@gotcos/glasses-server 6.18.7 → 6.19.0

package/.env.example

@@ -139,6 +139,17 @@ BIND_HOST=0.0.0.0
 # keeps working if the default ever flips to Metal-on.
 # COS_BATCH_HQ_FORCE_CPU=1
 
+# ── UNSAVED-CAPTURE QUARANTINE (6.19.0) ─────────────────────────────────
+# Meeting audio whose save never landed is QUARANTINED, never deleted. It
+# surfaces on /api/health (unsaved_captures) and, with COS Control 0.3.1+,
+# as an "Unsaved captures" row in the status card. One authenticated call
+# recovers a capture into a durable meeting scribe:
+#   curl -X POST -H "x-cos-token: $COS_API_TOKEN" \
+#     http://127.0.0.1:3141/api/meeting/orphans/<sessionId>/recover
+# Quarantined audio expires on this retention clock (hours, clamped 1-720).
+# 72 covers a long weekend away from the Mac.
+# COS_UNSAVED_AUDIO_RETENTION_HOURS=72
+
 # ── LIVE CUES (optional — requires the FULL COS PIPELINE above) ──────────
 # Live meeting coaching cues on the lens: transcript window -> Composer
 # planner -> Qdrant -> LightRAG -> Composer insight -> coaching_nudge.

package/CHANGELOG.md

@@ -1,3 +1,55 @@
+## 6.19.0
+
+Meeting audio is evidence. This release stops the server from ever deleting an
+unsaved capture, and makes batch status stop lying about finished work.
+
+- **Unsaved-capture quarantine (the 2026-08-01 data-loss fix).** The
+  session-audio purge (boot sweep + 60s interval + non-saved session close)
+  DELETED any directory not tracked in memory once the 4h idle retention
+  passed — an offline meeting whose deferred save never landed lost its
+  full-fidelity audio within a minute. Two real meetings were destroyed this
+  way on 2026-08-01; only speaker-enrollment fragments survived. Audio-bearing
+  directories are now MOVED to `data/unsaved-audio/` with a manifest, never
+  deleted in place. Empty directories are still cleaned. A failed quarantine
+  move leaves the source untouched. Quarantine expires on
+  `COS_UNSAVED_AUDIO_RETENTION_HOURS` (default 72, clamped 1–720) — the only
+  place quarantined audio is ever deleted.
+- **Unsaved captures are visible.** `/api/health` gains `unsaved_captures`
+  (count + compact items, same exposure level as `meeting_sync`). The
+  authenticated `GET /api/meeting/orphans` returns full detail.
+- **Miles-triggered recovery, surface-only by decision (2026-08-02).**
+  `POST /api/meeting/orphans/:sessionId/recover` batch-transcribes the
+  quarantined WAVs (same segment/enhance/Metal-preempt contract as HQ polish,
+  under a new `orphan_recovery` maintenance lease), writes a durable scribe,
+  and hands off to operations when the COS pipeline is configured. Idempotent
+  via the save-receipt short-circuit; the server never drives recovery on its
+  own, and audio stays in quarantine until the retention clock — a failed
+  recovery is retryable.
+- **Rejected HQ batches release their status.** A terminal batch outcome
+  (rejected quality, pipeline failure, accepted-but-unpersisted) now writes
+  `_batch_terminal.json` next to the retained WAVs. `meeting_sync` reports
+  those as `retained` — never as active work — so a rejected batch no longer
+  shows "HQ polish · N chunks" with `blocksRestart: true` for the 12h WAV
+  retention after the work already finished (observed on
+  meeting_1785695339502_mvqm0p, reason `repetitive-output`). A retry clears
+  the terminal record; live progress always wins. `meeting_sync.retained` is
+  additive — older consumers ignore it.
+- Deferred by design: the realtime-model fallback port (W3) ships in its own
+  release. The app-side module has diverged ~1,100 lines from this repo's
+  whisper path; transplanting it alongside the data-loss fix would couple the
+  release's safest change to its riskiest. No default flips either way.
+
+## 6.18.8
+
+- **Prompt draft peeks for live ASR.** `POST /api/prompt-drafts/:draftId/peek`
+  runs Turbo locally, emits `prompt_transcript` with `provisional: true` +
+  `peekGen`, and does **not** advance the recovery ledger. Drop-on-busy,
+  `learnInline=false`, and `affectsCircuit: false` so peeks cannot trip or
+  success-reset the Whisper breaker.
+- **Interactive HQ keeps short utterance heads.** Compose HQ skips light
+  enhance (highpass was truncating "device, just for…") and omits CLI `--vad`
+  as defense-in-depth. Meeting/batch HQ paths unchanged.
+
 ## 6.18.7
 
