@gotcos/glasses-server 6.93.0 → 6.94.0

package/CHANGELOG.md

@@ -1,3 +1,18 @@
+## 6.94.0 - Saved Mac recordings are filed into the COS meeting library
+
+2026-10-27. Pairs with COS operations `sync_meetings.py` on branch `claude/mac-library-cos` (the `--mac-import-file` import and `--capabilities`). Works with COS Control 0.5.351; Control needs no change.
+
+- **Why:** a saved Mac system-audio recording never reached `operations/`. `routes/meeting.ts` skipped the hand-off for every Mac capture (the `MAC_CAPTURE_ID` checks added with Mac capture in 6.73.x), and `sync_meetings.py` only recognised files whose Source is G2 Glasses. Mac meetings were missing from vector search, LightRAG and task extraction, and kept the save-time domain, which is `personal` whenever the profile defines no domain keywords. On 2026-10-27 the glasses copy of the Quilt QBR was filed under quilt while the Mac copy of the same meeting stayed a personal standalone recording.
+- **What:** after a Mac recording finishes (its standalone summary first, unchanged), the server runs `sync_meetings.py --mac-import-file <recording> --quiet` with the same retry ladder and result line as the G2 hand-off. The pipeline stages it under `personal/meetings/YYYY-MM/`, runs the same summary, title and domain step a G2 recording gets, and moves it to the domain the model picks, titled with a `(Mac)` suffix. The filed copy keeps `Source: Mac System Audio`, `Capture source: mac_system_audio` and its `.g2-chunks.json` sidecar with `sourceType`, so `GET /api/meetings` shows one row for it (the operations row, keyed by the same `mac_` session) and Control still treats it as a Mac recording. The same path runs after orphan recovery of a Mac capture.
+- **Only when the pipeline says it can:** the server reads `sync_meetings.py --capabilities` and files Mac recordings only when it reports both `mac_import: 1` and `mac_twins: 2` or later, cached per script version. An older `sync_meetings.py` has no `--capabilities`, is never spawned for it, and the recording stays standalone exactly as in 6.93.0. A script with the import but an older twin rule (`mac_twins: 1` knew only glasses twins) is treated the same way.
+- **One meeting, recorded twice:** when the glasses or Fireflies (or Granola) also recorded the meeting, the pipeline files the Mac copy as a twin (`<!-- twin-of: <file> -->` in its markdown): it is searchable, but never queued for LightRAG, never scanned for task completions and never turned into Work. Twin means both the existing G2 time gates (60 minute window, overlap at least 0.50, duration ratio at least 0.50; a cloud scribe uses its own Date and Duration) and text-anchor agreement with the merge engine's pairing evidence (`auto_merge` tier: at least 30 shared phrases at a consistent offset and three times the next different meeting, glasses or cloud). A cloud scribe needs its word-timed Fireflies sentences to be scored; Granola scribes carry none. A glasses copy and a cloud scribe of the same call are one meeting, and the marker names the cloud scribe. Copies of one recording (a session filed twice, a capture and the scribe it was blended into) count once. The marker also carries the recording's identity (`g2:<sessionId>` or `fireflies:<id>`), so a retitled or moved target is followed. A twin is released only when its recording is absent on two checks at least 24 hours apart; a file that exists but cannot be read counts as unknown, never as gone, and a marker with no identity is never released. The marker names a cloud scribe only when that scribe itself carries the shared phrases. Overlapping time with different words is not a twin and is processed fully. Either recording may arrive first: a Mac recording with no twin yet is held from those consumers for 12 hours after it ends (`COS_MAC_TWIN_HOLD_HOURS`), and filing the glasses copy or saving the cloud scribe marks it. `mac_twins.py release <file>` re-admits a twin, idempotently and safely across a crash. 13 of the 17 Mac recordings saved in October are twins.
+- **Never a G2 file:** a Mac or iPhone recording is refused by every G2 path. `patchRecordingForG2Pipeline` refuses to relabel one as G2 Glasses, `stageRecordingIntoOperations` refuses a Mac or iPhone sidecar, and `handoffMeetingToOperations` refuses one before spawning anything. On the COS side the G2 import, the G2 sync, the retroactive blend, `g2_blend_backfill.py` and `meeting_dedup_cleanup.py` skip any sidecar whose source is Mac or iPhone, including one that carries speaker names. The merge engine already excluded Mac captures, and the merge trigger still never fires for one.
+- **Failure:** filing starts only after the capture's own finalization (or orphan recovery) is complete and its job or lease released, so it holds no maintenance lease (a restart drain never waits on it) and a restart mid-filing never re-runs the standalone summary. A filing that fails is logged and never fails the capture. If the pipeline's model step fails, the staged copy stays held (out of LightRAG and Work, untitled titles never settle into Work) and `sync_meetings.py` exits 2 so the server retries; the hourly sync then retries it at most 3 times (2 per run, `COS_MAC_IMPORT_RETRY=0` turns that off), and `mac_library_backfill.py` files it on demand. A hand-off that never reached the pipeline (three attempts that all wait out the sync lock, or a restart before staging) is caught by the hourly sync, which files any finished Mac capture of the last two days the library does not hold, inside the same per-run budget.
+- **Idempotent:** a re-save of a saved capture answers its receipt and files nothing; the pipeline finds a capture already in the library by session id, whatever it was renamed or moved to, and refuses to overwrite a file that belongs to another capture.
+- **Existing recordings:** `operations/scripts/mac_library_backfill.py` lists every Mac recording in `~/.cos-glasses/data/recordings` with its staging destination and a keyword domain guess (dry run is the default), and `--apply` files each one through the same `--mac-import-file` command.
+- **Unchanged:** a G2 save files byte for byte as in 6.93.0 (pinned by `server/routes/g2-filing-golden.test.ts` against a fixture recorded on 6.93.0, for both the locked import and an older sync script). The local Mac recording is written exactly as before. Two recordings of one meeting (glasses and Mac) are filed as two meetings; merging them is later work.
+- **Publish order:** merge the COS `sync_meetings.py` change first, then publish this server. Either alone is safe: this server against the older script leaves Mac recordings standalone, and the new script does nothing until a server or the backfill asks.
+
 ## 6.93.0 - Live Mac speaker numbering on by default, assign a Mac voice to an existing voice profile, and iPhone microphone meetings (opt-in), plus the unpublished 6.92.1
 
