@exulu/backend 3.6.0 → 3.7.0

package/dist/{chunk-7AZH4ETH.js → chunk-HA2ZSGOW.js}

@@ -1713,7 +1713,7 @@ var ExuluTool = class _ExuluTool {
     if (!agent) {
       throw new Error("Agent not found.");
     }
-    const { convertExuluToolsToAiSdkTools: convertExuluToolsToAiSdkTools2 } = await import("./convert-exulu-tools-to-ai-sdk-tools-TZ2UKWR4.js");
+    const { convertExuluToolsToAiSdkTools: convertExuluToolsToAiSdkTools2 } = await import("./convert-exulu-tools-to-ai-sdk-tools-F3CJU6JN.js");
     const tools = await convertExuluToolsToAiSdkTools2(
       [this],
       [],
@@ -8183,5 +8183,6 @@ export {
   ExuluTool,
   resolveReranker,
   withRetry,
+  microCallProviderOptions,
   createAgenticRetrievalTool
 };

package/dist/{convert-exulu-tools-to-ai-sdk-tools-TZ2UKWR4.js → convert-exulu-tools-to-ai-sdk-tools-F3CJU6JN.js}

@@ -2,7 +2,7 @@ import "dotenv/config";
 import {
   convertExuluToolsToAiSdkTools,
   hydrateVariables
-} from "./chunk-7AZH4ETH.js";
+} from "./chunk-HA2ZSGOW.js";
 import "./chunk-4PDWNVNT.js";
 export {
   convertExuluToolsToAiSdkTools,

package/dist/index.cjs

@@ -8892,10 +8892,12 @@ __export(index_exports, {
   ExuluDocumentProcessor: () => ExuluDocumentProcessor,
   ExuluEval: () => ExuluEval,
   ExuluJobs: () => ExuluJobs,
+  ExuluModels: () => ExuluModels,
   ExuluOtel: () => ExuluOtel,
   ExuluPython: () => ExuluPython,
   ExuluQueues: () => queues,
   ExuluReadApi: () => ExuluReadApi,
+  ExuluRecall: () => ExuluRecall,
   ExuluReranker: () => ExuluReranker,
   ExuluTool: () => ExuluTool,
   ExuluVariables: () => ExuluVariables,
@@ -13714,7 +13716,7 @@ var ExuluContext2 = class {
     }
     console.log("[EXULU] context configuration", this.configuration);
     let jobs = [];
-    let shouldGenerateEmbeddings = this.embedder && generateEmbeddingsOverwrite !== false && (generateEmbeddingsOverwrite || this.configuration.calculateVectors === "onInsert" || this.configuration.calculateVectors === "always");
+    let shouldGenerateEmbeddings2 = this.embedder && generateEmbeddingsOverwrite !== false && (generateEmbeddingsOverwrite || this.configuration.calculateVectors === "onInsert" || this.configuration.calculateVectors === "always");
     if (this.processor) {
       const processor = this.processor;
       if (processor && (processor?.config?.trigger === "onInsert" || processor?.config?.trigger === "onUpdate" || processor?.config?.trigger === "always")) {
@@ -13736,12 +13738,12 @@ var ExuluContext2 = class {
             ...processorResult
           });
           if (processor.config?.generateEmbeddings) {
-            shouldGenerateEmbeddings = true;
+            shouldGenerateEmbeddings2 = true;
           }
         }
       }
     }
-    if (shouldGenerateEmbeddings) {
+    if (shouldGenerateEmbeddings2) {
       console.log("[EXULU] generating embeddings for item", results[0].id);
       const { job: embeddingsJob } = await this.embeddings.generate.one({
         item: {
@@ -13785,7 +13787,7 @@ var ExuluContext2 = class {
     }).returning("id");
     await mutation;
     let jobs = [];
-    let shouldGenerateEmbeddings = this.embedder && generateEmbeddingsOverwrite !== false && (generateEmbeddingsOverwrite || this.configuration.calculateVectors === "onUpdate" || this.configuration.calculateVectors === "always");
+    let shouldGenerateEmbeddings2 = this.embedder && generateEmbeddingsOverwrite !== false && (generateEmbeddingsOverwrite || this.configuration.calculateVectors === "onUpdate" || this.configuration.calculateVectors === "always");
     if (this.processor) {
       const processor = this.processor;
       if (processor && runProcessorOverwrite !== false && (runProcessorOverwrite || processor?.config?.trigger === "onInsert" || processor?.config?.trigger === "onUpdate" || processor?.config?.trigger === "always")) {
@@ -13807,12 +13809,12 @@ var ExuluContext2 = class {
             ...processorResult
           });
           if (processor.config?.generateEmbeddings) {
-            shouldGenerateEmbeddings = true;
+            shouldGenerateEmbeddings2 = true;
           }
         }
       }
     }
-    if (shouldGenerateEmbeddings) {
+    if (shouldGenerateEmbeddings2) {
       const { job: embeddingsJob } = await this.embeddings.generate.one({
         item: record,
         // important we need to full record here with all fields for the embedder
@@ -15668,6 +15670,18 @@ var applyAgentGuestFieldTransforms = async (input) => {
   return input;
 };
 
