fix: upgrade to Next.js 16.2.1 and resolve bundling issues

- Fixed client bundle contamination by moving child_process-dependent code
- Created standalone /api/robots/command route for SSH robot commands
- Created plugins router to replace robots.plugins for plugin management
- Added getStudyPlugins procedure to studies router
- Fixed trial.studyId references to trial.experiment.studyId
- Updated WizardInterface to use REST API for robot commands

src/app/(dashboard)/studies/[id]/experiments/[experimentId]/designer/page.tsx

@@ -8,6 +8,9 @@ import type {
 } from "~/lib/experiment-designer/types";
 import { api } from "~/trpc/server";
 import { DesignerPageClient } from "./DesignerPageClient";
+import { db } from "~/server/db";
+import { studyPlugins, plugins } from "~/server/db/schema";
+import { desc, eq } from "drizzle-orm";
 
 interface ExperimentDesignerPageProps {
   params: Promise<{
@@ -74,10 +77,20 @@ export default async function ExperimentDesignerPage({
             actionDefinitions: Array<{ id: string }> | null;
           };
         };
-        const rawInstalledPluginsUnknown: unknown =
-          await api.robots.plugins.getStudyPlugins({
-            studyId: experiment.study.id,
-          });
+        const installedPluginsResult = await db
+          .select({
+            plugin: {
+              id: plugins.id,
+              name: plugins.name,
+              version: plugins.version,
+              actionDefinitions: plugins.actionDefinitions,
+            },
+          })
+          .from(studyPlugins)
+          .innerJoin(plugins, eq(studyPlugins.pluginId, plugins.id))
+          .where(eq(studyPlugins.studyId, experiment.study.id))
+          .orderBy(desc(studyPlugins.installedAt));
+        const rawInstalledPluginsUnknown = installedPluginsResult;
 
         function asRecord(v: unknown): Record<string, unknown> | null {
           return v && typeof v === "object"

src/app/api/robots/command/route.ts

@@ -0,0 +1,118 @@
+import { NextRequest, NextResponse } from "next/server";
+import { auth } from "~/lib/auth";
+import { db } from "~/server/db";
+import { studyMembers } from "~/server/db/schema";
+import { and, eq } from "drizzle-orm";
+import { exec } from "child_process";
+import { promisify } from "util";
+
+const execAsync = promisify(exec);
+
+export async function POST(request: NextRequest) {
+  try {
+    const session = await auth.api.getSession({
+      headers: request.headers,
+    });
+
+    if (!session?.user) {
+      return NextResponse.json({ error: "Unauthorized" }, { status: 401 });
+    }
+
+    const body = await request.json();
+    const { action, studyId, robotId, parameters } = body;
+
+    // Verify user has access to the study
+    const membership = await db.query.studyMembers.findFirst({
+      where: and(
+        eq(studyMembers.studyId, studyId),
+        eq(studyMembers.userId, session.user.id),
+      ),
+    });
+
+    if (!membership || !["owner", "researcher"].includes(membership.role)) {
+      return NextResponse.json(
+        { error: "Insufficient permissions" },
+        { status: 403 },
+      );
+    }
+
+    const robotIp =
+      process.env.NAO_ROBOT_IP || process.env.NAO_IP || "134.82.159.168";
+    const password = process.env.NAO_PASSWORD || "robolab";
+
+    switch (action) {
+      case "initialize": {
+        console.log(`[Robots API] Initializing robot at ${robotIp}`);
+
+        const disableAlCmd = `sshpass -p "${password}" ssh -o StrictHostKeyChecking=no "nao@${robotIp}" "python2 -c \\"import sys; sys.path.append('/opt/aldebaran/lib/python2.7/site-packages'); import naoqi; al = naoqi.ALProxy('ALAutonomousLife', '127.0.0.1', 9559); al.setState('disabled')\\""`;
+
+        const wakeUpCmd = `sshpass -p "${password}" ssh -o StrictHostKeyChecking=no "nao@${robotIp}" "python2 -c \\"import sys; sys.path.append('/opt/aldebaran/lib/python2.7/site-packages'); import naoqi; m = naoqi.ALProxy('ALMotion', '127.0.0.1', 9559); m.wakeUp()\\""`;
+
+        await execAsync(disableAlCmd).catch((e) =>
+          console.warn("AL disable failed (non-critical/already disabled):", e),
+        );
+
+        await execAsync(wakeUpCmd);
+
+        return NextResponse.json({ success: true });
+      }
+
+      case "executeSystemAction": {
+        const { id, parameters: actionParams } = parameters ?? {};
+        console.log(`[Robots API] Executing system action ${id}`);
+
+        let command = "";
+
+        switch (id) {
+          case "say_with_emotion":
+          case "say_text_with_emotion": {
+            const text = String(actionParams?.text || "Hello");
+            const emotion = String(actionParams?.emotion || "happy");
+            const tag =
+              emotion === "happy"
+                ? "^joyful"
+                : emotion === "sad"
+                  ? "^sad"
+                  : emotion === "thinking"
+                    ? "^thoughtful"
+                    : "^joyful";
+
+            command = `sshpass -p "${password}" ssh -o StrictHostKeyChecking=no "nao@${robotIp}" "python2 -c \\"import sys; sys.path.append('/opt/aldebaran/lib/python2.7/site-packages'); import naoqi; s = naoqi.ALProxy('ALAnimatedSpeech', '127.0.0.1', 9559); s.say('${tag} ${text.replace(/'/g, "\\'")}')\\""`;
+            break;
+          }
+
+          case "wake_up":
+            command = `sshpass -p "${password}" ssh -o StrictHostKeyChecking=no "nao@${robotIp}" "python2 -c \\"import sys; sys.path.append('/opt/aldebaran/lib/python2.7/site-packages'); import naoqi; m = naoqi.ALProxy('ALMotion', '127.0.0.1', 9559); m.wakeUp()\\""`;
+            break;
+
+          case "rest":
+            command = `sshpass -p "${password}" ssh -o StrictHostKeyChecking=no "nao@${robotIp}" "python2 -c \\"import sys; sys.path.append('/opt/aldebaran/lib/python2.7/site-packages'); import naoqi; m = naoqi.ALProxy('ALMotion', '127.0.0.1', 9559); m.rest()\\""`;
+            break;
+
+          default:
+            return NextResponse.json(
+              { error: `System action ${id} not implemented` },
+              { status: 400 },
+            );
+        }
+
+        await execAsync(command);
+        return NextResponse.json({ success: true });
+      }
+
+      default:
+        return NextResponse.json(
+          { error: `Unknown action: ${action}` },
+          { status: 400 },
+        );
+    }
+  } catch (error) {
+    console.error("[Robots API] Error:", error);
+    return NextResponse.json(
+      {
+        error: error instanceof Error ? error.message : "Internal server error",
+      },
+      { status: 500 },
+    );
+  }
+}