@r8s/librechat 0.2.0 → 0.2.1

package/dist/index.d.ts

@@ -0,0 +1,144 @@
+import type { SecretRef } from '@r8s/recipes';
+export interface MongoConnection {
+    /** MongoDB host (cluster-internal service or external host) */
+    host: string;
+    /** MongoDB port (defaults to 27017) */
+    port?: number;
+    /**
+     * Database username. Inlined as a plain env var — usernames are
+     * identifiers, not secrets (same convention as the n8n/outline DB
+     * recipes). When omitted, the username is read from the password
+     * secret (key: `username`).
+     */
+    username?: string;
+    /**
+     * Name of an existing Secret holding the MongoDB credentials.
+     * Keys: `username`, `password`.
+     */
+    passwordSecret: string;
+    /**
+     * authSource query parameter appended to MONGO_URI when set
+     * (e.g. 'admin' for databases authenticating against the admin db).
+     */
+    authSource?: string;
+}
+export interface LibreChatProps {
+    /** Resource name (defaults to 'librechat') */
+    name?: string;
+    /** Kubernetes namespace (defaults to 'default') */
+    namespace?: string;
+    /** Container image tag (defaults to 'latest' — pin a version in production) */
+    version?: string;
+    /** Public hostname for the chat UI (required) */
+    host: string;
+    /** Port the app listens on in-container (defaults to 3080) */
+    port?: number;
+    /** Number of replicas (defaults to 1) */
+    replicas?: number;
+    /**
+     * External MongoDB connection (REQUIRED). LibreChat stores users,
+     * conversations and messages in MongoDB — this component does NOT
+     * provision it. Run MongoDB separately (replica-set StatefulSet,
+     * operator or managed service) and point this prop at it.
+     */
+    mongodb: MongoConnection;
+    /** Provision a redis replication group for session caching (default: true) */
+    cache?: boolean;
+    /**
+     * Add a Meilisearch sidecar service for full-text / RAG search
+     * (default: false). MEILI_MASTER_KEY is shared from the app secrets
+     * bundle (key: meiliMasterKey). Sets SEARCH=true on the app so it
+     * actually queries the meilisearch instance.
+     */
+    search?: boolean;
+    /**
+     * OIDC SSO client — register LibreChat as a client in Keycloak (the
+     * Auth recipe) and reference the client secret through the backend.
+     * Uses the upstream OPENID_* env names; ALLOW_SOCIAL_LOGIN plus
+     * DOMAIN_SERVER/DOMAIN_CLIENT are set from `host`.
+     */
+    sso?: {
+        issuer: string;
+        clientId: string;
+        clientSecretRef: SecretRef;
+        scopes?: string;
+    };
+    /** OpenAI-compatible API base URL for model calls (defaults to https://api.berget.ai/v1) */
+    backend?: string;
+    /**
+     * Name of an existing Secret holding `secretKey`, `modelApiKey`,
+     * the multi-user session credentials `jwtSecret`, `jwtRefreshSecret`,
+     * `credsKey`, `credsIv` — and `meiliMasterKey` when `search` is enabled.
+     *
+     * Hex sizing: jwtSecret / jwtRefreshSecret / credsKey are 64 hex chars
+     * (32 bytes); credsIv is 32 hex chars (16 bytes — AES-IV).
+     *
+     * Required unless a secrets backend (openbao/vault) is configured on
+     * the surrounding Platform — the backend then provisions them.
+     * Plaintext secrets are not supported.
+     */
+    secretsName?: string;
+    /** Requested resources */
+    resources?: {
+        requests?: {
+            cpu?: string;
+            memory?: string;
+        };
+        limits?: {
+            cpu?: string;
+            memory?: string;
+        };
+    };
+    /** TLS configuration (defaults to letsencrypt-prod cluster issuer) */
+    tls?: {
+        secretName: string;
+        clusterIssuer: string;
+    };
+}
+/**
+ * LibreChat — multi-model AI chat UI with external MongoDB, Redis
+ * sessions, optional Meilisearch and OIDC SSO.
