@exulu/backend 3.5.1 → 3.7.0

package/dist/{chunk-7AZH4ETH.js → chunk-HA2ZSGOW.js}

@@ -1713,7 +1713,7 @@ var ExuluTool = class _ExuluTool {
     if (!agent) {
       throw new Error("Agent not found.");
     }
-    const { convertExuluToolsToAiSdkTools: convertExuluToolsToAiSdkTools2 } = await import("./convert-exulu-tools-to-ai-sdk-tools-TZ2UKWR4.js");
+    const { convertExuluToolsToAiSdkTools: convertExuluToolsToAiSdkTools2 } = await import("./convert-exulu-tools-to-ai-sdk-tools-F3CJU6JN.js");
     const tools = await convertExuluToolsToAiSdkTools2(
       [this],
       [],
@@ -8183,5 +8183,6 @@ export {
   ExuluTool,
   resolveReranker,
   withRetry,
+  microCallProviderOptions,
   createAgenticRetrievalTool
 };

package/dist/{convert-exulu-tools-to-ai-sdk-tools-TZ2UKWR4.js → convert-exulu-tools-to-ai-sdk-tools-F3CJU6JN.js}

@@ -2,7 +2,7 @@ import "dotenv/config";
 import {
   convertExuluToolsToAiSdkTools,
   hydrateVariables
-} from "./chunk-7AZH4ETH.js";
+} from "./chunk-HA2ZSGOW.js";
 import "./chunk-4PDWNVNT.js";
 export {
   convertExuluToolsToAiSdkTools,

package/dist/index.cjs

@@ -8892,10 +8892,12 @@ __export(index_exports, {
   ExuluDocumentProcessor: () => ExuluDocumentProcessor,
   ExuluEval: () => ExuluEval,
   ExuluJobs: () => ExuluJobs,
+  ExuluModels: () => ExuluModels,
   ExuluOtel: () => ExuluOtel,
   ExuluPython: () => ExuluPython,
   ExuluQueues: () => queues,
   ExuluReadApi: () => ExuluReadApi,
+  ExuluRecall: () => ExuluRecall,
   ExuluReranker: () => ExuluReranker,
   ExuluTool: () => ExuluTool,
   ExuluVariables: () => ExuluVariables,
@@ -11452,6 +11454,52 @@ var usersSchema = {
       // triggered by the key with project_id_ for LiteLLM cost attribution.
       name: "project",
       type: "uuid"
+    },
+    // ── Lead capture (see lead-capture spec §5) ─────────────────────────────
+    // Consent must be *provable* under Art. 7(1) GDPR: who agreed, when, and
+    // to which wording. Hence a timestamp per consent and a version string
+    // pointing at the exact text that was shown.
+    {
+      // Current state of the optional marketing consent.
+      name: "marketing_consent",
+      type: "boolean",
+      default: false
+    },
+    {
+      // When marketing consent was GIVEN.
+      name: "marketing_consent_at",
+      type: "date"
+    },
+    {
+      // When marketing consent was WITHDRAWN. Deliberately a separate column:
+      // overwriting marketing_consent_at on withdrawal would destroy the grant
+      // time, and with it the ability to prove the order of events if someone
+      // later claims they were mailed after withdrawing.
+      name: "marketing_consent_withdrawn_at",
+      type: "date"
+    },
+    {
+      // When the mandatory storage/processing consent was given.
+      name: "processing_consent_at",
+      type: "date"
+    },
+    {
+      // When the user asked for erasure (Art. 17). The row survives so the
+      // one-month deadline stays queryable even if the notification mail fails.
+      name: "erasure_requested_at",
+      type: "date"
+    },
+    {
+      // Where the lead came from, e.g. "eu-ai-act-bot".
+      name: "signup_source",
+      type: "text"
+    },
+    {
+      // Version of the consent wording that was actually displayed, e.g.
+      // "2026-08-18". The wording itself lives in the frontend repo under
+      // version control; this column points at it.
+      name: "consent_version",
+      type: "text"
     }
   ]
 };
@@ -11760,6 +11808,32 @@ var addCoreFields = (schema) => {
   }
   return schema;
 };
+var otpSendAttemptsSchema = {
+  type: "otp_send_attempts",
+  name: {
+    plural: "otp_send_attempts",
+    singular: "otp_send_attempt"
+  },
+  fields: [
+    {
+      name: "key",
+      type: "text",
+      index: true,
+      unique: true,
+      required: true
+    },
+    {
+      name: "count",
+      type: "number",
+      required: true
+    },
+    {
+      name: "window_start",
+      type: "date",
+      required: true
+    }
+  ]
+};
 var coreSchemas = {
   get: () => {
     const license = checkLicense();
@@ -11780,7 +11854,8 @@ var coreSchemas = {
       contextPresetsSchema: () => addCoreFields(contextPresetsSchema),
       sharedArtifactsSchema: () => addCoreFields(sharedArtifactsSchema),
       transcriptionJobsSchema: () => addCoreFields(transcriptionJobsSchema),
-      imageGenerationsSchema: () => addCoreFields(imageGenerationsSchema)
+      imageGenerationsSchema: () => addCoreFields(imageGenerationsSchema),
+      otpSendAttemptsSchema: () => addCoreFields(otpSendAttemptsSchema)
     };
     if (license["agent-feedback"]) {
       schemas.feedbackSchema = () => addCoreFields(feedbackSchema);
@@ -13641,7 +13716,7 @@ var ExuluContext2 = class {
     }
     console.log("[EXULU] context configuration", this.configuration);
     let jobs = [];
-    let shouldGenerateEmbeddings = this.embedder && generateEmbeddingsOverwrite !== false && (generateEmbeddingsOverwrite || this.configuration.calculateVectors === "onInsert" || this.configuration.calculateVectors === "always");
+    let shouldGenerateEmbeddings2 = this.embedder && generateEmbeddingsOverwrite !== false && (generateEmbeddingsOverwrite || this.configuration.calculateVectors === "onInsert" || this.configuration.calculateVectors === "always");
     if (this.processor) {
       const processor = this.processor;
       if (processor && (processor?.config?.trigger === "onInsert" || processor?.config?.trigger === "onUpdate" || processor?.config?.trigger === "always")) {
@@ -13663,12 +13738,12 @@ var ExuluContext2 = class {
             ...processorResult
           });
           if (processor.config?.generateEmbeddings) {
-            shouldGenerateEmbeddings = true;
+            shouldGenerateEmbeddings2 = true;
           }
         }
       }
     }
-    if (shouldGenerateEmbeddings) {
+    if (shouldGenerateEmbeddings2) {
       console.log("[EXULU] generating embeddings for item", results[0].id);
       const { job: embeddingsJob } = await this.embeddings.generate.one({
         item: {
@@ -13712,7 +13787,7 @@ var ExuluContext2 = class {
     }).returning("id");
     await mutation;
     let jobs = [];
-    let shouldGenerateEmbeddings = this.embedder && generateEmbeddingsOverwrite !== false && (generateEmbeddingsOverwrite || this.configuration.calculateVectors === "onUpdate" || this.configuration.calculateVectors === "always");
+    let shouldGenerateEmbeddings2 = this.embedder && generateEmbeddingsOverwrite !== false && (generateEmbeddingsOverwrite || this.configuration.calculateVectors === "onUpdate" || this.configuration.calculateVectors === "always");
     if (this.processor) {
       const processor = this.processor;
       if (processor && runProcessorOverwrite !== false && (runProcessorOverwrite || processor?.config?.trigger === "onInsert" || processor?.config?.trigger === "onUpdate" || processor?.config?.trigger === "always")) {
@@ -13734,12 +13809,12 @@ var ExuluContext2 = class {
             ...processorResult
           });
           if (processor.config?.generateEmbeddings) {
-            shouldGenerateEmbeddings = true;
+            shouldGenerateEmbeddings2 = true;
           }
         }
       }
     }
-    if (shouldGenerateEmbeddings) {
+    if (shouldGenerateEmbeddings2) {
       const { job: embeddingsJob } = await this.embeddings.generate.one({
         item: record,
         // important we need to full record here with all fields for the embedder
@@ -15595,6 +15670,18 @@ var applyAgentGuestFieldTransforms = async (input) => {
   return input;
 };
 