 - **Phone Restart no longer leaves the server Stopped.** Control LaunchAgent

package/README.md

@@ -123,6 +123,12 @@ range is the exact Tailscale/CGNAT allocation (`100.64.0.0/10`), not all of
   locally through a network interruption. Reconnecting reconciles the exact
   chunks already stored by the Mac, uploads only missing audio, and finalizes
   through an idempotent save receipt without duplicating the meeting.
+- Since 6.19.0, meeting audio whose save never lands is quarantined for 72 hours
+  (`COS_UNSAVED_AUDIO_RETENTION_HOURS`) instead of being cleaned up, surfaces on
+  `/api/health` as `unsaved_captures`, and can be recovered into a durable
+  meeting scribe with one authenticated call
+  (`POST /api/meeting/orphans/:sessionId/recover`; list via
+  `GET /api/meeting/orphans`).
 - Local whisper.cpp transcription (free and local-only by default). OpenAI
   Whisper fallback is optional and requires both the exact
   `COS_OPENAI_WHISPER_FALLBACK=1` opt-in and a configured key; a key alone never

package/managed-runtime-contract.json

@@ -21,6 +21,7 @@
     "COS_LIVE_CUES_AUTO",
     "COS_BATCH_HQ_METAL",
     "COS_BATCH_HQ_FORCE_CPU",
+    "COS_UNSAVED_AUDIO_RETENTION_HOURS",
     "COS_CLAUDE_TRUST_MODE",
     "COS_CODEX_SANDBOX",
     "COS_SCRIPTS_DIR"

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@gotcos/glasses-server",
-  "version": "6.18.7",
+  "version": "6.19.0",
   "description": "COS Glasses \u2014 self-hosted AI heads-up-display server for Even G2 smart glasses, powered by Claude Code, Codex, or Cursor Agent CLI",
   "type": "module",
   "bin": {

package/server/lib/archive.ts

@@ -15,6 +15,7 @@ import { secureExistingPrivateFile } from './secure-user-config.js'
 
 import type { Exchange } from './conversation.js'
 import { resolveExchangePairModel } from './conversation.js'
+import type { ModelPreference } from '../../shared/model-preference.js'
 
 import { dataPath } from './data-dir.js'
 const ARCHIVE_DIR = dataPath('archive')
@@ -60,6 +61,8 @@ export interface SessionToArchive {
   contextBreaks: number[]
   createdAt: number
   lastActivity: number
+  /** Optional session-level model fallback for pre-stamp exchange pairs. */
+  modelPreference?: ModelPreference | null
 }
 
