@gotcos/glasses-server 6.63.1 → 6.65.0

package/server/routes/jev.ts

@@ -12,6 +12,7 @@ import { SessionRecommender, parseCandidates } from '../lib/session-recommendati
 import { CompletionChecker, readRepliesSince } from '../lib/work-completion.js'
 import { isSafeSessionId, type AgentProvider } from '../lib/agent-session-store.js'
 import { listBoard } from '../lib/task-store.js'
+import { sharedWorkSearchJevClient } from '../lib/work-search.js'
 import { isSafeDomainName } from '../lib/domains.js'
 
 /** What the route reads from a meeting review (6.57.1): the server's own record, never client text. */
@@ -30,6 +31,8 @@ export interface JevRouteDependencies {
   /** 6.58.0: a session's replies since a time (or its newest reply) from this server's transcripts; null when the
    *  session is not on this Mac. */
   replies: (provider: AgentProvider, sessionId: string, afterMs: number | null) => Promise<string | null>
+  /** 6.65.0: Work search keeps its own client and breaker; a newly saved key clears that breaker too. */
+  searchJev: Pick<JevClient, 'resetForNewKey'>
 }
 
 /** Work identity first: it survives a rename, while a new card's id could equal an old identity's text hash. */
@@ -40,7 +43,8 @@ function findTask<T extends { id: string; workIdentity?: string }>(rows: T[], id
 export function createJevRouter(overrides: Partial<JevRouteDependencies> = {}): Router {
   const jev = overrides.jev ?? sharedJevClient()
   const deps: JevRouteDependencies = { jev, recommender: new SessionRecommender(jev), list: listBoard, validate: validateJevKey, save: saveJevKey,
-    completion: new CompletionChecker(jev), replies: (provider, sessionId, afterMs) => readRepliesSince(provider, sessionId, afterMs), ...overrides }
+    completion: new CompletionChecker(jev), replies: (provider, sessionId, afterMs) => readRepliesSince(provider, sessionId, afterMs),
+    searchJev: sharedWorkSearchJevClient(), ...overrides }
   const router = Router()
   router.use(['/jev-key', '/work-board/session-recommendation', '/work-board/completion-check'], (_req, res, next) => { res.set('Cache-Control', 'private, no-store'); next() })
 
@@ -61,6 +65,7 @@ export function createJevRouter(overrides: Partial<JevRouteDependencies> = {}):
       return res.status(500).json({ error: { code: 'jev_key_not_saved', message: 'The key was valid but could not be saved. Check the server data folder.' } })
     }
     deps.jev.resetForNewKey()
+    deps.searchJev.resetForNewKey()
     return res.json({ ok: true, ...deps.jev.status() })
   })
 

package/server/routes/meetings.ts

@@ -10,11 +10,13 @@ import {
   listDirectLibraryMeetingMonths,
   listCosOperationsMeetings,
   listCosOperationsMeetingMonths,
+  meetingContextForRecord,
   resolveMeetingLibrary,
 } from '../lib/cos-operations-meetings.js'
 import type { MeetingMeta, MeetingDetail } from '../lib/meeting-store.js'
 import { meetingListLimit } from '../lib/meeting-store.js'
 import { searchMeetingLibrary } from '../lib/meeting-library-search.js'
+import { meetingContextFields, meetingContextKeys, readOnlyContext } from '../lib/meeting-context-keys.js'
 import { g2RecordingsReachOperations } from '../lib/g2-ops-handoff.js'
 import {
   type ImportedMeetingLibrary,
@@ -57,6 +59,19 @@ function withStandaloneIdentity(meeting: MeetingMeta): MeetingMeta {
   }
 }
 
+/**
+ * 6.64.0 context keys for a row or detail the operations tree did not key. A standalone recording is keyed by its own
+ * session (it is a capture this server holds); a direct library, an import and a re-derived record are read-only here.
+ * A row the operations tree keyed already carries its fields and is left alone.
+ */
+export function withMeetingContext<T extends MeetingMeta>(meeting: T, source: MeetingMeta['librarySource'] = meeting.librarySource): T {
+  if (meeting.contextKeys !== undefined) return meeting
+  if (source === 'standalone_recordings') {
+    return { ...meeting, ...meetingContextFields(meetingContextKeys({ g2SessionId: meeting.sessionId })) }
+  }
+  return { ...meeting, ...readOnlyContext() }
+}
+
 function mergeMeetingSources(groups: MeetingMeta[][], limit: number, max = 50): MeetingMeta[] {
   const seenSessions = new Set<string>()
   const seenExact = new Set<string>()
@@ -187,6 +202,22 @@ export function resolveSavedMeetingDetail(
   return { ...detail, recordId: withStandaloneIdentity(detail).recordId }
 }
 
