feat(mana/web): pass MANA_LLM_API_KEY from voice parse proxies

The /api/v1/voice/parse-task and /api/v1/voice/parse-habit endpoints
forwarded transcripts to mana-llm without an X-API-Key header. This
worked against the local mana-llm container (no auth) but silently
fell back to the no-LLM path when pointed at gpu-llm.mana.how, which
requires an API key — voice quick-add would look like it was running
in degraded mode forever with no signal that auth was the cause.

Now both endpoints read MANA_LLM_API_KEY from the server-side env and
attach it as X-API-Key when present, mirroring the pattern already
used by /api/v1/voice/transcribe for mana-stt. When the var is empty
the header is omitted, so local Docker setups without auth still work.

Plumbing: generate-env.mjs writes MANA_LLM_URL + MANA_LLM_API_KEY into
apps/mana/apps/web/.env, .env.development gets the new keys with empty
defaults, ENVIRONMENT_VARIABLES.md documents the gateway and where to
get a key.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
This commit is contained in:
Till JS 2026-04-08 16:40:26 +02:00
parent 2514831a3b
commit 029c7973ef
5 changed files with 41 additions and 2 deletions

View file

@ -107,14 +107,17 @@ export const POST: RequestHandler = async ({ request }) => {
if (!transcript || habits.length === 0) return json(fallback());
const llmUrl = env.MANA_LLM_URL || env.PUBLIC_MANA_LLM_URL || 'http://localhost:3025';
const apiKey = env.MANA_LLM_API_KEY;
let response: Response;
const controller = new AbortController();
const timer = setTimeout(() => controller.abort(), LLM_TIMEOUT_MS);
try {
const headers: Record<string, string> = { 'Content-Type': 'application/json' };
if (apiKey) headers['X-API-Key'] = apiKey;
response = await fetch(`${llmUrl.replace(/\/$/, '')}/v1/chat/completions`, {
method: 'POST',
headers: { 'Content-Type': 'application/json' },
headers,
signal: controller.signal,
body: JSON.stringify({
model: DEFAULT_MODEL,

View file

@ -101,14 +101,17 @@ export const POST: RequestHandler = async ({ request }) => {
if (!transcript) return json(fallback(''));
const llmUrl = env.MANA_LLM_URL || env.PUBLIC_MANA_LLM_URL || 'http://localhost:3025';
const apiKey = env.MANA_LLM_API_KEY;
let response: Response;
const controller = new AbortController();
const timer = setTimeout(() => controller.abort(), LLM_TIMEOUT_MS);
try {
const headers: Record<string, string> = { 'Content-Type': 'application/json' };
if (apiKey) headers['X-API-Key'] = apiKey;
response = await fetch(`${llmUrl.replace(/\/$/, '')}/v1/chat/completions`, {
method: 'POST',
headers: { 'Content-Type': 'application/json' },
headers,
signal: controller.signal,
body: JSON.stringify({
model: DEFAULT_MODEL,