libre-webui 0.19.6 → 0.20.0

package/backend/dist/services/systemDiagnosticsService.js

@@ -18,7 +18,9 @@ import http from 'node:http';
 import os from 'node:os';
 import path from 'node:path';
 import { readFile, stat, statfs } from 'node:fs/promises';
+import { dockerEndpointRequestOptions, resolveDockerEndpoint, } from '../utils/dockerEndpoint.js';
 import { loadAppPackage } from '../utils/packagePaths.js';
+export { resolveDockerEndpoint } from '../utils/dockerEndpoint.js';
 const DOCKER_RESPONSE_LIMIT_BYTES = 5 * 1024 * 1024;
 const DOCKER_TIMEOUT_MS = 4000;
 const MAX_DOCKER_CONTAINERS = 100;
@@ -39,16 +41,6 @@ const safeText = (value, fallback = '', maxLength = 160) => {
         .slice(0, maxLength);
 };
 const percent = (used, total) => total > 0 ? Math.round((used / total) * 1000) / 10 : 0;
-export function resolveSystemDockerSocketPath(workDockerSocket, dockerHost) {
-    if (workDockerSocket?.trim())
-        return workDockerSocket.trim();
-    if (dockerHost) {
-        return dockerHost.startsWith('unix://')
-            ? dockerHost.slice('unix://'.length) || null
-            : null;
-    }
-    return '/var/run/docker.sock';
-}
 export function parseNetworkCounters(contents) {
     const counters = new Map();
     for (const line of contents.split('\n').slice(2)) {
@@ -111,7 +103,7 @@ export function summarizeDockerPayloads(versionPayload, infoPayload, containerPa
         containers,
     };
 }
-export async function collectDockerDiagnostics(socketPath, dockerGet = dockerApiGet) {
+export async function collectDockerDiagnostics(endpoint, dockerGet = dockerApiGet) {
     const unavailable = (reason, socketMounted) => ({
         available: false,
         socketMounted,
@@ -122,28 +114,32 @@ export async function collectDockerDiagnostics(socketPath, dockerGet = dockerApi
         pausedContainers: 0,
         containers: [],
     });
-    if (!socketPath) {
-        return unavailable('Docker diagnostics require a local Unix socket; remote Docker endpoints are not queried.', false);
+    if (!endpoint) {
+        return unavailable('Docker diagnostics need the local Unix socket or a plain-HTTP tcp:// endpoint (such as a socket proxy); the configured DOCKER_HOST is neither.', false);
     }
-    let socketMounted = false;
-    try {
-        const socketStats = await stat(socketPath);
-        socketMounted = socketStats.isSocket();
-    }
-    catch (error) {
-        if (error.code === 'EACCES') {
-            return unavailable('The Docker socket is mounted but the Libre WebUI process cannot read it.', true);
+    // "socketMounted" doubles as "an endpoint is configured": a tcp endpoint
+    // has no socket file to stat, so reachability is decided by the request.
+    if (endpoint.kind === 'unix') {
+        let socketMounted = false;
+        try {
+            const socketStats = await stat(endpoint.socketPath);
+            socketMounted = socketStats.isSocket();
+        }
+        catch (error) {
+            if (error.code === 'EACCES') {
+                return unavailable('The Docker socket is mounted but the Libre WebUI process cannot read it.', true);
+            }
+            return unavailable('Docker is unavailable because its local socket is not mounted.', false);
+        }
+        if (!socketMounted) {
+            return unavailable('The configured Docker path is not a Unix socket.', false);
         }
-        return unavailable('Docker is unavailable because its local socket is not mounted.', false);
-    }
-    if (!socketMounted) {
-        return unavailable('The configured Docker path is not a Unix socket.', false);
     }
     try {
         const [version, info, containers] = await Promise.all([
-            dockerGet(socketPath, '/version'),
-            dockerGet(socketPath, '/info'),
-            dockerGet(socketPath, '/containers/json?all=1'),
+            dockerGet(endpoint, '/version'),
+            dockerGet(endpoint, '/info'),
+            dockerGet(endpoint, '/containers/json?all=1'),
         ]);
         return summarizeDockerPayloads((version ?? {}), (info ?? {}), Array.isArray(containers) ? containers : []);
     }
@@ -153,17 +149,22 @@ export async function collectDockerDiagnostics(socketPath, dockerGet = dockerApi
             ? 'The Docker socket is mounted but the Libre WebUI process cannot read it.'
             : code === 'ETIMEDOUT'
                 ? 'The Docker daemon did not answer the diagnostics request in time.'
-                : 'The Docker socket is mounted, but the daemon could not be reached.';
+                : endpoint.kind === 'unix'
+                    ? 'The Docker socket is mounted, but the daemon could not be reached.'
+                    : 'The configured Docker tcp endpoint could not be reached.';
         return unavailable(reason, true);
     }
 }
-async function dockerApiGet(socketPath, requestPath) {
+async function dockerApiGet(endpoint, requestPath) {
     return new Promise((resolve, reject) => {
         const request = http.request({
-            socketPath,
+            ...dockerEndpointRequestOptions(endpoint),
             method: 'GET',
             path: requestPath,
-            headers: { Host: 'docker', Accept: 'application/json' },
+            headers: {
+                ...(endpoint.kind === 'unix' ? { Host: 'docker' } : {}),
+                Accept: 'application/json',
+            },
         }, response => {
             const chunks = [];
             let received = 0;
@@ -273,13 +274,13 @@ export class SystemDiagnosticsService {
         const usedBytes = Math.max(0, totalBytes - freeBytes);
         const processMemory = process.memoryUsage();
         const dataDirectory = process.env.DATA_DIR || path.join(process.cwd(), 'backend', 'data');
-        const socketPath = resolveSystemDockerSocketPath(process.env.WORK_DOCKER_SOCKET, process.env.DOCKER_HOST);
+        const dockerEndpoint = resolveDockerEndpoint(process.env.WORK_DOCKER_SOCKET, process.env.DOCKER_HOST, process.env.DOCKER_TLS_VERIFY);
         const [containerized, runtimeFilesystem, dataFilesystem, network, docker] = await Promise.all([
             detectContainerized(),
             collectFilesystem('Runtime filesystem', '/'),
             collectFilesystem('Data directory', dataDirectory),
             collectNetworkInterfaces(),
-            collectDockerDiagnostics(socketPath),
+            collectDockerDiagnostics(dockerEndpoint),
         ]);
         const filesystems = [runtimeFilesystem, dataFilesystem].filter((item) => item !== null);
         return {

