@gotcos/glasses-server 6.2.0 → 6.2.1

package/CHANGELOG.md

@@ -1,5 +1,27 @@
 # Changelog
 
+## 6.2.1
+
+Foolproofing release — driven by an adversarial onboarding QA pass.
+
+- **The server now prints URLs the phone can actually use.** Boot output lists
+  your real addresses (`http://100.x.x.x:3141` labeled Tailscale, LAN IPs labeled
+  same-Wi-Fi) instead of only the un-pasteable bind address `0.0.0.0`.
+- **Auto-generated API tokens survive restarts.** First boot saves the token to
+  `~/.cos-glasses/.env`, so re-running the server no longer silently rotates the
+  credential your app already saved (the "worked yesterday, 401 today" trap).
+- **Starter-Kit COS inheritance is real now.** Run `npx @gotcos/glasses-server`
+  from your COS folder and glasses chat loads its brain: the launcher records
+  your launch directory, and when it contains `.cos/manifest.json`, `AGENTS.md`,
+  or `CLAUDE.md`, Claude/Codex spawn there (explicit `COS_SCRIPTS_DIR` still wins).
+- **Transfer-integrity report actually surfaces.** 6.2.0 recorded lost chunks but
+  never returned them; the offline-session `finalize` response now includes
+  `transferIntegrity` (received/expected/missing/completeness) and a gap-aware
+  `transcript` with inline `[… audio gap …]` markers.
+- **One default model everywhere: Sonnet.** The query router, the OpenAI-compat
+  surface, and CLI pre-warm all default to Sonnet (was a mix of Opus and Haiku).
+  Set `COS_G2_DEFAULT_MODEL` to override; per-query picks unchanged.
+
 ## 6.2.0
 
 Reliability release — ports the hardening the full COS Glasses app shipped in June.

package/bin/cli.cjs

@@ -13,6 +13,12 @@ const { homedir } = require('os')
 const PKG_ROOT = resolve(__dirname, '..')
 const CONFIG_DIR = join(homedir(), '.cos-glasses')
 
+// Record where the user ran `npx @gotcos/glasses-server` from. The server spawns
+// with cwd = PKG_ROOT (the npx cache), so without this the user's Starter-Kit COS
+// (AGENTS.md / CLAUDE.md / .cos/) in their launch folder would never be seen.
+// Chat spawns of claude/codex use this dir when it contains a COS brain.
+if (!process.env.COS_LAUNCH_DIR) process.env.COS_LAUNCH_DIR = process.cwd()
+
 const green = (s) => `\x1b[32m${s}\x1b[0m`
 const red = (s) => `\x1b[31m${s}\x1b[0m`
 const yellow = (s) => `\x1b[33m${s}\x1b[0m`
@@ -185,6 +191,12 @@ if (!process.env.BIND_HOST) {
 }
 
 // Step 7: start the bundled server
+try {
+  const ld = process.env.COS_LAUNCH_DIR
+  if (ld && (existsSync(join(ld, '.cos', 'manifest.json')) || existsSync(join(ld, 'AGENTS.md')) || existsSync(join(ld, 'CLAUDE.md')))) {
+    console.log(green('  ✓') + ` COS detected in ${dim(ld)} — glasses chat will load its brain`)
+  }
+} catch { /* detection is best-effort */ }
 console.log('')
 console.log(dim('  Starting server...'))
 console.log('')

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@gotcos/glasses-server",
-  "version": "6.2.0",
+  "version": "6.2.1",
   "description": "COS Glasses — self-hosted AI heads-up-display server for Even G2 smart glasses, powered by your local Claude Code or Codex CLI",
   "type": "module",
   "bin": {

