@gotcos/glasses-server 6.16.0 → 6.16.2

package/.env.example

@@ -95,6 +95,13 @@ BIND_HOST=0.0.0.0
 # Power users running the COS Starter Kit can point the glasses at their
 # pipeline to inherit live tasks/calendar/people context. Omit for standalone.
 # COS_SCRIPTS_DIR=/path/to/your/cos/operations/scripts
+#
+# G2 "Review Meetings" reads COS meeting markdown from an operations tree:
+#   {COS_OPERATIONS_DIR}/{quilt|personal|…}/meetings/YYYY-MM/*.md
+# Prefer an explicit ops root (each COS layout can differ). If unset, the
+# server falls back to COS_SCRIPTS_DIR/.. then to local G2 recordings only.
+# COS_OPERATIONS_DIR=/path/to/your/cos/operations
+# COS_MEETINGS_ROOT=/path/to/your/cos/operations   # alias for COS_OPERATIONS_DIR
 
 # Telegram session/activity notifications remain OFF even if the COS scripts
 # directory contains .telegram_config.json. Enable export explicitly:

package/CHANGELOG.md

@@ -1,3 +1,22 @@
+## 6.16.1
+
+- **Cursor Agent models (Composer 2.5 / Grok 4.5).** Managed installs now ship
+  the Cursor bridge, model catalog, engine sessions, and run ledger. `/api/health`
+  advertises `features.cursor` + `cursor_models`; authenticated `/api/models`
+  merges Cursor slots with Codex. Fail-closed: unresolved Cursor never falls
+  through to Claude/Codex.
+- **Cursor-complete setup and diagnostics.** The public launcher now accepts a
+  Cursor-only installation after `agent models` proves both slots, including the
+  `~/.local/bin/agent` fallback used by launchd. Authenticated CLI diagnostics
+  include redacted Cursor run state alongside Claude and Codex.
+- **Silero VAD in the npm tarball.** `.npmignore` previously excluded
+  `server/models/`, so managed 6.16.0 ran with `silero_vad: disabled` and
+  untrimmed audio. Package now ships `server/models/silero_vad.onnx`.
+- **HQ path retained.** Speculative HQ warm + interactive beam/light enhance from
+  6.15.5/6.16.0 remain the default Render path.
+- **Public-package boundary.** The tarball contract excludes runtime data,
+  certificates, tests, operator-specific paths, and operator-specific names.
+
 ## 6.16.0
 
 - **Truthful HQ results.** An HQ request is reported as HQ only when the full

package/README.md

@@ -1,7 +1,7 @@
 # COS Glasses Server
 
 Self-hosted AI heads-up display for **Even G2 smart glasses**. Runs on your Mac,
-talks to your local **Claude Code or Codex** CLI, and pushes answers, voice
+talks to your local **Claude Code, Codex, or Cursor Agent** CLI, and pushes answers, voice
 transcription, and notes to the lens. Your data never leaves your machine, and no
 API key is pasted into the phone for chat.
 
@@ -43,6 +43,11 @@ without silently losing completed replies.
   `npm install -g @anthropic-ai/claude-code` (**never with `sudo`**), then run
   `claude` and finish the browser sign-in
   _or_ **Codex CLI** (GPT Frontier/Balanced) — https://developers.openai.com/codex/, then `codex login`
+- _Optional:_ **Cursor Agent CLI** for Composer 2.5 Fast and Grok 4.5 Fast.
+  Ensure `agent` is on `PATH`, run `agent login`, and verify `agent models`
+  lists `composer-2.5-fast` and `cursor-grok-4.5-high-fast`. COS exposes the
+  Cursor slots only after both models resolve; it never silently substitutes
+  Claude or Codex.
 - **Even G2 glasses** + the **COS Glasses** app from the Even Hub
 - `brew install whisper-cpp` for free local voice (the launcher can download the model)
 - _Optional:_ `brew install python@3.12 ffmpeg espeak-ng` for local Kokoro
@@ -51,12 +56,18 @@ without silently losing completed replies.
   without these optional dependencies.
 - _Optional:_ **Tailscale** so your phone reaches your Mac from anywhere
 
