[Project] AI Standardization

.env

@@ -46,6 +46,9 @@ RPC_MOODLE_PORT=3011
 RPC_PDF_HOST=127.0.0.1
 RPC_PDF_PORT=3012
 
+RPC_LITELLM_HOST=127.0.0.1
+RPC_LITELLM_PORT=3013
+
 # System Statistics
 # PG_STATS_INTERVAL_MS:
 #   Interval in milliseconds between each PostgreSQL statistics snapshot

Makefile

@@ -28,6 +28,7 @@ help:
 	@echo "make build           		  		Create a dockerized production build including frontend, backend, nlp, services"
 	@echo "make build-clean                     Clean the environment of production build"
 	@echo "make docker          				Start docker images"
+	@echo "make docker-recompose 				Rebuild and start the dev Docker stack (postgres, rpc_*)"
 	@echo "make backup_db CONTAINER=<name/id>	Backup the database in the given container"
 	@echo "make recover_db CONTAINER=<name/id>  DUMP=<name in db_dumps folder>	Recover database into container"
 	@echo "make anonymize_dump CONTAINER=<name/id>  DUMP=<name in db_dumps folder>  [SEED=<int>]  [NUM=<int>]	Create anonymized dump (consent-filtered + pseudonymized)"
@@ -77,7 +78,11 @@ lint: frontend/node_modules/.uptodate
 
 .PHONY: docker
 docker:
-	@docker compose -f docker-compose.yml -f docker-dev.yml up postgres rpc_test rpc_moodle rpc_pdf
+	@docker compose -f docker-compose.yml -f docker-dev.yml up postgres rpc_test rpc_moodle rpc_pdf rpc_litellm
+
+.PHONY: docker-recompose
+docker-recompose:
+	@docker compose -f docker-compose.yml -f docker-dev.yml up --build postgres rpc_test rpc_moodle rpc_pdf rpc_litellm
 
 .PHONY: db
 db: backend/node_modules/.uptodate $(UTILS_MODULES_UPTODATE)

backend/db/MetaModel.js

@@ -17,6 +17,38 @@ module.exports = class MetaModel extends Model {
      */
     static fields = [];
 
+    /**
+     * Lets appDataUpdate accept a foreign userId when the requester owns the parent row.
+     * @type {{column: string, table: string}|null}
+     */
+    static foreignOwner = null;
+
+    /**
+     * Checks whether `requesterId` owns the parent row referenced by `foreignOwner.column`.
+     * Called generically from AppSocket#updateData's foreign-userId guard.
+     * @param {Object} payload Incoming appDataUpdate payload.
+     * @param {number} requesterId The socket's authenticated user id.
+     * @param {import("sequelize").Transaction} [transaction]
+     * @returns {Promise<boolean>}
+     */
+    static async validateForeignUserId(payload, requesterId, transaction) {
+        if (!this.foreignOwner) return false;
+        const {column, table} = this.foreignOwner;
+
+        let fkValue = payload[column];
+        if (!fkValue && payload.id) {
+            const existing = await this.findByPk(payload.id, {transaction});
+            fkValue = existing?.[column];
+        }
+        if (!fkValue) return false;
+
+        const parent = await this.sequelize.models[table].findOne({
+            where: {id: fkValue, deleted: false},
+            transaction,
+        });
+        return Boolean(parent) && Number(parent.userId) === Number(requesterId);
+    }
+
     /**
      * Filter object by keys
      * @param {Object} obj

backend/db/migrations/20260331100037-create-ai_credential.js

@@ -0,0 +1,82 @@
+'use strict';
+
+module.exports = {
+  async up(queryInterface, Sequelize) {
+    await queryInterface.createTable('ai_credential', {
+      id: {
+        type: Sequelize.INTEGER,
+        primaryKey: true,
+        autoIncrement: true,
+        allowNull: false,
+      },
+      userId: {
+        type: Sequelize.INTEGER,
+        allowNull: false,
+        references: {
+          model: 'user',
+          key: 'id',
+        },
+        onDelete: 'CASCADE',
+        onUpdate: 'CASCADE',
+      },
+      name: {
+        type: Sequelize.STRING,
+        allowNull: false,
+      },
+      apiKey: {
+        type: Sequelize.TEXT,
+        allowNull: true,
+        defaultValue: null,
+      },
+      provider: {
+        type: Sequelize.STRING,
+        allowNull: true,
+        defaultValue: null,
+      },
+      apiBaseUrl: {
+        type: Sequelize.STRING,
+        allowNull: true,
+        defaultValue: null,
+      },
+      apiVersion: {
+        type: Sequelize.STRING,
+        allowNull: true,
+        defaultValue: null,
+      },
+      additionalParameters: {
+        type: Sequelize.JSONB,
+        allowNull: true,
+        defaultValue: {},
+      },
+      enabled: {
+        type: Sequelize.BOOLEAN,
+        allowNull: false,
+        defaultValue: true,
+      },
+      deleted: {
+        type: Sequelize.BOOLEAN,
+        allowNull: false,
+        defaultValue: false,
+      },
+      deletedAt: {
+        type: Sequelize.DATE,
+        allowNull: true,
+        defaultValue: null,
+      },
+      createdAt: {
+        type: Sequelize.DATE,
+        allowNull: false,
+        defaultValue: Sequelize.fn('NOW'),
+      },
+      updatedAt: {
+        type: Sequelize.DATE,
+        allowNull: false,
+        defaultValue: Sequelize.fn('NOW'),
+      },
+    });
+  },
+
+  async down(queryInterface, Sequelize) {
+    await queryInterface.dropTable('ai_credential');
+  },
+};

