Security advisory — Malicious litellm versions 1.82.7 and 1.82.8 were removed from PyPI (potential API key exfiltration). Uninstall them, rotate exposed credentials, and upgrade to a safe release (e.g. 1.82.9+). Run pip show litellm to verify. PyPI · README

Deployable Apps

Directory: enterprise/apps/

Deployable Apps

Directory: enterprise/apps/


Overview

Legend: ✅ implemented · 🟡 partial · ⚪ stub · ⛔ skeleton

AppTechPortWorkspaceStatus
web-portalNext.js 153000pnpm✅
admin-consoleNext.js 153001pnpm✅
gatewayGo 1.258088go.mod standalone✅
edge-agentGo7823 (design)—⛔

web-portal — @agenticx/app-web-portal

Users: enterprise employees

Capabilities

  • Login / register / SSO
  • Chat workspace (@agenticx/feature-chat)
  • Model dropdown (admin-assigned visible models)
  • Session history persisted in PG
  • Token usage chip

Pages: /, /auth, /workspace

API: see api/web-portal.md

Start

bash
1pnpm --filter @agenticx/app-web-portal dev
2# or bash scripts/start-dev.sh

admin-console — @agenticx/app-admin-console

Users: tenant admins / security admins

Capabilities

  • IAM (users / departments / roles / bulk import)
  • Policy rule center (draft/publish/rollback/test)
  • Gateway audit query and chain verification
  • Token metering and quotas
  • Model services (providers / keys / model list / user visibility)
  • Gateway channel management and health
  • SSO provider CRUD

Pages: see api/admin-console.md

Start

bash
1pnpm --filter @agenticx/app-admin-console dev

gateway — Go AI Gateway

Users: portal (server-side proxy), external OpenAI-compatible clients

Capabilities

  • /v1/chat/completions, /v1/embeddings
  • JWT subject forwarding
  • Three-channel policy evaluation
  • Audit JSONL + PG dual-write
  • Token metering
  • Quota tracker
  • Channel relay (optional)
  • Remote pull of admin internal config

Docs

Build

bash
1cd apps/gateway && go build -o bin/gateway ./cmd/gateway

start-dev.sh auto-runs gateway via go run.


edge-agent — on-device sidecar

Design goals

  • Local Ollama routing
  • Workspace sandbox
  • Redacted audit upload

Current status

  • cmd/edge-agent/main.go ~33-line skeleton
  • Not demo-ready; Machi Desktop uses embedded agx serve, not this component

Process dependencies

1start-dev.sh
2 ├── gateway :8088
3 ├── web-portal :3000 → depends on gateway + PG
4 └── admin-console :3001 → depends on PG; gateway pulls internal API

Postgres/Redis: start-dev-with-infra.sh or external DATABASE_URL.


Customer apps

pnpm-workspace.yaml can include ../customers/*/apps/*:

  • Customer portal often :3100, admin :3101
  • start-dev.sh --all starts all

Customer apps are assembly shells referencing @agenticx/feature-* and @agenticx/ui.