@gotcos/glasses-server 6.94.4 → 6.98.0

package/server/scripts/live-cues-v3-mutation-gate.mjs

@@ -0,0 +1,311 @@
+#!/usr/bin/env node
+// Live cues v3 mutation gate: grounded retrieval and judge B, the sources contract and the cue log schema, settings v3 (cue mode,
+// grounding, general limits) and the public https validator. Mutations run only in a disposable copy of the checkout; the live
+// checkout is never rewritten.
+//
+// What it proves, in order:
+//   0. The target suites are GREEN unmutated. A gate over a red suite reads every mutant as killed and proves nothing.
+//   1. Each target string appears EXACTLY ONCE in its file, so the mutation is unambiguous.
+//   2. The mutated file differs from the original, so the edit landed.
+//   3. A NAMED test fails ("FAIL  server/x.test.ts > name"); a build error or a harness failure is not a kill.
+//   4. The file is restored byte for byte (compared) before the next mutant.
+// Usage: node server/scripts/live-cues-v3-mutation-gate.mjs [--list] [--check] [name…]
+import { mkdtempSync, cpSync, readFileSync, writeFileSync, symlinkSync, rmSync } from 'node:fs'
+import { tmpdir } from 'node:os'
+import { resolve, join, dirname, basename } from 'node:path'
+import { fileURLToPath } from 'node:url'
+import { spawnSync } from 'node:child_process'
+
+const root = resolve(dirname(fileURLToPath(import.meta.url)), '../..')
+const GROUNDED_T = ['server/lib/live-cues-v2-grounded.test.ts']
+const GROUNDING_T = ['server/lib/live-cues-v2-grounding.test.ts']
+const PIN_T = ['server/lib/live-cues-v2-classic-pin.test.ts']
+const ROUTE_T = ['server/routes/live-cues-v3-settings-route.test.ts']
+const SETTINGS_T = ['server/lib/live-cues-v2-settings.test.ts']
+const VERDICT_T = ['server/lib/live-cue-verdicts.test.ts']
+const KINDS_T = ['server/lib/live-cues-v2-kinds.test.ts']
+const URL_T = ['server/lib/public-https-url.test.ts']
+const ALL = [...GROUNDED_T, ...GROUNDING_T, ...PIN_T, ...ROUTE_T, ...SETTINGS_T, ...VERDICT_T, ...KINDS_T, ...URL_T,
+  'server/lib/live-cues-v2.test.ts', 'server/lib/live-cues-v2-notes.test.ts', 'server/routes/live-cues-v2-limits-route.test.ts', 'server/routes/live-cues-v2-settings-route.test.ts',
+  'server/routes/live-cue-verdicts-route.test.ts']
+const GR = 'server/lib/live-cues-v2-grounded.ts', JB = 'server/lib/live-cues-v2-judge-b.ts', EN = 'server/lib/live-cues-v2.ts', ST = 'server/lib/live-cues-v2-settings.ts'
+const RT = 'server/routes/live-cues.ts', VD = 'server/lib/live-cue-verdicts.ts', SH = 'shared/live-cues-v2.ts', UR = 'server/lib/public-https-url.ts', NT = 'server/lib/live-cues-v2-notes.ts'
+const m = (name, file, edits, tests) => ({ name, file, edits: typeof edits[0] === 'string' ? [edits] : edits, tests })
+
+const mutations = [
+  // ── Judge B ──
+  m('judgeb-yes-inclusive', JB, ['.filter(x => x.p >= threshold)', '.filter(x => x.p > threshold)'], GROUNDED_T),
+  m('judgeb-cap', JB, ['    .slice(0, max)\n', ''], GROUNDED_T),
+  m('judgeb-best-first', JB, ['b.p - a.p || a.order - b.order', 'a.p - b.p || a.order - b.order'], GROUNDED_T),
+  m('judgeb-ties-keep-order', JB, ['b.p - a.p || a.order - b.order', 'b.p - a.p || b.order - a.order'], GROUNDED_T),
+  m('judgeb-probability-range', JB, ['Number.isFinite(v) && v >= 0 && v <= 1 ? v : 0', 'Number.isFinite(v) ? v : 0'], GROUNDED_T),
+  m('judgeb-probability-number', JB, ["(typeof v === 'number' && Number.isFinite(v) && v >= 0 && v <= 1 ? v : 0)", '(Number(v) >= 0 && Number(v) <= 1 ? Number(v) : 0)'], GROUNDED_T),
+  m('judgeb-note-300', JB, ['c.notes.slice(0, JUDGE_B_NOTE_CHARS)', 'c.notes'], GROUNDED_T),
+  m('judgeb-one-question-per-candidate', JB, ["questions['rel_' + c.id] = {", "questions['rel' + c.id] = {"], GROUNDED_T),
+  m('judgeb-reads-own-yes', JB, ["answers?.['rel_' + id]?.probabilities?.yes", "answers?.same?.probabilities?.yes"], GROUNDED_T),
+  m('judgeb-same-diagnostic', JB, ['same[id] = prob(answers?.same?.probabilities?.[id])', 'same[id] = 0'], GROUNDED_T),
+  m('judgeb-none-criterion', JB, ['criteria.none = CUE_JUDGE_NONE\n', ''], GROUNDED_T),
+  // ── Grounded retrieval ──
+  m('history-lowercase', GR, ['const wordsOf = (text: string): string[] => text.toLowerCase().match(', 'const wordsOf = (text: string): string[] => text.match('], GROUNDED_T),
+  m('history-boundary-tail', GR, ['this.tail = words.slice(-(n - 1))', 'this.tail = []'], GROUNDED_T),
+  m('history-boundary-tail-short', GR, ['this.tail = words.slice(-(n - 1))', 'this.tail = words.slice(-(n - 2))'], GROUNDED_T),
+  m('history-cap-default', GR, ['historyShingles: 50_000,', 'historyShingles: 5_000,'], GROUNDED_T),
+  m('history-cap-holds-cap', GR, ['while (this.seen.size > this.cap)', 'while (this.seen.size >= this.cap)'], GROUNDED_T),
+  m('history-cap-evicts-oldest', GR, ['this.seen.delete(this.seen.values().next().value as string)', 'this.seen.delete([...this.seen].pop() as string)'], GROUNDED_T),
+  m('history-clear-empties', GR, ['clear(): void { this.seen.clear(); this.tail = [] }', 'clear(): void { this.tail = [] }'], GROUNDED_T),
+  m('history-clear-forgets-tail', GR, ['clear(): void { this.seen.clear(); this.tail = [] }', 'clear(): void { this.seen.clear() }'], GROUNDED_T),
+  m('history-fed-by-every-chunk', EN, ['if (this.groundingOn()) s.said.add(cleanWindow(text.trim()))', 'if (false) s.said.add(cleanWindow(text.trim()))'], GROUNDING_T),
+  m('history-fed-only-while-grounded', EN, ['if (this.groundingOn()) s.said.add(cleanWindow(text.trim()))', 's.said.add(cleanWindow(text.trim()))'], GROUNDING_T),
+  m('history-fed-clean-text', EN, ['s.said.add(cleanWindow(text.trim()))', 's.said.add(text.trim())'], GROUNDING_T),
+  m('history-window-added-at-evaluation', EN, ["    s.said.add(cleanWindow(s.chunks.join('\\n')))\n", ''], GROUNDING_T),
+  m('history-used-for-self-copies', EN, ['transcript: s.said.shingles, window,', 'transcript: new Set<string>(), window,'], GROUNDING_T),
+  m('history-cleared-at-end', EN, ['    s?.said.clear()\n', ''], GROUNDING_T),
+  m('self-overlap-threshold', GR, ['sixGramOverlap(c.notes, transcript) >= GROUNDED_LIMITS.selfOverlap', 'sixGramOverlap(c.notes, transcript) > GROUNDED_LIMITS.selfOverlap'], GROUNDED_T),
