@gotcos/glasses-server 6.27.5 → 6.27.6

package/CHANGELOG.md

@@ -1,3 +1,17 @@
+## 6.27.6
+- **V2 original chunks are 1 MiB.** Same sequential one-in-flight loop, same
+  ArrayBuffer bodies, same GET-progress resume. A 244 MB clip goes from 953
+  round trips to ~239. That is the leftover ~10% against legacy 8 MiB, paid as
+  per-chunk RTT, without opening a second fetch — two concurrent ArrayBuffer
+  PUTs from this WebView are still an untested shape.
+- **In-flight 256 KiB drafts keep their size.** `putOriginal` checks the
+  session's own `chunkBytes`, not the live constant, so a draft that started
+  before this upgrade still accepts 256 KiB parts and rejects a 1 MiB PUT into
+  that slot. New inits advertise 1 MiB. Do not raise this above 1 MiB until the
+  phone parser cap is raised first — above that, V2 capability parse returns
+  null and the transport silently falls back to legacy.
+- Frame parts stay 256 KiB. Protocol stays 1.
+
 ## 6.27.5
 - **Chunk uploads now leave a server-side trace.** On 2026-08-12 a phone upload
   stalled on both media transports and the server was a complete blind spot: nothing

package/README.md

@@ -180,7 +180,8 @@ machine-wide rollback for build 204+ server-owned query recovery),
 `COS_MEDIA_ROOT` (optional image/video store location; default
 `~/.cos-glasses/data/media`), and `COS_VIDEO_UPLOAD_V2=1` (private 6.27.3+
 resumable-video canary, managed by COS Control 0.5.20). The V2 canary retains
-accepted 256 KiB chunks and finalize receipts across restarts; keep it off when
+accepted original chunks (1 MiB on new sessions; leftover 256 KiB drafts keep
+that size) and finalize receipts across restarts; keep it off when
 using an older companion. Your name + transcription vocabulary live in
 `~/.cos-glasses/.cos-profile.json` (see `.cos-profile.example.json`).
 Factory example values are ignored; add the real names, companies, acronyms,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@gotcos/glasses-server",
-  "version": "6.27.5",
+  "version": "6.27.6",
   "description": "COS Glasses \u2014 self-hosted AI heads-up-display server for Even G2 smart glasses, powered by Claude Code, Codex, or Cursor Agent CLI",
   "type": "module",
   "bin": {

package/server/index.ts

@@ -162,7 +162,8 @@ app.use('/api', requireApiToken(API_TOKEN))
 // through their true terminal boundary.
 app.use('/api', (req, res, next) => {
   if (req.method === 'GET' || req.method === 'HEAD' || req.method === 'OPTIONS') return next()
-  // V2 video chunks are bounded to 256 KiB and commit through the upload
+  // V2 video original chunks are bounded to the advertised session size (1 MiB
+  // on new sessions, 256 KiB on leftover drafts) and commit through the upload
   // registry's own generation lock. Holding the global mutation lease while
   // the phone transfers the body recreated the exact 90-second drain failure
   // this protocol exists to remove. Admission is checked by the route before

package/server/lib/video-upload-v2.ts

@@ -27,7 +27,12 @@ import { getMediaStore } from './media-store.js'
 import { MAX_CHUNKED_MEDIA_BYTES, MAX_VIDEO_DURATION_MS } from './rich-media-safety.js'
 
 export const VIDEO_UPLOAD_V2_PROTOCOL = 1
-export const VIDEO_UPLOAD_V2_CHUNK_BYTES = 256 * 1024
+/** New sessions only. In-flight drafts keep the chunkBytes baked into their
+ *  manifest — a 256 KiB upload that survives this upgrade must not be rewritten
+ *  to 1 MiB mid-transfer. The phone parser currently rejects advertised sizes
+ *  above 1 MiB and disables V2 entirely, so do not raise this without raising
+ *  that cap first. */
+export const VIDEO_UPLOAD_V2_CHUNK_BYTES = 1024 * 1024
 export const VIDEO_UPLOAD_V2_MAX_FRAME_BYTES = 256 * 1024
 export const VIDEO_UPLOAD_V2_MAX_FRAME_PACK_BYTES = 2 * 1024 * 1024
 export const VIDEO_UPLOAD_PHONE_FRAMES_MIN = 8
@@ -177,6 +182,17 @@ function parseIndex(value: unknown): number | null {
   return typeof raw === 'number' && Number.isSafeInteger(raw) && raw >= 0 ? raw : null
 }
 
+/** Exact byte length this session expects for original index `index`.
+ *  Non-final parts are the session's own chunkBytes (which may be 256 KiB on a
+ *  draft that started before the 1 MiB advertisement). The last part is the
+ *  remainder. Using the live constant here would accept a 1 MiB PUT into a
+ *  256 KiB slot and fail assembly, or reject a legitimate leftover last chunk. */
+function expectedOriginalPartBytes(manifest: VideoUploadManifest, index: number): number {
+  if (index < 0 || index >= manifest.chunkCount) return 0
+  if (index === manifest.chunkCount - 1) return manifest.totalBytes - index * manifest.chunkBytes
+  return manifest.chunkBytes
+}
+
 function sameInit(manifest: VideoUploadManifest, input: Required<Pick<VideoUploadManifest,
   'serverInstanceId' | 'totalBytes' | 'mime'>> & Pick<VideoUploadManifest, 'label' | 'capturedAt' | 'sessionId'>): boolean {
   return manifest.serverInstanceId === input.serverInstanceId
@@ -442,8 +458,8 @@ export class VideoUploadRegistry {
   ): Promise<VideoUploadProgress> {
     const index = parseIndex(indexValue)
     if (index === null || bytes.length === 0) throw new VideoUploadError('video_upload_invalid', 'valid non-empty part required')
-    const max = kind === 'original' ? VIDEO_UPLOAD_V2_CHUNK_BYTES : VIDEO_UPLOAD_V2_MAX_FRAME_BYTES
-    if (bytes.length > max) throw new VideoUploadError('video_upload_invalid', 'part exceeds its byte ceiling', { maxBytes: max })
+    const advertisedMax = kind === 'original' ? VIDEO_UPLOAD_V2_CHUNK_BYTES : VIDEO_UPLOAD_V2_MAX_FRAME_BYTES
+    if (bytes.length > advertisedMax) throw new VideoUploadError('video_upload_invalid', 'part exceeds its byte ceiling', { maxBytes: advertisedMax })
     this.activeWriters.set(uploadId, (this.activeWriters.get(uploadId) ?? 0) + 1)
     try {
       return await this.withLock(uploadId, () => {
@@ -451,6 +467,14 @@ export class VideoUploadRegistry {
         if (manifest.state !== 'receiving') throw new VideoUploadError('video_upload_busy', `upload is ${manifest.state}`)
         if (kind === 'original' && index >= manifest.chunkCount) throw new VideoUploadError('video_upload_invalid', 'chunk index exceeds declared upload')
         if (kind === 'frames' && index >= VIDEO_UPLOAD_PHONE_FRAMES_MAX) throw new VideoUploadError('video_upload_invalid', 'frame index exceeds pack limit')
+        if (kind === 'original') {
+          const expected = expectedOriginalPartBytes(manifest, index)
+          if (bytes.length !== expected) {
+            throw new VideoUploadError('video_upload_invalid', 'part does not match the session chunk size', {
+              expectedBytes: expected, receivedBytes: bytes.length, chunkBytes: manifest.chunkBytes,
+            })
+          }
+        }
         const collection = manifest[kind]
         const key = String(index)
         const digest = sha256(bytes)