@gotcos/glasses-server 6.94.1 → 6.94.3

package/server/routes/meeting.ts

@@ -1,6 +1,9 @@
+import { runQualifiedMacProfilePass } from '../lib/mac-speaker-profile-finalizer.js'
+import { readMacSpeakerMachineEvidence } from '../lib/mac-speaker-machine-evidence.js'
 import { dataPath } from '../lib/data-dir.js'
 import { PHONE_CAPTURE_ID, PHONE_SOURCE_TYPE, assertPhoneProvenance, readPhoneRecording, requirePhoneRecording, closePhoneRecording } from '../lib/phone-recording.js'
 import { MAC_CAPTURE_ID, readMacRecording, requireMacRecording, macChunkReceipt, closeMacRecording } from '../lib/mac-recording.js'
+import { bodyName, sameRecordId, sameSpeakerName } from '../lib/speaker-name-nfc.js'
 import { readSpeakerPolicy, writeSpeakerPolicy, isSpeakerMode } from '../lib/meeting-speaker-policy.js'
 // POST /api/meeting/save — finalize an existing transcribe-stream session into
 // the standalone public meeting store. The live transcript and chunk metadata
@@ -259,7 +262,7 @@ function markdownUnreadableReason(operations: { mergedScribeConflict?: string[]
 }
 
 function requestedRecordMatches(requested: unknown, expected: string): boolean {
-  return requested == null || requested === '' || requested === expected
+  return requested == null || requested === '' || sameRecordId(requested, expected)
 }
 
 interface MeetingSessionSource {
@@ -309,6 +312,7 @@ export interface MeetingRouteDependencies {
   emit?: typeof emitDisplay
   finalizationJobs?: MeetingFinalizationJobStore
   finalDiarize?: FinalDiarize
+  qualifiedProfilePass?: typeof runQualifiedMacProfilePass
   /** Control's stop requests for live G2 meetings (lib/meeting-stop-requests.ts). */
   stopRequests?: StopRequestStore
   /** 6.77.0: the post-save transcript cleanup (lib/transcript-cleanup.ts). */
@@ -334,6 +338,7 @@ interface FinalizationRuntime {
   scheduleBackground: (task: Promise<void>) => void
   sessions?: MeetingSessionSource
   finalDiarize?: FinalDiarize
+  qualifiedProfilePass?: typeof runQualifiedMacProfilePass
   transcriptCleanup?: TranscriptCleanupRunner
 }
 
@@ -367,7 +372,7 @@ function validReplayEntries(raw: unknown[]): IndexedTranscriptChunk[] | null {
   return entries.length > 0 ? entries : null
 }
 
-function scheduleFinalizationJob(job: MeetingFinalizationJob, runtime: FinalizationRuntime): void {
+export function scheduleFinalizationJob(job: MeetingFinalizationJob, runtime: FinalizationRuntime): void {
   const key = `${runtime.finalizationJobs.root}:${job.sessionId}`
   if (activeFinalizationJobs.has(key)) return
   activeFinalizationJobs.add(key)
@@ -452,8 +457,12 @@ function scheduleFinalizationJob(job: MeetingFinalizationJob, runtime: Finalizat
           sessionId: current.sessionId,
           runBatch: runtime.runBatch,
           finalDiarize: runtime.finalDiarize ?? runNemotronFinalPass,
+          qualifiedProfilePass: runtime.qualifiedProfilePass,
         })
       } else {
+        // A torn profile transaction must block filing even if pending audio
+        // vanished. Missing audio never waives journal/proof recovery gates.
+        if (MAC_CAPTURE_ID.test(current.sessionId)) await (runtime.qualifiedProfilePass ?? runQualifiedMacProfilePass)({ meetingPath: current.meetingPath, sidecarPath: current.sidecarPath, audioDir: current.audioDir ?? '', resumeOnly: true })
         console.warn(`[meeting/save] Pending HQ audio missing for ${current.sessionId}; preserving streaming canonical`)
       }
       current = runtime.finalizationJobs.save({
@@ -720,6 +729,7 @@ export function createMeetingRouter(deps: MeetingRouteDependencies = {}): Router
   const emit = deps.emit ?? emitDisplay
   const finalizationJobs = deps.finalizationJobs ?? new MeetingFinalizationJobStore()
   const finalDiarize = deps.finalDiarize ?? runNemotronFinalPass
+  const qualifiedProfilePass = deps.qualifiedProfilePass ?? runQualifiedMacProfilePass
   const transcriptCleanup = deps.transcriptCleanup
   const router = Router()
   const captureActive = deps.captureActive ?? (() => getTranscriptionSessionLiveness().live > 0)
@@ -1206,6 +1216,7 @@ export function createMeetingRouter(deps: MeetingRouteDependencies = {}): Router
           scheduleBackground,
           sessions,
           finalDiarize,
+          qualifiedProfilePass,
         })
         if (origin === 'phone') notePhoneAfterAutonomousSave(sessionId, 'save_replay')
         respond(200, publicSaveResponse(alreadySaved, true), true)
@@ -1403,6 +1414,7 @@ export function createMeetingRouter(deps: MeetingRouteDependencies = {}): Router
           scheduleBackground,
           sessions,
           finalDiarize,
+          qualifiedProfilePass,
           transcriptCleanup,
         })
       }
@@ -1659,9 +1671,10 @@ export function createMeetingRouter(deps: MeetingRouteDependencies = {}): Router
     const filename = operations?.filename ?? direct?.filename ?? saved!.filename
 
