@arcforgelabs/flow 2026.10.50 → 2026.10.51

package/server/db/migrations/meta/_journal.json

@@ -162,6 +162,13 @@
       "when": 1792733287865,
       "tag": "0022_contacts",
       "breakpoints": true
+    },
+    {
+      "idx": 23,
+      "version": "7",
+      "when": 1793110575758,
+      "tag": "0023_captures",
+      "breakpoints": true
     }
   ]
-}
+}

package/server/db/schema.js

@@ -858,3 +858,50 @@ export const jobFieldEvents = pgTable('job_field_events', {
   foreignKey({ name: 'job_field_events_field_same_org', columns: [t.organisationId, t.fieldId], foreignColumns: [jobFields.organisationId, jobFields.id] }).onDelete('cascade'),
   index('job_field_events_job').on(t.organisationId, t.sourceSystem, t.sourceJobRef, t.createdAt),
 ]);
+
+// A photo of a handwritten lab form (server/core/captures.js). The bytes live
+// in the object storage adapter; this row keeps the key, size, type and
+// checksum. `read` is what the vision reader returned (server/core/reader.js):
+// the fields, the model, the tokens and the cost. A new row is `reading`
+// while that runs, or `problem` when the reader is off. A person may type
+// the proposal either way. `done` means someone applied or discarded it.
+// The photo bytes are deleted then, and a row with no decision is deleted
+// after 7 days.
+export const CAPTURE_STATES = ['reading', 'ready', 'done', 'problem'];
+export const CAPTURE_SOURCES = ['phone', 'desk', 'api'];
+export const CAPTURE_DECISIONS = ['applied', 'discarded'];
+export const captures = pgTable('captures', {
+  id: id(),
+  organisationId: organisationId().references(() => organisations.id),
+  state: text('state').notNull(),
+  source: text('source').notNull(),
+  fileKey: text('file_key').notNull(),
+  fileType: text('file_type').notNull(),
+  fileSize: integer('file_size').notNull(),
+  fileSha256: text('file_sha256').notNull(),
+  idempotencyKey: text('idempotency_key').notNull(),
+  // Fields, model, token counts and cost in micros. Null until a read finishes.
+  read: jsonb('read'),
+  match: jsonb('match'),
+  proposal: jsonb('proposal').notNull().default(sql`'{"action":null,"jobId":null,"changes":[]}'::jsonb`),
+  problem: text('problem'),
+  decision: text('decision'),
+  decidedBy: uuid('decided_by').references(() => people.id, { onDelete: 'set null' }),
+  decidedAt: timestamp('decided_at', { withTimezone: true }),
+  photoDeletedAt: timestamp('photo_deleted_at', { withTimezone: true }),
+  createdBy: uuid('created_by').references(() => people.id, { onDelete: 'set null' }),
+  createdAt: createdAt(),
+  updatedAt: updatedAt(),
+}, (t) => [
+  unique('captures_org_id').on(t.organisationId, t.id),
+  unique('captures_org_idempotency').on(t.organisationId, t.idempotencyKey),
+  unique('captures_file_key').on(t.fileKey),
+  index('captures_photo_open').on(t.createdAt).where(sql`photo_deleted_at is null`),
+  check('captures_state_valid', inList('state', CAPTURE_STATES)),
+  check('captures_source_valid', inList('source', CAPTURE_SOURCES)),
+  check('captures_decision_valid', sql`${t.decision} is null or ${t.decision} in ('applied', 'discarded')`),
+  check('captures_done_has_decision', sql`(${t.state} = 'done') = (${t.decision} is not null)`),
+  check('captures_file_size_valid', sql`${t.fileSize} >= 0`),
+  check('captures_sha256_valid', sql`${t.fileSha256} ~ '^[0-9a-f]{64}$'`),
+  check('captures_problem_valid', sql`${t.problem} is null or length(${t.problem}) between 1 and 200`),
+]);

package/server/index.js

@@ -9,7 +9,12 @@ import { migrateDatabase, openDatabase } from './db/index.js';
 import {
   importEarlierAtStart, importEarlierLinksAtStart, importEarlierMappingsAtStart, resolveImportAtStart,
 } from './import/at-start.js';
+import { createAiPort, resolveReader } from './core/ai.js';
+import { createBedrockClient } from './core/ai-bedrock.js';
+import { createCaptureRetentionWorker } from './core/captures.js';
 import { createMonitoredLog } from './core/monitoring.js';
+import { createCaptureReader } from './core/reader.js';
+import { resolveObjectStorage } from './core/storage.js';
 import { createTracing, traceQueries } from './core/tracing.js';
 import { createPipelineWorker } from './core/pipeline.js';
 import { createReconcileWorker } from './core/reconcile.js';
@@ -117,6 +122,43 @@ if (jobsOn) createReconcileWorker({ db: database.db, integrations, log }).start(
 // with Send all ready, to the accounting integration that is on.
 if (jobsOn) createSendWorker({ db: database.db, integrations, log }).start();
 