+// src/graphql/mutations/should-generate-embeddings.ts
+init_cjs_shims();
+var shouldGenerateEmbeddings = ({
+  calculateVectors,
+  operation,
+  override
+}) => {
+  if (override !== void 0) return override;
+  if (calculateVectors === "always") return true;
+  return operation === "create" ? calculateVectors === "onInsert" : calculateVectors === "onUpdate";
+};
+
 // src/graphql/mutations/index.ts
 var VALID_RIGHTS_MODES = ["private", "users", "roles", "teams", "public"];
 var postprocessDeletion = async ({
@@ -15663,7 +15750,9 @@ var postprocessUpdate = async ({
   result,
   user,
   role,
-  config
+  config,
+  operation,
+  generateEmbeddings
 }) => {
   if (!result) {
     return result;
@@ -15690,7 +15779,11 @@ var postprocessUpdate = async ({
       if (!context.embedder) {
         return result;
       }
-      if (context.embedder && (context.configuration.calculateVectors === "onUpdate" || context.configuration.calculateVectors === "always")) {
+      if (shouldGenerateEmbeddings({
+        calculateVectors: context.configuration.calculateVectors,
+        operation,
+        override: generateEmbeddings
+      })) {
         const { db: db2 } = await postgresClient();
         console.log("[EXULU] Deleting chunks for item", result.id);
         const exists = await context.chunksTableExists();
@@ -15940,7 +16033,9 @@ function createMutations(table, contexts, tools, config) {
         result: results[0],
         user: context.user.id,
         role: context.user.role?.id,
-        config
+        config,
+        operation: "create",
+        generateEmbeddings: args.generateEmbeddings
       });
       return {
         // Filter result to only include requested fields
@@ -16014,7 +16109,9 @@ function createMutations(table, contexts, tools, config) {
         result,
         user: context.user.id,
         role: context.user.role?.id,
-        config
+        config,
+        operation: "update",
+        generateEmbeddings: args.generateEmbeddings
       });
       return {
         item: finalizeRequestedFields({
@@ -16078,7 +16175,9 @@ function createMutations(table, contexts, tools, config) {
         result,
         user: context.user.id,
         role: context.user.role?.id,
-        config
+        config,
+        operation: "update",
+        generateEmbeddings: args.generateEmbeddings
       });
       return {
         item: finalizeRequestedFields({
@@ -16348,6 +16447,7 @@ function createMutations(table, contexts, tools, config) {
         };
       }
       query = applyFilters(query, args.where, table);
+      query = applyAccessControl(table, query, context.user);
       if (args.limit) {
         query = query.limit(args.limit);
       }
@@ -19788,6 +19888,33 @@ var renderTranscript = (segments, speakers) => {
   return blocks.map((b) => `${b.speaker}: ${b.text}`).join("\n");
 };
 
+// src/exulu/transcription/build-transcript-item.ts
+init_cjs_shims();
+var buildTranscriptItemInput = ({
+  row,
+  title,
+  speakers,
+  transcriptText,
+  rightsMode,
+  isReSave
+}) => ({
+  // Carrying the id on re-save makes context.createItem upsert in place.
+  ...isReSave && row.saved_item_id ? { id: row.saved_item_id } : {},
+  name: title ?? row.title ?? "Transcript",
+  transcript_text: transcriptText,
+  audio_s3key: row.audio_s3key,
+  language: row.language ?? void 0,
+  duration_seconds: row.duration_seconds ?? void 0,
+  speakers,
+  raw_segments: row.raw_segments,
+  // Recall meeting-bot post-processing results (null for Whisper jobs).
+  post_processing: row.post_processing_outputs ?? void 0,
+  // Handle for the meeting video; null for Whisper uploads.
+  recall_recording_id: row.recall_recording_id ?? void 0,
+  rights_mode: rightsMode,
+  created_by: row.created_by
+});
+
 // src/exulu/transcription/service.ts
 var TABLE2 = "transcription_jobs";
 var log3 = (msg) => console.log(`[EXULU-TRANSCRIPTION] ${msg}`);
@@ -19980,21 +20107,14 @@ var transcriptionService = {
     const transcriptText = renderTranscript(row.raw_segments, input.speakers);
     const rightsMode = input.target_rights_mode ?? row.target_rights_mode ?? "private";
     const isReSave = row.status === "saved" && !!row.saved_item_id;
-    const itemInput = {
-      // Carrying the id on re-save makes context.createItem upsert in place.
-      ...isReSave && row.saved_item_id ? { id: row.saved_item_id } : {},
-      name: input.title ?? row.title ?? "Transcript",
-      transcript_text: transcriptText,
-      audio_s3key: row.audio_s3key,
-      language: row.language ?? void 0,
-      duration_seconds: row.duration_seconds ?? void 0,
+    const itemInput = buildTranscriptItemInput({
+      row,
+      title: input.title,
       speakers: input.speakers,
-      raw_segments: row.raw_segments,
-      // Recall meeting-bot post-processing results (null for Whisper jobs).
-      post_processing: row.post_processing_outputs ?? void 0,
-      rights_mode: rightsMode,
-      created_by: row.created_by
-    };
+      transcriptText,
+      rightsMode,
+      isReSave
+    });
     let item;
     try {
       const result = await context.createItem(
@@ -20240,25 +20360,34 @@ var recordingDurationSeconds = (rec) => {
   }
   return null;
 };
+var RECORDING_RETENTION_HOURS = 2160;
+var buildCreateBotPayload = (input) => ({
+  meeting_url: input.meeting_url,
+  join_at: input.join_at,
+  ...input.bot_name ? { bot_name: input.bot_name } : {},
+  recording_config: {
+    video_mixed_mp4: {},
+    video_mixed_layout: "speaker_view",
+    participant_events: {},
+    meeting_metadata: {},
+    retention: { type: "timed", hours: RECORDING_RETENTION_HOURS }
+  },
+  ...input.notifyChat ? {
+    chat: {
+      on_bot_join: {
+        send_to: "everyone",
+        message: input.notifyChat.message,
+        pin: true
+      }
+    }
+  } : {}
+});
 var recallClient = {
   isConfigured: () => !!recallApiKey() && !!process.env.RECALL_REGION,
   /** POST /bot — schedule/launch a bot for a meeting. */
   createBot: (input) => request2("/bot/", {
     method: "POST",
-    body: JSON.stringify({
-      meeting_url: input.meeting_url,
-      join_at: input.join_at,
-      ...input.bot_name ? { bot_name: input.bot_name } : {},
-      ...input.notifyChat ? {
-        chat: {
-          on_bot_join: {
-            send_to: "everyone",
-            message: input.notifyChat.message,
-            pin: true
-          }
-        }
-      } : {}
-    })
+    body: JSON.stringify(buildCreateBotPayload(input))
   }),
   /**
    * POST /recording/{id}/create_transcript — start a post-meeting (async)
@@ -20574,6 +20703,28 @@ var recallService = {
     }
     return null;
   },
+  /**
+   * Fresh signed URL for a recording's mixed MP4, or null when there is no
+   * usable video (still processing, no video artifact, recording expired or
+   * deleted).
+   *
+   * Never cache the result: the URL carries X-Amz-Expires=21600, so it dies
+   * after six hours. Resolve at point of use.
+   */
+  async getRecordingVideoUrl(recordingId) {
+    try {
+      const recording = await recallClient.retrieveRecording(recordingId);
+      const video = recording?.media_shortcuts?.video_mixed;
+      if (!video) return null;
+      if (video.status?.code && video.status.code !== "done") return null;
+      return video.data?.download_url ?? null;
+    } catch (err) {
+      log4(
+        `could not resolve video url for recording ${recordingId}: ${err.message}`
+      );
+      return null;
+    }
+  },
   /**
    * Run the selected {prompt, agent} pairs against the transcript and store the
    * results on the row. Idempotent (skips if outputs already exist). Each entry
@@ -21469,11 +21620,11 @@ function createSDL(tables, contexts, tools, config, evals) {
     `;
     }
     mutationDefs += `
-      ${tableNamePlural}CreateOne(input: ${tableNameSingular}Input!, upsert: Boolean): ${tableNameSingular}MutationPayload
+      ${tableNamePlural}CreateOne(input: ${tableNameSingular}Input!, upsert: Boolean, generateEmbeddings: Boolean): ${tableNameSingular}MutationPayload
       ${tableNamePlural}CopyOneById(id: ID!): ${tableNameSingular}MutationPayload
 