     let chunks: unknown
+    let sidecar: Record<string, unknown>
     try {
-      const raw = JSON.parse(readFileSync(sidecarPath, 'utf-8')) as Record<string, unknown>
-      chunks = Array.isArray(raw) ? raw : raw.chunks
+      sidecar = JSON.parse(readFileSync(sidecarPath, 'utf-8')) as Record<string, unknown>
+      chunks = Array.isArray(sidecar) ? sidecar : sidecar.chunks
     } catch {
       // Defensive: both lookups above already read this sidecar to match the
       // session, so a corrupt file 404s and never reaches here. This covers the
@@ -1678,8 +1691,8 @@ export function createMeetingRouter(deps: MeetingRouteDependencies = {}): Router
 
     // Raw capture indices, so a phrase can address its own audio. Position in
     // `chunks` is NOT the WAV number — see attachRawChunkIndices.
-    const sidecar = (JSON.parse(readFileSync(sidecarPath, 'utf-8')) ?? {}) as Record<string, unknown>
     const withIndices = attachRawChunkIndices(chunks as ReviewChunk[], sidecar.chunkEntries)
+    const machineEvidence = readMacSpeakerMachineEvidence(sidecar)
     const review = reviewMeetingSpeakers(withIndices, {
       owner: getOwnerSpeakerLabel(),
       // Labels a human already vouched for in this meeting. Without this the
@@ -1687,6 +1700,8 @@ export function createMeetingRouter(deps: MeetingRouteDependencies = {}): Router
       // confirms the same voice forever.
       confirmed: confirmedLabels(sessionId),
       confirmedChunks: confirmedChunks(sessionId),
+      machineQualifiedPositions: machineEvidence.positions,
+      machineEvidenceStatus: machineEvidence.status,
       phrasesPerVoice: Math.max(1, Math.min(6, Number(req.query.phrases) || 3)),
       // The sidecar's own durationMs is the meeting's true end. Deriving it from
       // max(elapsed) uses the START of the last chunk, which made the final
@@ -1791,10 +1806,13 @@ export function createMeetingRouter(deps: MeetingRouteDependencies = {}): Router
     }
     const chunks = rawChunks as ReviewChunk[]
 