 // ── Directory management ────────────────────────────────────

package/server/lib/conversation.ts

@@ -876,6 +876,7 @@ export function getActiveSessions(): SessionToArchive[] {
       contextBreaks: session.contextBreaks,
       createdAt: session.createdAt,
       lastActivity: session.lastActivity,
+      modelPreference: session.modelPreference,
     })
   }
   return result

package/server/lib/maintenance-lifecycle.ts

@@ -46,6 +46,7 @@ export type MaintenanceWorkKind =
   | 'meeting_batch_finalization'
   | 'prompt_draft_write'
   | 'prompt_draft_warm'
+  | 'prompt_draft_peek'
   | 'prompt_draft_finalize'
   // Live Cues pipeline (planner + memory hops + insight). Held for the
   // pipeline's in-flight duration so an Update Server drain cannot unload the
@@ -53,6 +54,14 @@ export type MaintenanceWorkKind =
   // budget must stay under COS Control's 90s drain timeout (main.swift:1853)
   // or every drain that catches a cue in flight hard-fails to Repair.
   | 'live_cue_pipeline'
+  // Miles-triggered recovery of a quarantined unsaved capture (6.19.0):
+  // batch-transcribes retained WAVs into a durable scribe. Held for the whole
+  // background run so an Update Server drain waits for it like any batch.
+  // Long runs are made visible: the active-recovery registry renders a
+  // meeting_sync row with blocksRestart so COS Control warns BEFORE
+  // committing a drain into a decode that outlives its 90s timeout
+  // (main.swift:1963 waitForRestartProof).
+  | 'orphan_recovery'
 
 export type MaintenanceWorkPhase = 'queued' | 'active'
 export type MaintenanceOperationScope = 'same_boot' | 'cross_boot'

package/server/lib/meeting-batch-progress.ts

@@ -5,9 +5,11 @@
 import { existsSync, readdirSync, readFileSync, statSync, writeFileSync, unlinkSync } from 'node:fs'
 import { basename, join } from 'node:path'
 import { dataPath } from './data-dir.js'
+import { listActiveRecoveries } from './unsaved-audio-quarantine.js'
 
 export const BATCH_PROGRESS_FILENAME = '_batch_progress.json'
 export const BATCH_PENDING_MARKER = '_batch_pending.marker'
+export const BATCH_TERMINAL_FILENAME = '_batch_terminal.json'
 
 export type MeetingBatchPhase =
   | 'queued'
@@ -44,6 +46,75 @@ export interface MeetingSyncSnapshot {
   label: string
   blocksRestart: boolean
   meetings: MeetingSyncMeeting[]
+  /** Batches that reached a terminal outcome but whose WAVs are deliberately
+   *  retained for retry (rejected quality, failed persist). Additive field —
+   *  older consumers ignore it. Never counts toward active/blocksRestart. */
+  retained: MeetingSyncRetainedMeeting[]
+}
+
+export type MeetingBatchOutcome = 'accepted' | 'rejected' | 'failed'
+
+export interface MeetingBatchTerminal {
+  schemaVersion: 1
+  meetingId: string
+  outcome: MeetingBatchOutcome
+  reason?: string
+  at: string
+}
+
+export interface MeetingSyncRetainedMeeting {
+  meetingId: string
+  outcome: MeetingBatchOutcome
+  reason: string | null
+  chunkFiles: number
+  at: string
+  label: string
+}
+
+/** Record the batch's terminal outcome next to its retained WAVs. Before this
+ *  file existed (≤6.18.8), a rejected batch's dir kept rendering as active
+ *  "HQ polish · N chunks" with blocksRestart:true for the full 12h retention —
+ *  the status conflated "work running" with "evidence retained". */
+export function writeMeetingBatchTerminal(
+  audioDir: string,
+  input: { outcome: MeetingBatchOutcome; reason?: string; meetingId?: string },
+): void {
+  const payload: MeetingBatchTerminal = {
+    schemaVersion: 1,
+    meetingId: input.meetingId ?? basename(audioDir),
+    outcome: input.outcome,
+    ...(input.reason ? { reason: input.reason } : {}),
+    at: new Date().toISOString(),
+  }
+  try {
+    writeFileSync(join(audioDir, BATCH_TERMINAL_FILENAME), `${JSON.stringify(payload)}\n`, {
+      encoding: 'utf8',
+      mode: 0o600,
+    })
+  } catch {
+    // Status only — never fail the pipeline for a status write.
+  }
+}
+
+/** A retry invalidates the previous terminal state. */
+export function clearMeetingBatchTerminal(audioDir: string): void {
+  const path = join(audioDir, BATCH_TERMINAL_FILENAME)
+  try {
+    if (existsSync(path)) unlinkSync(path)
+  } catch { /* ignore */ }
+}
+
+function readTerminalFile(dir: string): MeetingBatchTerminal | null {
+  const path = join(dir, BATCH_TERMINAL_FILENAME)
+  if (!existsSync(path)) return null
+  try {
+    const raw = JSON.parse(readFileSync(path, 'utf8')) as MeetingBatchTerminal
+    if (raw?.schemaVersion !== 1) return null
+    if (raw.outcome !== 'accepted' && raw.outcome !== 'rejected' && raw.outcome !== 'failed') return null
+    return raw
+  } catch {
+    return null
+  }
 }
 