 2026-10-26. Pairs with COS Control 0.5.351. Includes everything in 6.92.1 (never published on its own): the per-chunk anonymous anchors (`COS_MAC_LIVE_VOICES=anchors`), final-pass crosswalk of live numbers, the body-parser floor, and the isolated continuous-speaker protocol modules (still unwired).

package/README.md

@@ -712,6 +712,18 @@ This is the microphone only, not iOS system audio, so it cannot record Zoom,
 YouTube or call audio playing on the phone. COS Control must be 0.5.351 or newer
 before this is switched on. Protocol: `docs/iphone-microphone-protocol.md`.
 
+### Mac recordings in the COS meeting library (6.94.0)
+
+With COS operations configured (`COS_SCRIPTS_DIR`), a saved Mac recording is filed
+into `operations/{domain}/meetings/YYYY-MM/` after its standalone summary, through
+`sync_meetings.py --mac-import-file`: the same summary, title and domain step as a
+glasses meeting, titled `... (Mac)`, never matched or blended into a Fireflies or
+Granola meeting. The server checks `sync_meetings.py --capabilities` first (it needs
+`mac_import` and `mac_twins` 2); an older script leaves Mac recordings standalone. A Mac
+recording of a meeting the glasses or Fireflies also recorded is filed as a twin:
+searchable, but kept out of LightRAG, task scans and Work (`operations/scripts/mac_twins.py`). Recordings saved before 6.94.0 are filed with
+`operations/scripts/mac_library_backfill.py` (dry run by default, `--apply` to file).
+
 ## Speech-to-text settings (6.72.0)
 
 One settings object chooses which engine previews live meeting speech, which

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@gotcos/glasses-server",
-  "version": "6.93.0",
+  "version": "6.94.0",
   "description": "COS Glasses: self-hosted AI heads-up-display server for Even G2 smart glasses, powered by Claude Code, Codex, Cursor Agent CLI, or local Ollama",
   "type": "module",
   "bin": {

package/server/lib/g2-enrichment-runner.ts

@@ -36,6 +36,8 @@ export interface G2EnrichmentOptions {
   onAttempt?: (message: string) => void
   claimOnly?: boolean
   importLocal?: boolean
+  /** 6.94.0: file a saved Mac recording (`--mac-import-file`). Never combined with claimOnly. */
+  macImport?: boolean
 }
 
 export interface G2EnrichmentDependencies {
@@ -79,7 +81,11 @@ export function buildExactG2SyncArgs(
   meetingFile: string,
   claimOnly = false,
   importLocal = false,
+  macImport = false,
 ): string[] {
+  // A Mac recording has its own import mode in sync_meetings.py: it never runs
+  // the G2 paths, so it never takes --g2-only, --g2-file or --g2-claim-only.
+  if (macImport) return [syncScript, '--mac-import-file', meetingFile, '--quiet']
   return [
     syncScript,
     '--g2-only',
@@ -109,6 +115,7 @@ export async function spawnG2SyncAttempt(options: G2EnrichmentOptions): Promise<
         options.meetingFile,
         options.claimOnly,
         options.importLocal,
+        options.macImport,
       ),
       {
         cwd: options.scriptsDir,

package/server/lib/g2-ops-handoff.ts

@@ -10,7 +10,8 @@
 //      lets sync_meetings reclassify).
 //   3. Run sync_meetings.py --g2-only --g2-file with the private-app retry helper.
 
-import { existsSync, mkdirSync, readFileSync } from 'node:fs'
+import { execFile } from 'node:child_process'
+import { existsSync, mkdirSync, readFileSync, statSync } from 'node:fs'
 import { basename, dirname, join, resolve } from 'node:path'
 import { durableAtomicWriteFileSync } from './atomic-fs.js'
 import { resolveCosOperationsDir } from './cos-operations-meetings.js'
@@ -77,10 +78,38 @@ export interface G2StageOptions {
   revision?: number
 }
 