+  m('self-overlap-share-of-candidate', GR, ['return shared / own.size', 'return shared / Math.max(own.size, 40)'], GROUNDED_T),
+  m('self-record-id', GR, ['if ((c.recordId && selfIds.has(c.recordId)) || (c.sessionId && selfIds.has(c.sessionId))) return true', 'if (c.sessionId && selfIds.has(c.sessionId)) return true'], GROUNDED_T),
+  m('self-session-id', GR, ['if ((c.recordId && selfIds.has(c.recordId)) || (c.sessionId && selfIds.has(c.sessionId))) return true', 'if (c.recordId && selfIds.has(c.recordId)) return true'], GROUNDED_T),
+  m('self-standalone-form', GR, ['out.add(id); out.add(`standalone:${id}`)', 'out.add(id)'], GROUNDED_T),
+  m('self-exclusion-applied', GR, ['if (isSelfCopy(note, transcript, i.selfIds)) {', 'if (false) {'], GROUNDED_T),
+  m('self-exclusion-counted', GR, ['seen.add(id); excludedSelf += 1; continue }', 'seen.add(id); continue }'], GROUNDED_T),
+  m('self-exclusion-remembers-identity', GR, ['{ for (const id of identities) seen.add(id); excludedSelf += 1; continue }', '{ excludedSelf += 1; continue }'], GROUNDED_T),
+  m('malformed-note-skipped', GR, ['      if (!wellFormed(raw)) continue\n', ''], GROUNDED_T),
+  m('note-id-is-a-string', GR, ["typeof r.id === 'string' && typeof r.date === 'string'", "typeof r.date === 'string'"], GROUNDED_T),
+  m('note-date-is-a-string', GR, ["typeof r.date === 'string' && typeof r.title === 'string'", "typeof r.title === 'string'"], GROUNDED_T),
+  m('note-title-is-a-string', GR, ["typeof r.title === 'string' && typeof r.notes === 'string'", "typeof r.notes === 'string'"], GROUNDED_T),
+  m('note-notes-is-a-string', GR, ["typeof r.title === 'string' && typeof r.notes === 'string'", "typeof r.title === 'string'"], GROUNDED_T),
+  m('note-key-is-a-string', GR, ["const key = typeof note.key === 'string' ? note.key : ''", "const key = (note.key ?? '') as string"], GROUNDED_T),
+  m('note-domain-is-a-string', GR, ['...(nonEmpty(note.domain) ? { domain: note.domain } : {}),', "...(note.domain ? { domain: note.domain as string } : {}),"], GROUNDED_T),
+  m('note-session-id-kept', GR, ['...(nonEmpty(note.sessionId) ? { sessionId: note.sessionId } : {}) }', '}'], GROUNDED_T),
+  m('note-session-id-is-a-string', GR, ['...(nonEmpty(note.sessionId) ? { sessionId: note.sessionId } : {}) }', '...(note.sessionId ? { sessionId: note.sessionId as string } : {}) }'], GROUNDED_T),
+  m('domain-unknown-counted', GR, ["const domainUnknown = out.filter(c => c.arm !== 'files' && !c.domain).length", 'const domainUnknown = 0'], GROUNDED_T),
+  m('domain-unknown-not-files', GR, ["out.filter(c => c.arm !== 'files' && !c.domain)", 'out.filter(c => !c.domain)'], GROUNDED_T),
+  m('files-list-is-an-array', GR, ['  if (!Array.isArray(raw)) return []\n', ''], GROUNDED_T),
+  m('file-id-is-a-string', GR, ["typeof f.id === 'string' && typeof f.name === 'string'", "typeof f.name === 'string'"], GROUNDED_T),
+  m('file-name-is-a-string', GR, ["typeof f.name === 'string' && typeof f.status === 'string'", "typeof f.status === 'string'"], GROUNDED_T),
+  m('file-status-is-a-string', GR, ["typeof f.status === 'string' && typeof f.text === 'string')", "typeof f.text === 'string')"], GROUNDED_T),
+  m('file-text-is-a-string', GR, ["typeof f.status === 'string' && typeof f.text === 'string')", "typeof f.status === 'string')"], GROUNDED_T),
+  m('file-row-is-an-object', GR, ["raw.filter((f): f is GroundedFile => !!f && typeof f === 'object' && ", "raw.filter((f): f is GroundedFile => "], GROUNDED_T),
+  m('candidates-use-usable-files', GR, ['bestFilePassage(usableFiles(i.files), i.window)', 'bestFilePassage(i.files as GroundedFile[], i.window)'], GROUNDED_T),
+  m('domain-compare-strings-only', GR, ["const norm = (v: unknown) => (typeof v === 'string' ? v.trim().toLowerCase() : '')", "const norm = (v: unknown) => String(v ?? '').trim().toLowerCase()"], GROUNDED_T),
+  m('domain-compare-trims', GR, ["v.trim().toLowerCase() : '')", "v.toLowerCase() : '')"], GROUNDED_T),
+  m('domain-personal-only', GR, ["return norm(noteDomain) === 'personal' && norm(meetingDomain) !== 'personal'", "return norm(noteDomain) === 'personal'"], GROUNDED_T),
+  m('domain-personal-meeting-only', GR, ["return norm(noteDomain) === 'personal' && norm(meetingDomain) !== 'personal'", "return norm(meetingDomain) !== 'personal'"], GROUNDED_T),
+  m('domain-filter-applied', GR, ['if (isForeignPersonal(note.domain, i.meetingDomain)) continue', 'if (false) continue'], GROUNDED_T),
+  m('dedupe-applied', GR, ['if (identities.some(id => seen.has(id))) continue', 'if (false) continue'], GROUNDED_T),
+  m('dedupe-remembers', GR, ['for (const id of identities) seen.add(id)\n', ''], GROUNDED_T),
+  m('dedupe-normalised-title', GR, ['ids.push(`meeting:${c.date}|${normalizeMeetingTitle(c.title)}`)', 'ids.push(`meeting:${c.date}|${c.title}`)'], GROUNDED_T),
+  m('file-identity-is-not-a-meeting', GR, ['if (c.date && c.title && !c.fileId) ids.push(', 'if (c.date && c.title) ids.push('], GROUNDED_T),
+  m('dedupe-record-id', GR, ["if (c.recordId) ids.push(`record:${c.recordId}`)", ''], GROUNDED_T),
+  m('dedupe-memory-id', GR, ["if (c.memoryId) ids.push(`memory:${c.memoryId}`)", ''], GROUNDED_T),
+  m('title-punctuation', GR, ["title.toLowerCase().replace(/[!-/:-@[-`{-~]/g, ' ')", "title.toLowerCase().replace(/[!-/]/g, ' ')"], GROUNDED_T),
+  m('cue-memory-four', GR, ["take(i.cueMemory, 'cue_memory', GROUNDED_LIMITS.cueMemoryTop, 'M')", "take(i.cueMemory, 'cue_memory', GROUNDED_LIMITS.cueMemoryRaw, 'M')"], GROUNDED_T),
+  m('notes-one', GR, ["take(i.notes, 'notes', GROUNDED_LIMITS.notesTop, 'N')", "take(i.notes, 'notes', GROUNDED_LIMITS.cueMemoryTop, 'N')"], GROUNDED_T),
+  m('candidates-six', GR, ['maxCandidates: 6,', 'maxCandidates: 5,'], GROUNDED_T),
+  m('file-ready-only', GR, ["if (file.status !== 'ready' || typeof file.text", 'if (typeof file.text'], GROUNDED_T),
+  m('file-needs-two-terms', GR, ['score >= GROUNDED_LIMITS.fileMinTerms', 'score >= 1'], GROUNDED_T),
