infinicode 2.8.38 → 2.8.39

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
@@ -53,6 +53,8 @@ export declare class MeshServer {
53
53
  start(): Promise<void>;
54
54
  /** Proxy a dashboard request to the RoboPark scheduler (product data). */
55
55
  private proxyToScheduler;
56
+ /** Proxy the scheduler's full Control Center and its same-origin assets. */
57
+ private proxySchedulerPath;
56
58
  /** Protected local runtime controls for the RoboPark operator dashboard. */
57
59
  private runtimeDocker;
58
60
  /** Push a frame to every connected stream subscriber. */
@@ -123,6 +123,39 @@ export class MeshServer {
123
123
  res.end(JSON.stringify({ ok: false, error: `scheduler unreachable: ${err instanceof Error ? err.message : String(err)}` }));
124
124
  });
125
125
  }
126
+ /** Proxy the scheduler's full Control Center and its same-origin assets. */
127
+ proxySchedulerPath(req, res, path) {
128
+ const base = this.opts.schedulerUrl.replace(/\/+$/, '');
129
+ const target = `${base}${path}${req.url?.includes('?') ? req.url.slice(req.url.indexOf('?')) : ''}`;
130
+ this.readBody(req)
131
+ .then(async (body) => {
132
+ const headers = {};
133
+ if (req.headers['content-type'])
134
+ headers['content-type'] = req.headers['content-type'];
135
+ if (this.opts.schedulerToken)
136
+ headers.authorization = `Bearer ${this.opts.schedulerToken}`;
137
+ const upstream = await fetch(target, {
138
+ method: req.method,
139
+ headers,
140
+ body: req.method === 'GET' || req.method === 'HEAD' ? undefined : body,
141
+ signal: AbortSignal.timeout(15_000),
142
+ });
143
+ const responseHeaders = {
144
+ 'content-type': upstream.headers.get('content-type') ?? 'application/octet-stream',
145
+ 'cache-control': upstream.headers.get('cache-control') ?? 'no-store',
146
+ };
147
+ const presented = this.presentedToken(req);
148
+ if (this.opts.token && presented) {
149
+ responseHeaders['set-cookie'] = `robopark_auth=${encodeURIComponent(presented)}; Path=/; SameSite=Lax`;
150
+ }
151
+ res.writeHead(upstream.status, responseHeaders);
152
+ res.end(await upstream.arrayBuffer());
153
+ })
154
+ .catch(err => {
155
+ res.writeHead(502, { 'content-type': 'text/plain; charset=utf-8' });
156
+ res.end(`scheduler unreachable: ${err instanceof Error ? err.message : String(err)}`);
157
+ });
158
+ }
126
159
  /** Protected local runtime controls for the RoboPark operator dashboard. */
127
160
  async runtimeDocker(req, res, path) {
128
161
  const send = (status, body) => {
@@ -195,6 +228,10 @@ export class MeshServer {
195
228
  if (t)
196
229
  return t;
197
230
  }
231
+ const cookie = req.headers.cookie ?? '';
232
+ const match = cookie.match(/(?:^|;\s*)robopark_auth=([^;]+)/);
233
+ if (match)
234
+ return decodeURIComponent(match[1]);
198
235
  return undefined;
199
236
  }
200
237
  authOk(req) {
@@ -215,17 +252,41 @@ export class MeshServer {
215
252
  return;
216
253
  }
217
254
  const remote = req.socket.remoteAddress ?? 'unknown';
218
- // Control dashboard (single self-contained page). Same-origin fetches carry
219
- // the ?token= through, so no CORS is opened.
255
+ // The scheduler owns the complete RoboPark Control Center. The mesh page is
256
+ // retained at /mesh as a diagnostics view, not as the primary operator UI.
220
257
  if (req.method === 'GET' && (path === '/' || path === '/ui' || path === '/dashboard')) {
258
+ if (this.opts.schedulerUrl) {
259
+ this.proxySchedulerPath(req, res, '/');
260
+ return;
261
+ }
221
262
  if (!this.opts.dashboardHtml) {
222
263
  res.writeHead(404).end('dashboard not enabled (start with --dashboard)');
223
264
  return;
224
265
  }
266
+ res.writeHead(200, {
267
+ 'content-type': 'text/html; charset=utf-8',
268
+ 'cache-control': 'no-store',
269
+ ...(this.opts.token && this.presentedToken(req)
270
+ ? { 'set-cookie': `robopark_auth=${encodeURIComponent(this.presentedToken(req))}; Path=/; SameSite=Lax` }
271
+ : {}),
272
+ });
273
+ res.end(this.opts.dashboardHtml);
274
+ return;
275
+ }
276
+ if (req.method === 'GET' && path === '/mesh') {
277
+ if (!this.opts.dashboardHtml) {
278
+ res.writeHead(404).end('mesh dashboard not enabled (start with --dashboard)');
279
+ return;
280
+ }
225
281
  res.writeHead(200, { 'content-type': 'text/html; charset=utf-8', 'cache-control': 'no-store' });
226
282
  res.end(this.opts.dashboardHtml);
227
283
  return;
228
284
  }
285
+ // Full scheduler dashboard requests are same-origin after the root proxy.