package/server/index.ts

@@ -7,7 +7,9 @@ import cors from 'cors'
 import path from 'node:path'
 import { fileURLToPath } from 'node:url'
 import { createServer as createHttpsServer } from 'node:https'
-import { readFileSync, existsSync } from 'node:fs'
+import { readFileSync, existsSync, appendFileSync, mkdirSync } from 'node:fs'
+import { networkInterfaces, homedir } from 'node:os'
+import { join } from 'node:path'
 import { execSync } from 'node:child_process'
 import { randomBytes } from 'node:crypto'
 import { healthRouter } from './routes/health.js'
@@ -43,6 +45,18 @@ const BIND_HOST = process.env.BIND_HOST ?? '0.0.0.0'
 const API_TOKEN_AUTO = !process.env.COS_API_TOKEN
 const API_TOKEN = process.env.COS_API_TOKEN ?? `_${randomBytes(32).toString('base64url')}`
 process.env.COS_API_TOKEN = API_TOKEN  // make available to routes that check it
+// Persist an auto-generated token to ~/.cos-glasses/.env so it SURVIVES restarts.
+// Without this, every re-run mints a new token and the app's saved token starts
+// returning 401 — the symptom looks like a broken app, not a rotated credential.
+let API_TOKEN_PERSISTED = false
+if (API_TOKEN_AUTO) {
+  try {
+    const envDir = join(homedir(), '.cos-glasses')
+    mkdirSync(envDir, { recursive: true })
+    appendFileSync(join(envDir, '.env'), `\n# auto-generated by the server so the app token survives restarts\nCOS_API_TOKEN=${API_TOKEN}\n`)
+    API_TOKEN_PERSISTED = true
+  } catch { /* read-only home — token stays per-session */ }
+}
 
 // Server metrics — shared with /api/health for monitoring
 export const serverMetrics = {
@@ -178,11 +192,31 @@ app.listen(PORT, BIND_HOST, () => {
   console.log(`[COS API] HTTP server running on http://${BIND_HOST}:${PORT}`)
   console.log(`[COS API] Mode: ${COS_MODE ? 'COS pipeline' : 'standalone'}`)
 
+  // Print ADDRESSES THE PHONE CAN ACTUALLY REACH. The bind address (0.0.0.0) is
+  // not paste-able — enumerate real interfaces and label the Tailscale one.
+  try {
+    const nets = networkInterfaces()
+    const addrs: Array<{ ip: string; label: string }> = []
+    for (const [name, infos] of Object.entries(nets)) {
+      for (const info of infos ?? []) {
+        if (info.family !== 'IPv4' || info.internal) continue
+        const isTailscale = info.address.startsWith('100.') || name.startsWith('utun') || name.startsWith('tailscale')
+        addrs.push({ ip: info.address, label: isTailscale ? 'Tailscale — works from anywhere' : `${name} — same Wi-Fi only` })
+      }
+    }
+    if (addrs.length > 0) {
+      addrs.sort((a, b) => Number(b.label.startsWith('Tailscale')) - Number(a.label.startsWith('Tailscale')))
+      console.log('')
+      console.log('[COS API] Server URL for the COS Glasses app:')
+      for (const a of addrs) console.log(`[COS API]   http://${a.ip}:${PORT}   (${a.label})`)
+    }
+  } catch { /* interface enumeration is best-effort */ }
+
   // Print the full API token when auto-generated — the user pastes it into the app.
   if (API_TOKEN_AUTO) {
     console.log('')
     console.log(`[COS API] API Token: ${API_TOKEN}`)
-    console.log('[COS API]   ^ paste this into the COS Glasses app (set COS_API_TOKEN in .env for a fixed token)')
+    console.log('[COS API]   ^ paste this into the COS Glasses app' + (API_TOKEN_PERSISTED ? ' — saved to ~/.cos-glasses/.env so it stays the same across restarts' : ' (set COS_API_TOKEN in .env for a fixed token)'))
     console.log('')
   }
 

