
+.pk-spk-peak{color:var(--ink);}
+
+/* ── C1: per-robot shell section in the Park drawer ── */
+.pk-shell-row{display:flex;align-items:center;gap:0.4rem;flex-wrap:wrap;}
+.pk-shell-lbl{font-family:var(--mono);font-size:0.62rem;color:var(--muted);text-transform:uppercase;letter-spacing:0.04em;}
+.pk-shell-sel,.pk-shell-num{font-family:var(--mono);font-size:0.7rem;background:var(--panel-solid);border:1px solid var(--glass-border);color:var(--ink);border-radius:6px;padding:0.32rem 0.5rem;min-width:0;}
+.pk-shell-sel{flex:1;max-width:220px;}
+.pk-shell-num{width:5.5em;}
+.pk-shell-out-wrap{margin-top:0.4rem;border:1px solid var(--glass-border);border-radius:8px;background:var(--panel-solid);overflow:hidden;}
+.pk-shell-out{font-family:var(--mono);font-size:0.66rem;line-height:1.45;color:var(--ink);max-height:240px;overflow-y:auto;padding:0.45rem 0.6rem;background:#0c0e14;}
+.pk-shell-out:focus{outline:none;}
+.pk-shell-line{display:flex;gap:0.55rem;align-items:flex-start;padding:1px 0;}
+.pk-shell-ts{color:var(--muted);flex-shrink:0;font-size:0.58rem;padding-top:0.15em;min-width:3.6em;}
+.pk-shell-text{white-space:pre-wrap;word-break:break-word;flex:1;}
+.pk-shell-status{color:var(--gold-bright,var(--gold));font-style:italic;}
+.pk-shell-header{color:var(--muted);}
+.pk-shell-stderr{color:var(--bad);}
+.pk-shell-stdout{color:var(--ink);}
+.pk-shell-input{color:var(--info);font-weight:600;}
+.pk-shell-input .pk-shell-text::before{content:'$ ';color:var(--muted);font-weight:400;}
+#pk-shell-stateline{font-family:var(--mono);font-size:0.62rem;color:var(--muted);}
+#pk-shell-cmd{font-family:var(--mono);font-size:0.7rem;background:var(--panel-solid);border:1px solid var(--glass-border);color:var(--ink);border-radius:6px;padding:0.4rem 0.55rem;}
+
 /* ── RoboPark Sessions & Telemetry — sub-tab control room ── */
 .rp-subtabs{display:flex;gap:0.15rem;padding:0 1.1rem;border-bottom:1px solid var(--glass-border);
   background:var(--panel);-webkit-backdrop-filter:blur(18px) saturate(1.3);backdrop-filter:blur(18px) saturate(1.3);
@@ -497,6 +580,7 @@ button.act:disabled{opacity:0.5;cursor:default;}
   </div>
   <div class="chips" id="summary"></div>
   <button class="themebtn" id="theme">Theme</button>
+  <span class="rp-operator-badge set" id="rp-operator-badge" role="button" tabindex="0">set operator</span>
 </header>
 
 <div class="tabs">
@@ -562,6 +646,7 @@ button.act:disabled{opacity:0.5;cursor:default;}
   <!-- Sub-tab nav bar (sticky, just under main tabs) -->
   <div class="rp-subtabs" id="rp-subtabs" role="tablist">
     <button class="rp-subtab active" data-sub="overview" id="rpsbtn-overview" role="tab" aria-selected="true">Overview</button>
+    <button class="rp-subtab" data-sub="incidents" id="rpsbtn-incidents" role="tab" aria-selected="false">Incidents <span class="badge" id="rps-incidents-badge">0</span></button>
     <button class="rp-subtab" data-sub="live" id="rpsbtn-live" role="tab" aria-selected="false">Live Sessions <span class="badge" id="rps-live-badge">0</span></button>
     <button class="rp-subtab" data-sub="history" id="rpsbtn-history" role="tab" aria-selected="false">History</button>
     <button class="rp-subtab" data-sub="audit" id="rpsbtn-audit" role="tab" aria-selected="false">Audit Log</button>
@@ -654,12 +739,13 @@ button.act:disabled{opacity:0.5;cursor:default;}
       <span class="rp-cat-chip" data-cat="voice" id="rp-audit-cat-voice">🗣 Voice</span>
       <span class="rp-cat-chip" data-cat="character" id="rp-audit-cat-character">🎭 Character</span>
       <div style="flex:1;"></div>
+      <span class="rp-actor-chip" id="rp-audit-byme" data-actor="" title="Filter the audit log to actions attributed to the current operator">👤 by me</span>
       <button class="rp-btn" id="rp-audit-refresh">↻ Refresh</button>
     </div>
     <div class="rp-tbl-wrap" id="rp-audit-wrap">
       <table class="rp-audit-table" id="rp-audit-table">
         <thead><tr>
-          <th>Time</th><th>Category</th><th>Action</th><th>Target</th><th>Details</th><th>Source</th>
+          <th>Time</th><th>Category</th><th>Action</th><th>Target</th><th>Details</th><th>Operator</th>
         </tr></thead>
         <tbody id="rp-audit-tbody"></tbody>
       </table>
@@ -667,6 +753,64 @@ button.act:disabled{opacity:0.5;cursor:default;}
     <div class="rp-tbl-empty" id="rp-audit-empty" style="display:none;">No audit events match the current filter.</div>
   </div>
 
+  <!-- ═══ Incidents ═══ -->
+  <div class="rp-sub" id="rp-sub-incidents">
+    <div class="rp-section-h">Liveness <span class="meta" id="rp-incidents-meta">polling mesh + scheduler + devices</span></div>
+    <div class="rp-incidents-kpis" id="rp-incidents-kpis">
+      <div class="rp-inc-kpi" id="rp-inc-kpi-mesh">
+        <div class="lab">mesh <span class="pk-kpi-dot" id="rp-inc-kpi-mesh-dot"></span></div>
+        <div class="v" id="rp-inc-kpi-mesh-v">—</div>
+        <div class="meta" id="rp-inc-kpi-mesh-meta">awaiting first poll…</div>
+      </div>
+      <div class="rp-inc-kpi" id="rp-inc-kpi-sched">
+        <div class="lab">scheduler <span class="pk-kpi-dot" id="rp-inc-kpi-sched-dot"></span></div>
+        <div class="v" id="rp-inc-kpi-sched-v">—</div>
+        <div class="meta" id="rp-inc-kpi-sched-meta">awaiting first poll…</div>
+      </div>
+      <div class="rp-inc-kpi" id="rp-inc-kpi-cam">
+        <div class="lab">cameras <span class="pk-kpi-dot" id="rp-inc-kpi-cam-dot"></span></div>
+        <div class="v" id="rp-inc-kpi-cam-v">—</div>
+        <div class="meta" id="rp-inc-kpi-cam-meta">awaiting first session…</div>
+      </div>
+      <div class="rp-inc-kpi" id="rp-inc-kpi-prod">
+        <div class="lab">production mode <span class="pk-kpi-dot" id="rp-inc-kpi-prod-dot"></span></div>
+        <div class="v" id="rp-inc-kpi-prod-v">—</div>
+        <div class="meta" id="rp-inc-kpi-prod-meta">awaiting first poll…</div>
+      </div>
+    </div>
+
+    <div class="rp-section-h" style="margin-top:1rem;">Active incidents <span class="meta" id="rp-incidents-count">0</span></div>
+    <div class="rp-filterbar" style="gap:0.4rem;">
+      <span class="rp-cat-chip active" data-inc-sev="" id="rp-inc-sev-all">All</span>
+      <span class="rp-cat-chip" data-inc-sev="bad" id="rp-inc-sev-bad">✗ critical</span>
+      <span class="rp-cat-chip" data-inc-sev="warn" id="rp-inc-sev-warn">⚠ warning</span>
+      <span class="rp-cat-chip" data-inc-sev="info" id="rp-inc-sev-info">· info</span>
+      <div style="flex:1"></div>
+      <button class="rp-btn" id="rp-inc-refresh">↻ Refresh</button>
+    </div>
+    <div class="rp-tbl-wrap" id="rp-inc-wrap" style="display:none;">
+      <table class="rp-inc-table" id="rp-inc-table">
+        <thead><tr>
+          <th>Severity</th><th>Robot</th><th>Readiness</th><th>First seen</th><th>Duration</th><th>Message</th><th></th>
+        </tr></thead>
+        <tbody id="rp-inc-tbody"></tbody>
+      </table>
+    </div>
+    <div class="rp-empty" id="rp-inc-empty">no active incidents</div>
+
+    <div class="rp-section-h" style="margin-top:1rem;">Acknowledged <span class="meta" id="rp-inc-ack-count">0</span></div>
+    <div class="rp-tbl-wrap" id="rp-inc-ack-wrap" style="display:none;">
+      <table class="rp-inc-table" id="rp-inc-ack-table">
+        <thead><tr>
+          <th>Acked at</th><th>By</th><th>Robot</th><th>Readiness</th><th>Message</th><th></th>
+        </tr></thead>
+        <tbody id="rp-inc-ack-tbody"></tbody>
+      </table>
+    </div>
+    <div class="rp-empty" id="rp-inc-ack-empty">no acknowledged incidents</div>
+    <div class="pk-note" style="margin-top:0.5rem;">incidents are derived from /api/telemetry readiness codes. Acknowledgments are stored in your browser (localStorage) so multiple operators on different machines each get their own list. When a robot's readiness returns to "ready" or "in_session" the incident auto-closes.</div>
+  </div>
+
   <!-- ═══ Fleet ═══ -->
   <div class="rp-sub" id="rp-sub-fleet">
     <div class="rp-section-h">Robots <span class="meta" id="rp-fleet-meta">live + idle + offline</span></div>
@@ -832,6 +976,8 @@ button.act:disabled{opacity:0.5;cursor:default;}
   var QS = TOKEN ? ('?token=' + encodeURIComponent(TOKEN)) : '';
   var selfId = null, selected = null, lastSeq = -1, everOk = false;
   var rpReadOnly = false, pmBusy = false;
+  var lastSchedulerPollAt = 0;     // updated by pollRobopark() on every successful /api/telemetry fetch
+  var lastFedStatusAt = 0;         // updated by poll() on every successful /fed/status fetch
   var lastStatus = null;               // most recent /fed/status snapshot (shared with Park)
   var roboparkByName = {};             // robot_id -> latest telemetry row (shared with Park drawer)
   var schedulerDevicesById = {};       // enrolled device rows + camera/audio inventory
@@ -1084,13 +1230,91 @@ button.act:disabled{opacity:0.5;cursor:default;}
   // Scheduler-enrolled robots are not necessarily infinicode mesh peers. Add
   // them to the same Fleet/Park collection so a robot running only the
   // preview agent is still visible and selectable in the full dashboard.
