@exulu/backend 3.3.0 → 3.4.0

package/dist/{catalog-UGTDNMDM.js → catalog-PZTI2MJZ.js}

@@ -3,7 +3,7 @@ import {
   __resetLiteLLMCatalogCacheForTesting,
   fetchLiteLLMCatalog,
   findLiteLLMModel
-} from "./chunk-7CCMW3IW.js";
+} from "./chunk-NUVMV5FC.js";
 export {
   __resetLiteLLMCatalogCacheForTesting,
   fetchLiteLLMCatalog,

package/dist/{chunk-7CCMW3IW.js → chunk-NUVMV5FC.js}

@@ -1,5 +1,45 @@
 import "dotenv/config";
 
+// src/exulu/litellm/env.ts
+var LiteLLMAdminError = class extends Error {
+  constructor(message, status) {
+    super(message);
+    this.status = status;
+    this.name = "LiteLLMAdminError";
+  }
+};
+function litellmBase() {
+  const host = process.env.LITELLM_HOST ?? "127.0.0.1";
+  const port = process.env.LITELLM_PORT ?? "4000";
+  const masterKey = process.env.LITELLM_MASTER_KEY;
+  if (!masterKey) {
+    throw new LiteLLMAdminError("LITELLM_MASTER_KEY is not configured.");
+  }
+  return { url: `http://${host}:${port}`, masterKey };
+}
+function resolveLiteLLMTarget() {
+  const rawBase = process.env.LITELLM_BASE_URL;
+  if (rawBase && rawBase.trim().length > 0) {
+    const apiKey = process.env.EXULU_API_KEY;
+    if (!apiKey) {
+      throw new Error("EXULU_API_KEY is required when LITELLM_BASE_URL is set (remote LiteLLM client mode).");
+    }
+    return {
+      baseUrl: rawBase.trim().replace(/\/+$/, ""),
+      authHeaders: { "exulu-api-key": apiKey },
+      remote: true
+    };
+  }
+  const host = process.env.LITELLM_HOST ?? "127.0.0.1";
+  const port = process.env.LITELLM_PORT ?? "4000";
+  const masterKey = process.env.LITELLM_MASTER_KEY;
+  return {
+    baseUrl: `http://${host}:${port}`,
+    authHeaders: masterKey ? { Authorization: `Bearer ${masterKey}` } : {},
+    remote: false
+  };
+}
+
 // src/exulu/litellm/catalog.ts
 var CACHE_TTL_MS = 3e4;
 var _cache;
@@ -11,14 +51,18 @@ var fetchLiteLLMCatalog = async () => {
   if (_cache && _cache.expiresAt > Date.now()) {
     return _cache.items;
   }
-  const host = process.env.LITELLM_HOST ?? "127.0.0.1";
-  const port = process.env.LITELLM_PORT ?? "4000";
-  const masterKey = process.env.LITELLM_MASTER_KEY;
-  if (!masterKey) return [];
+  let baseUrl;
+  let authHeaders;
+  try {
+    ({ baseUrl, authHeaders } = resolveLiteLLMTarget());
+  } catch {
+    return [];
+  }
+  if (Object.keys(authHeaders).length === 0) return [];
   try {
-    const res = await fetch(`http://${host}:${port}/model/info`, {
+    const res = await fetch(`${baseUrl}/model/info`, {
       method: "GET",
-      headers: { Authorization: `Bearer ${masterKey}` }
+      headers: authHeaders
     });
     if (!res.ok) {
       console.error(
@@ -74,6 +118,9 @@ var findLiteLLMModel = async (modelName) => {
 };
 
 export {
+  LiteLLMAdminError,
+  litellmBase,
+  resolveLiteLLMTarget,
   __resetLiteLLMCatalogCacheForTesting,
   fetchLiteLLMCatalog,
   findLiteLLMModel

package/dist/{chunk-5FTX543Z.js → chunk-UIIUBZCO.js}

@@ -1,7 +1,10 @@
 import "dotenv/config";
 import {
-  findLiteLLMModel
-} from "./chunk-7CCMW3IW.js";
+  LiteLLMAdminError,
+  findLiteLLMModel,
+  litellmBase,
+  resolveLiteLLMTarget
+} from "./chunk-NUVMV5FC.js";
 