-> No `ANTHROPIC_API_KEY` is needed — chat runs through your installed CLI, billed
-> to your existing Claude or Codex subscription. Pick either per query, or set a
-> default with `COS_G2_DEFAULT_MODEL` (`opus`|`fable`|`sonnet`|`codex-frontier`|`codex-balanced`).
+> No provider API key is needed for chat when using signed-in CLIs. Usage is
+> billed to the corresponding Claude, Codex, or Cursor subscription. Pick a
+> provider per query, or set a default with `COS_G2_DEFAULT_MODEL`
+> (`opus`|`fable`|`sonnet`|`codex-frontier`|`codex-balanced`|`cursor-grok`|`cursor-composer`).
 > Claude tier aliases and the two GPT slots resolve dynamically, so new model
 > releases do not require a new glasses package. GPT discovery refreshes every
 > 15 minutes and retains its last-known-good catalog through transient failures.
+> Cursor discovery also refreshes every 15 minutes and retains its last-known-good
+> catalog through transient failures.
+> Cursor **Agent** mode can edit files and run shell commands in the selected
+> workspace. Choose **Ask** mode when you want a non-editing answer; clients that
+> omit the execution mode default to Ask.
 > Existing `COS_CODEX_MODEL` / `COS_CODEX_REASONING_EFFORT` settings remain
 > supported on the migrated Frontier slot; leave them blank for auto-latest.
 > Codex runs **sandboxed read-only** by default (`COS_CODEX_SANDBOX` to adjust).
@@ -86,9 +97,10 @@ range is the exact Tailscale/CGNAT allocation (`100.64.0.0/10`), not all of
   `COS_DURABLE_QUERY_JOBS=1`: accepted work survives phone backgrounding,
   WebView reloads, and network handoffs, then reattaches without duplicate work
   or duplicate replies
-- Choose Opus, Fable, Sonnet, GPT Frontier, or GPT Balanced plus High, Extra
-  High, Max, or Ultracode effort; optional redacted tool activity streams only
-  to the authenticated query that requested it
+- Choose Opus, Fable, Sonnet, GPT Frontier, GPT Balanced, Composer 2.5 Fast, or
+  Grok 4.5 Fast. Cursor slots fail closed when the local CLI or concrete model
+  is unavailable; optional redacted tool activity streams only to the
+  authenticated query that requested it
 - Message History + cross-day "reference message N" — your chats are archived by day
   and every message keeps a permanent number you can recall (`/api/archive`, `/api/message/:num`)
 - Send phone photos with queued prompts, and review assistant-selected generated,
@@ -133,6 +145,8 @@ optional except an installed CLI. Highlights: `BIND_HOST`, `PORT`,
 `mcp__server__*` selectors shared by full and lightweight Claude paths),
 `COS_CLAUDE_MCP_CONFIG` (optional absolute config path when `.mcp.json` is not
 in the managed CLI working directory),
+`COS_CURSOR_AGENT_BIN` (optional absolute Cursor `agent` binary),
+`COS_CURSOR_PERSIST_SESSIONS=0` (disable Cursor session resume),
 `COS_SCRIPTS_DIR` (full pipeline), `COS_DURABLE_QUERY_JOBS=1` (build 204+
 server-owned query recovery), and `COS_MEDIA_ROOT` (optional image-store
 location; default `~/.cos-glasses/data/media`). Your name + transcription vocabulary live in
@@ -190,8 +204,14 @@ BIND_HOST=0.0.0.0 npm run start:server
   Version 6.12.2+ never runs a second install from inside npm's temporary cache.
 - *Phone can't connect* — check `BIND_HOST=0.0.0.0`, the same Tailscale account on both devices, and the correct `100.x` IP + token.
 - *Safari connects but the app does not* — confirm `npx --yes @gotcos/glasses-server@latest` is 6.6.0+, then use the app's server reconnect/edit control to verify the current URL and token. Do not run a second source or `npx` server alongside it.
-- *AI queries fail* — run `claude auth status` / `codex login status`, then
-  `claude auth login` / `codex login` when the provider reports signed out.
+- *AI queries fail* — run `claude auth status`, `codex login status`, or
+  `agent status` for the selected provider, then authenticate with
+  `claude auth login`, `codex login`, or `agent login` when signed out.
+- *Composer or Grok is missing* — update to server 6.16.1+, confirm `agent` is
+  discoverable on the service `PATH`, and run `agent models`. `/api/health`
+  must report `features.cursor: true`; authenticated `/api/models` must include
+  both `cursor-composer` and `cursor-grok`. Missing models fail closed instead
+  of falling through to another provider.
 - *Voice getting billed?* — voice is local-only by default in 6.12.0+. Confirm
   `/api/health` reports `capabilities.transcription.mode: "local-only"`. Remove
   `COS_OPENAI_WHISPER_FALLBACK` (or set it to `0`) to disable an earlier opt-in.