286
+ if (this.opts.schedulerUrl && (path.startsWith('/api/') || path.startsWith('/static/') || path.startsWith('/vendor/'))) {
287
+ this.proxySchedulerPath(req, res, path);
288
+ return;
289
+ }
229
290
  // Static assets bundled with the dashboard (robot concept avatars, etc.).
230
291
  if (req.method === 'GET' && path.startsWith('/static/')) {
231
292
  const asset = loadStaticAsset(path.slice(8));
@@ -5,6 +5,7 @@ export interface ServeOptions {
5
5
  gateway?: string;
6
6
  gatewayToken?: string;
7
7
  gatewayPassword?: string;
8
+ /** Open the Control Center after the scheduler is reachable. */
8
9
  open?: boolean;
9
10
  foreground?: boolean;
10
11
  }
@@ -181,14 +181,19 @@ export async function roboparkServe(opts) {
181
181
  catch { /* ignore */ }
182
182
  });
183
183
  proc.on('exit', () => process.exit(0));
184
+ if (opts.open !== false) {
185
+ await openDashboard(host, port);
186
+ }
184
187
  }
185
188
  else {
186
189
  // Detached mode: let the user walk away. The process keeps running.
187
190
  proc.unref();
191
+ if (opts.open !== false) {
192
+ await openDashboard(host, port);
193
+ }
188
194
  printUrl(port);
189
195
  console.log(chalk.dim(' running in background. Use Task Manager / systemctl / launchctl to stop.'));
190
- // give the scheduler a moment to bind before printing URL
191
- setTimeout(() => process.exit(0), 1200);
196
+ setTimeout(() => process.exit(0), 100);
192
197
  }
193
198
  }
194
199
  function printUrl(port) {
@@ -205,3 +210,43 @@ export async function schedulerHealthy(url, timeoutMs = 3000) {
205
210
  return false;
206
211
  }
207
212
  }
213
+ function dashboardUrl(host, port) {
214
+ // 0.0.0.0/:: are bind addresses, not useful browser destinations.
215
+ const browserHost = host === '0.0.0.0' || host === '::' ? 'localhost' : host;
216
+ const formattedHost = browserHost.includes(':') && !browserHost.startsWith('[')
217
+ ? `[${browserHost}]`
218
+ : browserHost;
219
+ return `http://${formattedHost}:${port}/`;
220
+ }
221
+ function openBrowser(url) {
222
+ // Use detached platform-native launchers so robopark serve remains usable
223
+ // from terminals and does not inherit browser stdio or lifecycle.
224
+ const command = process.platform === 'win32'
225
+ ? 'cmd.exe'
226
+ : process.platform === 'darwin'
227
+ ? 'open'
228
+ : 'xdg-open';
229
+ const args = process.platform === 'win32' ? ['/c', 'start', '', url] : [url];
230
+ try {
231
+ spawn(command, args, { detached: true, stdio: 'ignore', windowsHide: true }).unref();
232
+ }
233
+ catch (err) {
234
+ console.log(chalk.yellow(` ⚠ could not open browser: ${err instanceof Error ? err.message : String(err)}`));
235
+ }
236
+ }
237
+ async function openDashboard(host, port) {
238
+ const url = dashboardUrl(host, port);
239
+ const deadline = Date.now() + 10_000;
240
+ let healthy = false;
241
+ while (Date.now() < deadline) {
242
+ if (await schedulerHealthy(url, 500)) {
243
+ healthy = true;
244
+ break;
245
+ }
246
+ await new Promise((resolve) => setTimeout(resolve, 250));
247
+ }
248
+ if (!healthy) {
249
+ console.log(chalk.yellow(' ⚠ scheduler did not answer within 10s; opening the dashboard anyway.'));
250
+ }
251
+ openBrowser(url);
252
+ }
@@ -94,6 +94,7 @@ program
94
94
  .option('--gateway <url>', 'InfiniBot gateway ws:// URL')
95
95
  .option('--gateway-token <token>', 'InfiniBot gateway token')
96
96
  .option('--gateway-password <pw>', 'InfiniBot gateway password')
97
+ .option('--no-open', 'do not open the RoboPark Control Center in a browser')
97
98
  .option('--foreground', 'stay in foreground; do not detach')
98
99
  .action(async (opts) => {
99
100
  await roboparkServe(opts);
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "infinicode",
3
- "version": "2.8.38",
3
+ "version": "2.8.39",
4
4
  "description": "OpenKernel — provider-agnostic AI execution kernel. Native coding agent + mission-driven execution runtime.",
5
5
  "type": "module",
6
6
  "main": "./dist/kernel/index.js",