+// src/graphql/mutations/should-generate-embeddings.ts
+init_cjs_shims();
+var shouldGenerateEmbeddings = ({
+  calculateVectors,
+  operation,
+  override
+}) => {
+  if (override !== void 0) return override;
+  if (calculateVectors === "always") return true;
+  return operation === "create" ? calculateVectors === "onInsert" : calculateVectors === "onUpdate";
+};
+
 // src/graphql/mutations/index.ts
 var VALID_RIGHTS_MODES = ["private", "users", "roles", "teams", "public"];
 var postprocessDeletion = async ({
@@ -15736,7 +15750,9 @@ var postprocessUpdate = async ({
   result,
   user,
   role,
-  config
+  config,
+  operation,
+  generateEmbeddings
 }) => {
   if (!result) {
     return result;
@@ -15763,7 +15779,11 @@ var postprocessUpdate = async ({
       if (!context.embedder) {
         return result;
       }
-      if (context.embedder && (context.configuration.calculateVectors === "onUpdate" || context.configuration.calculateVectors === "always")) {
+      if (shouldGenerateEmbeddings({
+        calculateVectors: context.configuration.calculateVectors,
+        operation,
+        override: generateEmbeddings
+      })) {
         const { db: db2 } = await postgresClient();
         console.log("[EXULU] Deleting chunks for item", result.id);
         const exists = await context.chunksTableExists();
@@ -16013,7 +16033,9 @@ function createMutations(table, contexts, tools, config) {
         result: results[0],
         user: context.user.id,
         role: context.user.role?.id,
-        config
+        config,
+        operation: "create",
+        generateEmbeddings: args.generateEmbeddings
       });
       return {
         // Filter result to only include requested fields
@@ -16087,7 +16109,9 @@ function createMutations(table, contexts, tools, config) {
         result,
         user: context.user.id,
         role: context.user.role?.id,
-        config
+        config,
+        operation: "update",
+        generateEmbeddings: args.generateEmbeddings
       });
       return {
         item: finalizeRequestedFields({
@@ -16151,7 +16175,9 @@ function createMutations(table, contexts, tools, config) {
         result,
         user: context.user.id,
         role: context.user.role?.id,
-        config
+        config,
+        operation: "update",
+        generateEmbeddings: args.generateEmbeddings
       });
       return {
         item: finalizeRequestedFields({
@@ -16421,6 +16447,7 @@ function createMutations(table, contexts, tools, config) {
         };
       }
       query = applyFilters(query, args.where, table);
+      query = applyAccessControl(table, query, context.user);
       if (args.limit) {
         query = query.limit(args.limit);
       }
@@ -19861,6 +19888,33 @@ var renderTranscript = (segments, speakers) => {
   return blocks.map((b) => `${b.speaker}: ${b.text}`).join("\n");
 };
 
+// src/exulu/transcription/build-transcript-item.ts
+init_cjs_shims();
+var buildTranscriptItemInput = ({
+  row,
+  title,
+  speakers,
+  transcriptText,
+  rightsMode,
+  isReSave
+}) => ({
+  // Carrying the id on re-save makes context.createItem upsert in place.
+  ...isReSave && row.saved_item_id ? { id: row.saved_item_id } : {},
+  name: title ?? row.title ?? "Transcript",
+  transcript_text: transcriptText,
+  audio_s3key: row.audio_s3key,
+  language: row.language ?? void 0,
+  duration_seconds: row.duration_seconds ?? void 0,
+  speakers,
+  raw_segments: row.raw_segments,
+  // Recall meeting-bot post-processing results (null for Whisper jobs).
+  post_processing: row.post_processing_outputs ?? void 0,
+  // Handle for the meeting video; null for Whisper uploads.
+  recall_recording_id: row.recall_recording_id ?? void 0,
+  rights_mode: rightsMode,
+  created_by: row.created_by
+});
+
 // src/exulu/transcription/service.ts
 var TABLE2 = "transcription_jobs";
 var log3 = (msg) => console.log(`[EXULU-TRANSCRIPTION] ${msg}`);
@@ -20053,21 +20107,14 @@ var transcriptionService = {
     const transcriptText = renderTranscript(row.raw_segments, input.speakers);
     const rightsMode = input.target_rights_mode ?? row.target_rights_mode ?? "private";
     const isReSave = row.status === "saved" && !!row.saved_item_id;
-    const itemInput = {
-      // Carrying the id on re-save makes context.createItem upsert in place.
-      ...isReSave && row.saved_item_id ? { id: row.saved_item_id } : {},
-      name: input.title ?? row.title ?? "Transcript",
-      transcript_text: transcriptText,
-      audio_s3key: row.audio_s3key,
-      language: row.language ?? void 0,
-      duration_seconds: row.duration_seconds ?? void 0,
+    const itemInput = buildTranscriptItemInput({
+      row,
+      title: input.title,
       speakers: input.speakers,
-      raw_segments: row.raw_segments,
-      // Recall meeting-bot post-processing results (null for Whisper jobs).
-      post_processing: row.post_processing_outputs ?? void 0,
-      rights_mode: rightsMode,
-      created_by: row.created_by
-    };
+      transcriptText,
+      rightsMode,
+      isReSave
+    });
     let item;
     try {
       const result = await context.createItem(
@@ -20313,25 +20360,34 @@ var recordingDurationSeconds = (rec) => {
   }
   return null;
 };
+var RECORDING_RETENTION_HOURS = 2160;
+var buildCreateBotPayload = (input) => ({
+  meeting_url: input.meeting_url,
+  join_at: input.join_at,
+  ...input.bot_name ? { bot_name: input.bot_name } : {},
+  recording_config: {
+    video_mixed_mp4: {},
+    video_mixed_layout: "speaker_view",
+    participant_events: {},
+    meeting_metadata: {},
+    retention: { type: "timed", hours: RECORDING_RETENTION_HOURS }
+  },
+  ...input.notifyChat ? {
+    chat: {
+      on_bot_join: {
+        send_to: "everyone",
+        message: input.notifyChat.message,
+        pin: true
+      }
+    }
+  } : {}
+});
 var recallClient = {
   isConfigured: () => !!recallApiKey() && !!process.env.RECALL_REGION,
   /** POST /bot — schedule/launch a bot for a meeting. */
   createBot: (input) => request2("/bot/", {
     method: "POST",
-    body: JSON.stringify({
-      meeting_url: input.meeting_url,
-      join_at: input.join_at,
-      ...input.bot_name ? { bot_name: input.bot_name } : {},
-      ...input.notifyChat ? {
-        chat: {
-          on_bot_join: {
-            send_to: "everyone",
-            message: input.notifyChat.message,
-            pin: true
-          }
-        }
-      } : {}
-    })
+    body: JSON.stringify(buildCreateBotPayload(input))
   }),
   /**
    * POST /recording/{id}/create_transcript — start a post-meeting (async)
@@ -20647,6 +20703,28 @@ var recallService = {
     }
     return null;
   },
+  /**
+   * Fresh signed URL for a recording's mixed MP4, or null when there is no
+   * usable video (still processing, no video artifact, recording expired or
+   * deleted).
+   *
+   * Never cache the result: the URL carries X-Amz-Expires=21600, so it dies
+   * after six hours. Resolve at point of use.
+   */
+  async getRecordingVideoUrl(recordingId) {
+    try {
+      const recording = await recallClient.retrieveRecording(recordingId);
+      const video = recording?.media_shortcuts?.video_mixed;
+      if (!video) return null;
+      if (video.status?.code && video.status.code !== "done") return null;
+      return video.data?.download_url ?? null;
+    } catch (err) {
+      log4(
+        `could not resolve video url for recording ${recordingId}: ${err.message}`
+      );
+      return null;
+    }
+  },
   /**
    * Run the selected {prompt, agent} pairs against the transcript and store the
    * results on the row. Idempotent (skips if outputs already exist). Each entry
@@ -21542,11 +21620,11 @@ function createSDL(tables, contexts, tools, config, evals) {
     `;
     }
     mutationDefs += `
-      ${tableNamePlural}CreateOne(input: ${tableNameSingular}Input!, upsert: Boolean): ${tableNameSingular}MutationPayload
+      ${tableNamePlural}CreateOne(input: ${tableNameSingular}Input!, upsert: Boolean, generateEmbeddings: Boolean): ${tableNameSingular}MutationPayload
       ${tableNamePlural}CopyOneById(id: ID!): ${tableNameSingular}MutationPayload
 