+  // ── C3: Operator identity ──
+  // The dashboard is a single-tenant surface (one hub = one operator
+  // group), so we don't have full RBAC. We DO have a per-action
+  // attribution problem: when an operator clicks "End session" the
+  // audit log needs to know who. The scheduler logs whatever actor
+  // string it sees, so we set an X-Operator header on every API
+  // call from a name the operator typed into a profile modal on
+  // first load. The name is editable from the top bar.
+  var OPERATOR_NAME_KEY = 'rp-operator-name-v1';
+  var _operatorName = '';
+  function getOperatorName(){ return _operatorName || ''; }
+  function setOperatorName(name){
+    var s = String(name == null ? '' : name).trim();
+    if(s.length > 64) s = s.slice(0, 64);
+    _operatorName = s;
+    try{ if(s) localStorage.setItem(OPERATOR_NAME_KEY, s); else localStorage.removeItem(OPERATOR_NAME_KEY); }catch(e){}
+    updateOperatorBadge();
+  }
+  function loadOperatorName(){
+    try{ _operatorName = (localStorage.getItem(OPERATOR_NAME_KEY) || '').trim(); }catch(e){ _operatorName = ''; }
+    updateOperatorBadge();
+    return _operatorName;
+  }
+  function operatorHeaders(){
+    var n = getOperatorName();
+    return n ? {'X-Operator': n} : {};
+  }
+  function updateOperatorBadge(){
+    var el = $('rp-operator-badge');
+    if(!el) return;
+    var n = getOperatorName();
+    el.textContent = n ? n : 'set operator';
+    el.classList.toggle('set', !n);
+    el.title = n ? ('Operator: '+n+' — click to change') : 'Click to set your operator name (used in the audit log)';
+  }
+  function openOperatorModal(){
+    var cur = getOperatorName();
+    var html = ''
+      + '<div class="rp-field"><label>Your name (operator)</label>'
+      +   '<input id="rp-operator-input" maxlength="64" value="'+esc(cur)+'" placeholder="e.g. Jane Operator" autocomplete="off">'
+      + '</div>'
+      + '<div class="rp-field"><label style="font-weight:400;color:var(--muted)">'
+      +   'This name is sent to the scheduler as the <code>X-Operator</code> header on every action you take (End session, Restart, Set production mode, etc.) '
+      +   'and recorded in the audit log. Stored only in your browser\'s localStorage — not on the server. '
+      +   'Use a real name so postmortems can answer "who clicked that?".'
+      + '</label></div>';
+    showModal('Operator identity', html);
+    setTimeout(function(){
+      var inp = $('rp-operator-input');
+      if(inp){ try{ inp.focus(); inp.select(); }catch(e){} }
+    }, 30);
+  }
+  // First-load prompt: shown if the operator hasn't set a name yet.
+  // They can dismiss (no name → actions still work, audit shows
+  // "operator") or set one.
+  function maybePromptOperator(){
+    if(getOperatorName()) return;
+    setTimeout(openOperatorModal, 800);
+  }
+  // click-to-edit from the top bar; the top bar element id is
+  // "rp-operator-badge" — wired up near the end of the IIFE.
+  document.addEventListener('click', function(e){
+    var b = e.target.closest && e.target.closest('#rp-operator-badge');
+    if(b){ e.preventDefault(); openOperatorModal(); }
+  });
+  // Save on Enter / Save-button in the modal
+  document.addEventListener('keydown', function(e){
+    if(e.target && e.target.id === 'rp-operator-input' && e.key === 'Enter'){
+      e.preventDefault();
+      var v = e.target.value;
+      setOperatorName(v);
+      closeModal();
+      showOut(v ? ('Operator set to: '+v+' — your actions will be attributed to '+v+' in the audit log')
+                : 'Operator name cleared — actions will be attributed to "operator"');
+    }
+  });
+
   function getJson(path){
     // QS is "?token=..."; a path that already carries its own query string
     // (e.g. "/robopark/api/sessions?active_only=false&limit=200") needs "&"
     // instead, or the token param lands inside an invalid second "?" and
     // the request goes out unauthenticated -> 401.
     var url = path + (path.indexOf('?')>=0 ? QS.replace('?','&') : QS);
-    return fetch(url, {cache:'no-store'}).then(function(r){
+    var headers = operatorHeaders();
+    return fetch(url, {cache:'no-store', headers: headers}).then(function(r){
       if(!r.ok) throw new Error(path+' '+r.status);
       return r.json();
     });
@@ -1139,17 +1363,23 @@ button.act:disabled{opacity:0.5;cursor:default;}
       return r.json();
     }).then(function(s){
        return mergeSchedulerRobots(s.nodes||[]).then(function(nodes){
-         s.nodes = nodes;
-         everOk = true; setLive(true); lastStatus = s;
+          s.nodes = nodes;
+          everOk = true; setLive(true); lastStatus = s; lastFedStatusAt = Date.now();
          if(!selfId && s.self) selfId = s.self.nodeId;
          if(s.control){ rpReadOnly = !!s.control.readonly; applyReadOnly(); }
          updateHw(s);
-         renderSummary(s);
-         renderFleet(s.nodes||[]);
-         renderHw(s.hardware);
-         renderFeed(s.activity||[]);
-         Park.onStatus(s);
-       });
+          renderSummary(s);
+          renderFleet(s.nodes||[]);
+          renderHw(s.hardware);
+          renderFeed(s.activity||[]);
+          Park.onStatus(s);
+          // C4: keep the incidents sub-tab's KPI + count fresh even when
+          // the user isn't actively on it. The full incident list is
+          // re-rendered only when the tab is open (cheap, since the
+          // active-poll already pulls /api/telemetry at 3s).
+          if(typeof renderLivenessKpis === 'function') renderLivenessKpis();
+          if(rpSubTab === 'incidents' && typeof renderIncidents === 'function') renderIncidents();
+        });
     }).catch(function(){ setLive(false); });
   }
 
@@ -1235,9 +1465,10 @@ button.act:disabled{opacity:0.5;cursor:default;}
 
   function rpAction(method, path, body){
     if(rpReadOnly){ showOut('This node is read-only — restart the hub with --token to enable control actions.'); return Promise.resolve(null); }
+    var headers = Object.assign({}, body?{'content-type':'application/json'}:{}, operatorHeaders());
     return fetch(path+QS, {
       method: method, cache:'no-store',
-      headers: body?{'content-type':'application/json'}:undefined,
+      headers: headers,
       body: body?JSON.stringify(body):undefined
     }).then(function(r){
       if(r.status===403){ return r.json().then(function(j){ if(j&&j.readonly){ rpReadOnly=true; applyReadOnly(); } throw new Error(j&&j.error||'forbidden'); }); }
@@ -1769,11 +2000,14 @@ button.act:disabled{opacity:0.5;cursor:default;}
     loadCharacterPresets();
     loadVoiceStacks();
     loadParkSlots();
-    fetch('/robopark/api/telemetry'+QS, {cache:'no-store'}).then(function(r){ return r.json(); }).then(function(d){
+    fetch('/robopark/api/telemetry'+QS, {cache:'no-store', headers: operatorHeaders()}).then(function(r){ return r.json(); }).then(function(d){
+      lastSchedulerPollAt = Date.now();
       var grid = $('rp-grid'), totals = $('rp-totals');
       // stash per-robot rows so the Park drawer can show live session stats
       roboparkByName = {};
       robotsFrom(d).forEach(function(x){ roboparkByName[robotName(x)] = x; if(x.name) roboparkByName[x.name] = x; });
+      // C4: also feed lastRobots for the Incidents sub-tab
+      lastRobots = robotsFrom(d) || [];
       // push the same map into the Park so the canvas can color robots
       // by live/talking/waiting/ended status. updateTelemetry also
       // re-derives the readiness → status mapping for every node.
@@ -1908,12 +2142,13 @@ button.act:disabled{opacity:0.5;cursor:default;}
       s.classList.toggle('active', s.id==='rp-sub-'+name);
     }
     // stop every sub-tab interval, then start only the active one
-    var names = ['overview','live','history','audit','fleet','setup'];
+    var names = ['overview','incidents','live','history','audit','fleet','setup'];
     for(var k=0;k<names.length;k++){
       var n=names[k];
       if(rpIntervals[n]){ clearInterval(rpIntervals[n]); rpIntervals[n]=null; }
     }
     if(name==='overview'){ pollOverview(); rpIntervals.overview = setInterval(pollOverview, 4000); }
+    if(name==='incidents'){ pollIncidents(); rpIntervals.incidents = setInterval(pollIncidents, 4000); }
     if(name==='live'){ pollLiveSessions(); startLiveAutoRefresh(); }
     if(name==='history'){ rpHistoryPage=0; pollHistory(); }
     if(name==='audit'){ pollAuditLog(); rpIntervals.audit = setInterval(pollAuditLog, 6000); }
@@ -1933,7 +2168,7 @@ button.act:disabled{opacity:0.5;cursor:default;}
     var h=String(location.hash||'').replace('#','');
     var m = h.match(/^robopark\\/(.+)$/);
     var initial = (m && m[1]) ? m[1] : 'overview';
-    if(['overview','live','history','audit','fleet','setup'].indexOf(initial)<0) initial='overview';
+    if(['overview','incidents','live','history','audit','fleet','setup'].indexOf(initial)<0) initial='overview';
     setRpSubTab(initial);
   }
 
@@ -2363,10 +2598,16 @@ button.act:disabled{opacity:0.5;cursor:default;}
   })();
 
   // ── Audit Log sub-tab ──
-  var rpAuditFilter = { category: '' };
+  var rpAuditFilter = { category: '', operator: '' };
   var rpAuditLast = [];
   function pollAuditLog(){
-    var qs = rpAuditFilter.category ? ('?category='+encodeURIComponent(rpAuditFilter.category)+'&limit=200') : '?limit=200';
+    var parts = [];
+    if(rpAuditFilter.category) parts.push('category='+encodeURIComponent(rpAuditFilter.category));
+    parts.push('limit=200');
+    // Note: we filter by operator client-side (the /api/history endpoint
+    // doesn't take an actor= filter). The filter chip toggles a
+    // post-fetch predicate in renderAuditLog.