+  m('file-first-best-wins', GR, ['(!best || score > best.score)', '(!best || score >= best.score)'], GROUNDED_T),
+  m('file-dated-with-the-meeting', GR, ["out.push({ id: 'F1', date: i.today,", "out.push({ id: 'F1', date: '',"], GROUNDED_T),
+  m('file-not-self-checked', GR, ["      out.push({ id: 'F1'", "      if (isSelfCopy({ notes: hit.passage }, transcript, i.selfIds)) return { candidates: out, excludedSelf: excludedSelf + 1 }\n      out.push({ id: 'F1'"], GROUNDED_T),
+  m('file-passage-cap', GR, ['fileChars: 300,', 'fileChars: 600,'], GROUNDED_T),
+  m('file-window-terms', GR, ['fileWindowTerms: 12,', 'fileWindowTerms: 1,'], GROUNDED_T),
+  m('kind-from-memory-key', GR, ["return { ...base, kind: 'memory', memoryId: key.slice('memory:'.length) }", "return { ...base, kind: 'meeting', memoryId: key.slice('memory:'.length) }"], GROUNDED_T),
+  m('kind-from-meeting-key', GR, ["return { ...base, kind: 'meeting', recordId: key.slice('meeting:'.length) }", "return { ...base, kind: 'meeting' }"], GROUNDED_T),
+  m('source-memory-locator', GR, ["if (note.kind === 'memory' && note.memoryId) return { ...base, memoryId: note.memoryId }\n", ''], GROUNDED_T),
+  m('source-file-locator', GR, ["if (note.kind === 'file' && note.fileId) return { ...base, fileId: note.fileId }\n", ''], GROUNDED_T),
+  m('source-record-locator', GR, ["if (note.kind === 'meeting' && note.recordId) return { ...base, recordId: note.recordId }\n", ''], GROUNDED_T),
+  m('source-kind', GR, ['const base: CueSourceRef = { id, date: note.date, title: note.title, kind: note.kind }', 'const base: CueSourceRef = { id, date: note.date, title: note.title }'], GROUNDED_T),
+  // ── Engine: grounded evaluation ──
+  m('grounding-reads-setting', EN, ["return resolveLiveCuesGrounding(this.deps.env, this.deps.settings).value === 'grounded'", "return resolveLiveCuesGrounding(this.deps.env, null).value === 'grounded'"], GROUNDING_T),
+  m('grounding-off-is-classic', EN, ["return resolveLiveCuesGrounding(this.deps.env, this.deps.settings).value === 'grounded'", 'return true'], [...GROUNDING_T, ...PIN_T]),
+  m('grounded-skips-classic-memory', EN, ['let mem: MemoryResult = grounded ? { notes: [] } : await this.deps.memory(', 'let mem: MemoryResult = await this.deps.memory('], GROUNDING_T),
+  m('grounded-skips-classic-judge', EN, ['if (!grounded && mem.notes.length && !abort.signal.aborted) {', 'if (mem.notes.length && !abort.signal.aborted) {'], GROUNDING_T),
+  m('grounded-arms-in-parallel', EN, [
+    ["    const [cm, nt] = await Promise.all([\n      timed(() => this.deps.memory(window, before, signal, GROUNDED_LIMITS.cueMemoryRaw), 'memory_threw'),\n      timed(() => this.deps.notes(window, before, signal, s.sessionId), 'notes_threw'),\n    ])",
+      "    const cm = await timed(() => this.deps.memory(window, before, signal, GROUNDED_LIMITS.cueMemoryRaw), 'memory_threw')\n    const nt = await timed(() => this.deps.notes(window, before, signal, s.sessionId), 'notes_threw')"]], GROUNDING_T),
+  m('grounded-asks-for-eight', EN, ["this.deps.memory(window, before, signal, GROUNDED_LIMITS.cueMemoryRaw), 'memory_threw')", "this.deps.memory(window, before, signal, 4), 'memory_threw')"], GROUNDING_T),
+  m('grounded-notes-always', EN, ["timed(() => this.deps.notes(window, before, signal, s.sessionId), 'notes_threw'),", "timed(async () => ({ notes: [] }), 'notes_threw'),"], GROUNDING_T),
+  m('grounded-twins', EN, ['const twins = [...this.sessions.keys()].filter(id => id !== s.sessionId)', 'const twins: string[] = []'], GROUNDING_T),
+  m('grounded-orientation-caught', EN, ['catch (e) { trace.orientationError = codeOf(e) }', 'catch (e) { throw e }'], GROUNDING_T),
+  m('grounded-files-caught', EN, ['catch (e) { trace.filesError = codeOf(e) }', 'catch (e) { throw e }'], GROUNDING_T),
+  m('grounded-error-code-reason', EN, ["typeof r?.reason === 'string' ? r.reason : typeof r?.code === 'string' ? r.code : 'threw'", "typeof r?.code === 'string' ? r.code : 'threw'"], GROUNDING_T),
+  m('grounded-arm-failure-traced', EN, ['catch { return { res: { notes: [], denseError: threw }, ms: null } }', 'catch { return { res: { notes: [] }, ms: null } }'], GROUNDING_T),
+  m('grounded-arm-failure-null-ms', EN, ['catch { return { res: { notes: [], denseError: threw }, ms: null } }', 'catch { return { res: { notes: [], denseError: threw }, ms: 0 } }'], GROUNDING_T),
+  m('grounded-trace-flag', EN, ["    trace.grounding = 'grounded'\n", ''], GROUNDING_T),
+  m('grounded-trace-ready-files', EN, ["files: files.filter(f => f.status === 'ready').length }, excludedSelf, domainUnknown })", 'files: files.length }, excludedSelf, domainUnknown })'], GROUNDING_T),
+  m('grounded-trace-excluded-self', EN, ["files: files.filter(f => f.status === 'ready').length }, excludedSelf, domainUnknown })", "files: files.filter(f => f.status === 'ready').length }, domainUnknown })"], GROUNDING_T),
+  m('grounded-trace-domain-unknown', EN, ["files: files.filter(f => f.status === 'ready').length }, excludedSelf, domainUnknown })", "files: files.filter(f => f.status === 'ready').length }, excludedSelf })"], GROUNDING_T),
+  m('grounded-orientation-title-is-a-string', EN, ["calendarTitle = typeof o?.title === 'string' ? o.title : null", 'calendarTitle = (o?.title ?? null) as string | null'], GROUNDING_T),
+  m('grounded-files-are-usable', EN, ['files = usableFiles(this.deps.files?.(s.sessionId))', 'files = (this.deps.files?.(s.sessionId) ?? []) as GroundedFile[]'], GROUNDING_T),
+  m('cue-memory-keeps-domain', EN, ["typeof n.notes === 'string').slice(0, top)", "typeof n.notes === 'string').map(({ domain: _d, ...rest }) => rest as MemoryNote).slice(0, top)"], GROUNDING_T),
+  m('grounded-trace-judge', EN, ['yes: round(judged.yes[c.id] ?? 0), same: round(judged.same[c.id] ?? 0) })) })', 'yes: 0, same: 0 })) })'], GROUNDING_T),
+  m('grounded-trace-kept-ids', EN, ['      if (run) trace.keptIds = kept.map(m => m.id)', '      if (false) trace.keptIds = kept.map(m => m.id)'], GROUNDING_T),
+  m('grounded-trace-kept-count', EN, ['trace.kept = kept.length\n', 'trace.kept = run ? kept.map(m => m.id) : kept.length\n'], [...GROUNDING_T, ...PIN_T]),