package/server/lib/claude-bridge.ts

@@ -12,11 +12,12 @@ import { join } from 'node:path'
 import { appendFileSync } from 'node:fs'
 import crypto from 'node:crypto'
 import { COS_SCRIPTS_DIR } from './python-bridge.js'
+import { cosBrainDir } from './launch-dir.js'
 import { logTokenAudit } from './token-audit.js'
 import { buildSystemPrompt, buildLightweightSystemPrompt, buildPrewarmSystemPrompt, getCachedContextInstant } from './context-builder.js'
 import { getHistory, addExchange, formatHistoryForPrompt, getOrCreateSession, isNewSession, markSessionNotified, getSessionModel, getSessionRaw, replaceLastExchangeWithSummary, type ModelPreference, type PromptReference } from './conversation.js'
 import { notifySessionStart, notifyExchange } from './telegram-notify.js'
-import { isClaudeModel, type ClaudeModelPreference } from '../../shared/model-preference.js'
+import { isClaudeModel, DEFAULT_MODEL, type ClaudeModelPreference } from '../../shared/model-preference.js'
 import {
   finishClaudeRun,
   getClaudeEffortLevel,
@@ -182,7 +183,7 @@ export async function preWarmCLI(): Promise<void> {
 
     const proc = spawn('claude', [
       '-p',
-      '--model', 'opus',  // Must match default query model — --resume inherits session model
+      '--model', DEFAULT_MODEL,  // Must match default query model — --resume inherits session model
       '--effort', getClaudeEffortLevel(),
       '--output-format', 'stream-json',
       '--verbose',
@@ -191,7 +192,7 @@ export async function preWarmCLI(): Promise<void> {
     ], {
       stdio: ['pipe', 'pipe', 'pipe'],
       env,
-      cwd: COS_SCRIPTS_DIR ?? process.cwd(),
+      cwd: COS_SCRIPTS_DIR ?? cosBrainDir() ?? process.cwd(),
     })
 
     let buffer = ''
@@ -419,7 +420,7 @@ export async function callClaudeStreaming(
   // Strip CLAUDECODE env var so claude -p doesn't think it's nested
   const env = { ...process.env }
   delete env.CLAUDECODE
-  const cliCwd = COS_SCRIPTS_DIR ?? process.cwd()
+  const cliCwd = COS_SCRIPTS_DIR ?? cosBrainDir() ?? process.cwd()
   const inactivityMs = INACTIVITY_BY_MODEL[resolvedModel]
   const defaultWallMax = WALL_MAX_BY_MODEL[resolvedModel]
   const wallMax = isExtendedQuery(query) ? WALL_MAX_EXTENDED_MS : defaultWallMax

package/server/lib/codex-run-ledger.ts

@@ -2,6 +2,7 @@ import crypto from 'node:crypto'
 import { appendFileSync, existsSync, mkdirSync, readFileSync } from 'node:fs'
 import { dirname, resolve } from 'node:path'
 import { COS_SCRIPTS_DIR } from './python-bridge.js'
+import { cosBrainDir } from './launch-dir.js'
 import { CODEX_ENGINE_SESSION_TTL_MS, type CodexTrustMode } from './codex-engine-sessions.js'
 import {
   CODEX_HIGH_REASONING_EFFORT,
@@ -80,6 +81,10 @@ export function getCodexExecutionCwd(): string {
   const configured = process.env.CODEX_GLASSES_WORKDIR?.trim()
   if (configured) return resolve(configured)
   if (COS_SCRIPTS_DIR) return resolve(COS_SCRIPTS_DIR, '..', '..')
+  // A Starter-Kit COS in the directory the user launched npx from — Codex
+  // loads its AGENTS.md brain natively when run there.
+  const brain = cosBrainDir()
+  if (brain) return brain
   // Last resort when neither CODEX_GLASSES_WORKDIR nor COS_SCRIPTS_DIR is set:
   // the server's own working dir (codex glasses is an optional, env-configured feature).
   return process.cwd()