+    var qs = '?' + parts.join('&');
     getJson('/robopark/api/history'+qs).then(function(rows){
       renderAuditLog(Array.isArray(rows)?rows:[]);
     }).catch(function(){
@@ -2375,11 +2616,33 @@ button.act:disabled{opacity:0.5;cursor:default;}
     });
   }
   function renderAuditLog(rows){
+    // Apply the "by me" filter (client-side; the API doesn't take an
+    // actor= filter today). The chip toggles rpAuditFilter.operator.
+    var myName = (getOperatorName()||'').toLowerCase();
+    var meOnly = !!rpAuditFilter.operator;
+    if(meOnly && myName){
+      rows = rows.filter(function(r){ return String(r.actor||'').toLowerCase() === myName; });
+    }
+    // keep the chip label in sync with the current operator
+    var chip = $('rp-audit-byme');
+    if(chip){
+      if(!myName){
+        chip.classList.add('disabled');
+        chip.title = 'Set your operator name (click the badge in the top bar) to use this filter';
+      } else {
+        chip.classList.remove('disabled');
+        chip.title = 'Showing only actions attributed to "'+myName+'"';
+        chip.textContent = '👤 by me ('+myName+')';
+      }
+      chip.classList.toggle('active', meOnly);
+    }
     var tbody=$('rp-audit-tbody'), empty=$('rp-audit-empty'), wrap=$('rp-audit-wrap');
     if(!rows.length){
       tbody.innerHTML='';
       wrap.style.display='none';
       empty.style.display='block';
+      if(meOnly) empty.textContent = 'no audit events attributed to '+myName+' in this window';
+      else empty.textContent = 'no audit events yet';
       return;
     }
     empty.style.display='none';
@@ -2392,17 +2655,24 @@ button.act:disabled{opacity:0.5;cursor:default;}
       var act = ev.action || '—';
       var ent = (ev.entity_type||'')+(ev.entity_id?(' · '+ev.entity_id):'');
       var det = ev.details || '';
-      var src = ev.actor || '—';
+      var actor = ev.actor || '—';
       if(typeof det==='object') det = JSON.stringify(det);
       var detShort = String(det);
       if(detShort.length>80) detShort = detShort.slice(0,77)+'…';
-      html += '<tr data-idx="'+i+'">'
+      // Highlight rows attributed to the current operator so they pop
+      var isMine = myName && String(actor).toLowerCase() === myName;
+      var actorCellCls = isMine ? 'rp-actor-mine' : 'rp-actor-other';
+      var rowCls = isMine ? 'rp-audit-row-mine' : '';
+      html += '<tr class="'+rowCls+'" data-idx="'+i+'">'
         + '<td><span class="t-rel">'+esc(rpFmtRelative(ts))+'</span><span class="t-abs">'+esc(rpFmtAbs(ts))+'</span></td>'
         + '<td><span class="rp-end-badge">'+esc(rpCategoryIcon(cat))+' '+esc(cat)+'</span></td>'
         + '<td><b>'+esc(act)+'</b></td>'
         + '<td>'+esc(ent||'—')+'</td>'
         + '<td style="max-width:32ch;overflow:hidden;text-overflow:ellipsis;white-space:nowrap;" title="'+esc(String(det).replace(/"/g,'&quot;'))+'">'+esc(detShort)+'</td>'
-        + '<td>'+esc(src)+'</td>'
+        + '<td class="'+actorCellCls+'" title="'+esc(actor)+'">'
+        +   (isMine ? '👤 ' : '')
+        +   '<b>'+esc(actor)+'</b>'
+        + '</td>'
         + '</tr>';
     }
     tbody.innerHTML = html;
@@ -2438,6 +2708,11 @@ button.act:disabled{opacity:0.5;cursor:default;}
       })(chips[i]);
     }
     var rb=$('rp-audit-refresh'); if(rb) rb.addEventListener('click', pollAuditLog);
+    var byme=$('rp-audit-byme'); if(byme) byme.addEventListener('click', function(){
+      if(!getOperatorName()){ openOperatorModal(); return; }
+      rpAuditFilter.operator = rpAuditFilter.operator ? '' : getOperatorName();
+      pollAuditLog();
+    });
     var tb=$('rp-audit-tbody'); if(tb) tb.addEventListener('click', function(e){
       var tr = e.target.closest ? e.target.closest('tr') : null; if(!tr) return;
       var idx = parseInt(tr.getAttribute('data-idx'),10);
@@ -2445,6 +2720,291 @@ button.act:disabled{opacity:0.5;cursor:default;}
     });
   })();
 
+  // ── C4: Incidents sub-tab ──
+  // Surfaces every active incident (any robot whose readiness_code is
+  // in a non-ready set) and lets an operator acknowledge each one.
+  // Acknowledgements live in localStorage, scoped per browser, so
+  // multiple operators on different machines each keep their own
+  // "in-progress" list — but every Ack also writes an audit event
+  // through the operator-actor middleware (C3), so the action shows
+  // up in the central history log under the operator's name.
+  //
+  // Severity map per readiness_code:
+  //   stuck_session | stale_session | join_timeout | device_missing |
+  //   server_unavailable | heartbeat_stale   →  critical (bad)
+  //   production_off | robot_production_off | production mode off  →  warning
+  //   not_joined | unknown | anything else that isn't 'ready' / 'in_session' →  info
+  var INCIDENT_SEVERITY = {
+    stuck_session:       'bad',
+    stale_session:       'bad',
+    join_timeout:        'bad',
+    device_missing:      'bad',
+    server_unavailable:  'bad',
+    heartbeat_stale:     'bad',
+    production_off:      'warn',
+    robot_production_off:'warn',
+    not_joined:          'info',
+    unknown:             'info',
+  };
+  var INCIDENT_BAD_CODES = ['stuck_session','stale_session','join_timeout','device_missing','server_unavailable','heartbeat_stale'];
+  var INCIDENT_ACK_KEY = 'rp-incident-acks-v1';
+  // Active incidents: derived live from the most recent telemetry
+  // snapshot in lastRobots. Acknowledged list is in localStorage,
+  // keyed by robotId|readiness so the same robot entering
+  // the same state again reopens the incident.
+  var _incidentSevFilter = '';
+  var _incidentAcks = {};   // key -> {t, by}
+  function _loadIncidentAcks(){
+    try{
+      var raw = localStorage.getItem(INCIDENT_ACK_KEY);
+      _incidentAcks = raw ? JSON.parse(raw) : {};
+    }catch(e){ _incidentAcks = {}; }
+  }
+  function _saveIncidentAcks(){
+    try{ localStorage.setItem(INCIDENT_ACK_KEY, JSON.stringify(_incidentAcks)); }catch(e){}
+  }
+  function _incidentKey(robotId, code){ return robotId + '|' + code; }
+  function _ackIncident(robotId, code, readinessMessage){
+    var key = _incidentKey(robotId, code);
+    _incidentAcks[key] = { t: Date.now(), by: getOperatorName() || 'operator', message: readinessMessage || '' };
+    _saveIncidentAcks();
+    // Mirror the ack to the audit log so it's visible centrally too.
+    // rpAction carries the X-Operator header (C3), so the audit row
+    // will be attributed to the current operator.
+    rpAction('POST','/robopark/api/incidents/ack',{ robot_id: robotId, code: code, message: readinessMessage || '' })
+      .catch(function(e){ /* soft-fail; the local ack still stands */ });
+    renderIncidents();
+  }
+  function _unackIncident(robotId, code){
+    var key = _incidentKey(robotId, code);
+    delete _incidentAcks[key];
+    _saveIncidentAcks();
+    renderIncidents();
+  }
+  // Compute the list of currently-active incidents from the last
+  // /api/telemetry snapshot. Includes nodes that aren't even in the
+  // fleet (id starts with 'pad:') — we still want to know if a slot
+  // is empty for an extended period.