-      ${tableNamePlural}UpdateOne(where: [Filter${tableNameSingularUpperCaseFirst}], input: ${tableNameSingular}Input!): ${tableNameSingular}MutationPayload
-      ${tableNamePlural}UpdateOneById(id: ID!, input: ${tableNameSingular}Input!): ${tableNameSingular}MutationPayload
+      ${tableNamePlural}UpdateOne(where: [Filter${tableNameSingularUpperCaseFirst}], input: ${tableNameSingular}Input!, generateEmbeddings: Boolean): ${tableNameSingular}MutationPayload
+      ${tableNamePlural}UpdateOneById(id: ID!, input: ${tableNameSingular}Input!, generateEmbeddings: Boolean): ${tableNameSingular}MutationPayload
       ${tableNamePlural}RemoveOneById(id: ID!): ${tableNameSingular}
       ${tableNamePlural}RemoveOne(where: JSON!): ${tableNameSingular}
     `;
@@ -30179,7 +30330,11 @@ var transcriptionsContext = new ExuluContext2({
     // Post-processing results carried from the transcription job at finalize:
     // [{ prompt_id, agent_id, prompt_name, output, ran_at }]. Recall meeting
     // transcripts only for now.
-    { name: "post_processing", type: "json", editable: false }
+    { name: "post_processing", type: "json", editable: false },
+    // Link back to the Recall recording so the mixed video stays reachable
+    // (resolve a fresh URL via ExuluRecall.getRecordingVideoUrl — it expires
+    // after six hours). Null for Whisper uploads.
+    { name: "recall_recording_id", type: "text" }
   ],
   sources: [],
   active: true,
@@ -31533,6 +31688,16 @@ init_supervisor();
 init_cjs_shims();
 init_client();
 init_sanitize_name();
+
+// src/exulu/context-fields-for-sync.ts
+init_cjs_shims();
+var contextFieldsForSync = (context) => (context.fields ?? []).filter((field) => !!field?.name && !!field?.type).map((field) => ({
+  ...field,
+  name: field.type === "file" ? `${field.name}_s3key` : field.name
+}));
+
+// src/postgres/init-exulu-db.ts
+init_table_names();
 var {
   agentsSchema: agentsSchema3,
   feedbackSchema: feedbackSchema3,
@@ -31560,7 +31725,8 @@ var {
   promptFavoritesSchema: promptFavoritesSchema3,
   transcriptionJobsSchema: transcriptionJobsSchema3,
   imageGenerationsSchema: imageGenerationsSchema2,
-  sharedArtifactsSchema: sharedArtifactsSchema2
+  sharedArtifactsSchema: sharedArtifactsSchema2,
+  otpSendAttemptsSchema: otpSendAttemptsSchema2
 } = coreSchemas.get();
 var addMissingFields = async (knex, tableName, fields, skipFields = []) => {
   for (const field of fields) {
@@ -31578,8 +31744,9 @@ var addMissingFields = async (knex, tableName, fields, skipFields = []) => {
       await knex.schema.alterTable(tableName, (table) => {
         mapType(table, type, sanitizedName, defaultValue, unique);
       });
+    } else {
+      console.log(`[EXULU] Field '${sanitizedName}' already exists in ${tableName} table.`);
     }
-    console.log(`[EXULU] Field '${sanitizedName}' already exists in ${tableName} table.`);
   }
 };
 var migrateUserCredentialsDataColumn = async (knex) => {
@@ -31631,7 +31798,8 @@ var up = async function(knex) {
     variablesSchema3(),
     skillsSchema3(),
     workflowTemplatesSchema3(),
-    workflowTriggersSchema2()
+    workflowTriggersSchema2(),
+    otpSendAttemptsSchema2()
   ];
   const createTable = async (schema) => {
     if (!await knex.schema.hasTable(schema.name.plural)) {
@@ -31762,11 +31930,18 @@ var up = async function(knex) {
   }
 };
 var contextDatabases = async (contexts) => {
+  const { db: knex } = await postgresClient();
   for (const context of contexts) {
     const itemsTableExists = await context.tableExists();
     if (!itemsTableExists) {
       console.log("[EXULU] items table does not exist, creating it.");
       await context.createItemsTable();
+    } else {
+      await addMissingFields(
+        knex,
+        getTableName(context.id),
+        contextFieldsForSync(context)
+      );
     }
     const chunksTableExists = await context.chunksTableExists();
     if (!chunksTableExists && context.embedder) {
@@ -33647,8 +33822,58 @@ async function rerank(input) {
 