 function pendingBatchRoot(): string {
@@ -111,6 +182,11 @@ export function clearMeetingBatchProgress(audioDir: string): void {
   } catch { /* ignore */ }
 }
 
+/** Public read for surfaces outside this module (orphan recovery progress). */
+export function readMeetingBatchProgress(dir: string): MeetingBatchProgress | null {
+  return readProgressFile(dir)
+}
+
 function readProgressFile(dir: string): MeetingBatchProgress | null {
   const path = join(dir, BATCH_PROGRESS_FILENAME)
   if (!existsSync(path)) return null
@@ -140,8 +216,9 @@ export function getMeetingSyncSnapshot(
   root: string = pendingBatchRoot(),
 ): MeetingSyncSnapshot {
   const meetings: MeetingSyncMeeting[] = []
+  const retained: MeetingSyncRetainedMeeting[] = []
   if (!existsSync(root)) {
-    return { active: false, percent: null, label: 'Idle', blocksRestart: false, meetings }
+    return { active: false, percent: null, label: 'Idle', blocksRestart: false, meetings, retained }
   }
 
   let dirs: string[] = []
@@ -154,7 +231,7 @@ export function getMeetingSyncSnapshot(
       }
     })
   } catch {
-    return { active: false, percent: null, label: 'Idle', blocksRestart: false, meetings }
+    return { active: false, percent: null, label: 'Idle', blocksRestart: false, meetings, retained }
   }
 
   for (const name of dirs) {
@@ -165,6 +242,47 @@ export function getMeetingSyncSnapshot(
       chunkFiles = readdirSync(dir).filter(f => f.endsWith('.wav')).length
     } catch { /* ignore */ }
 
+    // A terminal outcome ends the meeting's ACTIVE life. Its WAVs stay for
+    // retry, reported as retained — never as running work. The gate is
+    // progress==null ONLY: the pending marker is refreshed every segment and
+    // every 60s during the run, so it is always fresh the moment a terminal
+    // is written — gating on marker freshness left the phantom alive for the
+    // first 15 minutes, exactly the post-meeting Update Server window. A
+    // genuine retry clears the terminal first (runMeetingBatchPipeline) and
+    // immediately writes queued progress, so progress presence is the true
+    // live signal.
+    const terminal = readTerminalFile(dir)
+    if (terminal && progress == null) {
+      const reasonSuffix = terminal.reason ? `: ${terminal.reason}` : ''
+      retained.push({
+        meetingId: terminal.meetingId || name,
+        outcome: terminal.outcome,
+        reason: terminal.reason ?? null,
+        chunkFiles,
+        at: terminal.at,
+        label: `Retained (${terminal.outcome}${reasonSuffix}) · ${chunkFiles} chunk${chunkFiles === 1 ? '' : 's'}`,
+      })
+      continue
+    }
+
+    // Backfill: a dir with WAVs, no progress, no fresh marker, and NO terminal
+    // file is a batch that ended before 6.19.0 existed (or whose terminal
+    // write failed). Pre-6.19.0 semantics rendered these as phantom active
+    // work with blocksRestart for the rest of the 12h retention — and the
+    // first boot after an upgrade is exactly when the user watches COS
+    // Control. Classify them as retained with an honest unknown outcome.
+    if (progress == null && !markerFresh(dir) && chunkFiles > 0) {
+      retained.push({
+        meetingId: name,
+        outcome: 'failed',
+        reason: 'pre-terminal batch (ended before 6.19.0 or terminal write lost)',
+        chunkFiles,
+        at: new Date(0).toISOString(),
+        label: `Retained (unknown outcome) · ${chunkFiles} chunk${chunkFiles === 1 ? '' : 's'}`,
+      })
+      continue
+    }
+
     const active = markerFresh(dir) || progress != null
     if (!active && chunkFiles === 0) continue
 
