Menu
How to onboard people to boxBot — voice first-meeting (Person), first-admin bootstrap, admin-initiated user registration (User), welcoming a freshly-registered user.
Installer avec Codex ou Claude Copiez ce prompt, collez-le dans Codex, Claude ou un autre assistant, puis laissez-le vérifier la page du skill et l'installer pour vous.
Basé sur la classification professionnelle SOC
The bb Python package — your hands inside the sandbox. Import it from execute_script for camera stills, photo search, the 7" display, a persistent notes/CSV workspace, memory, triggers and to-dos, audio playback, new skills, secrets, and data-pipe integrations (calendar lives here). Load when the user mentions photos, the camera, the screen, notes, lists tracked over time, reminders, or anything worth composing in one turn.
Sandbox execution model for boxbot_sdk scripts — what execute_script can and cannot reach, and where the per-module API docs live.
Control the household through Home Assistant — lights, scenes, climate, media, smart plugs — and read live state like alarm armed/disarmed, doors, sensors, presence. The home_assistant integration is the single pipe; this skill is the map. Loads when the user asks BB to do anything touching a physical device, set a mood, check the house, or peek at a camera.
How to create your own skills. A skill is structured prompt data — a markdown SKILL.md you read on demand, optionally bundled with helper scripts. Load before calling bb.skill.create(), or when you catch yourself solving the same kind of problem twice.
| name | onboarding |
| description | How to onboard people to boxBot — voice first-meeting (Person), first-admin bootstrap, admin-initiated user registration (User), welcoming a freshly-registered user. |
| when_to_use | Load when ANY of: - "People in this session" shows a speaker with voice_tier "unknown" (or a low-confidence match you won't guess on) AND that speaker is addressing you directly. - Pending `setup:` todos — a fresh device with no admin. - A registered admin asks to add a new user. - A `[REGISTRATION] <code>` message arrives — a freshly registered user's first turn; they need a welcome. |
Two different things share the name. Keep them straight:
| Concept | Is | Onboard via |
|---|---|---|
| Person | A voice/visual identity (perception layer). Lets BB recognize someone and use their name. | Voice first-meeting, §1 — identify_person. |
| User | A messaging account that can text BB and be texted back (auth layer). | Registration code, §2/§3 — bb.auth. |
One human can be both, but they are tracked separately. Adding one does not add the other. The voice-fingerprint step (§5) links them for the admin.
Applies when: a speaker is addressing you in voice, their
voice_tier is unknown (or low and you won't guess), and you have
no registered name for them.
Does not apply to: high-confidence matches (use their name);
speakers talking to each other; anyone already introduced this session
(source: agent_identify in the identity block).
Ask their name. One voice output to "current_speaker". Short
and natural. Do not explain what you are.
End the turn. Wait.
Extract the name ("[Speaker A]: I'm Brian", "My name is Brian", "Brian"). If they decline, drop it. Never demand a name.
Pin it with identify_person: name = what they gave, trimmed
and naturally capitalized; ref = the session speaker ref (e.g.
"Speaker A").
| Outcome | Say |
|---|---|
create | "Nice to meet you, Brian. I'll remember you." |
confirm | "Got it, Brian. I've got you down now." |
correct | "Sorry about the mix-up, Brian. Got it now." |
rename / no_op | Acknowledge naturally. |
Renaming an existing record ("call me Bri") is
identify_person(action="rename", name="Brian", new_name="Bri") —
not a new identify.
Continue. They spoke up for a reason — ask what you can do.
Applies when: no admins registered. A todo starting
setup:bootstrap is in the backlog, and the Registered users block
says "No users are registered yet."
bb.auth.generate_bootstrap_code() — 6 digits, single use, 10 min.
Put it on the HDMI screen:
switch_display("notice", args={
"title": "Welcome to boxBot!",
"lines": [
"Text this code to BB's number:",
f"Code: {code}",
"Expires in 10 minutes",
],
})
The security property is physical presence — only someone at the box reads the screen. Never speak the code or send it over any channel.
Wait. They text it; the router validates and emits UserRegistered
with role="admin" plus a message tagged [REGISTRATION] <code>.
On arrival: mark setup:bootstrap complete, go to §4.
Ten minutes with no registration → the code expires silently. Generate and re-display. Not an error; they probably walked away.
Applies when: a registered admin says "add a new user", "register Carina", "give my wife access".
Confirm who. A name is enough — the admin shares the code out-of-band, so you never need the new user's number.
bb.auth.generate_registration_code(). The main process resolves
the inviting admin from conversation context; you pass no
created_by. If the speaker isn't an admin the call fails — say so
plainly.
Send the code to the admin, on whichever channel they asked:
"Code for Carina: 529174. Share it with her — she should text it to me. Expires in 10 minutes."
Wait. On success you see UserRegistered with role="user" and
invited_by_phone set.
Welcome them (§4) and tell the inviting admin, via
bb.auth.notify_admins(...) or a direct reply:
"Carina just registered. ✓"
Rate limit: 1 code per admin per hour. A second request inside the window raises. Explain, and offer to re-share the existing code — still valid until used or expired.
Triggered by a UserRegistered event or a [REGISTRATION] <code>
message.
Admin (bootstrap path): warm welcome by text, ask what they'd like you to call them, save their preferred name to system memory. Then §5 and §6.
Regular user (admin-invited): warm welcome by text, one line on what you can do, ask their name if the profile didn't carry it. Notify the inviting admin. Skip the setup todos — those fire only on first bootstrap.
The first admin has a User record but no Person record.
setup:voice_fingerprint is next.
Text them:
"Whenever you have a sec, come say hi at the box and I'll learn your voice. Just say hello once you're nearby."
Next time they address you by voice, run §1 with the name from
setup:greet_admin. Outcome will be create or confirm.
Mark setup:voice_fingerprint complete on
create/confirm/rename.
setup:household is the catch-all. Ask the admin about other household
members worth knowing, the city for weather, house preferences. Save
durable answers to system memory. They don't want to answer? Mark
complete or cancel — this one is optional.
identify_person(action="rename", name="Brian", new_name="Bri").
Embeddings, photos, and triggers follow. "Got it, Bri."identify_person(action="merge", name="Eric", duplicate_name="Erik").
Merge is destructive. Never call it without confirmation.bb.auth.generate_registration_code() fails with "only admins can
generate registration codes". Don't pretend it worked.