@gotcos/glasses-server 6.12.7 → 6.14.0

package/server/routes/transcribe-stream.ts

@@ -43,6 +43,11 @@ import {
   type IndexRange,
 } from '../lib/local-first-meetings-contract.js'
 import { getServerInstanceId } from '../lib/server-instance-id.js'
+import {
+  acquireMaintenanceWork,
+  maintenanceAdmissionsOpen,
+  type MaintenanceWorkLease,
+} from '../lib/maintenance-lifecycle.js'
 
 function ensurePrivateDirectory(path: string): void {
   if (!existsSync(path)) mkdirSync(path, { recursive: true, mode: 0o700 })
@@ -264,6 +269,12 @@ interface StreamChunkCompletionResponse {
 
 const closedSessionRecords = new Map<string, ClosedTranscriptSession>()
 
+/** Conservative lifecycle count used by the local service manager. A restart
+ * is unsafe while any live transcription session owns audio state. */
+export function getActiveTranscriptionSessionCount(): number {
+  return sessions.size
+}
+
 // Incremental chunk persistence — survive server restarts
 const CHUNK_PERSIST_DIR = dataPath('active-sessions')
 ensurePrivateDirectory(CHUNK_PERSIST_DIR)
@@ -600,12 +611,17 @@ export function isSessionDeleted(sessionId: string): boolean {
   return deletedSessions.has(sessionId)
 }
 
-// Recover any sessions from prior server instance.
-recoverClosedSessions()
-recoverSessions()
+// A committed cross-boot maintenance operation owns durable state until the
+// trusted controller adopts the candidate. Boot recovery must not mutate or
+// promote sessions while that gate is closed.
+if (maintenanceAdmissionsOpen()) {
+  recoverClosedSessions()
+  recoverSessions()
+}
 
 // Auto-cleanup sessions idle for the advertised retention horizon.
 setInterval(() => {
+  if (!maintenanceAdmissionsOpen()) return
   const cutoff = Date.now() - LOCAL_FIRST_MEETING_IDLE_RETENTION_MS
   for (const [id, session] of sessions) {
     if (session.lastActivityAt < cutoff) {
@@ -1550,10 +1566,14 @@ function sendStreamError(res: { status: (code: number) => { json: (body: unknown
 }
 
 transcribeStreamRouter.post('/transcribe-stream', async (req, res) => {
+  let maintenanceLease: MaintenanceWorkLease | undefined
   try {
     // Reject a wrong Mac before consuming or persisting any upload bytes.
     assertPinnedServerIdentity(req.get('X-COS-Server-Instance'), req.query.serverInstanceId)
     const sessionId = (req.query.sessionId as string) || `g2_${Date.now()}`
+    maintenanceLease = acquireMaintenanceWork('recording_chunk', {
+      allowDuringDrain: sessions.has(sessionId),
+    })
     const chunkIndex = parseInt((req.query.chunkIndex as string) || '0', 10)
     const clientSpeaker = (req.query.speaker as string) || 'Unknown'
     const clientElapsedRaw = Number(req.query.elapsed)
@@ -1575,15 +1595,21 @@ transcribeStreamRouter.post('/transcribe-stream', async (req, res) => {
     }))
   } catch (err: unknown) {
     sendStreamError(res, err)
+  } finally {
+    maintenanceLease?.release()
   }
 })
 
 transcribeStreamRouter.post('/transcribe-stream/offline-sessions/start', async (req, res) => {
+  let maintenanceLease: MaintenanceWorkLease | undefined
   try {
     if (!isIosAsrCandidateEnabled()) throw makeHttpError(403, 'iPhone ASR candidates disabled', 'iphone_asr_disabled')
     const body = req.body ?? {}
     const sessionId = String(body.sessionId ?? '')
     validateSessionId(sessionId)
+    maintenanceLease = acquireMaintenanceWork('recording_chunk', {
+      allowDuringDrain: sessions.has(sessionId),
+    })
     if (isSessionDeleted(sessionId)) throw makeHttpError(410, 'session is closed', 'session_closed')
     const session = getSession(sessionId)
     const startTime = typeof body.startTime === 'number' && Number.isFinite(body.startTime)
@@ -1596,14 +1622,20 @@ transcribeStreamRouter.post('/transcribe-stream/offline-sessions/start', async (
     res.json({ sessionId, startTime: session.startTime, chunks: session.chunks.filter(Boolean).length })
   } catch (err: unknown) {
     sendStreamError(res, err)
+  } finally {
+    maintenanceLease?.release()
   }
 })
 
