* feat(ai): job-shaped AI service with OpenAI-compatible backend, extraction-first; stop extracting every inbox document twice Sovereign plan WS1 PR1 (#1406 Tier 2, extraction-first, aligned with the AI surface audit). lib/ai grows a job-shaped service (generateText / generateStructured / extractFromDocument; no streaming members yet, see plan rule R3): - services/anthropic-family delegates to the existing createAiClient() and sends the exact request literals the inbox extractor sent before (request-shape tests deep-equal them), so hosted Bedrock stays byte-identical. - services/openai-compatible talks to any chat-completions endpoint (BYO Swedish provider) via Vercel AI SDK 6.x, exact-pinned and guarded: images as parts, PDFs rasterized with poppler (AI_PDF_MODE) or sent natively, AI_VISION / AI_STRICT_JSON declared, honest skips (ai_no_vision, pdf_rasterizer_missing) instead of fake failures. - config.ts: AI_PROVIDER/AI_BASE_URL/AI_API_KEY/AI_MODEL and per-tier AI_*_MODEL with the legacy BEDROCK_* names kept as the same overrides; getAiStatus() is the single source of truth for "is AI wired up". - provider.ts: openai-compatible in the auto-detect chain (after Bedrock and the direct API); createAiClient() refuses it loudly. Document extraction moves onto the service and gets the audit's fixes: - Inbox documents were extracted TWICE (pipeline A ran inside uploadDocument() before the inbox row existed, so its dedupe branch never fired; 3 707 + 1 666 calls / 30 d). The inbox now declares extractionOwner on the upload, the extension yields, and the inbox mirrors its single outcome onto document_attachments from every writer (sync, deferred, attach, retry, MCP). - Every "no extraction will ever happen" outcome is stamped (skipped:no_ai_entitlement / ai_unconfigured / system_generated / ...); the status route maps the quiet ones to 'disabled' on the first poll instead of a 30 s client timeout. Prod showed 309 of the 327 never-extracted uploads were the paywall working silently. - Self-generated documents (our own invoice PDFs, payout files) are no longer OCR'd. - Agent invoke answers 503 ai_unconfigured when the deployment has no assistant backend, distinct from the paywall. Guard: new direct-ai-client antipattern check (shrink-only allowlist of the pre-abstraction SDK callers) plus exact pins for @anthropic-ai/sdk, ai and @ai-sdk/openai-compatible. Verified: 15 958 unit tests green, guards, lint ratchet, typecheck, and a live smoke against hosted Bedrock through the new service (ping, streamed tool turn, thinking+cache, PDF extraction). Co-Authored-By: Claude Fable 5 <noreply@anthropic.com> * feat(ai): make AI_API_KEY optional for OpenAI-compatible endpoints (keyless local model servers) A local model server (llama.cpp's server, Ollama /v1, LM Studio, vLLM) usually has no auth. Before, the OpenAI-compatible backend required both AI_BASE_URL and AI_API_KEY to count as configured, so running Accounted on a local model meant setting a meaningless placeholder key. - resolveAiProvider / hasAiCredentials: a base URL alone is now enough. - services/openai-compatible: only send Authorization: Bearer when AI_API_KEY is set, so a keyless server is never handed an empty bearer; a hosted provider that needs a key still sets it. - Docs (SELF-HOSTING Option 3: local-model example, key marked optional), DECISIONS. Verified: with no AI_API_KEY, just AI_BASE_URL + AI_MODEL, getAiStatus() reports configured=true / provider=openai-compatible (live). lib/ai suite 71 green; tsc, guards, lint clean. Bedrock/Anthropic logic unchanged. Co-Authored-By: Claude Fable 5 <noreply@anthropic.com> --------- Co-authored-by: Jakob Wennberg <311770904+jakobwennberg-oss@users.noreply.github.com> Co-authored-by: Claude Fable 5 <noreply@anthropic.com>
86 lines
3.5 KiB
TypeScript
86 lines
3.5 KiB
TypeScript
import { NextResponse } from 'next/server'
|
|
import { withRouteContext } from '@/lib/api/with-route-context'
|
|
import { getAiStatus } from '@/lib/ai'
|
|
import { getErrorMessage as getUserErrorMessage } from '@/lib/errors/get-error-message'
|
|
|
|
// GET /api/documents/:id/extraction-status
|
|
//
|
|
// Light-weight polling endpoint for the AI document-extraction pipeline.