-      ${tableNamePlural}UpdateOne(where: [Filter${tableNameSingularUpperCaseFirst}], input: ${tableNameSingular}Input!): ${tableNameSingular}MutationPayload
-      ${tableNamePlural}UpdateOneById(id: ID!, input: ${tableNameSingular}Input!): ${tableNameSingular}MutationPayload
+      ${tableNamePlural}UpdateOne(where: [Filter${tableNameSingularUpperCaseFirst}], input: ${tableNameSingular}Input!, generateEmbeddings: Boolean): ${tableNameSingular}MutationPayload
+      ${tableNamePlural}UpdateOneById(id: ID!, input: ${tableNameSingular}Input!, generateEmbeddings: Boolean): ${tableNameSingular}MutationPayload
       ${tableNamePlural}RemoveOneById(id: ID!): ${tableNameSingular}
       ${tableNamePlural}RemoveOne(where: JSON!): ${tableNameSingular}
     `;
@@ -30252,7 +30330,11 @@ var transcriptionsContext = new ExuluContext2({
     // Post-processing results carried from the transcription job at finalize:
     // [{ prompt_id, agent_id, prompt_name, output, ran_at }]. Recall meeting
     // transcripts only for now.
-    { name: "post_processing", type: "json", editable: false }
+    { name: "post_processing", type: "json", editable: false },
+    // Link back to the Recall recording so the mixed video stays reachable
+    // (resolve a fresh URL via ExuluRecall.getRecordingVideoUrl — it expires
+    // after six hours). Null for Whisper uploads.
+    { name: "recall_recording_id", type: "text" }
   ],
   sources: [],
   active: true,
@@ -31606,6 +31688,16 @@ init_supervisor();
 init_cjs_shims();
 init_client();
 init_sanitize_name();
+
+// src/exulu/context-fields-for-sync.ts
+init_cjs_shims();
+var contextFieldsForSync = (context) => (context.fields ?? []).filter((field) => !!field?.name && !!field?.type).map((field) => ({
+  ...field,
+  name: field.type === "file" ? `${field.name}_s3key` : field.name
+}));
+
+// src/postgres/init-exulu-db.ts
+init_table_names();
 var {
   agentsSchema: agentsSchema3,
   feedbackSchema: feedbackSchema3,
@@ -31652,8 +31744,9 @@ var addMissingFields = async (knex, tableName, fields, skipFields = []) => {
       await knex.schema.alterTable(tableName, (table) => {
         mapType(table, type, sanitizedName, defaultValue, unique);
       });
+    } else {
+      console.log(`[EXULU] Field '${sanitizedName}' already exists in ${tableName} table.`);
     }
-    console.log(`[EXULU] Field '${sanitizedName}' already exists in ${tableName} table.`);
   }
 };
 var migrateUserCredentialsDataColumn = async (knex) => {
@@ -31837,11 +31930,18 @@ var up = async function(knex) {
   }
 };
 var contextDatabases = async (contexts) => {
+  const { db: knex } = await postgresClient();
   for (const context of contexts) {
     const itemsTableExists = await context.tableExists();
     if (!itemsTableExists) {
       console.log("[EXULU] items table does not exist, creating it.");
       await context.createItemsTable();
+    } else {
+      await addMissingFields(
+        knex,
+        getTableName(context.id),
+        contextFieldsForSync(context)
+      );
     }
     const chunksTableExists = await context.chunksTableExists();
     if (!chunksTableExists && context.embedder) {
@@ -33722,8 +33822,58 @@ async function rerank(input) {
 
