Resolve ai-service directly from the RAG routes, never the gateway

apps/web/app/api/suggest/route.ts

@@ -2,8 +2,13 @@ import { NextResponse } from "next/server";
 
 export const runtime = "nodejs";
 
-const API_GATEWAY_URL =
-  process.env.API_GATEWAY_URL ?? process.env.AI_SERVICE_URL ?? "http://localhost:8000";
+// RAG never goes through api-gateway. The gateway proxies `/auth/*` only --
+// apps/api-gateway/src/proxy/ holds a single AuthProxyController -- so
+// preferring AI_SERVICE_URL here pointed every RAG call at a service with no
+// such route the moment apiGateway was enabled, breaking chat, suggest,
+// history, sections, section-text and feedback at once. Resolve ai-service
+// directly and let AI_SERVICE_URL mean what its name says: auth only.
+const AI_SERVICE_URL = process.env.AI_SERVICE_URL ?? "http://localhost:8000";
 
 export async function GET(request: Request) {
   const { searchParams } = new URL(request.url);
@@ -14,9 +19,9 @@ export async function GET(request: Request) {
   }
 
   try {
-    const targetUrl = API_GATEWAY_URL.includes("/v1/rag")
-      ? `${API_GATEWAY_URL.replace(/\/query$/, "/suggest")}?q=${encodeURIComponent(q)}`
-      : `${API_GATEWAY_URL}/v1/rag/suggest?q=${encodeURIComponent(q)}`;
+    const targetUrl = AI_SERVICE_URL.includes("/v1/rag")
+      ? `${AI_SERVICE_URL.replace(/\/query$/, "/suggest")}?q=${encodeURIComponent(q)}`
+      : `${AI_SERVICE_URL}/v1/rag/suggest?q=${encodeURIComponent(q)}`;
 
     const upstream = await fetch(targetUrl, {
       method: "GET",