+/** The detail the routes answer with: `resolveSavedMeetingDetail` plus its 6.64.0 context keys. */
+function savedMeetingDetailWithContext(
+  descriptor: { domain: string; month: string; filename: string },
+  store: MeetingStore,
+  importsLibrary: ImportedMeetingLibrary,
+): MeetingDetail {
+  const detail = resolveSavedMeetingDetail(descriptor, store, importsLibrary)
+  // The store's detail carries no librarySource (a pinned contract); the identity above made its recordId `standalone:`.
+  const source = detail.librarySource ?? (detail.recordId?.startsWith('standalone:') ? 'standalone_recordings' : undefined)
+  if (source === 'standalone_recordings' && detail.contextKeys === undefined) {
+    const sessionId = detail.sessionId || store.storedSessionId(descriptor.month, detail.filename || descriptor.filename)
+    return { ...detail, ...meetingContextFields(meetingContextKeys({ g2SessionId: sessionId })) }
+  }
+  return withMeetingContext(detail, source)
+}
+
 export function createMeetingsRouter(
   store: MeetingStore = getMeetingStore(),
   // Injectable so a test can drive a whole imports library without reaching the
@@ -255,7 +286,7 @@ export function createMeetingsRouter(
           ? supersededDayCounts(filters.month, 'direct', { domain, store, library: importsLibrary })
           : []
         res.json({
-          meetings,
+          meetings: meetings.map(meeting => withMeetingContext(meeting)),
           months,
           days,
           source: operations.length > 0 || imported.present ? 'mixed_library' : 'direct_library',
@@ -288,7 +319,7 @@ export function createMeetingsRouter(
           // back above the row. A capped page pays for the scan instead.
           const listSawWholeMonth = rows.length < limit
           res.json({
-            meetings,
+            meetings: meetings.map(meeting => withMeetingContext(meeting)),
             months: listCosOperationsMeetingMonths(domain),
             // The rows above already read every scribe in this month and told us which
             // sessions the merged ones hold. Handing that over is the difference between
@@ -329,7 +360,7 @@ export function createMeetingsRouter(
           ? supersededDayCounts(filters.month, 'multi_domain', { domain, store, library: importsLibrary, pipeline: false })
           : []
         res.json({
-          meetings,
+          meetings: meetings.map(meeting => withMeetingContext(meeting)),
           months: uniqueSortedMonths([
             listCosOperationsMeetingMonths(domain),
             store.listMonths(),
@@ -359,7 +390,7 @@ export function createMeetingsRouter(
         imported.drop(imported.imports),
       ], limit, sourceLimit)
       res.json({
-        meetings,
+        meetings: meetings.map(meeting => withMeetingContext(meeting)),
         months: uniqueSortedMonths([store.listMonths(), importedLibraryMonths(importsLibrary)]),
         days: filters.month ? supersededDayCounts(filters.month, 'standalone', { domain, store, library: importsLibrary }) : [],
         source: imported.present ? 'mixed_library' : 'standalone_recordings',
@@ -371,6 +402,26 @@ export function createMeetingsRouter(
     }
   })
 
+  // 6.64.0: the context keys behind a Work card's saved meeting links, by record id (at most 50 per call). Read-only and
+  // body-free: COS Control asks for every link a card carries, so a card finds the files dropped on its meetings
+  // whichever record id it was linked under (`meetingContextForRecord`).
+  router.get('/meetings/context-keys', (req, res) => {
+    const raw = req.query.recordId
+    const ids = (Array.isArray(raw) ? raw : raw === undefined ? [] : [raw]).filter((id): id is string => typeof id === 'string')
+    if (ids.length === 0 || ids.length > 50 || ids.some(id => id.length === 0 || id.length > 2048 || /[\u0000-\u001f]/.test(id))) {
+      res.status(400).json({ error: 'one to fifty recordId values are required', reason: 'invalid_record_ids' })
+      return
+    }
+    res.set('Cache-Control', 'private, no-store')
+    try {
+      const keys: Record<string, ReturnType<typeof meetingContextForRecord>> = {}
+      for (const id of [...new Set(ids)]) keys[id] = meetingContextForRecord(id)
+      res.json({ keys })
+    } catch (error) {
+      sendMeetingStoreError(res, error)
+    }
+  })
+
   // Literal path before /meetings/:domain/:month/:filename.
   router.get('/meetings/search', async (req, res) => {
     try {
@@ -406,7 +457,7 @@ export function createMeetingsRouter(
       }
       res.set('Cache-Control', 'private, no-store')
 
-      res.json(resolveSavedMeetingDetail({ domain, month, filename }, store, importsLibrary))
+      res.json(savedMeetingDetailWithContext({ domain, month, filename }, store, importsLibrary))
     } catch (error) {
       sendMeetingStoreError(res, error)
     }
@@ -418,7 +469,7 @@ export function createMeetingsRouter(
     try {
       res.set('Cache-Control', 'private, no-store')
 
