@gotcos/glasses-server 6.45.0 → 6.45.1

package/CHANGELOG.md

@@ -1,3 +1,11 @@
+## 6.45.1
+
+Knowledge opens with a bounded graph and supports verified question plans for COS Control 0.5.208.
+
+- Expose the initial overview through the authenticated workspace route. Model-assisted graph answers may carry validated anchors, waypoints and traversal results from the configured advanced pipeline. Plans navigate only; they cannot save or activate knowledge.
+- Add paired owner-name setup and editing with conflict detection, durable private profile writes and preservation of existing vocabulary and settings. Display identity does not transfer journal or indexing authority.
+- Report whether retained captures have a saveable transcript, unfinished transcription, or completed audio with no usable speech. Empty session shells are not advertised as recoverable recordings. Audio and late-upload admission retain their existing protections.
+
 ## 6.45.0
 
 Versioned local memory and explicit session identity for COS Control 0.5.207.

package/memory-runtime/runtime.json

@@ -3,5 +3,5 @@
   "protocol": 1,
   "version": "0.1.0",
   "file": "cos-memory-runtime-0.1.0.tar.gz",
-  "sha256": "1f03e8d3bcc878709bae7580a8c685c1c5494839cebd7f2c79248dbc17e4d512"
+  "sha256": "5dfe8454f3bad21b0bfd38aafd567990337a7cc58c2bcdc1b2dbb84f8af0ae13"
 }

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@gotcos/glasses-server",
-  "version": "6.45.0",
-  "description": "COS Glasses \u2014 self-hosted AI heads-up-display server for Even G2 smart glasses, powered by Claude Code, Codex, Cursor Agent CLI, or local Ollama",
+  "version": "6.45.1",
+  "description": "COS Glasses — self-hosted AI heads-up-display server for Even G2 smart glasses, powered by Claude Code, Codex, Cursor Agent CLI, or local Ollama",
   "type": "module",
   "bin": {
     "glasses-server": "bin/cli.cjs",

package/server/lib/cos-context-browser.ts

@@ -990,11 +990,19 @@ export function normalizeSampleKickoff(value: unknown): Record<string, unknown>
 }
 
 /** `graph-ask`: one answer from the graph, bounded. */
-export function normalizeGraphAnswer(value: unknown): { question: string; mode: string; answer: string; elapsed_s: number | null } | null {
+export function normalizeGraphAnswer(value: unknown): { question: string; mode: string; answer: string; elapsed_s: number | null; investigation?: Record<string, unknown> } | null {
   const s = asRecord(value) ?? {}
   const answer = typeof s.answer === 'string' ? s.answer.slice(0, 20_000) : null
   if (answer === null) return null
-  return { question: stringOrAbsent(s.question, KNOWLEDGE_ASK_MAX_CHARS) ?? '', mode: stringOrAbsent(s.mode, 16) ?? 'hybrid', answer, elapsed_s: typeof s.elapsed_s === 'number' && Number.isFinite(s.elapsed_s) ? s.elapsed_s : null }
+  const candidate = asRecord(s.investigation)
+  let investigation: Record<string, unknown> | undefined
+  if (candidate?.status === 'unavailable') investigation = { status: 'unavailable', message: stringOrAbsent(candidate.message, 500) ?? 'No verified graph plan is available.' }
+  if (candidate?.status === 'ready' && Array.isArray(candidate.nodes) && candidate.nodes.length <= 200 && Array.isArray(candidate.links) && candidate.links.length <= 500 && JSON.stringify(candidate).length <= 500_000) {
+    // Python validates this read-only plan against the policy-filtered graph and generation.
+    // Forward only the canvas contract; it never becomes an arbitrary workspace request.
+    investigation = Object.fromEntries(['status','message','nodes','links','anchors','waypoints','filters','paths','generation','truncated','truncation_reason','scope'].filter(key => candidate[key] !== undefined).map(key => [key, candidate[key]]))
+  }
+  return { question: stringOrAbsent(s.question, KNOWLEDGE_ASK_MAX_CHARS) ?? '', mode: stringOrAbsent(s.mode, 16) ?? 'hybrid', answer, elapsed_s: typeof s.elapsed_s === 'number' && Number.isFinite(s.elapsed_s) ? s.elapsed_s : null, ...(investigation ? { investigation } : {}) }
 }
 
 export interface IngestProgressItem { id: string; outcome: 'indexed' | 'failed' | 'unknown'; seconds: number | null; reason: string | null }

package/server/lib/profile.ts

@@ -1,14 +1,14 @@
 // Profile loader — reads user identity from .cos-profile.json (gitignored)
 // Falls back to generic defaults for users who haven't configured a profile
 
-import { existsSync, readFileSync } from 'node:fs'
+import { existsSync, readFileSync, mkdirSync } from 'node:fs'
 import { homedir } from 'node:os'
-import { resolve } from 'node:path'
+import { resolve, dirname } from 'node:path'
 import { atomicWriteFileSync } from './atomic-fs.js'
 
 const APP_ROOT = resolve(import.meta.dirname, '../..')
 