package/bin/cli.cjs

@@ -16,7 +16,7 @@ const {
   renameSync,
   chmodSync,
 } = require('fs')
-const { join, resolve } = require('path')
+const { delimiter, join, resolve } = require('path')
 const { homedir } = require('os')
 
 // bin/cli.cjs -> package root is one level up. The server lives at <root>/server.
@@ -45,7 +45,7 @@ if (process.argv.includes('--help') || process.argv.includes('-h')) {
   console.log('')
   console.log('  Requirements:')
   console.log('    - Node.js 20.11+')
-  console.log('    - Claude Code CLI (not Claude Desktop) or Codex CLI')
+  console.log('    - Claude Code CLI, Codex CLI, or Cursor Agent CLI')
   console.log('    - Even G2 smart glasses + the COS Glasses app (Even Hub)')
   console.log('    - Optional local Kokoro voice: Apple silicon + Python 3.11 or 3.12')
   console.log('')
@@ -71,7 +71,7 @@ if (nodeMajor < 20 || (nodeMajor === 20 && nodeMinor < 11)) {
 }
 console.log(green('  ✓') + ` Node.js ${process.versions.node}`)
 
-// Step 2: agent CLI detection — at least one of Claude Code / Codex is required
+// Step 2: agent CLI detection — at least one supported, signed-in CLI is required.
 function getCliVersion(command, versionArg = '--version') {
   try {
     return execSync(`${command} ${versionArg} 2>&1`, { shell: '/bin/sh', stdio: 'pipe', timeout: 5000 }).toString().trim()
@@ -128,10 +128,57 @@ function codexAuthState() {
   if (/not logged in|logged out|sign[ -]?in required/i.test(result.output)) return 'signed-out'
   return 'unknown'
 }
+function resolveCursorAgentBinary() {
+  const configured = process.env.COS_CURSOR_AGENT_BIN?.trim()
+  if (configured && existsSync(configured)) return configured
+  for (const entry of (process.env.PATH || '').split(delimiter).filter(Boolean)) {
+    const candidate = resolve(entry, 'agent')
+    if (existsSync(candidate)) return candidate
+  }
+  const homeLocal = resolve(homedir(), '.local', 'bin', 'agent')
+  return existsSync(homeLocal) ? homeLocal : null
+}
+function cursorCliState() {
+  const binary = resolveCursorAgentBinary()
+  if (!binary) return { binary: null, version: null, auth: null }
+
+  let version = 'available'
+  try {
+    const about = execFileSync(binary, ['about'], {
+      encoding: 'utf8',
+      stdio: ['ignore', 'pipe', 'pipe'],
+      timeout: 5000,
+    }).trim()
+    const versionLine = about.split('\n').map((line) => line.trim()).find((line) => /CLI Version|cursor|agent/i.test(line))
+    if (versionLine) version = versionLine
+  } catch { /* `agent models` below is the readiness proof */ }
+
+  try {
+    const models = execFileSync(binary, ['models'], {
+      encoding: 'utf8',
+      stdio: ['ignore', 'pipe', 'pipe'],
+      timeout: 7000,
+    })
+    const required = ['composer-2.5-fast', 'cursor-grok-4.5-high-fast']
+    return {
+      binary,
+      version,
+      auth: required.every((model) => models.includes(model)) ? 'ready' : 'models-unresolved',
+    }
+  } catch (err) {
+    const output = `${err.stdout?.toString() || ''}\n${err.stderr?.toString() || ''}`
+    return {
+      binary,
+      version,
+      auth: /not logged in|logged out|sign[ -]?in required|authenticate/i.test(output) ? 'signed-out' : 'unknown',
+    }
+  }
+}
 const claudeVersion = getCliVersion('claude')
 const codexVersion = getCliVersion('codex')
 const claudeAuth = claudeVersion ? claudeAuthState() : null
 const codexAuth = codexVersion ? codexAuthState() : null
+const cursor = cursorCliState()
 if (claudeVersion) {
   if (claudeAuth === 'signed-out') {
     console.log(yellow('  ⚠') + ` Claude Code ${claudeVersion} installed — sign-in required`)
@@ -161,14 +208,33 @@ if (codexVersion) {
 } else {
   console.log(yellow('  ⚠') + ' Codex CLI not found ' + dim('— GPT Frontier/Balanced unavailable'))
 }
-const hasUsableAgent = (claudeVersion && claudeAuth !== 'signed-out') || (codexVersion && codexAuth !== 'signed-out')
+if (cursor.binary) {
+  if (cursor.auth === 'ready') {
+    console.log(green('  ✓') + ` Cursor Agent ${cursor.version} ` + dim('(Composer 2.5 / Grok 4.5)'))
+  } else if (cursor.auth === 'signed-out') {
+    console.log(yellow('  ⚠') + ` Cursor Agent ${cursor.version} installed — sign-in required`)
+    console.log('    Run: ' + bold('agent login'))
+  } else if (cursor.auth === 'models-unresolved') {
+    console.log(yellow('  ⚠') + ` Cursor Agent ${cursor.version} installed — required models unresolved`)
+    console.log('    Verify: ' + bold('agent models') + ' includes Composer 2.5 Fast and Grok 4.5 Fast')
+  } else {
+    console.log(yellow('  ⚠') + ` Cursor Agent ${cursor.version} installed — readiness unavailable`)
+    console.log('    Verify: ' + bold('agent models'))
+  }
+} else {
+  console.log(yellow('  ⚠') + ' Cursor Agent CLI not found ' + dim('— Composer/Grok unavailable'))
+}
+const hasUsableAgent = (claudeVersion && claudeAuth !== 'signed-out')
+  || (codexVersion && codexAuth !== 'signed-out')
+  || cursor.auth === 'ready'
 if (!hasUsableAgent) {
   console.log('')
   console.log(red('  ✗ No signed-in agent CLI is ready'))
-  console.log('    Claude Desktop alone is not enough; COS needs a terminal CLI.')
+  console.log('    Claude Desktop alone is not enough; COS needs a signed-in terminal CLI.')
   console.log('    Install Claude Code (no sudo): ' + bold('npm install -g @anthropic-ai/claude-code'))
   console.log('    Then run:                       ' + bold('claude auth login'))
   console.log('    or Codex CLI:        ' + bold('https://developers.openai.com/codex/') + ' then ' + bold('codex login'))
+  console.log('    or Cursor Agent CLI: run ' + bold('agent login') + ', then verify ' + bold('agent models'))
   console.log('    Setup help:          ' + bold('https://www.gotcos.com/wizard/'))
   console.log('')
   process.exit(1)