package/backend/dist/services/systemDiagnosticsService.js.map

@@ -1 +1 @@
-{"version":3,"file":"systemDiagnosticsService.js","sourceRoot":"","sources":["../../src/services/systemDiagnosticsService.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AAE1D,OAAO,EAAE,cAAc,EAAE,MAAM,0BAA0B,CAAC;AAE1D,MAAM,2BAA2B,GAAG,CAAC,GAAG,IAAI,GAAG,IAAI,CAAC;AACpD,MAAM,iBAAiB,GAAG,IAAK,CAAC;AAChC,MAAM,qBAAqB,GAAG,GAAG,CAAC;AAClC,MAAM,UAAU,GAAG,MAAM,CAAC,cAAc,CAAC,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,OAAO,IAAI,OAAO,CAAC,CAAC;AAmH9E,MAAM,iBAAiB,GAAG,CAAC,KAAc,EAAsB,EAAE,CAC/D,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,IAAI,CAAC;IAC/D,CAAC,CAAC,KAAK;IACP,CAAC,CAAC,SAAS,CAAC;AAEhB,MAAM,QAAQ,GAAG,CAAC,KAAc,EAAE,QAAQ,GAAG,EAAE,EAAE,SAAS,GAAG,GAAG,EAAU,EAAE;IAC1E,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,QAAQ,CAAC;IAC/C,OAAO,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC;SACrB,MAAM,CAAC,SAAS,CAAC,EAAE;QAClB,MAAM,SAAS,GAAG,SAAS,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QAChD,OAAO,SAAS,IAAI,EAAE,IAAI,SAAS,KAAK,GAAG,CAAC;IAC9C,CAAC,CAAC;SACD,IAAI,CAAC,EAAE,CAAC;SACR,IAAI,EAAE;SACN,KAAK,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC;AACzB,CAAC,CAAC;AAEF,MAAM,OAAO,GAAG,CAAC,IAAY,EAAE,KAAa,EAAU,EAAE,CACtD,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,GAAG,KAAK,CAAC,GAAG,IAAK,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;AAE1D,MAAM,UAAU,6BAA6B,CAC3C,gBAAoC,EACpC,UAA8B;IAE9B,IAAI,gBAAgB,EAAE,IAAI,EAAE;QAAE,OAAO,gBAAgB,CAAC,IAAI,EAAE,CAAC;IAC7D,IAAI,UAAU,EAAE,CAAC;QACf,OAAO,UAAU,CAAC,UAAU,CAAC,SAAS,CAAC;YACrC,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,IAAI;YAC5C,CAAC,CAAC,IAAI,CAAC;IACX,CAAC;IACD,OAAO,sBAAsB,CAAC;AAChC,CAAC;AAED,MAAM,UAAU,oBAAoB,CAClC,QAAgB;IAEhB,MAAM,QAAQ,GAAG,IAAI,GAAG,EAGrB,CAAC;IACJ,KAAK,MAAM,IAAI,IAAI,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;QACjD,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACpC,IAAI,SAAS,GAAG,CAAC;YAAE,SAAS;QAC5B,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC,IAAI,EAAE,CAAC;QAC7C,MAAM,MAAM,GAAG,IAAI;aAChB,KAAK,CAAC,SAAS,GAAG,CAAC,CAAC;aACpB,IAAI,EAAE;aACN,KAAK,CAAC,KAAK,CAAC,CAAC;QAChB,MAAM,aAAa,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;QACxC,MAAM,gBAAgB,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;QAC3C,IACE,IAAI;YACJ,MAAM,CAAC,QAAQ,CAAC,aAAa,CAAC;YAC9B,aAAa,IAAI,CAAC;YAClB,MAAM,CAAC,QAAQ,CAAC,gBAAgB,CAAC;YACjC,gBAAgB,IAAI,CAAC,EACrB,CAAC;YACD,QAAQ,CAAC,GAAG,CAAC,IAAI,EAAE,EAAE,aAAa,EAAE,gBAAgB,EAAE,CAAC,CAAC;QAC1D,CAAC;IACH,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,MAAM,UAAU,uBAAuB,CACrC,cAAoC,EACpC,WAA8B,EAC9B,gBAA0C;IAE1C,MAAM,UAAU,GAAG,gBAAgB;SAChC,KAAK,CAAC,CAAC,EAAE,qBAAqB,CAAC;SAC/B,GAAG,CAAC,SAAS,CAAC,EAAE;QACf,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;QACpE,MAAM,SAAS,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC;QAC/D,MAAM,EAAE,GAAG,QAAQ,CAAC,SAAS,CAAC,EAAE,EAAE,SAAS,EAAE,EAAE,CAAC,CAAC;QACjD,OAAO;YACL,EAAE,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC;YACnB,IAAI,EAAE,QAAQ,CAAC,SAAS,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,SAAS,EAAE,GAAG,CAAC,CAAC,OAAO,CAClE,MAAM,EACN,EAAE,CACH;YACD,KAAK,EAAE,QAAQ,CAAC,SAAS,CAAC,KAAK,EAAE,SAAS,EAAE,GAAG,CAAC;YAChD,KAAK,EAAE,QAAQ,CAAC,SAAS,CAAC,KAAK,EAAE,SAAS,EAAE,EAAE,CAAC;YAC/C,MAAM,EAAE,QAAQ,CAAC,SAAS,CAAC,MAAM,EAAE,SAAS,EAAE,GAAG,CAAC;YAClD,SAAS,EAAE,IAAI,CAAC,KAAK,CACnB,CAAC,iBAAiB,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,GAAG,IAAI,CACnD;SACF,CAAC;IACJ,CAAC,CAAC,CAAC;IACL,MAAM,OAAO,GAAG,iBAAiB,CAAC,WAAW,CAAC,iBAAiB,CAAC,CAAC;IACjE,MAAM,OAAO,GAAG,iBAAiB,CAAC,WAAW,CAAC,iBAAiB,CAAC,CAAC;IACjE,MAAM,MAAM,GAAG,iBAAiB,CAAC,WAAW,CAAC,gBAAgB,CAAC,CAAC;IAC/D,MAAM,KAAK,GAAG,iBAAiB,CAAC,WAAW,CAAC,UAAU,CAAC,CAAC;IAExD,OAAO;QACL,SAAS,EAAE,IAAI;QACf,aAAa,EAAE,IAAI;QACnB,aAAa,EAAE,QAAQ,CAAC,cAAc,CAAC,OAAO,CAAC,IAAI,SAAS;QAC5D,eAAe,EACb,QAAQ,CAAC,WAAW,CAAC,eAAe,CAAC;YACrC,QAAQ,CAAC,WAAW,CAAC,MAAM,CAAC;YAC5B,SAAS;QACX,YAAY,EAAE,QAAQ,CAAC,WAAW,CAAC,YAAY,CAAC,IAAI,SAAS;QAC7D,aAAa,EAAE,QAAQ,CAAC,WAAW,CAAC,aAAa,CAAC,IAAI,SAAS;QAC/D,WAAW,EAAE,iBAAiB,CAAC,WAAW,CAAC,IAAI,CAAC;QAChD,WAAW,EAAE,iBAAiB,CAAC,WAAW,CAAC,QAAQ,CAAC;QACpD,eAAe,EAAE,IAAI,CAAC,KAAK,CAAC,KAAK,IAAI,gBAAgB,CAAC,MAAM,CAAC;QAC7D,iBAAiB,EAAE,IAAI,CAAC,KAAK,CAC3B,OAAO;YACL,gBAAgB,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,MAAM,CACnE;QACD,iBAAiB,EAAE,IAAI,CAAC,KAAK,CAC3B,OAAO,IAAI,gBAAgB,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,MAAM,CAC3E;QACD,gBAAgB,EAAE,IAAI,CAAC,KAAK,CAC1B,MAAM,IAAI,gBAAgB,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,MAAM,CAC1E;QACD,UAAU;KACX,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAC5C,UAAyB,EACzB,SAAS,GAAc,YAAY;IAEnC,MAAM,WAAW,GAAG,CAClB,MAAc,EACd,aAAsB,EACH,EAAE,CAAC,CAAC;QACvB,SAAS,EAAE,KAAK;QAChB,aAAa;QACb,MAAM;QACN,eAAe,EAAE,CAAC;QAClB,iBAAiB,EAAE,CAAC;QACpB,iBAAiB,EAAE,CAAC;QACpB,gBAAgB,EAAE,CAAC;QACnB,UAAU,EAAE,EAAE;KACf,CAAC,CAAC;IACH,IAAI,CAAC,UAAU,EAAE,CAAC;QAChB,OAAO,WAAW,CAChB,0FAA0F,EAC1F,KAAK,CACN,CAAC;IACJ,CAAC;IAED,IAAI,aAAa,GAAG,KAAK,CAAC;IAC1B,IAAI,CAAC;QACH,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,CAAC;QAC3C,aAAa,GAAG,WAAW,CAAC,QAAQ,EAAE,CAAC;IACzC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YACvD,OAAO,WAAW,CAChB,0EAA0E,EAC1E,IAAI,CACL,CAAC;QACJ,CAAC;QACD,OAAO,WAAW,CAChB,gEAAgE,EAChE,KAAK,CACN,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,aAAa,EAAE,CAAC;QACnB,OAAO,WAAW,CAChB,kDAAkD,EAClD,KAAK,CACN,CAAC;IACJ,CAAC;IAED,IAAI,CAAC;QACH,MAAM,CAAC,OAAO,EAAE,IAAI,EAAE,UAAU,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;YACpD,SAAS,CAAC,UAAU,EAAE,UAAU,CAAC;YACjC,SAAS,CAAC,UAAU,EAAE,OAAO,CAAC;YAC9B,SAAS,CAAC,UAAU,EAAE,wBAAwB,CAAC;SAChD,CAAC,CAAC;QACH,OAAO,uBAAuB,CAC5B,CAAC,OAAO,IAAI,EAAE,CAAyB,EACvC,CAAC,IAAI,IAAI,EAAE,CAAsB,EACjC,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,CAAE,UAAuC,CAAC,CAAC,CAAC,EAAE,CAC1E,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,GAAI,KAA+B,CAAC,IAAI,CAAC;QACnD,MAAM,MAAM,GACV,IAAI,KAAK,QAAQ;YACf,CAAC,CAAC,0EAA0E;YAC5E,CAAC,CAAC,IAAI,KAAK,WAAW;gBACpB,CAAC,CAAC,mEAAmE;gBACrE,CAAC,CAAC,oEAAoE,CAAC;QAC7E,OAAO,WAAW,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;IACnC,CAAC;AACH,CAAC;AAED,KAAK,UAAU,YAAY,CACzB,UAAkB,EAClB,WAAmB;IAEnB,