+  function _collectActiveIncidents(){
+    var list = [];
+    var seen = {};
+    for(var i=0;i<(lastRobots||[]).length;i++){
+      var r = lastRobots[i];
+      var code = r.readiness_code || (r.connected ? 'ready' : 'not_joined');
+      if(!code || code === 'ready' || code === 'in_session') continue;
+      var sev = INCIDENT_SEVERITY[code] || 'info';
+      if(sev === 'info' && code === 'not_joined') continue;  // too noisy; skip
+      var key = _incidentKey(r.id, code);
+      seen[key] = true;
+      // find first-seen: persisted across reloads via a parallel map
+      var firstSeenKey = 'rp-incident-first-seen-v1';
+      var firstSeen = {};
+      try{ firstSeen = JSON.parse(localStorage.getItem(firstSeenKey) || '{}'); }catch(e){}
+      var fs = firstSeen[key] || Date.now();
+      if(!firstSeen[key]){ firstSeen[key] = Date.now(); try{ localStorage.setItem(firstSeenKey, JSON.stringify(firstSeen)); }catch(e){} }
+      list.push({
+        robotId: r.id,
+        robotName: r.name || r.id,
+        code: code,
+        severity: sev,
+        message: r.readiness_message || code,
+        firstSeen: fs,
+        ack: _incidentAcks[key] || null,
+      });
+    }
+    // prune stale firstSeen entries so localStorage doesn't grow forever
+    try{
+      var fsAll = JSON.parse(localStorage.getItem('rp-incident-first-seen-v1') || '{}');
+      var keys = Object.keys(fsAll);
+      var pruned = {};
+      for(var k=0;k<keys.length;k++){ if(seen[keys[k]]) pruned[keys[k]] = fsAll[keys[k]]; }
+      localStorage.setItem('rp-incident-first-seen-v1', JSON.stringify(pruned));
+    }catch(e){}
+    return list;
+  }
+  function renderIncidents(){
+    var incidents = _collectActiveIncidents();
+    // severity filter
+    if(_incidentSevFilter){
+      incidents = incidents.filter(function(i){ return i.severity === _incidentSevFilter; });
+    }
+    // sort: bad → warn → info, then by firstSeen desc
+    var sevOrder = { bad: 0, warn: 1, info: 2 };
+    incidents.sort(function(a,b){
+      var so = (sevOrder[a.severity]||9) - (sevOrder[b.severity]||9);
+      if(so !== 0) return so;
+      return b.firstSeen - a.firstSeen;
+    });
+    var tbody = $('rp-inc-tbody'), empty = $('rp-inc-empty'), wrap = $('rp-inc-wrap');
+    var badge = $('rps-incidents-badge');
+    var total = _collectActiveIncidents().length;
+    if(badge) badge.textContent = total;
+    if(!incidents.length){
+      if(tbody) tbody.innerHTML = '';
+      if(wrap) wrap.style.display='none';
+      if(empty){ empty.style.display='block'; empty.textContent = total ? 'no incidents match this filter' : 'no active incidents — every robot is ready'; }
+    } else {
+      if(empty) empty.style.display='none';
+      if(wrap) wrap.style.display='block';
+      var html = '';
+      for(var i=0;i<incidents.length;i++){
+        var inc = incidents[i];
+        var sevClass = inc.severity === 'bad' ? 'rp-inc-sev-bad' : (inc.severity === 'warn' ? 'rp-inc-sev-warn' : 'rp-inc-sev-info');
+        var sevMark = inc.severity === 'bad' ? '✗' : (inc.severity === 'warn' ? '⚠' : '·');
+        var dur = fmtDur(Date.now() - inc.firstSeen);
+        var fsRel = rpFmtRelative(inc.firstSeen);
+        var fsAbs = rpFmtAbs(inc.firstSeen);
+        var ackTag = inc.ack ? '<span class="rp-inc-acked-tag" title="acked by '+esc(inc.ack.by)+' at '+rpFmtAbs(inc.ack.t)+'">✓ acked</span>' : '';
+        html += '<tr class="'+sevClass+'">'
+          + '<td><span class="rp-inc-sev">'+sevMark+' '+esc(inc.severity)+'</span></td>'
+          + '<td><b>'+esc(inc.robotName)+'</b> <span class="rp-inc-id">'+esc(inc.robotId)+'</span></td>'
+          + '<td><span class="mono">'+esc(inc.code)+'</span></td>'
+          + '<td><span class="t-rel">'+esc(fsRel)+'</span><span class="t-abs">'+esc(fsAbs)+'</span></td>'
+          + '<td>'+esc(dur)+'</td>'
+          + '<td>'+esc(inc.message)+' '+ackTag+'</td>'
+          + '<td style="white-space:nowrap;">';
+        if(!inc.ack){
+          html += '<button class="rp-btn" data-inc-act="ack" data-robot="'+esc(inc.robotId)+'" data-code="'+esc(inc.code)+'">Acknowledge</button>';
+        } else {
+          html += '<button class="rp-btn ghost" data-inc-act="unack" data-robot="'+esc(inc.robotId)+'" data-code="'+esc(inc.code)+'" title="'+esc('Acked by '+inc.ack.by+' at '+rpFmtAbs(inc.ack.t))+'">undo</button>';
+        }
+        html += '</td></tr>';
+      }
+      tbody.innerHTML = html;
+    }
+    // also render the acknowledged list
+    renderIncidentsAcknowledged();
+  }
+  function renderIncidentsAcknowledged(){
+    var acks = Object.keys(_incidentAcks).map(function(k){
+      var parts = k.split('|');
+      return { key: k, robotId: parts[0], code: parts.slice(1).join('|'), t: _incidentAcks[k].t, by: _incidentAcks[k].by, message: _incidentAcks[k].message };
+    });
+    // drop acks whose underlying incident has cleared
+    var stillActive = {};
+    var active = _collectActiveIncidents();
+    for(var i=0;i<active.length;i++){ stillActive[active[i].robotId+'|'+active[i].code] = true; }
+    acks = acks.filter(function(a){ return !stillActive[a.key]; });
+    // sort newest-first
+    acks.sort(function(a,b){ return b.t - a.t; });
+    var tbody = $('rp-inc-ack-tbody'), empty = $('rp-inc-ack-empty'), wrap = $('rp-inc-ack-wrap');
+    var counter = $('rp-inc-ack-count');
+    if(counter) counter.textContent = acks.length;
+    if(!acks.length){
+      if(tbody) tbody.innerHTML = '';
+      if(wrap) wrap.style.display='none';
+      if(empty) empty.style.display='block';
+      return;
+    }
+    if(empty) empty.style.display='none';
+    if(wrap) wrap.style.display='block';
+    var html = '';
+    for(var i=0;i<acks.length;i++){
+      var a = acks[i];
+      html += '<tr class="rp-inc-acked-row">'
+        + '<td><span class="t-rel">'+esc(rpFmtRelative(a.t))+'</span><span class="t-abs">'+esc(rpFmtAbs(a.t))+'</span></td>'
+        + '<td><b>'+esc(a.by)+'</b></td>'
+        + '<td>'+esc(a.robotId)+'</td>'
+        + '<td><span class="mono">'+esc(a.code)+'</span></td>'
+        + '<td>'+esc(a.message||'')+'</td>'
+        + '<td style="white-space:nowrap;"><button class="rp-btn ghost" data-inc-act="unack" data-robot="'+esc(a.robotId)+'" data-code="'+esc(a.code)+'">remove</button></td>'
+        + '</tr>';
+    }
+    tbody.innerHTML = html;
+  }
+  function fmtDur(ms){
+    if(ms < 0) ms = 0;
+    var s = Math.floor(ms/1000);
+    if(s < 60) return s+'s';
+    var m = Math.floor(s/60);
+    if(m < 60) return m+'m '+(s%60)+'s';
+    var h = Math.floor(m/60);
+    if(h < 24) return h+'h '+(m%60)+'m';
+    var d = Math.floor(h/24);
+    return d+'d '+(h%24)+'h';
+  }
+  var lastRobots = [];
+  function pollIncidents(){
+    // KPI tiles: per-source liveness.
+    renderLivenessKpis();
+    // Reuse the most recent telemetry snapshot; if the user is on
+    // the incidents tab, also kick a fresh fetch.
+    if(rpSubTab === 'incidents'){
+      fetch('/robopark/api/telemetry'+QS, {cache:'no-store', headers: operatorHeaders()}).then(function(r){ return r.json(); }).then(function(d){
+        lastRobots = robotsFrom(d) || [];
+        renderIncidents();
+      }).catch(function(){ renderIncidents(); });
+    } else {
+      renderIncidents();
+    }
+  }
+  function renderLivenessKpis(){
+    var now = Date.now();
+    // 1. mesh (/fed/status) — lastStatus is set by /fed/status poll;
+    //    poll() writes to lastStatus whenever the fetch resolves.
+    var mesh = (typeof lastStatus === 'object' && lastStatus) ? lastStatus : null;
+    var meshT = mesh ? (lastFedStatusAt || null) : null;
+    paintKpi('mesh', !!mesh, meshT, meshT ? fmtDur(now - meshT) + ' ago' : 'no successful poll', meshT ? (now - meshT < 15000 ? 'ok' : (now - meshT < 30000 ? 'warn' : 'bad')) : 'bad');
+    // 2. scheduler (/robopark/api/telemetry) — track on a successful fetch
+    var schedT = lastSchedulerPollAt || null;
+    paintKpi('sched', !!schedT, schedT, schedT ? fmtDur(now - schedT) + ' ago' : 'no successful poll', schedT ? (now - schedT < 8000 ? 'ok' : (now - schedT < 20000 ? 'warn' : 'bad')) : 'bad');
+    // 3. cameras — at least one camera source is "ok" across the fleet
+    var camOk = 0, camTotal = 0;
+    for(var i=0;i<lastRobots.length;i++){ var r=lastRobots[i]; if(r.id && r.id.indexOf('pad:')!==0){ camTotal++; if(r.connected && r.current_session_id) camOk++; } }
+    var camDot = camTotal === 0 ? 'warn' : (camOk > 0 ? 'ok' : 'warn');
+    paintKpi('cam', camTotal>0, camTotal, camOk + ' of ' + camTotal + ' have a live session', camDot);
+    // 4. production mode — read the global + per-device effective flag
+    var pmOn = (typeof settings !== 'undefined' && settings && settings.production_mode === true);
+    var pmDot = pmOn ? 'ok' : 'warn';
+    paintKpi('prod', pmOn, pmOn ? 'on' : 'off', pmOn ? 'global switch on' : 'global switch OFF — incidents will be informational only', pmDot);
+  }
+  function paintKpi(name, ok, value, meta, severity){
+    var v = $('rp-inc-kpi-'+name+'-v');
+    var m = $('rp-inc-kpi-'+name+'-meta');
+    var d = $('rp-inc-kpi-'+name+'-dot');
+    if(v) v.textContent = (value === null || value === undefined) ? '—' : String(value);
+    if(m) m.textContent = meta || '';
+    if(d){
+      d.className = 'pk-kpi-dot '+(severity === 'ok' ? 'ok' : severity === 'warn' ? 'warn' : severity === 'bad' ? 'bad' : '');
+    }
+  }
+  // hook the acknowledge / undo buttons (delegated, idempotent)
+  document.addEventListener('click', function(e){
+    var b = e.target.closest && e.target.closest('[data-inc-act]');
+    if(!b) return;
+    if(rpReadOnly){ showOut('read-only node'); return; }
+    var act = b.getAttribute('data-inc-act');
+    var rid = b.getAttribute('data-robot');
+    var code = b.getAttribute('data-code');
+    if(!rid || !code) return;
+    if(act === 'ack'){
+      // find the message from the current incidents list
+      var msg = '';
+      var list = _collectActiveIncidents();
+      for(var i=0;i<list.length;i++){ if(list[i].robotId === rid && list[i].code === code){ msg = list[i].message; break; } }
+      _ackIncident(rid, code, msg);
+    } else if(act === 'unack'){
+      _unackIncident(rid, code);
+    }
+  });
+  // severity-filter chips
+  (function(){
+    var chips = document.querySelectorAll('[data-inc-sev]');
+    for(var i=0;i<chips.length;i++){
+      (function(c){
+        c.addEventListener('click', function(){
+          for(var j=0;j<chips.length;j++) chips[j].classList.remove('active');
+          c.classList.add('active');
+          _incidentSevFilter = c.getAttribute('data-inc-sev') || '';
+          renderIncidents();
+        });
+      })(chips[i]);
+    }
+    var rb = $('rp-inc-refresh'); if(rb) rb.addEventListener('click', pollIncidents);
+  })();
+  // Load the ack list from localStorage on first run.