+  m('classic-trace-has-no-kept-ids', EN, ['      if (run) trace.keptIds = kept.map(m => m.id)', '      trace.keptIds = kept.map(m => m.id)'], PIN_T),
+  m('grounded-source-arm', EN, ["const source: LiveCuesV2MemorySource = candidates.some(c => c.arm === 'cue_memory') ? 'cue_memory' : candidates.some(c => c.arm === 'notes') ? 'notes' : 'none'", "const source: LiveCuesV2MemorySource = 'cue_memory'"], GROUNDING_T),
+  m('grounded-arms-contributed', EN, ["(['cue_memory', 'notes', 'files'] as const).filter(a => candidates.some(c => c.arm === a))", "(['cue_memory', 'notes', 'files'] as const)"], GROUNDING_T),
+  m('grounded-arms-logged', EN, ['...(run ? { arms: run.arms } : {}) })', '...({}) })'], GROUNDING_T),
+  m('classic-log-has-no-arms', EN, ['...(run ? { arms: run.arms } : {}) })', '...({ arms: run?.arms ?? [] }) })'], PIN_T),
+  m('grounded-sources-carry-kind', EN, ['.map(m => (run ? groundedSource(m as GroundedNote, sourceId(m)) : { id: sourceId(m), date: m.date, title: m.title }))', '.map(m => ({ id: sourceId(m), date: m.date, title: m.title }))'], GROUNDING_T),
+  m('grounded-no-candidates-no-judge', EN, ['if (candidates.length && !signal.aborted) {', 'if (!signal.aborted) {'], GROUNDING_T),
+  m('grounded-cancelled-no-judge', EN, ['if (candidates.length && !signal.aborted) {', 'if (candidates.length) {'], GROUNDING_T),
+  m('grounded-judge-title', EN, ['await this.deps.judgeB(s.title, window, candidates, signal, provider)', 'await this.deps.judgeB(writerTitle, window, candidates, signal, provider)'], GROUNDING_T),
+  m('grounded-writer-title', EN, ['meetingTitle: run?.writerTitle ?? s.title', 'meetingTitle: s.title'], GROUNDING_T),
+  m('grounded-writer-title-120', EN, ["const title = (calendarTitle ?? '').replace(/\\s+/g, ' ').trim().slice(0, 120)", "const title = (calendarTitle ?? '').replace(/\\s+/g, ' ').trim().slice(0, 300)"], GROUNDING_T),
+  m('grounded-writer-title-trimmed', EN, ["const title = (calendarTitle ?? '').replace(/\\s+/g, ' ').trim().slice(0, 120)", "const title = (calendarTitle ?? '').slice(0, 120)"], GROUNDING_T),
+  m('grounded-keep-bar', EN, ['kept = selectJudgeB(candidates, judged.yes, liveCuesV2JudgeYes(this.deps.env), LIVE_CUES_V2_LIMITS.judgeMaxNotes)', 'kept = selectJudgeB(candidates, judged.yes, LIVE_CUES_V2_LIMITS.judgeKeep, LIVE_CUES_V2_LIMITS.judgeMaxNotes)'], GROUNDING_T),
+  m('grounded-keep-env-bar', EN, ['kept = selectJudgeB(candidates, judged.yes, liveCuesV2JudgeYes(this.deps.env), LIVE_CUES_V2_LIMITS.judgeMaxNotes)', 'kept = selectJudgeB(candidates, judged.yes, LIVE_CUES_V2_LIMITS.judgeYes, LIVE_CUES_V2_LIMITS.judgeMaxNotes)'], GROUNDING_T),
+  m('grounded-keep-two', EN, ['kept = selectJudgeB(candidates, judged.yes, liveCuesV2JudgeYes(this.deps.env), LIVE_CUES_V2_LIMITS.judgeMaxNotes)', 'kept = selectJudgeB(candidates, judged.yes, liveCuesV2JudgeYes(this.deps.env), 4)'], GROUNDING_T),
+  m('judge-yes-default', EN, ['judgeYes: 0.65,', 'judgeYes: 0.7,'], GROUNDING_T),
+  m('judge-yes-min-inclusive', EN, ['return yes >= 0.5 && yes <= 0.95 ? yes : knobFallback(', 'return yes > 0.5 && yes <= 0.95 ? yes : knobFallback('], GROUNDING_T),
+  m('judge-yes-max-inclusive', EN, ['return yes >= 0.5 && yes <= 0.95 ? yes : knobFallback(', 'return yes >= 0.5 && yes < 0.95 ? yes : knobFallback('], GROUNDING_T),
+  m('judge-yes-empty-is-default', EN, ["if (raw === undefined || raw.trim() === '') return LIVE_CUES_V2_LIMITS.judgeYes", 'if (raw === undefined) return LIVE_CUES_V2_LIMITS.judgeYes'], GROUNDING_T),
+  m('memory-top-on-the-wire', EN, ['keywordText: window, before, top }))', 'keywordText: window, before, top: 4 }))'], GROUNDING_T),
+  m('memory-top-kept', EN, ["typeof n.notes === 'string').slice(0, top)", "typeof n.notes === 'string').slice(0, 4)"], GROUNDING_T),
+  m('end-no-insight-twin', EN, ['cues.flatMap(c => (isCueKind(c.kind) ? [{', 'cues.flatMap(c => (true ? [{'], KINDS_T),
+  // ── Engine: settings view and apply ──
+  m('view-v3-version', EN, ['return { ...v2, v: 3, cueMode:', 'return { ...v2, v: 2 as never, cueMode:'], ROUTE_T),
+  m('view-v3-cue-mode', EN, ['cueMode: resolveLiveCuesCueMode(env, settings), grounding:', 'cueMode: resolveLiveCuesCueMode(env, null), grounding:'], ROUTE_T),
+  m('view-v3-grounding', EN, ['grounding: resolveLiveCuesGrounding(env, settings),\n', 'grounding: resolveLiveCuesGrounding(env, null),\n'], ROUTE_T),
+  m('view-v3-public-topics', EN, ['publicTopics = new MeetingAskStore().publicTopics()', 'publicTopics = false'], ROUTE_T),
+  m('view-v3-home-area', EN, ['homeArea = getOwnerHomeArea()', 'homeArea = null'], ROUTE_T),
+  m('view-v3-today-provider', EN, ['today = generalTodayProvider ? generalTodayProvider() : {', 'today = {'], ROUTE_T),
+  m('view-v3-today-provider-throws', EN, ['} catch { today = { day: v2.today.day, topicCalls: 0, webSearches: 0, breakerOpenUntil: null } }', "} catch { throw new Error('provider') }"], ROUTE_T),
+  m('apply-env-forced-mode', EN, ["resolveLiveCuesCueMode(env, liveCuesV2Settings()).locked) forced.push('cueMode')", "false) forced.push('cueMode')"], ROUTE_T),
+  m('apply-env-forced-mode-allows-focused', EN, ["patch.cueMode !== undefined && patch.cueMode !== 'focused' && resolveLiveCuesCueMode", 'patch.cueMode !== undefined && resolveLiveCuesCueMode'], ROUTE_T),
+  m('apply-env-forced-grounding', EN, ["resolveLiveCuesGrounding(env, liveCuesV2Settings()).locked) forced.push('grounding')", "false) forced.push('grounding')"], ROUTE_T),
+  m('apply-env-forced-grounding-allows-classic', EN, ["patch.grounding !== undefined && patch.grounding !== 'classic' && resolveLiveCuesGrounding", 'patch.grounding !== undefined && resolveLiveCuesGrounding'], ROUTE_T),
+  m('apply-env-locked-general', EN, ['...(Object.keys(patch.general ?? {}) as LiveCuesGeneralLimitName[]).filter(name => generalNow[name].locked).map(name => LIVE_CUES_GENERAL_LIMIT_BOUNDS[name].field),', ''], ROUTE_T),
+  m('apply-env-locked-wire-name', EN, ['.filter(name => generalNow[name].locked).map(name => LIVE_CUES_GENERAL_LIMIT_BOUNDS[name].field)', '.filter(name => generalNow[name].locked)'], ROUTE_T),