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAC1B;YACE,UAAU;YACV,MAAM,EAAE,KAAK;YACb,IAAI,EAAE,WAAW;YACjB,OAAO,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,kBAAkB,EAAE;SACxD,EACD,QAAQ,CAAC,EAAE;YACT,MAAM,MAAM,GAAa,EAAE,CAAC;YAC5B,IAAI,QAAQ,GAAG,CAAC,CAAC;YACjB,QAAQ,CAAC,EAAE,CAAC,MAAM,EAAE,KAAK,CAAC,EAAE;gBAC1B,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;gBAClC,QAAQ,IAAI,MAAM,CAAC,MAAM,CAAC;gBAC1B,IAAI,QAAQ,GAAG,2BAA2B,EAAE,CAAC;oBAC3C,OAAO,CAAC,OAAO,CACb,IAAI,KAAK,CAAC,sDAAsD,CAAC,CAClE,CAAC;oBACF,OAAO;gBACT,CAAC;gBACD,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YACtB,CAAC,CAAC,CAAC;YACH,QAAQ,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE;gBACtB,IACE,CAAC,QAAQ,CAAC,UAAU,IAAI,CAAC,CAAC,GAAG,GAAG;oBAChC,CAAC,QAAQ,CAAC,UAAU,IAAI,CAAC,CAAC,IAAI,GAAG,EACjC,CAAC;oBACD,MAAM,KAAK,GAAG,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;oBACnE,KAA+B,CAAC,IAAI,GAAG,SAAS,CAAC;oBAClD,MAAM,CAAC,KAAK,CAAC,CAAC;oBACd,OAAO;gBACT,CAAC;gBACD,IAAI,CAAC;oBACH,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;gBAC9D,CAAC;gBAAC,MAAM,CAAC;oBACP,MAAM,KAAK,GAAG,IAAI,KAAK,CACrB,2CAA2C,CAC5C,CAAC;oBACD,KAA+B,CAAC,IAAI,GAAG,SAAS,CAAC;oBAClD,MAAM,CAAC,KAAK,CAAC,CAAC;gBAChB,CAAC;YACH,CAAC,CAAC,CAAC;QACL,CAAC,CACF,CAAC;QACF,OAAO,CAAC,UAAU,CAAC,iBAAiB,EAAE,GAAG,EAAE;YACzC,MAAM,KAAK,GAAG,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;YAChE,KAA+B,CAAC,IAAI,GAAG,WAAW,CAAC;YACpD,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QACzB,CAAC,CAAC,CAAC;QACH,OAAO,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAC5B,OAAO,CAAC,GAAG,EAAE,CAAC;IAChB,CAAC,CAAC,CAAC;AACL,CAAC;AAED,KAAK,UAAU,mBAAmB;IAChC,IAAI,CAAC;QACH,MAAM,IAAI,CAAC,aAAa,CAAC,CAAC;QAC1B,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,iDAAiD;IACnD,CAAC;IACD,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC,CAAC;QACxD,OAAO,wCAAwC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAC/D,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,KAAK,UAAU,iBAAiB,CAC9B,KAAa,EACb,QAAgB;IAEhB,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,QAAQ,CAAC,CAAC;QACvC,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,OAAO,CAAC,KAAK,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;QAC/D,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,OAAO,CAAC,KAAK,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;QAC9D,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,UAAU,GAAG,SAAS,CAAC,CAAC;QACtD,OAAO;YACL,KAAK;YACL,IAAI,EAAE,QAAQ;YACd,UAAU;YACV,SAAS;YACT,SAAS;YACT,WAAW,EAAE,OAAO,CAAC,SAAS,EAAE,UAAU,CAAC;SAC5C,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,KAAK,UAAU,wBAAwB;IACrC,IAAI,QAAQ,GAAG,IAAI,GAAG,EAGnB,CAAC;IACJ,IAAI,CAAC;QACH,QAAQ,GAAG,oBAAoB,CAAC,MAAM,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC,CAAC,CAAC;IAC3E,CAAC;IAAC,MAAM,CAAC;QACP,oDAAoD;IACtD,CAAC;IAED,OAAO,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC,iBAAiB,EAAE,CAAC;SAC1C,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC;SACZ,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,SAAS,CAAC,EAAE,EAAE;QACzB,MAAM,OAAO,GAAG,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACnC,OAAO;YACL,IAAI,EAAE,QAAQ,CAAC,IAAI,EAAE,WAAW,EAAE,EAAE,CAAC;YACrC,SAAS,EAAE,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;gBACxD,OAAO,EAAE,QAAQ,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,EAAE,GAAG,CAAC;gBAC3C,MAAM,EAAE,OAAO,CAAC,MAAM;gBACtB,IAAI,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI;gBAC3D,QAAQ,EAAE,OAAO,CAAC,QAAQ;aAC3B,CAAC,CAAC;YACH,GAAG,CAAC,OAAO,IAAI,EAAE,CAAC;SACnB,CAAC;IACJ,CAAC,CAAC;SACD,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC,CAAC;SACzC,IAAI,CACH,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CACd,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAC3E,CAAC;AACN,CAAC;AAED,MAAM,OAAO,wBAAwB;IACnC,KAAK,CAAC,cAAc;QAClB,MAAM,WAAW,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC/B,MAAM,IAAI,GAAG,EAAE,CAAC,IAAI,EAAE,CAAC;QACvB,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,CAAC,QAAQ,EAAE,CAAC,CAAC;QAC9C,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC;QAC5C,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,UAAU,GAAG,SAAS,CAAC,CAAC;QACtD,MAAM,aAAa,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC;QAC5C,MAAM,aAAa,GACjB,OAAO,CAAC,GAAG,CAAC,QAAQ,IAAI,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC;QACtE,MAAM,UAAU,GAAG,6BAA6B,CAC9C,OAAO,CAAC,GAAG,CAAC,kBAAkB,EAC9B,OAAO,CAAC,GAAG,CAAC,WAAW,CACxB,CAAC;QACF,MAAM,CAAC,aAAa,EAAE,iBAAiB,EAAE,cAAc,EAAE,OAAO,EAAE,MAAM,CAAC,GACvE,MAAM,OAAO,CAAC,GAAG,CAAC;YAChB,mBAAmB,EAAE;YACrB,iBAAiB,CAAC,oBAAoB,EAAE,GAAG,CAAC;YAC5C,iBAAiB,CAAC,gBAAgB,EAAE,aAAa,CAAC;YAClD,wBAAwB,EAAE;YAC1B,wBAAwB,CAAC,UAAU,CAAC;SACrC,CAAC,CAAC;QACL,MAAM,WAAW,GAAG,CAAC,iBAAiB,EAAE,cAAc,CAAC,CAAC,MAAM,CAC5D,CAAC,IAAI,EAAuC,EAAE,CAAC,IAAI,KAAK,IAAI,CAC7D,CAAC;QAEF,OAAO;YACL,WAAW;YACX,IAAI,EAAE;gBACJ,QAAQ,EAAE,QAAQ,CAAC,EAAE,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,GAAG,CAAC;gBACjD,QAAQ,EAAE,QAAQ,CAAC,EAAE,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,EAAE,CAAC;gBAChD,OAAO,EAAE,QAAQ,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,GAAG,CAAC;gBAC/C,YAAY,EAAE,QAAQ,CAAC,EAAE,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,EAAE,CAAC;gBAChD,aAAa,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,CAAC;gBACnD,QAAQ,EAAE,WAAW,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,MAAM,EAAE,GAAG,IAAI,CAAC,CAAC;gBACnE,WAAW,EAAE,IAAI,CAAC,MAAM;gBACxB,QAAQ,EAAE,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,aAAa,EAAE,GAAG,CAAC;gBACtD,WAAW,EAAE,EAAE;qBACZ,OAAO,EAAE;qBACT,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,GAAG,GAAG,CAAC,GAAG,GAAG,CAI5C;gBACD,aAAa;aACd;YACD,OAAO,EAAE;gBACP,UAAU;gBACV,WAAW,EAAE,OAAO,CAAC,OAAO;gBAC5B,SAAS,EAAE,OAAO,CAAC,GAAG;gBACtB,oBAAoB,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;gBAC/D,gBAAgB,EAAE,OAAO,CAAC,GAAG,EAAE;aAChC;YACD,MAAM,EAAE;gBACN,UAAU;gBACV,SAAS;gBACT,SAAS;gBACT,WAAW,EAAE,OAAO,CAAC,SAAS,EAAE,UAAU,CAAC;gBAC3C,eAAe,EAAE,aAAa,CAAC,GAAG;gBAClC,aAAa,EAAE,aAAa,CAAC,QAAQ;gBACrC,cAAc,EAAE,aAAa,CAAC,SAAS;gBACvC,aAAa,EAAE,aAAa,CAAC,QAAQ;aACtC;YACD,WAAW;YACX,OAAO,EAAE,EAAE,UAAU,EAAE,OAAO,EAAE;YAChC,MAAM;SACP,CAAC;IACJ,CAAC;CACF;AAED,MAAM,wBAAwB,GAAG,IAAI,wBAAwB,EAAE,CAAC;AAChE,eAAe,wBAAwB,CAAC"}