+ *
+ * @title LibreChat
+ * @category AI & Chat
+ *
+ * Composes:
+ * - LibreChat Deployment + Service + Endpoint (MongoDB is provisioned
+ *   externally — pass its coordinates via the required `mongodb` prop)
+ * - Redis replication group for session caching (default on, service
+ *   ${name}-redis; USE_REDIS=true points sessions at it)
+ * - Optional Meilisearch Deployment + Service for message/RAG search
+ *   (SEARCH=true wires the app to it)
+ * - SECRET_KEY / OPENAI_API_KEY / JWT + CREDS session credentials /
+ *   MEILI_MASTER_KEY provisioned through the Platform secrets backend
+ *   (openbao / vault), or referenced from an existing Secret
+ * - OIDC SSO against the Keycloak `Auth` recipe
+ *
+ * Wrap the component in `<Platform secrets={{ backend: 'openbao' }}>` and
+ * the app secrets bundle (keys: secretKey, modelApiKey, jwtSecret,
+ * jwtRefreshSecret, credsKey, credsIv, meiliMasterKey) is provisioned
+ * for you. Without a backend you must point `secretsName` at a
+ * pre-created Secret. MongoDB itself is NOT provisioned here — run it
+ * separately and connect via `mongodb`.
+ *
+ * @example
+ * import { Platform } from '@r8s/recipes'
+ * import { LibreChat } from '@r8s/librechat'
+ *
+ * export default (
+ *   <Platform secrets={{ backend: 'openbao', mount: 'kv', path: 'apps' }}>
+ *     <LibreChat
+ *       name="chat"
+ *       host="chat.example.com"
+ *       mongodb={{ host: 'mongo.data.svc.cluster.local', passwordSecret: 'chat-mongodb-credentials' }}
+ *       sso={{
+ *         issuer: 'https://keycloak.example.com/realms/platform',
+ *         clientId: 'librechat',
+ *         clientSecretRef: { secret: 'librechat-sso', key: 'clientSecret' },
+ *       }}
+ *     />
+ *   </Platform>
+ * )
+ */
+export declare function LibreChat(props: LibreChatProps): import("@r8s/core").r8sElement;
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.tsx"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,cAAc,CAAA;AAG7C,MAAM,WAAW,eAAe;IAC9B,+DAA+D;IAC/D,IAAI,EAAE,MAAM,CAAA;IACZ,uCAAuC;IACvC,IAAI,CAAC,EAAE,MAAM,CAAA;IACb;;;;;OAKG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB;;;OAGG;IACH,cAAc,EAAE,MAAM,CAAA;IACtB;;;OAGG;IACH,UAAU,CAAC,EAAE,MAAM,CAAA;CACpB;AAED,MAAM,WAAW,cAAc;IAC7B,8CAA8C;IAC9C,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,mDAAmD;IACnD,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,+EAA+E;IAC/E,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,iDAAiD;IACjD,IAAI,EAAE,MAAM,CAAA;IACZ,8DAA8D;IAC9D,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,yCAAyC;IACzC,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB;;;;;OAKG;IACH,OAAO,EAAE,eAAe,CAAA;IACxB,8EAA8E;IAC9E,KAAK,CAAC,EAAE,OAAO,CAAA;IACf;;;;;OAKG;IACH,MAAM,CAAC,EAAE,OAAO,CAAA;IAChB;;;;;OAKG;IACH,GAAG,CAAC,EAAE;QACJ,MAAM,EAAE,MAAM,CAAA;QACd,QAAQ,EAAE,MAAM,CAAA;QAChB,eAAe,EAAE,SAAS,CAAA;QAC1B,MAAM,CAAC,EAAE,MAAM,CAAA;KAChB,CAAA;IACD,4FAA4F;IAC5F,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB;;;;;;;;;;;OAWG;IACH,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,0BAA0B;IAC1B,SAAS,CAAC,EAAE;QACV,QAAQ,CAAC,EAAE;YAAE,GAAG,CAAC,EAAE,MAAM,CAAC;YAAC,MAAM,CAAC,EAAE,MAAM,CAAA;SAAE,CAAA;QAC5C,MAAM,CAAC,EAAE;YAAE,GAAG,CAAC,EAAE,MAAM,CAAC;YAAC,MAAM,CAAC,EAAE,MAAM,CAAA;SAAE,CAAA;KAC3C,CAAA;IACD,sEAAsE;IACtE,GAAG,CAAC,EAAE;QACJ,UAAU,EAAE,MAAM,CAAA;QAClB,aAAa,EAAE,MAAM,CAAA;KACtB,CAAA;CACF;AAID;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4CG;AACH,wBAAgB,SAAS,CAAC,KAAK,EAAE,cAAc,kCA4O9C"}

package/dist/index.js

@@ -0,0 +1,220 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.LibreChat = LibreChat;
+const jsx_runtime_1 = require("@r8s/core/jsx-runtime");
+const core_1 = require("@r8s/core");
+const defaults_1 = require("@r8s/core/defaults");
+const crds_1 = require("@r8s/crds");
+const recipes_1 = require("@r8s/recipes");
+const redis_1 = require("@r8s/crds/redis");
+const OPERATOR_REDIS = 'redis-operator';
+/**
+ * LibreChat — multi-model AI chat UI with external MongoDB, Redis
+ * sessions, optional Meilisearch and OIDC SSO.
