From 85ec04974a20a6c3d1e7f505f9b860a65e0a114a Mon Sep 17 00:00:00 2001
From: ammann <161159040+agammann@users.noreply.github.com>
Date: Thu, 1 Oct 2026 01:05:43 -0700
Subject: [PATCH] Fix local onboarding checks and speech input recovery
---
.github/workflows/ci.yml | 16 +++++++-
README.md | 48 ++++++++++++++++++++++--
apps/alexa-simulator/public/app.js | 22 +++++++++--
apps/alexa-simulator/public/index.html | 2 +-
package.json | 4 +-
pnpm-lock.yaml | 41 ++++++++++----------
pnpm-workspace.yaml | 3 ++
tests/integration/runtime-config.test.ts | 15 +++++---
8 files changed, 115 insertions(+), 36 deletions(-)
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index a81a493..be9f9a8 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -6,7 +6,14 @@ on:
jobs:
verify:
- runs-on: ubuntu-latest
+ strategy:
+ fail-fast: false
+ matrix:
+ os: [ubuntu-latest, windows-latest]
+ runs-on: ${{ matrix.os }}
+ defaults:
+ run:
+ shell: bash
steps:
- uses: actions/checkout@v4
- uses: pnpm/action-setup@v4
@@ -16,13 +23,17 @@ jobs:
with:
node-version: 22
cache: pnpm
+ - uses: actions/setup-python@v7
+ with:
+ python-version: '3.13'
- run: pnpm install --frozen-lockfile
+ - run: pnpm audit --audit-level=low
# Type-aware ESLint resolves workspace packages through their generated
# declaration files, so a clean runner must build before lint/typecheck.
- run: pnpm build
- run: pnpm build:customer
- run: pnpm build:enrollment
- - run: python3 -m unittest discover -s scripts -p 'test_*.py' -v
+ - run: python -m unittest discover -s scripts -p 'test_*.py' -v
- run: node scripts/check-enrollment-state-plan.mjs
# Historical evidence integrity only. Current retention template requires
# fresh cfn-lint/Guard review; the default checker deliberately rejects it.
@@ -31,6 +42,7 @@ jobs:
- run: pnpm lint
- run: pnpm typecheck
- run: pnpm test
+ - run: pnpm test:e2e
docker-demo:
runs-on: ubuntu-latest
diff --git a/README.md b/README.md
index 7649693..5ec81a0 100644
--- a/README.md
+++ b/README.md
@@ -4,6 +4,8 @@
Flo connects conversational commands to structured repair information and service workflows through MCP. The vehicle-owner preview reviews repair status and customer estimates. The separate shop demo covers diagnostics, compatible parts, supplier availability, approvals, purchasing and scheduling. Both are custom simulations, not a deployed Alexa+ add-on. The adapter boundaries remain extensible beyond automotive repair.
+
+
> Project status, September 8, 2026: local deterministic engines, four simulated APIs, shop workflow, transaction controls, MCP transport and a read-only vehicle-owner preview are implemented. `/mcp` exposes 28 shop tools in demo mode (25 otherwise); `/customer/mcp` exposes three separate read-only tools only in demo mode and returns 401 otherwise. A separate AWS-hosted customer website supports real Login with Amazon and durable sessions. One independently approved fictional customer completed private approval/redemption and can read its own hosted repair fixture but not another customer's fixture. Sign-in alone never grants repair ownership. These static hosted records are not synchronized with the local shop demo and contain no estimate or schedule. The narrow Bedrock narrator has recorded live verification. Official Alexa+ account linking, add-on deployment, certification, MCP App packaging, AgentCore and durable shop business state remain incomplete.
**Certification is a separate gate from the hackathon.** Alexa+ policy excludes exclusively internal/B2B add-ons. The vehicle-owner preview is the first consumer-facing increment, not a certification-ready release. See the [complete documentation review and implementation tracker](docs/alexa-plus-certification-plan.md).
@@ -169,7 +171,7 @@ flo/
## Requirements
-- Node.js 22 or newer
+- Node.js 22.13 or newer (required by pnpm 11)
- pnpm 11
No AWS account, commercial supplier key, or private repair-shop integration is needed for the local demo.
@@ -177,8 +179,10 @@ No AWS account, commercial supplier key, or private repair-shop integration is n
## Local setup
```bash
+git clone https://github.com/agammann/flo.git
+cd flo
cp .env.example .env
-pnpm install
+pnpm install --frozen-lockfile
pnpm build
pnpm test
pnpm dev
@@ -200,6 +204,12 @@ Service endpoints:
In local demo mode, MCP requests can set `x-flo-role` to `technician`, `service_advisor`, `manager`, or `administrator`. Production mode must authenticate identities and must not trust a caller-selected role header.
+The shop accepts typed commands even when speech recognition is unavailable or
+blocked. If microphone or speech-service access is refused, the status beside
+the command field explains how to continue by typing. Successful speech input
+depends on the browser and its recognition service; the local workflow does not
+require microphone permission.