+{"version":3,"file":"systemDiagnosticsService.js","sourceRoot":"","sources":["../../src/services/systemDiagnosticsService.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AAE1D,OAAO,EACL,4BAA4B,EAC5B,qBAAqB,GAEtB,MAAM,4BAA4B,CAAC;AACpC,OAAO,EAAE,cAAc,EAAE,MAAM,0BAA0B,CAAC;AAE1D,OAAO,EAAE,qBAAqB,EAAE,MAAM,4BAA4B,CAAC;AAEnE,MAAM,2BAA2B,GAAG,CAAC,GAAG,IAAI,GAAG,IAAI,CAAC;AACpD,MAAM,iBAAiB,GAAG,IAAK,CAAC;AAChC,MAAM,qBAAqB,GAAG,GAAG,CAAC;AAClC,MAAM,UAAU,GAAG,MAAM,CAAC,cAAc,CAAC,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,OAAO,IAAI,OAAO,CAAC,CAAC;AAsH9E,MAAM,iBAAiB,GAAG,CAAC,KAAc,EAAsB,EAAE,CAC/D,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,IAAI,CAAC;IAC/D,CAAC,CAAC,KAAK;IACP,CAAC,CAAC,SAAS,CAAC;AAEhB,MAAM,QAAQ,GAAG,CAAC,KAAc,EAAE,QAAQ,GAAG,EAAE,EAAE,SAAS,GAAG,GAAG,EAAU,EAAE;IAC1E,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,QAAQ,CAAC;IAC/C,OAAO,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC;SACrB,MAAM,CAAC,SAAS,CAAC,EAAE;QAClB,MAAM,SAAS,GAAG,SAAS,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QAChD,OAAO,SAAS,IAAI,EAAE,IAAI,SAAS,KAAK,GAAG,CAAC;IAC9C,CAAC,CAAC;SACD,IAAI,CAAC,EAAE,CAAC;SACR,IAAI,EAAE;SACN,KAAK,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC;AACzB,CAAC,CAAC;AAEF,MAAM,OAAO,GAAG,CAAC,IAAY,EAAE,KAAa,EAAU,EAAE,CACtD,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,GAAG,KAAK,CAAC,GAAG,IAAK,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;AAE1D,MAAM,UAAU,oBAAoB,CAClC,QAAgB;IAEhB,MAAM,QAAQ,GAAG,IAAI,GAAG,EAGrB,CAAC;IACJ,KAAK,MAAM,IAAI,IAAI,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;QACjD,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACpC,IAAI,SAAS,GAAG,CAAC;YAAE,SAAS;QAC5B,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC,IAAI,EAAE,CAAC;QAC7C,MAAM,MAAM,GAAG,IAAI;aAChB,KAAK,CAAC,SAAS,GAAG,CAAC,CAAC;aACpB,IAAI,EAAE;aACN,KAAK,CAAC,KAAK,CAAC,CAAC;QAChB,MAAM,aAAa,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;QACxC,MAAM,gBAAgB,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;QAC3C,IACE,IAAI;YACJ,MAAM,CAAC,QAAQ,CAAC,aAAa,CAAC;YAC9B,aAAa,IAAI,CAAC;YAClB,MAAM,CAAC,QAAQ,CAAC,gBAAgB,CAAC;YACjC,gBAAgB,IAAI,CAAC,EACrB,CAAC;YACD,QAAQ,CAAC,GAAG,CAAC,IAAI,EAAE,EAAE,aAAa,EAAE,gBAAgB,EAAE,CAAC,CAAC;QAC1D,CAAC;IACH,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,MAAM,UAAU,uBAAuB,CACrC,cAAoC,EACpC,WAA8B,EAC9B,gBAA0C;IAE1C,MAAM,UAAU,GAAG,gBAAgB;SAChC,KAAK,CAAC,CAAC,EAAE,qBAAqB,CAAC;SAC/B,GAAG,CAAC,SAAS,CAAC,EAAE;QACf,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;QACpE,MAAM,SAAS,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC;QAC/D,MAAM,EAAE,GAAG,QAAQ,CAAC,SAAS,CAAC,EAAE,EAAE,SAAS,EAAE,EAAE,CAAC,CAAC;QACjD,OAAO;YACL,EAAE,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC;YACnB,IAAI,EAAE,QAAQ,CAAC,SAAS,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,SAAS,EAAE,GAAG,CAAC,CAAC,OAAO,CAClE,MAAM,EACN,EAAE,CACH;YACD,KAAK,EAAE,QAAQ,CAAC,SAAS,CAAC,KAAK,EAAE,SAAS,EAAE,GAAG,CAAC;YAChD,KAAK,EAAE,QAAQ,CAAC,SAAS,CAAC,KAAK,EAAE,SAAS,EAAE,EAAE,CAAC;YAC/C,MAAM,EAAE,QAAQ,CAAC,SAAS,CAAC,MAAM,EAAE,SAAS,EAAE,GAAG,CAAC;YAClD,SAAS,EAAE,IAAI,CAAC,KAAK,CACnB,CAAC,iBAAiB,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,GAAG,IAAI,CACnD;SACF,CAAC;IACJ,CAAC,CAAC,CAAC;IACL,MAAM,OAAO,GAAG,iBAAiB,CAAC,WAAW,CAAC,iBAAiB,CAAC,CAAC;IACjE,MAAM,OAAO,GAAG,iBAAiB,CAAC,WAAW,CAAC,iBAAiB,CAAC,CAAC;IACjE,MAAM,MAAM,GAAG,iBAAiB,CAAC,WAAW,CAAC,gBAAgB,CAAC,CAAC;IAC/D,MAAM,KAAK,GAAG,iBAAiB,CAAC,WAAW,CAAC,UAAU,CAAC,CAAC;IAExD,OAAO;QACL,SAAS,EAAE,IAAI;QACf,aAAa,EAAE,IAAI;QACnB,aAAa,EAAE,QAAQ,CAAC,cAAc,CAAC,OAAO,CAAC,IAAI,SAAS;QAC5D,eAAe,EACb,QAAQ,CAAC,WAAW,CAAC,eAAe,CAAC;YACrC,QAAQ,CAAC,WAAW,CAAC,MAAM,CAAC;YAC5B,SAAS;QACX,YAAY,EAAE,QAAQ,CAAC,WAAW,CAAC,YAAY,CAAC,IAAI,SAAS;QAC7D,aAAa,EAAE,QAAQ,CAAC,WAAW,CAAC,aAAa,CAAC,IAAI,SAAS;QAC/D,WAAW,EAAE,iBAAiB,CAAC,WAAW,CAAC,IAAI,CAAC;QAChD,WAAW,EAAE,iBAAiB,CAAC,WAAW,CAAC,QAAQ,CAAC;QACpD,eAAe,EAAE,IAAI,CAAC,KAAK,CAAC,KAAK,IAAI,gBAAgB,CAAC,MAAM,CAAC;QAC7D,iBAAiB,EAAE,IAAI,CAAC,KAAK,CAC3B,OAAO;YACL,gBAAgB,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,MAAM,CACnE;QACD,iBAAiB,EAAE,IAAI,CAAC,KAAK,CAC3B,OAAO,IAAI,gBAAgB,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,MAAM,CAC3E;QACD,gBAAgB,EAAE,IAAI,CAAC,KAAK,CAC1B,MAAM,IAAI,gBAAgB,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,MAAM,CAC1E;QACD,UAAU;KACX,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAC5C,QAA+B,EAC/B,SAAS,GAAc,YAAY;IAEnC,MAAM,WAAW,GAAG,CAClB,MAAc,EACd,aAAsB,EACH,EAAE,CAAC,CAAC;QACvB,SAAS,EAAE,KAAK;QAChB,aAAa;QACb,MAAM;QACN,eAAe,EAAE,CAAC;QAClB,iBAAiB,EAAE,CAAC;QACpB,iBAAiB,EAAE,CAAC;QACpB,gBAAgB,EAAE,CAAC;QACnB,UAAU,EAAE,EAAE;KACf,CAAC,CAAC;IACH,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,OAAO,WAAW,CAChB,gJAAgJ,EAChJ,KAAK,CACN,CAAC;IACJ,CAAC;IAED,yEAAyE;IACzE,yEAAyE;IACzE,IAAI,QAAQ,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;QAC7B,IAAI,aAAa,GAAG,KAAK,CAAC;QAC1B,IAAI,CAAC;YACH,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;YACpD,aAAa,GAAG,WAAW,CAAC,QAAQ,EAAE,CAAC;QACzC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;gBACvD,OAAO,WAAW,CAChB,0EAA0E,EAC1E,IAAI,CACL,CAAC;YACJ,CAAC;YACD,OAAO,WAAW,CAChB,gEAAgE,EAChE,KAAK,CACN,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,aAAa,EAAE,CAAC;YACnB,OAAO,WAAW,CAChB,kDAAkD,EAClD,KAAK,CACN,CAAC;QACJ,CAAC;IACH,CAAC;IAED,IAAI,CAAC;QACH,MAAM,CAAC,OAAO,EAAE,IAAI,EAAE,UAAU,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;YACpD,SAAS,CAAC,QAAQ,EAAE,UAAU,CAAC;YAC/B,SAAS,CAAC,QAAQ,EAAE,OAAO,CAAC;YAC5B,SAAS,CAAC,QAAQ,EAAE,wBAAwB,CAAC;SAC9C,CAAC,CAAC;QACH,OAAO,uBAAuB,CAC5B,CAAC,OAAO,IAAI,EAAE,CAAyB,EACvC,CAAC,IAAI,IAAI,EAAE,CAAsB,EACjC,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,CAAE,UAAuC,CAAC,CAAC,CAAC,EAAE,CAC1E,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,GAAI,KAA+B,CAAC,IAAI,CAAC;QACnD,MAAM,MAAM,GACV,IAAI,KAAK,QAAQ;YACf,CAAC,CAAC,0EAA0E;YAC5E,CAAC,CAAC,IAAI,KAAK,WAAW;gBACpB,CAAC,CAAC,mEAAmE;gBACrE,CAAC,CAAC,QAAQ,CAAC,IAAI,KAAK,MAAM;oBACxB,CAAC,CAAC,oEAAoE;oBACtE,CAAC,CAAC,0DAA0D,CAAC;QACrE,OAAO,WAAW,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;IACnC,CAAC;AACH,CAAC;AAED,KAAK,UAAU,YAAY,CACzB,QAAwB,EACxB,WAAmB;IAEnB,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAC1B;YACE,GAAG,4BAA4B,CAAC,QAAQ,CAAC;YACzC,MAAM,EAAE,KAAK;YACb,IAAI,EAAE,WAAW;YACjB