+  m('general-env-integers', EN, ['if (b.integer) e = envWhole(env, b.env, b.min, b.max)', 'if (b.integer) e = null'], ROUTE_T),
+  m('general-env-trigger-range', EN, ['e = n === null ? null : n >= b.min && n <= b.max ? n : knobFallback', 'e = n === null ? null : n >= b.min ? n : knobFallback'], ROUTE_T),
+  m('general-env-locks', EN, ["out[name] = e !== null ? { value: e, source: 'env', locked: true, min: b.min, max: b.max, default: b.default }\n      : v !== undefined ? { value: v, source: 'setting', locked: false, min: b.min, max: b.max, default: b.default }\n        : { value: b.default, source: 'default', locked: false, min: b.min, max: b.max, default: b.default }\n  }\n  return out\n}\nexport function liveCuesV2JudgeKeep", "out[name] = e !== null ? { value: e, source: 'env', locked: false, min: b.min, max: b.max, default: b.default }\n      : v !== undefined ? { value: v, source: 'setting', locked: false, min: b.min, max: b.max, default: b.default }\n        : { value: b.default, source: 'default', locked: false, min: b.min, max: b.max, default: b.default }\n  }\n  return out\n}\nexport function liveCuesV2JudgeKeep"], ROUTE_T),
+  // ── Settings store and resolution ──
+  m('store-schema-3', ST, ['hasV3 ? 3 : hasLimits ? 2 : 1', 'hasLimits ? 2 : 1'], SETTINGS_T),
+  m('store-keeps-cue-mode', ST, ['const cueMode = patch.cueMode ?? current.cueMode', 'const cueMode = patch.cueMode ?? null'], SETTINGS_T),
+  m('store-keeps-grounding', ST, ['const grounding = patch.grounding ?? current.grounding', 'const grounding = patch.grounding ?? null'], SETTINGS_T),
+  m('store-merges-general', ST, ['const general = { ...current.general, ...patch.general }', 'const general = { ...patch.general }'], SETTINGS_T),
+  m('store-writes-wire-names', ST, ['[LIVE_CUES_GENERAL_LIMIT_BOUNDS[n].field, general[n]]', '[n, general[n]]'], SETTINGS_T),
+  m('store-reads-wire-names', ST, ['const field = LIVE_CUES_GENERAL_LIMIT_BOUNDS[name].field\n            if (generalLimitInBounds(name, r[field]))', 'const field = name\n            if (generalLimitInBounds(name, r[field]))'], SETTINGS_T),
+  m('store-validates-cue-mode', ST, ['if (isCueMode(r.cueMode)) cueMode = r.cueMode', 'if (r.cueMode !== undefined) cueMode = r.cueMode as LiveCuesCueMode'], SETTINGS_T),
+  m('store-validates-grounding', ST, ['if (isGrounding(r.grounding)) grounding = r.grounding', 'if (r.grounding !== undefined) grounding = r.grounding as LiveCuesGrounding'], SETTINGS_T),
+  m('store-validates-general-bounds', ST, ['if (generalLimitInBounds(name, r[field])) general[name] = r[field] as number', 'general[name] = r[field] as number'], SETTINGS_T),
+  m('resolve-mode-env-only-focused', ST, ["if (env.COS_LIVE_CUES_MODE === 'focused')", 'if (env.COS_LIVE_CUES_MODE)'], SETTINGS_T),
+  m('resolve-grounding-env-only-classic', ST, ["if (env.COS_LIVE_CUES_GROUNDING === 'classic')", 'if (env.COS_LIVE_CUES_GROUNDING)'], SETTINGS_T),
+  m('resolve-mode-validated', ST, ['try { const v = settings?.cueMode?.(); stored = isCueMode(v) ? v : null } catch { stored = null }', 'try { const v = settings?.cueMode?.(); stored = (v ?? null) as LiveCuesCueMode | null } catch { stored = null }'], SETTINGS_T),
+  m('resolve-grounding-validated', ST, ['try { const v = settings?.grounding?.(); stored = isGrounding(v) ? v : null } catch { stored = null }', 'try { const v = settings?.grounding?.(); stored = (v ?? null) as LiveCuesGrounding | null } catch { stored = null }'], [...SETTINGS_T, ...PIN_T]),
+  m('resolve-mode-reader-throws', ST, ['try { const v = settings?.cueMode?.(); stored = isCueMode(v) ? v : null } catch { stored = null }', '{ const v = settings?.cueMode?.(); stored = isCueMode(v) ? v : null }'], SETTINGS_T),
+  m('resolve-grounding-reader-throws', ST, ['try { const v = settings?.grounding?.(); stored = isGrounding(v) ? v : null } catch { stored = null }', '{ const v = settings?.grounding?.(); stored = isGrounding(v) ? v : null }'], [...SETTINGS_T, ...PIN_T]),
+  m('general-limit-default-interval', ST, ["intervalSeconds: { field: 'generalIntervalSeconds', min: 120, max: 1800, default: 300,", "intervalSeconds: { field: 'generalIntervalSeconds', min: 120, max: 1800, default: 360,"], SETTINGS_T),
+  m('general-limit-bound-trigger', ST, ["trigger: { field: 'generalTrigger', min: 0.4, max: 0.9,", "trigger: { field: 'generalTrigger', min: 0.4, max: 0.95,"], SETTINGS_T),
+  // ── Route ──
+  m('route-get-v3', RT, ["v === '3' ? liveCuesV2SettingsViewV3() : v === '2'", "v === '3' ? liveCuesV2SettingsViewV2() : v === '2'"], ROUTE_T),
+  m('route-v2-refuses-v3-fields', RT, ['!(v3 ? V3_SETTINGS_KEYS : V2_SETTINGS_KEYS).has(k)', '!V3_SETTINGS_KEYS.has(k)'], ROUTE_T),
+  m('route-v3-takes-v3-fields', RT, ['!(v3 ? V3_SETTINGS_KEYS : V2_SETTINGS_KEYS).has(k)', '!V2_SETTINGS_KEYS.has(k)'], ROUTE_T),
+  m('route-cue-mode-enum', RT, ['if (v3 && body.cueMode !== undefined && !isCueMode(body.cueMode))', 'if (false)'], ROUTE_T),
+  m('route-grounding-enum', RT, ['if (v3 && body.grounding !== undefined && !isGrounding(body.grounding))', 'if (false)'], ROUTE_T),
+  m('route-general-bounds', RT, ['if (!generalLimitInBounds(name, body[b.field])) return res.status(400)', 'if (false) return res.status(400)'], ROUTE_T),
+  m('route-general-bounds-wire-field', RT, ["reason: 'out_of_bounds', field: b.field, min: b.min", "reason: 'out_of_bounds', field: name, min: b.min"], ROUTE_T),
+  m('route-env-forced-fields', RT, ["result.fields ? { error: 'env_forced', fields: result.fields } : { error: result.error }", '{ error: result.error }'], ROUTE_T),
+  m('route-answers-v3', RT, ['return res.json(v3 ? liveCuesV2SettingsViewV3() : liveCuesV2SettingsViewV2())', 'return res.json(liveCuesV2SettingsViewV2())'], ROUTE_T),
+  m('route-passes-cue-mode', RT, ['...(isCueMode(body.cueMode) ? { cueMode: body.cueMode } : {}),', ''], ROUTE_T),
+  m('route-passes-general', RT, ['...(Object.keys(general).length ? { general } : {}) })', '})'], ROUTE_T),
+  // ── Cue log schema ──