+ *
+ * @title LibreChat
+ * @category AI & Chat
+ *
+ * Composes:
+ * - LibreChat Deployment + Service + Endpoint (MongoDB is provisioned
+ *   externally — pass its coordinates via the required `mongodb` prop)
+ * - Redis replication group for session caching (default on, service
+ *   ${name}-redis; USE_REDIS=true points sessions at it)
+ * - Optional Meilisearch Deployment + Service for message/RAG search
+ *   (SEARCH=true wires the app to it)
+ * - SECRET_KEY / OPENAI_API_KEY / JWT + CREDS session credentials /
+ *   MEILI_MASTER_KEY provisioned through the Platform secrets backend
+ *   (openbao / vault), or referenced from an existing Secret
+ * - OIDC SSO against the Keycloak `Auth` recipe
+ *
+ * Wrap the component in `<Platform secrets={{ backend: 'openbao' }}>` and
+ * the app secrets bundle (keys: secretKey, modelApiKey, jwtSecret,
+ * jwtRefreshSecret, credsKey, credsIv, meiliMasterKey) is provisioned
+ * for you. Without a backend you must point `secretsName` at a
+ * pre-created Secret. MongoDB itself is NOT provisioned here — run it
+ * separately and connect via `mongodb`.
+ *
+ * @example
+ * import { Platform } from '@r8s/recipes'
+ * import { LibreChat } from '@r8s/librechat'
+ *
+ * export default (
+ *   <Platform secrets={{ backend: 'openbao', mount: 'kv', path: 'apps' }}>
+ *     <LibreChat
+ *       name="chat"
+ *       host="chat.example.com"
+ *       mongodb={{ host: 'mongo.data.svc.cluster.local', passwordSecret: 'chat-mongodb-credentials' }}
+ *       sso={{
+ *         issuer: 'https://keycloak.example.com/realms/platform',
+ *         clientId: 'librechat',
+ *         clientSecretRef: { secret: 'librechat-sso', key: 'clientSecret' },
+ *       }}
+ *     />
+ *   </Platform>
+ * )
+ */
+function LibreChat(props) {
+    const { name = 'librechat', namespace = 'default', version = 'latest', host, port = 3080, replicas = 1, mongodb, cache = true, search = false, sso, backend = 'https://api.berget.ai/v1', secretsName, resources = {
+        requests: { memory: '512Mi', cpu: '250m' },
+        limits: { memory: '2Gi', cpu: '1000m' },
+    }, tls = { secretName: `${name}-tls`, clusterIssuer: 'letsencrypt-prod' }, } = props;
+    const sharedOperators = (0, core_1.useContext)(defaults_1.OperatorContext);
+    const secretProvider = (0, core_1.useContext)(defaults_1.SecretContext);
+    const resources_ = [];
+    const appSecretsName = secretsName ?? `${name}-secrets`;
+    // --- Secret provisioning ---------------------------------------------------
+    // SECRET_KEY signs sessions, modelApiKey pays for inference, the JWT +
+    // CREDS keys carry multi-user login state and meiliMasterKey guards the
+    // search index — none of them may be rendered as plaintext. With a
+    // secrets backend the bundle (keys: secretKey, modelApiKey, jwtSecret,
+    // jwtRefreshSecret, credsKey, credsIv, meiliMasterKey) is provisioned
+    // through the backend; otherwise reference a pre-created Secret.