,OAAO,EAAE;gBACP,GAAG,CAAC,QAAQ,CAAC,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACvD,MAAM,EAAE,kBAAkB;aAC3B;SACF,EACD,QAAQ,CAAC,EAAE;YACT,MAAM,MAAM,GAAa,EAAE,CAAC;YAC5B,IAAI,QAAQ,GAAG,CAAC,CAAC;YACjB,QAAQ,CAAC,EAAE,CAAC,MAAM,EAAE,KAAK,CAAC,EAAE;gBAC1B,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;gBAClC,QAAQ,IAAI,MAAM,CAAC,MAAM,CAAC;gBAC1B,IAAI,QAAQ,GAAG,2BAA2B,EAAE,CAAC;oBAC3C,OAAO,CAAC,OAAO,CACb,IAAI,KAAK,CAAC,sDAAsD,CAAC,CAClE,CAAC;oBACF,OAAO;gBACT,CAAC;gBACD,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YACtB,CAAC,CAAC,CAAC;YACH,QAAQ,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE;gBACtB,IACE,CAAC,QAAQ,CAAC,UAAU,IAAI,CAAC,CAAC,GAAG,GAAG;oBAChC,CAAC,QAAQ,CAAC,UAAU,IAAI,CAAC,CAAC,IAAI,GAAG,EACjC,CAAC;oBACD,MAAM,KAAK,GAAG,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;oBACnE,KAA+B,CAAC,IAAI,GAAG,SAAS,CAAC;oBAClD,MAAM,CAAC,KAAK,CAAC,CAAC;oBACd,OAAO;gBACT,CAAC;gBACD,IAAI,CAAC;oBACH,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;gBAC9D,CAAC;gBAAC,MAAM,CAAC;oBACP,MAAM,KAAK,GAAG,IAAI,KAAK,CACrB,2CAA2C,CAC5C,CAAC;oBACD,KAA+B,CAAC,IAAI,GAAG,SAAS,CAAC;oBAClD,MAAM,CAAC,KAAK,CAAC,CAAC;gBAChB,CAAC;YACH,CAAC,CAAC,CAAC;QACL,CAAC,CACF,CAAC;QACF,OAAO,CAAC,UAAU,CAAC,iBAAiB,EAAE,GAAG,EAAE;YACzC,MAAM,KAAK,GAAG,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;YAChE,KAA+B,CAAC,IAAI,GAAG,WAAW,CAAC;YACpD,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QACzB,CAAC,CAAC,CAAC;QACH,OAAO,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAC5B,OAAO,CAAC,GAAG,EAAE,CAAC;IAChB,CAAC,CAAC,CAAC;AACL,CAAC;AAED,KAAK,UAAU,mBAAmB;IAChC,IAAI,CAAC;QACH,MAAM,IAAI,CAAC,aAAa,CAAC,CAAC;QAC1B,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,iDAAiD;IACnD,CAAC;IACD,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC,CAAC;QACxD,OAAO,wCAAwC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAC/D,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,KAAK,UAAU,iBAAiB,CAC9B,KAAa,EACb,QAAgB;IAEhB,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,QAAQ,CAAC,CAAC;QACvC,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,OAAO,CAAC,KAAK,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;QAC/D,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,OAAO,CAAC,KAAK,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;QAC9D,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,UAAU,GAAG,SAAS,CAAC,CAAC;QACtD,OAAO;YACL,KAAK;YACL,IAAI,EAAE,QAAQ;YACd,UAAU;YACV,SAAS;YACT,SAAS;YACT,WAAW,EAAE,OAAO,CAAC,SAAS,EAAE,UAAU,CAAC;SAC5C,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,KAAK,UAAU,wBAAwB;IACrC,IAAI,QAAQ,GAAG,IAAI,GAAG,EAGnB,CAAC;IACJ,IAAI,CAAC;QACH,QAAQ,GAAG,oBAAoB,CAAC,MAAM,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC,CAAC,CAAC;IAC3E,CAAC;IAAC,MAAM,CAAC;QACP,oDAAoD;IACtD,CAAC;IAED,OAAO,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC,iBAAiB,EAAE,CAAC;SAC1C,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC;SACZ,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,SAAS,CAAC,EAAE,EAAE;QACzB,MAAM,OAAO,GAAG,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACnC,OAAO;YACL,IAAI,EAAE,QAAQ,CAAC,IAAI,EAAE,WAAW,EAAE,EAAE,CAAC;YACrC,SAAS,EAAE,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;gBACxD,OAAO,EAAE,QAAQ,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,EAAE,GAAG,CAAC;gBAC3C,MAAM,EAAE,OAAO,CAAC,MAAM;gBACtB,IAAI,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI;gBAC3D,QAAQ,EAAE,OAAO,CAAC,QAAQ;aAC3B,CAAC,CAAC;YACH,GAAG,CAAC,OAAO,IAAI,EAAE,CAAC;SACnB,CAAC;IACJ,CAAC,CAAC;SACD,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC,CAAC;SACzC,IAAI,CACH,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CACd,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAC3E,CAAC;AACN,CAAC;AAED,MAAM,OAAO,wBAAwB;IACnC,KAAK,CAAC,cAAc;QAClB,MAAM,WAAW,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC/B,MAAM,IAAI,GAAG,EAAE,CAAC,IAAI,EAAE,CAAC;QACvB,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,CAAC,QAAQ,EAAE,CAAC,CAAC;QAC9C,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC;QAC5C,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,UAAU,GAAG,SAAS,CAAC,CAAC;QACtD,MAAM,aAAa,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC;QAC5C,MAAM,aAAa,GACjB,OAAO,CAAC,GAAG,CAAC,QAAQ,IAAI,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC;QACtE,MAAM,cAAc,GAAG,qBAAqB,CAC1C,OAAO,CAAC,GAAG,CAAC,kBAAkB,EAC9B,OAAO,CAAC,GAAG,CAAC,WAAW,EACvB,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAC9B,CAAC;QACF,MAAM,CAAC,aAAa,EAAE,iBAAiB,EAAE,cAAc,EAAE,OAAO,EAAE,MAAM,CAAC,GACvE,MAAM,OAAO,CAAC,GAAG,CAAC;YAChB,mBAAmB,EAAE;YACrB,iBAAiB,CAAC,oBAAoB,EAAE,GAAG,CAAC;YAC5C,iBAAiB,CAAC,gBAAgB,EAAE,aAAa,CAAC;YAClD,wBAAwB,EAAE;YAC1B,wBAAwB,CAAC,cAAc,CAAC;SACzC,CAAC,CAAC;QACL,MAAM,WAAW,GAAG,CAAC,iBAAiB,EAAE,cAAc,CAAC,CAAC,MAAM,CAC5D,CAAC,IAAI,EAAuC,EAAE,CAAC,IAAI,KAAK,IAAI,CAC7D,CAAC;QAEF,OAAO;YACL,WAAW;YACX,IAAI,EAAE;gBACJ,QAAQ,EAAE,QAAQ,CAAC,EAAE,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,GAAG,CAAC;gBACjD,QAAQ,EAAE,QAAQ,CAAC,EAAE,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,EAAE,CAAC;gBAChD,OAAO,EAAE,QAAQ,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,GAAG,CAAC;gBAC/C,YAAY,EAAE,QAAQ,CAAC,EAAE,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,EAAE,CAAC;gBAChD,aAAa,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,CAAC;gBACnD,QAAQ,EAAE,WAAW,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,MAAM,EAAE,GAAG,IAAI,CAAC,CAAC;gBACnE,WAAW,EAAE,IAAI,CAAC,MAAM;gBACxB,QAAQ,EAAE,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,aAAa,EAAE,GAAG,CAAC;gBACtD,WAAW,EAAE,EAAE;qBACZ,OAAO,EAAE;qBACT,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,GAAG,GAAG,CAAC,GAAG,GAAG,CAI5C;gBACD,aAAa;aACd;YACD,OAAO,EAAE;gBACP,UAAU;gBACV,WAAW,EAAE,OAAO,CAAC,OAAO;gBAC5B,SAAS,EAAE,OAAO,CAAC,GAAG;gBACtB,oBAAoB,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;gBAC/D,gBAAgB,EAAE,OAAO,CAAC,GAAG,EAAE;aAChC;YACD,MAAM,EAAE;gBACN,UAAU;gBACV,SAAS;gBACT,SAAS;gBACT,WAAW,EAAE,OAAO,CAAC,SAAS,EAAE,UAAU,CAAC;gBAC3C,eAAe,EAAE,aAAa,CAAC,GAAG;gBAClC,aAAa,EAAE,aAAa,CAAC,QAAQ;gBACrC,cAAc,EAAE,aAAa,CAAC,SAAS;gBACvC,aAAa,EAAE,aAAa,CAAC,QAAQ;aACtC;YACD,WAAW;YACX,OAAO,EAAE,EAAE,UAAU,EAAE,OAAO,EAAE;YAChC,MAAM;SACP,CAAC;IACJ,CAAC;CACF;AAED,MAAM,wBAAwB,GAAG,IAAI,wBAAwB,EAAE,CAAC;AAChE,eAAe,wBAAwB,CAAC"}