|
|
// Returns the minimal fields needed to drive an "extracting…" UI without
|
|
// touching storage (no signed URL creation per poll).
|
|
//
|
|
// Derived status:
|
|
// running : extracted_at IS NULL and this deployment has AI configured
|
|
// (the pipeline hasn't stamped yet)
|
|
// succeeded : extracted_at IS NOT NULL AND extracted_data IS NOT NULL
|
|
// disabled : no extraction will ever happen for this document and that
|
|
// is not the document's fault: AI is not configured on this
|
|
// deployment (extracted_at NULL + unconfigured, or stamped
|
|
// skipped:ai_unconfigured), the company is not entitled to
|
|
// AI extraction (skipped:no_ai_entitlement), a sandbox or
|
|
// client opt-out, or a document the system generated itself
|
|
// (skipped:system_generated). The UI shows nothing.
|
|
// unsupported : any other skipped:* (HEIC, ZIP, no vision model, …)
|
|
// failed : extracted_at IS NOT NULL AND extracted_data IS NULL AND
|
|
// extraction_model = 'failed:*'
|
|
//
|
|
// Before extraction was stamped on every outcome, free-tier uploads and
|
|
// unconfigured self-hosts left the column NULL forever and the client had to
|
|
// decide "disabled" by timing out after 30 s. It still keeps that timeout as
|
|
// the last resort (the document-extraction extension may be switched off).
|
|
export type DocumentExtractionStatus = 'running' | 'succeeded' | 'failed' | 'unsupported' | 'disabled'
|
|
|
|
const QUIET_SKIPS = new Set([
|
|
'skipped:ai_unconfigured',
|
|
'skipped:no_ai_entitlement',
|
|
'skipped:sandbox',
|
|
'skipped:client_opt_out',
|
|
'skipped:system_generated',
|
|
])
|
|
|
|
export function deriveExtractionStatus(row: {
|
|
extracted_at: string | null
|
|
extracted_data: unknown
|
|
extraction_model: string | null
|
|
}, aiConfigured: boolean): DocumentExtractionStatus {
|
|
if (!row.extracted_at) return aiConfigured ? 'running' : 'disabled'
|
|
if (row.extracted_data) return 'succeeded'
|
|
const model = row.extraction_model ?? ''
|
|
if (QUIET_SKIPS.has(model)) return 'disabled'
|
|
if (model.startsWith('skipped:')) return 'unsupported'
|
|
return 'failed'
|
|
}
|
|
|
|
export const GET = withRouteContext<{ params: Promise<{ id: string }> }>(
|
|
'document.extraction_status',
|
|
async (_request, { supabase, companyId }, { params }) => {
|
|
const { id } = await params
|
|
|
|
const { data, error } = await supabase
|
|
.from('document_attachments')
|
|
.select('id, extracted_at, extracted_data, extraction_model')
|
|
.eq('id', id)
|
|
.eq('company_id', companyId)
|
|
.maybeSingle()
|
|
|
|
if (error) return NextResponse.json({ error: getUserErrorMessage(error) }, { status: 500 })
|
|
if (!data) return NextResponse.json({ error: 'Not found' }, { status: 404 })
|
|
|
|
const row = {
|
|
extracted_at: data.extracted_at as string | null,
|
|
extracted_data: data.extracted_data as Record<string, unknown> | null,
|
|
extraction_model: data.extraction_model as string | null,
|
|
}
|
|
const status = deriveExtractionStatus(row, getAiStatus().configured)
|
|
|
|
return NextResponse.json({
|
|
data: {
|
|
id: data.id,
|
|
status,
|
|
extracted_at: row.extracted_at,
|
|
extraction_model: row.extraction_model,
|
|
},
|
|
})
|
|
}
|
|
)
|