+/** Sources that share the `.g2-chunks.json` sidecar shape but are not G2 glasses audio. */
+const NON_G2_SOURCE_TYPES = new Set(['mac_system_audio', 'iphone_microphone'])
+const NON_G2_HEADER = /\|\s*\*\*(?:Source\*\*\s*\|\s*(?:Mac System Audio|iPhone Microphone)|Capture source\*\*\s*\|\s*(?:mac_system_audio|iphone_microphone))\s*\|/i
+
+function sidecarSourceType(sidecar: Record<string, unknown> | null): string | null {
+  if (!sidecar) return null
+  if (typeof sidecar.sourceType === 'string') return sidecar.sourceType
+  const capture = sidecar.captureSource
+  if (capture && typeof capture === 'object' && typeof (capture as Record<string, unknown>).sourceType === 'string') {
+    return (capture as Record<string, unknown>).sourceType as string
+  }
+  return null
+}
+
+/**
+ * A Mac or iPhone capture, read from its markdown header or its sidecar. Neither is G2 audio,
+ * so neither may be relabelled "G2 Glasses" or handed to the G2 import, where sync_meetings
+ * would make it a candidate to blend into a Fireflies or Granola meeting.
+ */
+export function isNonG2CaptureRecording(markdown: string, sidecar: Record<string, unknown> | null = null): boolean {
+  if (NON_G2_HEADER.test(markdown)) return true
+  const sourceType = sidecarSourceType(sidecar)
+  return sourceType !== null && NON_G2_SOURCE_TYPES.has(sourceType)
+}
+
 export function patchRecordingForG2Pipeline(
   markdown: string,
   options: G2StageOptions = {},
 ): string {
+  if (isNonG2CaptureRecording(markdown)) {
+    throw new Error('Refusing to relabel a Mac or iPhone recording as G2 Glasses')
+  }
   let text = markdown.replace(/\r\n?/g, '\n')
   if (!/\|\s*\*\*Source\*\*\s*\|\s*G2 Glasses\s*\|/i.test(text) && !text.includes('| G2 Glasses')) {
     text = text.replace(
@@ -115,6 +144,11 @@ export function patchRecordingForG2Pipeline(
   return text
 }
 
+/** A missing or unreadable file reads as empty: the guard only refuses on positive evidence. */
+function readTextOrEmpty(path: string): string {
+  try { return readFileSync(path, 'utf8') } catch { return '' }
+}
+
 function parseSidecar(path: string): Record<string, unknown> | null {
   if (!existsSync(path)) return null
   try {
@@ -199,10 +233,13 @@ export function stageRecordingIntoOperations(
     return null
   }
 