package/backend/dist/services/workAccessService.d.ts

@@ -0,0 +1,15 @@
+export type WorkAccessMode = 'admins' | 'all-users';
+export declare const WORK_ACCESS_MODES: readonly WorkAccessMode[];
+export declare const WORK_ACCESS_MODE_KEY = "work_access_mode";
+export declare function isWorkAccessMode(value: unknown): value is WorkAccessMode;
+export declare function getWorkAccessMode(): WorkAccessMode;
+export declare function setWorkAccessMode(mode: WorkAccessMode): void;
+/**
+ * Whether a user may use Work right now. Administrators always may; other
+ * active accounts may when the mode is opened to all users.
+ */
+export declare function userHasWorkAccess(user: {
+    role?: string;
+    status?: string;
+}): boolean;
+//# sourceMappingURL=workAccessService.d.ts.map

package/backend/dist/services/workAccessService.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"workAccessService.d.ts","sourceRoot":"","sources":["../../src/services/workAccessService.ts"],"names":[],"mappings":"AA+BA,MAAM,MAAM,cAAc,GAAG,QAAQ,GAAG,WAAW,CAAC;AAEpD,eAAO,MAAM,iBAAiB,EAAE,SAAS,cAAc,EAGtD,CAAC;AAEF,eAAO,MAAM,oBAAoB,qBAAqB,CAAC;AAEvD,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,cAAc,CAKxE;AAED,wBAAgB,iBAAiB,IAAI,cAAc,CAKlD;AAED,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,cAAc,GAAG,IAAI,CAa5D;AAED;;;GAGG;AACH,wBAAgB,iBAAiB,CAAC,IAAI,EAAE;IACtC,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB,GAAG,OAAO,CAIV"}

package/backend/dist/services/workAccessService.js

@@ -0,0 +1,67 @@
+/*
+ * Libre WebUI
+ * Copyright (C) 2025 Kroonen AI, Inc.
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at:
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+/**
+ * Who may use Work. The mode is a persisted system setting so an
+ * administrator's decision survives restarts and takes effect immediately —
+ * every access check reads the current value, mirroring how role demotions
+ * are honored mid-session. The default is admins-only: opening Work to all
+ * users hands every account a command-executing sandbox, which is safe by
+ * construction but is still a decision the administrator must make.
+ *
+ * Host-folder workspaces are NOT governed by this mode: they bind-mount
+ * server paths and therefore stay admin-only regardless of the setting.
+ */
+import { getDatabase } from '../db.js';
+export const WORK_ACCESS_MODES = [
+    'admins',
+    'all-users',
+];
+export const WORK_ACCESS_MODE_KEY = 'work_access_mode';
+export function isWorkAccessMode(value) {
+    return (typeof value === 'string' &&
+        WORK_ACCESS_MODES.includes(value));
+}
+export function getWorkAccessMode() {
+    const row = getDatabase()
+        .prepare('SELECT value FROM system_settings WHERE key = ?')
+        .get(WORK_ACCESS_MODE_KEY);
+    return isWorkAccessMode(row?.value) ? row.value : 'admins';
+}
+export function setWorkAccessMode(mode) {
+    if (!isWorkAccessMode(mode)) {
+        throw new Error(`Invalid Work access mode "${String(mode)}".`);
+    }
+    getDatabase()
+        .prepare(`INSERT INTO system_settings (key, value, updated_at)
+       VALUES (?, ?, ?)
+       ON CONFLICT(key) DO UPDATE SET
+         value = excluded.value,
+         updated_at = excluded.updated_at`)
+        .run(WORK_ACCESS_MODE_KEY, mode, Date.now());
+}
+/**
+ * Whether a user may use Work right now. Administrators always may; other
+ * active accounts may when the mode is opened to all users.
+ */
+export function userHasWorkAccess(user) {
+    if (user.status !== undefined && user.status !== 'active')
+        return false;
+    if (user.role === 'admin')
+        return true;
+    return getWorkAccessMode() === 'all-users';
+}
+//# sourceMappingURL=workAccessService.js.map

package/backend/dist/services/workAccessService.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"workAccessService.js","sourceRoot":"","sources":["../../src/services/workAccessService.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH;;;;;;;;;;GAUG;AAEH,OAAO,EAAE,WAAW,EAAE,MAAM,UAAU,CAAC;AAIvC,MAAM,CAAC,MAAM,iBAAiB,GAA8B;IAC1D,QAAQ;IACR,WAAW;CACZ,CAAC;AAEF,MAAM,CAAC,MAAM,oBAAoB,GAAG,kBAAkB,CAAC;AAEvD,MAAM,UAAU,gBAAgB,CAAC,KAAc;IAC7C,OAAO,CACL,OAAO,KAAK,KAAK,QAAQ;QACxB,iBAAuC,CAAC,QAAQ,CAAC,KAAK,CAAC,CACzD,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,iBAAiB;IAC/B,MAAM,GAAG,GAAG,WAAW,EAAE;SACtB,OAAO,CAAC,iDAAiD,CAAC;SAC1D,GAAG,CAAC,oBAAoB,CAAmC,CAAC;IAC/D,OAAO,gBAAgB,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC;AAC7D,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,IAAoB;IACpD,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,EAAE,CAAC;QAC5B,MAAM,IAAI,KAAK,CAAC,6BAA6B,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACjE,CAAC;IACD,WAAW,EAAE;SACV,OAAO,CACN;;;;0CAIoC,CACrC;SACA,GAAG,CAAC,oBAAoB,EAAE,IAAI,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;AACjD,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,iBAAiB,CAAC,IAGjC;IACC,IAAI,IAAI,CAAC,MAAM,KAAK,SAAS,IAAI,IAAI,CAAC,MAAM,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IACxE,IAAI,IAAI,CAAC,IAAI,KAAK,OAAO;QAAE,OAAO,IAAI,CAAC;IACvC,OAAO,iBAAiB,EAAE,KAAK,WAAW,CAAC;AAC7C,CAAC"}

package/backend/dist/services/workAdminService.d.ts

@@ -0,0 +1,67 @@
+/**
+ * One aggregated snapshot of everything Work is doing across every user,
+ * for the admin System page: task inventory with owners, live runtime
+ * state (from the single labeled listing the drivers already provide),
+ * terminal sessions, admission headroom, reconciliation state, and the
+ * access mode. Read-only: this module never mutates runtime state.
+ */
+import { type WorkAccessMode } from './workAccessService.js';
+import type { WorkTaskRecord } from '../types/work.js';
+export interface WorkAdminTask {
+    id: string;
+    title: string;
+    ownerId: string;
+    ownerUsername: string;
+    model: string;
+    status: string;
+    previewStatus: string;
+    networkEnabled: boolean;
+    hostWorkspace: boolean;
+    /** null when the runtime could not be asked (backend unavailable). */
+    running: boolean | null;
+    terminalSessions: number;
+    updatedAt: number;
+}
+export interface WorkAdminOverview {
+    generatedAt: number;
+    accessMode: WorkAccessMode;
+    runtimeAvailable: boolean;
+    runtimeReason?: string;
+    recoveryPending: number;
+    admission: {
+        activeGlobal: number;
+        maxGlobal: number;
+        maxPerUser: number;
+    };
+    tasks: WorkAdminTask[];
+    /** Managed containers whose task record no longer exists. */
+    orphanContainers: Array<{
+        name: string;
+        taskId: string;
+        running: boolean;
+    }>;
+}
+interface WorkAdminDeps {
+    listTasksWithOwner: () => Array<{
+        record: WorkTaskRecord;
+        ownerUsername: string;
+    }>;
+    listManaged: () => Promise<Array<{
+        name: string;
+        taskId: string;
+        running: boolean;
+    }>>;
+    isRuntimeAvailable: () => Promise<boolean>;
+    runtimeUnavailableReason: () => string | null;
+    sessionCount: (taskId: string) => number;
+    activeGlobal: () => number;
+    limits: () => {
+        maxGlobal: number;
+        maxPerUser: number;
+    };
+    recoveryPending: () => number;
+    accessMode: () => WorkAccessMode;
+}
+export declare function buildWorkAdminOverview(deps?: WorkAdminDeps): Promise<WorkAdminOverview>;
+export {};
+//# sourceMappingURL=workAdminService.d.ts.map

package/backend/dist/services/workAdminService.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"workAdminService.d.ts","sourceRoot":"","sources":["../../src/services/workAdminService.ts"],"names":[],"mappings":"AAiBA;;;;;;GAMG;AAEH,OAAO,EAAqB,KAAK,cAAc,EAAE,MAAM,wBAAwB,CAAC;AAIhF,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAEvD,MAAM,WAAW,aAAa;IAC5B,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,CAAC;IAChB,aAAa,EAAE,MAAM,CAAC;IACtB,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;IACf,aAAa,EAAE,MAAM,CAAC;IACtB,cAAc,EAAE,OAAO,CAAC;IACxB,aAAa,EAAE,OAAO,CAAC;IACvB,sEAAsE;IACtE,OAAO,EAAE,OAAO,GAAG,IAAI,CAAC;IACxB,gBAAgB,EAAE,MAAM,CAAC;IACzB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,iBAAiB;IAChC,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,EAAE,cAAc,CAAC;IAC3B,gBAAgB,EAAE,OAAO,CAAC;IAC1B,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,eAAe,EAAE,MAAM,CAAC;IACxB,SAAS,EAAE;QACT,YAAY,EAAE,MAAM,CAAC;QACrB,SAAS,EAAE,MAAM,CAAC;QAClB,UAAU,EAAE,MAAM,CAAC;KACpB,CAAC;IACF,KAAK,EAAE,aAAa,EAAE,CAAC;IACvB,6DAA6D;IAC7D,gBAAgB,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,OAAO,CAAA;KAAE,CAAC,CAAC;CAC7E;AAED,UAAU,aAAa;IACrB,kBAAkB,EAAE,MAAM,KAAK,CAAC;QAC9B,MAAM,EAAE,cAAc,CAAC;QACvB,aAAa,EAAE,MAAM,CAAC;KACvB,CAAC,CAAC;IACH,WAAW,EAAE,MAAM,OAAO,CACxB,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,OAAO,CAAA;KAAE,CAAC,CAC1D,CAAC;IACF,kBAAkB,EAAE,MAAM,OAAO,CAAC,OAAO,CAAC,CAAC;IAC3C,wBAAwB,EAAE,MAAM,MAAM,GAAG,IAAI,CAAC;IAC9C,YAAY,EAAE,CAAC,MAAM,EAAE,MAAM,KAAK,MAAM,CAAC;IACzC,YAAY,EAAE,MAAM,MAAM,CAAC;IAC3B,MAAM,EAAE,MAAM;QAAE,SAAS,EAAE,MAAM,CAAC;QAAC,UAAU,EAAE,MAAM,CAAA;KAAE,CAAC;IACxD,eAAe,EAAE,MAAM,MAAM,CAAC;IAC9B,UAAU,EAAE,MAAM,cAAc,CAAC;CAClC;AAiBD,wBAAsB,sBAAsB,CAC1C,IAAI,GAAE,aAA2B,GAChC,OAAO,CAAC,iBAAiB,CAAC,CAoD5B"}

