mirror of
https://github.com/MBombeck/HealthLog.git
synced 2026-11-08 12:32:43 +00:00
Marc-André Bombeck
74dcc67ef7
The level now sets, per record: the status-card regeneration gap after a sync (frugal 24 h, standard the operator's gap, full 1 h) and after a hand entry (frugal 6 h, otherwise 1 h); the status snapshot cap (10 000 compact characters on frugal, 14 000 above); background reasoning for the briefing and the period narratives (off on frugal); the daily briefing's form (a short form on frugal that keeps every field and at most one recommendation, the full contract on standard and full); and whether the automatic document read may act (frugal reads on request only, the stored switch is kept). A deterministic simulation of a watch-synced day through the invalidator counts 122 ingest-driven status generations on full (the v1.42 behaviour), 25 on standard and 2 on frugal, plus the nightly warm on each. Refs #1217
46 lines
1.9 KiB
TypeScript
46 lines
1.9 KiB
TypeScript
/**
|
|
* Per-user document-vault AI settings.
|
|
*
|
|
* `documentAutoReadEnabled(userId)` reads the `documentsAutoAiRead` opt-in — the
|
|
* single switch that authorises ambient (no-per-document-tap) AI reading of
|
|
* uploaded documents. OFF by default: the vault stays local-first and every
|
|
* external egress needs an explicit per-document action + consent receipt.
|
|
*
|
|
* It is a trigger, not a consent. Switching it on mints an `ai_extraction`
|
|
* receipt, and that receipt is what the document egress re-check reads, so a
|
|
* revoked receipt stops external reading even with the flag still on. Readers:
|
|
* - the summary job and its catch-up pass run only while it is ON;
|
|
* - the auto-index-on-upload job stays strictly local when it is OFF and uses
|
|
* the document-order external pick when it is ON.
|
|
*
|
|
* v1.43 (#1217) — on the `frugal` AI usage level the setting rests: documents
|
|
* are read on request only, whatever the switch says, and the switch acts
|
|
* again as soon as the level allows it. The stored choice is never changed.
|
|
*/
|
|
import { prisma } from "@/lib/db";
|
|
import { loadRecordUsageLevel } from "@/lib/ai/capabilities/usage";
|
|
import { AI_USAGE_LEVEL_EFFECTS } from "@/lib/ai/usage-level";
|
|
|
|
/**
|
|
* True when the user has opted into automatic AI reading of uploaded documents
|
|
* and their AI usage level lets the opt-in act. A missing row (deleted account
|
|
* raced against a job) resolves to `false` — fail-closed to the local-first
|
|
* posture, never to external egress; so does a usage level that cannot be
|
|
* read.
|
|
*/
|
|
export async function documentAutoReadEnabled(
|
|
userId: string,
|
|
): Promise<boolean> {
|
|
const row = await prisma.user.findUnique({
|
|
where: { id: userId },
|
|
select: { documentsAutoAiRead: true },
|
|
});
|
|
if (!(row?.documentsAutoAiRead ?? false)) return false;
|
|
try {
|
|
const level = await loadRecordUsageLevel(userId);
|
|
return AI_USAGE_LEVEL_EFFECTS[level].documentsAutoRead;
|
|
} catch {
|
|
return false;
|
|
}
|
|
}
|