 // src/index.ts
 init_pipeline();
+
+// src/exulu/models/public.ts
+init_cjs_shims();
+init_resolve_model();
+init_client();
+init_micro_call();
+var ExuluModels = {
+  /**
+   * A LanguageModel bound to the tenant's LiteLLM proxy.
+   *
+   * Pass `userId` wherever one is known — it is what carries the caller's
+   * identity tags into LiteLLM, and therefore what makes the spend visible to
+   * that user's team budget. Resolution still succeeds without it; the calls
+   * are simply unattributed.
+   */
+  resolve: async ({
+    modelId,
+    userId
+  }) => {
+    let user;
+    if (userId != null) {
+      const { db: db2 } = await postgresClient();
+      user = await db2("users").where({ id: userId }).first();
+    }
+    const { languageModel } = await resolveModel({ modelId, user: user || void 0 });
+    return languageModel;
+  },
+  /**
+   * Provider options for a constrained structured-output call.
+   *
+   * Gemini 3+ counts thinking tokens against maxOutputTokens, so a call with a
+   * token cap returns an empty 200 unless reasoning is disabled. Returns
+   * undefined for non-Gemini models.
+   */
+  providerOptions: (model) => microCallProviderOptions(model)
+};
+
+// src/index.ts
 init_statistics();
 init_errors();
+
+// src/exulu/recall/public.ts
+init_cjs_shims();
+var ExuluRecall = {
+  /**
+   * Fresh signed URL for a recording's mixed MP4, or null. Resolve at point
+   * of use — the URL expires after six hours.
+   */
+  getRecordingVideoUrl: (recordingId) => recallService.getRecordingVideoUrl(recordingId)
+};
+
+// src/index.ts
 var ExuluJobs = {
   redis: redisClient
 };
@@ -33746,10 +33971,12 @@ var ExuluPython = {
   ExuluDocumentProcessor,
   ExuluEval,
   ExuluJobs,
+  ExuluModels,
   ExuluOtel,
   ExuluPython,
   ExuluQueues,
   ExuluReadApi,
+  ExuluRecall,
   ExuluReranker,
   ExuluTool,
   ExuluVariables,

package/dist/index.d.cts

@@ -2506,6 +2506,37 @@ declare function createAgenticRetrievalTool(opts: {
     projectScope?: ProjectScope;
 }): ExuluTool | undefined;
 
+/**
+ * Model access for consuming projects.
+ *
+ * Exists because ExuluApp exposes no model route and resolveModel is internal,
+ * so a consumer's only alternative was building its own provider against
+ * PROXY_BASE_URL — which produces untagged calls that per-team LiteLLM budgets
+ * cannot attribute.
+ */
+declare const ExuluModels: {
+    /**
+     * A LanguageModel bound to the tenant's LiteLLM proxy.
+     *
+     * Pass `userId` wherever one is known — it is what carries the caller's
+     * identity tags into LiteLLM, and therefore what makes the spend visible to
+     * that user's team budget. Resolution still succeeds without it; the calls
+     * are simply unattributed.
+     */
+    resolve: ({ modelId, userId, }: {
+        modelId: string;
+        userId?: number;
+    }) => Promise<LanguageModel>;
+    /**
+     * Provider options for a constrained structured-output call.
+     *
+     * Gemini 3+ counts thinking tokens against maxOutputTokens, so a call with a
+     * token cap returns an empty 200 unless reasoning is disabled. Returns
+     * undefined for non-Gemini models.
+     */
+    providerOptions: (model: LanguageModel | string) => Record<string, Record<string, string>> | undefined;
+};
+
 type JOB_STATUS = "completed" | "failed" | "delayed" | "active" | "waiting" | "paused" | "stuck" | "waiting_approval" | "filtered" | "cancelled";
 declare const JOB_STATUS_ENUM: {
     completed: string;
@@ -2526,9 +2557,19 @@ declare class CredentialInvalidError extends Error {
     constructor(provider: string, reason?: string);
 }
 
+/** Public Recall surface for consuming projects. */
+declare const ExuluRecall: {
+    /**
+     * Fresh signed URL for a recording's mixed MP4, or null. Resolve at point
+     * of use — the URL expires after six hours.
+     */
+    getRecordingVideoUrl: (recordingId: string) => Promise<string | null>;
+};
+
 declare const ExuluJobs: {
     redis: typeof redisClient;
 };
+
 declare const ExuluDefaultTools: {
     agentic: {
         retrieval: {
@@ -2600,4 +2641,4 @@ declare const ExuluPython: {
     instructions: typeof getPythonSetupInstructions;
 };
 
-export { type AuditConfig, type AuditEvent, type AuditLogger, type ChunkerOperation, type ChunkerResponse, type CredentialField, CredentialInvalidError, type JOB_STATUS as EXULU_JOB_STATUS, JOB_STATUS_ENUM as EXULU_JOB_STATUS_ENUM, type STATISTICS_TYPE as EXULU_STATISTICS_TYPE, STATISTICS_TYPE_ENUM as EXULU_STATISTICS_TYPE_ENUM, type ExuluAgent, ExuluApp, type ExuluAuthConfig, ExuluAuthentication, ExuluChunkers, ExuluContext, type ExuluContextEmbedder, type ExuluCredentialsToolContext, ExuluDatabase, ExuluDefaultTools, ExuluDocumentProcessor, ExuluEval, type Item as ExuluItem, ExuluJobs, type ExuluOauthConfig, type ExuluOauthToolContext, ExuluOtel, ExuluPython, queues as ExuluQueues, ExuluReadApi, ExuluReranker, ExuluTool, type ExuluUserCredentialsConfig, ExuluVariables, type VectorSearchChunkResult, defaultChunker, enableLiteLLMClientMode, postgresClient };
+export { type AuditConfig, type AuditEvent, type AuditLogger, type ChunkerOperation, type ChunkerResponse, type CredentialField, CredentialInvalidError, type JOB_STATUS as EXULU_JOB_STATUS, JOB_STATUS_ENUM as EXULU_JOB_STATUS_ENUM, type STATISTICS_TYPE as EXULU_STATISTICS_TYPE, STATISTICS_TYPE_ENUM as EXULU_STATISTICS_TYPE_ENUM, type ExuluAgent, ExuluApp, type ExuluAuthConfig, ExuluAuthentication, ExuluChunkers, ExuluContext, type ExuluContextEmbedder, type ExuluCredentialsToolContext, ExuluDatabase, ExuluDefaultTools, ExuluDocumentProcessor, ExuluEval, type Item as ExuluItem, ExuluJobs, ExuluModels, type ExuluOauthConfig, type ExuluOauthToolContext, ExuluOtel, ExuluPython, queues as ExuluQueues, ExuluReadApi, ExuluRecall, ExuluReranker, ExuluTool, type ExuluUserCredentialsConfig, ExuluVariables, type VectorSearchChunkResult, defaultChunker, enableLiteLLMClientMode, postgresClient };

package/dist/index.d.ts

@@ -2506,6 +2506,37 @@ declare function createAgenticRetrievalTool(opts: {
     projectScope?: ProjectScope;
 }): ExuluTool | undefined;
 