+    const machineEvidence = readMacSpeakerMachineEvidence(sidecar)
     const review = reviewMeetingSpeakers(attachRawChunkIndices(chunks, sidecar.chunkEntries), {
       owner: getOwnerSpeakerLabel(),
       confirmed: confirmedLabels(sessionId),
       confirmedChunks: confirmedChunks(sessionId),
+      machineQualifiedPositions: machineEvidence.positions,
+      machineEvidenceStatus: machineEvidence.status,
       // This route renders no phrases; the default of 3 per voice computed and
       // discarded 48 transcript excerpts on a 16-voice meeting.
       phrasesPerVoice: 1,
@@ -1818,6 +1836,8 @@ export function createMeetingRouter(deps: MeetingRouteDependencies = {}): Router
       // "voice matching" for the wearer exemption and for names a human typed.
       isOwner: v.isOwner,
       confirmedByHuman: v.confirmedByHuman,
+      machineQualified: v.machineQualified,
+      machineQualifiedSegments: v.machineQualifiedSegments,
     }))
 
     // A missing .md is not fatal — the review and the sidecar still describe the
@@ -1948,7 +1968,7 @@ export function createMeetingRouter(deps: MeetingRouteDependencies = {}): Router
       res.status(400).json({ error: 'Invalid sessionId', reason: 'invalid_session_id' })
       return
     }
-    const speaker = typeof req.body?.speaker === 'string' ? req.body.speaker.trim() : ''
+    const speaker = bodyName(req.body?.speaker).trim()
     if (!speaker) {
       res.status(400).json({ error: 'speaker is required', reason: 'invalid_label' })
       return
@@ -1981,7 +2001,7 @@ export function createMeetingRouter(deps: MeetingRouteDependencies = {}): Router
     }
 
     // Only rows that ACTUALLY landed, and only those that named this speaker.
-    const rows = appliedCorrections(sessionId).filter(r => r.to === speaker && r.chunks.length > 0)
+    const rows = appliedCorrections(sessionId).filter(r => sameSpeakerName(r.to, speaker) && r.chunks.length > 0)
     if (rows.length === 0) {
       res.status(404).json({ error: `No applied correction named "${speaker}" in this meeting`, reason: 'no_correction' })
       return
@@ -2028,8 +2048,8 @@ export function createMeetingRouter(deps: MeetingRouteDependencies = {}): Router
       return
     }
 
-    const from = typeof req.body?.from === 'string' ? req.body.from : ''
-    const to = typeof req.body?.to === 'string' ? req.body.to : ''
+    const from = bodyName(req.body?.from)
+    const to = bodyName(req.body?.to)
     const chunks = Array.isArray(req.body?.chunks)
       ? (req.body.chunks as unknown[]).filter((n): n is number => Number.isInteger(n) && (n as number) >= 0)
       : []
@@ -2382,7 +2402,7 @@ export function createMeetingRouter(deps: MeetingRouteDependencies = {}): Router
       res.status(evidenceRefusal.status).json(evidenceRefusal.body)
       return
     }
-    const label = typeof req.body?.label === 'string' ? req.body.label : ''
+    const label = bodyName(req.body?.label)
     const bad = invalidLabelReason(label)
     if (bad) {
       res.status(400).json({ error: `label: ${bad}`, reason: 'invalid_label' })
@@ -2430,7 +2450,7 @@ export function createMeetingRouter(deps: MeetingRouteDependencies = {}): Router
       const doc = JSON.parse(readFileSync(sidecarPath, 'utf-8')) as Record<string, unknown>
       const rows = Array.isArray(doc.chunks) ? doc.chunks : []
       carried = rows.filter(r => r && typeof r === 'object'
-        && (r as Record<string, unknown>).speaker === label).length
+        && sameSpeakerName((r as Record<string, unknown>).speaker, label)).length
     } catch {
       res.status(500).json({ error: 'Could not read the chunk sidecar', reason: 'sidecar_unreadable' })
       return
@@ -2473,7 +2493,7 @@ export function createMeetingRouter(deps: MeetingRouteDependencies = {}): Router
       res.status(evidenceRefusal.status).json(evidenceRefusal.body)
       return
     }
-    const from = typeof req.body?.from === 'string' ? req.body.from : ''
+    const from = bodyName(req.body?.from)
     const bad = invalidLabelReason(from)
     if (bad) {
       res.status(400).json({ error: `from: ${bad}`, reason: 'invalid_label' })
@@ -2549,7 +2569,7 @@ export function createMeetingRouter(deps: MeetingRouteDependencies = {}): Router
       if (Array.isArray(parsed.chunks)) {
         for (const c of parsed.chunks) {
           const sp = (c as { speaker?: unknown } | null)?.speaker
-          if (typeof sp === 'string' && !existingSpeakers.includes(sp)) existingSpeakers.push(sp)
+          if (typeof sp === 'string' && !existingSpeakers.some(x => sameSpeakerName(x, sp))) existingSpeakers.push(sp)
         }
       }
     } catch { /* the relabel below reports a corrupt sidecar */ }
@@ -2562,7 +2582,7 @@ export function createMeetingRouter(deps: MeetingRouteDependencies = {}): Router
 
