libre-webui 0.10.0 → 0.12.0

package/backend/dist/utils/pluginStreamAdapter.js

@@ -0,0 +1,141 @@
+/*
+ * Libre WebUI
+ * Copyright (C) 2025 Kroonen AI, Inc.
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at:
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+function getChoiceDelta(payload) {
+    if (!payload || typeof payload !== 'object') {
+        return null;
+    }
+    const choices = payload.choices;
+    if (!Array.isArray(choices)) {
+        return null;
+    }
+    const firstChoice = choices[0];
+    if (!firstChoice || typeof firstChoice !== 'object') {
+        return null;
+    }
+    const delta = firstChoice.delta;
+    if (!delta || typeof delta !== 'object') {
+        return null;
+    }
+    return delta;
+}
+function parseToolCallDelta(toolCall) {
+    if (!toolCall || typeof toolCall !== 'object') {
+        return null;
+    }
+    const toolCallRecord = toolCall;
+    const functionRecord = toolCallRecord.function && typeof toolCallRecord.function === 'object'
+        ? toolCallRecord.function
+        : undefined;
+    return {
+        index: typeof toolCallRecord.index === 'number' ? toolCallRecord.index : 0,
+        id: typeof toolCallRecord.id === 'string' ? toolCallRecord.id : undefined,
+        function: functionRecord
+            ? {
+                name: typeof functionRecord.name === 'string'
+                    ? functionRecord.name
+                    : undefined,
+                arguments: typeof functionRecord.arguments === 'string'
+                    ? functionRecord.arguments
+                    : undefined,
+            }
+            : undefined,
+    };
+}
+function applyToolCallDelta(toolCallsInProgress, delta) {
+    if (!toolCallsInProgress.has(delta.index)) {
+        toolCallsInProgress.set(delta.index, {
+            id: '',
+            name: '',
+            arguments: '',
+        });
+    }
+    const existing = toolCallsInProgress.get(delta.index);
+    if (!existing) {
+        return;
+    }
+    if (delta.id) {
+        existing.id = delta.id;
+    }
+    if (delta.function?.name) {
+        existing.name = delta.function.name;
+    }
+    if (delta.function?.arguments) {
+        existing.arguments += delta.function.arguments;
+    }
+}
+export async function* streamOpenAICompatibleResponse(response) {
+    if (!response.ok) {
+        const errorText = await response.text();
+        throw new Error(`Plugin API error: ${response.status} - ${errorText.slice(0, 200)}`);
+    }
+    if (!response.body) {
+        throw new Error('No response body for streaming');
+    }
+    const reader = response.body.getReader();
+    const decoder = new TextDecoder();
+    let buffer = '';
+    const toolCallsInProgress = new Map();
+    try {
+        while (true) {
+            const { done, value } = await reader.read();
+            if (done)
+                break;
+            buffer += decoder.decode(value, { stream: true });
+            const lines = buffer.split('\n');
+            buffer = lines.pop() || '';
+            for (const line of lines) {
+                const trimmed = line.trim();
+                if (!trimmed || trimmed === 'data: [DONE]') {
+                    if (trimmed === 'data: [DONE]') {
+                        for (const toolCall of toolCallsInProgress.values()) {
+                            yield { type: 'tool_call', toolCall };
+                        }
+                        yield { type: 'done' };
+                    }
+                    continue;
+                }
+                if (!trimmed.startsWith('data: ')) {
+                    continue;
+                }
+                try {
+                    const delta = getChoiceDelta(JSON.parse(trimmed.slice(6)));
+                    if (!delta) {
+                        continue;
+                    }
+                    if (typeof delta.content === 'string' && delta.content) {
+                        yield { type: 'content', content: delta.content };
+                    }
+                    if (Array.isArray(delta.tool_calls)) {
+                        for (const toolCall of delta.tool_calls) {
+                            const parsedDelta = parseToolCallDelta(toolCall);
+                            if (parsedDelta) {
+                                applyToolCallDelta(toolCallsInProgress, parsedDelta);
+                            }
+                        }
+                    }
+                }
+                catch {
+                    // Ignore malformed SSE payloads and keep the stream alive.
+                }
+            }
+        }
+    }
+    finally {
+        reader.releaseLock();
+    }
+}
+//# sourceMappingURL=pluginStreamAdapter.js.map