 // src/index.ts
 init_pipeline();
+
+// src/exulu/models/public.ts
+init_cjs_shims();
+init_resolve_model();
+init_client();
+init_micro_call();
+var ExuluModels = {
+  /**
+   * A LanguageModel bound to the tenant's LiteLLM proxy.
+   *
+   * Pass `userId` wherever one is known — it is what carries the caller's
+   * identity tags into LiteLLM, and therefore what makes the spend visible to
+   * that user's team budget. Resolution still succeeds without it; the calls
+   * are simply unattributed.
+   */
+  resolve: async ({
+    modelId,
+    userId
+  }) => {
+    let user;
+    if (userId != null) {
+      const { db: db2 } = await postgresClient();
+      user = await db2("users").where({ id: userId }).first();
+    }
+    const { languageModel } = await resolveModel({ modelId, user: user || void 0 });
+    return languageModel;
+  },
+  /**
+   * Provider options for a constrained structured-output call.
+   *
+   * Gemini 3+ counts thinking tokens against maxOutputTokens, so a call with a
+   * token cap returns an empty 200 unless reasoning is disabled. Returns
+   * undefined for non-Gemini models.
+   */
+  providerOptions: (model) => microCallProviderOptions(model)
+};
+
+// src/index.ts
 init_statistics();
 init_errors();
+
+// src/exulu/recall/public.ts
+init_cjs_shims();
+var ExuluRecall = {
+  /**
+   * Fresh signed URL for a recording's mixed MP4, or null. Resolve at point
+   * of use — the URL expires after six hours.
+   */
+  getRecordingVideoUrl: (recordingId) => recallService.getRecordingVideoUrl(recordingId)
+};
+
+// src/index.ts
 var ExuluJobs = {
   redis: redisClient
 };
@@ -33821,10 +33971,12 @@ var ExuluPython = {
   ExuluDocumentProcessor,
   ExuluEval,
   ExuluJobs,
+  ExuluModels,
   ExuluOtel,
   ExuluPython,
   ExuluQueues,
   ExuluReadApi,
+  ExuluRecall,
   ExuluReranker,
   ExuluTool,
   ExuluVariables,

package/dist/index.d.cts

@@ -2506,6 +2506,37 @@ declare function createAgenticRetrievalTool(opts: {
     projectScope?: ProjectScope;
 }): ExuluTool | undefined;
 
+/**
+ * Model access for consuming projects.
+ *
+ * Exists because ExuluApp exposes no model route and resolveModel is internal,
+ * so a consumer's only alternative was building its own provider against
+ * PROXY_BASE_URL — which produces untagged calls that per-team LiteLLM budgets
+ * cannot attribute.
+ */
+declare const ExuluModels: {
+    /**
+     * A LanguageModel bound to the tenant's LiteLLM proxy.
+     *
+     * Pass `userId` wherever one is known — it is what carries the caller's
+     * identity tags into LiteLLM, and therefore what makes the spend visible to
+     * that user's team budget. Resolution still succeeds without it; the calls
+     * are simply unattributed.
+     */
+    resolve: ({ modelId, userId, }: {
+        modelId: string;
+        userId?: number;
+    }) => Promise<LanguageModel>;
+    /**
+     * Provider options for a constrained structured-output call.
+     *
+     * Gemini 3+ counts thinking tokens against maxOutputTokens, so a call with a
+     * token cap returns an empty 200 unless reasoning is disabled. Returns
+     * undefined for non-Gemini models.
+     */
+    providerOptions: (model: LanguageModel | string) => Record<string, Record<string, string>> | undefined;
+};
+
 type JOB_STATUS = "completed" | "failed" | "delayed" | "active" | "waiting" | "paused" | "stuck" | "waiting_approval" | "filtered" | "cancelled";
 declare const JOB_STATUS_ENUM: {
     completed: string;
@@ -2526,9 +2557,19 @@ declare class CredentialInvalidError extends Error {
     constructor(provider: string, reason?: string);
 }
 
+/** Public Recall surface for consuming projects. */
+declare const ExuluRecall: {
+    /**
+     * Fresh signed URL for a recording's mixed MP4, or null. Resolve at point
+     * of use — the URL expires after six hours.
+     */
+    getRecordingVideoUrl: (recordingId: string) => Promise<string | null>;
+};
+
 declare const ExuluJobs: {
     redis: typeof redisClient;
 };
+
 declare const ExuluDefaultTools: {
     agentic: {
         retrieval: {
@@ -2600,4 +2641,4 @@ declare const ExuluPython: {
     instructions: typeof getPythonSetupInstructions;
 };
 
-export { type AuditConfig, type AuditEvent, type AuditLogger, type ChunkerOperation, type ChunkerResponse, type CredentialField, CredentialInvalidError, type JOB_STATUS as EXULU_JOB_STATUS, JOB_STATUS_ENUM as EXULU_JOB_STATUS_ENUM, type STATISTICS_TYPE as EXULU_STATISTICS_TYPE, STATISTICS_TYPE_ENUM as EXULU_STATISTICS_TYPE_ENUM, type ExuluAgent, ExuluApp, type ExuluAuthConfig, ExuluAuthentication, ExuluChunkers, ExuluContext, type ExuluContextEmbedder, type ExuluCredentialsToolContext, ExuluDatabase, ExuluDefaultTools, ExuluDocumentProcessor, ExuluEval, type Item as ExuluItem, ExuluJobs, type ExuluOauthConfig, type ExuluOauthToolContext, ExuluOtel, ExuluPython, queues as ExuluQueues, ExuluReadApi, ExuluReranker, ExuluTool, type ExuluUserCredentialsConfig, ExuluVariables, type VectorSearchChunkResult, defaultChunker, enableLiteLLMClientMode, postgresClient };
+export { type AuditConfig, type AuditEvent, type AuditLogger, type ChunkerOperation, type ChunkerResponse, type CredentialField, CredentialInvalidError, type JOB_STATUS as EXULU_JOB_STATUS, JOB_STATUS_ENUM as EXULU_JOB_STATUS_ENUM, type STATISTICS_TYPE as EXULU_STATISTICS_TYPE, STATISTICS_TYPE_ENUM as EXULU_STATISTICS_TYPE_ENUM, type ExuluAgent, ExuluApp, type ExuluAuthConfig, ExuluAuthentication, ExuluChunkers, ExuluContext, type ExuluContextEmbedder, type ExuluCredentialsToolContext, ExuluDatabase, ExuluDefaultTools, ExuluDocumentProcessor, ExuluEval, type Item as ExuluItem, ExuluJobs, ExuluModels, type ExuluOauthConfig, type ExuluOauthToolContext, ExuluOtel, ExuluPython, queues as ExuluQueues, ExuluReadApi, ExuluRecall, ExuluReranker, ExuluTool, type ExuluUserCredentialsConfig, ExuluVariables, type VectorSearchChunkResult, defaultChunker, enableLiteLLMClientMode, postgresClient };