@@ -198,8 +316,36 @@ export function getMeetingSyncSnapshot(
     meetings.push({ ...row, label: labelFor(row) })
   }
 
+  // Active orphan recoveries decode in the quarantine root, which this scan
+  // never visits — surface them as active rows or COS Control shows "Idle"
+  // with blocksRestart:false while a 20-90 minute decode holds the
+  // maintenance lease, and an Update Server drain walks blind into its 90s
+  // timeout and hard-fails to Repair. Same contract as meeting_batch_finalization.
+  for (const recovery of listActiveRecoveries()) {
+    const progress = readProgressFile(recovery.dirPath)
+    const percent = progress && progress.segmentsTotal > 0
+      ? clampPercent(progress.segmentsDone, progress.segmentsTotal)
+      : null
+    const row: Omit<MeetingSyncMeeting, 'label'> = {
+      meetingId: recovery.sessionId,
+      phase: progress?.phase ?? 'queued',
+      percent,
+      segmentsDone: progress && progress.segmentsTotal > 0 ? progress.segmentsDone : null,
+      segmentsTotal: progress && progress.segmentsTotal > 0 ? progress.segmentsTotal : null,
+      chunkFiles: progress?.chunkFiles ?? 0,
+      updatedAt: progress?.updatedAt ?? null,
+    }
+    meetings.push({
+      ...row,
+      label: `Recovering unsaved capture${percent != null ? ` ${percent}%` : ''} · do not update/restart`,
+    })
+  }
+
   if (meetings.length === 0) {
-    return { active: false, percent: null, label: 'Idle', blocksRestart: false, meetings }
+    const label = retained.length > 0
+      ? `Idle · ${retained.length} retained batch${retained.length === 1 ? '' : 'es'}`
+      : 'Idle'
+    return { active: false, percent: null, label, blocksRestart: false, meetings, retained }
   }
 
   const withPercent = meetings.filter(m => m.percent != null)
@@ -217,5 +363,6 @@ export function getMeetingSyncSnapshot(
     label,
     blocksRestart: true,
     meetings,
+    retained,
   }
 }

package/server/lib/meeting-batch-transcribe.ts

@@ -9,7 +9,9 @@ import { transcribeHighQuality, type WhisperWord } from './whisper-local.js'
 import { isMetalBatchPreempted } from './whisper-metal-gate.js'
 import {
   clearMeetingBatchProgress,
+  clearMeetingBatchTerminal,
   writeMeetingBatchProgress,
+  writeMeetingBatchTerminal,
 } from './meeting-batch-progress.js'
 import type { IndexedTranscriptChunk } from '../routes/transcribe-stream.js'
 import {
@@ -165,7 +167,7 @@ function mapWordsToSpeakers(
   })
 }
 
-async function transcribeSegments(
+export async function transcribeSegments(
   audioDir: string,
   segments: BatchSegment[],
   entries: IndexedTranscriptChunk[],
@@ -237,6 +239,16 @@ async function transcribeSegments(
 
 let batchQueueTail: Promise<void> = Promise.resolve()
 