+    if (!secretsName) {
+        if (!secretProvider ||
+            (secretProvider.backend !== 'vault' && secretProvider.backend !== 'openbao')) {
+            throw new Error(`LibreChat "${name}" requires application secrets (SECRET_KEY, modelApiKey).\n` +
+                `\n` +
+                `These must not be rendered as plaintext.\n` +
+                `\n` +
+                `Fix: configure a secrets backend on the Platform:\n` +
+                `  <Platform secrets={{ backend: 'openbao', mount: 'kv', path: 'apps' }}>\n` +
+                `    <LibreChat name="${name}" host="${host}" />\n` +
+                `  </Platform>\n` +
+                `\n` +
+                `Or reference a pre-created Secret (keys: secretKey, modelApiKey, jwtSecret, jwtRefreshSecret, credsKey, credsIv` +
+                `${search ? ', meiliMasterKey' : ''}):\n` +
+                `  <LibreChat name="${name}" host="${host}" secretsName="${name}-secrets" />`);
+        }
+        const spec = {
+            ...(secretProvider.backend === 'vault'
+                ? { vaultAuthRef: secretProvider.authRef }
+                : { openbaoAuthRef: secretProvider.authRef }),
+            mount: secretProvider.mount,
+            type: 'kv-v2',
+            path: `${secretProvider.path ?? name}/${name}/secrets`,
+            destination: { create: true, name: appSecretsName },
+        };
+        resources_.push(secretProvider.backend === 'vault'
+            ? (0, core_1.jsx)('VaultStaticSecret', {
+                apiVersion: 'secrets.hashicorp.com/v1beta1',
+                kind: 'VaultStaticSecret',
+                metadata: { name: `${name}-secrets`, namespace },
+                spec,
+            })
+            : (0, core_1.jsx)('OpenBaoStaticSecret', {
+                apiVersion: 'secrets.openbao.org/v1beta1',
+                kind: 'OpenBaoStaticSecret',
+                metadata: { name: `${name}-secrets`, namespace },
+                spec,
+            }));
+    }
+    // --- Operators --------------------------------------------------------------
+    if (cache && !sharedOperators.some((op) => op.name === OPERATOR_REDIS)) {
+        resources_.push((0, core_1.declareOperator)(crds_1.operators[OPERATOR_REDIS]()));
+    }
+    // Redis — session cache (OT-Container-Kit operator). A replication group
+    // so the single ${name}-redis master service fronts a 3-node set.
+    if (cache) {
+        resources_.push((0, redis_1.RedisReplicationComponent)({
+            metadata: { name: `${name}-redis`, namespace },
+            spec: {
+                clusterSize: 3,
+                kubernetesConfig: { image: 'redis:7.2-alpine' },
+            },
+        }));
+    }
+    // --- Env wiring ----------------------------------------------------------------
+    // Every credential is referenced via secretKeyRef — no plaintext and no
+    // redundant $(VAR) self-echoes in the manifest. The WebService declares
+    // secret-backed vars before plain env vars, so dependent expansion on
+    // MONGO_URI resolves.
+    const mongoPort = mongodb.port ?? 27017;
+    const env = {
+        HOST: '0.0.0.0',
+        PORT: String(port),
+        // Deterministic parts inlined; credentials arrive via MONGO_USERNAME /
+        // MONGO_PASSWORD declared earlier through secretKeyRef
+        MONGO_URI: `mongodb://$(MONGO_USERNAME):$(MONGO_PASSWORD)@${mongodb.host}:${mongoPort}/${name}` +
+            (mongodb.authSource ? `?authSource=${mongodb.authSource}` : ''),
+        // LibreChat speaks to OpenAI-compatible backends through its reverse
+        // proxy (there is no OPENAI_API_BASE_URL env upstream)
+        OPENAI_REVERSE_PROXY: `${backend}/chat/completions`,
+        ...(cache ? { USE_REDIS: 'true', REDIS_URI: `redis://${name}-redis:6379` } : {}),
+        ...(search
+            ? {
+                SEARCH: 'true',
+                MEILI_HOST: `http://${name}-meilisearch:7700`,
+                MEILI_NO_SYNC: 'false',
+            }
+            : {}),
+        ...(sso
+            ? {
+                ALLOW_SOCIAL_LOGIN: 'true',
+                DOMAIN_SERVER: `https://${host}`,
+                DOMAIN_CLIENT: `https://${host}`,
+                OPENID_ISSUER: sso.issuer,
+                OPENID_CLIENT_ID: sso.clientId,
+                OPENID_SCOPES: sso.scopes ?? 'openid profile email',
+                OPENID_CALLBACK_URL: `https://${host}/oauth/openid/callback`,
+            }
+            : {}),
+    };
+    // The username is an identifier, not a secret — when the caller supplies
+    // it explicitly it is inlined as plain env; otherwise it is read from the
+    // MongoDB credentials secret (key: username) like the password.
+    if (mongodb.username) {
+        env.MONGO_USERNAME = mongodb.username;
+    }
+    // Credentials delivered via secretKeyRef (runtime injection). JWT_SECRET /
+    // JWT_REFRESH_SECRET / CREDS_KEY / CREDS_IV back multi-user sessions:
+    // per-user message encryption and refresh-token issuance need shared
+    // random values across replicas. Hex sizing: jwtSecret, jwtRefreshSecret
+    // and credsKey are 64 hex chars (32 bytes); credsIv is 32 hex chars
+    // (16 bytes).