package/dist/index.d.ts

@@ -2506,6 +2506,37 @@ declare function createAgenticRetrievalTool(opts: {
     projectScope?: ProjectScope;
 }): ExuluTool | undefined;
 
+/**
+ * Model access for consuming projects.
+ *
+ * Exists because ExuluApp exposes no model route and resolveModel is internal,
+ * so a consumer's only alternative was building its own provider against
+ * PROXY_BASE_URL — which produces untagged calls that per-team LiteLLM budgets
+ * cannot attribute.
+ */
+declare const ExuluModels: {
+    /**
+     * A LanguageModel bound to the tenant's LiteLLM proxy.
+     *
+     * Pass `userId` wherever one is known — it is what carries the caller's
+     * identity tags into LiteLLM, and therefore what makes the spend visible to
+     * that user's team budget. Resolution still succeeds without it; the calls
+     * are simply unattributed.
+     */
+    resolve: ({ modelId, userId, }: {
+        modelId: string;
+        userId?: number;
+    }) => Promise<LanguageModel>;
+    /**
+     * Provider options for a constrained structured-output call.
+     *
+     * Gemini 3+ counts thinking tokens against maxOutputTokens, so a call with a
+     * token cap returns an empty 200 unless reasoning is disabled. Returns
+     * undefined for non-Gemini models.
+     */
+    providerOptions: (model: LanguageModel | string) => Record<string, Record<string, string>> | undefined;
+};
+
 type JOB_STATUS = "completed" | "failed" | "delayed" | "active" | "waiting" | "paused" | "stuck" | "waiting_approval" | "filtered" | "cancelled";
 declare const JOB_STATUS_ENUM: {
     completed: string;
@@ -2526,9 +2557,19 @@ declare class CredentialInvalidError extends Error {
     constructor(provider: string, reason?: string);
 }
 
+/** Public Recall surface for consuming projects. */
+declare const ExuluRecall: {
+    /**
+     * Fresh signed URL for a recording's mixed MP4, or null. Resolve at point
+     * of use — the URL expires after six hours.
+     */
+    getRecordingVideoUrl: (recordingId: string) => Promise<string | null>;
+};
+
 declare const ExuluJobs: {
     redis: typeof redisClient;
 };
+
 declare const ExuluDefaultTools: {
     agentic: {
         retrieval: {
@@ -2600,4 +2641,4 @@ declare const ExuluPython: {
     instructions: typeof getPythonSetupInstructions;
 };
 
-export { type AuditConfig, type AuditEvent, type AuditLogger, type ChunkerOperation, type ChunkerResponse, type CredentialField, CredentialInvalidError, type JOB_STATUS as EXULU_JOB_STATUS, JOB_STATUS_ENUM as EXULU_JOB_STATUS_ENUM, type STATISTICS_TYPE as EXULU_STATISTICS_TYPE, STATISTICS_TYPE_ENUM as EXULU_STATISTICS_TYPE_ENUM, type ExuluAgent, ExuluApp, type ExuluAuthConfig, ExuluAuthentication, ExuluChunkers, ExuluContext, type ExuluContextEmbedder, type ExuluCredentialsToolContext, ExuluDatabase, ExuluDefaultTools, ExuluDocumentProcessor, ExuluEval, type Item as ExuluItem, ExuluJobs, type ExuluOauthConfig, type ExuluOauthToolContext, ExuluOtel, ExuluPython, queues as ExuluQueues, ExuluReadApi, ExuluReranker, ExuluTool, type ExuluUserCredentialsConfig, ExuluVariables, type VectorSearchChunkResult, defaultChunker, enableLiteLLMClientMode, postgresClient };
+export { type AuditConfig, type AuditEvent, type AuditLogger, type ChunkerOperation, type ChunkerResponse, type CredentialField, CredentialInvalidError, type JOB_STATUS as EXULU_JOB_STATUS, JOB_STATUS_ENUM as EXULU_JOB_STATUS_ENUM, type STATISTICS_TYPE as EXULU_STATISTICS_TYPE, STATISTICS_TYPE_ENUM as EXULU_STATISTICS_TYPE_ENUM, type ExuluAgent, ExuluApp, type ExuluAuthConfig, ExuluAuthentication, ExuluChunkers, ExuluContext, type ExuluContextEmbedder, type ExuluCredentialsToolContext, ExuluDatabase, ExuluDefaultTools, ExuluDocumentProcessor, ExuluEval, type Item as ExuluItem, ExuluJobs, ExuluModels, type ExuluOauthConfig, type ExuluOauthToolContext, ExuluOtel, ExuluPython, queues as ExuluQueues, ExuluReadApi, ExuluRecall, ExuluReranker, ExuluTool, type ExuluUserCredentialsConfig, ExuluVariables, type VectorSearchChunkResult, defaultChunker, enableLiteLLMClientMode, postgresClient };