package/backend/dist/utils/pluginStreamAdapter.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pluginStreamAdapter.js","sourceRoot":"","sources":["../../src/utils/pluginStreamAdapter.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAsBH,SAAS,cAAc,CAAC,OAAgB;IACtC,IAAI,CAAC,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;QAC5C,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,OAAO,GAAI,OAAmC,CAAC,OAAO,CAAC;IAC7D,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QAC5B,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,WAAW,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;IAC/B,IAAI,CAAC,WAAW,IAAI,OAAO,WAAW,KAAK,QAAQ,EAAE,CAAC;QACpD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,KAAK,GAAI,WAAuC,CAAC,KAAK,CAAC;IAC7D,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QACxC,OAAO,IAAI,CAAC;IACd,CAAC;IAED,OAAO,KAAgC,CAAC;AAC1C,CAAC;AAED,SAAS,kBAAkB,CAAC,QAAiB;IAC3C,IAAI,CAAC,QAAQ,IAAI,OAAO,QAAQ,KAAK,QAAQ,EAAE,CAAC;QAC9C,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,cAAc,GAAG,QAAmC,CAAC;IAC3D,MAAM,cAAc,GAClB,cAAc,CAAC,QAAQ,IAAI,OAAO,cAAc,CAAC,QAAQ,KAAK,QAAQ;QACpE,CAAC,CAAE,cAAc,CAAC,QAAoC;QACtD,CAAC,CAAC,SAAS,CAAC;IAEhB,OAAO;QACL,KAAK,EAAE,OAAO,cAAc,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QAC1E,EAAE,EAAE,OAAO,cAAc,CAAC,EAAE,KAAK,QAAQ,CAAC,CAAC,CAAC,cAAc,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS;QACzE,QAAQ,EAAE,cAAc;YACtB,CAAC,CAAC;gBACE,IAAI,EACF,OAAO,cAAc,CAAC,IAAI,KAAK,QAAQ;oBACrC,CAAC,CAAC,cAAc,CAAC,IAAI;oBACrB,CAAC,CAAC,SAAS;gBACf,SAAS,EACP,OAAO,cAAc,CAAC,SAAS,KAAK,QAAQ;oBAC1C,CAAC,CAAC,cAAc,CAAC,SAAS;oBAC1B,CAAC,CAAC,SAAS;aAChB;YACH,CAAC,CAAC,SAAS;KACd,CAAC;AACJ,CAAC;AAED,SAAS,kBAAkB,CACzB,mBAAgD,EAChD,KAAoB;IAEpB,IAAI,CAAC,mBAAmB,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC;QAC1C,mBAAmB,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,EAAE;YACnC,EAAE,EAAE,EAAE;YACN,IAAI,EAAE,EAAE;YACR,SAAS,EAAE,EAAE;SACd,CAAC,CAAC;IACL,CAAC;IAED,MAAM,QAAQ,GAAG,mBAAmB,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IACtD,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,OAAO;IACT,CAAC;IAED,IAAI,KAAK,CAAC,EAAE,EAAE,CAAC;QACb,QAAQ,CAAC,EAAE,GAAG,KAAK,CAAC,EAAE,CAAC;IACzB,CAAC;IACD,IAAI,KAAK,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC;QACzB,QAAQ,CAAC,IAAI,GAAG,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC;IACtC,CAAC;IACD,IAAI,KAAK,CAAC,QAAQ,EAAE,SAAS,EAAE,CAAC;QAC9B,QAAQ,CAAC,SAAS,IAAI,KAAK,CAAC,QAAQ,CAAC,SAAS,CAAC;IACjD,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,SAAS,CAAC,CAAC,8BAA8B,CACnD,QAA2C;IAE3C,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,MAAM,SAAS,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;QACxC,MAAM,IAAI,KAAK,CACb,qBAAqB,QAAQ,CAAC,MAAM,MAAM,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CACpE,CAAC;IACJ,CAAC;IAED,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC;QACnB,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC;IACpD,CAAC;IAED,MAAM,MAAM,GAAG,QAAQ,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;IACzC,MAAM,OAAO,GAAG,IAAI,WAAW,EAAE,CAAC;IAClC,IAAI,MAAM,GAAG,EAAE,CAAC;IAChB,MAAM,mBAAmB,GAAG,IAAI,GAAG,EAA0B,CAAC;IAE9D,IAAI,CAAC;QACH,OAAO,IAAI,EAAE,CAAC;YACZ,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;YAC5C,IAAI,IAAI;gBAAE,MAAM;YAEhB,MAAM,IAAI,OAAO,CAAC,MAAM,CAAC,KAAK,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;YAClD,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YACjC,MAAM,GAAG,KAAK,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC;YAE3B,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;gBACzB,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;gBAC5B,IAAI,CAAC,OAAO,IAAI,OAAO,KAAK,cAAc,EAAE,CAAC;oBAC3C,IAAI,OAAO,KAAK,cAAc,EAAE,CAAC;wBAC/B,KAAK,MAAM,QAAQ,IAAI,mBAAmB,CAAC,MAAM,EAAE,EAAE,CAAC;4BACpD,MAAM,EAAE,IAAI,EAAE,WAAW,EAAE,QAAQ,EAAE,CAAC;wBACxC,CAAC;wBACD,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;oBACzB,CAAC;oBACD,SAAS;gBACX,CAAC;gBAED,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;oBAClC,SAAS;gBACX,CAAC;gBAED,IAAI,CAAC;oBACH,MAAM,KAAK,GAAG,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;oBAC3D,IAAI,CAAC,KAAK,EAAE,CAAC;wBACX,SAAS;oBACX,CAAC;oBAED,IAAI,OAAO,KAAK,CAAC,OAAO,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;wBACvD,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC;oBACpD,CAAC;oBAED,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,UAAU,CAAC,EAAE,CAAC;wBACpC,KAAK,MAAM,QAAQ,IAAI,KAAK,CAAC,UAAU,EAAE,CAAC;4BACxC,MAAM,WAAW,GAAG,kBAAkB,CAAC,QAAQ,CAAC,CAAC;4BACjD,IAAI,WAAW,EAAE,CAAC;gCAChB,kBAAkB,CAAC,mBAAmB,EAAE,WAAW,CAAC,CAAC;4BACvD,CAAC;wBACH,CAAC;oBACH,CAAC;gBACH,CAAC;gBAAC,MAAM,CAAC;oBACP,2DAA2D;gBAC7D,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;YAAS,CAAC;QACT,MAAM,CAAC,WAAW,EAAE,CAAC;IACvB,CAAC;AACH,CAAC"}

package/backend/dist/utils/pluginStreaming.d.ts

@@ -0,0 +1,24 @@
+import { type WebSocketLike } from './websocketMessages.js';
+export interface PluginStreamToolCall {
+    id: string;
+    name: string;
+    arguments: string;
+}
+export type PluginStreamChunk = {
+    type: 'content';
+    content?: string;
+} | {
+    type: 'tool_call';
+    toolCall?: PluginStreamToolCall;
+} | {
+    type: 'done';
+};
+export interface StreamPluginResponseOptions {
+    ws: WebSocketLike;
+    chunks: AsyncIterable<PluginStreamChunk>;
+    messageId?: string;
+    pauseThresholdMs?: number;
+}
+export declare function formatPluginStreamToolCalls(toolCalls: readonly PluginStreamToolCall[]): string;
+export declare function streamPluginResponse({ ws, chunks, messageId, pauseThresholdMs, }: StreamPluginResponseOptions): Promise<string>;
+//# sourceMappingURL=pluginStreaming.d.ts.map

