@contentgrowth/llm-service 1.4.0 → 1.4.2

package/dist/index.d.cts

@@ -2,6 +2,7 @@ import OpenAI from 'openai';
 import Anthropic from '@anthropic-ai/sdk';
 import { GoogleGenAI } from '@google/genai';
 export { Modality } from '@google/genai';
+import { GoogleTokenManager } from './utils/google-auth.cjs';
 
 declare namespace FINISH_REASONS {
     let COMPLETED: string;
@@ -359,11 +360,14 @@ declare class LLMService {
     getVideoGenerationStatus(operationName: any, tenantId: any): Promise<any>;
     /**
      * Generate an image
-     * Falls back to system keys if tenant doesn't have image capability enabled
+     *
+     * Note: The caller (backend) is responsible for capability checks and routing.
+     * This method simply delegates to the configured provider.
+     *
      * @param {string} prompt - Text description of the image
      * @param {string} tenantId - Tenant identifier
      * @param {string} systemPrompt - System instructions for generation
-     * @param {Object} options - Generation options (aspectRatio, images, etc.)
+     * @param {Object} options - Generation options (aspectRatio, images, model, etc.)
      */
     imageGeneration(prompt: string, tenantId: string, systemPrompt: string, options?: any): Promise<any>;
     /**
@@ -807,98 +811,6 @@ declare function handleApiError(error: Error, operation?: string, context?: stri
  */
 declare function sanitizeError(error: Error, context?: string): Error;
 
-/**
- * Google OAuth2 Token Manager
- *
- * Handles token generation, caching, and automatic refresh for
- * Google Cloud service accounts. Tokens are cached and automatically
- * refreshed when they expire (with a 5-minute safety buffer).
- *
- * @example
- * const sa = parseGoogleCredentials(credentials);
- * const tokenManager = new GoogleTokenManager(sa);
- *
- * // Get token (cached or fresh)
- * const token = await tokenManager.getToken();
- *
- * // Force refresh
- * tokenManager.invalidate();
- * const newToken = await tokenManager.getToken();
- */
-declare class GoogleTokenManager {
-    /**
-     * @param {object} serviceAccount - Parsed service account with client_email and private_key
-     * @param {object} options - Optional configuration
-     * @param {string} options.scope - OAuth2 scope (default: cloud-platform)
-     * @param {number} options.tokenLifetime - Token lifetime in seconds (default: 3600)
-     */
-    constructor(serviceAccount: object, options?: {
-        scope: string;
-        tokenLifetime: number;
-    });
-    clientEmail: any;
-    privateKey: any;
-    projectId: any;
-    scope: string;
-    tokenLifetime: number;
-    _tokenCache: string;
-    _expiresAt: number;
-    /**
-     * Get a valid access token (cached or fresh)
-     *
-     * @returns {Promise<string>} OAuth2 access token
-     */
-    getToken(): Promise<string>;
-    /**
-     * Clear cached token (force refresh on next getToken call)
-     */
-    invalidate(): void;
-    /**
-     * Check if cached token is still valid
-     *
-     * @returns {boolean} True if token is valid
-     */
-    isValid(): boolean;
-    /**
-     * Get time until token expires (in seconds)
-     *
-     * @returns {number} Seconds until expiration (0 if no token or expired)
-     */
-    getTimeToExpiry(): number;
-    /**
-     * Generate OAuth2 token via JWT flow
-     *
-     * @private
-     * @returns {Promise<string>} Access token
-     */
-    private _generateToken;
-    /**
-     * Sign JWT using service account private key
-     *
-     * @private
-     * @param {object} header - JWT header
-     * @param {object} payload - JWT payload
-     * @returns {Promise<string>} Signed JWT
-     */
-    private _signJWT;
-    /**
-     * Import PEM private key for signing
-     *
-     * @private
-     * @param {string} pemKey - PEM formatted private key
-     * @returns {Promise<CryptoKey>} Imported key
-     */
-    private _importPrivateKey;
-    /**
-     * Base64 URL encode (without padding)
-     *
-     * @private
-     * @param {string|ArrayBuffer} input - Data to encode
-     * @returns {string} Base64 URL encoded string
-     */
-    private _base64UrlEncode;
-}
-
 /**
  * Transcription Service - Separate from LLM Service
  * Handles audio-to-text transcription using various providers.

