mirror of
https://github.com/tiennm99/DocsGPT.git
synced 2026-10-05 18:14:21 +00:00
* feat: SSE notification system
Adds a per-user SSE pipe (GET /api/events) plus a per-message
chat-stream reconnect endpoint (GET /api/messages/<id>/events).
Backend substrate:
- application/events/ — durable journal (Redis Streams) + live
pub/sub for user-scoped events, with publish_user_event() as
the worker-side entrypoint.
- application/streaming/ — broadcast_channel for pub/sub fanout
and event_replay for the per-message snapshot+tail path.
- application/storage/db/repositories/message_events.py +
alembic 0007 — Postgres journal for chat-stream events.
- application/worker.py — ingest/reingest/remote/connector/
attachment/mcp_oauth tasks publish queued/progress/completed/
failed envelopes alongside their existing status updates.
Frontend client:
- frontend/src/events/ — connect/reconnect, Last-Event-ID cursor,
backoff with jitter. Each tab runs its own connection; no
cross-tab dedup (future work).
- frontend/src/notifications/ — recentEvents ring, cursor
tracking, tool-approval toast.
- frontend/src/upload/uploadSlice.ts — extraReducers for
source.ingest.* and attachment.* events.
Coverage: 132 SSE tests across events substrate, replay, journal,
routes, and worker publishes.
* refactor(attachments): remove polling, SSE-only
frontend/src/components/MessageInput.tsx no longer runs a 2s
setInterval against getTaskStatus for every processing
attachment. The attachment.* SSE reducers in uploadSlice.ts are
now the sole driver of attachment state transitions.
* feat(connector): consume source.ingest.* SSE, remove polling
frontend/src/components/ConnectorTree.tsx now mirrors FileTree's
slice-walking pattern: it watches notifications.recentEvents
for source.ingest.{completed,failed} envelopes matching the
sync's source id, and no longer polls /task_status every 2s.
* refactor(source-ingest): remove polling, SSE-only
frontend/src/upload/Upload.tsx and
frontend/src/components/FileTree.tsx no longer run getTaskStatus
polling fallbacks. The source.ingest.* SSE reducers in
uploadSlice.ts and FileTree's slice walk are now the sole
drivers of upload/reingest state transitions.
* refactor(mcp-oauth): carry authorization_url in SSE, remove polling
application/worker.py::mcp_oauth now publishes
authorization_url on the mcp.oauth.awaiting_redirect envelope.
frontend/src/modals/MCPServerModal.tsx consumes it from SSE
instead of polling /oauth_status/<task_id> every 1s.
The URL is generated inside DocsGPTOAuth.redirect_handler when
the FastMCP client triggers OAuth. The worker now plumbs a
publish callback through tool_config -> MCPTool -> DocsGPTOAuth
so the awaiting_redirect publish fires from inside the handler
at the exact point the URL becomes known. The legacy Redis
mcp_oauth_status setex writes and the GET
/api/mcp_server/oauth_status/<task_id> endpoint are kept as
belt-and-suspenders; nothing in the frontend reads them now.
* feat(source-ingest): plumb limited flag through SSE for token-cap UX
application/worker.py::ingest_worker and remote_worker now publish
``limited: bool`` on the source.ingest.completed envelope.
uploadSlice routes ``payload.limited === true`` to a failed status
with a ``tokenLimitReached`` flag, and UploadToast surfaces the
translated tokenLimit i18n string. No worker code path sets
limited=true today; this is a forward-looking contract so when
token-cap detection lands, the UX is already wired.
* refactor(mcp-oauth): read status from SSE journal, drop polling endpoint
MCPOAuthManager.get_oauth_status now walks the per-user SSE Streams
journal (user:{user_id}:stream) for the latest mcp.oauth.* envelope
matching the task id, returning the status string derived from the
event type suffix and the payload fields. The worker is the single
source of truth — its publish_user_event calls write the same
record the SSE client receives live.