package/server/lib/launch-dir.ts

@@ -0,0 +1,29 @@
+// COS brain auto-detection for the "glasses inherit your COS" promise.
+//
+// The npx launcher (bin/cli.cjs) records the directory the user ran `npx
+// @gotcos/glasses-server` from as COS_LAUNCH_DIR before re-spawning the server
+// with cwd = the package root. If that launch directory contains a COS brain
+// (a Starter-Kit scaffold: .cos/manifest.json, AGENTS.md, or CLAUDE.md), chat
+// spawns of claude/codex use IT as their working directory — so the CLIs load
+// the user's brain exactly as they would in a terminal session in that folder.
+//
+// Precedence stays: COS_SCRIPTS_DIR (full COS pipeline) > detected brain dir >
+// process.cwd(). Explicit config always wins.
+import { existsSync } from 'node:fs'
+import { join, resolve } from 'node:path'
+
+let cached: string | null | undefined
+
+/** The user's launch directory IF it contains a COS brain; otherwise null. */
+export function cosBrainDir(): string | null {
+  if (cached !== undefined) return cached
+  const raw = process.env.COS_LAUNCH_DIR?.trim()
+  if (!raw) { cached = null; return cached }
+  const dir = resolve(raw)
+  const hasBrain =
+    existsSync(join(dir, '.cos', 'manifest.json')) ||
+    existsSync(join(dir, 'AGENTS.md')) ||
+    existsSync(join(dir, 'CLAUDE.md'))
+  cached = hasBrain ? dir : null
+  return cached
+}

package/server/routes/openai-compat.ts

@@ -6,7 +6,7 @@
 import { Router } from 'express'
 import { preWarmCLI, logLatency } from '../lib/claude-bridge.js'
 import { callModelStreaming } from '../lib/model-router.js'
-import { normalizeModelPreference, type ModelPreference } from '../../shared/model-preference.js'
+import { normalizeModelPreference, DEFAULT_MODEL, type ModelPreference } from '../../shared/model-preference.js'
 import { tryInstantResponse } from '../lib/response-cache.js'
 import crypto from 'node:crypto'
 
@@ -79,7 +79,7 @@ function resolveModel(model?: string, _query?: string): ModelPreference {
   if (model === 'cos-sonnet') return 'sonnet'
   if (model === 'cos-haiku') return 'haiku'
   if (model === 'cos-codex-high' || model === 'cos-codex') return 'codex-high'
-  return normalizeModelPreference(process.env.COS_G2_DEFAULT_MODEL) ?? 'haiku'
+  return normalizeModelPreference(process.env.COS_G2_DEFAULT_MODEL) ?? DEFAULT_MODEL
 }
 
 const MODEL_NAMES: Record<ModelPreference, string> = {

package/server/routes/transcribe-stream.ts

@@ -1170,11 +1170,16 @@ transcribeStreamRouter.post('/transcribe-stream/offline-sessions/:sessionId/fina
     const chunks = getSessionChunks(sessionId)
     if (!chunks || chunks.length === 0) throw makeHttpError(404, 'offline session has no chunks', 'session_not_found')
     await drainSessionAudioWrites(sessionId)
-    const transcript = getSessionTranscript(sessionId) ?? ''
+    // Gap-aware assembly: chunks lost in transit surface as inline
+    // "[… audio gap …]" markers instead of being silently stitched over.
+    const transcript = getSessionTranscript(sessionId, { withGaps: true }) ?? ''
+    const transferIntegrity = analyzeTranscriptGaps(sessionId)
     res.json({
       sessionId,
       chunks: chunks.length,
       transcriptChars: transcript.length,
+      transcript,
+      transferIntegrity,
       readyToSave: true,
     })
   } catch (err: unknown) {

package/shared/model-preference.ts

@@ -2,7 +2,7 @@ export type ClaudeModelPreference = 'opus' | 'sonnet' | 'haiku'
 export type CodexModelPreference = 'codex-high'
 export type ModelPreference = ClaudeModelPreference | CodexModelPreference
 
-export const DEFAULT_MODEL = 'opus' as const
+export const DEFAULT_MODEL = 'sonnet' as const
 export const CODEX_HIGH_MODEL: CodexModelPreference = 'codex-high'
 
 // Optional codex model passed to `codex exec --model`. Empty (the default) means