package/dist/index.js

@@ -66,6 +66,7 @@ import {
   listS3ObjectsByPrefix,
   listTagsByPrefix,
   mapStreamErrorMessage,
+  microCallProviderOptions,
   parseResetAt,
   postgresClient,
   provisionDefaultUserBudget,
@@ -87,7 +88,7 @@ import {
   verifyCredentialNonce,
   waitForLiteLLMReady,
   withRetry
-} from "./chunk-7AZH4ETH.js";
+} from "./chunk-HA2ZSGOW.js";
 import {
   LiteLLMAdminError,
   findLiteLLMModel,
@@ -4804,7 +4805,7 @@ var ExuluContext2 = class {
     }
     console.log("[EXULU] context configuration", this.configuration);
     let jobs = [];
-    let shouldGenerateEmbeddings = this.embedder && generateEmbeddingsOverwrite !== false && (generateEmbeddingsOverwrite || this.configuration.calculateVectors === "onInsert" || this.configuration.calculateVectors === "always");
+    let shouldGenerateEmbeddings2 = this.embedder && generateEmbeddingsOverwrite !== false && (generateEmbeddingsOverwrite || this.configuration.calculateVectors === "onInsert" || this.configuration.calculateVectors === "always");
     if (this.processor) {
       const processor = this.processor;
       if (processor && (processor?.config?.trigger === "onInsert" || processor?.config?.trigger === "onUpdate" || processor?.config?.trigger === "always")) {
@@ -4826,12 +4827,12 @@ var ExuluContext2 = class {
             ...processorResult
           });
           if (processor.config?.generateEmbeddings) {
-            shouldGenerateEmbeddings = true;
+            shouldGenerateEmbeddings2 = true;
           }
         }
       }
     }
-    if (shouldGenerateEmbeddings) {
+    if (shouldGenerateEmbeddings2) {
       console.log("[EXULU] generating embeddings for item", results[0].id);
       const { job: embeddingsJob } = await this.embeddings.generate.one({
         item: {
@@ -4875,7 +4876,7 @@ var ExuluContext2 = class {
     }).returning("id");
     await mutation;
     let jobs = [];
-    let shouldGenerateEmbeddings = this.embedder && generateEmbeddingsOverwrite !== false && (generateEmbeddingsOverwrite || this.configuration.calculateVectors === "onUpdate" || this.configuration.calculateVectors === "always");
+    let shouldGenerateEmbeddings2 = this.embedder && generateEmbeddingsOverwrite !== false && (generateEmbeddingsOverwrite || this.configuration.calculateVectors === "onUpdate" || this.configuration.calculateVectors === "always");
     if (this.processor) {
       const processor = this.processor;
       if (processor && runProcessorOverwrite !== false && (runProcessorOverwrite || processor?.config?.trigger === "onInsert" || processor?.config?.trigger === "onUpdate" || processor?.config?.trigger === "always")) {
@@ -4897,12 +4898,12 @@ var ExuluContext2 = class {
             ...processorResult
           });
           if (processor.config?.generateEmbeddings) {
-            shouldGenerateEmbeddings = true;
+            shouldGenerateEmbeddings2 = true;
           }
         }
       }
     }
-    if (shouldGenerateEmbeddings) {
+    if (shouldGenerateEmbeddings2) {
       const { job: embeddingsJob } = await this.embeddings.generate.one({
         item: record,
         // important we need to full record here with all fields for the embedder
@@ -6707,6 +6708,17 @@ var applyAgentGuestFieldTransforms = async (input) => {
   return input;
 };
 
+// src/graphql/mutations/should-generate-embeddings.ts
+var shouldGenerateEmbeddings = ({
+  calculateVectors,
+  operation,
+  override
+}) => {
+  if (override !== void 0) return override;
+  if (calculateVectors === "always") return true;
+  return operation === "create" ? calculateVectors === "onInsert" : calculateVectors === "onUpdate";
+};
+
 // src/graphql/mutations/index.ts
 var VALID_RIGHTS_MODES = ["private", "users", "roles", "teams", "public"];
 var postprocessDeletion = async ({
@@ -6775,7 +6787,9 @@ var postprocessUpdate = async ({
   result,
   user,
   role,
-  config
+  config,
+  operation,
+  generateEmbeddings
 }) => {
   if (!result) {
     return result;
@@ -6802,7 +6816,11 @@ var postprocessUpdate = async ({
       if (!context.embedder) {
         return result;
       }
-      if (context.embedder && (context.configuration.calculateVectors === "onUpdate" || context.configuration.calculateVectors === "always")) {
+      if (shouldGenerateEmbeddings({
+        calculateVectors: context.configuration.calculateVectors,
+        operation,
+        override: generateEmbeddings
+      })) {
         const { db } = await postgresClient();
         console.log("[EXULU] Deleting chunks for item", result.id);
         const exists = await context.chunksTableExists();
@@ -7052,7 +7070,9 @@ function createMutations(table, contexts, tools, config) {
         result: results[0],
         user: context.user.id,
         role: context.user.role?.id,
-        config
+        config,
+        operation: "create",
+        generateEmbeddings: args.generateEmbeddings
       });
       return {
         // Filter result to only include requested fields
@@ -7126,7 +7146,9 @@ function createMutations(table, contexts, tools, config) {
         result,
         user: context.user.id,
         role: context.user.role?.id,
-        config
+        config,
+        operation: "update",
+        generateEmbeddings: args.generateEmbeddings
       });
       return {
         item: finalizeRequestedFields({
@@ -7190,7 +7212,9 @@ function createMutations(table, contexts, tools, config) {
         result,
         user: context.user.id,
         role: context.user.role?.id,
-        config
+        config,
+        operation: "update",
+        generateEmbeddings: args.generateEmbeddings
       });
       return {
         item: finalizeRequestedFields({
@@ -7460,6 +7484,7 @@ function createMutations(table, contexts, tools, config) {
         };
       }
       query = applyFilters(query, args.where, table);
+      query = applyAccessControl(table, query, context.user);
       if (args.limit) {
         query = query.limit(args.limit);
       }
@@ -10835,6 +10860,32 @@ var renderTranscript = (segments, speakers) => {
   return blocks.map((b) => `${b.speaker}: ${b.text}`).join("\n");
 };
 