+/**
+ * Model access for consuming projects.
+ *
+ * Exists because ExuluApp exposes no model route and resolveModel is internal,
+ * so a consumer's only alternative was building its own provider against
+ * PROXY_BASE_URL — which produces untagged calls that per-team LiteLLM budgets
+ * cannot attribute.
+ */
+declare const ExuluModels: {
+    /**
+     * A LanguageModel bound to the tenant's LiteLLM proxy.
+     *
+     * Pass `userId` wherever one is known — it is what carries the caller's
+     * identity tags into LiteLLM, and therefore what makes the spend visible to
+     * that user's team budget. Resolution still succeeds without it; the calls
+     * are simply unattributed.
+     */
+    resolve: ({ modelId, userId, }: {
+        modelId: string;
+        userId?: number;
+    }) => Promise<LanguageModel>;
+    /**
+     * Provider options for a constrained structured-output call.
+     *
+     * Gemini 3+ counts thinking tokens against maxOutputTokens, so a call with a
+     * token cap returns an empty 200 unless reasoning is disabled. Returns
+     * undefined for non-Gemini models.
+     */
+    providerOptions: (model: LanguageModel | string) => Record<string, Record<string, string>> | undefined;
+};
+
 type JOB_STATUS = "completed" | "failed" | "delayed" | "active" | "waiting" | "paused" | "stuck" | "waiting_approval" | "filtered" | "cancelled";
 declare const JOB_STATUS_ENUM: {
     completed: string;
@@ -2526,9 +2557,19 @@ declare class CredentialInvalidError extends Error {
     constructor(provider: string, reason?: string);
 }
 
+/** Public Recall surface for consuming projects. */
+declare const ExuluRecall: {
+    /**
+     * Fresh signed URL for a recording's mixed MP4, or null. Resolve at point
+     * of use — the URL expires after six hours.
+     */
+    getRecordingVideoUrl: (recordingId: string) => Promise<string | null>;
+};
+
 declare const ExuluJobs: {
     redis: typeof redisClient;
 };
+
 declare const ExuluDefaultTools: {
     agentic: {
         retrieval: {
@@ -2600,4 +2641,4 @@ declare const ExuluPython: {
     instructions: typeof getPythonSetupInstructions;
 };
 
-export { type AuditConfig, type AuditEvent, type AuditLogger, type ChunkerOperation, type ChunkerResponse, type CredentialField, CredentialInvalidError, type JOB_STATUS as EXULU_JOB_STATUS, JOB_STATUS_ENUM as EXULU_JOB_STATUS_ENUM, type STATISTICS_TYPE as EXULU_STATISTICS_TYPE, STATISTICS_TYPE_ENUM as EXULU_STATISTICS_TYPE_ENUM, type ExuluAgent, ExuluApp, type ExuluAuthConfig, ExuluAuthentication, ExuluChunkers, ExuluContext, type ExuluContextEmbedder, type ExuluCredentialsToolContext, ExuluDatabase, ExuluDefaultTools, ExuluDocumentProcessor, ExuluEval, type Item as ExuluItem, ExuluJobs, type ExuluOauthConfig, type ExuluOauthToolContext, ExuluOtel, ExuluPython, queues as ExuluQueues, ExuluReadApi, ExuluReranker, ExuluTool, type ExuluUserCredentialsConfig, ExuluVariables, type VectorSearchChunkResult, defaultChunker, enableLiteLLMClientMode, postgresClient };
+export { type AuditConfig, type AuditEvent, type AuditLogger, type ChunkerOperation, type ChunkerResponse, type CredentialField, CredentialInvalidError, type JOB_STATUS as EXULU_JOB_STATUS, JOB_STATUS_ENUM as EXULU_JOB_STATUS_ENUM, type STATISTICS_TYPE as EXULU_STATISTICS_TYPE, STATISTICS_TYPE_ENUM as EXULU_STATISTICS_TYPE_ENUM, type ExuluAgent, ExuluApp, type ExuluAuthConfig, ExuluAuthentication, ExuluChunkers, ExuluContext, type ExuluContextEmbedder, type ExuluCredentialsToolContext, ExuluDatabase, ExuluDefaultTools, ExuluDocumentProcessor, ExuluEval, type Item as ExuluItem, ExuluJobs, ExuluModels, type ExuluOauthConfig, type ExuluOauthToolContext, ExuluOtel, ExuluPython, queues as ExuluQueues, ExuluReadApi, ExuluRecall, ExuluReranker, ExuluTool, type ExuluUserCredentialsConfig, ExuluVariables, type VectorSearchChunkResult, defaultChunker, enableLiteLLMClientMode, postgresClient };

