libre-webui 0.20.0 → 0.21.0

package/backend/dist/services/webSearchService.js

@@ -0,0 +1,230 @@
+/*
+ * Libre WebUI
+ * Copyright (C) 2025 Kroonen AI, Inc.
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at:
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+/**
+ * Web search through a SearXNG instance. The connection is an
+ * administrator-managed persisted setting (the SEARXNG_URL environment
+ * variable seeds the default, so the bundled deploy stack works out of the
+ * box once an admin flips the toggle). Search stays off until enabled.
+ *
+ * The backend queries SearXNG's JSON API server-side; result text is
+ * bounded before it reaches any model context. The URL is admin-supplied
+ * configuration — treated like the Ollama endpoint, not user input.
+ */
+import { getDatabase } from '../db.js';
+import { createLogger } from '../utils/logger.js';
+const logger = createLogger('services:web-search');
+export const WEB_SEARCH_ENABLED_KEY = 'web_search_enabled';
+export const WEB_SEARCH_URL_KEY = 'web_search_url';
+export const WEB_SEARCH_ACCESS_KEY = 'web_search_access';
+export const WEB_SEARCH_MAX_RESULTS_KEY = 'web_search_max_results';
+export const WEB_SEARCH_SAFE_SEARCH_KEY = 'web_search_safe_search';
+export const WEB_SEARCH_DEFAULT_MAX_RESULTS = 6;
+export const WEB_SEARCH_RESULTS_CEILING = 10;
+export function isWebSearchAccessMode(value) {
+    return value === 'admins' || value === 'all-users';
+}
+const SEARCH_TIMEOUT_MS = 12000;
+const RESULT_TEXT_MAX_CHARS = 500;
+const QUERY_MAX_CHARS = 400;
+export function normalizeWebSearchMaxResults(value) {
+    const parsed = Number(value);
+    if (!Number.isInteger(parsed))
+        return WEB_SEARCH_DEFAULT_MAX_RESULTS;
+    return Math.min(Math.max(parsed, 1), WEB_SEARCH_RESULTS_CEILING);
+}
+function readSetting(key) {
+    try {
+        const row = getDatabase()
+            .prepare('SELECT value FROM system_settings WHERE key = ?')
+            .get(key);
+        return row?.value;
+    }
+    catch {
+        return undefined;
+    }
+}
+function writeSetting(key, value) {
+    getDatabase()
+        .prepare(`INSERT INTO system_settings (key, value, updated_at)
+       VALUES (?, ?, ?)
+       ON CONFLICT(key) DO UPDATE SET
+         value = excluded.value,
+         updated_at = excluded.updated_at`)
+        .run(key, value, Date.now());
+}
+export function normalizeWebSearchUrl(value) {
+    if (typeof value !== 'string')
+        return '';
+    const trimmed = value.trim().replace(/\/+$/, '');
+    if (!trimmed)
+        return '';
+    let parsed;
+    try {
+        parsed = new URL(trimmed);
+    }
+    catch {
+        throw new Error('Search URL must be a valid http(s) URL.');
+    }
+    if (parsed.protocol !== 'http:' && parsed.protocol !== 'https:') {
+        throw new Error('Search URL must use http or https.');
+    }
+    return trimmed;
+}
+export function getWebSearchConfig() {
+    const enabled = readSetting(WEB_SEARCH_ENABLED_KEY) === 'true';
+    const storedUrl = readSetting(WEB_SEARCH_URL_KEY);
+    const url = storedUrl !== undefined ? storedUrl : (process.env.SEARXNG_URL ?? '');
+    const storedMax = readSetting(WEB_SEARCH_MAX_RESULTS_KEY);
+    return {
+        enabled,
+        url,
+        available: enabled && url.length > 0,
+        maxResults: storedMax !== undefined
+            ? normalizeWebSearchMaxResults(storedMax)
+            : WEB_SEARCH_DEFAULT_MAX_RESULTS,
+        // Safe search is on unless an administrator turned it off.
+        safeSearch: readSetting(WEB_SEARCH_SAFE_SEARCH_KEY) !== 'false',
+    };
+}
+export function setWebSearchConfig(input) {
+    const url = normalizeWebSearchUrl(input.url);
+    if (input.enabled && !url) {
+        throw new Error('Enable web search only with a SearXNG URL configured.');
+    }
+    writeSetting(WEB_SEARCH_ENABLED_KEY, input.enabled ? 'true' : 'false');
+    writeSetting(WEB_SEARCH_URL_KEY, url);
+    if (input.maxResults !== undefined) {
+        writeSetting(WEB_SEARCH_MAX_RESULTS_KEY, String(normalizeWebSearchMaxResults(input.maxResults)));
+    }
+    if (input.safeSearch !== undefined) {
+        writeSetting(WEB_SEARCH_SAFE_SEARCH_KEY, input.safeSearch ? 'true' : 'false');
+    }
+    return getWebSearchConfig();
+}
+export function isWebSearchAvailable() {
+    return getWebSearchConfig().available;
+}
+/**
+ * Who may use web search, mirroring the Work access mode: administrators
+ * always may; other active users only when an administrator opens it up in
+ * User Management. Defaults to admins-only and fails closed.
