robopark 2.8.21 → 2.8.22

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "robopark",
-  "version": "2.8.21",
+  "version": "2.8.22",
   "description": "RoboPark fleet control CLI — set up, watch, and drive a fleet of talking robots. The operator front-end over the infinicode mesh.",
   "type": "module",
   "bin": {

package/scheduler/main.py

@@ -55,6 +55,12 @@ class Robot(BaseModel):
     last_heartbeat: Optional[datetime] = None
     total_sessions: int = 0
     total_runtime_seconds: int = 0
+    # Added after the `robots` table's additive trigger_count/created_at
+    # migration — response_model=Robot on GET /api/robots(/{id}) was
+    # silently stripping both from every response since the DB row has
+    # them but this model didn't declare them.
+    trigger_count: int = 0
+    created_at: Optional[datetime] = None
 
 class LiveKitServer(BaseModel):
     id: str
@@ -1589,10 +1595,16 @@ async def update_device(device_id: str, payload: DeviceUpdate):
     await _log_history("device", "device", device_id, "updated", "operator", f"fields={','.join(fields.keys())}")
     return await get_device(device_id)
 
-@app.post("/api/devices", response_model=Device)
+@app.post("/api/devices")
 async def create_device(payload: DeviceCreate):
     """Manually register a device from the UI. Returns the device record and
-    a one-time enrollment token (if one wasn't provided)."""
+    a one-time enrollment token (if one wasn't provided).
+
+    BUG FIXED: this had response_model=Device, which made FastAPI silently
+    strip the enrollment_token key from the response below (Device has no
+    such field) — the docstring's promised token was never actually
+    reaching the caller. Dropping response_model here since the return
+    value is deliberately Device-plus-one-extra-field, not just Device."""
     if not payload.name or not payload.name.strip():
         raise HTTPException(400, "name is required")
 
@@ -1763,6 +1775,17 @@ async def enroll_device(payload: DeviceEnrollRequest):
             )
         else:
             # First-boot enroll via the global default token -> create a new device.
+            #
+            # BUG FIXED: this used to persist enrollment_token_hash=token_hash
+            # (the hash of the SHARED default token) onto the new device row.
+            # Since the "existing" lookup above matches on enrollment_token_hash,
+            # every subsequent enroll using that same shared default token would
+            # match THIS row and take the "existing" reuse/rotate path instead of
+            # minting an independent device — silently renaming and re-keying
+            # whichever device happened to enroll first, and invalidating its
+            # live device_token. Devices minted via the default token must keep
+            # enrollment_token_hash NULL so the default token stays reusable
+            # across an entire fleet, as its name implies.
             device_id = f"dev_{secrets.token_hex(4)}"
             new_token = secrets.token_urlsafe(32)
             new_hash = _hash(new_token)
@@ -1779,7 +1802,7 @@ async def enroll_device(payload: DeviceEnrollRequest):
                     payload.tailscale_ip, payload.lan_ip,
                     payload.motor_server_url, payload.character_id,
                     payload.livekit_url, payload.video_device, payload.audio_device,
-                    new_hash, token_hash, now, now,
+                    new_hash, None, now, now,
                 ),
             )
             await db.execute(

package/scheduler/preview_agent.py

@@ -190,10 +190,18 @@ class PreviewAgent:
             logger.error("no DEVICE_TOKEN and no ENROLLMENT_TOKEN; cannot poll scheduler")
             sys.exit(1)
 
+        self._session = httpx.AsyncClient()
+
+        # Must come after self._session exists — _resolve_device_id() guards
+        # on it and silently no-ops otherwise. On a fresh enroll (no cached
+        # device_id in ~/.robopark/preview_agent.json) that made this ALWAYS
+        # no-op, so device_id never resolved and preview/agent polling fell
+        # back to robot_id (the display name) instead of the real device_id
+        # for the entire session — the same id-mismatch bug fixed elsewhere,
+        # recurring here only on a first-ever enroll.
         if not self.device_id:
             await self._resolve_device_id()
 
-        self._session = httpx.AsyncClient()
         self._loop = asyncio.get_running_loop()
         self._start_vision_webhook_server()