+  m('log-source-extras', VD, ['if (!isCueSourceExtras(s)) return false', ''], VERDICT_T),
+  m('log-source-url-public', VD, ['return s.url === undefined || publicHttpsUrl(s.url) !== null', 'return true'], VERDICT_T),
+  m('log-source-base-strings', VD, ['if (!(str(s.id) && str(s.date) && str(s.title))) return false', ''], VERDICT_T),
+  m('log-arms-enum', VD, ['a.every(x => (LIVE_CUE_ARMS as readonly unknown[]).includes(x))', 'true'], VERDICT_T),
+  m('log-arms-unique', VD, ['new Set(a).size === a.length && ', ''], VERDICT_T),
+  m('log-arms-array', VD, ["optional(r.arms, a => Array.isArray(a) && ", "optional(r.arms, a => "], VERDICT_T),
+  m('log-general-category', VD, ['(LIVE_CUE_GENERAL_CATEGORIES as readonly unknown[]).includes(g.category) && ', ''], VERDICT_T),
+  m('log-general-query-not-empty', VD, ['str(g.query) && g.query.length > 0 && ', 'str(g.query) && '], VERDICT_T),
+  m('log-general-query-length', VD, [' && g.query.length <= LIVE_CUE_GENERAL_QUERY_MAX', ''], VERDICT_T),
+  m('log-general-checked', VD, ['&& optional(r.general, isGeneral)', ''], VERDICT_T),
+  m('log-arms-checked', VD, ['&& optional(r.arms, a =>', '&& optional(r.arms, a => true || '], VERDICT_T),
+  // ── Shared contract ──
+  m('contract-one-locator', SH, ['if (locators.length > 1) return false\n', ''], KINDS_T),
+  m('contract-locator-matches-kind', SH, ['if (locators.length === 1 && locators[0] !== CUE_SOURCE_LOCATOR[source.kind]) return false\n', ''], KINDS_T),
+  m('contract-no-kind-no-locator', SH, ['if (source.kind === undefined) return locators.length === 0', 'if (source.kind === undefined) return true'], KINDS_T),
+  m('contract-known-kind', SH, ['if (!(CUE_SOURCE_KINDS as readonly string[]).includes(source.kind)) return false\n', ''], KINDS_T),
+  m('contract-web-needs-url', SH, ["if (source.kind === 'web' && source.url === undefined) return false\n", ''], [...KINDS_T, ...VERDICT_T]),
+  m('contract-url-https', SH, ["return source.url === undefined || source.url.startsWith('https://')", 'return true'], KINDS_T),
+  m('contract-locator-nonempty', SH, ["if (value !== undefined && (typeof value !== 'string' || value.length === 0 || value.length > 2048)) return false", ''], KINDS_T),
+  m('contract-insight-is-a-log-kind', SH, ['(GENERAL_CUE_KINDS as readonly string[]).includes(value))', 'false)'], KINDS_T),
+  m('contract-live-cue-checks-extras', SH, ["typeof (s as CueSourceRef).title === 'string'\n      && isCueSourceExtras(s as CueSourceRef))", "typeof (s as CueSourceRef).title === 'string')"], KINDS_T),
+  m('contract-live-cue-takes-insight', SH, ['    && isLogCueKind(v.kind)\n', '    && isCueKind(v.kind)\n'], KINDS_T),
+  // ── Public https validator ──
+  m('url-https-only', UR, ["u.protocol !== 'https:' ||", "(u.protocol !== 'https:' && u.protocol !== 'http:') ||"], URL_T),
+  m('url-no-credentials', UR, ['|| u.username || u.password ||', '||'], URL_T),
+  m('url-public-host', UR, ['!publicAddress(host) ||', ''], URL_T),
+  m('url-default-port-only', UR, ["u.port && u.port !== '443'", 'false'], URL_T),
+  m('url-port-80-is-not-https', UR, ["u.port && u.port !== '443'", "u.port && !['80', '443'].includes(u.port)"], URL_T),
+  m('url-trailing-dot', UR, ["const host = u.hostname.replace(/\\.$/, '')", 'const host = u.hostname'], URL_T),
+  m('url-empty-label-end', UR, ["if (host.endsWith('.') || host.includes('..')) return null", "if (host.includes('..')) return null"], URL_T),
+  m('url-empty-label-inside', UR, ["if (host.endsWith('.') || host.includes('..')) return null", "if (host.endsWith('.')) return null"], URL_T),
+  m('url-length', UR, ["value.length > 2048", 'false'], URL_T),
+  // ── Notes arm: domain and session ride along ──
+  m('notes-carry-meeting-domain', NT, ['...domainOf(hit.domain), ...(hit.sessionId ? { sessionId: hit.sessionId } : {}) }', '...(hit.sessionId ? { sessionId: hit.sessionId } : {}) }'], [...GROUNDED_T, ...GROUNDING_T, 'server/lib/live-cues-v2-notes.test.ts']),
+  m('notes-carry-bridge-domain', NT, ['key: `memory:${row.id}`, ...domainOf(row.domain) }', 'key: `memory:${row.id}` }'], [...GROUNDED_T, ...GROUNDING_T, 'server/lib/live-cues-v2-notes.test.ts']),
+  m('notes-domain-trimmed', NT, ['{ domain: v.trim() }', '{ domain: v }'], [...GROUNDED_T, ...GROUNDING_T, 'server/lib/live-cues-v2-notes.test.ts']),
+  m('notes-blank-domain-is-none', NT, ["typeof v === 'string' && v.trim() ? { domain: v.trim() } : {}", "typeof v === 'string' ? { domain: v.trim() } : {}"], [...GROUNDED_T, ...GROUNDING_T, 'server/lib/live-cues-v2-notes.test.ts']),
+  m('notes-carry-domain', NT, ['key: `memory:${hit.id}`, ...domainOf(hit.domain) }', 'key: `memory:${hit.id}` }'], [...GROUNDED_T, ...GROUNDING_T, 'server/lib/live-cues-v2-notes.test.ts']),
+  m('notes-carry-session', NT, ["...(hit.sessionId ? { sessionId: hit.sessionId } : {}) }", '}'], [...GROUNDED_T, ...GROUNDING_T, 'server/lib/live-cues-v2-notes.test.ts']),
+]
+
+const args = process.argv.slice(2)
+const names = args.filter(a => !a.startsWith('--'))
+if (args.includes('--list')) { for (const { name } of mutations) console.log(name); process.exit(0) }
+const selected = names.length ? mutations.filter(({ name }) => names.includes(name)) : mutations
+if (names.length && selected.length !== names.length) throw new Error('Unknown mutation name in: ' + names.join(' '))
+if (new Set(mutations.map(x => x.name)).size !== mutations.length) throw new Error('Duplicate mutation name')
+
+/** The edits applied to one file's text. Each target must match exactly once and the result must differ. */
+function mutate(original, { name, file, edits }) {
+  let mutated = original
+  for (const [find, replacement] of edits) {
+    if (mutated.split(find).length !== 2) throw new Error(`Mutation ${name} does not match exactly once in ${file}: ${find.slice(0, 80)}`)
+    mutated = mutated.replace(find, () => replacement)
+  }
+  if (mutated === original) throw new Error(`Mutation ${name} did not change ${file}`)
+  return mutated
+}
+// --check: prove every target matches exactly once in the live checkout, without running a test (the baseline is the slow part).