package/backend/dist/utils/pluginStreaming.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"pluginStreaming.d.ts","sourceRoot":"","sources":["../../src/utils/pluginStreaming.ts"],"names":[],"mappings":"AAkBA,OAAO,EAGL,KAAK,aAAa,EACnB,MAAM,wBAAwB,CAAC;AAEhC,MAAM,WAAW,oBAAoB;IACnC,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,MAAM,iBAAiB,GACzB;IACE,IAAI,EAAE,SAAS,CAAC;IAChB,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB,GACD;IACE,IAAI,EAAE,WAAW,CAAC;IAClB,QAAQ,CAAC,EAAE,oBAAoB,CAAC;CACjC,GACD;IACE,IAAI,EAAE,MAAM,CAAC;CACd,CAAC;AAEN,MAAM,WAAW,2BAA2B;IAC1C,EAAE,EAAE,aAAa,CAAC;IAClB,MAAM,EAAE,aAAa,CAAC,iBAAiB,CAAC,CAAC;IACzC,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,gBAAgB,CAAC,EAAE,MAAM,CAAC;CAC3B;AAID,wBAAgB,2BAA2B,CACzC,SAAS,EAAE,SAAS,oBAAoB,EAAE,GACzC,MAAM,CAaR;AAED,wBAAsB,oBAAoB,CAAC,EACzC,EAAE,EACF,MAAM,EACN,SAAS,EACT,gBAAuB,GACxB,EAAE,2BAA2B,GAAG,OAAO,CAAC,MAAM,CAAC,CAwF/C"}

package/backend/dist/utils/pluginStreaming.js

@@ -0,0 +1,106 @@
+/*
+ * Libre WebUI
+ * Copyright (C) 2025 Kroonen AI, Inc.
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at:
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+import { formatPluginToolArguments } from './pluginResponse.js';
+import { sendAssistantChunk, sendToolStatus, } from './websocketMessages.js';
+const PAUSE_TOOL_ID = 'tool-activity';
+export function formatPluginStreamToolCalls(toolCalls) {
+    if (toolCalls.length === 0) {
+        return '';
+    }
+    let toolContent = '\n\n---\n**🔧 Tool Calls:**\n';
+    for (const toolCall of toolCalls) {
+        const argsFormatted = formatPluginToolArguments(toolCall.arguments);
+        toolContent += `\n**${toolCall.name}** (\`${toolCall.id}\`)\n\`\`\`json\n${argsFormatted}\n\`\`\`\n`;
+    }
+    return toolContent;
+}
+export async function streamPluginResponse({ ws, chunks, messageId, pauseThresholdMs = 2000, }) {
+    let totalContent = '';
+    const toolCalls = [];
+    let pauseTimer = null;
+    let toolActivitySent = false;
+    const sendPauseToolStatus = (phase) => {
+        sendToolStatus(ws, {
+            toolCallId: PAUSE_TOOL_ID,
+            name: 'working',
+            phase,
+        }, { ignoreClosedSocket: true });
+    };
+    const clearPauseTimer = () => {
+        if (pauseTimer) {
+            clearTimeout(pauseTimer);
+            pauseTimer = null;
+        }
+    };
+    const startPauseDetection = () => {
+        clearPauseTimer();
+        pauseTimer = setTimeout(() => {
+            if (!toolActivitySent) {
+                toolActivitySent = true;
+                sendPauseToolStatus('running');
+            }
+        }, pauseThresholdMs);
+    };
+    const finishToolActivity = () => {
+        clearPauseTimer();
+        if (toolActivitySent) {
+            sendPauseToolStatus('done');
+            toolActivitySent = false;
+        }
+    };
+    startPauseDetection();
+    try {
+        for await (const chunk of chunks) {
+            if (chunk.type === 'content' && chunk.content) {
+                finishToolActivity();
+                startPauseDetection();
+                totalContent += chunk.content;
+                sendAssistantChunk(ws, {
+                    content: chunk.content,
+                    total: totalContent,
+                    done: false,
+                    messageId,
+                });
+            }
+            else if (chunk.type === 'tool_call' && chunk.toolCall) {
+                clearPauseTimer();
+                toolActivitySent = true;
+                toolCalls.push(chunk.toolCall);
+                sendToolStatus(ws, {
+                    toolCallId: PAUSE_TOOL_ID,
+                    name: chunk.toolCall.name,
+                    phase: 'running',
+                }, { ignoreClosedSocket: true });
+            }
+            else if (chunk.type === 'done') {
+                finishToolActivity();
+                totalContent += formatPluginStreamToolCalls(toolCalls);
+                sendAssistantChunk(ws, {
+                    content: '',
+                    total: totalContent,
+                    done: true,
+                    messageId,
+                });
+            }
+        }
+    }
+    finally {
+        clearPauseTimer();
+    }
+    return totalContent;
+}
+//# sourceMappingURL=pluginStreaming.js.map