+/** Chain arbitrary HQ-decoder work onto the same serialization tail the batch
+ *  pipeline uses. Orphan recovery MUST go through this: transcribeSegments has
+ *  no internal queue, so calling it directly would run a second (or third)
+ *  16-thread large-v3 decoder in parallel with a live post-meeting batch. */
+export function enqueueSerializedHqWork<T>(work: () => Promise<T>): Promise<T> {
+  const job = batchQueueTail.then(work)
+  batchQueueTail = job.then(() => undefined, () => undefined)
+  return job
+}
+
 /** Serialize 16-thread HQ decoders across meetings on a public user's Mac. */
 export function runMeetingBatchPipeline(
   audioDir: string,
@@ -246,6 +258,8 @@ export function runMeetingBatchPipeline(
   // Lease immediately, including time spent behind another HQ decoder. Without
   // this, the two-hour cleanup could delete a queued meeting before it starts.
   refreshPendingLease(audioDir)
+  // A retry invalidates any prior terminal outcome — live signals must win.
+  clearMeetingBatchTerminal(audioDir)
   writeMeetingBatchProgress(audioDir, {
     phase: 'queued',
     segmentsDone: 0,
@@ -278,7 +292,12 @@ async function runMeetingBatchPipelineNow(
       return { transcriptionQuality: 'streaming' }
     }
     const segments = segmentTranscriptChunks(entries)
-    if (segments.length === 0) return { transcriptionQuality: 'streaming' }
+    if (segments.length === 0) {
+      // Terminal too: WAVs exist but nothing is transcribable. Without this,
+      // the dir re-creates the exact phantom-active state W2 removes.
+      writeMeetingBatchTerminal(audioDir, { outcome: 'failed', reason: 'no_segments' })
+      return { transcriptionQuality: 'streaming' }
+    }
 
     writeMeetingBatchProgress(audioDir, {
       phase: 'hq_polish',
@@ -302,12 +321,20 @@ async function runMeetingBatchPipelineNow(
         + `${qualityReport.streamingWordCount} live words, `
         + `${(qualityReport.duplicateWordRatio * 100).toFixed(1)}% duplicate`,
       )
+      // Terminal: the batch RAN and lost. WAVs stay for retry, but status must
+      // stop reporting active work (pre-6.19.0 this looked like 12h of
+      // "HQ polish · N chunks" with blocksRestart:true after the work ended).
+      writeMeetingBatchTerminal(audioDir, { outcome: 'rejected', reason: qualityReport.reason })
       return { transcriptionQuality: 'streaming', qualityReport }
     }
 
     return { transcriptionQuality: 'batch', batchTranscript, batchSegments, qualityReport }
   } catch (error) {
     console.error(`[meeting-batch] Pipeline failed: ${error instanceof Error ? error.message : String(error)}`)
+    writeMeetingBatchTerminal(audioDir, {
+      outcome: 'failed',
+      reason: error instanceof Error ? error.message.slice(0, 200) : String(error).slice(0, 200),
+    })
     return { transcriptionQuality: 'streaming' }
   }
 }

package/server/lib/query-job-runtime.ts

@@ -114,7 +114,7 @@ async function projectPublicConversationTerminal(
     request.globalMsgNum,
     request.attachmentRefs,
     request.messageEra,
-    request.model,
+    normalizeModelPreference(request.model),
   )
   reconcileExchangeByJobIdentity(
     request.sessionId,
@@ -124,7 +124,7 @@ async function projectPublicConversationTerminal(
     request.globalMsgNum,
     mergeMediaAttachmentRefs(outputAttachments, existingOutputAttachments),
     request.messageEra,
-    request.model,
+    normalizeModelPreference(request.model),
   )
   flushConversationToDisk()
 }

package/server/lib/transcribe-audio.ts

@@ -13,7 +13,6 @@ import {
   estimateAudioSeconds,
   OpenAIWhisperBudgetExhaustedError,
 } from './openai-whisper-budget.js'
-import { enhanceAudio } from './audio-enhance.js'
 import {
   stripInlineHallucinationsOneShot,
   isFullHallucination,
@@ -63,12 +62,6 @@ export class NoSpeechDetectedError extends Error {
 // ceiling (anything longer is a dictation, not a query — use meetings instead).
 const HQ_MAX_SECONDS = 60
 
