@exulu/backend 3.3.1 → 3.5.0

package/dist/{catalog-UGTDNMDM.js → catalog-3QLU2G7R.js}

@@ -3,7 +3,7 @@ import {
   __resetLiteLLMCatalogCacheForTesting,
   fetchLiteLLMCatalog,
   findLiteLLMModel
-} from "./chunk-7CCMW3IW.js";
+} from "./chunk-4PDWNVNT.js";
 export {
   __resetLiteLLMCatalogCacheForTesting,
   fetchLiteLLMCatalog,

package/dist/{chunk-7CCMW3IW.js → chunk-4PDWNVNT.js}

@@ -1,24 +1,73 @@
 import "dotenv/config";
 
+// src/exulu/litellm/env.ts
+var LiteLLMAdminError = class extends Error {
+  constructor(message, status) {
+    super(message);
+    this.status = status;
+    this.name = "LiteLLMAdminError";
+  }
+};
+function litellmBase() {
+  const host = process.env.LITELLM_HOST ?? "127.0.0.1";
+  const port = process.env.LITELLM_PORT ?? "4000";
+  const masterKey = process.env.LITELLM_MASTER_KEY;
+  if (!masterKey) {
+    throw new LiteLLMAdminError("LITELLM_MASTER_KEY is not configured.");
+  }
+  return { url: `http://${host}:${port}`, masterKey };
+}
+var _clientMode = false;
+var isLiteLLMClientMode = () => _clientMode;
+var setLiteLLMClientMode = (value) => {
+  _clientMode = value;
+};
+function resolveLiteLLMTarget() {
+  const rawBase = process.env.LITELLM_BASE_URL;
+  if (isLiteLLMClientMode() && rawBase && rawBase.trim().length > 0) {
+    const apiKey = process.env.EXULU_API_KEY;
+    if (!apiKey) {
+      throw new Error("EXULU_API_KEY is required when LITELLM_BASE_URL is set (remote LiteLLM client mode).");
+    }
+    return {
+      baseUrl: rawBase.trim().replace(/\/+$/, ""),
+      authHeaders: { "exulu-api-key": apiKey },
+      remote: true
+    };
+  }
+  const host = process.env.LITELLM_HOST ?? "127.0.0.1";
+  const port = process.env.LITELLM_PORT ?? "4000";
+  const masterKey = process.env.LITELLM_MASTER_KEY;
+  return {
+    baseUrl: `http://${host}:${port}`,
+    authHeaders: masterKey ? { Authorization: `Bearer ${masterKey}` } : {},
+    remote: false
+  };
+}
+
 // src/exulu/litellm/catalog.ts
 var CACHE_TTL_MS = 3e4;
 var _cache;
 var __resetLiteLLMCatalogCacheForTesting = () => {
   _cache = void 0;
 };
-var fetchLiteLLMCatalog = async () => {
+var fetchFullCatalog = async () => {
   if (process.env.EXULU_USE_LITELLM !== "true") return [];
   if (_cache && _cache.expiresAt > Date.now()) {
     return _cache.items;
   }
-  const host = process.env.LITELLM_HOST ?? "127.0.0.1";
-  const port = process.env.LITELLM_PORT ?? "4000";
-  const masterKey = process.env.LITELLM_MASTER_KEY;
-  if (!masterKey) return [];
+  let baseUrl;
+  let authHeaders;
   try {
-    const res = await fetch(`http://${host}:${port}/model/info`, {
+    ({ baseUrl, authHeaders } = resolveLiteLLMTarget());
+  } catch {
+    return [];
+  }
+  if (Object.keys(authHeaders).length === 0) return [];
+  try {
+    const res = await fetch(`${baseUrl}/model/info`, {
       method: "GET",
-      headers: { Authorization: `Bearer ${masterKey}` }
+      headers: authHeaders
     });
     if (!res.ok) {
       console.error(
@@ -61,19 +110,28 @@ var fetchLiteLLMCatalog = async () => {
     }
     const uniqueItems = Array.from(map.values());
     _cache = { expiresAt: Date.now() + CACHE_TTL_MS, items: uniqueItems };
-    return uniqueItems.filter((m) => m.type !== "speech_to_text" && m.type !== "text_to_speech");
+    return uniqueItems;
   } catch (err) {
     console.error("[EXULU] litellmCatalog: failed to fetch /model/info:", err);
     return [];
   }
 };
+var fetchLiteLLMCatalog = async () => {
+  const items = await fetchFullCatalog();
+  return items.filter((m) => m.type !== "speech_to_text" && m.type !== "text_to_speech");
+};
 var findLiteLLMModel = async (modelName) => {
   if (!modelName) return void 0;
-  const items = await fetchLiteLLMCatalog();
+  const items = await fetchFullCatalog();
   return items.find((m) => m.model_name === modelName);
 };
 
 export {
+  LiteLLMAdminError,
+  litellmBase,
+  isLiteLLMClientMode,
+  setLiteLLMClientMode,
+  resolveLiteLLMTarget,
   __resetLiteLLMCatalogCacheForTesting,
   fetchLiteLLMCatalog,
   findLiteLLMModel

package/dist/{chunk-5FTX543Z.js → chunk-7AZH4ETH.js}

@@ -1,7 +1,12 @@
 import "dotenv/config";
 import {
-  findLiteLLMModel
-} from "./chunk-7CCMW3IW.js";
+  LiteLLMAdminError,
+  findLiteLLMModel,
+  isLiteLLMClientMode,
+  litellmBase,
+  resolveLiteLLMTarget,
+  setLiteLLMClientMode
+} from "./chunk-4PDWNVNT.js";
 