+  const sourceSidecar = parseSidecar(localMeetingPath.replace(/\.md$/, '.g2-chunks.json'))
+  if (isNonG2CaptureRecording(readFileSync(localMeetingPath, 'utf8'), sourceSidecar)) {
+    throw new Error('Refusing to stage a Mac or iPhone recording through the G2 import')
+  }
   const destDir = join(operationsDir, 'personal', 'meetings', month)
   mkdirSync(destDir, { recursive: true })
   const destPath = join(destDir, basename(localMeetingPath))
-  const sourceSidecar = parseSidecar(localMeetingPath.replace(/\.md$/, '.g2-chunks.json'))
   const destinationSidecar = parseSidecar(destPath.replace(/\.md$/, '.g2-chunks.json'))
   const keepMarkdown = g2Revision(destinationSidecar?.correctionRevision) > g2Revision(sourceSidecar?.correctionRevision)
   if (keepMarkdown && !existsSync(destPath)) throw new Error('Corrected operations markdown missing; refusing stale import')
@@ -241,6 +278,10 @@ async function runOperationsSync(localMeetingPath: string, claimOnly: boolean):
     console.log('[meeting/save] Standalone mode — skipping G2 sync pipeline')
     return
   }
+  // 6.94.0: a Mac or iPhone capture never takes the G2 import, whatever the caller asked.
+  if (isNonG2CaptureRecording(readTextOrEmpty(localMeetingPath), parseSidecar(localMeetingPath.replace(/\.md$/, '.g2-chunks.json')))) {
+    throw new Error('Refusing a Mac or iPhone recording on the G2 import; it has its own import')
+  }
   if (!PYTHON_BIN) throw new Error('COS operations configured but Python bridge is unavailable')
   if (!existsSync(PYTHON_BIN)) {
     throw new Error(`COS python missing at ${PYTHON_BIN}`)
@@ -331,3 +372,164 @@ export async function handoffMeetingToOperations(localMeetingPath: string): Prom
   earlySyncRuntime.lastError = null
   earlySyncRuntime.lastAt = new Date().toISOString()
 }
+
+// ── 6.94.0: Mac recordings into the COS meeting library ─────────────────────
+//
+// A saved Mac system-audio recording is filed through the same pipeline as a G2 one
+// (sync_meetings.py stages it, runs the LLM summary/title/domain step, renames and moves
+// it), but through its own import, `--mac-import-file`, which never takes part in G2 to
+// Fireflies/Granola matching. The server uses it only when the installed sync_meetings.py
+// says it can (`--capabilities`); an older script leaves the recording standalone, exactly
+// as before 6.94.0, and is never given a Mac file on the G2 import.
+
+export interface SyncCapabilities {
+  macImport: boolean
+  /** Why Mac filing is unavailable; null when it is available. */
+  reason: string | null
+}
+
+export interface CapabilityProbeResult {
+  code: number | null
+  stdout: string
+}
+
+export type CapabilityProbe = (pythonBin: string, syncScript: string, cwd: string) => Promise<CapabilityProbeResult>
+
+const CAPABILITY_PROBE_TIMEOUT_MS = 30_000
+/** sync_meetings.py `mac_twins` version the server needs: 2 = twins of G2 recordings AND cloud scribes. */
+export const MAC_TWINS_REQUIRED = 2
+const capabilityCache = new Map<string, SyncCapabilities>()
+
+function spawnCapabilityProbe(pythonBin: string, syncScript: string, cwd: string): Promise<CapabilityProbeResult> {
+  return new Promise(resolvePromise => {
+    execFile(
+      pythonBin,
+      [syncScript, '--capabilities'],
+      { cwd, timeout: CAPABILITY_PROBE_TIMEOUT_MS, maxBuffer: 64 * 1024, env: { ...process.env, PYTHONUNBUFFERED: '1' } },
+      (error, stdout) => {
+        const code = error ? (typeof (error as NodeJS.ErrnoException & { code?: unknown }).code === 'number' ? (error as unknown as { code: number }).code : null) : 0
+        resolvePromise({ code, stdout: String(stdout ?? '') })
+      },
+    )
+  })
+}
+
+/** Test seam: forget probed capabilities. */
+export function resetSyncCapabilitiesCache(): void {
+  capabilityCache.clear()
+}
+
+/**
+ * What the installed sync_meetings.py can do, read from `--capabilities` rather than guessed.
+ * Mac filing needs `mac_import: 1` and `mac_twins: 2` or later.
+ *
+ * Cached per python + script + mtime + size, so an upgraded script is probed again. A script
+ * whose text never mentions `--capabilities` is an older one: it would take the sync lock
+ * before rejecting the flag, so it is never spawned and reads as "no Mac import". A failed or
+ * unreadable probe is not cached, so a transient failure is retried on the next recording.
+ */
+export async function readSyncCapabilities(
+  pythonBin: string,
+  syncScript: string,
+  probe: CapabilityProbe = spawnCapabilityProbe,
+): Promise<SyncCapabilities> {
+  let key: string
+  let text: string
+  try {
+    const stat = statSync(syncScript)
+    key = `${pythonBin}\0${syncScript}\0${stat.mtimeMs}\0${stat.size}`
+    text = readFileSync(syncScript, 'utf8')
+  } catch {
+    return { macImport: false, reason: 'sync_script_missing' }
+  }
+  const cached = capabilityCache.get(key)
+  if (cached) return cached
+  if (!text.includes('--capabilities')) {
+    const result = { macImport: false, reason: 'sync_script_upgrade_required' }
+    capabilityCache.set(key, result)
+    return result
+  }
+  const probed = await probe(pythonBin, syncScript, dirname(syncScript))
+  if (probed.code !== 0) return { macImport: false, reason: 'capability_probe_failed' }
+  const line = probed.stdout.trim().split(/\r?\n/).filter(Boolean).pop() ?? ''
+  let parsed: unknown
+  try { parsed = JSON.parse(line) } catch { return { macImport: false, reason: 'capability_probe_unreadable' } }
+  // Both: the import, AND the twin rule (version 2: G2 recordings and Fireflies/Granola scribes)
+  // that keeps a Mac copy of an already-recorded meeting out of LightRAG and Work. A script with
+  // the import but an older twin rule would file a Mac + Fireflies meeting twice.
+  const caps = !!parsed && typeof parsed === 'object' ? parsed as Record<string, unknown> : {}
+  const macImport = caps.mac_import === 1 && typeof caps.mac_twins === 'number' && caps.mac_twins >= MAC_TWINS_REQUIRED
+  const result = { macImport, reason: macImport ? null : 'sync_script_upgrade_required' }
+  capabilityCache.set(key, result)
+  return result
+}
+
+export type MacLibraryFiling =
+  | { outcome: 'filed'; path: string; status: string }
+  | { outcome: 'standalone'; reason: string }
+
+export interface MacLibraryDependencies {
+  probe?: CapabilityProbe
+  runEnrichment?: typeof runG2EnrichmentWithRetry
+}
+
+/** True only for a Mac capture: the sidecar says mac_system_audio AND the header says Mac System Audio. */
+export function isMacSystemAudioRecording(markdown: string, sidecar: Record<string, unknown> | null): boolean {
+  return sidecarSourceType(sidecar) === 'mac_system_audio'
+    && /\|\s*\*\*Source\*\*\s*\|\s*Mac System Audio\s*\|/i.test(markdown)
+}
+
+/**
+ * File one saved Mac recording into the COS meeting library, or say why it stays standalone.
+ *
+ * Reads the operations env live (like cosOpsPipelineConfigured), so a Control-updated env is
+ * seen. Throws when the pipeline ran and failed; returns `standalone` when it never could run.
+ */
+export async function fileMacRecordingInLibrary(
+  localMeetingPath: string,
+  deps: MacLibraryDependencies = {},
+): Promise<MacLibraryFiling> {
+  const raw = process.env.COS_SCRIPTS_DIR?.trim()
+  if (!raw) return { outcome: 'standalone', reason: 'operations_not_configured' }
+  const scriptsDir = resolve(raw)
+  const pythonBin = resolve(scriptsDir, 'venv/bin/python3')
+  const syncScript = join(scriptsDir, 'sync_meetings.py')
+  if (!existsSync(pythonBin)) return { outcome: 'standalone', reason: 'python_unavailable' }
+  if (!existsSync(syncScript)) return { outcome: 'standalone', reason: 'sync_script_missing' }
+
+  const markdown = readFileSync(localMeetingPath, 'utf8')
+  const sidecar = parseSidecar(localMeetingPath.replace(/\.md$/, '.g2-chunks.json'))
+  if (!isMacSystemAudioRecording(markdown, sidecar)) {
+    throw new Error(`Not a Mac system-audio recording: ${basename(localMeetingPath)}`)
+  }
+
+  const capabilities = await readSyncCapabilities(pythonBin, syncScript, deps.probe)
+  if (!capabilities.macImport) return { outcome: 'standalone', reason: capabilities.reason ?? 'sync_script_upgrade_required' }
+
+  const spawnPath = process.env.PATH?.includes('/opt/homebrew/bin')
+    ? process.env.PATH
+    : `/opt/homebrew/bin:${process.env.PATH || ''}`
+  const enrichment = await (deps.runEnrichment ?? runG2EnrichmentWithRetry)({
+    pythonBin,
+    syncScript,
+    scriptsDir,
+    meetingFile: localMeetingPath,
+    env: {
+      ...process.env,
+      PYTHONUNBUFFERED: '1',
+      PATH: spawnPath,
+      COS_G2_IMPORT_ROOT: dirname(dirname(localMeetingPath)),
+      COS_SERVER_INSTANCE_ID: getServerInstanceId() ?? '',
+    },
+    importLocal: true,
+    macImport: true,
+    onAttempt: message => console.log(`[meeting/save] Mac library filing: ${message}`),
+  })
+  if (!enrichment.ok || !enrichment.outcome) {
+    throw new Error(
+      `Mac library filing failed after ${enrichment.attempts} attempt(s): `
+      + `${enrichment.error ?? 'unknown exact-file sync failure'}`,
+    )
+  }
+  return { outcome: 'filed', path: enrichment.outcome.path, status: enrichment.outcome.status }
+}