-      res.json(resolveSavedMeetingDetail({ domain: String(req.params.domain), month: String(req.params.month), filename: String(req.params.filename) }, store, importsLibrary))
+      res.json(savedMeetingDetailWithContext({ domain: String(req.params.domain), month: String(req.params.month), filename: String(req.params.filename) }, store, importsLibrary))
     } catch (error) {
       sendMeetingStoreError(res, error)
     }

package/server/routes/tasks.ts

@@ -10,6 +10,7 @@ import {
   captureTask,
   checkTask,
   listBoard,
+  listBoardWithDates,
   listProjectedTaskRuns,
   loadDispatchCap,
   moveTask,
@@ -175,7 +176,8 @@ tasksRouter.put('/domains', (req, res) => {
 tasksRouter.get('/tasks', async (req, res) => {
   try {
     const column = typeof req.query.column === 'string' ? req.query.column : undefined
-    const rows = await listBoard(column)
+    // 6.65.0: rows carry createdOn, createdFrom and lineChangedAt (null when unknown), as GET /api/work-board rows do.
+    const rows = await listBoardWithDates(column)
     res.json({ tasks: rows, workBadge: workBadgeCount(rows), gate: tasksGate() })
   } catch (error) {
     sendError(res, error)

package/server/routes/work-board.ts

@@ -1,7 +1,7 @@
 import { Router } from 'express'
 import { readWorkJournal, projectWorkActivity, projectOpenWork, savedDestinationFor, controlSnapshotRevision,
   type WorkActivityCapabilities, type WorkActivityResult } from '../lib/work-activity.js'
-import { listBoard, workBoardCapabilities, setTaskWorkStage, linkTaskMeeting, editWorkTask, TaskRunError, TaskBridgeError,
+import { listBoard, listBoardWithDates, workBoardCapabilities, setTaskWorkStage, linkTaskMeeting, editWorkTask, TaskRunError, TaskBridgeError,
   WORK_STAGES, type WorkStage, type WorkMeetingRef, type TaskBoardRow } from '../lib/task-store.js'
 import { createWorkBoardReader, WORK_BOARD_READ_LIMITS, WorkBoardTimeoutError, type WorkBoardReader } from '../lib/work-board-reader.js'
 import type { MeetingDescriptor } from '../lib/work-review-store.js'
@@ -13,6 +13,10 @@ export interface WorkBoardDependencies {
   /** The native journal reader. It takes no request-derived argument: there is no request-supplied path. */
   journal: () => ReturnType<typeof readWorkJournal>
   list: typeof listBoard
+  /** 6.65.0: the rows GET /api/work-board serves, with createdOn, createdFrom and lineChangedAt (task-store.ts
+   *  listBoardWithDates). COS Control reads this route for its Work board and reads /api/tasks only from an older
+   *  server, so the dates must be here too. Defaults to the dated read unless a caller supplies its own `list`. */
+  listDated?: () => Promise<TaskBoardRow[]>
   capabilities: typeof workBoardCapabilities
   stage: typeof setTaskWorkStage
   link: typeof linkTaskMeeting
@@ -33,6 +37,7 @@ export const WORK_GLANCE_BOARD_AGE_MS = 10_000
 /** Auth is supplied by the parent /api mount. No provider execution occurs here. */
 export function createWorkBoardRouter(overrides: Partial<WorkBoardDependencies> = {}): Router {
   const deps = { ...defaults, ...overrides }, router = Router()
+  const listForBoard = overrides.listDated ?? (overrides.list ? deps.list : () => listBoardWithDates())
   const board = deps.readBoard ?? createWorkBoardReader(() => deps.list())
   router.use('/work-board', (_req, res, next) => { res.set('Cache-Control', 'private, no-store'); next() })
   const fail = (res: import('express').Response, e: unknown) => {
@@ -80,7 +85,7 @@ export function createWorkBoardRouter(overrides: Partial<WorkBoardDependencies>
   router.get('/work-board', async (_req, res) => {
     try {
       const read = board.begin()
-      const [raw, capabilities] = await Promise.all([deps.list(), deps.capabilities()])
+      const [raw, capabilities] = await Promise.all([listForBoard(), deps.capabilities()])
       board.prime(raw, read)
       // 6.59.0: taskRevision is this task's own revision (COS Control's taskSnapshot), what a handoff request names.
       const tasks = raw.map(row => ({ ...row, workStage: row.checked ? 'complete' : row.workStage ?? (row.stage === 'active' ? 'draft' : row.stage === 'review' ? 'qa' : 'planned'), workIdentity: row.workIdentity || row.id, meetingRefs: row.meetingRefs ?? [], taskRevision: controlSnapshotRevision(row) }))

