Marc-André Bombeck 5cff7473c9 feat(documents): persist an auto summary for uploaded documents ...

When the auto-AI-read opt-in is on, a freshly uploaded document is summarised
once in the background and the encrypted summary is stored and shown on the
document detail view.

- A background step runs after upload alongside the existing content-index and
  thumbnail steps. It generates a short (3-4 sentence) plain-language summary
  only when the user's documentsAutoAiRead opt-in is on (that flag is also the
  standing AI-egress consent), skips a document that already has one, and
  no-ops when no vision provider is configured. It reuses the same provider
  resolution, egress-consent re-assertion, and AI-budget reserve/reconcile
  helpers as the on-demand route; a provider error refunds the reservation and
  never fails the upload.
- The summary is stored encrypted (summaryEncrypted Bytes) with a
  summaryGeneratedAt timestamp on inbound_documents, registered for key
  rotation, and returned decrypted in the document detail response.
- The on-demand transient summary route is unchanged.

Gated by the same consent, budget, and module checks.

2026-07-17 17:46:28 +02:00

..

__tests__

test(documents): wire content-index mocks into the list route test

2026-07-07 18:41:09 +02:00

encrypted-columns.ts

feat(documents): persist an auto summary for uploaded documents

2026-07-17 17:46:28 +02:00

encryption-corpus.ts

feat(crypto): rotate the document blob column in bounded, codec-aware batches

2026-07-07 11:05:43 +02:00

note-cipher.ts

feat(security): encrypt medication free-text notes at rest + password-change MFA step-up

2026-06-28 03:05:10 +02:00