+// Capture photos (server/core/storage.js). A bad storage setting stops boot.
+// On Replit, and where the local folder cannot be created, the default is
+// off. The retention pass
+// only deletes Flow's own files, so it still runs where background jobs are
+// off: a second copy deleting the same key does nothing.
+let storage = null;
+try {
+  const resolved = await resolveObjectStorage({ env: process.env, secrets });
+  storage = resolved.storage;
+  if (storage) console.log(`[storage] ${resolved.mode}`);
+  else console.log(`[storage] captures off (${resolved.reason})`);
+} catch (error) {
+  console.error(`[storage] ${error.message}`);
+  process.exit(1);
+}
+if (storage) createCaptureRetentionWorker({ db: database.db, storage, log }).start();
+
+// The vision reader (server/core/reader.js). A bad region or a model id that
+// is not an Australia profile stops boot. Off, or on without keys, stores
+// the photo and leaves the capture for a person to type.
+let reader = null;
+try {
+  const resolved = resolveReader({ env: process.env });
+  if (!resolved.on) console.log(`[reader] off (${resolved.reason})`);
+  else if (!storage) console.log('[reader] captures off (no file store)');
+  else {
+    const port = createAiPort(createBedrockClient(resolved));
+    reader = createCaptureReader({ db: database.db, storage, port, settings: resolved, log, jobsOn });
+    if (jobsOn) reader.worker.start();
+    else console.log('[reader] background jobs off: each capture is read in the upload');
+    console.log(`[reader] on (${resolved.region})`);
+  }
+} catch (error) {
+  console.error(`[reader] ${error.message}`);
+  process.exit(1);
+}
+
 let auth = null;
 if (settings.mode === 'clerk') {
   const { keys } = settings;
@@ -158,7 +200,11 @@ const trustProxy = process.env.REPL_ID || process.env.REPLIT_DEPLOYMENT ? 1 : fa
 
 const updates = createUpdateChecker();
 
-createApp({ database, schemaJournals: expectedSchema({ adapters: shippedAdapters }).journals, auth, trustProxy, updates, integrations, secrets, defaultFamily, log, tracing }).listen(port, () => {
+createApp({
+  database, schemaJournals: expectedSchema({ adapters: shippedAdapters }).journals, auth, trustProxy, updates, integrations, secrets, defaultFamily, log, tracing, storage,
+  publicOrigin: process.env.FLOW_PUBLIC_ORIGIN,
+  reader: reader ? { on: true, schedule: reader.schedule } : null,
+}).listen(port, () => {
   console.log(`[flow] listening on ${port}; design system ${defaultFamily} (FLOW_THEME)`);
 });
 

package/server/ui/app.js

@@ -348,7 +348,7 @@ function renderSignedOut() {
     return;
   }
   $('sign-in-note').textContent = config.publicSignUp
-    ? 'Sign in, or ask for access with your work email.'
+    ? 'New here? Ask for access with your work email.'
     : 'Sign in with the account you were invited with.';
   // With public sign-up off the widget never creates a Clerk account: no
   // sign-up link, and an OAuth sign-in for an unknown email is not turned
@@ -867,6 +867,7 @@ async function renderIntegration(main, id) {
           current.id === 'xero' && current.state === 'ready' ? h('section', { class: 'fx-int-section' }, xeroConnection(body.organisations, canChange)) : null,
           current.id === 'seazona' ? h('section', { class: 'fx-int-section fx-card', style: { padding: '8px 20px 16px' } }, automationSection(ui(), 'seazona', 'Ready to invoice')) : null,
           on && current.state === 'ready' ? personSettingsSection(current) : null,
+          current.id === 'seazona' && current.state === 'ready' ? seazonaHistorySection() : null,
           current.id === 'xero' && current.state === 'ready' ? xeroImportSection(body.organisations) : null,
           current.id === 'xero' ? h('section', { class: 'fx-int-section fx-card', style: { padding: '8px 20px 16px' } }, automationSection(ui(), 'xero', 'Contacts')) : null,
           current.id === 'xero' ? h('section', { class: 'fx-int-section fx-card', style: { padding: '8px 20px 16px' } }, sendModeSection(ui())) : null,
@@ -978,6 +979,56 @@ function xeroImportSection(organisations) {
   return section;
 }
 