Removed:
- /api/mcp_server/oauth_status/<task_id> route in
application/api/user/tools/mcp.py
- mcp_oauth_status worker function and mcp_oauth_status_task Celery
wrapper
- All mcp_oauth_status:{task_id} Redis setex writes (4 in mcp_oauth,
2 in DocsGPTOAuth.redirect_handler / callback_handler)
- The update_status closure in mcp_oauth that wrote the polling
payload
Tests updated:
- get_oauth_status now takes (task_id, user_id); new coverage walks
a fake xrevrange response for the completed envelope, the no-match
case, and a Redis-down case
- Removed TestMCPOAuthStatus route tests and TestMcpOauthStatusTask
celery-wrapper test
- Removed the two oauth_status methods from the integration runner
mcp_oauth:auth_url/state/code/error Redis keys remain — they are
the OAuth flow's own state (not the dropped polling payload).
* chore(mcp-oauth): delete orphaned getMCPOAuthStatus client
The /api/mcp_server/oauth_status/<task_id> endpoint was removed in
the prior commit; the corresponding userService method and the
MCP_OAUTH_STATUS endpoint constant had no remaining callers in the
frontend, so they're deleted along with it.
* fix(events): drop live publish when journal write fails
application/events/publisher.py returned an envelope to live
pubsub subscribers even when the XADD to the durable journal
failed. The envelope had no ``id`` field, which bypassed the SSE
route's dedup floor and broke ``Last-Event-ID`` semantics for any
reconnecting client.
Best-effort delivery means dropping consistently, not delivering
inconsistent state. Now: if the journal write fails the publisher
returns None and skips the live publish entirely.
* fix(notifications): dedupe sseEventReceived against immediate dupes
Snapshot replay + live tail can both deliver the same id when the
live pubsub frame and the replay XRANGE overlap. The route's own
dedup floor catches the common case, but consumers walking
``recentEvents`` (FileTree, ConnectorTree, MCPServerModal,
ToolApprovalToast) would otherwise act on the same envelope
twice when a duplicate slipped through.
Belt-and-suspenders: short-circuit when the most recent id in
the ring matches the incoming one.
* fix(events): skip replay budget INCR when no snapshot work possible
_allow_replay incremented the per-user counter on every
/api/events GET, including no-op connects from a fresh client
with no cursor against an empty backlog. React StrictMode dev
double-mounts plus a few tabs trivially tripped the default
30-per-60s budget on idle reconnects.
XLEN pre-check: when last_event_id is None and the user stream
is empty, the connect can't do snapshot work — return True
without INCR. Cursor-bearing connects still INCR unconditionally
(probing the cursor's relationship to stream contents would
require a redundant XRANGE).
* fix(streaming): tighten journal contract + recover from seq collisions
Two related fixes to application/streaming/message_journal.py.
1. record_event now rejects non-dict payloads at the gate. The
live path (base.py::_emit) wrapped non-dicts as
{"value": payload}; the replay path in event_replay synthesized
{"type": event_type}. A reconnecting client would receive a
different envelope than the one originally streamed. Now both
paths see byte-identical envelopes because non-dicts can't be
journaled at all. The corresponding event_replay fallback is
replaced with a warn-and-skip for any legacy rows.
2. record_event handles IntegrityError on (message_id, sequence_no)
collisions by reading latest_sequence_no and retrying once with
latest+1. The most likely cause is a stale seq seed on a
continuation retry where the route read MAX(seq) from a
separate connection before another writer committed past it.
Previously the error was swallowed and the event silently
dropped from the journal; now it lands at the next available
seq. The live pubsub publish uses the materialised seq so the
journal row and the live frame agree.
* perf(streaming): batch message_events INSERTs per stream
complete_stream previously opened a fresh db_session() per yielded
event, doing one Postgres INSERT + commit per chunk on the WSGI
thread. Streaming answers emit ~100s of answer chunks per response,
so the route was paying ~100 PG roundtrips per stream serialized on
commit latency.
