2026-09-07 — Bot Relay, Per-Node Routing & Dark Theme

Today we hardened the scorpiox-bot remote control stack:

• Fixed the iOS "access local network" prompt by enabling relay routing for .3 (nzxt:8151) and .6 (lazarus:8152).
• Upgraded the architecture from a single global route mode to per-node RelayMode (direct, relay, auto) stored directly in SQL Server RuntimeConfig.
• Enabled resolving nodes by friendly names and slugs (node=.3, node=nzxt, node=.6, node=lazarus) in both relay.c and tools/runtimecfg.
• Made the web shell stateless in JSON mode: /?node=.3&format=json queries and returns the node and its live tmux sessions in one shot.
• Fixed dark theme styling on native select and option popups across desktop and mobile Safari.
• Implemented dedicated full-page edge-to-edge terminal endpoint GET /terminal?id=<session> in pure C (terminal.c). Serves an xterm.js terminal with zero shell clutter, real-time SSE streaming, raw keystroke queue, auto-resizing viewport sync with tmux, 10-second anti-artifact screen refresh, HUD collapsible mode, and multi-node routing (node=.3, node=.6).
• Integrated "Full Page" button in the Peek modal inside the shell web for one-click popup into the dedicated fullscreen terminal.
• Built stats.json live telemetry emission into clang (sx_statusbar.c, libsxutil/sx_session.c, sx.c). The core engine now serializes full TUI statusbar telemetry (Anthropic cache countdown timer T mm:ss, keepalive state KA:N, active callbacks [CB:count mm:ss], bash spinner, model, context max, and token metrics) to .scorpiox/sessions/<id>/stats.json atomically with 1 Hz throttling and 0ms turn-completion updates.
• Released clang x64 Linux build (0027acf) on .3 to dist.scorpiox.net and updated fleet via scorpiox-update. Verified stats.json emission live in tmux test session.
• Updated scorpiox-bot-api (sessions.c) to read and inline stats.json into GET /sessions responses across .100, .3, and .6.
• Upgraded scorpiox-bot-web (index.c & terminal.c) with bottom statusbar telemetry and Read-Only spectator mode:
• In index.c, placed the .statusbar-panel directly UNDER the input box and send button (mirroring sx.c), rendering:
• Up to 3 stacked lines of token history (rsn in purple, T in bold white, in in gray, R in green, W in orange, out in cyan, ratelimits, and speed).
• Bottom row: 📁 cwd, 🌿 branch, CTX:250K, ⚙️ bash, ⏱️ CB, cache TTL timer T mm:ss, KA, and a clickable [🟢 OPERATOR] ⇄ [🔒 READONLY] toggle.
• In Read-Only mode, input is disabled with spectator placeholder, send button is hidden, and prompts cannot be submitted. URL query ?ro=1 automatically locks the view.
• In terminal.c, added cache countdown timer #hudTimer and #btnRo to the HUD bar, blocking keystroke transmission in Read-Only mode.

De-picobot: bot-web + bot-api treat picobot as a regular codebase (22:05 NZST)

User decision: picobot gets zero special cases — no protected session, no hardcoded paths, no default session.

bot-api (67605c5 + 5d81368):

• sessions.c: dropped picobot -> /codebases/picobot / picobot-<name> worktree guessing; cwd = tmux-reported worktree or empty. find_session_dir now scans ALL session roots and returns (root, id); response gains a root field.
• sxcommon.h: new collect_session_roots() (explicit SCORPIOX_SESSIONS_DIRS, else primary + every /codebases/*/.scorpiox/sessions that exists — 42 roots live) + foreach_session_dir().
• send.c, infobox.c, conversation.c: resolve tmux-name -> session dir in any root via worktree then bare-name match. conversation also needed yyjson.o (Makefile fix).
• Earlier: DELETE /sessions 403 guard for picobot already removed (4f07a28).

bot-web (cb9bae5):

• terminal.c: no picobot default (session: "" in JSON); browser auto-selects first live session from /sessions, falls back to session switcher. startStream no-ops on empty session.
• index.c placeholder, both READMEs, relay.c comment example de-picoboted.

Left alone (live contracts): PICOBOT_PASSWORD/X-Picobot-Password, RuntimeType PICOBOT, JWT picobot perm, pico_* localStorage compat keys — fleet + iOS depend on these; rename = migration.

Gotcha hit: .100's make said "up to date" while git log showed the new commit — stale binaries served old code until make clean && make. Always clean-build on deploy.