fix(workouts): stop re-derivation wiping user-confirmed/corrected types

detectStoreDay and processUser both DELETE auto sessions before re-inserting,
and setWorkoutType leaves source='auto' — so a confirmed/corrected workout was
deleted on every re-derive (the */10 sweep, every close_day) and reset to the
model's guess, erasing the calibration ledger within ~10 min. The INSERT's
ON CONFLICT preserve-corrected clause never fired because the row was already
gone in the same batch transaction.

Exclude type_source IN ('confirmed','corrected') from both DELETEs so the
labelled row survives (ON CONFLICT then preserves type/confidence while
refreshing the model metrics), and add it to the overlap-skip set so a
baseline-drift start_ts shift can't insert a duplicate model row over the
user's label.

Author: abdulsaheel

src/analytics.ts

@@ -390,11 +390,22 @@ export async function processUser(
     // user-owned and must survive a re-derive. Deleted tombstones are KEPT so a
     // user-deleted auto session isn't resurrected (its row's status stays
     // 'deleted'; the re-insert below only updates non-status fields via ON CONFLICT).
+    // ALSO preserve any auto session the user CONFIRMED/CORRECTED (the calibration
+    // ledger): exclude it from the DELETE and skip an overlapping re-detection so a
+    // baseline-drift start_ts shift can't insert a duplicate that re-overwrites the
+    // user's label. (Without this, every re-derive wiped user corrections.)
+    const { results: keepRev } = await db.prepare(
+      "SELECT start_ts, end_ts FROM sessions WHERE user_id = ? AND start_ts < ? AND end_ts > ? AND status != 'deleted' AND type_source IN ('confirmed','corrected')",
+    ).bind(userId, dayStart + DAY, dayStart).all<{ start_ts: number; end_ts: number }>()
+    const reviewed = (keepRev ?? []) as { start_ts: number; end_ts: number }[]
+    const overlapsReviewed = (s: { start_ts: number; end_ts: number }) =>
+      reviewed.some((k) => s.start_ts < k.end_ts && s.end_ts > k.start_ts)
     statements.push(
-      db.prepare("DELETE FROM sessions WHERE user_id = ? AND start_ts >= ? AND start_ts < ? AND (source IS NULL OR source = 'auto') AND status != 'deleted'")
+      db.prepare("DELETE FROM sessions WHERE user_id = ? AND start_ts >= ? AND start_ts < ? AND (source IS NULL OR source = 'auto') AND COALESCE(type_source,'model') NOT IN ('confirmed','corrected') AND status != 'deleted'")
         .bind(userId, dayStart, dayStart + DAY),
     )
     for (const s of sessions) {
+      if (overlapsReviewed(s)) continue
       const sid = `${userId}:${s.start_ts}`
       statements.push(db.prepare(
         'INSERT INTO sessions (user_id, id, start_ts, end_ts, type, avg_hr, max_hr, strain, calories, hrr60, zones, confidence, status, source, segments, detected_type, type_confidence, type_source) ' +

src/workouts.ts

@@ -385,18 +385,21 @@ async function detectStoreDay(db: D1Database, userId: string, dayStart: number,
     act_class: r.act_class as Minute['act_class'],
   }))
   const sessions = detectSessions(dayMin, baseline, profile)
-  // Reconcile: don't clobber the user's manual workouts, deleted tombstones, OR any
-  // already-typed live-detected sessions (source='auto_live'); only the minute-detector's
-  // own 'auto' rows are re-derived. Then skip auto bouts that overlap a manual/auto_live
-  // session so a live-streamed workout isn't double-counted by the backstop.
+  // Reconcile: don't clobber the user's manual workouts, deleted tombstones, any
+  // already-typed live-detected sessions (source='auto_live'), OR any auto session the
+  // user CONFIRMED/CORRECTED (type_source in confirmed/corrected — the calibration
+  // ledger). Only the minute-detector's own un-reviewed 'auto' rows are re-derived. Then
+  // skip auto bouts that overlap any preserved session so a live-streamed or
+  // user-labelled workout isn't double-counted (and a baseline-drift start_ts shift can't
+  // spawn a duplicate that re-overwrites the user's label).
   const { results: keep } = await db.prepare(
-    "SELECT start_ts, end_ts FROM sessions WHERE user_id = ? AND start_ts < ? AND end_ts > ? AND status != 'deleted' AND source IN ('manual','auto_live')",
+    "SELECT start_ts, end_ts FROM sessions WHERE user_id = ? AND start_ts < ? AND end_ts > ? AND status != 'deleted' AND (source IN ('manual','auto_live') OR type_source IN ('confirmed','corrected'))",
   ).bind(userId, dayStart + DAY, dayStart).all<{ start_ts: number; end_ts: number }>()
   const covered = (keep ?? []) as { start_ts: number; end_ts: number }[]
   const overlaps = (s: { start_ts: number; end_ts: number }) =>
     covered.some((k) => s.start_ts < k.end_ts && s.end_ts > k.start_ts)
   const stmts: D1PreparedStatement[] = [
-    db.prepare("DELETE FROM sessions WHERE user_id = ? AND start_ts >= ? AND start_ts < ? AND (source IS NULL OR source = 'auto') AND status != 'deleted'")
+    db.prepare("DELETE FROM sessions WHERE user_id = ? AND start_ts >= ? AND start_ts < ? AND (source IS NULL OR source = 'auto') AND COALESCE(type_source,'model') NOT IN ('confirmed','corrected') AND status != 'deleted'")
       .bind(userId, dayStart, dayStart + DAY),
   ]
   for (const s of sessions) {