package/server/routes/__fixtures__/g2-filing-golden-6.93.0.json

@@ -0,0 +1,62 @@
+{
+  "locked": {
+    "status": 200,
+    "response": {
+      "receiptVersion": 1,
+      "serverInstanceId": "<ID>",
+      "saved": true,
+      "filepath": "recordings/2026-10/2026-10-27_G2_Recording_2026-10-27_1001_0dd775ff.md",
+      "filename": "2026-10-27_G2_Recording_2026-10-27_1001_0dd775ff.md",
+      "durationMin": 0,
+      "domain": "personal",
+      "transcriptionQuality": "streaming",
+      "transferIntegrity": {
+        "completeness": 100,
+        "received": 3,
+        "expected": 3,
+        "missingChunks": 0,
+        "missingIndices": []
+      }
+    },
+    "recordings": {
+      "2026-10/2026-10-27_G2_Recording_2026-10-27_1001_0dd775ff.g2-chunks.json": "{\n  \"schemaVersion\": 2,\n  \"sessionId\": \"meeting_1793113298813_d0bm6p\",\n  \"startTime\": 1793113298813,\n  \"durationMs\": 20000,\n  \"domain\": \"personal\",\n  \"title\": \"G2 Recording 2026-10-27 1001\",\n  \"canonicalProvider\": \"server-whisper\",\n  \"providers\": [\n    \"server-whisper\"\n  ],\n  \"providerCandidates\": {},\n  \"speakers\": [\n    \"Jeremy Sokolic\"\n  ],\n  \"chunks\": [\n    {\n      \"text\": \"ARR crossed one hundred million, line 0.\",\n      \"speaker\": \"Jeremy Sokolic\",\n      \"elapsed\": 0,\n      \"similarity\": 0.91\n    },\n    {\n      \"text\": \"ARR crossed one hundred million, line 1.\",\n      \"speaker\": \"Jeremy Sokolic\",\n      \"elapsed\": 10000,\n      \"similarity\": 0.91\n    },\n    {\n      \"text\": \"ARR crossed one hundred million, line 2.\",\n      \"speaker\": \"Jeremy Sokolic\",\n      \"elapsed\": 20000,\n      \"similarity\": 0.91\n    }\n  ],\n  \"chunkEntries\": [\n    {\n      \"chunkIndex\": 0,\n      \"chunk\": {\n        \"text\": \"ARR crossed one hundred million, line 0.\",\n        \"speaker\": \"Jeremy Sokolic\",\n        \"elapsed\": 0,\n        \"similarity\": 0.91\n      }\n    },\n    {\n      \"chunkIndex\": 1,\n      \"chunk\": {\n        \"text\": \"ARR crossed one hundred million, line 1.\",\n        \"speaker\": \"Jeremy Sokolic\",\n        \"elapsed\": 10000,\n        \"similarity\": 0.91\n      }\n    },\n    {\n      \"chunkIndex\": 2,\n      \"chunk\": {\n        \"text\": \"ARR crossed one hundred million, line 2.\",\n        \"speaker\": \"Jeremy Sokolic\",\n        \"elapsed\": 20000,\n        \"similarity\": 0.91\n      }\n    }\n  ],\n  \"transferIntegrity\": {\n    \"received\": 3,\n    \"stored\": 3,\n    \"maxIndex\": 2,\n    \"expected\": 3,\n    \"missingIndices\": [],\n    \"completeness\": 1\n  },\n  \"transcriptionQuality\": \"streaming\",\n  \"batchApplied\": false,\n  \"streamingWordCount\": 27,\n  \"finalizationState\": \"complete\",\n  \"claimPending\": false,\n  \"finalizationUpdatedAt\": \"<ISO>\"\n}\n",
+      "2026-10/2026-10-27_G2_Recording_2026-10-27_1001_0dd775ff.md": "# G2 Recording 2026-10-27 1001\n\n| Field | Value |\n|-------|-------|\n| **Date** | 2026-10-27 |\n| **Time** | 10:01 AM |\n| **Duration** | 0 minutes |\n| **Source** | G2 Glasses |\n| **Domain** | personal |\n| **Transfer integrity** | 100% |\n| **Transcription quality** | streaming |\n\n## Summary\n\n<!-- g2-needs-domain-review -->\n\n*G2 recording — summary pending pipeline processing.*\n\n## Transcript\n\n[Jeremy Sokolic]: ARR crossed one hundred million, line 0.\n[Jeremy Sokolic]: ARR crossed one hundred million, line 1.\n[Jeremy Sokolic]: ARR crossed one hundred million, line 2.\n"
+    },
+    "operations": {
+      "quilt/meetings/2026-10/Filed_(G2).md": "# G2 Recording 2026-10-27 1001\n\n| Field | Value |\n|-------|-------|\n| **Date** | 2026-10-27 |\n| **Time** | 10:01 AM |\n| **Duration** | 0 minutes |\n| **Source** | G2 Glasses |\n| **Domain** | personal |\n| **Transfer integrity** | 100% |\n| **Transcription quality** | streaming |\n\n## Summary\n\n<!-- g2-needs-domain-review -->\n\n*G2 recording — summary pending pipeline processing.*\n\n## Transcript\n\n[Jeremy Sokolic]: ARR crossed one hundred million, line 0.\n[Jeremy Sokolic]: ARR crossed one hundred million, line 1.\n[Jeremy Sokolic]: ARR crossed one hundred million, line 2.\n",
+      "scripts/invocations.jsonl": "{\"args\":[\"--g2-only\",\"--g2-import-file\",\"<ROOT>/data/recordings/2026-10/2026-10-27_G2_Recording_2026-10-27_1001_0dd775ff.md\",\"--quiet\"],\"importRoot\":\"<ROOT>/data/recordings\",\"unbuffered\":\"1\"}\n",