+  _loadIncidentAcks();
+
   // ── Fleet sub-tab (uses the existing #rp-grid) ──
   // The Fleet sub-tab reuses the existing #rp-grid render in pollRobopark().
   // We add sparklines by overlaying on top of the existing cards.
@@ -4966,6 +5526,272 @@ button.act:disabled{opacity:0.5;cursor:default;}
         } else { age.textContent=''; }
       }
     }
+
+    // ── C1: Per-robot shell section ──
+    // Lets an operator tail service logs and run a small allowlist of
+    // diagnostic commands (uptime, free -m, ps aux, etc.) on the robot
+    // itself, without leaving the dashboard or opening a terminal. The
+    // round trip is:
+    //   1. dashboard POSTs /robopark/api/robots/{id}/shell/{tail,exec}
+    //   2. scheduler queues a row in shell_requests
+    //   3. robot supervisor's next status-report poll receives the row
+    //      in its commands field, runs the request on a background
+    //      thread, and POSTs the result to /api/devices/{id}/supervisor-output
+    //   4. dashboard long-polls /robopark/api/robots/{id}/shell/wait/{rid}
+    //      with an 8s budget and renders the result.
+    //
+    // The buffer is per-robot, bounded at 5000 lines, persists across
+    // drawer open/close. Service picker is populated from the supervisor
+    // report (the same list shown in the section above).
+    var SHELL_MAX_LINES = 5000;
+    var _shellBuffers = {};   // device_id -> {lines:[{t, kind, text}], lastReqId, lastService}
+
+    function _shellBuf(robotId){
+      if(!_shellBuffers[robotId]) _shellBuffers[robotId] = { lines:[], lastReqId:null, lastService:'' };
+      return _shellBuffers[robotId];
+    }
+    function _shellAppend(robotId, kind, text){
+      var buf = _shellBuf(robotId);
+      var now = Date.now();
+      var lineText = String(text == null ? '' : text);
+      // split on newlines so a multi-line result renders as separate rows
+      var parts = lineText.split(/\r?\n/);
+      for(var i=0;i<parts.length;i++){
+        if(!parts[i] && i===parts.length-1) continue;  // skip trailing empty
+        buf.lines.push({ t: now, kind: kind, text: parts[i] });
+      }
+      while(buf.lines.length > SHELL_MAX_LINES) buf.lines.shift();
+    }
+    function _shellStatus(robotId, status, detail){
+      _shellAppend(robotId, 'status', status + (detail ? (' · '+detail) : ''));
+    }
+    function _renderShellBuffer(robotId){
+      var out = $('pk-shell-out'); if(!out) return;
+      var buf = _shellBuf(robotId);
+      var html = '';
+      for(var i=0;i<buf.lines.length;i++){
+        var ln = buf.lines[i];
+        var cls = ln.kind === 'status' ? 'pk-shell-status'
+                : ln.kind === 'stderr' ? 'pk-shell-stderr'
+                : ln.kind === 'header' ? 'pk-shell-header'
+                : ln.kind === 'input'  ? 'pk-shell-input'
+                : 'pk-shell-stdout';
+        var hh = (new Date(ln.t)).toTimeString().slice(0,8);
+        html += '<div class="pk-shell-line '+cls+'">'
+              +   '<span class="pk-shell-ts">'+hh+'</span>'
+              +   '<span class="pk-shell-text">'+esc(ln.text)+'</span>'
+              + '</div>';
+      }
+      out.innerHTML = html;
+      // auto-scroll if the user hasn't scrolled up
+      if(out.__autoscroll !== false){
+        out.scrollTop = out.scrollHeight;
+      }
+    }
+    // Build the markup for the Shell section. Pulls the list of
+    // available services from the supervisor_status report (if any),
+    // otherwise shows a placeholder.
+    function buildShellSection(robotId){
+      var device = robotId ? schedulerDeviceByName[robotName({name:robotId, id:robotId})] || null : null;
+      // Try to read the device row by id directly
+      try{
+        for(var k in schedulerDevicesById){
+          if(k === robotId){ device = schedulerDevicesById[k]; break; }
+        }
+      }catch(e){}
+      var services = device && device.supervisor_status;
+      var svcOptions = '';
+      if(services && services.length){
+        for(var i=0;i<services.length;i++){
+          svcOptions += '<option value="'+esc(services[i].name)+'">'+esc(services[i].name)+'</option>';
+        }
+      } else {
+        svcOptions = '<option value="">— services will appear once the supervisor reports —</option>';
+      }
+      return ''
+        + '<div class="pk-sect" id="pk-shell-sect">'
+        +   '<h4>💻 shell <span class="pk-note" style="font-weight:400;margin-left:0.4rem;">per-robot logs &amp; diagnostics</span></h4>'
+        +   '<div class="pk-shell-row">'
+        +     '<label class="pk-shell-lbl">Service</label>'
+        +     '<select id="pk-shell-svc" class="pk-shell-sel" data-robot="'+esc(robotId||'')+'">'+svcOptions+'</select>'
+        +     '<label class="pk-shell-lbl" style="margin-left:0.5rem;">Lines</label>'
+        +     '<input type="number" id="pk-shell-tail" class="pk-shell-num" value="200" min="10" max="2000" step="10">'
+        +     '<button type="button" class="rp-btn" id="pk-shell-fetch" data-robot="'+esc(robotId||'')+'" style="margin-left:0.4rem;">Tail logs</button>'
+        +   '</div>'
+        +   '<div class="pk-shell-out-wrap">'
+        +     '<div class="pk-shell-out" id="pk-shell-out" tabindex="0" role="log" aria-label="robot shell output"><div class="pk-shell-status">— shell idle —</div></div>'
+        +   '</div>'
+        +   '<div class="pk-shell-row" style="margin-top:0.4rem;">'
+        +     '<input type="text" id="pk-shell-cmd" list="pk-shell-cmd-list" placeholder="uptime, free, df, ps, systemctl status preview_agent, journalctl -u preview_agent, …" autocomplete="off" style="flex:1;min-width:0;">'
+        +     '<datalist id="pk-shell-cmd-list">'
+        +       '<option value="uptime"><option value="free"><option value="df"><option value="ps"><option value="uname"><option value="hostname"><option value="ip"><option value="ss">'
+        +       '<option value="systemctl-status"><option value="journalctl"><option value="ls-logs"><option value="os-release">'
+        +     '</datalist>'
+        +     '<button type="button" class="rp-btn primary" id="pk-shell-run" data-robot="'+esc(robotId||'')+'" style="margin-left:0.4rem;">Run</button>'
+        +     '<button type="button" class="rp-btn" id="pk-shell-autoscroll" data-robot="'+esc(robotId||'')+'" title="Auto-scroll to the newest line" style="margin-left:0.4rem;">⤓ auto</button>'
+        +     '<button type="button" class="rp-btn" id="pk-shell-clear" data-robot="'+esc(robotId||'')+'" style="margin-left:0.4rem;">Clear</button>'
+        +   '</div>'
+        +   '<div class="pk-shell-status" id="pk-shell-stateline" style="margin-top:0.35rem;">idle</div>'
+        +   '<div class="pk-note" id="pk-shell-help" style="margin-top:0.35rem;">'
+        +     'Run a pre-approved diagnostic on this robot. Output is captured by robot_supervisor.py (8s budget, 64KB cap, allowlisted commands only).'
+        +   '</div>'
+        + '</div>';
+    }
+    // Wire the shell section's events. Bound once per buildDrawer call,
+    // but the inputs are re-created each time so we re-bind here.