package/backend/dist/utils/pluginStreaming.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pluginStreaming.js","sourceRoot":"","sources":["../../src/utils/pluginStreaming.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,OAAO,EAAE,yBAAyB,EAAE,MAAM,qBAAqB,CAAC;AAChE,OAAO,EACL,kBAAkB,EAClB,cAAc,GAEf,MAAM,wBAAwB,CAAC;AA4BhC,MAAM,aAAa,GAAG,eAAe,CAAC;AAEtC,MAAM,UAAU,2BAA2B,CACzC,SAA0C;IAE1C,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC3B,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,IAAI,WAAW,GAAG,+BAA+B,CAAC;IAElD,KAAK,MAAM,QAAQ,IAAI,SAAS,EAAE,CAAC;QACjC,MAAM,aAAa,GAAG,yBAAyB,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;QACpE,WAAW,IAAI,OAAO,QAAQ,CAAC,IAAI,SAAS,QAAQ,CAAC,EAAE,oBAAoB,aAAa,YAAY,CAAC;IACvG,CAAC;IAED,OAAO,WAAW,CAAC;AACrB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,EACzC,EAAE,EACF,MAAM,EACN,SAAS,EACT,gBAAgB,GAAG,IAAI,GACK;IAC5B,IAAI,YAAY,GAAG,EAAE,CAAC;IACtB,MAAM,SAAS,GAA2B,EAAE,CAAC;IAC7C,IAAI,UAAU,GAAyC,IAAI,CAAC;IAC5D,IAAI,gBAAgB,GAAG,KAAK,CAAC;IAE7B,MAAM,mBAAmB,GAAG,CAAC,KAAa,EAAE,EAAE;QAC5C,cAAc,CACZ,EAAE,EACF;YACE,UAAU,EAAE,aAAa;YACzB,IAAI,EAAE,SAAS;YACf,KAAK;SACN,EACD,EAAE,kBAAkB,EAAE,IAAI,EAAE,CAC7B,CAAC;IACJ,CAAC,CAAC;IAEF,MAAM,eAAe,GAAG,GAAG,EAAE;QAC3B,IAAI,UAAU,EAAE,CAAC;YACf,YAAY,CAAC,UAAU,CAAC,CAAC;YACzB,UAAU,GAAG,IAAI,CAAC;QACpB,CAAC;IACH,CAAC,CAAC;IAEF,MAAM,mBAAmB,GAAG,GAAG,EAAE;QAC/B,eAAe,EAAE,CAAC;QAClB,UAAU,GAAG,UAAU,CAAC,GAAG,EAAE;YAC3B,IAAI,CAAC,gBAAgB,EAAE,CAAC;gBACtB,gBAAgB,GAAG,IAAI,CAAC;gBACxB,mBAAmB,CAAC,SAAS,CAAC,CAAC;YACjC,CAAC;QACH,CAAC,EAAE,gBAAgB,CAAC,CAAC;IACvB,CAAC,CAAC;IAEF,MAAM,kBAAkB,GAAG,GAAG,EAAE;QAC9B,eAAe,EAAE,CAAC;QAClB,IAAI,gBAAgB,EAAE,CAAC;YACrB,mBAAmB,CAAC,MAAM,CAAC,CAAC;YAC5B,gBAAgB,GAAG,KAAK,CAAC;QAC3B,CAAC;IACH,CAAC,CAAC;IAEF,mBAAmB,EAAE,CAAC;IAEtB,IAAI,CAAC;QACH,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;YACjC,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;gBAC9C,kBAAkB,EAAE,CAAC;gBACrB,mBAAmB,EAAE,CAAC;gBAEtB,YAAY,IAAI,KAAK,CAAC,OAAO,CAAC;gBAC9B,kBAAkB,CAAC,EAAE,EAAE;oBACrB,OAAO,EAAE,KAAK,CAAC,OAAO;oBACtB,KAAK,EAAE,YAAY;oBACnB,IAAI,EAAE,KAAK;oBACX,SAAS;iBACV,CAAC,CAAC;YACL,CAAC;iBAAM,IAAI,KAAK,CAAC,IAAI,KAAK,WAAW,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC;gBACxD,eAAe,EAAE,CAAC;gBAClB,gBAAgB,GAAG,IAAI,CAAC;gBACxB,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;gBAC/B,cAAc,CACZ,EAAE,EACF;oBACE,UAAU,EAAE,aAAa;oBACzB,IAAI,EAAE,KAAK,CAAC,QAAQ,CAAC,IAAI;oBACzB,KAAK,EAAE,SAAS;iBACjB,EACD,EAAE,kBAAkB,EAAE,IAAI,EAAE,CAC7B,CAAC;YACJ,CAAC;iBAAM,IAAI,KAAK,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;gBACjC,kBAAkB,EAAE,CAAC;gBACrB,YAAY,IAAI,2BAA2B,CAAC,SAAS,CAAC,CAAC;gBAEvD,kBAAkB,CAAC,EAAE,EAAE;oBACrB,OAAO,EAAE,EAAE;oBACX,KAAK,EAAE,YAAY;oBACnB,IAAI,EAAE,IAAI;oBACV,SAAS;iBACV,CAAC,CAAC;YACL,CAAC;QACH,CAAC;IACH,CAAC;YAAS,CAAC;QACT,eAAe,EAAE,CAAC;IACpB,CAAC;IAED,OAAO,YAAY,CAAC;AACtB,CAAC"}

package/backend/dist/utils/pluginUpload.d.ts

@@ -0,0 +1,8 @@
+import type { Request } from 'express';
+import multer from 'multer';
+export interface MulterRequest extends Request {
+    file?: Express.Multer.File;
+}
+export declare function safeCleanupFile(filePath: string, tempDir: string): void;
+export declare const pluginUpload: multer.Multer;
+//# sourceMappingURL=pluginUpload.d.ts.map

package/backend/dist/utils/pluginUpload.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"pluginUpload.d.ts","sourceRoot":"","sources":["../../src/utils/pluginUpload.ts"],"names":[],"mappings":"AAmBA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,MAA8B,MAAM,QAAQ,CAAC;AAKpD,MAAM,WAAW,aAAc,SAAQ,OAAO;IAC5C,IAAI,CAAC,EAAE,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC;CAC5B;AAED,wBAAgB,eAAe,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,IAAI,CAcvE;AAED,eAAO,MAAM,YAAY,eAmBvB,CAAC"}