package/dist/index.js

@@ -66,6 +66,7 @@ import {
   listS3ObjectsByPrefix,
   listTagsByPrefix,
   mapStreamErrorMessage,
+  microCallProviderOptions,
   parseResetAt,
   postgresClient,
   provisionDefaultUserBudget,
@@ -87,7 +88,7 @@ import {
   verifyCredentialNonce,
   waitForLiteLLMReady,
   withRetry
-} from "./chunk-7AZH4ETH.js";
+} from "./chunk-HA2ZSGOW.js";
 import {
   LiteLLMAdminError,
   findLiteLLMModel,
@@ -2568,6 +2569,52 @@ var usersSchema = {
       // triggered by the key with project_id_ for LiteLLM cost attribution.
       name: "project",
       type: "uuid"
+    },
+    // ── Lead capture (see lead-capture spec §5) ─────────────────────────────
+    // Consent must be *provable* under Art. 7(1) GDPR: who agreed, when, and
+    // to which wording. Hence a timestamp per consent and a version string
+    // pointing at the exact text that was shown.
+    {
+      // Current state of the optional marketing consent.
+      name: "marketing_consent",
+      type: "boolean",
+      default: false
+    },
+    {
+      // When marketing consent was GIVEN.
+      name: "marketing_consent_at",
+      type: "date"
+    },
+    {
+      // When marketing consent was WITHDRAWN. Deliberately a separate column:
+      // overwriting marketing_consent_at on withdrawal would destroy the grant
+      // time, and with it the ability to prove the order of events if someone
+      // later claims they were mailed after withdrawing.
+      name: "marketing_consent_withdrawn_at",
+      type: "date"
+    },
+    {
+      // When the mandatory storage/processing consent was given.
+      name: "processing_consent_at",
+      type: "date"
+    },
+    {
+      // When the user asked for erasure (Art. 17). The row survives so the
+      // one-month deadline stays queryable even if the notification mail fails.
+      name: "erasure_requested_at",
+      type: "date"
+    },
+    {
+      // Where the lead came from, e.g. "eu-ai-act-bot".
+      name: "signup_source",
+      type: "text"
+    },
+    {
+      // Version of the consent wording that was actually displayed, e.g.
+      // "2026-08-18". The wording itself lives in the frontend repo under
+      // version control; this column points at it.
+      name: "consent_version",
+      type: "text"
     }
   ]
 };
@@ -2876,6 +2923,32 @@ var addCoreFields = (schema) => {
   }
   return schema;
 };
+var otpSendAttemptsSchema = {
+  type: "otp_send_attempts",
+  name: {
+    plural: "otp_send_attempts",
+    singular: "otp_send_attempt"
+  },
+  fields: [
+    {
+      name: "key",
+      type: "text",
+      index: true,
+      unique: true,
+      required: true
+    },
+    {
+      name: "count",
+      type: "number",
+      required: true
+    },
+    {
+      name: "window_start",
+      type: "date",
+      required: true
+    }
+  ]
+};
 var coreSchemas = {
   get: () => {
     const license = checkLicense();
@@ -2896,7 +2969,8 @@ var coreSchemas = {
       contextPresetsSchema: () => addCoreFields(contextPresetsSchema),
       sharedArtifactsSchema: () => addCoreFields(sharedArtifactsSchema),
       transcriptionJobsSchema: () => addCoreFields(transcriptionJobsSchema),
-      imageGenerationsSchema: () => addCoreFields(imageGenerationsSchema)
+      imageGenerationsSchema: () => addCoreFields(imageGenerationsSchema),
+      otpSendAttemptsSchema: () => addCoreFields(otpSendAttemptsSchema)
     };
     if (license["agent-feedback"]) {
       schemas.feedbackSchema = () => addCoreFields(feedbackSchema);
@@ -4731,7 +4805,7 @@ var ExuluContext2 = class {
     }
     console.log("[EXULU] context configuration", this.configuration);
     let jobs = [];
-    let shouldGenerateEmbeddings = this.embedder && generateEmbeddingsOverwrite !== false && (generateEmbeddingsOverwrite || this.configuration.calculateVectors === "onInsert" || this.configuration.calculateVectors === "always");
+    let shouldGenerateEmbeddings2 = this.embedder && generateEmbeddingsOverwrite !== false && (generateEmbeddingsOverwrite || this.configuration.calculateVectors === "onInsert" || this.configuration.calculateVectors === "always");
     if (this.processor) {
       const processor = this.processor;
       if (processor && (processor?.config?.trigger === "onInsert" || processor?.config?.trigger === "onUpdate" || processor?.config?.trigger === "always")) {
@@ -4753,12 +4827,12 @@ var ExuluContext2 = class {
             ...processorResult
           });
           if (processor.config?.generateEmbeddings) {
-            shouldGenerateEmbeddings = true;
+            shouldGenerateEmbeddings2 = true;
           }
         }
       }
     }
-    if (shouldGenerateEmbeddings) {
+    if (shouldGenerateEmbeddings2) {
       console.log("[EXULU] generating embeddings for item", results[0].id);
       const { job: embeddingsJob } = await this.embeddings.generate.one({
         item: {
@@ -4802,7 +4876,7 @@ var ExuluContext2 = class {
     }).returning("id");
     await mutation;
     let jobs = [];
-    let shouldGenerateEmbeddings = this.embedder && generateEmbeddingsOverwrite !== false && (generateEmbeddingsOverwrite || this.configuration.calculateVectors === "onUpdate" || this.configuration.calculateVectors === "always");
+    let shouldGenerateEmbeddings2 = this.embedder && generateEmbeddingsOverwrite !== false && (generateEmbeddingsOverwrite || this.configuration.calculateVectors === "onUpdate" || this.configuration.calculateVectors === "always");
     if (this.processor) {
       const processor = this.processor;
       if (processor && runProcessorOverwrite !== false && (runProcessorOverwrite || processor?.config?.trigger === "onInsert" || processor?.config?.trigger === "onUpdate" || processor?.config?.trigger === "always")) {
@@ -4824,12 +4898,12 @@ var ExuluContext2 = class {
             ...processorResult
           });
           if (processor.config?.generateEmbeddings) {
-            shouldGenerateEmbeddings = true;
+            shouldGenerateEmbeddings2 = true;
           }
         }
       }
     }
-    if (shouldGenerateEmbeddings) {
+    if (shouldGenerateEmbeddings2) {
       const { job: embeddingsJob } = await this.embeddings.generate.one({
         item: record,
         // important we need to full record here with all fields for the embedder
@@ -6634,6 +6708,17 @@ var applyAgentGuestFieldTransforms = async (input) => {
   return input;
 };
 
+// src/graphql/mutations/should-generate-embeddings.ts
+var shouldGenerateEmbeddings = ({
+  calculateVectors,
+  operation,
+  override
+}) => {
+  if (override !== void 0) return override;
+  if (calculateVectors === "always") return true;
+  return operation === "create" ? calculateVectors === "onInsert" : calculateVectors === "onUpdate";
+};
+
 // src/graphql/mutations/index.ts
 var VALID_RIGHTS_MODES = ["private", "users", "roles", "teams", "public"];
 var postprocessDeletion = async ({
@@ -6702,7 +6787,9 @@ var postprocessUpdate = async ({
   result,
   user,
   role,
-  config
+  config,
+  operation,
+  generateEmbeddings
 }) => {
   if (!result) {
     return result;
@@ -6729,7 +6816,11 @@ var postprocessUpdate = async ({
       if (!context.embedder) {
         return result;
       }
-      if (context.embedder && (context.configuration.calculateVectors === "onUpdate" || context.configuration.calculateVectors === "always")) {
+      if (shouldGenerateEmbeddings({
+        calculateVectors: context.configuration.calculateVectors,
+        operation,
+        override: generateEmbeddings
+      })) {
         const { db } = await postgresClient();
         console.log("[EXULU] Deleting chunks for item", result.id);
         const exists = await context.chunksTableExists();
@@ -6979,7 +7070,9 @@ function createMutations(table, contexts, tools, config) {
         result: results[0],
         user: context.user.id,
         role: context.user.role?.id,
-        config
+        config,
+        operation: "create",
+        generateEmbeddings: args.generateEmbeddings
       });
       return {
         // Filter result to only include requested fields
@@ -7053,7 +7146,9 @@ function createMutations(table, contexts, tools, config) {
         result,
         user: context.user.id,
         role: context.user.role?.id,
-        config
+        config,
+        operation: "update",
+        generateEmbeddings: args.generateEmbeddings
       });
       return {
         item: finalizeRequestedFields({
@@ -7117,7 +7212,9 @@ function createMutations(table, contexts, tools, config) {
         result,
         user: context.user.id,
         role: context.user.role?.id,
-        config
+        config,
+        operation: "update",
+        generateEmbeddings: args.generateEmbeddings
       });
       return {
         item: finalizeRequestedFields({
@@ -7387,6 +7484,7 @@ function createMutations(table, contexts, tools, config) {
         };
       }
       query = applyFilters(query, args.where, table);
+      query = applyAccessControl(table, query, context.user);
       if (args.limit) {
         query = query.limit(args.limit);
       }
@@ -10762,6 +10860,32 @@ var renderTranscript = (segments, speakers) => {
   return blocks.map((b) => `${b.speaker}: ${b.text}`).join("\n");
 };
 