     // What this would remove from the profile, and what it CANNOT reach.
     // readVoiceProfiles returns a ProfileStore, not an array.
-    const profile = readVoiceProfiles().profiles.find(p => p.name === from)
+    const profile = readVoiceProfiles().profiles.find(p => sameSpeakerName(p.name, from))
     const profileSources: Array<string | undefined> = profile
       ? Array.from({ length: profile.embeddings.length }, (_, i) => profile.sources?.[i])
       : []
@@ -3152,7 +3172,7 @@ function synthesizeEntriesFromChunkWavs(audioDir: string): RecoveredCapture {
   return { entries, startTime, durationMs }
 }
 
-async function finalizeBatch(options: {
+export async function finalizeBatch(options: {
   audioDir: string
   entries: IndexedTranscriptChunk[]
   streamingWordCount: number
@@ -3161,7 +3181,11 @@ async function finalizeBatch(options: {
   sessionId?: string
   runBatch: NonNullable<MeetingRouteDependencies['runBatch']>
   finalDiarize?: FinalDiarize
+  qualifiedProfilePass?: typeof runQualifiedMacProfilePass
 }): Promise<void> {
+  const qualifiedProfilePass = options.qualifiedProfilePass ?? runQualifiedMacProfilePass
+  const mac = MAC_CAPTURE_ID.test(options.sessionId ?? '')
+  if (mac && (await qualifiedProfilePass({ ...options, resumeOnly: true })).status === 'applied') return
   const result = await options.runBatch(
     options.audioDir,
     options.entries,
@@ -3226,6 +3250,10 @@ async function finalizeBatch(options: {
     }
   }
 
+  // Exact qualified profile evidence runs before raw deletion and filing.
+  // Prepared-transaction failures propagate: mixed generations cannot be filed.
+  if (mac && metadataPersisted) await qualifiedProfilePass(options)
+
   if (canDeletePendingBatchAudio(transcriptApplied, metadataPersisted)) {
     rmSync(options.audioDir, { recursive: true, force: true })
   } else {