New BatchedJournalWriter in application/streaming/message_journal.py
accumulates rows per stream and flushes on three triggers:
- size: buffer reaches 16 entries
- time: 100ms elapsed since the last flush
- lifecycle: close() at end-of-stream
Live pubsub publishes still fire synchronously per record(), so
subscribers see events in real time — only the durable journal write
is amortized. On bulk INSERT IntegrityError the writer falls back to
per-row record() with the existing seq+1 retry so a single colliding
seq doesn't drop the rest of the batch.
complete_stream wires journal_writer.close() into every exit path
(happy end, tool-approval-paused end, GeneratorExit, error handler)
so the terminal event is committed before the generator returns —
otherwise a reconnecting client could snapshot up to the last flush
boundary and live-tail waiting for an end that's still in memory.
Repository gets bulk_record() — one SQLAlchemy executemany INSERT
for the bulk path. All-or-nothing on collision (Postgres aborts the
whole batch); the writer's per-row fallback handles recovery.
* chore(upload): drop dead UploadTask.lastEventAt field
The lastEventAt field on UploadTask had no remaining consumers — the
matching Attachment.lastEventAt was cleaned up earlier. Remove the
field declaration and the slice write site.
* chore(frontend): drop orphaned getTaskStatus client
After the polling-removal sweep no caller in frontend/src/ references
userService.getTaskStatus or endpoints.USER.TASK_STATUS. The backend
route /api/task_status itself stays — agents, webhooks, e2e specs,
and the public docs still depend on it.
* docs(repo): remove stale planning docs from repo root
notification-channel-design.md, plan.md, and reminder-tool-design.md
were leftover Claude planning artifacts from the SSE substrate work
that landed accidentally. CLAUDE.md prohibits creating planning docs
unless asked — delete them.
* docs(message-events): clarify repo vs wrapper payload contract
MessageEventsRepository.record accepts any JSONB-compatible value; the
streaming wrapper record_event tightens this to dicts only because the
live and replay paths reconstruct non-dict payloads differently. Spell
the split out so the next reader of the repo method doesn't assume the
wrapper's contract applies here.
* refactor(events): raise on malformed stream id instead of lex fallback
stream_id_compare's lex-fallback branch was a footgun: a malformed id
that sorts lex-greater than a real one would pin live-tail dedup
forever, dropping every subsequent legitimate event silently. Both
current callers in application/api/events/routes.py pre-validate
inputs against _STREAM_ID_RE before calling, so changing the function
to raise ValueError is a no-op on the happy path and turns the future-
caller footgun into a loud failure.
* test(tasks): cover cleanup_message_events task body
Adds skipped-when-no-POSTGRES_URI and happy-path coverage for the
Celery janitor. The skipped path returns the documented short-circuit
shape without touching the repo. The happy path seeds a backdated
row, runs the task against the pg_conn fixture, and asserts the
retention window's row is deleted while in-window rows survive.
Mirrors the TestCleanupPendingToolState pattern.
* fix(notifications): treat /c/new as no current conversation
useMatch('/c/:conversationId') treats the literal URL /c/new as a
real conversation id, so the toast suppression check confused
'user is on /c/new' with 'user is on the conversation needing
approval'. Explicit guard: when the matched id is 'new', fall
through to the no-match case so approval toasts still surface.
* docs(events): enumerate publish_user_event None-return paths
The function returns Optional[str] today, with None conflating five
distinct outcomes (missing args / push disabled / unserialisable /
Redis down / XADD failed). Every current call site is fire-and-
forget and ignores the return, so the right move is to document the
five cases rather than promote to an enum return — keeps the API
small while making the diagnostic surface (logs) obvious. If a
future caller needs to react differently per reason, promote then.
* refactor(sources): move source-id derivation out of worker module
application/api/user/sources/upload.py imported _derive_source_id
from application.worker — pulling the entire Celery worker module
into the API process at import time just for a two-line helper.