 // src/templates/tools/convert-exulu-tools-to-ai-sdk-tools.ts
 import { S3Client as S3Client3, PutObjectCommand as PutObjectCommand3, S3ServiceException } from "@aws-sdk/client-s3";
@@ -166,13 +171,12 @@ var supervise = async (cfg) => {
   }
 };
 var _packageRoot;
-var _clientMode = false;
 var setLiteLLMPackageRoot = (root) => {
   _packageRoot = root;
 };
 var enableLiteLLMClientMode = () => {
   if (internal.readyPromise) return;
-  _clientMode = true;
+  setLiteLLMClientMode(true);
 };
 var startLiteLLMSupervisor = async (options = {}) => {
   if (!isLiteLLMEnabled()) return;
@@ -222,14 +226,13 @@ var startLiteLLMSupervisor = async (options = {}) => {
 };
 var waitForLiteLLMReady = async () => {
   if (!isLiteLLMEnabled()) return;
-  if (_clientMode) {
+  if (isLiteLLMClientMode()) {
     if (internal.state === "ready") return;
-    const host = process.env.LITELLM_HOST ?? "127.0.0.1";
-    const port = process.env.LITELLM_PORT ?? "4000";
-    const url = `http://${host}:${port}/health/liveliness`;
+    const { baseUrl, authHeaders, remote } = resolveLiteLLMTarget();
+    const url = remote ? `${baseUrl}/v1/models` : `${baseUrl}/health/liveliness`;
     let res;
     try {
-      res = await fetch(url, { method: "GET" });
+      res = await fetch(url, { method: "GET", headers: remote ? authHeaders : {} });
     } catch (err) {
       throw new Error(
         `LiteLLM proxy not reachable at ${url} (is the Exulu server process running?): ${err.message}`
@@ -531,24 +534,6 @@ async function postgresClient() {
   };
 }
 
-// src/exulu/litellm/env.ts
-var LiteLLMAdminError = class extends Error {
-  constructor(message, status) {
-    super(message);
-    this.status = status;
-    this.name = "LiteLLMAdminError";
-  }
-};
-function litellmBase() {
-  const host = process.env.LITELLM_HOST ?? "127.0.0.1";
-  const port = process.env.LITELLM_PORT ?? "4000";
-  const masterKey = process.env.LITELLM_MASTER_KEY;
-  if (!masterKey) {
-    throw new LiteLLMAdminError("LITELLM_MASTER_KEY is not configured.");
-  }
-  return { url: `http://${host}:${port}`, masterKey };
-}
-
 // src/exulu/litellm/admin-client.ts
 async function call(path3, body) {
   const { url, masterKey } = litellmBase();
@@ -1042,9 +1027,7 @@ var getLiteLLMProvider = ({
   team,
   routine
 }) => {
-  const host = process.env.LITELLM_HOST ?? "127.0.0.1";
-  const port = process.env.LITELLM_PORT ?? "4000";
-  const masterKey = process.env.LITELLM_MASTER_KEY;
+  const { baseUrl, authHeaders } = resolveLiteLLMTarget();
   const tags = buildTags({
     user_id: user?.id,
     role_id: role?.id,
@@ -1059,16 +1042,13 @@ var getLiteLLMProvider = ({
     routine_id: routine?.id,
     routine_name: routine?.name
   });
-  if (!masterKey) {
-    throw new ResolveModelError(
-      "LITELLM_NOT_CONFIGURED",
-      "LITELLM_MASTER_KEY is required when EXULU_USE_LITELLM=true"
-    );
-  }
   return createOpenAICompatible({
     name: "litellm",
-    baseURL: `http://${host}:${port}/v1`,
-    apiKey: masterKey,
+    baseURL: `${baseUrl}/v1`,
+    // createOpenAICompatible requires a non-empty apiKey; real auth for remote mode is the
+    // exulu-api-key header (added via `headers`). The passthrough strips/ignores Authorization.
+    apiKey: process.env.LITELLM_MASTER_KEY ?? process.env.EXULU_API_KEY ?? "x",
+    headers: authHeaders,
     fetch: createTaggedFetch(tags),
     // Without this flag the openai-compatible provider strips any
     // responseFormat.schema before sending and warns
@@ -1733,7 +1713,7 @@ var ExuluTool = class _ExuluTool {
     if (!agent) {
       throw new Error("Agent not found.");
     }
-    const { convertExuluToolsToAiSdkTools: convertExuluToolsToAiSdkTools2 } = await import("./convert-exulu-tools-to-ai-sdk-tools-WQWYMU7G.js");
+    const { convertExuluToolsToAiSdkTools: convertExuluToolsToAiSdkTools2 } = await import("./convert-exulu-tools-to-ai-sdk-tools-TZ2UKWR4.js");
     const tools = await convertExuluToolsToAiSdkTools2(
       [this],
       [],
@@ -1939,7 +1919,6 @@ var checkLicense = () => {
 };
 