+    function _bindShellSection(n){
+      if(n.kind !== 'robot') return;
+      var robotId = schedId(n);
+      if(!robotId) return;
+      var $out = $('pk-shell-out');
+      if($out && $out.__autoscroll === undefined) $out.__autoscroll = true;
+      // initial render of any previously-captured output for this robot
+      _renderShellBuffer(robotId);
+      var svcSel = $('pk-shell-svc');
+      if(svcSel && !svcSel.value && svcSel.options.length){
+        // pick the first enabled-looking service
+        for(var i=0;i<svcSel.options.length;i++){
+          if(svcSel.options[i].value){ svcSel.selectedIndex = i; break; }
+        }
+      }
+      var fetchBtn = $('pk-shell-fetch');
+      if(fetchBtn) fetchBtn.addEventListener('click', function(){
+        var svc = ($('pk-shell-svc')||{}).value || '';
+        var lines = parseInt(($('pk-shell-tail')||{}).value, 10) || 200;
+        _shellTail(robotId, svc, lines);
+      });
+      var runBtn = $('pk-shell-run');
+      if(runBtn) runBtn.addEventListener('click', function(){
+        var inp = $('pk-shell-cmd');
+        if(!inp) return;
+        var raw = (inp.value || '').trim();
+        if(!raw) return;
+        // parse "name param1=val1 param2=val2" into the params object
+        var parts = raw.split(/\s+/);
+        var name = parts.shift();
+        var params = {};
+        for(var i=0;i<parts.length;i++){
+          var eq = parts[i].indexOf('=');
+          if(eq < 0) continue;
+          params[parts[i].slice(0, eq)] = parts[i].slice(eq+1);
+        }
+        // convenience: if the name is systemctl-status or journalctl,
+        // auto-fill <name> from the selected service
+        if((name === 'systemctl-status' || name === 'journalctl' || name === 'tail') && !params.name && !params.path){
+          var svc = ($('pk-shell-svc')||{}).value || '';
+          if(name === 'tail' && svc) params.path = svc + '.log';
+          else if(svc) params.name = svc;
+        }
+        if(name === 'tail' && !params.n) params.n = String(parseInt(($('pk-shell-tail')||{}).value, 10) || 200);
+        // log the command itself
+        _shellAppend(robotId, 'input', '$ '+raw);
+        inp.value = '';
+        _shellExec(robotId, name, params);
+      });
+      var cmdInp = $('pk-shell-cmd');
+      if(cmdInp) cmdInp.addEventListener('keydown', function(ev){
+        if(ev.key === 'Enter'){ ev.preventDefault(); var b=$('pk-shell-run'); if(b) b.click(); }
+      });
+      var autoBtn = $('pk-shell-autoscroll');
+      if(autoBtn) autoBtn.addEventListener('click', function(){
+        var o = $('pk-shell-out'); if(!o) return;
+        o.__autoscroll = !o.__autoscroll;
+        autoBtn.classList.toggle('primary', !!o.__autoscroll);
+        if(o.__autoscroll) o.scrollTop = o.scrollHeight;
+      });
+      if(autoBtn) autoBtn.classList.add('primary');
+      var clearBtn = $('pk-shell-clear');
+      if(clearBtn) clearBtn.addEventListener('click', function(){
+        _shellBuffers[robotId] = { lines:[], lastReqId:null, lastService:'' };
+        _renderShellBuffer(robotId);
+        _setShellStatus(robotId, 'cleared');
+      });
+      // user scrolled up disables autoscroll
+      if($out) $out.addEventListener('scroll', function(){
+        var atBottom = ($out.scrollHeight - $out.scrollTop - $out.clientHeight) < 8;
+        $out.__autoscroll = atBottom;
+        var ab = $('pk-shell-autoscroll'); if(ab) ab.classList.toggle('primary', atBottom);
+      });
+    }
+    function _setShellStatus(robotId, text, kind){
+      var el = $('pk-shell-stateline'); if(!el) return;
+      el.textContent = text;
+      el.style.color = kind === 'error' ? 'var(--bad)' : kind === 'ok' ? 'var(--ok)' : 'var(--muted)';
+    }
+    // POST /api/robots/{id}/shell/tail and long-poll the result.
+    function _shellTail(robotId, service, lines){
+      _setShellStatus(robotId, 'tailing '+service+' (waiting for robot…)');
+      _shellAppend(robotId, 'status', '—— tail '+service+'.log, last '+lines+' lines ——');
+      rpAction('POST','/robopark/api/robots/'+encodeURIComponent(robotId)+'/shell/tail',{service:service, params:{lines:lines}})
+        .then(function(q){
+          return _shellWaitForResult(robotId, q.request_id, q.device_id || robotId, service, 'tail');
+        })
+        .catch(function(e){ _setShellStatus(robotId, 'tail failed: '+e.message, 'error'); _shellAppend(robotId, 'status', '✗ tail failed: '+e.message); });
+    }
+    function _shellExec(robotId, name, params){
+      _setShellStatus(robotId, 'running '+name+' (waiting for robot…)');
+      rpAction('POST','/robopark/api/robots/'+encodeURIComponent(robotId)+'/shell/exec',{params:{name:name, params:params}})
+        .then(function(q){
+          return _shellWaitForResult(robotId, q.request_id, q.device_id || robotId, '', name);
+        })
+        .catch(function(e){ _setShellStatus(robotId, 'exec failed: '+e.message, 'error'); _shellAppend(robotId, 'status', '✗ exec failed: '+e.message); });
+    }
+    // Long-poll the result endpoint. The scheduler blocks up to 8s
+    // before returning timed_out: true; we just respect that and
+    // give the operator a clear "still waiting" line in the output.
+    function _shellWaitForResult(robotId, requestId, deviceId, service, label){
+      var url = '/robopark/api/robots/'+encodeURIComponent(robotId)+'/shell/wait/'+encodeURIComponent(requestId)+'?timeout=8';
+      var pollOnce = function(){
+        return getJson(url).then(function(r){
+          if(r && r.completed){
+            var result = r.result || {};
+            _renderShellResult(robotId, result, label);
+            return;
+          }
+          // Not done yet — fall through to manual polling
+          throw new Error('not_ready');
+        });
+      };
+      return pollOnce().catch(function(){
+        // Manual poll loop (covers the case where /wait timed out but
+        // the robot is still chewing). Cap at 12s of fallback polling.
+        var deadline = Date.now() + 12000;
+        var tick = function(){
+          if(Date.now() > deadline){
+            _setShellStatus(robotId, '⚠ '+label+' did not complete in 20s — robot may be offline', 'error');
+            _shellAppend(robotId, 'status', '✗ '+label+' did not complete in 20s');
+            return;
+          }
+          getJson('/robopark/api/robots/'+encodeURIComponent(robotId)+'/shell/result/'+encodeURIComponent(requestId))
+            .then(function(r){
+              if(r && r.completed){ _renderShellResult(robotId, r.result || {}, label); return; }
+              setTimeout(tick, 500);
+            })
+            .catch(function(){ setTimeout(tick, 800); });
+        };
+        tick();
+      });
+    }
+    function _renderShellResult(robotId, result, label){
+      if(!result || !result.ok){
+        var err = (result && result.error) || '(no response)';
+        _setShellStatus(robotId, '✗ '+label+' failed: '+err, 'error');
+        _shellAppend(robotId, 'stderr', '✗ '+err);
+        _renderShellBuffer(robotId);
+        return;
+      }
+      var exit = (result.exit_code === 0) ? '✓ exit 0' : ('exit '+result.exit_code);
+      _setShellStatus(robotId, exit, result.exit_code === 0 ? 'ok' : 'error');
+      if(result.stdout){ _shellAppend(robotId, 'stdout', result.stdout); }
+      if(result.stderr){ _shellAppend(robotId, 'stderr', result.stderr); }
+      if(result.truncated){ _shellAppend(robotId, 'status', '⚠ output truncated to '+SHELL_OUTPUT_LIMIT+' bytes'); }
+      if(result.exit_code !== 0){ _shellAppend(robotId, 'status', '—— '+label+' finished with exit '+result.exit_code+' ——'); }
+      else { _shellAppend(robotId, 'status', '—— '+label+' finished ——'); }
+      _renderShellBuffer(robotId);
+    }
+    // 64KB cap mirrors the robot's SHELL_OUTPUT_MAX_BYTES
+    var SHELL_OUTPUT_LIMIT = 64 * 1024;
+
     function buildDrawer(n){
       var b=$('pk-body');
       if(n.kind==='robot' && !n.connected){
@@ -5022,18 +5848,32 @@ button.act:disabled{opacity:0.5;cursor:default;}
             +'<div class="pk-ctl" style="margin-top:0.5rem"><button class="rp-btn" id="pk-golive" data-robot="'+esc(n.name)+'">▶ Go live</button><span class="pk-note" id="pk-golivenote" style="margin:0"></span></div>'
             +'<label class="pk-prodtoggle"><input type="checkbox" id="pk-prodmode"'+(devForPm.production_mode?' checked':'')+'><span>Production mode — continuous motion-triggered loop, camera always live</span></label>')
         + sect('🎙 microphone','<div class="pk-meter"><span class="lab">input</span><div class="pk-bars" id="pk-micbars"></div><span class="pk-val" id="pk-micval">—</span></div><div class="pk-note" id="pk-micstate">awaiting robot audio plugin</div>')
-        + sect('🔊 speaker','<canvas class="pk-wave" id="pk-spkwave" width="360" height="32"></canvas><div class="pk-meter"><span class="lab">output</span><div class="pk-bars" id="pk-spkbars"></div><span class="pk-val" id="pk-spkval">—</span></div><div class="pk-note" id="pk-spkstate">awaiting robot audio plugin</div>')
