feat: AI-added records save with placeholders + "Added by AI" provenance

Stop blocking AI imports/proposals on missing non-critical fields. Records
the chat agent drafts now save with safe placeholders, auto-generated file
numbers, and a source="ai" marker that surfaces an "Added by AI" badge so a
clinician can review/edit them later.

Backend:
- add `source` (manual|ai) column to patients/appointments/prescriptions
  (migration 0014) + canonical types, services, validation schemas
- relax patient/appointment validation: empty file number allowed, demographic
  + type/provider/initials fall back to placeholders (initials derived from name)
- patients.generateFileNumber() auto-assigns an MRN when one is missing
- proposeAppointment accepts a name when no file number resolves; AI commits +
  /api/ai/import stamp source="ai"

Frontend:
- `source` on Appointment/Patient/Prescription types; AI commits send source="ai"
- reusable <AiBadge> shown on the Patients table/detail and prescriptions list

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

backend/src/services/ai/tools.ts

@@ -248,28 +248,41 @@ export function createChatTools(ctx: ToolContext) {
 
     proposeAppointment: tool({
       description:
-        "Propose a new appointment for the clinician to approve. Does NOT save — it shows an approval card; the clinician confirms before anything is written. Provide the patient's file number (MRN); name/initials are filled from the record.",
+        "Propose a new appointment for the clinician to approve. Does NOT save — it shows an approval card; the clinician confirms before anything is written. Prefer the patient's file number (MRN), which fills name/initials from the record. If the file number is unknown (e.g. parsing a schedule export), pass the patient's name instead; type/provider may be omitted and will be filled with placeholders for the clinician to edit.",
       inputSchema: z.object({
-        fileNumber: z.string().describe("Patient file number / MRN (may be a token)"),
+        fileNumber: z
+          .string()
+          .optional()
+          .describe("Patient file number / MRN (may be a token); omit if unknown"),
+        name: z
+          .string()
+          .optional()
+          .describe("Patient name — use when no file number is known"),
         date: z.string().describe("Appointment date, YYYY-MM-DD"),
         time: z.string().describe("Appointment time, HH:mm (24h)"),
-        type: z.string().describe("Visit type, e.g. Follow-up, Consultation"),
-        provider: z.string().describe("Provider/clinician name"),
+        type: z
+          .string()
+          .optional()
+          .describe("Visit type, e.g. Follow-up, Consultation"),
+        provider: z.string().optional().describe("Provider/clinician name"),
       }),
-      execute: async ({ fileNumber, date, time, type, provider }) => {
-        step(`Drafting appointment for patient ${fileNumber}`);
-        const patient = await resolvePatient(fileNumber);
-        if (!patient) {
+      execute: async ({ fileNumber, name, date, time, type, provider }) => {
+        step(`Drafting appointment for ${fileNumber ?? name ?? "patient"}`);
+        const patient = fileNumber ? await resolvePatient(fileNumber) : null;
+        // A name (resolved or supplied) is the minimum needed to draft a row.
+        const resolvedName = patient?.name ?? (name ? veil.rehydrate(name) : undefined);
+        if (!resolvedName) {
           return { ok: false as const, reason: "patient_not_found" as const };
         }
         const candidate = {
-          fileNumber: patient.fileNumber,
-          name: patient.name,
-          initials: patient.initials,
+          fileNumber: patient?.fileNumber ?? "",
+          name: resolvedName,
+          initials: patient?.initials ?? "",
           date,
           time,
-          type,
-          provider,
+          type: type ?? "",
+          provider: provider ?? "",
+          source: "ai" as const,
         };
         const parsed = appointmentInputSchema.safeParse(candidate);
         const issues = parsed.success
@@ -369,6 +382,7 @@ export function createChatTools(ctx: ToolContext) {
           frequency,
           duration: duration ?? null,
           notes: notes ?? null,
+          source: "ai" as const,
         };
         const parsed = prescriptionInputSchema.safeParse(candidate);
         const issues = parsed.success

backend/src/services/appointments.ts

@@ -22,6 +22,7 @@ function toAppointment(row: AppointmentRow): Appointment {
     type: row.type,
     provider: row.provider,
     status: row.status,
+    source: row.source,
     createdAt: row.createdAt.toISOString(),
     updatedAt: row.updatedAt.toISOString(),
   };
@@ -38,6 +39,7 @@ function columns(orgId: string, input: AppointmentInput, createdBy?: string) {
     type: input.type,
     provider: input.provider,
     status: input.status,
+    source: input.source,
     ...(createdBy ? { createdBy } : {}),
   };
 }

backend/src/services/patients.ts

@@ -65,6 +65,7 @@ function toPatient(row: PatientRow, children: Children): Patient {
     labs: children.labs,
     labTrend: row.labTrend,
     encounters: children.encounters,
+    source: row.source,
   };
 }
 
@@ -119,6 +120,7 @@ function patientColumns(orgId: string, input: PatientInput, createdBy?: string)
     vitalsTakenAt: input.vitals.takenAt,
     vitalsTrend: input.vitalsTrend,
     labTrend: input.labTrend,
+    source: input.source,
     ...(createdBy ? { createdBy } : {}),
   };
 }
@@ -141,6 +143,7 @@ function demographicColumns(
     primaryProviderId: input.primaryProviderId ?? null,
     status: input.status,
     initials: input.initials,
+    source: input.source,
     alerts: [] as string[],
     vitalsBp: "",
     vitalsHr: "",
@@ -293,6 +296,24 @@ function isUniqueViolation(err: unknown): boolean {
   );
 }
 
+// Pick the next free numeric file number for an org (max existing digit-only
+// file number + 1, floored at 10000). Used when an AI import omits one. The
+// unique index still guards against a race, surfacing a 409.
+export async function generateFileNumber(orgId: string): Promise<string> {
+  const [r] = await db
+    .select({
+      max: sql<number>`coalesce(max((${patients.fileNumber})::bigint), 9999)`,
+    })
+    .from(patients)
+    .where(
+      and(
+        eq(patients.organizationId, orgId),
+        sql`${patients.fileNumber} ~ '^[0-9]+$'`,
+      ),
+    );
+  return String(Number(r?.max ?? 9999) + 1);
+}
+
 export async function listPatients(
   orgId: string,
   demographicsOnly = false,
@@ -366,9 +387,13 @@ export async function transferPatient(
 export async function createPatient(
   orgId: string,
   userId: string,
-  input: PatientInput,
+  rawInput: PatientInput,
   demographicsOnly = false,
 ): Promise<Patient> {
+  // Auto-assign a file number when one wasn't supplied (e.g. AI imports).
+  const input: PatientInput = rawInput.fileNumber
+    ? rawInput
+    : { ...rawInput, fileNumber: await generateFileNumber(orgId) };
   try {
     return await db.transaction(async (tx) => {
       // Reception registers demographics only — clinical input is ignored and

backend/src/services/prescriptions.ts

@@ -25,6 +25,7 @@ function toPrescription(row: PrescriptionRow): Prescription {
     status: row.status,
     duration: row.duration,
     notes: row.notes,
+    source: row.source,
     createdAt: row.createdAt.toISOString(),
     updatedAt: row.updatedAt.toISOString(),
   };
@@ -43,6 +44,7 @@ function columns(orgId: string, input: PrescriptionInput, createdBy?: string) {
     status: input.status,
     duration: input.duration ?? null,
     notes: input.notes ?? null,
+    source: input.source,
     // Only set prescribedAt when supplied; otherwise the column default (today).
     ...(input.prescribedAt ? { prescribedAt: input.prescribedAt } : {}),
     ...(createdBy ? { createdBy } : {}),