Merge branch 'fix/g07' into fix/integrated

# Conflicts:
#	internal/ipc/api.go
#	internal/ipc/client.go
#	internal/llm/client.go

internal/ipc/server.go

@@ -189,6 +189,18 @@ func (a *storeAPI) QueryNotes(ctx context.Context, embedding []float32, k int) (
 	return out, nil
 }
 
+func (a *storeAPI) RecentNotesFromSource(ctx context.Context, prefix string, n int) ([]Note, error) {
+	ns, err := a.s.RecentNotesFromSource(ctx, prefix, n)
+	if err != nil {
+		return nil, mapErr(err)
+	}
+	out := make([]Note, len(ns))
+	for i, note := range ns {
+		out[i] = toNote(note)
+	}
+	return out, nil
+}
+
 func (a *storeAPI) RecentNotes(ctx context.Context, n int) ([]Note, error) {
 	ns, err := a.s.RecentNotes(ctx, n)
 	if err != nil {
@@ -517,6 +529,11 @@ type Server struct {
 	ListSpeakersFn  ListSpeakersFunc
 	ForgetSpeakerFn ForgetSpeakerFunc
 
+	// LockedFn — reports whether the daemon is in locked (pre-unlock) mode.
+	// Read by MethodPing only. Nil ⇒ not locked, which is what an embedded or
+	// test Server without the unlock dance is.
+	LockedFn func() bool
+
 	// UnlockFn — unwraps the store encryption key from the wrapped blob using
 	// the passkey PRF secret, opens the encrypted store, and wires
 	// the rest of the daemon (voice, loop, delivery). Set by the daemon when
@@ -853,6 +870,16 @@ var methodTable = map[Method]handlerFunc{
 		}
 		return out, nil
 	}),
+	MethodRecentNotesFromSource: withParams(func(ctx context.Context, api CoreAPI, p sourceNReq) ([]Note, error) {
+		out, err := api.RecentNotesFromSource(ctx, p.Prefix, p.N)
+		if err != nil {
+			return nil, err
+		}
+		if out == nil {
+			out = []Note{}
+		}
+		return out, nil
+	}),
 	MethodRecentNotes: withParams(func(ctx context.Context, api CoreAPI, p nReq) ([]Note, error) {
 		out, err := api.RecentNotes(ctx, p.N)
 		if err != nil {
@@ -988,6 +1015,17 @@ func (s *Server) dispatch(ctx context.Context, req Request) (json.RawMessage, er
 	// directly by the daemon (StepUp / WrapKeyFn / UnlockFn), not store
 	// state, so they can never be table entries keyed on a CoreAPI method.
 	switch req.Method {
+	case MethodPing:
+		// Deliberately reaches nothing: no store, no CoreAPI, no daemon
+		// component. That is what makes it answerable in locked mode, and it is
+		// the whole point — an update that restarts her into locked mode has to
+		// be able to tell that apart from a daemon that did not come up.
+		locked := false
+		if s.LockedFn != nil {
+			locked = s.LockedFn()
+		}
+		return marshalResult(PingResp{Alive: true, Locked: locked}), nil
+
 	case MethodAssertStepUp:
 		if s.StepUp != nil {
 			return marshalResult(nil), s.StepUp(ctx)