+// src/exulu/transcription/build-transcript-item.ts
+var buildTranscriptItemInput = ({
+  row,
+  title,
+  speakers,
+  transcriptText,
+  rightsMode,
+  isReSave
+}) => ({
+  // Carrying the id on re-save makes context.createItem upsert in place.
+  ...isReSave && row.saved_item_id ? { id: row.saved_item_id } : {},
+  name: title ?? row.title ?? "Transcript",
+  transcript_text: transcriptText,
+  audio_s3key: row.audio_s3key,
+  language: row.language ?? void 0,
+  duration_seconds: row.duration_seconds ?? void 0,
+  speakers,
+  raw_segments: row.raw_segments,
+  // Recall meeting-bot post-processing results (null for Whisper jobs).
+  post_processing: row.post_processing_outputs ?? void 0,
+  // Handle for the meeting video; null for Whisper uploads.
+  recall_recording_id: row.recall_recording_id ?? void 0,
+  rights_mode: rightsMode,
+  created_by: row.created_by
+});
+
 // src/exulu/transcription/service.ts
 var TABLE = "transcription_jobs";
 var log2 = (msg) => console.log(`[EXULU-TRANSCRIPTION] ${msg}`);
@@ -10954,21 +11078,14 @@ var transcriptionService = {
     const transcriptText = renderTranscript(row.raw_segments, input.speakers);
     const rightsMode = input.target_rights_mode ?? row.target_rights_mode ?? "private";
     const isReSave = row.status === "saved" && !!row.saved_item_id;
-    const itemInput = {
-      // Carrying the id on re-save makes context.createItem upsert in place.
-      ...isReSave && row.saved_item_id ? { id: row.saved_item_id } : {},
-      name: input.title ?? row.title ?? "Transcript",
-      transcript_text: transcriptText,
-      audio_s3key: row.audio_s3key,
-      language: row.language ?? void 0,
-      duration_seconds: row.duration_seconds ?? void 0,
+    const itemInput = buildTranscriptItemInput({
+      row,
+      title: input.title,
       speakers: input.speakers,
-      raw_segments: row.raw_segments,
-      // Recall meeting-bot post-processing results (null for Whisper jobs).
-      post_processing: row.post_processing_outputs ?? void 0,
-      rights_mode: rightsMode,
-      created_by: row.created_by
-    };
+      transcriptText,
+      rightsMode,
+      isReSave
+    });
     let item;
     try {
       const result = await context.createItem(
@@ -11206,25 +11323,34 @@ var recordingDurationSeconds = (rec) => {
   }
   return null;
 };
+var RECORDING_RETENTION_HOURS = 2160;
+var buildCreateBotPayload = (input) => ({
+  meeting_url: input.meeting_url,
+  join_at: input.join_at,
+  ...input.bot_name ? { bot_name: input.bot_name } : {},
+  recording_config: {
+    video_mixed_mp4: {},
+    video_mixed_layout: "speaker_view",
+    participant_events: {},
+    meeting_metadata: {},
+    retention: { type: "timed", hours: RECORDING_RETENTION_HOURS }
+  },
+  ...input.notifyChat ? {
+    chat: {
+      on_bot_join: {
+        send_to: "everyone",
+        message: input.notifyChat.message,
+        pin: true
+      }
+    }
+  } : {}
+});
 var recallClient = {
   isConfigured: () => !!recallApiKey() && !!process.env.RECALL_REGION,
   /** POST /bot — schedule/launch a bot for a meeting. */
   createBot: (input) => request2("/bot/", {
     method: "POST",
-    body: JSON.stringify({
-      meeting_url: input.meeting_url,
-      join_at: input.join_at,
-      ...input.bot_name ? { bot_name: input.bot_name } : {},
-      ...input.notifyChat ? {
-        chat: {
-          on_bot_join: {
-            send_to: "everyone",
-            message: input.notifyChat.message,
-            pin: true
-          }
-        }
-      } : {}
-    })
+    body: JSON.stringify(buildCreateBotPayload(input))
   }),
   /**
    * POST /recording/{id}/create_transcript — start a post-meeting (async)
@@ -11539,6 +11665,28 @@ var recallService = {
     }
     return null;
   },
+  /**
+   * Fresh signed URL for a recording's mixed MP4, or null when there is no
+   * usable video (still processing, no video artifact, recording expired or
+   * deleted).
+   *
+   * Never cache the result: the URL carries X-Amz-Expires=21600, so it dies
+   * after six hours. Resolve at point of use.
+   */
+  async getRecordingVideoUrl(recordingId) {
+    try {
+      const recording = await recallClient.retrieveRecording(recordingId);
+      const video = recording?.media_shortcuts?.video_mixed;
+      if (!video) return null;
+      if (video.status?.code && video.status.code !== "done") return null;
+      return video.data?.download_url ?? null;
+    } catch (err) {
+      log3(
+        `could not resolve video url for recording ${recordingId}: ${err.message}`
+      );
+      return null;
+    }
+  },
   /**
    * Run the selected {prompt, agent} pairs against the transcript and store the
    * results on the row. Idempotent (skips if outputs already exist). Each entry
@@ -12426,11 +12574,11 @@ function createSDL(tables, contexts, tools, config, evals) {
     `;
     }
     mutationDefs += `
-      ${tableNamePlural}CreateOne(input: ${tableNameSingular}Input!, upsert: Boolean): ${tableNameSingular}MutationPayload
+      ${tableNamePlural}CreateOne(input: ${tableNameSingular}Input!, upsert: Boolean, generateEmbeddings: Boolean): ${tableNameSingular}MutationPayload
       ${tableNamePlural}CopyOneById(id: ID!): ${tableNameSingular}MutationPayload
 
-      ${tableNamePlural}UpdateOne(where: [Filter${tableNameSingularUpperCaseFirst}], input: ${tableNameSingular}Input!): ${tableNameSingular}MutationPayload
-      ${tableNamePlural}UpdateOneById(id: ID!, input: ${tableNameSingular}Input!): ${tableNameSingular}MutationPayload
+      ${tableNamePlural}UpdateOne(where: [Filter${tableNameSingularUpperCaseFirst}], input: ${tableNameSingular}Input!, generateEmbeddings: Boolean): ${tableNameSingular}MutationPayload
+      ${tableNamePlural}UpdateOneById(id: ID!, input: ${tableNameSingular}Input!, generateEmbeddings: Boolean): ${tableNameSingular}MutationPayload
       ${tableNamePlural}RemoveOneById(id: ID!): ${tableNameSingular}
       ${tableNamePlural}RemoveOne(where: JSON!): ${tableNameSingular}
     `;
@@ -20817,7 +20965,11 @@ var transcriptionsContext = new ExuluContext2({
     // Post-processing results carried from the transcription job at finalize:
     // [{ prompt_id, agent_id, prompt_name, output, ran_at }]. Recall meeting
     // transcripts only for now.
-    { name: "post_processing", type: "json", editable: false }
+    { name: "post_processing", type: "json", editable: false },
+    // Link back to the Recall recording so the mixed video stays reachable
+    // (resolve a fresh URL via ExuluRecall.getRecordingVideoUrl — it expires
+    // after six hours). Null for Whisper uploads.
+    { name: "recall_recording_id", type: "text" }
   ],
   sources: [],
   active: true,
@@ -22146,6 +22298,12 @@ var ExuluReadApi = {
   embedQuery
 };
 