package/server/routes/session-find.ts

@@ -0,0 +1,73 @@
+/**
+ * POST /api/agent-sessions/find (Control 0.5.363): which of this Mac's agent sessions the person means, by meaning.
+ * Auth comes from the parent /api mount. See lib/session-find.ts for what leaves the Mac, the cost controls and the gates.
+ *
+ * Body `{ query, consentedProvider, stage }`, exactly those keys. `query` is a string; the words are redacted and cut at 200
+ * code points before use. `consentedProvider` is `"jev"`, `"subq"` or `null`: the provider the person agreed to send to.
+ * `stage` is `"first"` (the newest 254 sessions) or `"full"` (the next 254 too, unless the first already settles it).
+ *
+ * A search that cannot run answers HTTP 200 with `available: false`, a `reason` and a `message`, so Control keeps its word
+ * search and says one line about why. A malformed body is 400. A walk that fails (the session store, the keyed-sessions file) is
+ * also a 200 with `reason: failed`, so Control keeps its word search. 503 `session_find_unavailable` is left for an unexpected
+ * error outside the finder's own handling: try later.
+ * An older server answers 404, which Control reads as "no meaning search here".
+ *
+ * A closed connection stops the walk and any stage that has not started. A model request already sent is not aborted (it is
+ * billed either way). The query and the sessions never reach a log line.
+ */
+import { Router, type Response } from 'express'
+import { isAbortError } from '../lib/session-find-collect.js'
+import { SESSION_FIND_LIMITS, SessionFinder, unavailableAnswer, type SessionFindAnswer } from '../lib/session-find.js'
+
+export interface SessionFindRouteDependencies {
+  finder: Pick<SessionFinder, 'find'>
+  now: () => number
+}
+
+const BODY_KEYS = new Set(['query', 'consentedProvider', 'stage'])
+/** One log line per degrade reason per 10 minutes: Control falls back quietly, so the server says why. Fixed words only, never the query or a session. */
+export const SESSION_FIND_LOG_EVERY_MS = 10 * 60_000
+
+export function createSessionFindRouter(overrides: Partial<SessionFindRouteDependencies> = {}): Router {
+  let finder: Pick<SessionFinder, 'find'> | null = overrides.finder ?? null
+  const now = overrides.now ?? Date.now
+  const lastLogged = new Map<string, number>()
+  const logDegrade = (reason: string) => {
+    const at = now()
+    const last = lastLogged.get(reason)
+    if (last !== undefined && at - last < SESSION_FIND_LOG_EVERY_MS) return
+    lastLogged.set(reason, at)
+    console.warn(`[session-find] unavailable: ${reason}`)
+  }
+  const router = Router()
+  router.use('/agent-sessions/find', (_req, res, next) => { res.set('Cache-Control', 'private, no-store'); next() })
+
+  router.post('/agent-sessions/find', async (req, res: Response) => {
+    const body = req.body
+    const bad = () => res.status(400).json({ error: { code: 'invalid_find_request',
+      message: 'Send a query, the provider you consented to (jev, subq or null) and a stage of first or full.' } })
+    if (!body || typeof body !== 'object' || Array.isArray(body) || Object.keys(body).some(key => !BODY_KEYS.has(key))) return bad()
+    if (typeof body.query !== 'string' || body.query.length > SESSION_FIND_LIMITS.queryRawMax) return bad()
+    if (body.consentedProvider !== null && body.consentedProvider !== undefined && body.consentedProvider !== 'jev' && body.consentedProvider !== 'subq') return bad()
+    if (body.stage !== 'first' && body.stage !== 'full') return bad()
+
+    const controller = new AbortController()
+    // `close` also fires when a response has finished normally; only a connection that closed before the answer counts.
+    res.on('close', () => { if (!res.writableEnded) controller.abort() })
+    let answer: SessionFindAnswer
+    try {
+      finder ??= new SessionFinder()
+      answer = await finder.find({ query: body.query, consentedProvider: body.consentedProvider ?? null, stage: body.stage }, controller.signal)
+    } catch (error) {
+      if (isAbortError(error) || controller.signal.aborted) return
+      console.error('[session-find] search failed')
+      return res.status(503).json({ error: { code: 'session_find_unavailable', message: 'Meaning search could not read your sessions. Try again shortly.' } })
+    }
+    if (controller.signal.aborted) return
+    if (!answer.available && answer.reason) logDegrade(answer.reason)
+    return res.json(answer)
+  })
+  return router
+}
+
+export { unavailableAnswer }

package/server/routes/voice.ts

@@ -5,6 +5,7 @@ import { errMsg } from '../lib/utils.js'
 import { readdirSync, readFileSync, unlinkSync, existsSync, rmdirSync, rmSync } from 'node:fs'
 import { resolve } from 'node:path'
 import { checkSpeakerName } from '../lib/speaker-name.js'
+import { bodyName, nfc, sameSpeakerName } from '../lib/speaker-name-nfc.js'
 import { enrollSpeaker, isEnrolled, getAllSpeakerNames, identifySpeaker, extractEmbedding, enrollEmbedding, getEmbeddingCount, removeSpeakerProfile, readVoiceProfiles, mergeSpeakerProfiles } from '../lib/speaker-embeddings.js'
 import { statSync } from 'node:fs'
 import { trainFromFireflies, getTrainingStatus } from '../lib/speaker-trainer.js'
@@ -51,7 +52,9 @@ voiceRouter.post('/voice/enroll', async (req, res) => {
     // Default to the configured wearer label ('Me' unless owner_speaker_label
     // is set). Hardcoding one user's initials here enrolled every other install
     // under a stranger's name.
-    const name = (req.query.name as string) || getOwnerSpeakerLabel()
+    // `?name=a&name=b` is not a name; falling through to the owner's label would enroll a stranger's voice as the owner.
+    if (req.query.name !== undefined && typeof req.query.name !== 'string') return res.status(400).json({ error: 'name must be a single value' })
+    const name = nfc(typeof req.query.name === 'string' && req.query.name ? req.query.name : getOwnerSpeakerLabel())
 