+    const secrets = {
+        ...(mongodb.username
+            ? {}
+            : { MONGO_USERNAME: { secret: mongodb.passwordSecret, key: 'username' } }),
+        MONGO_PASSWORD: { secret: mongodb.passwordSecret, key: 'password' },
+        SECRET_KEY: { secret: appSecretsName, key: 'secretKey' },
+        OPENAI_API_KEY: { secret: appSecretsName, key: 'modelApiKey' },
+        JWT_SECRET: { secret: appSecretsName, key: 'jwtSecret' },
+        JWT_REFRESH_SECRET: { secret: appSecretsName, key: 'jwtRefreshSecret' },
+        CREDS_KEY: { secret: appSecretsName, key: 'credsKey' },
+        CREDS_IV: { secret: appSecretsName, key: 'credsIv' },
+        ...(search ? { MEILI_MASTER_KEY: { secret: appSecretsName, key: 'meiliMasterKey' } } : {}),
+        ...(sso ? { OPENID_CLIENT_SECRET: sso.clientSecretRef } : {}),
+    };
+    // --- Runtime config (non-secret) -------------------------------------------
+    // REFRESH_TOKEN_EXPIRY is a plain TTL (7 days), not a credential — it is
+    // rendered as a ConfigMap and injected via configMapKeyRef, keeping
+    // plaintext env wiring (and the no-plaintext-secrets guardrail) clean.
+    const configMapName = `${name}-config`;
+    const configMap = {
+        apiVersion: 'v1',
+        kind: 'ConfigMap',
+        metadata: { name: configMapName, namespace },
+        data: { REFRESH_TOKEN_EXPIRY: '604800' },
+    };
+    resources_.push((0, core_1.jsx)('ConfigMap', configMap));
+    // --- App + optional Meilisearch + endpoint --------------------------------------
+    resources_.push((0, jsx_runtime_1.jsx)(recipes_1.WebService, { name: name, namespace: namespace, image: `ghcr.io/danny-avila/librechat:${version}`, port: port, replicas: replicas, resources: resources, env: env, secrets: secrets, rawEnv: [
+            {
+                name: 'REFRESH_TOKEN_EXPIRY',
+                valueFrom: { configMapKeyRef: { name: configMapName, key: 'REFRESH_TOKEN_EXPIRY' } },
+            },
+        ] }));
+    if (search) {
+        resources_.push((0, jsx_runtime_1.jsx)(recipes_1.WebService, { name: `${name}-meilisearch`, namespace: namespace, image: "getmeili/meilisearch:v1.6", port: 7700, replicas: 1, env: { MEILI_NO_ANALYTICS: 'true', MEILI_ENV: 'production' }, secrets: { MEILI_MASTER_KEY: { secret: appSecretsName, key: 'meiliMasterKey' } }, probes: { liveness: { path: '/health' }, readiness: { path: '/health' } }, resources: {
+                requests: { memory: '256Mi', cpu: '100m' },
+                limits: { memory: '1Gi', cpu: '500m' },