 // src/templates/tools/convert-exulu-tools-to-ai-sdk-tools.ts
 import { S3Client as S3Client3, PutObjectCommand as PutObjectCommand3, S3ServiceException } from "@aws-sdk/client-s3";
@@ -224,12 +227,11 @@ var waitForLiteLLMReady = async () => {
   if (!isLiteLLMEnabled()) return;
   if (_clientMode) {
     if (internal.state === "ready") return;
-    const host = process.env.LITELLM_HOST ?? "127.0.0.1";
-    const port = process.env.LITELLM_PORT ?? "4000";
-    const url = `http://${host}:${port}/health/liveliness`;
+    const { baseUrl, authHeaders, remote } = resolveLiteLLMTarget();
+    const url = remote ? `${baseUrl}/v1/models` : `${baseUrl}/health/liveliness`;
     let res;
     try {
-      res = await fetch(url, { method: "GET" });
+      res = await fetch(url, { method: "GET", headers: remote ? authHeaders : {} });
     } catch (err) {
       throw new Error(
         `LiteLLM proxy not reachable at ${url} (is the Exulu server process running?): ${err.message}`
@@ -531,24 +533,6 @@ async function postgresClient() {
   };
 }
 
-// src/exulu/litellm/env.ts
-var LiteLLMAdminError = class extends Error {
-  constructor(message, status) {
-    super(message);
-    this.status = status;
-    this.name = "LiteLLMAdminError";
-  }
-};
-function litellmBase() {
-  const host = process.env.LITELLM_HOST ?? "127.0.0.1";
-  const port = process.env.LITELLM_PORT ?? "4000";
-  const masterKey = process.env.LITELLM_MASTER_KEY;
-  if (!masterKey) {
-    throw new LiteLLMAdminError("LITELLM_MASTER_KEY is not configured.");
-  }
-  return { url: `http://${host}:${port}`, masterKey };
-}
-
 // src/exulu/litellm/admin-client.ts
 async function call(path3, body) {
   const { url, masterKey } = litellmBase();
@@ -1042,9 +1026,7 @@ var getLiteLLMProvider = ({
   team,
   routine
 }) => {
-  const host = process.env.LITELLM_HOST ?? "127.0.0.1";
-  const port = process.env.LITELLM_PORT ?? "4000";
-  const masterKey = process.env.LITELLM_MASTER_KEY;
+  const { baseUrl, authHeaders } = resolveLiteLLMTarget();
   const tags = buildTags({
     user_id: user?.id,
     role_id: role?.id,
@@ -1059,16 +1041,13 @@ var getLiteLLMProvider = ({
     routine_id: routine?.id,
     routine_name: routine?.name
   });
-  if (!masterKey) {
-    throw new ResolveModelError(
-      "LITELLM_NOT_CONFIGURED",
-      "LITELLM_MASTER_KEY is required when EXULU_USE_LITELLM=true"
-    );
-  }
   return createOpenAICompatible({
     name: "litellm",
-    baseURL: `http://${host}:${port}/v1`,
-    apiKey: masterKey,
+    baseURL: `${baseUrl}/v1`,
+    // createOpenAICompatible requires a non-empty apiKey; real auth for remote mode is the
+    // exulu-api-key header (added via `headers`). The passthrough strips/ignores Authorization.
+    apiKey: process.env.LITELLM_MASTER_KEY ?? process.env.EXULU_API_KEY ?? "x",
+    headers: authHeaders,
     fetch: createTaggedFetch(tags),
     // Without this flag the openai-compatible provider strips any
     // responseFormat.schema before sending and warns
@@ -1733,7 +1712,7 @@ var ExuluTool = class _ExuluTool {
     if (!agent) {
       throw new Error("Agent not found.");
     }
-    const { convertExuluToolsToAiSdkTools: convertExuluToolsToAiSdkTools2 } = await import("./convert-exulu-tools-to-ai-sdk-tools-WQWYMU7G.js");
+    const { convertExuluToolsToAiSdkTools: convertExuluToolsToAiSdkTools2 } = await import("./convert-exulu-tools-to-ai-sdk-tools-AB4F55SD.js");
     const tools = await convertExuluToolsToAiSdkTools2(
       [this],
       [],
@@ -1939,7 +1918,6 @@ var checkLicense = () => {
 };
 