package/backend/dist/utils/pluginUpload.js

@@ -0,0 +1,51 @@
+/*
+ * Libre WebUI
+ * Copyright (C) 2025 Kroonen AI, Inc.
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at:
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+import fs from 'fs';
+import path from 'path';
+import multer from 'multer';
+import { createLogger } from './logger.js';
+const logger = createLogger('utils:plugin-upload');
+export function safeCleanupFile(filePath, tempDir) {
+    try {
+        const resolvedPath = path.resolve(filePath);
+        const resolvedTempDir = path.resolve(tempDir);
+        if (resolvedPath.startsWith(resolvedTempDir) &&
+            fs.existsSync(resolvedPath)) {
+            fs.unlinkSync(resolvedPath);
+        }
+    }
+    catch (error) {
+        logger.error('Failed to cleanup file:', error);
+    }
+}
+export const pluginUpload = multer({
+    dest: 'temp/',
+    fileFilter: (req, file, cb) => {
+        const allowedTypes = ['.json', '.zip'];
+        const fileExt = path.extname(file.originalname).toLowerCase();
+        if (allowedTypes.includes(fileExt)) {
+            cb(null, true);
+        }
+        else {
+            cb(new Error('Only .json and .zip files are allowed'));
+        }
+    },
+    limits: {
+        fileSize: 10 * 1024 * 1024,
+    },
+});
+//# sourceMappingURL=pluginUpload.js.map

package/backend/dist/utils/pluginUpload.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pluginUpload.js","sourceRoot":"","sources":["../../src/utils/pluginUpload.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,OAAO,EAAE,MAAM,IAAI,CAAC;AACpB,OAAO,IAAI,MAAM,MAAM,CAAC;AAExB,OAAO,MAA8B,MAAM,QAAQ,CAAC;AACpD,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAE3C,MAAM,MAAM,GAAG,YAAY,CAAC,qBAAqB,CAAC,CAAC;AAMnD,MAAM,UAAU,eAAe,CAAC,QAAgB,EAAE,OAAe;IAC/D,IAAI,CAAC;QACH,MAAM,YAAY,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;QAC5C,MAAM,eAAe,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QAE9C,IACE,YAAY,CAAC,UAAU,CAAC,eAAe,CAAC;YACxC,EAAE,CAAC,UAAU,CAAC,YAAY,CAAC,EAC3B,CAAC;YACD,EAAE,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC;QAC9B,CAAC;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,CAAC,KAAK,CAAC,yBAAyB,EAAE,KAAK,CAAC,CAAC;IACjD,CAAC;AACH,CAAC;AAED,MAAM,CAAC,MAAM,YAAY,GAAG,MAAM,CAAC;IACjC,IAAI,EAAE,OAAO;IACb,UAAU,EAAE,CACV,GAAY,EACZ,IAAyB,EACzB,EAAsB,EACtB,EAAE;QACF,MAAM,YAAY,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QACvC,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,WAAW,EAAE,CAAC;QAE9D,IAAI,YAAY,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;YACnC,EAAE,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QACjB,CAAC;aAAM,CAAC;YACN,EAAE,CAAC,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC,CAAC;QACzD,CAAC;IACH,CAAC;IACD,MAAM,EAAE;QACN,QAAQ,EAAE,EAAE,GAAG,IAAI,GAAG,IAAI;KAC3B;CACF,CAAC,CAAC"}

package/backend/dist/utils/pluginValidation.d.ts

@@ -0,0 +1,9 @@
+import type { Plugin } from '../types/index.js';
+export declare function validatePluginModel(model: string): void;
+export declare function isSafePluginEndpoint(endpoint: string): boolean;
+export declare function validatePluginEndpointOverride(endpoint: string): string | null;
+export declare function assertSafePluginEndpoint(endpoint: string, label?: string): void;
+export declare function resolvePluginEndpoint(endpoint: string, endpointOverride?: string): string;
+export declare function applyModelEndpointTemplate(endpoint: string, model: string): string;
+export declare function buildPluginAuthHeaders(plugin: Plugin, apiKey?: string | null): Record<string, string>;
+//# sourceMappingURL=pluginValidation.d.ts.map

package/backend/dist/utils/pluginValidation.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"pluginValidation.d.ts","sourceRoot":"","sources":["../../src/utils/pluginValidation.ts"],"names":[],"mappings":"AAiBA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,mBAAmB,CAAC;AAShD,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAgBvD;AAED,wBAAgB,oBAAoB,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAQ9D;AAED,wBAAgB,8BAA8B,CAC5C,QAAQ,EAAE,MAAM,GACf,MAAM,GAAG,IAAI,CAcf;AAED,wBAAgB,wBAAwB,CACtC,QAAQ,EAAE,MAAM,EAChB,KAAK,GAAE,MAAuB,GAC7B,IAAI,CAgBN;AAED,wBAAgB,qBAAqB,CACnC,QAAQ,EAAE,MAAM,EAChB,gBAAgB,CAAC,EAAE,MAAM,GACxB,MAAM,CAKR;AAED,wBAAgB,0BAA0B,CACxC,QAAQ,EAAE,MAAM,EAChB,KAAK,EAAE,MAAM,GACZ,MAAM,CAER;AAED,wBAAgB,sBAAsB,CACpC,MAAM,EAAE,MAAM,EACd,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,GACrB,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAYxB"}