+            } }));
+    }
+    resources_.push((0, jsx_runtime_1.jsx)(recipes_1.Endpoint, { name: `${name}-endpoint`, namespace: namespace, host: host, serviceName: name, servicePort: port, tls: tls, annotations: {
+            'nginx.ingress.kubernetes.io/proxy-read-timeout': '300',
+            'nginx.ingress.kubernetes.io/proxy-send-timeout': '300',
+            'nginx.ingress.kubernetes.io/proxy-buffering': 'off',
+        } }));
+    return (0, core_1.jsx)(core_1.Fragment, { children: resources_ });
+}
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.tsx"],"names":[],"mappings":";;AAmJA,8BA4OC;;AA/XD,oCAAsE;AACtE,iDAAmE;AACnE,oCAAqC;AACrC,0CAAmD;AACnD,2CAA2D;AAgG3D,MAAM,cAAc,GAAG,gBAAgB,CAAA;AAEvC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4CG;AACH,SAAgB,SAAS,CAAC,KAAqB;IAC7C,MAAM,EACJ,IAAI,GAAG,WAAW,EAClB,SAAS,GAAG,SAAS,EACrB,OAAO,GAAG,QAAQ,EAClB,IAAI,EACJ,IAAI,GAAG,IAAI,EACX,QAAQ,GAAG,CAAC,EACZ,OAAO,EACP,KAAK,GAAG,IAAI,EACZ,MAAM,GAAG,KAAK,EACd,GAAG,EACH,OAAO,GAAG,0BAA0B,EACpC,WAAW,EACX,SAAS,GAAG;QACV,QAAQ,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,EAAE;QAC1C,MAAM,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,EAAE,OAAO,EAAE;KACxC,EACD,GAAG,GAAG,EAAE,UAAU,EAAE,GAAG,IAAI,MAAM,EAAE,aAAa,EAAE,kBAAkB,EAAE,GACvE,GAAG,KAAK,CAAA;IAET,MAAM,eAAe,GAAG,IAAA,iBAAU,EAAC,0BAAe,CAAC,CAAA;IACnD,MAAM,cAAc,GAAG,IAAA,iBAAU,EAAC,wBAAa,CAAC,CAAA;IAChD,MAAM,UAAU,GAA6B,EAAE,CAAA;IAE/C,MAAM,cAAc,GAAG,WAAW,IAAI,GAAG,IAAI,UAAU,CAAA;IAEvD,8EAA8E;IAC9E,uEAAuE;IACvE,wEAAwE;IACxE,mEAAmE;IACnE,uEAAuE;IACvE,sEAAsE;IACtE,iEAAiE;IACjE,IAAI,CAAC,WAAW,EAAE,CAAC;QACjB,IACE,CAAC,cAAc;YACf,CAAC,cAAc,CAAC,OAAO,KAAK,OAAO,IAAI,cAAc,CAAC,OAAO,KAAK,SAAS,CAAC,EAC5E,CAAC;YACD,MAAM,IAAI,KAAK,CACb,cAAc,IAAI,6DAA6D;gBAC7E,IAAI;gBACJ,4CAA4C;gBAC5C,IAAI;gBACJ,qDAAqD;gBACrD,4EAA4E;gBAC5E,wBAAwB,IAAI,WAAW,IAAI,QAAQ;gBACnD,iBAAiB;gBACjB,IAAI;gBACJ,iHAAiH;gBACjH,GAAG,MAAM,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,EAAE,MAAM;gBACzC,sBAAsB,IAAI,WAAW,IAAI,kBAAkB,IAAI,cAAc,CAChF,CAAA;QACH,CAAC;QAED,MAAM,IAAI,GAAG;YACX,GAAG,CAAC,cAAc,CAAC,OAAO,KAAK,OAAO;gBACpC,CAAC,CAAC,EAAE,YAAY,EAAE,cAAc,CAAC,OAAO,EAAE;gBAC1C,CAAC,CAAC,EAAE,cAAc,EAAE,cAAc,CAAC,OAAO,EAAE,CAAC;YAC/C,KAAK,EAAE,cAAc,CAAC,KAAK;YAC3B,IAAI,EAAE,OAAgB;YACtB,IAAI,EAAE,GAAG,cAAc,CAAC,IAAI,IAAI,IAAI,IAAI,IAAI,UAAU;YACtD,WAAW,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,cAAc,EAAE;SACpD,CAAA;QACD,UAAU,CAAC,IAAI,CACb,cAAc,CAAC,OAAO,KAAK,OAAO;YAChC,CAAC,CAAC,IAAA,UAAG,EAAC,mBAAmB,EAAE;gBACvB,UAAU,EAAE,+BAA+B;gBAC3C,IAAI,EAAE,mBAAmB;gBACzB,QAAQ,EAAE