     // An old client can still send a whole spoken sentence as the name (the
     // "enroll my voice" fall-through). Refuse it here: a junk profile can
@@ -115,7 +118,8 @@ voiceRouter.post('/voice/identify', async (req, res) => {
 // POST /api/voice/train — train voiceprints from Fireflies meeting audio
 voiceRouter.post('/voice/train', async (req, res) => {
   try {
-    const { speakerNames, minSegments, minSegmentDuration, limit, maxEmbeddingsPerSpeaker, fresh } = req.body ?? {}
+    const { speakerNames: rawSpeakerNames, minSegments, minSegmentDuration, limit, maxEmbeddingsPerSpeaker, fresh } = req.body ?? {}
+    const speakerNames = Array.isArray(rawSpeakerNames) ? rawSpeakerNames.map((n: unknown) => typeof n === 'string' ? nfc(n) : n) : rawSpeakerNames
     const report = await trainFromFireflies({
       speakerNames,
       minSegments,
@@ -160,7 +164,7 @@ const DEFAULT_MAX_TRAIN_PER_SPEAKER = 10
 
 voiceRouter.post('/voice/train-g2', async (req, res) => {
   try {
-    const targetSpeaker = req.body?.speaker as string | undefined
+    const targetSpeaker = typeof req.body?.speaker === 'string' ? nfc(req.body.speaker) : undefined
     const confirmAll = req.body?.confirmAllSpeakers === true
     const dryRun = req.body?.dryRun === true
     const maxPerSpeaker = Number.isFinite(req.body?.maxPerSpeaker)
@@ -361,7 +365,8 @@ voiceRouter.get('/voice/ext-audio', (_req, res) => {
 // If sessionId provided, only enroll from that session. Otherwise, enroll from all ext sessions.
 voiceRouter.post('/voice/enroll-ext', async (req, res) => {
   try {
-    const { name, sessionId } = req.body ?? {}
+    const { name: rawName, sessionId } = req.body ?? {}
+    const name = typeof rawName === 'string' ? nfc(rawName) : rawName
     if (!name || typeof name !== 'string' || name.length < 2) {
       return res.status(400).json({ error: 'name is required (min 2 chars)' })
     }
@@ -485,7 +490,7 @@ function newestWav(dirPath: string): string | null {
 // GET /api/voice/profiles/:name/sample — hear what a stored profile sounds like.
 voiceRouter.get('/voice/profiles/:name/sample', (req, res) => {
   res.set('Cache-Control', 'private, no-store')
-  const name = String(req.params.name ?? '')
+  const name = nfc(String(req.params.name ?? ''))
   const dirPath = speakerDirPath(AUDIO_SAVE_DIR, name)
   if (!dirPath) {
     res.status(400).json({ error: 'Invalid speaker name', reason: 'invalid_speaker' })
@@ -587,7 +592,7 @@ voiceRouter.post('/voice/held-groups/enroll', async (req, res) => {
   try {
     const nameCheck = checkSpeakerName(req.body?.name, { ownerLabel: getOwnerSpeakerLabel() })
     if (!nameCheck.ok) return res.status(400).json({ success:false,error:nameCheck.message,reason:nameCheck.reason })
-    const name = resolveStoredName(String(req.body.name).trim())
+    const name = resolveStoredName(nfc(String(req.body.name).trim()))
     // Held samples are audio this Mac captured. A member pointing at an imported
     // or derived record is not held audio, so it never reaches the preview.
     //
@@ -679,7 +684,7 @@ voiceRouter.get('/voice/profiles', (_req, res) => {
           return {
             name: p.name,
             embeddings: p.embeddings.length,
-            isOwner: p.name === owner,
+            isOwner: sameSpeakerName(p.name, owner),
             sources: bySource,
             // 6.44.15: a profile whose name on disk was a spoken sentence was
             // renamed at load; the client offers a rename.
@@ -793,21 +798,23 @@ function fanOutTotals(runs: readonly SpeakerRenameFanOut[]): {
 // knows something the audio does not, and it is logged.
 voiceRouter.post('/voice/merge-profiles', async (req, res) => {
   try {
-    const into = typeof req.body?.into === 'string' ? req.body.into.trim() : ''
+    const into = bodyName(req.body?.into).trim()
     const rawFrom = req.body?.from
     const from = (Array.isArray(rawFrom) ? rawFrom : [rawFrom])
       .filter((n: unknown): n is string => typeof n === 'string' && n.trim().length > 0)
-      .map((n: string) => n.trim())
+      .map((n: string) => nfc(n.trim()))
 