+if (args.includes('--check')) {
+  let bad = 0
+  for (const mutation of selected) {
+    try { mutate(readFileSync(join(root, mutation.file), 'utf8'), mutation) } catch (error) { bad += 1; console.log(error.message) }
+  }
+  console.log(`${selected.length - bad} of ${selected.length} mutation targets match exactly once`)
+  process.exit(bad ? 1 : 0)
+}
+
+const scratch = mkdtempSync(join(tmpdir(), 'cue-v3-mutations-'))
+try {
+  const skip = new Set(['data', 'models', 'certs', 'node_modules'])
+  cpSync(join(root, 'server'), join(scratch, 'server'), { recursive: true, filter: src => !(skip.has(basename(src)) && dirname(src) === join(root, 'server')) })
+  for (const dir of ['shared', 'work-task-runtime', 'bin', 'docs', 'memory-runtime']) cpSync(join(root, dir), join(scratch, dir), { recursive: true })
+  for (const file of ['vitest.config.ts', 'package.json', 'managed-runtime-contract.json']) cpSync(join(root, file), join(scratch, file))
+  symlinkSync(join(root, 'node_modules'), join(scratch, 'node_modules'), 'dir')
+  const run = tests => spawnSync(process.execPath, [join(root, 'node_modules/vitest/vitest.mjs'), 'run', '--maxWorkers=1', ...tests], {
+    cwd: scratch, env: { PATH: process.env.PATH, HOME: scratch, TMPDIR: process.env.TMPDIR, COS_DATA_DIR: join(scratch, 'data'), COS_PROFILE_PATH: join(scratch, 'data', 'profile.json') },
+    encoding: 'utf8', timeout: 300000,
+  })
+  const baseline = run(ALL)
+  if (baseline.status !== 0) throw new Error('Baseline failed; a gate over a red suite proves nothing:\n' + baseline.stdout + '\n' + baseline.stderr)
+  const totals = /Tests\s+(\d+) passed/.exec(baseline.stdout)
+  console.log(`baseline PASS (${totals ? totals[1] : '?'} tests in ${ALL.length} files)`)
+  let killed = 0
+  for (const { name, file, edits, tests } of selected) {
+    const target = join(scratch, file), original = readFileSync(target, 'utf8')
+    const mutated = mutate(original, { name, file, edits })
+    writeFileSync(target, mutated)
+    let result
+    try { result = run(tests) } finally { writeFileSync(target, original) }
+    if (readFileSync(target, 'utf8') !== original) throw new Error(`Restore failed for ${file} after ${name}`)
+    const output = result.stdout + '\n' + result.stderr
+    const killers = [...new Set([...output.matchAll(/FAIL\s+((?:server|shared)\/\S+\.test\.ts > [^\n]+)/g)].map(x => x[1].trim()))]
+    if (result.status === 0 || result.error || !killers.length) { console.log(`${name} SURVIVED or harness failed\n${output.slice(-3000)}`); process.exitCode = 1; continue }
+    killed += 1
+    console.log(`${name} KILLED by ${killers.slice(0, 2).join(' | ')}${killers.length > 2 ? ` (+${killers.length - 2} more)` : ''}`)
+  }
+  console.log(`${killed} of ${selected.length} live cues v3 mutations killed`)
+} finally { rmSync(scratch, { recursive: true, force: true }) }

package/server/scripts/mac-voice-assignment-6930-mutation-gate.mjs

@@ -53,20 +53,20 @@ const mutations = [
   m('selection-not-trimmed-to-room', A, ['Math.min(MAX_ENROL_PER_CORRECTION, capacity)).slice(0, capacity)', 'Math.min(MAX_ENROL_PER_CORRECTION, capacity))'], ROUTE_T),
   m('selection-ignores-mac-cap', A, ['Math.min(MAX_ENROL_PER_CORRECTION, capacity)).slice(0, capacity)', 'MAX_ENROL_PER_CORRECTION)'], ROUTE_T),
   // ── Which audio ──
-  m('mixed-chunk-used-whole', A, ['if (turns.length === 0 || turns.every(t => t.speaker === from)) {', 'if (true) {'], ROUTE_T),
-  m('other-voices-turns-sliced', A, ['const usable = turns.filter(t => t.speaker === from\n', 'const usable = turns.filter(t => true\n'], ROUTE_T),
+  m('mixed-chunk-used-whole', A, ["if (turns.length === 0 || turns.every(t => t.speaker === voice)) return 'whole'", "if (true) return 'whole'"], ROUTE_T),
+  m('other-voices-turns-sliced', A, ['.filter(t => t.speaker === voice\n', '.filter(t => true\n'], ROUTE_T),
   m('slice-min-ignored', A, ['>= MAC_ASSIGN_MIN_SLICE_SEC)', '>= 0)'], ROUTE_T),
   m('slice-min-off-by-one', A, ['export const MAC_ASSIGN_MIN_SLICE_SEC = 3.0', 'export const MAC_ASSIGN_MIN_SLICE_SEC = 2.0'], ROUTE_T),
   m('slice-inset-removed', A, ['export const MAC_ASSIGN_SLICE_INSET_SEC = 0.15', 'export const MAC_ASSIGN_SLICE_INSET_SEC = 0'], ROUTE_T),
-  m('slice-start-inset-removed', A, ['slice: { startSec: (t.startSec as number) + MAC_ASSIGN_SLICE_INSET_SEC,', 'slice: { startSec: (t.startSec as number),'], ROUTE_T),
+  m('slice-start-inset-removed', A, ['({ startSec: (t.startSec as number) + MAC_ASSIGN_SLICE_INSET_SEC,', '({ startSec: (t.startSec as number),'], ROUTE_T),
   m('slice-end-inset-removed', A, ['endSec: (t.endSec as number) - MAC_ASSIGN_SLICE_INSET_SEC }', 'endSec: (t.endSec as number) }'], ROUTE_T),
   m('final-segments-ignored', A, ['const list = Array.isArray(final) && final.length > 0 ? final : Array.isArray(live) ? live : []', 'const list = Array.isArray(live) ? live : []'], ROUTE_T),
   m('short-chunk-not-skipped', A, ['    if (sec < VOICEPRINT_MIN_AUDIO_SEC) { report.shortSkipped += 1; continue }\n', ''], ROUTE_T),
-  m('unit-cap-ignored', A, ['const picked = spread(units, MAC_ASSIGN_MAX_UNITS)', 'const picked = units'], ROUTE_T),
+  m('unit-cap-ignored', A, ['const picked = spreadMacVoiceUnits(units, MAC_ASSIGN_MAX_UNITS)', 'const picked = units'], ROUTE_T),
   m('spread-takes-the-first', A, ['out.push(items[Math.floor((k * items.length) / max)])', 'out.push(items[k])'], ROUTE_T),
   m('missing-audio-not-counted', A, ['    if (!path) { report.missingAudio += 1; continue }\n', '    if (!path) continue\n'], [...LIB_T, ...ROUTE_T]),
   m('audio-gone-reads-as-unusable', A, ["report.skipped = units.length === 0 ? 'no_usable_audio' : 'audio_not_retained'", "report.skipped = 'no_usable_audio'"], [...LIB_T, ...ROUTE_T]),
-  m('wrong-sample-rate-accepted', A, ['    if (!pcm || pcm.sampleRate !== SAMPLE_RATE) continue\n', '    if (!pcm) continue\n'], ROUTE_T),
+  m('wrong-sample-rate-accepted', A, ['  if (!pcm || pcm.sampleRate !== SAMPLE_RATE) return null\n', '  if (!pcm) return null\n'], ROUTE_T),
   // ── The same gates a glasses rename uses ──
   m('coherence-gate-skipped', A, ['greedyDiversitySelect(cluster.members.map(m => embeddings[m]), Math.min(', 'greedyDiversitySelect(embeddings, Math.min('], ROUTE_T),
   m('coherence-skips-not-reported', A, ['report.clusterSkipped = embeddings.length - cluster.members.length', 'report.clusterSkipped = 0'], ROUTE_T),

package/shared/live-cues-v2.ts

@@ -26,8 +26,39 @@ export function legacyCueKind(kind: CueKind): 'reinforce' | 'challenge' {
   return kind === 'reinforce' || kind === 'decision' || kind === 'promise' ? 'reinforce' : 'challenge'
 }
 
-/** A past meeting the cue drew on (0 to 2 per cue). */
-export interface CueSourceRef { id: string; date: string; title: string }
+/** Live cues v3: general cues carry one kind of their own, `insight` (a short public fact with its source). It is separate from
+ *  CUE_KINDS on purpose: CUE_KINDS decides what a meeting may receive and what health advertises, and the three arrays above
+ *  and legacyCueKind do not know it. Only an extended (Mac) meeting ever gets one; a legacy meeting never does, and an insight
+ *  never has a v1 `coaching_nudge` twin. */
+export const GENERAL_CUE_KINDS = ['insight'] as const
+export type GeneralCueKind = typeof GENERAL_CUE_KINDS[number]
+/** Any kind a cue row (the log, a verdict, an extended meeting's stream) may carry. */
+export function isLogCueKind(value: unknown): value is CueKind | GeneralCueKind {
+  return isCueKind(value) || (typeof value === 'string' && (GENERAL_CUE_KINDS as readonly string[]).includes(value))
+}
+
+/** What a cue source is: a past meeting, a COS memory, a file attached to this meeting, or a public web page. */
+export const CUE_SOURCE_KINDS = ['meeting', 'memory', 'file', 'web'] as const
+export type CueSourceKind = typeof CUE_SOURCE_KINDS[number]
+/** A past meeting the cue drew on (0 to 2 per cue). Live cues v3 adds an optional kind and at most ONE locator matching it:
+ *  meeting `recordId` (when known), memory `memoryId`, file `fileId`, web `url` (https only, and required for a web source).