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@gotcos/glasses-server",
-  "version": "6.16.0",
-  "description": "COS Glasses — self-hosted AI heads-up-display server for Even G2 smart glasses, powered by your local Claude Code or Codex CLI",
+  "version": "6.16.2",
+  "description": "COS Glasses — self-hosted AI heads-up-display server for Even G2 smart glasses, powered by Claude Code, Codex, or Cursor Agent CLI",
   "type": "module",
   "bin": {
     "glasses-server": "bin/cli.cjs",
@@ -21,13 +21,18 @@
     "ai",
     "cos",
     "heads-up-display",
-    "whisper"
+    "whisper",
+    "cursor"
   ],
   "files": [
     "bin/cli.cjs",
     "bin/managed-server.cjs",
     "managed-runtime-contract.json",
     "server",
+    "!server/data/**",
+    "!server/certs/**",
+    "!server/models/**",
+    "server/models/silero_vad.onnx",
     "shared",
     "!server/**/*.test.ts",
     "!shared/**/*.test.ts",

package/server/lib/claude-bridge.ts

@@ -303,8 +303,11 @@ export interface ModelRunMetadata {
   claudeRunId?: string
   clientJobId?: string
   generation?: number
+  turnId?: string
   codexRunId?: string
   codexThreadId?: string
+  cursorRunId?: string
+  cursorChatId?: string
   outputAttachments?: MediaAttachmentRef[]
   outputImageStats?: RunOutputImageCollectionStats
 }
@@ -312,7 +315,7 @@ export interface ModelRunMetadata {
 /** Public-safe provider launch metadata for durable job coordination. It
  * deliberately exposes no ChildProcess object, kill handle, paths, or env. */
 export interface ProviderProcessMetadata {
-  provider: 'claude' | 'codex'
+  provider: 'claude' | 'codex' | 'cursor'
   runId: string
   pid?: number
   clientJobId?: string
@@ -365,6 +368,16 @@ export interface CallOptions {
   effort?: EffortPreference
   clientJobId?: string
   generation?: number
+  /** Alias used by Cursor/durable-job callers; preferred over `generation`. */
+  jobGeneration?: number
+  turnId?: string
+  surface?: 'query' | 'openai_compat' | 'unknown'
+  messageEra?: string
+  globalMsgNum?: number
+  /** Optional prompt block prepended for handoff-style context. */
+  handoffContext?: { promptBlock?: string }
+  /** Cursor ask vs full agent. Omitted → ask. */
+  cursorExecutionMode?: import('../../shared/model-preference.js').CursorExecutionMode
   /** Durable coordinator already owns the per-session provider lease. */
   sessionLockHeld?: boolean
 }