 // src/exulu/resolve-reranker.ts
-import "fs";
 var ResolveRerankerError = class extends Error {
   constructor(code, message) {
     super(message);
@@ -1963,15 +1941,7 @@ async function resolveReranker(input) {
       `LiteLLM is not ready: ${err.message}`
     );
   }
-  const host = process.env.LITELLM_HOST ?? "127.0.0.1";
-  const port = process.env.LITELLM_PORT ?? "4000";
-  const masterKey = process.env.LITELLM_MASTER_KEY;
-  if (!masterKey) {
-    throw new ResolveRerankerError(
-      "LITELLM_NOT_CONFIGURED",
-      "LITELLM_MASTER_KEY is required when EXULU_USE_LITELLM=true"
-    );
-  }
+  const { baseUrl, authHeaders } = resolveLiteLLMTarget();
   const resolvedUserId = user?.id ?? userId;
   if (resolvedUserId) await provisionDefaultUserBudget(resolvedUserId);
   const role = user?.role;
@@ -1991,7 +1961,7 @@ async function resolveReranker(input) {
     routine_name: routine?.name,
     context_name: contextName
   });
-  const endpoint = `http://${host}:${port}/v1/rerank`;
+  const endpoint = `${baseUrl}/v1/rerank`;
   const rerank = async (query, chunks, opts) => {
     try {
       if (chunks.length === 0) return [];
@@ -2001,7 +1971,7 @@ async function resolveReranker(input) {
       const res = await fetch(endpoint, {
         method: "POST",
         headers: {
-          Authorization: `Bearer ${masterKey}`,
+          ...authHeaders,
           "Content-Type": "application/json"
         },
         body: JSON.stringify({
@@ -4371,6 +4341,9 @@ var checkItemWriteAccess = async (context, record, user) => {
   if (record.rights_mode === "private") {
     return record.created_by != null && String(record.created_by) === String(user.id);
   }
+  if (record.created_by != null && String(record.created_by) === String(user.id)) {
+    return true;
+  }
   const validRightsModes = ["users", "roles", "teams"];
   if (!validRightsModes.includes(record.rights_mode)) {
     return false;
@@ -7258,23 +7231,23 @@ ${JSON.stringify(config, null, 2)}`
 
 // src/exulu/audit/sink.ts
 import { randomUUID as randomUUID4 } from "crypto";
-import { promises as fs2 } from "fs";
+import { promises as fs } from "fs";
 import path2 from "path";
 var createFsSpoolStore = (dir) => ({
   write: async (name, body) => {
-    await fs2.mkdir(dir, { recursive: true });
-    await fs2.writeFile(path2.join(dir, name), body, "utf8");
+    await fs.mkdir(dir, { recursive: true });
+    await fs.writeFile(path2.join(dir, name), body, "utf8");
   },
   list: async () => {
     try {
-      return (await fs2.readdir(dir)).filter((f) => f.endsWith(".ndjson"));
+      return (await fs.readdir(dir)).filter((f) => f.endsWith(".ndjson"));
     } catch {
       return [];
     }
   },
-  read: async (name) => fs2.readFile(path2.join(dir, name), "utf8"),
+  read: async (name) => fs.readFile(path2.join(dir, name), "utf8"),
   remove: async (name) => {
-    await fs2.rm(path2.join(dir, name), { force: true });
+    await fs.rm(path2.join(dir, name), { force: true });
   }
 });
 var pad = (n) => String(n).padStart(2, "0");
@@ -8155,7 +8128,6 @@ export {
   buildTags,
   budgetTagFor,
   createTaggedFetch,
-  LiteLLMAdminError,
   tagDelete,
   tagInfo,
   getTagDailyActivity,

package/dist/{convert-exulu-tools-to-ai-sdk-tools-WQWYMU7G.js → convert-exulu-tools-to-ai-sdk-tools-AB4F55SD.js}

@@ -2,8 +2,8 @@ import "dotenv/config";
 import {
   convertExuluToolsToAiSdkTools,
   hydrateVariables
-} from "./chunk-5FTX543Z.js";
-import "./chunk-7CCMW3IW.js";
+} from "./chunk-UIIUBZCO.js";
+import "./chunk-NUVMV5FC.js";
 export {
   convertExuluToolsToAiSdkTools,
   hydrateVariables