infinicode 2.8.40 → 2.8.41

package/dist/kernel/federation/transport-http.js

@@ -262,13 +262,9 @@ export class MeshServer {
             return;
         }
         const remote = req.socket.remoteAddress ?? 'unknown';
-        // The scheduler owns the complete RoboPark Control Center. The mesh page is
-        // retained at /mesh as a diagnostics view, not as the primary operator UI.
+        // The mesh node serves the full Park-enabled RoboPark Control Center. Its
+        // product APIs remain proxied under /robopark/* to the scheduler.
         if (req.method === 'GET' && (path === '/' || path === '/ui' || path === '/dashboard')) {
-            if (this.opts.schedulerUrl) {
-                this.proxySchedulerPath(req, res, '/');
-                return;
-            }
             if (!this.opts.dashboardHtml) {
                 res.writeHead(404).end('dashboard not enabled (start with --dashboard)');
                 return;
@@ -288,15 +284,16 @@ export class MeshServer {
                 res.writeHead(404).end('mesh dashboard not enabled (start with --dashboard)');
                 return;
             }
-            res.writeHead(200, { 'content-type': 'text/html; charset=utf-8', 'cache-control': 'no-store' });
+            res.writeHead(200, {
+                'content-type': 'text/html; charset=utf-8',
+                'cache-control': 'no-store',
+                ...(this.opts.token && this.presentedToken(req)
+                    ? { 'set-cookie': `robopark_auth=${encodeURIComponent(this.presentedToken(req))}; Path=/; SameSite=Lax` }
+                    : {}),
+            });
             res.end(this.opts.dashboardHtml);
             return;
         }
-        // Full scheduler dashboard requests are same-origin after the root proxy.
-        if (this.opts.schedulerUrl && (path.startsWith('/api/') || path.startsWith('/static/') || path.startsWith('/vendor/'))) {
-            this.proxySchedulerPath(req, res, path);
-            return;
-        }
         // Static assets bundled with the dashboard (robot concept avatars, etc.).
         if (req.method === 'GET' && path.startsWith('/static/')) {
             const asset = loadStaticAsset(path.slice(8));

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "infinicode",
-  "version": "2.8.40",
+  "version": "2.8.41",
   "description": "OpenKernel — provider-agnostic AI execution kernel. Native coding agent + mission-driven execution runtime.",
   "type": "module",
   "main": "./dist/kernel/index.js",