+        + sect('🔊 speaker','<canvas class="pk-wave" id="pk-spkwave" width="360" height="32"></canvas><div class="pk-meter"><span class="lab">output</span><div class="pk-bars" id="pk-spkbars"></div><span class="pk-val" id="pk-spkval">—</span></div><div class="pk-note" id="pk-spkstate">TTS plays on the robot speaker — use “Test speaker” below to round-trip a tone and confirm the audio path</div>'
+          + '<div class="rp-form" id="pk-spk-test" style="grid-template-columns:1fr 1fr;gap:0.4rem;margin-top:0.55rem;padding:0.55rem;border-color:var(--border-strong);">'
+          +   '<div class="rp-field"><label>Frequency</label><select id="pk-spk-freq"><option value="500">500 Hz (low)</option><option value="1000" selected>1000 Hz (1 kHz reference)</option><option value="2000">2000 Hz (presence)</option><option value="3000">3000 Hz (clarity)</option></select></div>'
+          +   '<div class="rp-field"><label>Duration</label><select id="pk-spk-dur"><option value="0.4">0.4 s</option><option value="0.6" selected>0.6 s</option><option value="1.0">1.0 s</option></select></div>'
+          +   '<div style="grid-column:1/-1;display:flex;gap:0.4rem;align-items:center;">'
+          +     '<button class="rp-btn primary" id="pk-spk-runtest" data-robot="'+esc(schedId(n))+'">▶ Test speaker</button>'
+          +     '<span class="pk-note" id="pk-spk-test-stateline" style="margin:0">awaiting test</span>'
+          +   '</div>'
+          +   '<div style="grid-column:1/-1;" id="pk-spk-test-result"></div>'
+          +   '<div style="grid-column:1/-1;" id="pk-spk-test-history"></div>'
+          + '</div>')
         + sect('📊 hardware','<div class="pk-hwgrid"><div><div class="l">load</div><div class="track"><div class="fill" id="pk-hw-load"></div></div></div><div><div class="l">status</div><div class="track"><div class="fill" id="pk-hw-conn" style="background:'+(n.connected?'var(--ok)':'var(--muted)')+'"></div></div></div></div><div class="pk-note">remote node — full CPU/mem telemetry shows on the node itself</div>')
         + sect('🗓 session telemetry','<div class="pk-grid2"><div class="pk-kv"><div class="v" id="pk-tv-trig">—</div><div class="l">triggers</div></div><div class="pk-kv"><div class="v" id="pk-tv-sess">—</div><div class="l">sessions</div></div><div class="pk-kv"><div class="v" id="pk-tv-lat">—</div><div class="l">avg latency</div></div><div class="pk-kv"><div class="v" id="pk-tv-drop">—</div><div class="l">drop rate</div></div></div>')
-        + sect('⚙ controls','<div class="pk-ctl"><button class="rp-btn danger" id="pk-end" data-robot="'+esc(n.name)+'">End session</button><button class="rp-btn" id="pk-follow">Follow run</button></div><div class="pk-note">end-session is live via the scheduler; cam/mic/speaker fill in as the robot plugin publishes them</div>')
-        + sect('🩺 robot services','<div id="pk-svc-list" class="pk-svc-list"><div class="pk-note">waiting for supervisor report…</div></div><div class="pk-note" id="pk-svc-age" style="margin-top:0.35rem;"></div><div class="rp-field" style="margin-top:0.55rem;"><label>Quick run (on the robot, from packages/robopark/scheduler)</label><input id="pk-svc-clicmd" readonly value="python robot_supervisor.py"></div><button class="rp-btn" id="pk-svc-clicmd-copy" style="margin-top:0.35rem;">📋 Copy command</button>')
-        + sect('🎭 character / voice','<div class="pk-note" id="pk-eff-note" style="margin-bottom:0.45rem;">loading effective config…</div><div class="rp-field"><label>Character preset</label><select class="rp-char" id="pk-eff-char" data-robot="'+esc(schedId(n))+'">'+effPresetOptions+'</select></div><div class="rp-field"><label>Voice stack</label><select class="rp-voice" id="pk-eff-voice" data-robot="'+esc(schedId(n))+'">'+effVoiceOptions+'</select></div><button class="rp-btn" id="pk-eff-save" data-robot="'+esc(schedId(n))+'" style="margin-top:0.35rem;">Set up on this robot</button>');
+          + sect('⚙ controls','<div class="pk-ctl"><button class="rp-btn danger" id="pk-end" data-robot="'+esc(n.name)+'">End session</button><button class="rp-btn" id="pk-follow">Follow run</button></div><div class="pk-note">end-session is live via the scheduler; cam/mic/speaker fill in as the robot plugin publishes them</div>')
+          + sect('🩺 robot services','<div id="pk-svc-list" class="pk-svc-list"><div class="pk-note">waiting for supervisor report…</div></div><div class="pk-note" id="pk-svc-age" style="margin-top:0.35rem;"></div><div class="rp-field" style="margin-top:0.55rem;"><label>Quick run (on the robot, from packages/robopark/scheduler)</label><input id="pk-svc-clicmd" readonly value="python robot_supervisor.py"></div><button class="rp-btn" id="pk-svc-clicmd-copy" style="margin-top:0.35rem;">📋 Copy command</button>')
+          + buildShellSection(schedId(n))
+          + sect('🎭 character / voice','<div class="pk-note" id="pk-eff-note" style="margin-bottom:0.45rem;">loading effective config…</div><div class="rp-field"><label>Character preset</label><select class="rp-char" id="pk-eff-char" data-robot="'+esc(schedId(n))+'">'+effPresetOptions+'</select></div><div class="rp-field"><label>Voice stack</label><select class="rp-voice" id="pk-eff-voice" data-robot="'+esc(schedId(n))+'">'+effVoiceOptions+'</select></div><button class="rp-btn" id="pk-eff-save" data-robot="'+esc(schedId(n))+'" style="margin-top:0.35rem;">Set up on this robot</button>');
          b.innerHTML += sect('Camera + audio devices','<div class="rp-field"><label>Search devices</label><input id="pk-device-search" placeholder="camera, USB, microphone, HDMI..." autocomplete="off"></div><div class="rp-field"><label>Camera input</label><select id="pk-video-device"></select></div><div class="rp-field"><label>Microphone input</label><select id="pk-audio-input"></select></div><div class="rp-field"><label>Speaker / output inventory</label><select id="pk-audio-output"></select></div><div class="rp-field"><label>Preset greeting phrases <span class="pk-note">one per line, cached per voice</span></label><textarea id="pk-greeting-phrases" rows="3" placeholder="Hi, I am Jaguar! / Welcome to RoboPark."></textarea></div><button class="rp-btn" id="pk-device-save" style="margin-top:0.35rem">Save device selection + greetings</button><div class="pk-note" id="pk-device-note">waiting for robot heartbeat inventory</div>');
          refreshDeviceSelectors(n);
          b.innerHTML += '<div class="pk-ctl" style="margin-top:0.5rem"><button class="rp-btn danger" id="pk-recover" data-robot="'+esc(n.name)+'">Recover robot</button><span class="pk-note" style="margin:0">clears stale sessions and queued triggers for this robot</span></div>';
          var deviceSearch=$('pk-device-search'); if(deviceSearch) deviceSearch.addEventListener('input', function(){ refreshDeviceSelectors(n); });
          var deviceSave=$('pk-device-save'); if(deviceSave) deviceSave.addEventListener('click', function(){ saveDeviceSelectors(n); });
          startCam(n); startMeters(n); loadEffectiveConfig(schedId(n)); refreshSupervisorPanel(n);
+        _bindShellSection(n);
+        _spkTestRenderHistory(schedId(n));
+        var runSpkTest = $('pk-spk-runtest'); if(runSpkTest) runSpkTest.addEventListener('click', function(){ if(rpReadOnly){ showOut('read-only node'); return; } runSpeakerTest(n); });
         var gl=$('pk-golive'); if(gl) gl.addEventListener('click', function(){ if(rpReadOnly){ showOut('read-only node'); return; } goLive(n); });
         var pm=$('pk-prodmode'); if(pm) pm.addEventListener('change', function(){ if(rpReadOnly){ pm.checked=!pm.checked; showOut('read-only node'); return; } setProductionMode(n, pm.checked); });
         var svcCopy=$('pk-svc-clicmd-copy'); if(svcCopy) svcCopy.addEventListener('click', function(){ var i=$('pk-svc-clicmd'); i.select(); try{document.execCommand('copy');}catch(e){} showOut('command copied — run it on the robot itself'); });
@@ -5190,15 +6030,183 @@ button.act:disabled{opacity:0.5;cursor:default;}
         for(var i=0;i<mi.length;i++){ var on=i<lvl*mi.length; mi[i].style.height=(3+(on?lvl*13:0))+'px'; mi[i].style.background=on?(i<mi.length*0.7?'var(--ok)':i<mi.length*0.9?'var(--warn)':'var(--bad)'):'var(--glass-border)'; }
         set('pk-micval', micAnalyser?Math.round(lvl*100)+'%':'—');
         set('pk-micstate', micAnalyser?(lvl>0.12?'live · hearing audio':'live · quiet'):'no live mic track');
-        // SPEAKER — the Pi plays TTS out its own speaker; it is not published as a
-        // track, so report status honestly instead of inventing a level.
-        for(var j=0;j<si.length;j++){ si[j].style.height='3px'; si[j].style.background='var(--glass-border)'; }
-        set('pk-spkval','—'); set('pk-spkstate','TTS plays on the robot speaker (not streamed)');
-        if(swx){ swx.clearRect(0,0,sw.width,sw.height); swx.strokeStyle='rgba(255,255,255,0.12)'; swx.lineWidth=1.4; swx.beginPath(); for(var x=0;x<sw.width;x++){ var yy=sw.height/2+Math.sin(x*0.1)*1.1; if(x===0)swx.moveTo(x,yy); else swx.lineTo(x,yy); } swx.stroke(); }
+        // SPEAKER — the Pi plays TTS out its own speaker; we don't get a
+        // published track, so the meter stays at "—" unless a speaker
+        // round-trip test is currently running. While a test plays, the
+        // bars animate to show the live mic picking up the tone.