+ *  Older readers ignore them. */
+export interface CueSourceRef { id: string; date: string; title: string; kind?: CueSourceKind; recordId?: string; memoryId?: string; fileId?: string; url?: string }
+/** The locator field each source kind uses. */
+export const CUE_SOURCE_LOCATOR = { meeting: 'recordId', memory: 'memoryId', file: 'fileId', web: 'url' } as const
+/** Are the optional kind and locator of a source well formed: a known kind, no locator without it, at most one, and it matches
+ *  the kind. A web url must be https (the server also checks it is a public address before it writes a row). */
+export function isCueSourceExtras(source: CueSourceRef): boolean {
+  const locators = (['recordId', 'memoryId', 'fileId', 'url'] as const).filter(k => source[k] !== undefined)
+  if (source.kind === undefined) return locators.length === 0
+  if (!(CUE_SOURCE_KINDS as readonly string[]).includes(source.kind)) return false
+  if (locators.length > 1) return false
+  if (source.kind === 'web' && source.url === undefined) return false
+  if (locators.length === 1 && locators[0] !== CUE_SOURCE_LOCATOR[source.kind]) return false
+  const value = locators.length === 1 ? source[locators[0]] : undefined
+  if (value !== undefined && (typeof value !== 'string' || value.length === 0 || value.length > 2048)) return false
+  return source.url === undefined || source.url.startsWith('https://')
+}
 
 /** SSE named event `coaching_nudge_v2` (emitted BEFORE its v1 `coaching_nudge` twin), and the rows of GET /api/live-cues/status?sessionId=. */
 export interface LiveCueV2 {
@@ -38,7 +69,8 @@ export interface LiveCueV2 {
   headline: string
   /** <= 220 chars: the full cue, shown on tap and in the phone Cues sheet. */
   detail: string
-  kind: CueKind
+  /** An extended (Mac) meeting may also receive `insight` (live cues v3); a legacy meeting never does. */
+  kind: CueKind | GeneralCueKind
   sources: CueSourceRef[]
   /** Admission probability from the gate, 0 to 1. */
   gate: number
@@ -91,8 +123,9 @@ export function isLiveCueV2(value: unknown): value is LiveCueV2 {
   return v.protocol === 2 && typeof v.cueId === 'string' && v.cueId.length > 0 && typeof v.sessionId === 'string'
     && typeof v.headline === 'string' && v.headline.length > 0 && v.headline.length <= CUE_HEADLINE_MAX
     && typeof v.detail === 'string' && v.detail.length > 0 && v.detail.length <= CUE_DETAIL_MAX
-    && isCueKind(v.kind)
+    && isLogCueKind(v.kind)
     && Array.isArray(v.sources) && v.sources.length <= 2
-    && v.sources.every(s => !!s && typeof (s as CueSourceRef).id === 'string' && typeof (s as CueSourceRef).date === 'string' && typeof (s as CueSourceRef).title === 'string')
+    && v.sources.every(s => !!s && typeof (s as CueSourceRef).id === 'string' && typeof (s as CueSourceRef).date === 'string' && typeof (s as CueSourceRef).title === 'string'
+      && isCueSourceExtras(s as CueSourceRef))
     && typeof v.gate === 'number' && typeof v.createdAt === 'number' && typeof v.model === 'string'
 }

package/shared/media-attachment.ts

@@ -17,6 +17,7 @@ export type MediaMime =
   | 'text/csv'
   | 'application/json'
   | 'application/pdf'
+  | 'application/vnd.openxmlformats-officedocument.spreadsheetml.sheet'
   | 'video/mp4'
   | 'video/quicktime'
 
@@ -88,6 +89,7 @@ const VALID_KINDS: ReadonlySet<string> = new Set([
 const IMAGE_MIMES: ReadonlySet<string> = new Set(['image/jpeg', 'image/png'])
 const DOCUMENT_MIMES: ReadonlySet<string> = new Set([
   'text/plain', 'text/markdown', 'text/csv', 'application/json', 'application/pdf',
+  'application/vnd.openxmlformats-officedocument.spreadsheetml.sheet',
 ])
 const VIDEO_MIMES: ReadonlySet<string> = new Set(['video/mp4', 'video/quicktime'])
 const VALID_MIMES: ReadonlySet<string> = new Set([...IMAGE_MIMES, ...DOCUMENT_MIMES, ...VIDEO_MIMES])

package/shared/meeting-ask.ts

@@ -247,6 +247,17 @@ export interface MeetingAskConfig {
         engine?: string;
     };
     capabilities: MeetingAskCapabilities;
+    /** 6.97.8, additive: today's public web lookups by feature, from the server's daily ledger. Older servers omit it. */
+    webToday?: MeetingAskWebToday;
+}
+export interface MeetingAskWebToday {
+    day: string;
+    /** False when the ledger file could not be read: the counts are then zero and do not describe today. */
+    readable: boolean;
+    cues: { searches: number; pagesRead: number; pagesFailed: number };
+    ask: { searches: number; pagesRead: number; pagesFailed: number };
+    factCheck: { searches: number; pagesRead: number; pagesFailed: number };
+    withheld: { total: number; byReason: Record<string, number>; byFeature: { cues: number; ask: number; factCheck: number } };
 }
 /** All paths under /api/meeting-ask. GET config; PUT config {engine,model} and/or {cosSearch} (6.71.1); either part may come alone.
  * POST requests MeetingAskSubmit -> 202 {exchange}; GET requests/:requestId -> {exchange}.