-const PLACEHOLDER_OWNER_NAMES = new Set(['your name', 'user'])
+const PLACEHOLDER_OWNER_NAMES = new Set(['your name', 'user', 'me', 'owner', 'wearer'])
 const PLACEHOLDER_VOCABULARY = new Set(['nameone', 'nametwo', 'yourcompany', 'productname'])
 const PLACEHOLDER_CORRECTIONS = new Set(['soundalike\u0000yourname'])
 
@@ -53,8 +53,9 @@ export function loadProfileObject(): Record<string, unknown> {
 function loadProfile(): Record<string, unknown> {
   if (profileCache) return profileCache
   try {
-    profileCache = JSON.parse(readFileSync(profilePath(), 'utf-8'))
-    return profileCache!
+    const parsed: unknown = JSON.parse(readFileSync(profilePath(), 'utf-8'))
+    profileCache = parsed && typeof parsed === 'object' && !Array.isArray(parsed) ? parsed as Record<string, unknown> : {}
+    return profileCache
   } catch {
     profileCache = {}
     return profileCache
@@ -98,6 +99,29 @@ export function getOwnerName(): string {
   return !value || PLACEHOLDER_OWNER_NAMES.has(value.toLowerCase()) ? 'User' : value
 }
 
+/** Display identity only. Never reassign journal authority or the ingestion-owner Mac. */
+export function setProfileOwnerName(name: unknown, expected: unknown): string {
+  if (typeof name !== 'string' || !name.trim() || name.trim().length > 120 || /[\x00-\x1f\x7f]/.test(name) || PLACEHOLDER_OWNER_NAMES.has(name.trim().toLowerCase())) throw new Error('invalid_owner_name')
+  if (expected !== null && typeof expected !== 'string') throw new Error('invalid_expected_owner')
+  let current: Record<string, unknown> = {}
+  const source = profilePath()
+  try {
+    const parsed: unknown = JSON.parse(readFileSync(source, 'utf8'))
+    if (!parsed || typeof parsed !== 'object' || Array.isArray(parsed)) throw new Error('invalid_profile')
+    current = parsed as Record<string, unknown>
+  } catch (error) {
+    if ((error as NodeJS.ErrnoException).code !== 'ENOENT') throw new Error('profile_unreadable')
+  }
+  const previous = typeof current.owner_name === 'string' ? current.owner_name.trim() : ''
+  const actual = !previous || PLACEHOLDER_OWNER_NAMES.has(previous.toLowerCase()) ? null : previous
+  if (actual !== expected) throw new Error('owner_changed')
+  const target = process.env.COS_PROFILE_PATH?.trim() ? source : homeProfilePath()
+  mkdirSync(dirname(target), { recursive: true, mode: 0o700 })
+  atomicWriteFileSync(target, JSON.stringify({ ...current, owner_name: name.trim() }, null, 2), { mode: 0o600 })
+  clearProfileCache()
+  return name.trim()
+}
+
 /** Short speaker label for the glasses wearer, used by diarization to fast-path
  *  the owner's voiceprint. Defaults to 'Me'. Configure via owner_speaker_label. */
 export function getOwnerSpeakerLabel(): string {

package/server/routes/health.ts

@@ -329,6 +329,8 @@ healthRouter.get('/health', async (_req, res) => {
       idleMinutes: item.idleMinutes,
       capturedMinutes: item.capturedMinutes,
       chunks: item.chunks,
+      transcriptState: item.transcriptState,
+      canSave: item.canSave,
       promotesAt: item.promotesAt,
       hasDraft: item.draftPath != null,
     })),

package/server/routes/memory.ts

@@ -1,6 +1,9 @@
 import { Router } from 'express'
 import { callPython, contextSourceAvailable, pythonBridgeState } from '../lib/python-bridge.js'
 import { searchMemories } from '../lib/context-library-search.js'
+import { getOwnerName, setProfileOwnerName } from '../lib/profile.js'
+import { resetDecoderCaches } from '../lib/whisper-local.js'
+import { resetVocabEchoCache } from '../lib/hallucination-filter.js'
 
