mirror of
https://github.com/temetro/temetro.git
synced 2026-08-06 08:57:41 +00:00
Khalid Abdi
3a7378e00d
Real LLM chat replacing the mock, backend-centric per the plan: - Multi-provider API-key mode (OpenAI / Anthropic / Gemini via the AI SDK) plus local Ollama (OpenAI-compatible endpoint). Provider is derived from the picked model id; the matching stored key is used. New user_ai_settings table holds per-user config with provider API keys encrypted at rest (AES-256-GCM, src/lib/crypto.ts, keyed by AI_CREDENTIALS_KEY). - POST /api/ai/config (get/put, secrets never returned), POST /api/ai/test (Ollama ping / key presence), POST /api/ai/import (approved migration commit, re-validated server-side, reuses the audited patient service). - POST /api/chat: streamText agent with tools (getPatient, getPatientLabs, searchPatients, previewImport). Real record data streams to the clinician as custom data parts (cards) while the model sees only Veil-redacted results. - Veil (src/services/ai/veil.ts): de-identifies patient identifiers to tokens before external calls, resolves tokens on tool args, and rehydrates the final answer. Bypassed for local Ollama. External mode runs non-streamed so the rehydrated text is correct. Every call is audited (provider + Veil level). - Shared role-scoping helpers extracted to src/lib/role-scope.ts (reused by the patient routes and chat tools so visibility rules match). Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
68 lines
2.4 KiB
TypeScript
68 lines
2.4 KiB
TypeScript
import "dotenv/config";
|
|
import { z } from "zod";
|
|
|
|
// Defaults keep this module loadable even with no .env present (e.g. when the
|
|
// Better Auth / drizzle-kit CLIs introspect the config offline). Real values
|
|
// come from .env at runtime; production misconfiguration is caught below.
|
|
const schema = z.object({
|
|
DATABASE_URL: z
|
|
.string()
|
|
.min(1)
|
|
.default("postgres://temetro:temetro@localhost:5432/temetro"),
|
|
BETTER_AUTH_SECRET: z.string().min(1).default("dev-insecure-secret-change-me"),
|
|
// Key used to encrypt at-rest AI provider API keys (src/lib/crypto.ts). Any
|
|
// length passphrase; rotating it invalidates stored keys (they re-enter).
|
|
AI_CREDENTIALS_KEY: z
|
|
.string()
|
|
.min(1)
|
|
.default("dev-insecure-ai-key-change-me"),
|
|
BETTER_AUTH_URL: z.string().min(1).default("http://localhost:4000"),
|
|
FRONTEND_URL: z.string().min(1).default("http://localhost:3000"),
|
|
PORT: z.coerce.number().int().positive().default(4000),
|
|
NODE_ENV: z
|
|
.enum(["development", "production", "test"])
|
|
.default("development"),
|
|
SMTP_HOST: z.string().optional(),
|
|
SMTP_PORT: z.coerce.number().int().positive().optional(),
|
|
SMTP_USER: z.string().optional(),
|
|
SMTP_PASS: z.string().optional(),
|
|
SMTP_FROM: z.string().default("temetro <no-reply@temetro.local>"),
|
|
});
|
|
|
|
// docker compose passes unset optionals as empty strings (e.g. `${SMTP_PORT:-}`).
|
|
// Treat empty strings as "unset" so optionals/defaults apply instead of failing
|
|
// coercion (e.g. Number("") === 0).
|
|
const rawEnv = Object.fromEntries(
|
|
Object.entries(process.env).map(([k, v]) => [k, v === "" ? undefined : v]),
|
|
);
|
|
|
|
const parsed = schema.safeParse(rawEnv);
|
|
|
|
if (!parsed.success) {
|
|
const lines = parsed.error.issues
|
|
.map((i) => ` - ${i.path.join(".") || "(root)"}: ${i.message}`)
|
|
.join("\n");
|
|
console.error(`❌ Invalid environment variables:\n${lines}`);
|
|
process.exit(1);
|
|
}
|
|
|
|
export const env = parsed.data;
|
|
|
|
// Fail fast on dangerous production misconfiguration.
|
|
if (env.NODE_ENV === "production") {
|
|
if (env.BETTER_AUTH_SECRET === "dev-insecure-secret-change-me") {
|
|
console.error(
|
|
"❌ BETTER_AUTH_SECRET is unset in production. Generate one: openssl rand -base64 32",
|
|
);
|
|
process.exit(1);
|
|
}
|
|
if (env.AI_CREDENTIALS_KEY === "dev-insecure-ai-key-change-me") {
|
|
console.error(
|
|
"❌ AI_CREDENTIALS_KEY is unset in production. Generate one: openssl rand -base64 32",
|
|
);
|
|
process.exit(1);
|
|
}
|
|
}
|
|
|
|
export const isProd = env.NODE_ENV === "production";
|