 transcribeStreamRouter.post('/transcribe-stream/offline-sessions/:sessionId/chunks', async (req, res) => {
+  let maintenanceLease: MaintenanceWorkLease | undefined
   try {
     if (!isIosAsrCandidateEnabled()) throw makeHttpError(403, 'iPhone ASR candidates disabled', 'iphone_asr_disabled')
     const sessionId = String(req.params.sessionId ?? '')
     validateSessionId(sessionId)
+    maintenanceLease = acquireMaintenanceWork('recording_chunk', {
+      allowDuringDrain: sessions.has(sessionId),
+    })
     if (isSessionDeleted(sessionId)) throw makeHttpError(410, 'session is closed', 'session_closed')
     const body = req.body ?? {}
     const chunkIndex = Number(body.chunkIndex)
@@ -1636,14 +1668,20 @@ transcribeStreamRouter.post('/transcribe-stream/offline-sessions/:sessionId/chun
     res.json({ ...result, offlineReplay: true })
   } catch (err: unknown) {
     sendStreamError(res, err)
+  } finally {
+    maintenanceLease?.release()
   }
 })
 
 transcribeStreamRouter.post('/transcribe-stream/offline-sessions/:sessionId/finalize', async (req, res) => {
+  let maintenanceLease: MaintenanceWorkLease | undefined
   try {
     if (!isIosAsrCandidateEnabled()) throw makeHttpError(403, 'iPhone ASR candidates disabled', 'iphone_asr_disabled')
     const sessionId = String(req.params.sessionId ?? '')
     validateSessionId(sessionId)
+    maintenanceLease = acquireMaintenanceWork('recording_chunk', {
+      allowDuringDrain: sessions.has(sessionId),
+    })
     if (isSessionDeleted(sessionId)) throw makeHttpError(410, 'session is closed', 'session_closed')
     const chunks = getSessionChunks(sessionId)
     if (!chunks || chunks.length === 0) throw makeHttpError(404, 'offline session has no chunks', 'session_not_found')
@@ -1662,16 +1700,22 @@ transcribeStreamRouter.post('/transcribe-stream/offline-sessions/:sessionId/fina
     })
   } catch (err: unknown) {
     sendStreamError(res, err)
+  } finally {
+    maintenanceLease?.release()
   }
 })
 
 transcribeStreamRouter.post('/transcribe-stream/candidates', async (req, res) => {
+  let maintenanceLease: MaintenanceWorkLease | undefined
   try {
     if (!isIosAsrCandidateEnabled()) throw makeHttpError(403, 'iPhone ASR candidates disabled', 'iphone_asr_disabled')
     const body = req.body ?? {}
     const sessionId = String(body.sessionId ?? '')
     const chunkIndex = Number(body.chunkIndex)
     validateSessionId(sessionId)
+    maintenanceLease = acquireMaintenanceWork('recording_chunk', {
+      allowDuringDrain: sessions.has(sessionId),
+    })
     validateChunkIndex(chunkIndex)
     if (isSessionDeleted(sessionId)) throw makeHttpError(410, 'session is closed', 'session_closed')
     if (chunkIndex > 0 && !sessions.has(sessionId)) {
@@ -1702,6 +1746,8 @@ transcribeStreamRouter.post('/transcribe-stream/candidates', async (req, res) =>
     res.json(result)
   } catch (err: unknown) {
     sendStreamError(res, err)
+  } finally {
+    maintenanceLease?.release()
   }
 })
 

package/server/routes/transcribe.ts

@@ -11,6 +11,12 @@ import {
   OpenAIWhisperBudgetExhaustedError,
   TranscriptionUnavailableError,
 } from '../lib/transcribe-audio.js'
+import {
+  acquireMaintenanceWork,
+  MaintenanceLifecycleError,
+  maintenanceErrorPayload,
+  type MaintenanceWorkLease,
+} from '../lib/maintenance-lifecycle.js'
 
 export const transcribeRouter = Router()
 
@@ -23,7 +29,9 @@ function resolveMode(req: { body?: { mode?: string }; query?: { mode?: string |
 
 // Accept raw binary body up to 25MB (Whisper limit).
 transcribeRouter.post('/transcribe', async (req, res) => {
+  let maintenanceLease: MaintenanceWorkLease | undefined
   try {
+    maintenanceLease = acquireMaintenanceWork('one_shot_transcription')
     const chunks: Buffer[] = []
     for await (const chunk of req) {
       chunks.push(Buffer.isBuffer(chunk) ? chunk : Buffer.from(chunk))
@@ -38,6 +46,10 @@ transcribeRouter.post('/transcribe', async (req, res) => {
     console.log(`[perf] /transcribe: ${result.elapsedMs.toFixed(1)}ms | mode=${result.mode} | ${result.backend} | ${result.audioBytes}b | ${result.text.length} chars`)
     res.json({ text: result.text, backend: result.backend, mode: result.mode })
   } catch (err: any) {
+    if (err instanceof MaintenanceLifecycleError) {
+      if (err.retryAfterSeconds != null) res.setHeader('Retry-After', String(err.retryAfterSeconds))
+      return res.status(err.status).json(maintenanceErrorPayload(err))
+    }
     if (err instanceof NoSpeechDetectedError) {
       console.log(`[perf] /transcribe: DROPPED (hallucination or empty): ${err.rawText.length} chars`)
       return res.status(204).send()
@@ -60,5 +72,7 @@ transcribeRouter.post('/transcribe', async (req, res) => {
       })
     }
     res.status(500).json({ error: err.message })
+  } finally {
+    maintenanceLease?.release()
   }
 })