@gotcos/glasses-server 6.71.5 → 6.71.11

package/server/routes/memory.ts

@@ -1,5 +1,6 @@
 import { Router } from 'express'
 import { callPython, contextSourceAvailable, pythonBridgeState } from '../lib/python-bridge.js'
+import { resolveContextFilesRoot, readFileMemoryById } from '../lib/context-files.js'
 import { searchMemories } from '../lib/context-library-search.js'
 import { getOwnerName, setProfileOwnerName } from '../lib/profile.js'
 import { resetDecoderCaches } from '../lib/whisper-local.js'
@@ -857,18 +858,29 @@ memoryRouter.get('/memory/overview', async (_req, res) => {
   }
 })
 
-memoryRouter.get('/memory/search', async (req, res) => {
+// A distinct route fails closed on older servers; they cannot silently run meaning search.
+memoryRouter.get(['/memory/search', '/memory/search/keyword'], async (req, res) => {
   const query = typeof req.query.q === 'string' ? req.query.q.trim() : ''
-  if (query.length < 2) {
+  if (query.length < 2 || query.length > 300) {
     res.status(400).json({ error: 'q must be at least 2 characters', reason: 'invalid_query' })
     return
   }
+  const mode = req.path.endsWith('/keyword') ? 'keyword' : req.query.mode
+  if (mode !== undefined && mode !== 'keyword' && mode !== 'meaning') {
+    res.status(400).json({ error: 'invalid_search_mode', reason: 'invalid_search_mode' })
+    return
+  }
+  if (mode === 'keyword' && !contextConfigured()) {
+    res.status(503).json({ error: 'memory_search_unavailable', reason: 'memory_source_unavailable' })
+    return
+  }
   const rawLimit = typeof req.query.limit === 'string' ? Number.parseInt(req.query.limit, 10) : 20
   res.set('Cache-Control', 'private, no-store')
   try {
     const result = await searchMemories({
       query,
       limit: Number.isFinite(rawLimit) ? rawLimit : 20,
+      ...(mode === 'keyword' ? { semantic: false } : {}),
     })
     res.json(result)
   } catch {
@@ -876,6 +888,19 @@ memoryRouter.get('/memory/search', async (req, res) => {
   }
 })
 
+// Detail stays in the same file tier as keyword results, even if a Python bridge is configured.
+memoryRouter.get('/memory/search/keyword/:id', (req, res) => {
+  res.set('Cache-Control', 'private, no-store')
+  if (!MEMORY_ID_PATTERN.test(req.params.id)) return res.status(400).json({ error: 'invalid_memory_id' })
+  const root = resolveContextFilesRoot()
+  if (!root) return res.status(503).json({ error: 'memory_source_unavailable' })
+  try {
+    const memory = readFileMemoryById(root, req.params.id)
+    if (!memory) return res.status(404).json({ error: 'memory_not_found' })
+    return res.json(memory)
+  } catch { return res.status(503).json({ error: 'memory_unavailable' }) }
+})
+
 memoryRouter.get('/memory/:id', async (req, res) => {
   if (!MEMORY_ID_PATTERN.test(req.params.id)) {
     res.status(400).json({ error: 'invalid_memory_id' })

package/server/routes/permission-broker.ts

@@ -1,3 +1,8 @@
+// 6.71.7: new-hook stamped interactive questions also arrive while the desk is
+// active. The broker keeps their lens card hidden until the desk is idle and
+// then latches it. Native desk answers/cancels settle the same request. Legacy
+// hooks and approvals keep the gates below. GET polling is 3 s while pending.
+//
 // The permission broker's two doors (6.52.0). See `lib/permission-broker.ts` for the why.
 //
 // POST /api/permission-requests/ask -- the COS session hook, on a PermissionRequest at a
@@ -35,7 +40,6 @@ import { timingSafeTokenEqual } from '../lib/token-auth.js'
 import {
   ANSWERING_CLIENTS,
   CLIENT_LIVE_WINDOW_MS,
-  QUESTIONS_POLL_INTERVAL_MS,
   SESSION_QUESTIONS_PROTOCOL_VERSION,
   type BrokerAdmission,
   type HookReplyChannel,
@@ -182,7 +186,7 @@ export function createSessionQuestionsRouter(deps: SessionQuestionsRouterDeps):
       enabled: health.enabled,
       mode: health.mode,
       protocolVersion: SESSION_QUESTIONS_PROTOCOL_VERSION,
-      pollIntervalMs: QUESTIONS_POLL_INTERVAL_MS,
+      pollIntervalMs: deps.broker.questionsPollIntervalMs(),
       liveWindowMs: CLIENT_LIVE_WINDOW_MS,
       pending: deps.broker.pendingCount(),
       stats: deps.broker.stats(),

