ruflo 3.5.2 → 3.5.3

package/src/ruvocal/src/lib/server/api/types.ts

@@ -0,0 +1,37 @@
+import type { BackendModel } from "$lib/server/models";
+
+export type GETModelsResponse = Array<{
+	id: string;
+	name: string;
+	websiteUrl?: string;
+	modelUrl?: string;
+	datasetName?: string;
+	datasetUrl?: string;
+	displayName: string;
+	description?: string;
+	logoUrl?: string;
+	providers?: Array<{ provider: string } & Record<string, unknown>>;
+	promptExamples?: { title: string; prompt: string }[];
+	parameters: BackendModel["parameters"];
+	preprompt?: string;
+	multimodal: boolean;
+	multimodalAcceptedMimetypes?: string[];
+	supportsTools?: boolean;
+	unlisted: boolean;
+	hasInferenceAPI: boolean;
+	isRouter: boolean;
+}>;
+
+export type GETOldModelsResponse = Array<{
+	id: string;
+	name: string;
+	displayName: string;
+	transferTo?: string;
+}>;
+
+export interface FeatureFlags {
+	enableAssistants: boolean;
+	loginEnabled: boolean;
+	isAdmin: boolean;
+	transcriptionEnabled: boolean;
+}

package/src/ruvocal/src/lib/server/api/utils/requireAuth.ts

@@ -0,0 +1,22 @@
+import { error } from "@sveltejs/kit";
+
+/**
+ * Throws 401 if neither a user._id nor sessionId is present in locals.
+ */
+export function requireAuth(locals: App.Locals): void {
+	if (!locals.user?._id && !locals.sessionId) {
+		error(401, "Must have a valid session or user");
+	}
+}
+
+/**
+ * Throws 401 if no user/session, 403 if not admin.
+ */
+export function requireAdmin(locals: App.Locals): void {
+	if (!locals.user && !locals.sessionId) {
+		error(401, "Unauthorized");
+	}
+	if (!locals.isAdmin) {
+		error(403, "Admin privileges required");
+	}
+}

package/src/ruvocal/src/lib/server/api/utils/resolveConversation.ts

@@ -0,0 +1,69 @@
+import { collections } from "$lib/server/database";
+import { ObjectId } from "mongodb";
+import { authCondition } from "$lib/server/auth";
+import { convertLegacyConversation } from "$lib/utils/tree/convertLegacyConversation";
+import { error } from "@sveltejs/kit";
+
+/**
+ * Resolve a conversation by ID.
+ * - 7-char IDs → shared conversation lookup
+ * - ObjectId strings → owned conversation lookup with auth check
+ *
+ * Returns the conversation with legacy fields converted and a `shared` flag.
+ */
+export async function resolveConversation(
+	id: string,
+	locals: App.Locals,
+	fromShare?: string | null
+) {
+	let conversation;
+	let shared = false;
+
+	if (id.length === 7) {
+		// shared link of length 7
+		conversation = await collections.sharedConversations.findOne({
+			_id: id,
+		});
+		shared = true;
+		if (!conversation) {
+			error(404, "Conversation not found");
+		}
+	} else {
+		try {
+			new ObjectId(id);
+		} catch {
+			error(400, "Invalid conversation ID format");
+		}
+
+		conversation = await collections.conversations.findOne({
+			_id: new ObjectId(id),
+			...authCondition(locals),
+		});
+
+		if (!conversation) {
+			const conversationExists =
+				(await collections.conversations.countDocuments({
+					_id: new ObjectId(id),
+				})) !== 0;
+
+			if (conversationExists) {
+				error(
+					403,
+					"You don't have access to this conversation. If someone gave you this link, ask them to use the 'share' feature instead."
+				);
+			}
+
+			error(404, "Conversation not found.");
+		}
+
+		if (fromShare && conversation.meta?.fromShareId === fromShare) {
+			shared = true;
+		}
+	}
+
+	return {
+		...conversation,
+		...convertLegacyConversation(conversation),
+		shared,
+	};
+}

package/src/ruvocal/src/lib/server/api/utils/resolveModel.ts

@@ -0,0 +1,27 @@
+import { error } from "@sveltejs/kit";
+
+/**
+ * Resolve a model by namespace and optional model name.
+ * Looks up in the models registry and returns the model, or throws 404 if not found or unlisted.
+ */
+export async function resolveModel(namespace: string, model?: string) {
+	let modelId = namespace;
+	if (model) {
+		modelId += "/" + model;
+	}
+
+	try {
+		const { models } = await import("$lib/server/models");
+		const found = models.find((m) => m.id === modelId);
+		if (!found || found.unlisted) {
+			error(404, "Model not found");
+		}
+		return found;
+	} catch (e) {
+		// Re-throw SvelteKit HttpErrors
+		if (e && typeof e === "object" && "status" in e) {
+			throw e;
+		}
+		error(500, "Models not available");
+	}
+}

package/src/ruvocal/src/lib/server/api/utils/superjsonResponse.ts

@@ -0,0 +1,15 @@
+import superjson from "superjson";
+
+/**
+ * Create a JSON response serialized with superjson.
+ * Matches the wire format of the former Elysia `mapResponse` hook.
+ */
+export function superjsonResponse(data: unknown, init?: ResponseInit): Response {
+	return new Response(superjson.stringify(data), {
+		...init,
+		headers: {
+			"Content-Type": "application/json",
+			...init?.headers,
+		},
+	});
+}

package/src/ruvocal/src/lib/server/apiToken.ts

@@ -0,0 +1,11 @@
+import { config } from "$lib/server/config";
+
+export function getApiToken(locals: App.Locals | undefined) {
+	if (config.USE_USER_TOKEN === "true") {
+		if (!locals?.token) {
+			throw new Error("User token not found");
+		}
+		return locals.token;
+	}
+	return config.OPENAI_API_KEY || config.HF_TOKEN;
+}