package/backend/dist/services/workAdminService.js

@@ -0,0 +1,92 @@
+/*
+ * Libre WebUI
+ * Copyright (C) 2025 Kroonen AI, Inc.
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at:
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+/**
+ * One aggregated snapshot of everything Work is doing across every user,
+ * for the admin System page: task inventory with owners, live runtime
+ * state (from the single labeled listing the drivers already provide),
+ * terminal sessions, admission headroom, reconciliation state, and the
+ * access mode. Read-only: this module never mutates runtime state.
+ */
+import { getWorkAccessMode } from './workAccessService.js';
+import workRuntimeService from './workRuntimeService.js';
+import workTaskService from './workTaskService.js';
+import workTerminalService from './workTerminalService.js';
+const defaultDeps = {
+    listTasksWithOwner: () => workTaskService.listAllTasksWithOwner(),
+    listManaged: () => workRuntimeService.driver.listManaged(),
+    isRuntimeAvailable: () => workRuntimeService.isDockerAvailable(),
+    runtimeUnavailableReason: () => workRuntimeService.dockerUnavailableReason,
+    sessionCount: taskId => workTerminalService.sessionCount(taskId),
+    activeGlobal: () => workRuntimeService.activeRuntimeCounts().global,
+    limits: () => ({
+        maxGlobal: workRuntimeService.limits.maxActiveRuntimesGlobal,
+        maxPerUser: workRuntimeService.limits.maxActiveRuntimesPerUser,
+    }),
+    recoveryPending: () => workRuntimeService.recoveryPendingCount,
+    accessMode: () => getWorkAccessMode(),
+};
+export async function buildWorkAdminOverview(deps = defaultDeps) {
+    const tasks = deps.listTasksWithOwner();
+    const runtimeAvailable = await deps.isRuntimeAvailable();
+    // One labeled listing answers "what is actually running" for every task
+    // at once. When the runtime is down the inventory is still useful, so
+    // per-task state degrades to unknown instead of failing the overview.
+    let managed = [];
+    let managedKnown = false;
+    if (runtimeAvailable) {
+        try {
+            managed = await deps.listManaged();
+            managedKnown = true;
+        }
+        catch {
+            managedKnown = false;
+        }
+    }
+    const runningByTask = new Map(managed.map(entry => [entry.taskId, entry.running]));
+    const taskIds = new Set(tasks.map(task => task.record.id));
+    const limits = deps.limits();
+    return {
+        generatedAt: Date.now(),
+        accessMode: deps.accessMode(),
+        runtimeAvailable,
+        runtimeReason: runtimeAvailable
+            ? undefined
+            : (deps.runtimeUnavailableReason() ?? undefined),
+        recoveryPending: deps.recoveryPending(),
+        admission: {
+            activeGlobal: deps.activeGlobal(),
+            maxGlobal: limits.maxGlobal,
+            maxPerUser: limits.maxPerUser,
+        },
+        tasks: tasks.map(({ record, ownerUsername }) => ({
+            id: record.id,
+            title: record.title,
+            ownerId: record.userId,
+            ownerUsername,
+            model: record.model,
+            status: record.status,
+            previewStatus: record.previewStatus,
+            networkEnabled: record.networkEnabled,
+            hostWorkspace: Boolean(record.hostPath),
+            running: managedKnown ? (runningByTask.get(record.id) ?? false) : null,
+            terminalSessions: deps.sessionCount(record.id),
+            updatedAt: record.updatedAt,
+        })),
+        orphanContainers: managed.filter(entry => !taskIds.has(entry.taskId)),
+    };
+}
+//# sourceMappingURL=workAdminService.js.map

package/backend/dist/services/workAdminService.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"workAdminService.js","sourceRoot":"","sources":["../../src/services/workAdminService.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH;;;;;;GAMG;AAEH,OAAO,EAAE,iBAAiB,EAAuB,MAAM,wBAAwB,CAAC;AAChF,OAAO,kBAAkB,MAAM,yBAAyB,CAAC;AACzD,OAAO,eAAe,MAAM,sBAAsB,CAAC;AACnD,OAAO,mBAAmB,MAAM,0BAA0B,CAAC;AAoD3D,MAAM,WAAW,GAAkB;IACjC,kBAAkB,EAAE,GAAG,EAAE,CAAC,eAAe,CAAC,qBAAqB,EAAE;IACjE,WAAW,EAAE,GAAG,EAAE,CAAC,kBAAkB,CAAC,MAAM,CAAC,WAAW,EAAE;IAC1D,kBAAkB,EAAE,GAAG,EAAE,CAAC,kBAAkB,CAAC,iBAAiB,EAAE;IAChE,wBAAwB,EAAE,GAAG,EAAE,CAAC,kBAAkB,CAAC,uBAAuB;IAC1E,YAAY,EAAE,MAAM,CAAC,EAAE,CAAC,mBAAmB,CAAC,YAAY,CAAC,MAAM,CAAC;IAChE,YAAY,EAAE,GAAG,EAAE,CAAC,kBAAkB,CAAC,mBAAmB,EAAE,CAAC,MAAM;IACnE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;QACb,SAAS,EAAE,kBAAkB,CAAC,MAAM,CAAC,uBAAuB;QAC5D,UAAU,EAAE,kBAAkB,CAAC,MAAM,CAAC,wBAAwB;KAC/D,CAAC;IACF,eAAe,EAAE,GAAG,EAAE,CAAC,kBAAkB,CAAC,oBAAoB;IAC9D,UAAU,EAAE,GAAG,EAAE,CAAC,iBAAiB,EAAE;CACtC,CAAC;AAEF,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC1C,IAAI,GAAkB,WAAW;IAEjC,MAAM,KAAK,GAAG,IAAI,CAAC,kBAAkB,EAAE,CAAC;IACxC,MAAM,gBAAgB,GAAG,MAAM,IAAI,CAAC,kBAAkB,EAAE,CAAC;IAEzD,wEAAwE;IACxE,sEAAsE;IACtE,sEAAsE;IACtE,IAAI,OAAO,GAA8D,EAAE,CAAC;IAC5E,IAAI,YAAY,GAAG,KAAK,CAAC;IACzB,IAAI,gBAAgB,EAAE,CAAC;QACrB,IAAI,CAAC;YACH,OAAO,GAAG,MAAM,IAAI,CAAC,WAAW,EAAE,CAAC;YACnC,YAAY,GAAG,IAAI,CAAC;QACtB,CAAC;QAAC,MAAM,CAAC;YACP,YAAY,GAAG,KAAK,CAAC;QACvB,CAAC;IACH,CAAC;IACD,MAAM,aAAa,GAAG,IAAI,GAAG,CAC3B,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC,CACpD,CAAC;IACF,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;IAE3D,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC;IAC7B,OAAO;QACL,WAAW,EAAE,IAAI,CAAC,GAAG,EAAE;QACvB,UAAU,EAAE,IAAI,CAAC,UAAU,EAAE;QAC7B,gBAAgB;QAChB,aAAa,EAAE,gBAAgB;YAC7B,CAAC,CAAC,SAAS;YACX,CAAC,CAAC,CAAC,IAAI,CAAC,wBAAwB,EAAE,IAAI,SAAS,CAAC;QAClD,eAAe,EAAE,IAAI,CAAC,eAAe,EAAE;QACvC,SAAS,EAAE;YACT,YAAY,EAAE,IAAI,CAAC,YAAY,EAAE;YACjC,SAAS,EAAE,MAAM,CAAC,SAAS;YAC3B,UAAU,EAAE,MAAM,CAAC,UAAU;SAC9B;QACD,KAAK,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,EAAE,aAAa,EAAE,EAAE,EAAE,CAAC,CAAC;YAC/C,EAAE,EAAE,MAAM,CAAC,EAAE;YACb,KAAK,EAAE,MAAM,CAAC,KAAK;YACnB,OAAO,EAAE,MAAM,CAAC,MAAM;YACtB,aAAa;YACb,KAAK,EAAE,MAAM,CAAC,KAAK;YACnB,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,aAAa,EAAE,MAAM,CAAC,aAAa;YACnC,cAAc,EAAE,MAAM,CAAC,cAAc;YACrC,aAAa,EAAE,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC;YACvC,OAAO,EAAE,YAAY,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI;YACtE,gBAAgB,EAAE,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,EAAE,CAAC;YAC9C,SAAS,EAAE,MAAM,CAAC,SAAS;SAC5B,CAAC,CAAC;QACH,gBAAgB,EAAE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;KACtE,CAAC;AACJ,CAAC"}