package/dist/index.d.ts

@@ -2,6 +2,7 @@ import OpenAI from 'openai';
 import Anthropic from '@anthropic-ai/sdk';
 import { GoogleGenAI } from '@google/genai';
 export { Modality } from '@google/genai';
+import { GoogleTokenManager } from './utils/google-auth.js';
 
 declare namespace FINISH_REASONS {
     let COMPLETED: string;
@@ -359,11 +360,14 @@ declare class LLMService {
     getVideoGenerationStatus(operationName: any, tenantId: any): Promise<any>;
     /**
      * Generate an image
-     * Falls back to system keys if tenant doesn't have image capability enabled
+     *
+     * Note: The caller (backend) is responsible for capability checks and routing.
+     * This method simply delegates to the configured provider.
+     *
      * @param {string} prompt - Text description of the image
      * @param {string} tenantId - Tenant identifier
      * @param {string} systemPrompt - System instructions for generation
-     * @param {Object} options - Generation options (aspectRatio, images, etc.)
+     * @param {Object} options - Generation options (aspectRatio, images, model, etc.)
      */
     imageGeneration(prompt: string, tenantId: string, systemPrompt: string, options?: any): Promise<any>;
     /**
@@ -807,98 +811,6 @@ declare function handleApiError(error: Error, operation?: string, context?: stri
  */
 declare function sanitizeError(error: Error, context?: string): Error;
 
-/**
- * Google OAuth2 Token Manager
- *
- * Handles token generation, caching, and automatic refresh for
- * Google Cloud service accounts. Tokens are cached and automatically
- * refreshed when they expire (with a 5-minute safety buffer).
- *
- * @example
- * const sa = parseGoogleCredentials(credentials);
- * const tokenManager = new GoogleTokenManager(sa);
- *
- * // Get token (cached or fresh)
- * const token = await tokenManager.getToken();
- *
- * // Force refresh
- * tokenManager.invalidate();
- * const newToken = await tokenManager.getToken();
- */
-declare class GoogleTokenManager {
-    /**
-     * @param {object} serviceAccount - Parsed service account with client_email and private_key
-     * @param {object} options - Optional configuration
-     * @param {string} options.scope - OAuth2 scope (default: cloud-platform)
-     * @param {number} options.tokenLifetime - Token lifetime in seconds (default: 3600)
-     */
-    constructor(serviceAccount: object, options?: {
-        scope: string;
-        tokenLifetime: number;
-    });
-    clientEmail: any;
-    privateKey: any;
-    projectId: any;
-    scope: string;
-    tokenLifetime: number;
-    _tokenCache: string;
-    _expiresAt: number;
-    /**
-     * Get a valid access token (cached or fresh)
-     *
-     * @returns {Promise<string>} OAuth2 access token
-     */
-    getToken(): Promise<string>;
-    /**
-     * Clear cached token (force refresh on next getToken call)
-     */
-    invalidate(): void;
-    /**
-     * Check if cached token is still valid
-     *
-     * @returns {boolean} True if token is valid
-     */
-    isValid(): boolean;
-    /**
-     * Get time until token expires (in seconds)
-     *
-     * @returns {number} Seconds until expiration (0 if no token or expired)
-     */
-    getTimeToExpiry(): number;
-    /**
-     * Generate OAuth2 token via JWT flow
-     *
-     * @private
-     * @returns {Promise<string>} Access token
-     */
-    private _generateToken;
-    /**
-     * Sign JWT using service account private key
-     *
-     * @private
-     * @param {object} header - JWT header
-     * @param {object} payload - JWT payload
-     * @returns {Promise<string>} Signed JWT
-     */
-    private _signJWT;
-    /**
-     * Import PEM private key for signing
-     *
-     * @private
-     * @param {string} pemKey - PEM formatted private key
-     * @returns {Promise<CryptoKey>} Imported key
-     */
-    private _importPrivateKey;
-    /**
-     * Base64 URL encode (without padding)
-     *
-     * @private
-     * @param {string|ArrayBuffer} input - Data to encode
-     * @returns {string} Base64 URL encoded string
-     */
-    private _base64UrlEncode;
-}
-
 /**
  * Transcription Service - Separate from LLM Service
  * Handles audio-to-text transcription using various providers.

package/dist/index.js

@@ -1877,21 +1877,16 @@ var LLMService = class {
   }
   /**
    * Generate an image
-   * Falls back to system keys if tenant doesn't have image capability enabled
+   * 
+   * Note: The caller (backend) is responsible for capability checks and routing.
+   * This method simply delegates to the configured provider.
+   * 
    * @param {string} prompt - Text description of the image
    * @param {string} tenantId - Tenant identifier
    * @param {string} systemPrompt - System instructions for generation
-   * @param {Object} options - Generation options (aspectRatio, images, etc.)
+   * @param {Object} options - Generation options (aspectRatio, images, model, etc.)
    */
   async imageGeneration(prompt, tenantId, systemPrompt, options = {}) {
-    var _a;
-    if (tenantId) {
-      const config = await ConfigManager.getConfig(tenantId, this.env);
-      if (config.isTenantOwned && !((_a = config.capabilities) == null ? void 0 : _a.image)) {
-        console.log(`[LLMService] Tenant ${tenantId} BYOK doesn't have image capability. Using system keys.`);
-        tenantId = null;
-      }
-    }
     const provider = await this._getProvider(tenantId);
     return provider.imageGeneration(prompt, systemPrompt, options);
   }