Move DOCSGPT_INGEST_NAMESPACE and the derivation function to a
new application/storage/db/source_ids.py module that both layers
can import without that dependency edge. worker.py re-exports the
old names (_derive_source_id, DOCSGPT_INGEST_NAMESPACE) for
backward-compatible imports from tests and any other in-tree
callers; new code should import from the new module directly.
* fix(cache): enable Redis health_check_interval to surface half-open TCP
Without health_check_interval, a half-open TCP socket (NAT silently
dropped state, ELB idle-close) can leave pubsub.get_message hanging
past the SSE generator's keepalive cadence — the kernel never
surfaces the dead socket because no payload is in flight. Setting
health_check_interval=10 makes redis-py ping every 10s when
otherwise idle, so the next get_message after the dead window
raises and the SSE loop falls into its reconnect path instead of
silently freezing on the user.
* chore(events): rename attachment.processing.progress to attachment.progress
The event-type taxonomy was inconsistent: source ingest emits
source.ingest.progress (three segments) while attachments emitted
attachment.processing.progress (four segments). Drops the
.processing. infix for parity. Worker publish sites, the slice
reducer's match, and the worker tests all flip together.
No external consumers — the event type is purely internal between
the publisher and the in-tab slice; safe to rename in one commit.
* feat: events cleanup
* fix: better docs
* fix: e2e tests
330 lines
13 KiB
Python
Executable File
330 lines
13 KiB
Python
Executable File
import os
|
|
import logging
|
|
from typing import Any, List, Optional
|
|
from retry import retry
|
|
from tqdm import tqdm
|
|
from application.core.settings import settings
|
|
from application.events.publisher import publish_user_event
|
|
from application.storage.db.repositories.ingest_chunk_progress import (
|
|
IngestChunkProgressRepository,
|
|
)
|
|
from application.storage.db.session import db_session
|
|
from application.vectorstore.vector_creator import VectorCreator
|
|
|
|
|
|
class EmbeddingPipelineError(Exception):
|
|
"""Raised when the per-chunk embed loop produces a partial index.
|
|
|
|
Escapes into Celery's ``autoretry_for`` so a transient cause (rate
|
|
limit, network blip) gets another shot. The chunk-progress
|
|
checkpoint makes retries cheap — only the failed-and-after chunks
|
|
re-run. After ``MAX_TASK_ATTEMPTS`` the poison-loop guard in
|
|
``with_idempotency`` finalises the row as ``failed``.
|
|
"""
|
|
|
|
|
|
def sanitize_content(content: str) -> str:
|
|
"""
|
|
Remove NUL characters that can cause vector store ingestion to fail.
|
|
|
|
Args:
|
|
content (str): Raw content that may contain NUL characters
|
|
|
|
Returns:
|
|
str: Sanitized content with NUL characters removed
|
|
"""
|
|
if not content:
|
|
return content
|
|
return content.replace('\x00', '')
|
|
|
|
|
|
# Per-chunk inline retry. Aggressive defaults (tries=10, delay=60) blocked
|
|
# the loop for up to 9 min per chunk and wedged the heartbeat: lower the
|
|
# tail so a transient failure fails-fast and the chunk-progress checkpoint
|
|
# resumes cleanly on next dispatch.
|
|
@retry(tries=3, delay=5, backoff=2)
|
|
def add_text_to_store_with_retry(store: Any, doc: Any, source_id: str) -> None:
|
|
"""Add a document's text and metadata to the vector store with retry logic.
|
|
|
|
Args:
|
|
store: The vector store object.
|
|
doc: The document to be added.
|
|
source_id: Unique identifier for the source.
|
|
|
|
Raises:
|
|
Exception: If document addition fails after all retry attempts.