     if (!into || from.length === 0) {
       return res.status(400).json({ error: 'into (string) and from (string or string[]) are required' })
     }
-    if (from.includes(into)) {
+    // The same name twice is refused, unless the store holds it twice (a profile written decomposed and its composed twin): those are two
+    // profiles and merging them is the point.
+    if (from.some(n => sameSpeakerName(n, into)) && readVoiceProfiles().profiles.filter(p => sameSpeakerName(p.name, into)).length < 2) {
       return res.status(400).json({ error: 'into and from must differ' })
     }
 
     const owner = getOwnerSpeakerLabel()
-    if (from.includes(owner)) {
+    if (from.some(n => sameSpeakerName(n, owner))) {
       // Absorbing the owner label would delete the profile the live
       // identification path checks FIRST, on every chunk.
       return res.status(400).json({
@@ -907,11 +914,11 @@ voiceRouter.post('/voice/delete-person', (req, res) => {
     if (!name || typeof name !== 'string' || name.trim().length < 2) {
       return res.status(400).json({ error: 'name is required (min 2 chars)' })
     }
-    const target = name.trim()
+    const target = nfc(name.trim())
     const dryRun = req.body?.dryRun === true
 
     if (req.body?.confirm !== true && !dryRun) {
-      const existing = readVoiceProfiles().profiles.find(p => p.name === target)
+      const existing = readVoiceProfiles().profiles.filter(p => sameSpeakerName(p.name, target))
       const audioDir = speakerDirPath(AUDIO_SAVE_DIR, target)
       let wavs = 0
       if (audioDir && existsSync(audioDir)) {
@@ -922,8 +929,8 @@ voiceRouter.post('/voice/delete-person', (req, res) => {
         error: 'confirmation required',
         message: `Deleting "${target}" is not reversible. Pass { confirm: true } to proceed.`,
         wouldRemove: {
-          profile: existing ? 1 : 0,
-          embeddings: existing?.embeddings.length ?? 0,
+          profile: existing.length,
+          embeddings: existing.reduce((n, p) => n + p.embeddings.length, 0),
           trainingAudioFiles: wavs,
           calibrationRows: calibration.removed,
         },
@@ -931,7 +938,7 @@ voiceRouter.post('/voice/delete-person', (req, res) => {
     }
 
     if (dryRun) {
-      const existing = readVoiceProfiles().profiles.find(p => p.name === target)
+      const existing = readVoiceProfiles().profiles.filter(p => sameSpeakerName(p.name, target))
       const audioDir = speakerDirPath(AUDIO_SAVE_DIR, target)
       let wavs = 0
       if (audioDir && existsSync(audioDir)) {
@@ -942,8 +949,8 @@ voiceRouter.post('/voice/delete-person', (req, res) => {
         name: target,
         dryRun: true,
         removed: {
-          profiles: existing ? 1 : 0,
-          embeddings: existing?.embeddings.length ?? 0,
+          profiles: existing.length,
+          embeddings: existing.reduce((n, p) => n + p.embeddings.length, 0),
           trainingAudioFiles: wavs,
           calibrationRows: calibration.removed,
         },