feat(ai-service): stateless extraction service with grounding verifier

.dependency-cruiser.cjs

@@ -29,7 +29,14 @@ module.exports = {
       severity: "error",
       comment: "Feature modules never open connections or run migrations: createDatabase()/runMigrations() belong to the composition roots (src/app/_server, src/*.ts entrypoints). Types and table definitions (src/db/schema) are fine.",
       from: { path: "^src/features/" },
-      to: { path: "^src/db/(index|client|migrate)\\.ts$", dependencyTypesNot: ["type-only"] },
+      to: { path: "^src/db/(index|client|migrate|job-queue-client)\\.ts$", dependencyTypesNot: ["type-only"] },
+    },
+    {
+      name: "pg-boss-client-only-in-db",
+      severity: "error",
+      comment: "pg-boss opens its own pool: construct it only in src/db (job-queue.ts); features use injected JobSender types.",
+      from: { path: "^src/", pathNot: "^src/db/" },
+      to: { path: "(^|/)node_modules/pg-boss(/|$)", dependencyTypesNot: ["type-only"] },
     },
     {
       name: "not-to-unresolvable",

.env.example

@@ -29,6 +29,31 @@ S3_FORCE_PATH_STYLE=true
 # Host port of the local S3 gateway.
 S3_PORT=8333
 
+# --- Environment -------------------------------------------------------------------------------
+# local | showcase | production. Only `local` accepts the committed local-default auth secret.
+APP_ENV=local
+
+# --- Authentication (Better Auth) ---------------------------------------------------------------
+# Signs sessions and cookies; at least 32 characters. Generate a real one: `openssl rand -base64 32`.
+BETTER_AUTH_SECRET=local-dev-only-secret-change-me-0123456789
+# Public base URL of the web app (cookies, redirects, trusted origin).
+BETTER_AUTH_URL=http://localhost:3000
+# Client IP for the login rate limit. Set to what YOUR reverse proxy writes and list the proxy
+# addresses; without trusted proxies only a single-value header is trusted. If the web container is
+# reachable without a proxy, clients can forge this header – put a proxy in front (see operations.md).
+AUTH_IP_HEADERS=x-forwarded-for
+AUTH_TRUSTED_PROXIES=
+
+# Demo seed only (`pnpm seed:demo`): password of the synthetic demo accounts, local use only.
+SEED_PASSWORD=demo-password-local-only
+
+# --- Upload limits (intake) ---------------------------------------------------------------------
+# Maximum size per file in bytes (default 20 MiB) and files per request (default 10).
+UPLOAD_MAX_FILE_BYTES=20971520
+UPLOAD_MAX_FILES=10
+# Cap of one whole upload request (all files + form overhead); requests without Content-Length are refused.
+UPLOAD_MAX_REQUEST_BYTES=41943040
+
 # --- Web ---------------------------------------------------------------------------------------
 # Host port of the web container.
 WEB_PORT=3000

.gitignore

@@ -16,7 +16,7 @@ next-env.d.ts
 # Python
 __pycache__/
 *.py[cod]
-.venv/
+.venv
 .pytest_cache/
 .ruff_cache/
 .mypy_cache/

CHANGELOG.md

@@ -6,6 +6,17 @@ This file records what changes **in the product** – process and session state
 ## [Unreleased]
 
 ### Added
+- AI service (`services/ai`): `POST /v1/extract` turns an e-mail or PDF into segments with stable
+  locators and extracts company, contact person and requested delivery date with evidence; a
+  deterministic verifier marks every value whose quote is not in the cited segment as `unverified`.
+- Upload of a quote request (`/requests`): .eml, .msg, .pdf, .xlsx, .docx up to a configured size;
+  originals stored privately, download only for the own company. Request, documents, audit entry and
+  the processing job are created in one step; exact duplicates are flagged and linked.
+- Invite-only login (e-mail + password): admins invite staff into their own company and hand over
+  an invitation link; sign-up without a valid invitation link creates no account. Roles `admin` and `clerk` per company.
+- Tenant isolation: every company-owned table has forced row-level security; data access runs
+  inside `withTenant()`.
+- Login rate limit (stored in the database) and `pnpm seed:demo` with two synthetic companies.
 - Runnable local stack: `docker compose up` starts PostgreSQL 17, SeaweedFS (S3), a one-shot `setup`
   step (migrations + private bucket), the web app and a no-op worker.
 - `GET /api/health` reports database and storage status (200 / 503, no connection details).

compose.yaml

@@ -54,6 +54,9 @@ services:
       S3_ACCESS_KEY_ID: ${S3_ACCESS_KEY_ID:-local-access-key}
       S3_SECRET_ACCESS_KEY: ${S3_SECRET_ACCESS_KEY:-local-secret-key}
       S3_FORCE_PATH_STYLE: "true"
+      BETTER_AUTH_SECRET: ${BETTER_AUTH_SECRET:-local-dev-only-secret-change-me-0123456789}
+      BETTER_AUTH_URL: ${BETTER_AUTH_URL:-http://localhost:3000}
+      APP_ENV: ${APP_ENV:-local}
     depends_on:
       postgres:
         condition: service_healthy