@gotcos/glasses-server 6.27.12 → 6.27.13

package/CHANGELOG.md

@@ -1,5 +1,32 @@
 ## Unreleased
 
+## 6.27.13
+- **`POST /api/meeting/:sessionId/backfill-enrolment`** — train a profile from a voice
+  that was named BEFORE enrolment shipped. Those meetings have a correct transcript and
+  no profile, and re-running the rename cannot help: the voice is already a real name
+  there, so the placeholder guard correctly declines. The live case is Kirstyn Blum —
+  60 and 109 chunks across two meetings, 182 sidecar mentions, absent from a 77-profile
+  store.
+- The correction LEDGER already holds what enrolment needs: the original `from`, the
+  `to`, and the exact chunk indices written at apply time. This replays those rows
+  through the SAME `enrolNamedVoice` — raw-index mapping, refusal when unmappable,
+  coherence, the diversity cap and the `correction:<sessionId>` tag all apply
+  identically. No second implementation to drift.
+- **Named-source corrections are excluded, by the existing rule rather than a new one.**
+  `Ext -> Kirstyn` is training data; `Allison Wheeler -> Kirstyn` is a mis-attribution
+  fix, and training on it would put Allison's voice into Kirstyn's profile. Both rows
+  are reported; only the placeholder one attempts anything. Mutation-verified: dropping
+  the placeholder guard fails that test.
+- **Runs in-process, which is the point.** The voice store is owned by the running
+  server and rewritten wholesale, so an external process that enrols directly has its
+  work silently clobbered. Not hypothetical — an attempt on 2026-08-13 validated
+  cleanly, selected 20 samples, and left the store untouched at its Aug 7 mtime.
+- **Fails closed.** Without `confirm: true` it reports what it would enrol and writes
+  nothing. The preview runs every gate — a preview that skipped them would be a guess
+  about what the real call does — so `enrolNamedVoice` gained a `dryRun` flag. The
+  projection can land HIGHER than reality, because only `enrollEmbedding` can judge
+  near-duplicates against the live profile; that is documented on the flag.
+
 ## 6.27.12
 - **Naming an unidentified voice creates a real speaker profile — correctly this time.**
   Re-enables what 6.27.10 shipped broken and 6.27.11 disabled.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@gotcos/glasses-server",
-  "version": "6.27.12",
+  "version": "6.27.13",
   "description": "COS Glasses \u2014 self-hosted AI heads-up-display server for Even G2 smart glasses, powered by Claude Code, Codex, or Cursor Agent CLI",
   "type": "module",
   "bin": {

package/server/lib/meeting-relabel-enrolment.ts

@@ -169,6 +169,11 @@ export interface EnrolNamedVoiceInput {
   changed: number[]
   /** The parsed sidecar, for `chunks` + `chunkEntries` + `startTime`. */
   sidecar: Record<string, unknown>
+  /** Run every gate but write nothing. `enrolled` then counts what WOULD be enrolled;
+   *  the real call can land LOWER, because `enrollEmbedding`'s dedup gate rejects
+   *  near-duplicates and only it can judge that against the live profile. A preview
+   *  that skipped the gates would be a guess about what the real call does. */
+  dryRun?: boolean
 }
 
 /**
@@ -238,7 +243,11 @@ export function enrolNamedVoice(input: EnrolNamedVoiceInput): EnrolmentReport {
   const source = `correction:${sessionId}`
   let enrolled = 0
   try {
-    for (const embedding of selected) {
+    if (input.dryRun) {
+      // Projection, not a promise — see the dryRun docblock. Every gate above has
+      // already run, so this is what the real call will attempt.
+      enrolled = selected.length
+    } else for (const embedding of selected) {
       if (enrollEmbedding(to, embedding, source).success) enrolled += 1
     }
   } catch {

package/server/routes/meeting.ts

@@ -975,6 +975,96 @@ export function createMeetingRouter(deps: MeetingRouteDependencies = {}): Router
     })
   })
 