package/backend/dist/utils/pluginValidation.js

@@ -0,0 +1,84 @@
+/*
+ * Libre WebUI
+ * Copyright (C) 2025 Kroonen AI, Inc.
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at:
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+import { createLogger } from './logger.js';
+const logger = createLogger('utils:plugin-validation');
+const MODEL_PATTERN = /^[a-zA-Z0-9\-_:./]+$/;
+const PRIVATE_NETWORK_PATTERN = /^(192\.168\.|10\.|172\.(1[6-9]|2[0-9]|3[01])\.)/;
+export function validatePluginModel(model) {
+    if (!model || typeof model !== 'string') {
+        throw new Error('Invalid model parameter: must be a non-empty string');
+    }
+    if (!MODEL_PATTERN.test(model)) {
+        throw new Error(`Invalid model parameter: ${model} contains invalid characters`);
+    }
+    if (model.includes('..') || model.includes('\\')) {
+        throw new Error(`Invalid model parameter: ${model} contains invalid patterns`);
+    }
+}
+export function isSafePluginEndpoint(endpoint) {
+    const url = new URL(endpoint);
+    const isLocalhost = ['localhost', '127.0.0.1', '[::1]'].includes(url.hostname);
+    const isPrivateNetwork = PRIVATE_NETWORK_PATTERN.test(url.hostname);
+    return url.protocol === 'https:' || isLocalhost || isPrivateNetwork;
+}
+export function validatePluginEndpointOverride(endpoint) {
+    try {
+        if (!isSafePluginEndpoint(endpoint)) {
+            logger.warn(`Rejected insecure endpoint override: ${endpoint} (only HTTPS or localhost/private IPs allowed)`);
+            return null;
+        }
+        return endpoint;
+    }
+    catch {
+        logger.warn(`Rejected invalid endpoint override URL: ${endpoint}`);
+        return null;
+    }
+}
+export function assertSafePluginEndpoint(endpoint, label = 'endpoint URL') {
+    try {
+        if (!isSafePluginEndpoint(endpoint)) {
+            const url = new URL(endpoint);
+            throw new Error(`Insecure endpoint protocol: ${url.protocol}. Only HTTPS is allowed for remote endpoints. ` +
+                `(HTTP is permitted for localhost and private network IPs)`);
+        }
+    }
+    catch (error) {
+        if (error instanceof Error && error.message.startsWith('Insecure')) {
+            throw error;
+        }
+        throw new Error(`Invalid ${label}: ${endpoint}`);
+    }
+}
+export function resolvePluginEndpoint(endpoint, endpointOverride) {
+    return ((endpointOverride && validatePluginEndpointOverride(endpointOverride)) ||
+        endpoint);
+}
+export function applyModelEndpointTemplate(endpoint, model) {
+    return endpoint.replace('{model}', encodeURIComponent(model));
+}
+export function buildPluginAuthHeaders(plugin, apiKey) {
+    const headers = {
+        'Content-Type': 'application/json',
+    };
+    if (apiKey && plugin.auth.header) {
+        headers[plugin.auth.header] = plugin.auth.prefix
+            ? `${plugin.auth.prefix}${apiKey}`
+            : apiKey;
+    }
+    return headers;
+}
+//# sourceMappingURL=pluginValidation.js.map

package/backend/dist/utils/pluginValidation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pluginValidation.js","sourceRoot":"","sources":["../../src/utils/pluginValidation.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAGH,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAE3C,MAAM,MAAM,GAAG,YAAY,CAAC,yBAAyB,CAAC,CAAC;AAEvD,MAAM,aAAa,GAAG,sBAAsB,CAAC;AAC7C,MAAM,uBAAuB,GAC3B,iDAAiD,CAAC;AAEpD,MAAM,UAAU,mBAAmB,CAAC,KAAa;IAC/C,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QACxC,MAAM,IAAI,KAAK,CAAC,qDAAqD,CAAC,CAAC;IACzE,CAAC;IAED,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QAC/B,MAAM,IAAI,KAAK,CACb,4BAA4B,KAAK,8BAA8B,CAChE,CAAC;IACJ,CAAC;IAED,IAAI,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QACjD,MAAM,IAAI,KAAK,CACb,4BAA4B,KAAK,4BAA4B,CAC9D,CAAC;IACJ,CAAC;AACH,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,QAAgB;IACnD,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,CAAC;IAC9B,MAAM,WAAW,GAAG,CAAC,WAAW,EAAE,WAAW,EAAE,OAAO,CAAC,CAAC,QAAQ,CAC9D,GAAG,CAAC,QAAQ,CACb,CAAC;IACF,MAAM,gBAAgB,GAAG,uBAAuB,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IAEpE,OAAO,GAAG,CAAC,QAAQ,KAAK,QAAQ,IAAI,WAAW,IAAI,gBAAgB,CAAC;AACtE,CAAC;AAED,MAAM,UAAU,8BAA8B,CAC5C,QAAgB;IAEhB,IAAI,CAAC;QACH,IAAI,CAAC,oBAAoB,CAAC,QAAQ,CAAC,EAAE,CAAC;YACpC,MAAM,CAAC,IAAI,CACT,wCAAwC,QAAQ,gDAAgD,CACjG,CAAC;YACF,OAAO,IAAI,CAAC;QACd,CAAC;QAED,OAAO,QAAQ,CAAC;IAClB,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,CAAC,IAAI,CAAC,2CAA2C,QAAQ,EAAE,CAAC,CAAC;QACnE,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,MAAM,UAAU,wBAAwB,CACtC,QAAgB,EAChB,QAAgB,cAAc;IAE9B,IAAI,CAAC;QACH,IAAI,CAAC,oBAAoB,CAAC,QAAQ,CAAC,EAAE,CAAC;YACpC,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,CAAC;YAC9B,MAAM,IAAI,KAAK,CACb,+BAA+B,GAAG,CAAC,QAAQ,gDAAgD;gBACzF,2DAA2D,CAC9D,CAAC;QACJ,CAAC;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,KAAK,IAAI,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;YACnE,MAAM,KAAK,CAAC;QACd,CAAC;QAED,MAAM,IAAI,KAAK,CAAC,WAAW,KAAK,KAAK,QAAQ,EAAE,CAAC,CAAC;IACnD,CAAC;AACH,CAAC;AAED,MAAM,UAAU,qBAAqB,CACnC,QAAgB,EAChB,gBAAyB;IAEzB,OAAO,CACL,CAAC,gBAAgB,IAAI,8BAA8B,CAAC,gBAAgB,CAAC,CAAC;QACtE,QAAQ,CACT,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,0BAA0B,CACxC,QAAgB,EAChB,KAAa;IAEb,OAAO,QAAQ,CAAC,OAAO,CAAC,SAAS,EAAE,kBAAkB,CAAC,KAAK,CAAC,CAAC,CAAC;AAChE,CAAC;AAED,MAAM,UAAU,sBAAsB,CACpC,MAAc,EACd,MAAsB;IAEtB,MAAM,OAAO,GAA2B;QACtC,cAAc,EAAE,kBAAkB;KACnC,CAAC;IAEF,IAAI,MAAM,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;QACjC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM;YAC9C,CAAC,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,GAAG,MAAM,EAAE;YAClC,CAAC,CAAC,MAAM,CAAC;IACb,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC"}