+ */
+export function getWebSearchAccessMode() {
+    const value = readSetting(WEB_SEARCH_ACCESS_KEY);
+    return isWebSearchAccessMode(value) ? value : 'admins';
+}
+export function setWebSearchAccessMode(mode) {
+    if (!isWebSearchAccessMode(mode)) {
+        throw new Error(`Invalid web search access mode "${String(mode)}".`);
+    }
+    writeSetting(WEB_SEARCH_ACCESS_KEY, mode);
+}
+/** Whether this user may run web searches right now (search must also be available). */
+export function userCanUseWebSearch(user) {
+    if (!user)
+        return false;
+    if (user.status !== undefined && user.status !== 'active')
+        return false;
+    if (user.role === 'admin')
+        return true;
+    return getWebSearchAccessMode() === 'all-users';
+}
+const bounded = (value, max) => typeof value === 'string'
+    ? value.replace(/\s+/g, ' ').trim().slice(0, max)
+    : '';
+export async function webSearch(query, maxResults) {
+    const config = getWebSearchConfig();
+    if (!config.available) {
+        throw new Error('Web search is not enabled on this server.');
+    }
+    const trimmedQuery = query.trim().slice(0, QUERY_MAX_CHARS);
+    if (!trimmedQuery) {
+        throw new Error('A search query is required.');
+    }
+    // Callers (including model tool calls) can request fewer results, never
+    // more than the administrator's ceiling.
+    const requested = maxResults === undefined
+        ? config.maxResults
+        : Math.max(1, Math.trunc(maxResults));
+    const limit = Math.min(requested, config.maxResults);
+    const target = new URL(`${config.url}/search`);
+    target.searchParams.set('q', trimmedQuery);
+    target.searchParams.set('format', 'json');
+    target.searchParams.set('safesearch', config.safeSearch ? '1' : '0');
+    const controller = new AbortController();
+    const timer = setTimeout(() => controller.abort(), SEARCH_TIMEOUT_MS);
+    let response;
+    try {
+        response = await fetch(target, {
+            signal: controller.signal,
+            headers: { Accept: 'application/json' },
+        });
+    }
+    catch (error) {
+        logger.warn('Web search request failed:', error);
+        throw new Error('The search service could not be reached. Check the SearXNG URL.');
+    }
+    finally {
+        clearTimeout(timer);
+    }
+    if (!response.ok) {
+        throw new Error(`The search service answered with HTTP ${response.status}. Confirm the instance allows the JSON format.`);
+    }
+    let payload;
+    try {
+        payload = (await response.json());
+    }
+    catch {
+        throw new Error('The search service did not return JSON. Enable the json format in the SearXNG settings.');
+    }
+    const results = [];
+    for (const raw of payload.results ?? []) {
+        const url = typeof raw.url === 'string' ? raw.url.trim() : '';
+        if (!/^https?:\/\//i.test(url))
+            continue;
+        results.push({
+            title: bounded(raw.title, 200) || url,
+            url: url.slice(0, 1000),
+            content: bounded(raw.content, RESULT_TEXT_MAX_CHARS),
+            ...(typeof raw.engine === 'string' ? { engine: raw.engine } : {}),
+        });
+        if (results.length >= limit)
+            break;
+    }
+    return results;
+}
+/**
+ * The latest user message enhanced with search context, mirroring the
+ * document-RAG enhancement shape so every provider path benefits.
+ */
+export function buildWebSearchEnhancedContent(content, results, query) {
+    if (results.length === 0)
+        return content;
+    const blocks = results.map((result, index) => `[${index + 1}] ${result.title}\n${result.url}${result.content ? `\n${result.content}` : ''}`);
+    return `Web search results for "${query}":\n\n${blocks.join('\n\n')}\n\n---\n\nUsing the search results above when they are relevant, answer the user's message. Cite sources inline with bracketed numbers like [1] where you rely on them.\n\nUser message: ${content}`;
+}
+export default {
+    getWebSearchConfig,
+    setWebSearchConfig,
+    isWebSearchAvailable,
+    getWebSearchAccessMode,