+      "scripts/sync_meetings.py": "\nconst fs = require('fs'), path = require('path'); const args = process.argv.slice(2)\nfs.appendFileSync(path.join(__dirname, 'invocations.jsonl'), JSON.stringify({ args, importRoot: process.env.COS_G2_IMPORT_ROOT || null, unbuffered: process.env.PYTHONUNBUFFERED || null }) + '\\n')\n// supports --g2-import-file\nconst at = args.indexOf(\"--g2-import-file\"); const target = args[at + 1]\nconst dest = path.join(__dirname, '..', 'quilt', 'meetings', '2026-10', 'Filed_(G2).md')\nfs.mkdirSync(path.dirname(dest), { recursive: true }); fs.writeFileSync(dest, fs.readFileSync(target))\nprocess.stdout.write('COS_G2_RESULT=' + JSON.stringify({ status: 'enriched', path: dest, title: 'Filed (G2)' }) + '\\n')\n"
+    }
+  },
+  "older": {
+    "status": 200,
+    "response": {
+      "receiptVersion": 1,
+      "serverInstanceId": "<ID>",
+      "saved": true,
+      "filepath": "recordings/2026-10/2026-10-27_G2_Recording_2026-10-27_1001_0dd775ff.md",
+      "filename": "2026-10-27_G2_Recording_2026-10-27_1001_0dd775ff.md",
+      "durationMin": 0,
+      "domain": "personal",
+      "transcriptionQuality": "streaming",
+      "transferIntegrity": {
+        "completeness": 100,
+        "received": 3,
+        "expected": 3,
+        "missingChunks": 0,
+        "missingIndices": []
+      }
+    },
+    "recordings": {
+      "2026-10/2026-10-27_G2_Recording_2026-10-27_1001_0dd775ff.g2-chunks.json": "{\n  \"schemaVersion\": 2,\n  \"sessionId\": \"meeting_1793113298813_d0bm6p\",\n  \"startTime\": 1793113298813,\n  \"durationMs\": 20000,\n  \"domain\": \"personal\",\n  \"title\": \"G2 Recording 2026-10-27 1001\",\n  \"canonicalProvider\": \"server-whisper\",\n  \"providers\": [\n    \"server-whisper\"\n  ],\n  \"providerCandidates\": {},\n  \"speakers\": [\n    \"Jeremy Sokolic\"\n  ],\n  \"chunks\": [\n    {\n      \"text\": \"ARR crossed one hundred million, line 0.\",\n      \"speaker\": \"Jeremy Sokolic\",\n      \"elapsed\": 0,\n      \"similarity\": 0.91\n    },\n    {\n      \"text\": \"ARR crossed one hundred million, line 1.\",\n      \"speaker\": \"Jeremy Sokolic\",\n      \"elapsed\": 10000,\n      \"similarity\": 0.91\n    },\n    {\n      \"text\": \"ARR crossed one hundred million, line 2.\",\n      \"speaker\": \"Jeremy Sokolic\",\n      \"elapsed\": 20000,\n      \"similarity\": 0.91\n    }\n  ],\n  \"chunkEntries\": [\n    {\n      \"chunkIndex\": 0,\n      \"chunk\": {\n        \"text\": \"ARR crossed one hundred million, line 0.\",\n        \"speaker\": \"Jeremy Sokolic\",\n        \"elapsed\": 0,\n        \"similarity\": 0.91\n      }\n    },\n    {\n      \"chunkIndex\": 1,\n      \"chunk\": {\n        \"text\": \"ARR crossed one hundred million, line 1.\",\n        \"speaker\": \"Jeremy Sokolic\",\n        \"elapsed\": 10000,\n        \"similarity\": 0.91\n      }\n    },\n    {\n      \"chunkIndex\": 2,\n      \"chunk\": {\n        \"text\": \"ARR crossed one hundred million, line 2.\",\n        \"speaker\": \"Jeremy Sokolic\",\n        \"elapsed\": 20000,\n        \"similarity\": 0.91\n      }\n    }\n  ],\n  \"transferIntegrity\": {\n    \"received\": 3,\n    \"stored\": 3,\n    \"maxIndex\": 2,\n    \"expected\": 3,\n    \"missingIndices\": [],\n    \"completeness\": 1\n  },\n  \"transcriptionQuality\": \"streaming\",\n  \"batchApplied\": false,\n  \"streamingWordCount\": 27,\n  \"finalizationState\": \"complete\",\n  \"claimPending\": false,\n  \"finalizationUpdatedAt\": \"<ISO>\"\n}\n",
+      "2026-10/2026-10-27_G2_Recording_2026-10-27_1001_0dd775ff.md": "# G2 Recording 2026-10-27 1001\n\n| Field | Value |\n|-------|-------|\n| **Date** | 2026-10-27 |\n| **Time** | 10:01 AM |\n| **Duration** | 0 minutes |\n| **Source** | G2 Glasses |\n| **Domain** | personal |\n| **Transfer integrity** | 100% |\n| **Transcription quality** | streaming |\n\n## Summary\n\n<!-- g2-needs-domain-review -->\n\n*G2 recording — summary pending pipeline processing.*\n\n## Transcript\n\n[Jeremy Sokolic]: ARR crossed one hundred million, line 0.\n[Jeremy Sokolic]: ARR crossed one hundred million, line 1.\n[Jeremy Sokolic]: ARR crossed one hundred million, line 2.\n"
+    },
+    "operations": {