package/server/lib/cli-debug-view.ts

@@ -1,9 +1,10 @@
 import type { ClaudeRunConfig, ClaudeRunRecord } from './claude-run-ledger.js'
 import type { CodexRunConfig, CodexRunRecord } from './codex-run-ledger.js'
+import type { CursorRunConfig, CursorRunRecord } from './cursor-run-ledger.js'
 
 export const CLI_DEBUG_CAPABILITY = Object.freeze({
   schemaVersion: 1,
-  providers: Object.freeze({ claude: true, codex: true }),
+  providers: Object.freeze({ claude: true, codex: true, cursor: true }),
   metadataOnly: true,
 })
 
@@ -37,6 +38,7 @@ export interface SafeCliDebugResponse {
   providers: {
     claude: SafeCliDebugProvider
     codex: SafeCliDebugProvider
+    cursor: SafeCliDebugProvider
   }
 }
 
@@ -55,12 +57,14 @@ function safeStatus(value: unknown): SafeCliRunStatus {
     : 'failed'
 }
 
-function safeModelLabel(value: unknown, provider: 'claude' | 'codex'): string | undefined {
+function safeModelLabel(value: unknown, provider: 'claude' | 'codex' | 'cursor'): string | undefined {
   const model = optionalString(value)
   if (!model || model.length > 96) return undefined
   const allowed = provider === 'claude'
     ? /^(?:claude-|opus(?:\[1m\])?$|sonnet(?:\[1m\])?$|fable(?:\[1m\])?$|haiku(?:\[1m\])?$)[a-z0-9._\[\]-]*$/i
-    : /^(?:gpt-|codex-)[a-z0-9._\[\]-]*$/i
+    : provider === 'codex'
+      ? /^(?:gpt-|codex-)[a-z0-9._\[\]-]*$/i
+      : /^(?:cursor-|composer-)[a-z0-9._\[\]-]*$/i
   return allowed.test(model) ? model : undefined
 }
 
@@ -77,7 +81,7 @@ function safeTimestamp(value: unknown): string {
   return Number.isFinite(parsed) ? new Date(parsed).toISOString() : new Date(0).toISOString()
 }
 
-function safeErrorCode(provider: 'claude' | 'codex', value: unknown): string | undefined {
+function safeErrorCode(provider: 'claude' | 'codex' | 'cursor', value: unknown): string | undefined {
   const candidate = optionalString(value)
   if (!candidate) return undefined
   const allowed = new Set([
@@ -126,11 +130,28 @@ export function safeCodexLatestRun(run?: CodexRunRecord): SafeCliDebugLatestRun
   }
 }
 
+export function safeCursorLatestRun(run?: CursorRunRecord): SafeCliDebugLatestRun | null {
+  if (!run) return null
+  const concreteModel = safeModelLabel(run.cliModel, 'cursor')
+  const errorCode = safeErrorCode('cursor', run.errorCode)
+  return {
+    status: safeStatus(run.status),
+    model: safeModelLabel(run.model, 'cursor') ?? 'unknown',
+    ...(concreteModel ? { concreteModel } : {}),
+    resumed: run.resumed === true,
+    ...(optionalFiniteNumber(run.durationMs) !== undefined ? { durationMs: run.durationMs } : {}),
+    updatedAt: safeTimestamp(run.updatedAt),
+    ...(errorCode ? { errorCode } : {}),
+  }
+}
+
 export function safeCliDebugResponse(
   claudeConfig: ClaudeRunConfig,
   claudeRun: ClaudeRunRecord | undefined,
   codexConfig: CodexRunConfig,
   codexRun: CodexRunRecord | undefined,
+  cursorConfig: CursorRunConfig,
+  cursorRun: CursorRunRecord | undefined,
 ): SafeCliDebugResponse {
   return {
     schemaVersion: 1,
@@ -147,6 +168,12 @@ export function safeCliDebugResponse(
         workspaceConfigured: Boolean(codexConfig.cwd),
         latestRun: safeCodexLatestRun(codexRun),
       },
+      cursor: {
+        supported: true,
+        persistenceEnabled: cursorConfig.persistenceEnabled === true,
+        workspaceConfigured: Boolean(cursorConfig.cwd),
+        latestRun: safeCursorLatestRun(cursorRun),
+      },
     },
   }
 }