+// Seazona's history read (docs/SEAZONA.md, "The API backfill"): past orders
+// from a start day, a few calls a run inside the rate limit. Start and Stop
+// call no Seazona; the background lane reads. While it runs, the row reads
+// its progress again every 30 seconds, from Flow only.
+function seazonaHistorySection() {
+  const canAct = ['owner', 'admin'].includes(me?.person?.role);
+  const yearAgo = new Date(Date.now() - 365 * 86_400_000).toISOString().slice(0, 10);
+  const from = h('input', { class: 'fx-input', type: 'date', 'aria-label': 'Read from', value: yearAgo, disabled: !canAct });
+  const status = h('span', {}, 'Checking…');
+  const jobs = h('span', { class: 'fx-num' }, '…');
+  const control = h('span', { class: 'fx-row' });
+  const day = (value) => new Date(`${value}T00:00:00Z`).toLocaleDateString('en-AU', { dateStyle: 'medium', timeZone: 'UTC' });
+  const section = h('section', { class: 'fx-set fx-int-section fx-card', style: { padding: '8px 20px 16px' } },
+    h('h2', { class: 'fx-set__title' }, 'History'),
+    settingRow({ label: 'Read from', hint: status, help: 'Reads past Seazona orders into Flow, 10 every 2 minutes. Each job waits on hold and never drafts by itself.', control }),
+    settingRow({ label: 'Jobs read', control: jobs }));
+  const press = async (button, path, body) => {
+    button.disabled = true;
+    try {
+      await flow(path, { method: 'POST', ...(body ? { body: JSON.stringify(body) } : {}) });
+      toast(body ? 'History read started.' : 'History read stopped.', 'success');
+    } catch (error) {
+      toast(error.message, 'danger');
+      if (error.retryAfterMs) holdButton(button, error.retryAfterMs);
+    }
+    load();
+  };
+  const load = async () => {
+    let body;
+    try {
+      body = await flow('/api/seazona/history');
+    } catch (error) {
+      status.replaceChildren(error.message);
+      return;
+    }
+    const run = body.backfill;
+    jobs.replaceChildren(String(body.history?.jobs ?? 0));
+    if (run?.running) {
+      status.replaceChildren(`Reading ${day(run.nextDay ?? run.from)} · ${run.ordersRead} read`);
+      control.replaceChildren(h('button', { class: 'fx-btn fx-btn--sm', type: 'button', disabled: !canAct, onclick: (event) => press(event.currentTarget, '/api/seazona/history/backfill/stop') }, 'Stop'));
+      setTimeout(() => { if (section.isConnected) load(); }, 30_000);
+      return;
+    }
+    status.replaceChildren(run ? `${run.stopped ? 'Stopped' : 'Done'} · ${run.ordersRead} read from ${day(run.from)}` : 'Not started');
+    control.replaceChildren(from, h('button', { class: 'fx-btn fx-btn--sm fx-btn--primary', type: 'button', disabled: !canAct, onclick: (event) => press(event.currentTarget, '/api/seazona/history/backfill', { from: from.value }) }, 'Start'));
+  };
+  load();
+  return section;
+}
+
 // Once Xero is on: each organisation's connection, the history copy, and
 // Connect, which goes to Xero and comes back.
 function xeroConnection(organisations, canChange) {
@@ -1242,7 +1293,8 @@ drawModeToggles();
 // the Clerk instance is called.
 const LOCALIZATION = {
   signIn: {
-    start: { title: 'Sign in to Flow', subtitle: 'Choose how to sign in.' },
+    // titleCombined is the sign-in-or-sign-up screen (public sign-up on).
+    start: { title: 'Sign in', titleCombined: 'Sign in', subtitle: '' },
     password: { subtitle: 'Enter the password for your account.' },
   },
   signUp: { start: { title: 'Ask for access to Flow', subtitle: 'Use your work email. An owner approves new people.' } },