+        var liveRms = window.__pkSpkLiveRms || 0;
+        var pass_ = window.__pkSpkLivePass;
+        for(var j=0;j<si.length;j++){
+          var on = j<liveRms*si.length;
+          si[j].style.height=(3+(on?liveRms*14:0))+'px';
+          si[j].style.background = on
+            ? (pass_===true ? 'var(--ok)'
+            :  pass_===false ? 'var(--bad)'
+            :  (j<si.length*0.7?'var(--ok)':j<si.length*0.9?'var(--warn)':'var(--bad)')))
+            : 'var(--glass-border)';
+        }
+        set('pk-spkval', liveRms>0 ? Math.round(liveRms*100)+'%' : '—');
+        if(swx){
+          swx.clearRect(0,0,sw.width,sw.height);
+          // baseline
+          swx.strokeStyle='rgba(255,255,255,0.10)';
+          swx.lineWidth=1; swx.beginPath(); swx.moveTo(0,sw.height/2); swx.lineTo(sw.width,sw.height/2); swx.stroke();
+          // recorded waveform (when we have one)
+          var wav = window.__pkSpkWaveform;
+          if(wav && wav.length){
+            swx.strokeStyle = pass_===true ? 'rgba(110,224,166,0.95)'
+                          : pass_===false ? 'rgba(220,80,80,0.95)'
+                          : 'rgba(255,214,112,0.85)';
+            swx.lineWidth=1.4; swx.beginPath();
+            for(var x=0;x<sw.width;x++){
+              var idx = Math.floor(x/wav.length * wav.length);
+              var v = wav[idx] || 0;
+              var yy = sw.height/2 - v * (sw.height*0.45);
+              if(x===0) swx.moveTo(x,yy); else swx.lineTo(x,yy);
+            }
+            swx.stroke();
+          } else {
+            swx.strokeStyle='rgba(255,255,255,0.18)'; swx.lineWidth=1.4; swx.beginPath();
+            for(var x=0;x<sw.width;x++){ var yy=sw.height/2+Math.sin(x*0.1)*1.1; if(x===0)swx.moveTo(x,yy); else swx.lineTo(x,yy); }
+            swx.stroke();
+          }
+        }
         meterRAF=requestAnimationFrame(loop);
       })();
     }
 
+    // ── C2: speaker roundtrip test ──
+    // Queues a "play tone + record mic" test on the robot's supervisor,
+    // polls the result, and renders a PASS/FAIL banner + a tiny
+    // history of the last 5 tests. The meter above mirrors the
+    // recorded RMS while the test is running.
+    var _spkTestHist = {};   // robotId -> [{t, pass, peak_db, ...}]
+
+    function _spkTestSetLive(robotId, data){
+      if(data && data.live){
+        window.__pkSpkLiveRms = data.rms || 0;
+        window.__pkSpkLivePass = data.pass;
+        window.__pkSpkWaveform = data.waveform || null;
+      } else {
+        window.__pkSpkLiveRms = 0;
+        window.__pkSpkLivePass = undefined;
+        window.__pkSpkWaveform = null;
+      }
+    }
+    function _spkTestRenderHistory(robotId){
+      var host = $('pk-spk-test-history'); if(!host) return;
+      var list = _spkTestHist[robotId] || [];
+      if(!list.length){
+        host.innerHTML = '<div class="pk-note" style="margin-top:0.3rem">no tests yet — press “Test speaker”</div>';
+        return;
+      }
+      var rows = list.map(function(t){
+        var cls = t.pass===true ? 'var(--ok)' : (t.pass===false ? 'var(--bad)' : 'var(--muted)');
+        var mark = t.pass===true ? '✓' : (t.pass===false ? '✗' : '·');
+        var when = new Date(t.t).toTimeString().slice(0,8);
+        var peak = t.peak_db != null ? (t.peak_db+' dB') : '—';
+        var freq = t.frequency != null ? (Math.round(t.frequency)+' Hz') : '—';
+        return '<div class="pk-spk-hist-row"><span class="pk-spk-mark" style="color:'+cls+'">'+mark+'</span>'
+          + '<span class="pk-spk-when">'+when+'</span>'
+          + '<span class="pk-spk-freq">'+freq+'</span>'
+          + '<span class="pk-spk-peak">peak '+peak+'</span>'
+          + (t.diagnostic ? '<span class="pk-spk-diag">'+esc(t.diagnostic)+'</span>' : '')
+          + '</div>';
+      }).join('');
+      host.innerHTML = '<div class="pk-spk-hist-head">last '+list.length+' tests</div>' + rows;
+    }
+    function _spkTestRenderResult(robotId, result){
+      var host = $('pk-spk-test-result'); if(!host) return;
+      if(!result){
+        host.innerHTML = '';
+        return;
+      }
+      if(!result.ok){
+        host.innerHTML = '<div class="pk-spk-result bad">'
+          + '<div class="pk-spk-banner">✗ round-trip test failed</div>'
+          + '<div class="pk-spk-err">'+esc(result.error||'(no response)')+'</div>'
+          + '</div>';
+        return;
+      }
+      var banner = result.pass
+        ? '<div class="pk-spk-banner ok">✓ speaker round-trip OK</div>'
+        : '<div class="pk-spk-banner bad">✗ no signal detected</div>';
+      var meta = '<div class="pk-spk-meta">'
+        + '<div><span class="l">peak</span><span class="v">'+esc(result.recorded_peak_db+' dB')+'</span></div>'
+        + '<div><span class="l">RMS</span><span class="v">'+esc(result.recorded_rms_db+' dB')+'</span></div>'
+        + '<div><span class="l">threshold</span><span class="v">'+esc(result.threshold_db+' dB')+'</span></div>'
+        + '<div><span class="l">frequency</span><span class="v">'+esc(Math.round(result.frequency)+' Hz')+'</span></div>'
+        + '<div><span class="l">duration</span><span class="v">'+esc(result.duration+' s')+'</span></div>'
+        + '<div><span class="l">latency</span><span class="v">'+esc(result.duration_ms+' ms')+'</span></div>'
+        + '<div><span class="l">output</span><span class="v">'+esc(result.output_device)+'</span></div>'
+        + '<div><span class="l">input</span><span class="v">'+esc(result.input_device)+'</span></div>'
+        + '</div>';
+      var diag = result.diagnostic ? '<div class="pk-spk-diag">'+esc(result.diagnostic)+'</div>' : '';
+      host.innerHTML = '<div class="pk-spk-result '+(result.pass?'ok':'bad')+'">'
+        + banner + meta + diag + '</div>';
+    }
+    function runSpeakerTest(n){
+      var robotId = schedId(n);
+      var btn = $('pk-spk-runtest'); if(btn){ btn.disabled = true; btn.textContent = 'testing…'; }
+      var status = $('pk-spk-test-stateline');
+      if(status) status.textContent = 'queued — waiting for robot…';
+      var freq = parseFloat(($('pk-spk-freq')||{}).value || '1000');
+      var dur = parseFloat(($('pk-spk-dur')||{}).value || '0.6');
+      // Animate the meter with a synthetic "during-test" peak so the
+      // operator sees something happen immediately while waiting for
+      // the real recording.
+      _spkTestSetLive(robotId, {live:true, rms: 0.45, pass: undefined, waveform: null});
+      rpAction('POST','/robopark/api/robots/'+encodeURIComponent(robotId)+'/shell/speaker-test',
+        {frequency: freq, duration: dur, amplitude: 0.6, threshold_db: -30})
+        .then(function(q){
+          // long-poll up to 8s, then fall back to 12s of result polling
+          if(status) status.textContent = 'playing tone + recording…';
+          return _shellWaitForResult(robotId, q.request_id, q.device_id || robotId, '', 'speaker-test');
+        })
+        .catch(function(e){
+          if(status) status.textContent = '✗ test failed: '+e.message;
+          _spkTestSetLive(robotId, {live:false});
+          _spkTestRenderResult(robotId, {ok:false, error:e.message});
+          if(btn){ btn.disabled = false; btn.textContent = '▶ Test speaker'; }
+        });
+    }
+    // Render a synthetic "during-test" waveform so the meter animates
+    // while waiting for the round-trip result. Called by startMeters
+    // to keep the bars interesting during the test.
+    function _spkTestMark(robotId, result){
+      // Append to history (cap at 5)
+      var list = _spkTestHist[robotId] || [];
+      list.unshift({
+        t: Date.now(),
+        pass: result && result.ok ? (result.pass===true) : null,
+        peak_db: result && result.recorded_peak_db != null ? result.recorded_peak_db : null,
+        frequency: result && result.frequency != null ? result.frequency : null,
+        diagnostic: result && result.diagnostic || (result && !result.ok ? result.error : null),
+      });
+      while(list.length > 5) list.pop();
+      _spkTestHist[robotId] = list;
+      _spkTestRenderHistory(robotId);
+    }
+    // Override the per-robot shell-result renderer for speaker_test so
+    // we also update the speaker-test panel + meter. _shellWaitForResult
+    // already calls _renderShellResult with the right shape.
+    var _origRenderShellResult = _renderShellResult;
+    _renderShellResult = function(robotId, result, label){
+      _origRenderShellResult(robotId, result, label);
+      if(label === 'speaker-test'){
+        _spkTestSetLive(robotId, {live:false});
+        _spkTestMark(robotId, result);
+        _spkTestRenderResult(robotId, result);
+        var status = $('pk-spk-test-stateline');
+        if(status){
+          if(!result || !result.ok){ status.textContent = '✗ test failed'; }
+          else if(result.pass){ status.textContent = '✓ pass · '+result.recorded_peak_db+' dB peak'; }
+          else { status.textContent = '✗ no signal — '+result.recorded_peak_db+' dB peak'; }
+        }
+        var btn = $('pk-spk-runtest'); if(btn){ btn.disabled = false; btn.textContent = '▶ Test speaker'; }
+      }
+    };
+
     function openDrawerForRobot(name){
       var key=String(name||'').toLowerCase(), id='pad:'+name, found=null;
       for(var i=0;i<nodes.length;i++){ var n=nodes[i]; if(n.kind==='robot' && ((n.name||'').toLowerCase()===key || n.telemKeys.some(function(t){ return t===key; }))){ found=n; break; } }
@@ -5220,6 +6228,11 @@ button.act:disabled{opacity:0.5;cursor:default;}
   loadCharacterPresets();
   loadVoiceStacks();
   setInterval(function(){ loadCharacterPresets(); loadVoiceStacks(); }, 12000);
+  // C3: load the operator name (or prompt for one) before the first
+  // tab opens, so the very first audit-attributed action already has
+  // the right name attached.
+  loadOperatorName();
+  maybePromptOperator();
   initTab();
 })();
 </script>