+  /**
+   * Replay a recorded correction's enrolment — the retroactive path.
+   *
+   * WHY. Enrolment fires inside `POST /relabel`, so a voice named BEFORE that shipped
+   * has a correct transcript and no profile. Kirstyn Blum is the live case: named
+   * across two meetings (60 and 109 chunks), 182 mentions in the sidecars, absent from
+   * a 77-profile store. Re-running the rename cannot help — she is already a real
+   * name there, so the placeholder guard correctly declines.
+   *
+   * The correction LEDGER already holds exactly what enrolment needs: the original
+   * `from`, the `to`, and the precise chunk indices, written at apply time.
+   *
+   * This runs IN-PROCESS on purpose. The voice store is owned by the running server,
+   * which holds it in memory and rewrites it wholesale; an external process that
+   * enrols directly has its work silently clobbered on the next persist. That is not
+   * hypothetical — an attempt on 2026-08-13 validated cleanly, selected 20 samples,
+   * and left the store untouched at its Aug 7 mtime.
+   *
+   * SAME GATES, no exceptions. It calls `enrolNamedVoice`, so raw-index mapping,
+   * refusal when unmappable, voice coherence, the diversity cap and the
+   * `correction:<sessionId>` tag all apply identically. Rows whose `from` is a real
+   * person are skipped by that function's own placeholder rule, which is what keeps a
+   * mis-attribution correction (Allison Wheeler -> Kirstyn) out of the training set.
+   *
+   * FAILS CLOSED. Without `confirm: true` it reports what it would enrol and writes
+   * nothing.
+   */
+  router.post('/meeting/:sessionId/backfill-enrolment', (req, res) => {
+    res.set('Cache-Control', 'private, no-store')
+    const sessionId = String(req.params.sessionId ?? '')
+    if (!/^[A-Za-z0-9:_-]{3,96}$/.test(sessionId)) {
+      res.status(400).json({ error: 'Invalid sessionId', reason: 'invalid_session_id' })
+      return
+    }
+    const speaker = typeof req.body?.speaker === 'string' ? req.body.speaker.trim() : ''
+    if (!speaker) {
+      res.status(400).json({ error: 'speaker is required', reason: 'invalid_label' })
+      return
+    }
+
+    const operations = cosOperationsMeetingsConfigured()
+      ? findCosOperationsMeetingBySessionId(sessionId)
+      : null
+    const saved = operations ? null : store.findBySessionId(sessionId)
+    if (!operations && !saved) {
+      res.status(404).json({ error: 'No saved meeting for this session', reason: 'meeting_not_found' })
+      return
+    }
+    const sidecarPath = operations?.sidecarPath ?? saved!.sidecarPath
+    let parsedSidecar: Record<string, unknown> | null = null
+    try {
+      const doc = JSON.parse(readFileSync(sidecarPath, 'utf-8')) as unknown
+      if (doc && typeof doc === 'object' && !Array.isArray(doc)) parsedSidecar = doc as Record<string, unknown>
+    } catch {
+      res.status(422).json({ error: 'Chunk sidecar is missing or unreadable', reason: 'sidecar_unreadable' })
+      return
+    }
+
+    // Only rows that ACTUALLY landed, and only those that named this speaker.
+    const rows = appliedCorrections(sessionId).filter(r => r.to === speaker && r.chunks.length > 0)
+    if (rows.length === 0) {
+      res.status(404).json({ error: `No applied correction named "${speaker}" in this meeting`, reason: 'no_correction' })
+      return
+    }
+
+    const confirm = req.body?.confirm === true
+    const reports = rows.map(row => ({
+      correctionId: row.id,
+      from: row.from,
+      chunks: row.chunks.length,
+      // Dry run still evaluates every gate — a preview that skips them would be a
+      // guess about what the real call is going to do.
+      report: enrolNamedVoice({
+        sessionId, from: row.from, to: speaker, changed: row.chunks, sidecar: parsedSidecar!, dryRun: !confirm,
+      }),
+    }))
+
+    res.json({
+      ok: true,
+      speaker,
+      confirmed: confirm,
+      corrections: reports,
+      totals: {
+        eligible: reports.filter(r => r.report.attempted > 0).length,
+        skippedNamedSource: reports.filter(r => r.report.attempted === 0 && !r.report.skipped).length,
+        enrolled: reports.reduce((n, r) => n + r.report.enrolled, 0),
+      },
+    })
+  })
+
   router.post('/meeting/:sessionId/relabel', (req, res) => {
     res.set('Cache-Control', 'private, no-store')
     const sessionId = String(req.params.sessionId ?? '')