backend/db/migrations/20260331101522-create-ai_model.js

@@ -0,0 +1,86 @@
+'use strict';
+
+module.exports = {
+  async up(queryInterface, Sequelize) {
+    await queryInterface.createTable('ai_model', {
+      id: {
+        type: Sequelize.INTEGER,
+        primaryKey: true,
+        autoIncrement: true,
+        allowNull: false,
+      },
+      aiCredentialId: {
+        type: Sequelize.INTEGER,
+        allowNull: true,
+        defaultValue: null,
+        references: {
+          model: 'ai_credential',
+          key: 'id',
+        },
+        onDelete: 'SET NULL',
+        onUpdate: 'CASCADE',
+      },
+      userId: {
+        type: Sequelize.INTEGER,
+        allowNull: false,
+        references: {
+          model: 'user',
+          key: 'id',
+        },
+        onDelete: 'CASCADE',
+        onUpdate: 'CASCADE',
+      },
+      name: {
+        type: Sequelize.STRING,
+        allowNull: false,
+      },
+      model: {
+        type: Sequelize.STRING,
+        allowNull: false,
+      },
+      description: {
+        type: Sequelize.TEXT,
+        allowNull: true,
+        defaultValue: null,
+      },
+      additionalParameters: {
+        type: Sequelize.JSONB,
+        defaultValue: {},
+      },
+      enabled: {
+        type: Sequelize.BOOLEAN,
+        allowNull: false,
+        defaultValue: true,
+      },
+      freeModel: {
+        type: Sequelize.BOOLEAN,
+        allowNull: false,
+        defaultValue: false,
+      },
+      deleted: {
+        type: Sequelize.BOOLEAN,
+        allowNull: false,
+        defaultValue: false,
+      },
+      deletedAt: {
+        type: Sequelize.DATE,
+        allowNull: true,
+        defaultValue: null,
+      },
+      createdAt: {
+        type: Sequelize.DATE,
+        allowNull: false,
+        defaultValue: Sequelize.fn('NOW'),
+      },
+      updatedAt: {
+        type: Sequelize.DATE,
+        allowNull: false,
+        defaultValue: Sequelize.fn('NOW'),
+      },
+    });
+  },
+
+  async down(queryInterface, Sequelize) {
+    await queryInterface.dropTable('ai_model');
+  },
+};

backend/db/migrations/20260331102200-create-ai_model_share.js

@@ -0,0 +1,74 @@
+'use strict';
+
+module.exports = {
+  async up(queryInterface, Sequelize) {
+    await queryInterface.createTable('ai_model_share', {
+      id: {
+        type: Sequelize.INTEGER,
+        primaryKey: true,
+        autoIncrement: true,
+        allowNull: false,
+      },
+      aiModelId: {
+        type: Sequelize.INTEGER,
+        allowNull: false,
+        references: {
+          model: 'ai_model',
+          key: 'id',
+        },
+        onDelete: 'CASCADE',
+        onUpdate: 'CASCADE',
+      },
+      userId: {
+        type: Sequelize.INTEGER,
+        allowNull: true,
+        defaultValue: null,
+        references: {
+          model: 'user',
+          key: 'id',
+        },
+        onDelete: 'CASCADE',
+        onUpdate: 'CASCADE',
+      },
+      roleId: {
+        type: Sequelize.INTEGER,
+        allowNull: true,
+        defaultValue: null,
+        references: {
+          model: 'user_role',
+          key: 'id',
+        },
+        onDelete: 'CASCADE',
+        onUpdate: 'CASCADE',
+      },
+      expiryDate: {
+        type: Sequelize.DATE,
+        allowNull: false,
+      },
+      deleted: {
+        type: Sequelize.BOOLEAN,
+        allowNull: false,
+        defaultValue: false,
+      },
+      deletedAt: {
+        type: Sequelize.DATE,
+        allowNull: true,
+        defaultValue: null,
+      },
+      createdAt: {
+        type: Sequelize.DATE,
+        allowNull: false,
+        defaultValue: Sequelize.fn('NOW'),
+      },
+      updatedAt: {
+        type: Sequelize.DATE,
+        allowNull: false,
+        defaultValue: Sequelize.fn('NOW'),
+      },
+    });
+  },
+
+  async down(queryInterface, Sequelize) {
+    await queryInterface.dropTable('ai_model_share');
+  },
+};