+// src/exulu/transcription/build-transcript-item.ts
+var buildTranscriptItemInput = ({
+  row,
+  title,
+  speakers,
+  transcriptText,
+  rightsMode,
+  isReSave
+}) => ({
+  // Carrying the id on re-save makes context.createItem upsert in place.
+  ...isReSave && row.saved_item_id ? { id: row.saved_item_id } : {},
+  name: title ?? row.title ?? "Transcript",
+  transcript_text: transcriptText,
+  audio_s3key: row.audio_s3key,
+  language: row.language ?? void 0,
+  duration_seconds: row.duration_seconds ?? void 0,
+  speakers,
+  raw_segments: row.raw_segments,
+  // Recall meeting-bot post-processing results (null for Whisper jobs).
+  post_processing: row.post_processing_outputs ?? void 0,
+  // Handle for the meeting video; null for Whisper uploads.
+  recall_recording_id: row.recall_recording_id ?? void 0,
+  rights_mode: rightsMode,
+  created_by: row.created_by
+});
+
 // src/exulu/transcription/service.ts
 var TABLE = "transcription_jobs";
 var log2 = (msg) => console.log(`[EXULU-TRANSCRIPTION] ${msg}`);
@@ -11027,21 +11078,14 @@ var transcriptionService = {
     const transcriptText = renderTranscript(row.raw_segments, input.speakers);
     const rightsMode = input.target_rights_mode ?? row.target_rights_mode ?? "private";
     const isReSave = row.status === "saved" && !!row.saved_item_id;
-    const itemInput = {
-      // Carrying the id on re-save makes context.createItem upsert in place.
-      ...isReSave && row.saved_item_id ? { id: row.saved_item_id } : {},
-      name: input.title ?? row.title ?? "Transcript",
-      transcript_text: transcriptText,
-      audio_s3key: row.audio_s3key,
-      language: row.language ?? void 0,
-      duration_seconds: row.duration_seconds ?? void 0,
+    const itemInput = buildTranscriptItemInput({
+      row,
+      title: input.title,
       speakers: input.speakers,
-      raw_segments: row.raw_segments,
-      // Recall meeting-bot post-processing results (null for Whisper jobs).
-      post_processing: row.post_processing_outputs ?? void 0,
-      rights_mode: rightsMode,
-      created_by: row.created_by
-    };
+      transcriptText,
+      rightsMode,
+      isReSave
+    });
     let item;
     try {
       const result = await context.createItem(
@@ -11279,25 +11323,34 @@ var recordingDurationSeconds = (rec) => {
   }
   return null;
 };
+var RECORDING_RETENTION_HOURS = 2160;
+var buildCreateBotPayload = (input) => ({
+  meeting_url: input.meeting_url,
+  join_at: input.join_at,
+  ...input.bot_name ? { bot_name: input.bot_name } : {},
+  recording_config: {
+    video_mixed_mp4: {},
+    video_mixed_layout: "speaker_view",
+    participant_events: {},
+    meeting_metadata: {},
+    retention: { type: "timed", hours: RECORDING_RETENTION_HOURS }
+  },
+  ...input.notifyChat ? {
+    chat: {
+      on_bot_join: {
+        send_to: "everyone",
+        message: input.notifyChat.message,
+        pin: true
+      }
+    }
+  } : {}
+});
 var recallClient = {
   isConfigured: () => !!recallApiKey() && !!process.env.RECALL_REGION,
   /** POST /bot — schedule/launch a bot for a meeting. */
   createBot: (input) => request2("/bot/", {
     method: "POST",
-    body: JSON.stringify({
-      meeting_url: input.meeting_url,
-      join_at: input.join_at,
-      ...input.bot_name ? { bot_name: input.bot_name } : {},
-      ...input.notifyChat ? {
-        chat: {
-          on_bot_join: {
-            send_to: "everyone",
-            message: input.notifyChat.message,
-            pin: true
-          }
-        }
-      } : {}
-    })
+    body: JSON.stringify(buildCreateBotPayload(input))
   }),
   /**
    * POST /recording/{id}/create_transcript — start a post-meeting (async)
@@ -11612,6 +11665,28 @@ var recallService = {
     }
     return null;
   },
+  /**
+   * Fresh signed URL for a recording's mixed MP4, or null when there is no
+   * usable video (still processing, no video artifact, recording expired or
+   * deleted).
+   *
+   * Never cache the result: the URL carries X-Amz-Expires=21600, so it dies
+   * after six hours. Resolve at point of use.
+   */
+  async getRecordingVideoUrl(recordingId) {
+    try {
+      const recording = await recallClient.retrieveRecording(recordingId);
+      const video = recording?.media_shortcuts?.video_mixed;
+      if (!video) return null;
+      if (video.status?.code && video.status.code !== "done") return null;
+      return video.data?.download_url ?? null;
+    } catch (err) {
+      log3(
+        `could not resolve video url for recording ${recordingId}: ${err.message}`
+      );
+      return null;
+    }
+  },
   /**
    * Run the selected {prompt, agent} pairs against the transcript and store the
    * results on the row. Idempotent (skips if outputs already exist). Each entry
@@ -12499,11 +12574,11 @@ function createSDL(tables, contexts, tools, config, evals) {
     `;
     }
     mutationDefs += `
-      ${tableNamePlural}CreateOne(input: ${tableNameSingular}Input!, upsert: Boolean): ${tableNameSingular}MutationPayload
+      ${tableNamePlural}CreateOne(input: ${tableNameSingular}Input!, upsert: Boolean, generateEmbeddings: Boolean): ${tableNameSingular}MutationPayload
       ${tableNamePlural}CopyOneById(id: ID!): ${tableNameSingular}MutationPayload
 