|
|
"""
|
|
try:
|
|
# Sanitize content to remove NUL characters that cause ingestion failures
|
|
doc.page_content = sanitize_content(doc.page_content)
|
|
|
|
doc.metadata["source_id"] = str(source_id)
|
|
store.add_texts([doc.page_content], metadatas=[doc.metadata])
|
|
except Exception as e:
|
|
logging.error(f"Failed to add document with retry: {e}", exc_info=True)
|
|
raise
|
|
|
|
|
|
def _init_progress_and_resume_index(
|
|
source_id: str, total_chunks: int, attempt_id: Optional[str],
|
|
) -> int:
|
|
"""Upsert the progress row and return the next chunk index to embed.
|
|
|
|
The repository's upsert preserves ``last_index`` only when the
|
|
incoming ``attempt_id`` matches the stored one (a Celery autoretry
|
|
of the same task). On a fresh attempt — including any caller that
|
|
doesn't pass an ``attempt_id``, e.g. legacy code or tests — the
|
|
row's checkpoint is reset so the loop starts from chunk 0. This
|
|
is what prevents a completed checkpoint from any prior run
|
|
silently no-op'ing the next sync/reingest.
|
|
|
|
Best-effort: a DB outage falls back to ``0`` (fresh run from
|
|
chunk 0). The embed loop's own re-raise still ensures partial
|
|
runs don't get cached as complete.
|
|
"""
|
|
try:
|
|
with db_session() as conn:
|
|
progress = IngestChunkProgressRepository(conn).init_progress(
|
|
source_id, total_chunks, attempt_id,
|
|
)
|
|
except Exception as e:
|
|
logging.warning(
|
|
f"Could not init ingest progress for {source_id}: {e}",
|
|
exc_info=True,
|
|
)
|
|
return 0
|
|
if not progress:
|
|
return 0
|
|
last_index = progress.get("last_index", -1)
|
|
if last_index is None or last_index < 0:
|
|
return 0
|
|
return int(last_index) + 1
|
|
|
|
|
|
def _record_progress(source_id: str, last_index: int, embedded_chunks: int) -> None:
|
|
"""Best-effort checkpoint after each chunk; logged but never raised."""
|
|
try:
|
|
with db_session() as conn:
|
|
IngestChunkProgressRepository(conn).record_chunk(
|
|
source_id, last_index=last_index, embedded_chunks=embedded_chunks
|
|
)
|
|
except Exception as e:
|
|
logging.warning(
|
|
f"Could not record ingest progress for {source_id}: {e}", exc_info=True
|
|
)
|
|
|
|
|
|
def assert_index_complete(source_id: str) -> None:
|
|
"""Raise ``EmbeddingPipelineError`` if ``ingest_chunk_progress``
|
|
shows a partial embed for ``source_id``.
|
|
|
|
Defense-in-depth tripwire that workers run after
|
|
``embed_and_store_documents`` to catch any future swallow path
|
|
that bypasses the function's own re-raise — the chunk-progress
|
|
row is the authoritative record of how many chunks landed.
|
|
No-op when no row exists (zero-doc validation raised before init,
|
|
or progress repo was unreachable).
|
|
"""
|
|
try:
|
|
with db_session() as conn:
|
|
progress = IngestChunkProgressRepository(conn).get_progress(source_id)
|
|
except Exception as e:
|
|
logging.warning(
|
|
f"assert_index_complete: progress lookup failed for "
|
|
f"{source_id}: {e}",
|
|
exc_info=True,
|
|
)
|
|
return
|
|
if not progress:
|
|
return
|
|
embedded = int(progress.get("embedded_chunks") or 0)
|
|
total = int(progress.get("total_chunks") or 0)
|
|
if embedded < total:
|
|
raise EmbeddingPipelineError(
|
|
f"partial index for source {source_id}: "
|
|
f"{embedded}/{total} chunks embedded"
|
|
)
|
|
|
|
|
|
def embed_and_store_documents(
|
|
docs: List[Any],
|
|
folder_name: str,
|
|
source_id: str,
|
|
task_status: Any,
|
|
*,
|
|
attempt_id: Optional[str] = None,
|
|
user_id: Optional[str] = None,
|
|
) -> None:
|
|
"""Embeds documents and stores them in a vector store.