+      "personal/meetings/2026-10/2026-10-27_G2_Recording_2026-10-27_1001_0dd775ff.g2-chunks.json": "{\n  \"schemaVersion\": 2,\n  \"sessionId\": \"meeting_1793113298813_d0bm6p\",\n  \"startTime\": 1793113298813,\n  \"durationMs\": 20000,\n  \"domain\": \"personal\",\n  \"title\": \"G2 Recording 2026-10-27 1001\",\n  \"canonicalProvider\": \"server-whisper\",\n  \"providers\": [\n    \"server-whisper\"\n  ],\n  \"providerCandidates\": {},\n  \"speakers\": [\n    \"Jeremy Sokolic\"\n  ],\n  \"chunks\": [\n    {\n      \"text\": \"ARR crossed one hundred million, line 0.\",\n      \"speaker\": \"Jeremy Sokolic\",\n      \"elapsed\": 0,\n      \"similarity\": 0.91\n    },\n    {\n      \"text\": \"ARR crossed one hundred million, line 1.\",\n      \"speaker\": \"Jeremy Sokolic\",\n      \"elapsed\": 10000,\n      \"similarity\": 0.91\n    },\n    {\n      \"text\": \"ARR crossed one hundred million, line 2.\",\n      \"speaker\": \"Jeremy Sokolic\",\n      \"elapsed\": 20000,\n      \"similarity\": 0.91\n    }\n  ],\n  \"chunkEntries\": [\n    {\n      \"chunkIndex\": 0,\n      \"chunk\": {\n        \"text\": \"ARR crossed one hundred million, line 0.\",\n        \"speaker\": \"Jeremy Sokolic\",\n        \"elapsed\": 0,\n        \"similarity\": 0.91\n      }\n    },\n    {\n      \"chunkIndex\": 1,\n      \"chunk\": {\n        \"text\": \"ARR crossed one hundred million, line 1.\",\n        \"speaker\": \"Jeremy Sokolic\",\n        \"elapsed\": 10000,\n        \"similarity\": 0.91\n      }\n    },\n    {\n      \"chunkIndex\": 2,\n      \"chunk\": {\n        \"text\": \"ARR crossed one hundred million, line 2.\",\n        \"speaker\": \"Jeremy Sokolic\",\n        \"elapsed\": 20000,\n        \"similarity\": 0.91\n      }\n    }\n  ],\n  \"transferIntegrity\": {\n    \"received\": 3,\n    \"stored\": 3,\n    \"maxIndex\": 2,\n    \"expected\": 3,\n    \"missingIndices\": [],\n    \"completeness\": 1\n  },\n  \"transcriptionQuality\": \"streaming\",\n  \"batchApplied\": false,\n  \"streamingWordCount\": 27,\n  \"finalizationState\": \"ops_pending\",\n  \"claimPending\": false,\n  \"finalizationUpdatedAt\": \"<ISO>\",\n  \"correctionRevision\": 0,\n  \"labelsNewerThanGraph\": false,\n  \"lifecycleRevision\": 0,\n  \"hqState\": \"unavailable\",\n  \"syncState\": \"finalized\",\n  \"serverInstanceId\":\"<ID>\",\n  \"lifecycleUpdatedAt\": \"<ISO>\"\n}",
+      "personal/meetings/2026-10/2026-10-27_G2_Recording_2026-10-27_1001_0dd775ff.md": "# G2 Recording 2026-10-27 1001\n\n| Field | Value |\n|-------|-------|\n| **Date** | 2026-10-27 |\n| **Time** | 10:01 AM |\n| **Duration** | 0 minutes |\n| **Source** | G2 Glasses |\n| **Domain** | personal |\n| **Transfer integrity** | 100% |\n| **Transcription quality** | streaming |\n\n## Summary\n\n<!-- g2-needs-domain-review -->\n\n*G2 recording — summary pending pipeline processing.*\n\n## Transcript\n\n[Jeremy Sokolic]: ARR crossed one hundred million, line 0.\n[Jeremy Sokolic]: ARR crossed one hundred million, line 1.\n[Jeremy Sokolic]: ARR crossed one hundred million, line 2.\n",
+      "quilt/meetings/2026-10/Filed_(G2).md": "# G2 Recording 2026-10-27 1001\n\n| Field | Value |\n|-------|-------|\n| **Date** | 2026-10-27 |\n| **Time** | 10:01 AM |\n| **Duration** | 0 minutes |\n| **Source** | G2 Glasses |\n| **Domain** | personal |\n| **Transfer integrity** | 100% |\n| **Transcription quality** | streaming |\n\n## Summary\n\n<!-- g2-needs-domain-review -->\n\n*G2 recording — summary pending pipeline processing.*\n\n## Transcript\n\n[Jeremy Sokolic]: ARR crossed one hundred million, line 0.\n[Jeremy Sokolic]: ARR crossed one hundred million, line 1.\n[Jeremy Sokolic]: ARR crossed one hundred million, line 2.\n",
+      "scripts/invocations.jsonl": "{\"args\":[\"--g2-only\",\"--g2-file\",\"<ROOT>/Ukaoma Chief Of Staff/MU-Chief.Staff/operations/personal/meetings/2026-10/2026-10-27_G2_Recording_2026-10-27_1001_0dd775ff.md\",\"--quiet\"],\"importRoot\":\"<ROOT>/data/recordings\",\"unbuffered\":\"1\"}\n",
+      "scripts/sync_meetings.py": "\nconst fs = require('fs'), path = require('path'); const args = process.argv.slice(2)\nfs.appendFileSync(path.join(__dirname, 'invocations.jsonl'), JSON.stringify({ args, importRoot: process.env.COS_G2_IMPORT_ROOT || null, unbuffered: process.env.PYTHONUNBUFFERED || null }) + '\\n')\n\nconst at = args.indexOf(\"--g2-file\"); const target = args[at + 1]\nconst dest = path.join(__dirname, '..', 'quilt', 'meetings', '2026-10', 'Filed_(G2).md')\nfs.mkdirSync(path.dirname(dest), { recursive: true }); fs.writeFileSync(dest, fs.readFileSync(target))\nprocess.stdout.write('COS_G2_RESULT=' + JSON.stringify({ status: 'enriched', path: dest, title: 'Filed (G2)' }) + '\\n')\n"
+    }
+  }
+}