,EAAE,IAAI,EAAE,GAAG,IAAI,UAAU,EAAE,SAAS,EAAE;gBAChD,IAAI;aACL,CAAC;YACJ,CAAC,CAAC,IAAA,UAAG,EAAC,qBAAqB,EAAE;gBACzB,UAAU,EAAE,6BAA6B;gBACzC,IAAI,EAAE,qBAAqB;gBAC3B,QAAQ,EAAE,EAAE,IAAI,EAAE,GAAG,IAAI,UAAU,EAAE,SAAS,EAAE;gBAChD,IAAI;aACL,CAAC,CACP,CAAA;IACH,CAAC;IAED,+EAA+E;IAC/E,IAAI,KAAK,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,IAAI,KAAK,cAAc,CAAC,EAAE,CAAC;QACvE,UAAU,CAAC,IAAI,CAAC,IAAA,sBAAe,EAAC,gBAAS,CAAC,cAAc,CAAC,EAAE,CAAC,CAAC,CAAA;IAC/D,CAAC;IAED,yEAAyE;IACzE,kEAAkE;IAClE,IAAI,KAAK,EAAE,CAAC;QACV,UAAU,CAAC,IAAI,CACb,IAAA,iCAAyB,EAAC;YACxB,QAAQ,EAAE,EAAE,IAAI,EAAE,GAAG,IAAI,QAAQ,EAAE,SAAS,EAAE;YAC9C,IAAI,EAAE;gBACJ,WAAW,EAAE,CAAC;gBACd,gBAAgB,EAAE,EAAE,KAAK,EAAE,kBAAkB,EAAE;aAChD;SACF,CAAC,CACH,CAAA;IACH,CAAC;IAED,kFAAkF;IAClF,wEAAwE;IACxE,wEAAwE;IACxE,sEAAsE;IACtE,sBAAsB;IACtB,MAAM,SAAS,GAAG,OAAO,CAAC,IAAI,IAAI,KAAK,CAAA;IAEvC,MAAM,GAAG,GAA2B;QAClC,IAAI,EAAE,SAAS;QACf,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC;QAClB,uEAAuE;QACvE,uDAAuD;QACvD,SAAS,EACP,iDAAiD,OAAO,CAAC,IAAI,IAAI,SAAS,IAAI,IAAI,EAAE;YACpF,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,eAAe,OAAO,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACjE,qEAAqE;QACrE,uDAAuD;QACvD,oBAAoB,EAAE,GAAG,OAAO,mBAAmB;QACnD,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,WAAW,IAAI,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAChF,GAAG,CAAC,MAAM;YACR,CAAC,CAAC;gBACE,MAAM,EAAE,MAAM;gBACd,UAAU,EAAE,UAAU,IAAI,mBAAmB;gBAC7C,aAAa,EAAE,OAAO;aACvB;YACH,CAAC,CAAC,EAAE,CAAC;QACP,GAAG,CAAC,GAAG;YACL,CAAC,CAAC;gBACE,kBAAkB,EAAE,MAAM;gBAC1B,aAAa,EAAE,WAAW,IAAI,EAAE;gBAChC,aAAa,EAAE,WAAW,IAAI,EAAE;gBAChC,aAAa,EAAE,GAAG,CAAC,MAAM;gBACzB,gBAAgB,EAAE,GAAG,CAAC,QAAQ;gBAC9B,aAAa,EAAE,GAAG,CAAC,MAAM,IAAI,sBAAsB;gBACnD,mBAAmB,EAAE,WAAW,IAAI,wBAAwB;aAC7D;YACH,CAAC,CAAC,EAAE,CAAC;KACR,CAAA;IAED,yEAAyE;IACzE,0EAA0E;IAC1E,gEAAgE;IAChE,IAAI,OAAO,CAAC,QAAQ,EAAE,CAAC;QACrB,GAAG,CAAC,cAAc,GAAG,OAAO,CAAC,QAAQ,CAAA;IACvC,CAAC;IAED,2EAA2E;IAC3E,sEAAsE;IACtE,qEAAqE;IACrE,yEAAyE;IACzE,oEAAoE;IACpE,cAAc;IACd,MAAM,OAAO,GAAuC;QAClD,GAAG,CAAC,OAAO,CAAC,QAAQ;YAClB,CAAC,CAAC,EAAE;YACJ,CAAC,CAAC,EAAE,cAAc,EAAE,EAAE,MAAM,EAAE,OAAO,CAAC,cAAc,EAAE,GAAG,EAAE,UAAU,EAAE,EAAE,CAAC;QAC5E,cAAc,EAAE,EAAE,MAAM,EAAE,OAAO,CAAC,cAAc,EAAE,GAAG,EAAE,UAAU,EAAE;QACnE,UAAU,EAAE,EAAE,MAAM,EAAE,cAAc,EAAE,GAAG,EAAE,WAAW,EAAE;QACxD,cAAc,EAAE,EAAE,MAAM,EAAE,cAAc,EAAE,GAAG,EAAE,aAAa,EAAE;QAC9D,UAAU,EAAE,EAAE,MAAM,EAAE,cAAc,EAAE,GAAG,EAAE,WAAW,EAAE;QACxD,kBAAkB,EAAE,EAAE,MAAM,EAAE,cAAc,EAAE,GAAG,EAAE,kBAAkB,EAAE;QACvE,SAAS,EAAE,EAAE,MAAM,EAAE,cAAc,EAAE,GAAG