package/backend/dist/services/workKubernetesDriver.d.ts

@@ -0,0 +1,74 @@
+import type { WorkTaskRecord } from '../types/work.js';
+import type { DiscoveredWorkContainer, WorkExecOptions, WorkRuntimeDriver, WorkRuntimeState, WorkTerminalTransport } from './workRuntimeDriver.js';
+import { ProcessResult, ResolvedWorkRuntimePolicy } from './workRuntimeShared.js';
+export declare const WORK_KUBERNETES_DEFAULTS: {
+    readonly namespace: 'libre-webui-work';
+    readonly workspaceSize: '5Gi';
+    readonly podReadyTimeoutMs: 900000;
+    readonly podGoneTimeoutMs: 60000;
+};
+/**
+ * Work runtime driver backed by a Kubernetes namespace: one PVC per task
+ * workspace, one on-demand Pod per running sandbox, exec for everything that
+ * happens inside. No Docker daemon or socket is involved anywhere, and the
+ * backing ServiceAccount only needs pods/pods-exec/PVC rights in the sandbox
+ * namespace. Interactive terminals ride the exec subresource as a TTY
+ * WebSocket, and preview is served from the sandbox Pod IP through the
+ * signed proxy (the backend must run in-cluster to reach it).
+ */
+export declare class KubernetesWorkRuntimeDriver implements WorkRuntimeDriver {
+    readonly image: string;
+    readonly namespace: string;
+    private clientState?;
+    private client;
+    probe(): Promise<void>;
+    shutdown(): void;
+    ensureImage(): Promise<void>;
+    ensureWorkspace(task: WorkTaskRecord): Promise<void>;
+    ensureRuntime(task: WorkTaskRecord): Promise<void>;
+    runtimeState(task: WorkTaskRecord): Promise<WorkRuntimeState>;
+    stopRuntime(task: WorkTaskRecord): Promise<void>;
+    removeRuntime(task: WorkTaskRecord): Promise<void>;
+    removeTaskResources(task: WorkTaskRecord): Promise<void>;
+    exec(task: WorkTaskRecord, command: string[], options?: WorkExecOptions): Promise<ProcessResult>;
+    previewEndpoint(task: WorkTaskRecord): Promise<{
+        host?: string;
+        port: number;
+    } | undefined>;
+    listManaged(): Promise<DiscoveredWorkContainer[]>;
+    removeOrphan(name: string): Promise<void>;
+    listWorkspaces(): Promise<{
+        name: string;
+        taskId: string;
+    }[]>;
+    terminalUnavailableReason(): null;
+    /**
+     * Interactive TTY over the Kubernetes exec subresource. The exec API has
+     * no env parameter, so TERM rides in via env(1); with tty=true the server
+     * merges stderr into stdout, and resize frames travel on the dedicated
+     * resize channel, driven by the client library watching our stdout-side
+     * stream for TTY-style resize events.
+     */
+    openTerminal(containerName: string): Promise<WorkTerminalTransport>;
+    private readPod;
+    private deletePodAndWait;
+    private waitForPodRunning;
+    private execInPod;
+}
+export declare function buildWorkspaceClaimManifest(task: WorkTaskRecord, workspaceSize?: string): import('@kubernetes/client-node').V1PersistentVolumeClaim;
+export declare function buildWorkPodManifest(task: WorkTaskRecord, policy?: ResolvedWorkRuntimePolicy): import('@kubernetes/client-node').V1Pod;
+/**
+ * Kubernetes exec always runs in the container's workingDir (/workspace for
+ * Work sandboxes); a different working directory needs a shell hop.
+ */
+export declare function wrapCommandWithWorkdir(command: string[], workdir?: string): string[];
+/**
+ * Docker memory strings use binary multiples; so do Ki/Mi/Gi. Docker accepts
+ * both one- and two-letter suffixes (2g, 2gb, 2gib) for the same quantity.
+ */
+export declare function dockerMemoryToKubernetes(value: string): string;
+export declare function dockerCpusToKubernetes(value: string): string;
+export declare function mapPodPhase(phase: string | undefined): WorkRuntimeState;
+export declare function statusToExitCode(status: import('@kubernetes/client-node').V1Status | undefined): number;
+export declare function describeKubernetesUnavailable(error: unknown, namespace: string): string;
+//# sourceMappingURL=workKubernetesDriver.d.ts.map

package/backend/dist/services/workKubernetesDriver.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"workKubernetesDriver.d.ts","sourceRoot":"","sources":["../../src/services/workKubernetesDriver.ts"],"names":[],"mappings":"AAmBA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAEvD,OAAO,KAAK,EACV,uBAAuB,EACvB,eAAe,EACf,iBAAiB,EACjB,gBAAgB,EAChB,qBAAqB,EACtB,MAAM,wBAAwB,CAAC;AAEhC,OAAO,EACL,aAAa,EACb,yBAAyB,EAM1B,MAAM,wBAAwB,CAAC;AAOhC,eAAO,MAAM,wBAAwB;aACnC,SAAS,EAAE,kBAAkB;aAC7B,aAAa,EAAE,KAAK;aACpB,iBAAiB,EAAE,MAAO;aAC1B,gBAAgB,EAAE,KAAM;CAChB,CAAC;AA4CX;;;;;;;;GAQG;AACH,qBAAa,2BAA4B,YAAW,iBAAiB;IACnE,QAAQ,CAAC,KAAK,SAAgB;IAC9B,QAAQ,CAAC,SAAS,SAAuB;IACzC,OAAO,CAAC,WAAW,CAAC,CAA4B;IAEhD,OAAO,CAAC,MAAM;IAyBR,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAW3B;IAED,QAAQ,IAAI,IAAI,CAEf;IAEK,WAAW,IAAI,OAAO,CAAC,IAAI,CAAC,CAGjC;IAEK,eAAe,CAAC,IAAI,EAAE,cAAc,GAAG,OAAO,CAAC,IAAI,CAAC,CAsBzD;IAEK,aAAa,CAAC,IAAI,EAAE,cAAc,GAAG,OAAO,CAAC,IAAI,CAAC,CA+BvD;IAEK,YAAY,CAAC,IAAI,EAAE,cAAc,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAKlE;IAEK,WAAW,CAAC,IAAI,EAAE,cAAc,GAAG,OAAO,CAAC,IAAI,CAAC,CAOrD;IAEK,aAAa,CAAC,IAAI,EAAE,cAAc,GAAG,OAAO,CAAC,IAAI,CAAC,CAEvD;IAEK,mBAAmB,CAAC,IAAI,EAAE,cAAc,GAAG,OAAO,CAAC,IAAI,CAAC,CA8B7D;IAEK,IAAI,CACR,IAAI,EAAE,cAAc,EACpB,OAAO,EAAE,MAAM,EAAE,EACjB,OAAO,GAAE,eAAoB,GAC5B,OAAO,CAAC,aAAa,CAAC,CAMxB;IAEK,eAAe,CACnB,IAAI,EAAE,cAAc,GACnB,OAAO,CAAC;QAAE,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,GAAG,SAAS,CAAC,CAUtD;IAEK,WAAW,IAAI,OAAO,CAAC,uBAAuB,EAAE,CAAC,CAWtD;IAEK,YAAY,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAE9C;IAEK,cAAc,IAAI,OAAO,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC,CAUlE;IAED,yBAAyB,IAAI,IAAI,CAEhC;IAED;;;;;;OAMG;IACG,YAAY,CAAC,aAAa,EAAE,MAAM,GAAG,OAAO,CAAC,qBAAqB,CAAC,CA4CxE;YAEa,OAAO;YAOP,gBAAgB;YAsBhB,iBAAiB;YAuCjB,SAAS;CAoIxB;AAED,wBAAgB,2BAA2B,CACzC,IAAI,EAAE,cAAc,EACpB,aAAa,CAAC,EAAE,MAAM,GACrB,OAAO,yBAAyB,EAAE,uBAAuB,CAmB3D;AAED,wBAAgB,oBAAoB,CAClC,IAAI,EAAE,cAAc,EACpB,MAAM,GAAE,yBAAgD,GACvD,OAAO,yBAAyB,EAAE,KAAK,CAuEzC;AAED;;;GAGG;AACH,wBAAgB,sBAAsB,CACpC,OAAO,EAAE,MAAM,EAAE,EACjB,OAAO,CAAC,EAAE,MAAM,GACf,MAAM,EAAE,CAGV;AAED;;;GAGG;AACH,wBAAgB,wBAAwB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAO9D;AAED,wBAAgB,sBAAsB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAM5D;AAED,wBAAgB,WAAW,CAAC,KAAK,EAAE,MAAM,GAAG,SAAS,GAAG,gBAAgB,CAQvE;AAED,wBAAgB,gBAAgB,CAC9B,MAAM,EAAE,OAAO,yBAAyB,EAAE,QAAQ,GAAG,SAAS,GAC7D,MAAM,CAQR;AAED,wBAAgB,6BAA6B,CAC3C,KAAK,EAAE,OAAO,EACd,SAAS,EAAE,MAAM,GAChB,MAAM,CAgBR"}