+
## Commands
```bash
@@ -207,6 +217,7 @@ pnpm build # compile every workspace package
pnpm test # run compiled unit and integration tests
pnpm test:unit
pnpm test:integration
+pnpm test:e2e # complete HTTP/MCP workflow and transport checks
pnpm typecheck
pnpm lint
pnpm dev:services # start mock APIs and MCP
@@ -233,12 +244,43 @@ The suite covers:
Run the same quality gates used by CI:
```bash
+pnpm install --frozen-lockfile
+pnpm audit --audit-level=low
+pnpm build
+pnpm build:customer
+pnpm build:enrollment
pnpm lint
pnpm typecheck
-pnpm build
pnpm test
+pnpm test:e2e
+node --test scripts/*.test.mjs
+python -m unittest discover -s scripts -p 'test_*.py' -v
+```
+
+Build before lint and type checking in a fresh checkout: workspace imports resolve
+through the generated declaration files. `pnpm test:e2e` starts disposable HTTP
+services on random loopback ports and exercises the diagnosis-to-schedule flow
+and real MCP negotiation. It needs no running demo, Docker or AWS account. The
+Python checks use Python 3.13 in CI; use `python3` if that is your installed command.
+
+For the container startup and database transaction checks, run:
+
+```bash
+docker compose up --build -d
+node scripts/docker-smoke.mjs
+docker compose -p flo-customer-test -f docker-compose.customer-test.yml up --abort-on-container-exit --exit-code-from customer-contract
+docker compose -p flo-customer-test -f docker-compose.customer-test.yml down --volumes --remove-orphans
+docker compose down --volumes --remove-orphans
```
+The HTTP smoke resets the local demo before checking approval, confirmed ordering
+and scheduling, resumed context and customer-only estimates. Run it only against
+a disposable local demo. The database suite uses DynamoDB Local in an isolated
+network with synthetic identities; it does not verify live AWS IAM or Amazon
+sign-in. Platform-specific filesystem tests run on Linux; Windows refusal tests
+run on Windows. CI checks both platforms. Hosted AWS observations above remain
+dated September evidence.
+
## Adding an integration
Implement the relevant interface in `packages/adapters`, validate the provider response into Flo domain types, and inject the adapter into the orchestrator. The supplier contract includes search, availability, order, status, cancel, and reset operations. `MockSupplierAdapter` is intentionally an HTTP implementation rather than a frontend fixture, so a future Napa, AutoZone, dealer, Amazon Business, or generic ERP adapter can replace it without changing the MCP surface. See `docs/api/adding-an-adapter.md`.
diff --git a/apps/alexa-simulator/public/app.js b/apps/alexa-simulator/public/app.js
index 9ba735b..028415c 100644
--- a/apps/alexa-simulator/public/app.js
+++ b/apps/alexa-simulator/public/app.js
@@ -143,10 +143,26 @@ $("#reset").addEventListener("click", async () => {
const Recognition = window.SpeechRecognition || window.webkitSpeechRecognition;
if (Recognition) {
const recognition = new Recognition(); recognition.lang = "en-US"; recognition.interimResults = false;
- recognition.addEventListener("start", () => talk.classList.add("listening"));
- recognition.addEventListener("end", () => talk.classList.remove("listening"));
+ let recognizing = false;
+ const voiceNote = $("#voiceNote");
+ recognition.addEventListener("start", () => { talk.classList.add("listening"); voiceNote.textContent = "Listening… Speak a shop command."; });
+ recognition.addEventListener("end", () => {
+ recognizing = false; talk.classList.remove("listening");
+ if (voiceNote.textContent.startsWith("Listening")) voiceNote.textContent = "Voice input uses your browser’s speech recognition when available.";
+ });
+ recognition.addEventListener("error", (event) => {
+ voiceNote.textContent = ["not-allowed", "service-not-allowed"].includes(event.error)
+ ? "Voice input is blocked by the browser or speech service. Type a command to continue."
+ : event.error === "no-speech" ? "No speech was detected. Try again or type a command."
+ : "Voice input could not finish. Try again or type a command.";
+ });
recognition.addEventListener("result", (event) => { const command = event.results[0][0].transcript; input.value = command; void runCommand(command); });
- talk.addEventListener("click", () => recognition.start());
+ talk.addEventListener("click", () => {
+ if (recognizing) return;
+ recognizing = true;
+ try { recognition.start(); }
+ catch { recognizing = false; voiceNote.textContent = "Voice input could not start. Try again or type a command."; }
+ });
} else { talk.hidden = true; $("#voiceNote").textContent = "Type a command to run the voice-first demo workflow."; }
fetch("/api/health").then(async (response) => {
diff --git a/apps/alexa-simulator/public/index.html b/apps/alexa-simulator/public/index.html
index 4ba11c5..a4aff54 100644
--- a/apps/alexa-simulator/public/index.html
+++ b/apps/alexa-simulator/public/index.html
@@ -76,7 +76,7 @@
Keep your hands on the work.
-
Voice input uses your browser’s speech recognition when available.
+
Voice input uses your browser’s speech recognition when available.