|
|
|
|
Resumable across Celery autoretries of the *same* task: when
|
|
``attempt_id`` matches the stored checkpoint's ``attempt_id``,
|
|
the loop resumes from ``last_index + 1``. A different
|
|
``attempt_id`` (a fresh sync / reingest invocation) resets the
|
|
checkpoint so the index is rebuilt from chunk 0 — this is what
|
|
keeps a completed checkpoint from poisoning the next sync.
|
|
|
|
Args:
|
|
docs: List of documents to be embedded and stored.
|
|
folder_name: Directory to save the vector store.
|
|
source_id: Unique identifier for the source.
|
|
task_status: Task state manager for progress updates.
|
|
attempt_id: Stable id of the current task invocation,
|
|
typically ``self.request.id`` from the Celery task body.
|
|
``None`` is treated as a fresh attempt every time.
|
|
user_id: When provided, per-percent SSE progress events are
|
|
published to ``user:{user_id}`` for the in-app upload toast.
|
|
``None`` is the safe default — workers without a user
|
|
context (e.g. background syncs) skip the publish.
|
|
|
|
Returns:
|
|
None
|
|
|
|
Raises:
|
|
OSError: If unable to create folder or save vector store.
|
|
EmbeddingPipelineError: If a chunk fails after retries.
|
|
"""
|
|
# Ensure the folder exists
|
|
if not os.path.exists(folder_name):
|
|
os.makedirs(folder_name)
|
|
|
|
# Validate docs is not empty
|
|
if not docs:
|
|
raise ValueError("No documents to embed - check file format and extension")
|
|
|
|
total_docs = len(docs)
|
|
# Atomic upsert that preserves checkpoint state on attempt-id match
|
|
# (autoretry of same task) and resets it on mismatch (fresh sync /
|
|
# reingest). Returns the new resume index — 0 means "start fresh".
|
|
resume_index = _init_progress_and_resume_index(
|
|
source_id, total_docs, attempt_id,
|
|
)
|
|
is_resume = resume_index > 0
|
|
|
|
# Initialize vector store
|
|
if settings.VECTOR_STORE == "faiss":
|
|
if is_resume:
|
|
# Load the existing FAISS index from storage so chunks
|
|
# already embedded by the prior attempt survive the
|
|
# save_local rewrite at the end of this run.
|
|
store = VectorCreator.create_vectorstore(
|
|
settings.VECTOR_STORE,
|
|
source_id=source_id,
|
|
embeddings_key=os.getenv("EMBEDDINGS_KEY"),
|
|
)
|
|
loop_start = resume_index
|
|
else:
|
|
# FAISS requires at least one doc to construct the store;
|
|
# seed with ``docs[0]`` and let the loop pick up at index 1.
|
|
store = VectorCreator.create_vectorstore(
|
|
settings.VECTOR_STORE,
|
|
docs_init=[docs[0]],
|
|
source_id=source_id,
|
|
embeddings_key=os.getenv("EMBEDDINGS_KEY"),
|
|
)
|
|
# Record the seeded chunk so single-doc ingests don't fail
|
|
# ``assert_index_complete`` — the loop never runs for
|
|
# ``total_docs == 1`` and would otherwise leave
|
|
# ``embedded_chunks`` at 0 / ``last_index`` at -1. The loop
|
|
# body's per-iteration ``_record_progress`` overshoots
|
|
# correctly for multi-chunk runs (counts seed + iterations),
|
|
# so writing this checkpoint up-front is a no-op for those.
|
|
_record_progress(source_id, last_index=0, embedded_chunks=1)
|
|
loop_start = 1
|
|
else:
|
|
store = VectorCreator.create_vectorstore(
|
|
settings.VECTOR_STORE,
|
|
source_id=source_id,
|
|
embeddings_key=os.getenv("EMBEDDINGS_KEY"),
|
|
)