package/server/routes/work-search.ts

@@ -0,0 +1,72 @@
+/**
+ * POST /api/work/search (6.65.0): which board card the user means, by meaning. Auth comes from the parent /api mount.
+ *
+ * Body `{ query, domain?, scope?, ids? }`. The cards come from the board read /api/tasks serves; the client sends a
+ * view (domain, scope) or exact card ids, never task text. A search that cannot run answers 200 with
+ * `{ available: false, reason, message }`, so Control keeps its word search. See lib/work-search.ts.
+ */
+import { Router } from 'express'
+import { listBoard } from '../lib/task-store.js'
+import { isSafeDomainName } from '../lib/domains.js'
+import { queryLength, sharedWorkSearchJevClient, selectCandidates, unavailable, workSearchEnabled, WorkSearcher, WORK_SEARCH_LIMITS,
+  WORK_SEARCH_SCOPES, type WorkSearchResult, type WorkSearchScope } from '../lib/work-search.js'
+
+export interface WorkSearchRouteDependencies {
+  searcher: Pick<WorkSearcher, 'search'>
+  list: () => ReturnType<typeof listBoard>
+  enabled: () => boolean
+}
+
+const BODY_KEYS = new Set(['query', 'domain', 'scope', 'ids'])
+const TASK_ID = /^[a-f0-9]{12}$/
+/** One log line per degrade reason per 10 minutes: Control falls back quietly, so the server says why. */
+export const WORK_SEARCH_LOG_EVERY_MS = 10 * 60_000
+
+export function createWorkSearchRouter(overrides: Partial<WorkSearchRouteDependencies> = {}): Router {
+  const deps: WorkSearchRouteDependencies = { searcher: new WorkSearcher(sharedWorkSearchJevClient()), list: () => listBoard(),
+    enabled: () => workSearchEnabled(), ...overrides }
+  const router = Router()
+  const logged = new Map<string, number>()
+  const answer = (res: import('express').Response, result: WorkSearchResult) => {
+    if (!result.available) {
+      const at = Date.now(), last = logged.get(result.reason)
+      if (last === undefined || at - last >= WORK_SEARCH_LOG_EVERY_MS) {
+        logged.set(result.reason, at)
+        console.warn(`[work-search] meaning search unavailable: ${result.reason}`)
+      }
+    }
+    return res.json(result)
+  }
+  router.use('/work/search', (_req, res, next) => { res.set('Cache-Control', 'private, no-store'); next() })
+
+  router.post('/work/search', async (req, res) => {
+    const body = req.body
+    const bad = () => res.status(400).json({ error: { code: 'invalid_search_request',
+      message: `Send a query of ${WORK_SEARCH_LIMITS.queryMin} to ${WORK_SEARCH_LIMITS.queryMax} characters, and optionally a domain, a scope or card ids.` } })
+    if (!body || typeof body !== 'object' || Array.isArray(body) || Object.keys(body).some(k => !BODY_KEYS.has(k))) return bad()
+    const query = typeof body.query === 'string' ? body.query.trim() : ''
+    const length = queryLength(query)
+    if (length < WORK_SEARCH_LIMITS.queryMin || length > WORK_SEARCH_LIMITS.queryMax) return bad()
+    if (body.domain !== undefined && (typeof body.domain !== 'string' || !isSafeDomainName(body.domain))) return bad()
+    if (body.scope !== undefined && !(WORK_SEARCH_SCOPES as readonly unknown[]).includes(body.scope)) return bad()
+    if (body.ids !== undefined && (!Array.isArray(body.ids) || body.ids.some((id: unknown) => typeof id !== 'string' || !TASK_ID.test(id)))) return bad()
+    if (!deps.enabled()) return answer(res, unavailable('search_off'))
+    const ids: string[] | undefined = body.ids ? [...new Set<string>(body.ids)] : undefined
+    // Refused before reading the board: a Choice cannot hold them, and a cut list would silently miss cards.
+    if (ids && ids.length > WORK_SEARCH_LIMITS.maxCandidates) return answer(res, unavailable('too_many_candidates'))
+    let rows: Awaited<ReturnType<typeof listBoard>>
+    try { rows = await deps.list() } catch (e) {
+      console.error('[work-search] board read failed:', e instanceof Error ? e.message : e)
+      return res.status(503).json({ error: { code: 'work_board_unavailable', message: 'Work board is unavailable. Refresh before searching.' } })
+    }
+    const candidates = selectCandidates(rows, { domain: body.domain, scope: body.scope as WorkSearchScope | undefined, ids })
+    if (!candidates) return answer(res, unavailable('too_many_candidates'))
+    try {
+      return answer(res, await deps.searcher.search(query, candidates))
+    } catch (e) {
+      console.error('[work-search] search failed:', e instanceof Error ? e.message : e)
+      return answer(res, unavailable('jev_unavailable'))
+    }
+  })
+  return router
+}