+// src/exulu/context-fields-for-sync.ts
+var contextFieldsForSync = (context) => (context.fields ?? []).filter((field) => !!field?.name && !!field?.type).map((field) => ({
+  ...field,
+  name: field.type === "file" ? `${field.name}_s3key` : field.name
+}));
+
 // src/postgres/init-exulu-db.ts
 var {
   agentsSchema: agentsSchema3,
@@ -22174,7 +22332,8 @@ var {
   promptFavoritesSchema: promptFavoritesSchema3,
   transcriptionJobsSchema: transcriptionJobsSchema3,
   imageGenerationsSchema: imageGenerationsSchema2,
-  sharedArtifactsSchema: sharedArtifactsSchema2
+  sharedArtifactsSchema: sharedArtifactsSchema2,
+  otpSendAttemptsSchema: otpSendAttemptsSchema2
 } = coreSchemas.get();
 var addMissingFields = async (knex, tableName, fields, skipFields = []) => {
   for (const field of fields) {
@@ -22192,8 +22351,9 @@ var addMissingFields = async (knex, tableName, fields, skipFields = []) => {
       await knex.schema.alterTable(tableName, (table) => {
         mapType(table, type, sanitizedName, defaultValue, unique);
       });
+    } else {
+      console.log(`[EXULU] Field '${sanitizedName}' already exists in ${tableName} table.`);
     }
-    console.log(`[EXULU] Field '${sanitizedName}' already exists in ${tableName} table.`);
   }
 };
 var migrateUserCredentialsDataColumn = async (knex) => {
@@ -22245,7 +22405,8 @@ var up = async function(knex) {
     variablesSchema3(),
     skillsSchema3(),
     workflowTemplatesSchema3(),
-    workflowTriggersSchema2()
+    workflowTriggersSchema2(),
+    otpSendAttemptsSchema2()
   ];
   const createTable = async (schema) => {
     if (!await knex.schema.hasTable(schema.name.plural)) {
@@ -22376,11 +22537,18 @@ var up = async function(knex) {
   }
 };
 var contextDatabases = async (contexts) => {
+  const { db: knex } = await postgresClient();
   for (const context of contexts) {
     const itemsTableExists = await context.tableExists();
     if (!itemsTableExists) {
       console.log("[EXULU] items table does not exist, creating it.");
       await context.createItemsTable();
+    } else {
+      await addMissingFields(
+        knex,
+        getTableName(context.id),
+        contextFieldsForSync(context)
+      );
     }
     const chunksTableExists = await context.chunksTableExists();
     if (!chunksTableExists && context.embedder) {
@@ -24237,6 +24405,47 @@ async function rerank(input) {
   return resolved.rerank(query, items, { topN });
 }
 
+// src/exulu/models/public.ts
+var ExuluModels = {
+  /**
+   * A LanguageModel bound to the tenant's LiteLLM proxy.
+   *
+   * Pass `userId` wherever one is known — it is what carries the caller's
+   * identity tags into LiteLLM, and therefore what makes the spend visible to
+   * that user's team budget. Resolution still succeeds without it; the calls
+   * are simply unattributed.
+   */
+  resolve: async ({
+    modelId,
+    userId
+  }) => {
+    let user;
+    if (userId != null) {
+      const { db } = await postgresClient();
+      user = await db("users").where({ id: userId }).first();
+    }
+    const { languageModel } = await resolveModel({ modelId, user: user || void 0 });
+    return languageModel;
+  },
+  /**
+   * Provider options for a constrained structured-output call.
+   *
+   * Gemini 3+ counts thinking tokens against maxOutputTokens, so a call with a
+   * token cap returns an empty 200 unless reasoning is disabled. Returns
+   * undefined for non-Gemini models.
+   */
+  providerOptions: (model) => microCallProviderOptions(model)
+};
+
+// src/exulu/recall/public.ts
+var ExuluRecall = {
+  /**
+   * Fresh signed URL for a recording's mixed MP4, or null. Resolve at point
+   * of use — the URL expires after six hours.
+   */
+  getRecordingVideoUrl: (recordingId) => recallService.getRecordingVideoUrl(recordingId)
+};
+
 // src/index.ts
 var ExuluJobs = {
   redis: redisClient
@@ -24334,10 +24543,12 @@ export {
   ExuluDocumentProcessor,
   ExuluEval,
   ExuluJobs,
+  ExuluModels,
   ExuluOtel,
   ExuluPython,
   queues as ExuluQueues,
   ExuluReadApi,
+  ExuluRecall,
   ExuluReranker,
   ExuluTool,
   ExuluVariables,

package/ee/python/requirements.txt

@@ -24,17 +24,26 @@ pyannote.audio>=3.3.0
 # Belt-and-suspenders: keep huggingface_hub on the 0.x line so pyannote 3.x's
 # `use_auth_token=` calls keep working (1.x removed that kwarg → diarization off).
 huggingface_hub<1.0
-fastapi
 uvicorn
 python-multipart
 requests
 # LiteLLM proxy — only used when EXULU_USE_LITELLM=true. Always installed so
 # the dep is ready when the env var is flipped. Pinned to a tested version;
 # upgrade deliberately.
-litellm[proxy]==1.85.1
+litellm[proxy]==1.97.0
+# FastAPI ceiling — NOT cosmetic. litellm 1.97.0 declares fastapi>=0.136.3,<1.0
+# but imports the private `get_flat_dependant` from fastapi.dependencies.utils
+# (proxy/management_endpoints/management_v1/common.py:7), which FastAPI deleted
+# in 0.140.7. Any resolve that picks 0.140.7+ yields a proxy that cannot start:
+# "ImportError: cannot import name 'get_flat_dependant'". 0.140.6 is the last
+# version that still has it. NOTE: fastapi is also a first-party dependency of
+# ee/python/transcription/server.py (not just a litellm transitive). Once
+# litellm ships its own ceiling, replace this constrained pin with a bare
+# `fastapi` line — do not delete it entirely.
+fastapi>=0.136.3,<0.140.7  # to confirm this pin is still needed: grep -r get_flat_dependant $(pip show litellm | awk '/Location/{print $2}')/litellm/proxy/
 # Prisma Python client — required by LiteLLM proxy whenever a `database_url`
 # is set in config.litellm.yaml (used for user/budget tracking, key
-# management, etc.). NOT included in litellm[proxy] in 1.85.1, hence the
+# management, etc.). NOT included in litellm[proxy] in 1.97.0, hence the
 # separate pin. setup.sh runs `prisma generate` against LiteLLM's bundled
 # schema after pip install so the Python client module is materialized.
 prisma==0.15.0

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@exulu/backend",
   "author": "Qventu Bv.",
-  "version": "3.5.1",
+  "version": "3.7.0",
   "main": "./dist/index.js",
   "private": false,
   "publishConfig": {