|
|
# Only wipe the index on a fresh run — a resume must keep the
|
|
# chunks that earlier attempts already embedded.
|
|
if not is_resume:
|
|
store.delete_index()
|
|
loop_start = resume_index
|
|
|
|
if is_resume and loop_start >= total_docs:
|
|
# Nothing left to do; the loop runs zero iterations and
|
|
# downstream finalize logic still executes. This is only
|
|
# reachable on a same-attempt retry of a task whose previous
|
|
# attempt finished — typically a Celery acks_late redelivery
|
|
# after the task already returned. The ``assert_index_complete``
|
|
# tripwire still validates ``embedded == total`` afterwards.
|
|
loop_start = total_docs
|
|
|
|
# Process and embed documents
|
|
chunk_error: Exception | None = None
|
|
failed_idx: int | None = None
|
|
last_published_pct = -1
|
|
source_id_str = str(source_id)
|
|
for idx in tqdm(
|
|
range(loop_start, total_docs),
|
|
desc="Embedding 🦖",
|
|
unit="docs",
|
|
total=total_docs - loop_start,
|
|
bar_format="{l_bar}{bar}| Time Left: {remaining}",
|
|
):
|
|
doc = docs[idx]
|
|
try:
|
|
# Update task status for progress tracking
|
|
progress = int(((idx + 1) / total_docs) * 100)
|
|
task_status.update_state(state="PROGRESS", meta={"current": progress})
|
|
|
|
# SSE push for sub-second upload-toast updates. Throttled to one
|
|
# event per percent so a 10k-chunk ingest emits ~100 events,
|
|
# not 10k. The Celery update_state above stays the source of
|
|
# truth for the polling-fallback path.
|
|
if user_id and progress > last_published_pct:
|
|
publish_user_event(
|
|
user_id,
|
|
"source.ingest.progress",
|
|
{
|
|
"current": progress,
|
|
"total": total_docs,
|
|
"embedded_chunks": idx + 1,
|
|
"stage": "embedding",
|
|
},
|
|
scope={"kind": "source", "id": source_id_str},
|
|
)
|
|
last_published_pct = progress
|
|
|
|
# Add document to vector store
|
|
add_text_to_store_with_retry(store, doc, source_id)
|
|
_record_progress(source_id, last_index=idx, embedded_chunks=idx + 1)
|
|
except Exception as e:
|
|
chunk_error = e
|
|
failed_idx = idx
|
|
logging.error(f"Error embedding document {idx}: {e}", exc_info=True)
|
|
logging.info(f"Saving progress at document {idx} out of {total_docs}")
|
|
try:
|
|
store.save_local(folder_name)
|
|
logging.info("Progress saved successfully")
|
|
except Exception as save_error:
|
|
logging.error(f"CRITICAL: Failed to save progress: {save_error}", exc_info=True)
|
|
# Continue without breaking to attempt final save
|
|
break
|
|
|
|
# Save the vector store
|
|
if settings.VECTOR_STORE == "faiss":
|
|
try:
|
|
store.save_local(folder_name)
|
|
logging.info("Vector store saved successfully.")
|
|
except Exception as e:
|
|
logging.error(f"CRITICAL: Failed to save final vector store: {e}", exc_info=True)
|
|
raise OSError(f"Unable to save vector store to {folder_name}: {e}") from e
|
|
else:
|
|
logging.info("Vector store saved successfully.")
|
|
|
|
# Re-raise after the partial save: the chunks that *did* embed are
|
|
# flushed to disk and recorded in ``ingest_chunk_progress``, so a
|
|
# Celery autoretry resumes via ``_read_resume_index`` and only
|
|
# re-runs the failed-and-after chunks. Without the raise, the
|
|
# task body returns success and ``with_idempotency`` finalises
|
|
# ``task_dedup`` as ``completed`` for a partial index — poisoning
|
|
# the cache for 24h.
|
|
if chunk_error is not None:
|
|
raise EmbeddingPipelineError(
|
|
f"embed failure at chunk {failed_idx}/{total_docs} "
|
|
f"for source {source_id}"
|
|
) from chunk_error
|