-      ${tableNamePlural}UpdateOne(where: [Filter${tableNameSingularUpperCaseFirst}], input: ${tableNameSingular}Input!): ${tableNameSingular}MutationPayload
-      ${tableNamePlural}UpdateOneById(id: ID!, input: ${tableNameSingular}Input!): ${tableNameSingular}MutationPayload
+      ${tableNamePlural}UpdateOne(where: [Filter${tableNameSingularUpperCaseFirst}], input: ${tableNameSingular}Input!, generateEmbeddings: Boolean): ${tableNameSingular}MutationPayload
+      ${tableNamePlural}UpdateOneById(id: ID!, input: ${tableNameSingular}Input!, generateEmbeddings: Boolean): ${tableNameSingular}MutationPayload
       ${tableNamePlural}RemoveOneById(id: ID!): ${tableNameSingular}
       ${tableNamePlural}RemoveOne(where: JSON!): ${tableNameSingular}
     `;
@@ -20890,7 +20965,11 @@ var transcriptionsContext = new ExuluContext2({
     // Post-processing results carried from the transcription job at finalize:
     // [{ prompt_id, agent_id, prompt_name, output, ran_at }]. Recall meeting
     // transcripts only for now.
-    { name: "post_processing", type: "json", editable: false }
+    { name: "post_processing", type: "json", editable: false },
+    // Link back to the Recall recording so the mixed video stays reachable
+    // (resolve a fresh URL via ExuluRecall.getRecordingVideoUrl — it expires
+    // after six hours). Null for Whisper uploads.
+    { name: "recall_recording_id", type: "text" }
   ],
   sources: [],
   active: true,
@@ -22219,6 +22298,12 @@ var ExuluReadApi = {
   embedQuery
 };
 
+// src/exulu/context-fields-for-sync.ts
+var contextFieldsForSync = (context) => (context.fields ?? []).filter((field) => !!field?.name && !!field?.type).map((field) => ({
+  ...field,
+  name: field.type === "file" ? `${field.name}_s3key` : field.name
+}));
+
 // src/postgres/init-exulu-db.ts
 var {
   agentsSchema: agentsSchema3,
@@ -22266,8 +22351,9 @@ var addMissingFields = async (knex, tableName, fields, skipFields = []) => {
       await knex.schema.alterTable(tableName, (table) => {
         mapType(table, type, sanitizedName, defaultValue, unique);
       });
+    } else {
+      console.log(`[EXULU] Field '${sanitizedName}' already exists in ${tableName} table.`);
     }
-    console.log(`[EXULU] Field '${sanitizedName}' already exists in ${tableName} table.`);
   }
 };
 var migrateUserCredentialsDataColumn = async (knex) => {
@@ -22451,11 +22537,18 @@ var up = async function(knex) {
   }
 };
 var contextDatabases = async (contexts) => {
+  const { db: knex } = await postgresClient();
   for (const context of contexts) {
     const itemsTableExists = await context.tableExists();
     if (!itemsTableExists) {
       console.log("[EXULU] items table does not exist, creating it.");
       await context.createItemsTable();
+    } else {
+      await addMissingFields(
+        knex,
+        getTableName(context.id),
+        contextFieldsForSync(context)
+      );
     }
     const chunksTableExists = await context.chunksTableExists();
     if (!chunksTableExists && context.embedder) {
@@ -24312,6 +24405,47 @@ async function rerank(input) {
   return resolved.rerank(query, items, { topN });
 }
 
+// src/exulu/models/public.ts
+var ExuluModels = {
+  /**
+   * A LanguageModel bound to the tenant's LiteLLM proxy.
+   *
+   * Pass `userId` wherever one is known — it is what carries the caller's
+   * identity tags into LiteLLM, and therefore what makes the spend visible to
+   * that user's team budget. Resolution still succeeds without it; the calls
+   * are simply unattributed.
+   */
+  resolve: async ({
+    modelId,
+    userId
+  }) => {
+    let user;
+    if (userId != null) {
+      const { db } = await postgresClient();
+      user = await db("users").where({ id: userId }).first();
+    }
+    const { languageModel } = await resolveModel({ modelId, user: user || void 0 });
+    return languageModel;
+  },
+  /**
+   * Provider options for a constrained structured-output call.
+   *
+   * Gemini 3+ counts thinking tokens against maxOutputTokens, so a call with a
+   * token cap returns an empty 200 unless reasoning is disabled. Returns
+   * undefined for non-Gemini models.
+   */
+  providerOptions: (model) => microCallProviderOptions(model)
+};
+
+// src/exulu/recall/public.ts
+var ExuluRecall = {
+  /**
+   * Fresh signed URL for a recording's mixed MP4, or null. Resolve at point
+   * of use — the URL expires after six hours.
+   */
+  getRecordingVideoUrl: (recordingId) => recallService.getRecordingVideoUrl(recordingId)
+};
+
 // src/index.ts
 var ExuluJobs = {
   redis: redisClient
@@ -24409,10 +24543,12 @@ export {
   ExuluDocumentProcessor,
   ExuluEval,
   ExuluJobs,
+  ExuluModels,
   ExuluOtel,
   ExuluPython,
   queues as ExuluQueues,
   ExuluReadApi,
+  ExuluRecall,
   ExuluReranker,
   ExuluTool,
   ExuluVariables,

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@exulu/backend",
   "author": "Qventu Bv.",
-  "version": "3.6.0",
+  "version": "3.7.0",
   "main": "./dist/index.js",
   "private": false,
   "publishConfig": {