 // src/exulu/resolve-reranker.ts
-import "fs";
 var ResolveRerankerError = class extends Error {
   constructor(code, message) {
     super(message);
@@ -1963,15 +1942,7 @@ async function resolveReranker(input) {
       `LiteLLM is not ready: ${err.message}`
     );
   }
-  const host = process.env.LITELLM_HOST ?? "127.0.0.1";
-  const port = process.env.LITELLM_PORT ?? "4000";
-  const masterKey = process.env.LITELLM_MASTER_KEY;
-  if (!masterKey) {
-    throw new ResolveRerankerError(
-      "LITELLM_NOT_CONFIGURED",
-      "LITELLM_MASTER_KEY is required when EXULU_USE_LITELLM=true"
-    );
-  }
+  const { baseUrl, authHeaders } = resolveLiteLLMTarget();
   const resolvedUserId = user?.id ?? userId;
   if (resolvedUserId) await provisionDefaultUserBudget(resolvedUserId);
   const role = user?.role;
@@ -1991,7 +1962,7 @@ async function resolveReranker(input) {
     routine_name: routine?.name,
     context_name: contextName
   });
-  const endpoint = `http://${host}:${port}/v1/rerank`;
+  const endpoint = `${baseUrl}/v1/rerank`;
   const rerank = async (query, chunks, opts) => {
     try {
       if (chunks.length === 0) return [];
@@ -2001,7 +1972,7 @@ async function resolveReranker(input) {
       const res = await fetch(endpoint, {
         method: "POST",
         headers: {
-          Authorization: `Bearer ${masterKey}`,
+          ...authHeaders,
           "Content-Type": "application/json"
         },
         body: JSON.stringify({
@@ -4371,6 +4342,9 @@ var checkItemWriteAccess = async (context, record, user) => {
   if (record.rights_mode === "private") {
     return record.created_by != null && String(record.created_by) === String(user.id);
   }
+  if (record.created_by != null && String(record.created_by) === String(user.id)) {
+    return true;
+  }
   const validRightsModes = ["users", "roles", "teams"];
   if (!validRightsModes.includes(record.rights_mode)) {
     return false;
@@ -7258,23 +7232,23 @@ ${JSON.stringify(config, null, 2)}`
 
 // src/exulu/audit/sink.ts
 import { randomUUID as randomUUID4 } from "crypto";
-import { promises as fs2 } from "fs";
+import { promises as fs } from "fs";
 import path2 from "path";
 var createFsSpoolStore = (dir) => ({
   write: async (name, body) => {
-    await fs2.mkdir(dir, { recursive: true });
-    await fs2.writeFile(path2.join(dir, name), body, "utf8");
+    await fs.mkdir(dir, { recursive: true });
+    await fs.writeFile(path2.join(dir, name), body, "utf8");
   },
   list: async () => {
     try {
-      return (await fs2.readdir(dir)).filter((f) => f.endsWith(".ndjson"));
+      return (await fs.readdir(dir)).filter((f) => f.endsWith(".ndjson"));
     } catch {
       return [];
     }
   },
-  read: async (name) => fs2.readFile(path2.join(dir, name), "utf8"),
+  read: async (name) => fs.readFile(path2.join(dir, name), "utf8"),
   remove: async (name) => {
-    await fs2.rm(path2.join(dir, name), { force: true });
+    await fs.rm(path2.join(dir, name), { force: true });
   }
 });
 var pad = (n) => String(n).padStart(2, "0");
@@ -8155,7 +8129,6 @@ export {
   buildTags,
   budgetTagFor,
   createTaggedFetch,
-  LiteLLMAdminError,
   tagDelete,
   tagInfo,
   getTagDailyActivity,

package/dist/{convert-exulu-tools-to-ai-sdk-tools-WQWYMU7G.js → convert-exulu-tools-to-ai-sdk-tools-TZ2UKWR4.js}

@@ -2,8 +2,8 @@ import "dotenv/config";
 import {
   convertExuluToolsToAiSdkTools,
   hydrateVariables
-} from "./chunk-5FTX543Z.js";
-import "./chunk-7CCMW3IW.js";
+} from "./chunk-7AZH4ETH.js";
+import "./chunk-4PDWNVNT.js";
 export {
   convertExuluToolsToAiSdkTools,
   hydrateVariables