 /**
  * Is there anything to serve — a Python bridge OR plain files on disk?
@@ -54,6 +57,24 @@ import { normalizeReviewDecision, LEARNING_REVIEW_LIMIT,
 } from '../lib/cos-context-browser.js'
 
 export const memoryRouter = Router()
+// Profile setup is available before a memory bridge is configured. API authentication still applies.
+memoryRouter.get('/context/profile/owner', (_req, res) => {
+  const name = getOwnerName()
+  res.json({ owner_name: name === 'User' ? null : name })
+})
+memoryRouter.post('/context/profile/owner', (req, res) => {
+  try {
+    const body = req.body as Record<string, unknown>
+    if (!body || typeof body !== 'object' || Array.isArray(body) || Object.keys(body).some(key => !['owner_name','expected_owner'].includes(key))) { res.status(400).json({ error: 'invalid_owner_profile' }); return }
+    const name = setProfileOwnerName(body.owner_name, body.expected_owner)
+    resetDecoderCaches(); resetVocabEchoCache()
+    res.json({ owner_name: name })
+  } catch (error) {
+    const message = error instanceof Error ? error.message : ''
+    const reason = ['owner_changed','invalid_owner_name','invalid_expected_owner','profile_unreadable'].includes(message) ? message : 'profile_save_failed'
+    res.status(reason === 'owner_changed' ? 409 : reason.startsWith('invalid_') ? 400 : 503).json({ error: reason })
+  }
+})
 memoryRouter.use((req, res, next) => {
   if (['owner', 'audience', 'authority_host', 'authority_epoch'].some(key => key in req.query || (req.body && key in req.body))) {
     res.status(400).json({ error: 'caller_authority_forbidden' }); return
@@ -62,7 +83,7 @@ memoryRouter.use((req, res, next) => {
 })
 // Additive workspace protocol. The existing /memory array contract remains intact.
 // Authentication is the instance pairing token; caller fields cannot select an owner.
-const WORKSPACE_ACTIONS = new Set(['status', 'graph_expand', 'graph_paths', 'graph_resolve', 'list_explorations', 'get_exploration',
+const WORKSPACE_ACTIONS = new Set(['status', 'graph_overview', 'graph_expand', 'graph_paths', 'graph_resolve', 'list_explorations', 'get_exploration',
   'save_exploration', 'save_assertion', 'policy_get', 'policy_set', 'memory_page', 'learning_page', 'review_page', 'get_memory', 'review_memory', 'trace_summary', 'source_status', 'refresh_source', 'current_sources', 'identity_split_preview', 'identity_status', 'identity_keep_apart', 'rule_page', 'propose_rule', 'review_rule', 'rollback_rule', 'activate_rule', 'rule_evaluation'])
 memoryRouter.post('/context/memory/workspace', async (req, res) => {
   noStore(res)

package/server/routes/transcribe-stream.ts

@@ -463,6 +463,8 @@ export interface StrandedCapture {
   /** Minutes of audio actually captured before it went quiet. */
   capturedMinutes: number
   chunks: number
+  transcriptState: 'ready' | 'processing' | 'no_speech'
+  canSave: boolean
   /** When the sweeper will save this on the user's behalf. */
   promotesAt: string
   /** Readable draft on disk, once the capture has been stale long enough. */
@@ -485,21 +487,30 @@ export interface StrandedCapture {
  */
 export function getStrandedCaptures(now = Date.now()): StrandedCapture[] {
   const drafts = new Map(listStrandedDrafts(STRANDED_DRAFT_DIR).map(d => [d.sessionId, d]))
-  return getTranscriptionSessionLiveness(now).staleSessions.map(stale => {
+  return getTranscriptionSessionLiveness(now).staleSessions.flatMap(stale => {
     const session = sessions.get(stale.sessionId)
     const lastActivityAt = session?.lastActivityAt ?? now - stale.silentForMs
     const draft = drafts.get(stale.sessionId) ?? null
-    return {
+    const received = session?.receivedIndices ?? []
+    // An empty session shell is not evidence that audio was lost. Leave its
+    // ledger open so a backgrounded phone can still upload before retention.
+    if (!stale.chunks && !received.length && !hasSessionAudio(stale.sessionId)) return []
+    const completed = new Set(session?.asrCompletedIndices ?? [])
+    const noSpeech = !stale.chunks && received.length > 0 && received.every(index => completed.has(index))
+    const transcriptState: StrandedCapture['transcriptState'] = stale.chunks ? 'ready' : noSpeech ? 'no_speech' : 'processing'
+    return [{
       sessionId: stale.sessionId,
       idleMinutes: Math.round(stale.silentForMs / 60_000),
       capturedMinutes: Math.round(
         Math.max(0, lastActivityAt - (session?.startTime ?? lastActivityAt)) / 60_000,
       ),
       chunks: stale.chunks,
+      transcriptState,
+      canSave: transcriptState === 'ready',
       promotesAt: new Date(lastActivityAt + LOCAL_FIRST_MEETING_IDLE_RETENTION_MS).toISOString(),
       draftPath: draft?.path ?? null,
       draftBytes: draft?.bytes ?? null,
-    }
+    }]
   })
 }