package/backend/dist/utils/pluginVariableValidation.d.ts

@@ -0,0 +1,10 @@
+import type { PluginVariableDefinition } from '../types/index.js';
+export type ValidatedPluginVariables = Record<string, string | number | boolean>;
+export declare function validatePluginVariables(definitions: PluginVariableDefinition[], values: Record<string, unknown>): {
+    success: true;
+    variables: ValidatedPluginVariables;
+} | {
+    success: false;
+    error: string;
+};
+//# sourceMappingURL=pluginVariableValidation.d.ts.map

package/backend/dist/utils/pluginVariableValidation.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"pluginVariableValidation.d.ts","sourceRoot":"","sources":["../../src/utils/pluginVariableValidation.ts"],"names":[],"mappings":"AAiBA,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,mBAAmB,CAAC;AAElE,MAAM,MAAM,wBAAwB,GAAG,MAAM,CAC3C,MAAM,EACN,MAAM,GAAG,MAAM,GAAG,OAAO,CAC1B,CAAC;AAEF,wBAAgB,uBAAuB,CACrC,WAAW,EAAE,wBAAwB,EAAE,EACvC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAE7B;IAAE,OAAO,EAAE,IAAI,CAAC;IAAC,SAAS,EAAE,wBAAwB,CAAA;CAAE,GACtD;IAAE,OAAO,EAAE,KAAK,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAsEpC"}

package/backend/dist/utils/pluginVariableValidation.js

@@ -0,0 +1,80 @@
+/*
+ * Libre WebUI
+ * Copyright (C) 2025 Kroonen AI, Inc.
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at:
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+export function validatePluginVariables(definitions, values) {
+    const schemaMap = new Map(definitions.map(definition => [definition.name, definition]));
+    const validated = {};
+    for (const [key, value] of Object.entries(values)) {
+        const definition = schemaMap.get(key);
+        if (!definition)
+            continue;
+        if (definition.type === 'number') {
+            const num = Number(value);
+            if (isNaN(num)) {
+                return { success: false, error: `Variable "${key}" must be a number` };
+            }
+            if (definition.min !== undefined && num < definition.min) {
+                return {
+                    success: false,
+                    error: `Variable "${key}" must be >= ${definition.min}`,
+                };
+            }
+            if (definition.max !== undefined && num > definition.max) {
+                return {
+                    success: false,
+                    error: `Variable "${key}" must be <= ${definition.max}`,
+                };
+            }
+            validated[key] = num;
+            continue;
+        }
+        if (definition.type === 'boolean') {
+            validated[key] = value === true || value === 'true';
+            continue;
+        }
+        if (definition.type === 'select') {
+            if (definition.options && !definition.options.includes(String(value))) {
+                return {
+                    success: false,
+                    error: `Variable "${key}" must be one of: ${definition.options.join(', ')}`,
+                };
+            }
+            validated[key] = String(value);
+            continue;
+        }
+        const str = String(value);
+        if (str.length > 2048) {
+            return {
+                success: false,
+                error: `Variable "${key}" exceeds maximum length of 2048 characters`,
+            };
+        }
+        if (key === 'endpoint' && str.length > 0) {
+            try {
+                new URL(str);
+            }
+            catch {
+                return {
+                    success: false,
+                    error: `Variable "${key}" must be a valid URL`,
+                };
+            }
+        }
+        validated[key] = str;
+    }
+    return { success: true, variables: validated };
+}
+//# sourceMappingURL=pluginVariableValidation.js.map