package/server/routes/meeting.ts

@@ -187,6 +187,7 @@ import {
 import {
   claimMeetingInOperations,
   earlyMeetingSyncEnabled,
+  fileMacRecordingInLibrary,
   handoffMeetingToOperations,
 } from '../lib/g2-ops-handoff.js'
 import {
@@ -215,6 +216,33 @@ function cosOpsPipelineConfigured(): boolean {
   return Boolean(process.env.COS_SCRIPTS_DIR?.trim())
 }
 
+/**
+ * 6.94.0: file a finished Mac recording into the COS meeting library.
+ *
+ * Runs AFTER the standalone enrichment, so the local recording is exactly what 6.93.0 left
+ * whether or not filing works. A Mac recording is never handed to the G2 import: it takes
+ * sync_meetings.py --mac-import-file, and only when that script reports the capability.
+ * A failure is logged and never fails the capture's own finalization, because a retry would
+ * re-run the standalone summary; mac_library_backfill.py files it later, idempotently.
+ */
+async function fileFinishedMacRecording(sessionId: string, meetingPath: string, label: string): Promise<void> {
+  // Callers pass Mac captures only (finalization and orphan recovery both check MAC_CAPTURE_ID).
+  if (!cosOpsPipelineConfigured()) return
+  try {
+    const filing = await fileMacRecordingInLibrary(meetingPath)
+    if (filing.outcome === 'filed') {
+      console.log(`[${label}] Mac recording ${sessionId} filed into the library (${filing.status}): ${filing.path}`)
+    } else {
+      console.log(`[${label}] Mac recording ${sessionId} stays standalone: ${filing.reason}`)
+    }
+  } catch (error) {
+    console.warn(
+      `[${label}] Mac recording ${sessionId} was not filed into the library: `
+      + `${error instanceof Error ? error.message : String(error)}`,
+    )
+  }
+}
+
 /**
  * Why a correction left the meeting's markdown alone when it could not read it.
  *
@@ -463,6 +491,13 @@ function scheduleFinalizationJob(job: MeetingFinalizationJob, runtime: Finalizat
     // 6.78.0: finished, so its crash-loop count (lib/boot-resume.ts) is done.
     bootResumeGate().forget('meeting_finalization', current.sessionId)
     finalizationRetryCounts.delete(key)
+    // Filed AFTER the capture's own finalization is complete and its job removed: the
+    // filing holds no maintenance lease (a restart drain never waits on it) and a restart
+    // mid-filing never re-runs the standalone summary. An interrupted filing leaves the
+    // staged copy unfinished, and sync_meetings' broad sync retries it.
+    if (MAC_CAPTURE_ID.test(current.sessionId)) {
+      runtime.scheduleBackground(fileFinishedMacRecording(current.sessionId, current.meetingPath, 'meeting/save'))
+    }
   }).catch(error => {
     const current = runtime.finalizationJobs.get(job.sessionId) ?? job
     try {
@@ -2926,6 +2961,7 @@ export function createMeetingRouter(deps: MeetingRouteDependencies = {}): Router
         + 'ran for this capture. The capture leaves the unsaved count once its scribe is durable.',
     })
 
+    let macFilingPath: string | null = null
     const task = Promise.resolve().then(async () => {
       lease.setPhase('active')
       const startedAt = Date.now()
@@ -3031,6 +3067,7 @@ export function createMeetingRouter(deps: MeetingRouteDependencies = {}): Router
         // already holds the long-running orphan_recovery lease that COS
         // Control surfaces and warns on before committing a drain.
         await enrichStandaloneMeeting(saved.filepath, Date.now())
+        if (macCapture) macFilingPath = saved.filepath
       }
       if (!macCapture && !phoneCapture) triggerMeetingMergeRun('orphan_recovered')
     }).catch(error => {
@@ -3050,7 +3087,11 @@ export function createMeetingRouter(deps: MeetingRouteDependencies = {}): Router
       recoveringOrphans.delete(sessionId)
       lease.release()
     })
-    scheduleBackground(task)
+    // As on the save path: a recovered Mac capture is filed only after the recovery has
+    // finished and released its orphan_recovery lease, so a drain never waits on it.
+    scheduleBackground(task.then(() => macFilingPath
+      ? fileFinishedMacRecording(sessionId, macFilingPath, 'meeting/orphans')
+      : undefined))
   })
 
   return router