-/** Short interactive clips use light enhance (highpass only). Override via env. */
-function hqEnhanceLightMaxSeconds(): number {
-  const value = Number.parseInt(process.env.COS_HQ_ENHANCE_LIGHT_MAX_SEC || '15', 10)
-  return Number.isFinite(value) && value >= 0 ? value : 15
-}
-
 function unavailableAfterLocalFailure(): TranscriptionUnavailableError | null {
   const fallback = getTranscriptionPolicySnapshot()
   if (fallback.openaiFallbackReady) return null
@@ -146,10 +139,16 @@ export function resolveTranscribeMode(raw: unknown): TranscribeMode {
 
 export async function transcribeAudioBuffer(
   audioBuffer: Buffer,
-  opts: { mode?: TranscribeMode; policy?: TranscriptionBackendPolicy } = {},
+  opts: {
+    mode?: TranscribeMode
+    policy?: TranscriptionBackendPolicy
+    /** When false, turbo/server failures do not move the shared meeting circuit breaker. */
+    affectsCircuit?: boolean
+  } = {},
 ): Promise<TranscribeAudioResult> {
   const requestedMode = opts.mode ?? 'hq'
   const policy = opts.policy ?? 'automatic'
+  const affectsCircuit = opts.affectsCircuit !== false
   const audioSeconds = estimateAudioSeconds(audioBuffer)
   const effectiveMode: TranscribeMode =
     requestedMode === 'hq' && audioSeconds > HQ_MAX_SECONDS ? 'fast' : requestedMode
@@ -166,14 +165,14 @@ export async function transcribeAudioBuffer(
 
   if (effectiveMode === 'hq') {
     try {
-      const lightMax = hqEnhanceLightMaxSeconds()
-      const enhanceProfile = audioSeconds < lightMax ? 'light' as const : 'full' as const
-      const enhanced = await enhanceAudio(audioBuffer, { profile: enhanceProfile })
-      const result = await transcribeHighQuality(enhanced)
+      // A0 (2026-07-30): ffmpeg enhance light (highpass=f=80) was measured dropping
+      // leading speech on compose ("device just for your awareness"). Meeting batch
+      // still enhances in meeting-batch-transcribe.ts — this path is prompt/interactive only.
+      const result = await transcribeHighQuality(audioBuffer, undefined, { priority: 'interactive' })
       text = result.text
       actualQuality = result.actualQuality
       if (result.actualQuality === 'hq') {
-        backend = enhanceProfile === 'light' ? 'hq-large-v3-light' : 'hq-large-v3'
+        backend = 'hq-large-v3'
       } else {
         backend = result.backend === 'whisper-cli' ? 'fast-cli-turbo' : 'fast-local-server'
         degradationReason = result.degradationReason ?? 'hq_unavailable'
@@ -182,7 +181,7 @@ export async function transcribeAudioBuffer(
       console.warn(`[transcribe] HQ path failed, falling back to fast: ${hqErr.message}`)
       degradationReason = 'hq_decode_failed'
       try {
-        const result = await transcribeLocal(audioBuffer)
+        const result = await transcribeLocal(audioBuffer, undefined, undefined, { affectsCircuit })
         text = result.text
         backend = `fast-local-${result.backend}`
         actualQuality = 'fast'
@@ -202,7 +201,7 @@ export async function transcribeAudioBuffer(
     }
   } else if (effectiveMode === 'fast') {
     try {
-      const result = await transcribeLocal(audioBuffer)
+      const result = await transcribeLocal(audioBuffer, undefined, undefined, { affectsCircuit })
       text = result.text
       backend = `fast-local-${result.backend}`
       actualQuality = 'fast'