,EAAE,UAAU,EAAE;QACtD,QAAQ,EAAE,EAAE,MAAM,EAAE,cAAc,EAAE,GAAG,EAAE,SAAS,EAAE;QACpD,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,EAAE,MAAM,EAAE,cAAc,EAAE,GAAG,EAAE,gBAAgB,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC1F,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,oBAAoB,EAAE,GAAG,CAAC,eAAe,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC9D,CAAA;IAED,8EAA8E;IAC9E,yEAAyE;IACzE,oEAAoE;IACpE,uEAAuE;IACvE,MAAM,aAAa,GAAG,GAAG,IAAI,SAAS,CAAA;IACtC,MAAM,SAAS,GAAc;QAC3B,UAAU,EAAE,IAAI;QAChB,IAAI,EAAE,WAAW;QACjB,QAAQ,EAAE,EAAE,IAAI,EAAE,aAAa,EAAE,SAAS,EAAE;QAC5C,IAAI,EAAE,EAAE,oBAAoB,EAAE,QAAQ,EAAE;KACzC,CAAA;IACD,UAAU,CAAC,IAAI,CAAC,IAAA,UAAG,EAAC,WAAW,EAAE,SAAS,CAAC,CAAC,CAAA;IAE5C,mFAAmF;IACnF,UAAU,CAAC,IAAI,CACb,uBAAC,oBAAU,IACT,IAAI,EAAE,IAAI,EACV,SAAS,EAAE,SAAS,EACpB,KAAK,EAAE,iCAAiC,OAAO,EAAE,EACjD,IAAI,EAAE,IAAI,EACV,QAAQ,EAAE,QAAQ,EAClB,SAAS,EAAE,SAAS,EACpB,GAAG,EAAE,GAAG,EACR,OAAO,EAAE,OAAO,EAChB,MAAM,EAAE;YACN;gBACE,IAAI,EAAE,sBAAsB;gBAC5B,SAAS,EAAE,EAAE,eAAe,EAAE,EAAE,IAAI,EAAE,aAAa,EAAE,GAAG,EAAE,sBAAsB,EAAE,EAAE;aAC3E;SACZ,GACD,CACH,CAAA;IAED,IAAI,MAAM,EAAE,CAAC;QACX,UAAU,CAAC,IAAI,CACb,uBAAC,oBAAU,IACT,IAAI,EAAE,GAAG,IAAI,cAAc,EAC3B,SAAS,EAAE,SAAS,EACpB,KAAK,EAAC,2BAA2B,EACjC,IAAI,EAAE,IAAI,EACV,QAAQ,EAAE,CAAC,EACX,GAAG,EAAE,EAAE,kBAAkB,EAAE,MAAM,EAAE,SAAS,EAAE,YAAY,EAAE,EAC5D,OAAO,EAAE,EAAE,gBAAgB,EAAE,EAAE,MAAM,EAAE,cAAc,EAAE,GAAG,EAAE,gBAAgB,EAAE,EAAE,EAChF,MAAM,EAAE,EAAE,QAAQ,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,SAAS,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,EACzE,SAAS,EAAE;gBACT,QAAQ,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,EAAE;gBAC1C,MAAM,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,EAAE,MAAM,EAAE;aACvC,GACD,CACH,CAAA;IACH,CAAC;IAED,UAAU,CAAC,IAAI,CACb,uBAAC,kBAAQ,IACP,IAAI,EAAE,GAAG,IAAI,WAAW,EACxB,SAAS,EAAE,SAAS,EACpB,IAAI,EAAE,IAAI,EACV,WAAW,EAAE,IAAI,EACjB,WAAW,EAAE,IAAI,EACjB,GAAG,EAAE,GAAG,EACR,WAAW,EAAE;YACX,gDAAgD,EAAE,KAAK;YACvD,gDAAgD,EAAE,KAAK;YACvD,6CAA6C,EAAE,KAAK;SACrD,GACD,CACH,CAAA;IAED,OAAO,IAAA,UAAG,EAAC,eAAQ,EAAE,EAAE,QAAQ,EAAE,UAAU,EAAE,CAAC,CAAA;AAChD,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@r8s/librechat",
-  "version": "0.2.0",
+  "version": "0.2.1",
   "description": "LibreChat multi-model AI chat — MongoDB (provisioned externally), Redis sessions, optional Meilisearch, OIDC SSO",
   "license": "MIT",
   "author": "Berget AI AB",
@@ -37,5 +37,8 @@
   "devDependencies": {
     "typescript": "^5.3.0",
     "vitest": "^1.0.0"
-  }
+  },
+  "files": [
+    "dist"
+  ]
 }