package/backend/dist/utils/pluginVariableValidation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pluginVariableValidation.js","sourceRoot":"","sources":["../../src/utils/pluginVariableValidation.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AASH,MAAM,UAAU,uBAAuB,CACrC,WAAuC,EACvC,MAA+B;IAI/B,MAAM,SAAS,GAAG,IAAI,GAAG,CACvB,WAAW,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC,UAAU,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC,CAC7D,CAAC;IACF,MAAM,SAAS,GAA6B,EAAE,CAAC;IAE/C,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QAClD,MAAM,UAAU,GAAG,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACtC,IAAI,CAAC,UAAU;YAAE,SAAS;QAE1B,IAAI,UAAU,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YACjC,MAAM,GAAG,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;YAC1B,IAAI,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;gBACf,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,aAAa,GAAG,oBAAoB,EAAE,CAAC;YACzE,CAAC;YACD,IAAI,UAAU,CAAC,GAAG,KAAK,SAAS,IAAI,GAAG,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC;gBACzD,OAAO;oBACL,OAAO,EAAE,KAAK;oBACd,KAAK,EAAE,aAAa,GAAG,gBAAgB,UAAU,CAAC,GAAG,EAAE;iBACxD,CAAC;YACJ,CAAC;YACD,IAAI,UAAU,CAAC,GAAG,KAAK,SAAS,IAAI,GAAG,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC;gBACzD,OAAO;oBACL,OAAO,EAAE,KAAK;oBACd,KAAK,EAAE,aAAa,GAAG,gBAAgB,UAAU,CAAC,GAAG,EAAE;iBACxD,CAAC;YACJ,CAAC;YACD,SAAS,CAAC,GAAG,CAAC,GAAG,GAAG,CAAC;YACrB,SAAS;QACX,CAAC;QAED,IAAI,UAAU,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;YAClC,SAAS,CAAC,GAAG,CAAC,GAAG,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,MAAM,CAAC;YACpD,SAAS;QACX,CAAC;QAED,IAAI,UAAU,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YACjC,IAAI,UAAU,CAAC,OAAO,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;gBACtE,OAAO;oBACL,OAAO,EAAE,KAAK;oBACd,KAAK,EAAE,aAAa,GAAG,qBAAqB,UAAU,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;iBAC5E,CAAC;YACJ,CAAC;YACD,SAAS,CAAC,GAAG,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;YAC/B,SAAS;QACX,CAAC;QAED,MAAM,GAAG,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;QAC1B,IAAI,GAAG,CAAC,MAAM,GAAG,IAAI,EAAE,CAAC;YACtB,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,KAAK,EAAE,aAAa,GAAG,6CAA6C;aACrE,CAAC;QACJ,CAAC;QAED,IAAI,GAAG,KAAK,UAAU,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACzC,IAAI,CAAC;gBACH,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;YACf,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO;oBACL,OAAO,EAAE,KAAK;oBACd,KAAK,EAAE,aAAa,GAAG,uBAAuB;iBAC/C,CAAC;YACJ,CAAC;QACH,CAAC;QAED,SAAS,CAAC,GAAG,CAAC,GAAG,GAAG,CAAC;IACvB,CAAC;IAED,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,SAAS,EAAE,CAAC;AACjD,CAAC"}

package/backend/dist/utils/websocketMessages.d.ts

@@ -0,0 +1,26 @@
+export interface WebSocketLike {
+    send(data: string): void;
+}
+export interface AssistantChunkData {
+    content: string;
+    total: string;
+    done: boolean;
+    messageId?: string;
+}
+export interface ToolStatusData {
+    toolCallId: string;
+    name: string;
+    phase: string;
+}
+export interface SendOptions {
+    ignoreClosedSocket?: boolean;
+}
+export declare function sendConnected(ws: WebSocketLike): boolean;
+export declare function sendUserMessage(ws: WebSocketLike, data: unknown): boolean;
+export declare function sendAssistantChunk(ws: WebSocketLike, data: AssistantChunkData, options?: SendOptions): boolean;
+export declare function sendAssistantComplete(ws: WebSocketLike, data: unknown): boolean;
+export declare function sendToolStatus(ws: WebSocketLike, data: ToolStatusData, options?: SendOptions): boolean;
+export declare function sendError(ws: WebSocketLike, data: unknown): boolean;
+export declare function buildAssistantFakeStreamChunks(content: string, messageId?: string, batchSize?: number): AssistantChunkData[];
+export declare function streamAssistantFakeChunks(ws: WebSocketLike, content: string, messageId?: string, delayMs?: number): Promise<void>;
+//# sourceMappingURL=websocketMessages.d.ts.map

package/backend/dist/utils/websocketMessages.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"websocketMessages.d.ts","sourceRoot":"","sources":["../../src/utils/websocketMessages.ts"],"names":[],"mappings":"AAiBA,MAAM,WAAW,aAAa;IAC5B,IAAI,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;CAC1B;AAED,MAAM,WAAW,kBAAkB;IACjC,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,OAAO,CAAC;IACd,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,cAAc;IAC7B,UAAU,EAAE,MAAM,CAAC;IACnB,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,WAAW;IAC1B,kBAAkB,CAAC,EAAE,OAAO,CAAC;CAC9B;AA4BD,wBAAgB,aAAa,CAAC,EAAE,EAAE,aAAa,GAAG,OAAO,CAIxD;AAED,wBAAgB,eAAe,CAAC,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,OAAO,GAAG,OAAO,CAEzE;AAED,wBAAgB,kBAAkB,CAChC,EAAE,EAAE,aAAa,EACjB,IAAI,EAAE,kBAAkB,EACxB,OAAO,CAAC,EAAE,WAAW,GACpB,OAAO,CAET;AAED,wBAAgB,qBAAqB,CACnC,EAAE,EAAE,aAAa,EACjB,IAAI,EAAE,OAAO,GACZ,OAAO,CAET;AAED,wBAAgB,cAAc,CAC5B,EAAE,EAAE,aAAa,EACjB,IAAI,EAAE,cAAc,EACpB,OAAO,CAAC,EAAE,WAAW,GACpB,OAAO,CAET;AAED,wBAAgB,SAAS,CAAC,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,OAAO,GAAG,OAAO,CAEnE;AAED,wBAAgB,8BAA8B,CAC5C,OAAO,EAAE,MAAM,EACf,SAAS,CAAC,EAAE,MAAM,EAClB,SAAS,GAAE,MAAU,GACpB,kBAAkB,EAAE,CAkBtB;AAED,wBAAsB,yBAAyB,CAC7C,EAAE,EAAE,aAAa,EACjB,OAAO,EAAE,MAAM,EACf,SAAS,CAAC,EAAE,MAAM,EAClB,OAAO,GAAE,MAAY,GACpB,OAAO,CAAC,IAAI,CAAC,CAUf"}