package/server/routes/work-intake.ts

@@ -5,6 +5,8 @@ import { captureWorkItem, linkTaskMeeting, listBoard, workIntakeCapabilities, Ta
 import { resolveSavedMeetingDetail } from './meetings.js'
 import type { MeetingDescriptor } from '../lib/work-review-store.js'
 import type { MeetingDetail } from '../lib/meeting-store.js'
+import { saveAskFollowUp } from '../lib/meeting-ask-follow-up.js'
+import { meetingAskRuntime } from '../lib/meeting-ask-runtime.js'
 
 export interface WorkIntakeDependencies {
   store: WorkIntakeStore | null
@@ -13,6 +15,8 @@ export interface WorkIntakeDependencies {
   link: typeof linkTaskMeeting
   capture: typeof captureWorkItem
   resolveMeeting: (descriptor: MeetingDescriptor) => MeetingDetail | Promise<MeetingDetail>
+  askGet: typeof meetingAskRuntime.get
+  askIdentity: typeof meetingAskRuntime.identity
 }
 const MAX_MEETING_REFS = 8 // task_work_metadata.MAX_REFS
 export const LINK_RACE_RETRIES = 2
@@ -32,7 +36,8 @@ export function intakeCardText(item: Pick<WorkIntakeItem, 'text' | 'owner' | 'ow
 /** Auth is supplied by the parent /api mount. Nothing here calls a model or starts an agent. */
 export function createWorkIntakeRouter(overrides: Partial<WorkIntakeDependencies> & Pick<WorkIntakeDependencies, 'store'>): Router {
   const deps: WorkIntakeDependencies = { list: listBoard, capabilities: workIntakeCapabilities, link: linkTaskMeeting,
-    capture: captureWorkItem, resolveMeeting: resolveSavedMeetingDetail, ...overrides }
+    capture: captureWorkItem, resolveMeeting: resolveSavedMeetingDetail,
+    askGet: id => meetingAskRuntime.get(id), askIdentity: value => meetingAskRuntime.identity(value), ...overrides }
   const router = Router()
   router.use('/work-intake', (_req, res, next) => {
     res.set('Cache-Control', 'private, no-store')
@@ -54,6 +59,11 @@ export function createWorkIntakeRouter(overrides: Partial<WorkIntakeDependencies
     return res.status(503).json({ error: { code: 'work_intake_unavailable', message: 'Work intake is unavailable. Refresh before trying again.' } })
   }
 
+  router.post('/work-intake/meeting-ask', async (req, res) => {
+    try { res.json({ ok: true, ...await saveAskFollowUp(req.body, { store: deps.store, identity: deps.askIdentity,
+      get: deps.askGet, resolveMeeting: deps.resolveMeeting }) }) }
+    catch (e) { fail(res, e, 'meeting-ask') }
+  })
   router.get('/work-intake', async (_req, res) => {
     try {
       const items = deps.store!.open()

package/shared/meeting-ask.ts

@@ -181,6 +181,7 @@ export interface MeetingAskCapabilities {
     /** 6.71.1: config carries cosSearch and PUT config {cosSearch} changes it. */
     cosSearchMode?: true;
     meetingContext?: true;
+    followUpReview?: true;
 }
 /**
  * How Meeting Ask searches COS memory and earlier meetings (6.71.1). 'meaning' (default) adds the embedding
@@ -214,6 +215,8 @@ export interface MeetingAskConfig {
  * PUT files {sessionId,serverInstanceId,files:MeetingAskFile[]} -> {files}. Upsert only; removed is explicit.
  * POST files/media {sessionId,serverInstanceId,media:[{id,name?}]} -> {files} (6.71.1, capabilities.phoneFiles):
  * media already uploaded through /api/media joins the meeting's file list as id "phone_<mediaId>", origin "phone".
+ * 6.71.9 on macOS: images containing text use local OCR and revisioned F evidence; no-word images
+ * remain unsupported and extraction errors are explicit failed rows. Historical evidence is immutable.
  * GET export?sessionId=...&serverInstanceId=... -> {text}; composes persisted Ask/file context,
  * client prepends its current canonical transcript. All operations use X-Cos-Token.
  * GET config is the capability probe (404 means old server); health.capabilities.meetingAsk mirrors capabilities.