+    setWebSearchAccessMode,
+    userCanUseWebSearch,
+    webSearch,
+    buildWebSearchEnhancedContent,
+};
+//# sourceMappingURL=webSearchService.js.map

package/backend/dist/services/webSearchService.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"webSearchService.js","sourceRoot":"","sources":["../../src/services/webSearchService.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH;;;;;;;;;GASG;AAEH,OAAO,EAAE,WAAW,EAAE,MAAM,UAAU,CAAC;AACvC,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAElD,MAAM,MAAM,GAAG,YAAY,CAAC,qBAAqB,CAAC,CAAC;AAEnD,MAAM,CAAC,MAAM,sBAAsB,GAAG,oBAAoB,CAAC;AAC3D,MAAM,CAAC,MAAM,kBAAkB,GAAG,gBAAgB,CAAC;AACnD,MAAM,CAAC,MAAM,qBAAqB,GAAG,mBAAmB,CAAC;AACzD,MAAM,CAAC,MAAM,0BAA0B,GAAG,wBAAwB,CAAC;AACnE,MAAM,CAAC,MAAM,0BAA0B,GAAG,wBAAwB,CAAC;AAEnE,MAAM,CAAC,MAAM,8BAA8B,GAAG,CAAC,CAAC;AAChD,MAAM,CAAC,MAAM,0BAA0B,GAAG,EAAE,CAAC;AAI7C,MAAM,UAAU,qBAAqB,CACnC,KAAc;IAEd,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,WAAW,CAAC;AACrD,CAAC;AAED,MAAM,iBAAiB,GAAG,KAAM,CAAC;AACjC,MAAM,qBAAqB,GAAG,GAAG,CAAC;AAClC,MAAM,eAAe,GAAG,GAAG,CAAC;AAmB5B,MAAM,UAAU,4BAA4B,CAAC,KAAc;IACzD,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;IAC7B,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC;QAAE,OAAO,8BAA8B,CAAC;IACrE,OAAO,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC,EAAE,0BAA0B,CAAC,CAAC;AACnE,CAAC;AAED,SAAS,WAAW,CAAC,GAAW;IAC9B,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,WAAW,EAAE;aACtB,OAAO,CAAC,iDAAiD,CAAC;aAC1D,GAAG,CAAC,GAAG,CAAmC,CAAC;QAC9C,OAAO,GAAG,EAAE,KAAK,CAAC;IACpB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED,SAAS,YAAY,CAAC,GAAW,EAAE,KAAa;IAC9C,WAAW,EAAE;SACV,OAAO,CACN;;;;0CAIoC,CACrC;SACA,GAAG,CAAC,GAAG,EAAE,KAAK,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;AACjC,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,KAAc;IAClD,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,EAAE,CAAC;IACzC,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IACjD,IAAI,CAAC,OAAO;QAAE,OAAO,EAAE,CAAC;IACxB,IAAI,MAAW,CAAC;IAChB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC;IAC5B,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;IAC7D,CAAC;IACD,IAAI,MAAM,CAAC,QAAQ,KAAK,OAAO,IAAI,MAAM,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;QAChE,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;IACxD,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,MAAM,UAAU,kBAAkB;IAChC,MAAM,OAAO,GAAG,WAAW,CAAC,sBAAsB,CAAC,KAAK,MAAM,CAAC;IAC/D,MAAM,SAAS,GAAG,WAAW,CAAC,kBAAkB,CAAC,CAAC;IAClD,MAAM,GAAG,GACP,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC;IACxE,MAAM,SAAS,GAAG,WAAW,CAAC,0BAA0B,CAAC,CAAC;IAC1D,OAAO;QACL,OAAO;QACP,GAAG;QACH,SAAS,EAAE,OAAO,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC;QACpC,UAAU,EACR,SAAS,KAAK,SAAS;YACrB,CAAC,CAAC,4BAA4B,CAAC,SAAS,CAAC;YACzC,CAAC,CAAC,8BAA8B;QACpC,2DAA2D;QAC3D,UAAU,EAAE,WAAW,CAAC,0BAA0B,CAAC,KAAK,OAAO;KAChE,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,KAKlC;IACC,MAAM,GAAG,GAAG,qBAAqB,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC7C,IAAI,KAAK,CAAC,OAAO,IAAI,CAAC,GAAG,EAAE,CAAC;QAC1B,MAAM,IAAI,KAAK,CAAC,uDAAuD,CAAC,CAAC;IAC3E,CAAC;IACD,YAAY,CAAC,sBAAsB,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;IACvE,YAAY,CAAC,kBAAkB,EAAE,GAAG,CAAC,CAAC;IACtC,IAAI,KAAK,CAAC,UAAU,KAAK,SAAS,EAAE,CAAC;QACnC,YAAY,CACV,0BAA0B,EAC1B,MAAM,CAAC,4BAA4B,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CACvD,CAAC;IACJ,CAAC;IACD,IAAI,KAAK,CAAC,UAAU,KAAK,SAAS,EAAE,CAAC;QACnC,YAAY,CACV,0BAA0B,EAC1B,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CACpC,CAAC;IACJ,CAAC;IACD,OAAO,kBAAkB,EAAE,CAAC;AAC9B,CAAC;AAED,MAAM,UAAU,oBAAoB;IAClC,OAAO,kBAAkB,EAAE,CAAC,SAAS,CAAC;AACxC,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,sBAAsB;IACpC,MAAM,KAAK,GAAG,WAAW,CAAC,qBAAqB,CAAC,CAAC;IACjD,OAAO,qBAAqB,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC;AACzD,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,IAAyB;IAC9D,IAAI,CAAC,qBAAqB,CAAC,IAAI,CAAC,EAAE,CAAC;QACjC,MAAM,IAAI,KAAK,CAAC,mCAAmC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACvE,CAAC;IACD,YAAY,CAAC,qBAAqB,EAAE,IAAI,CAAC,CAAC;AAC5C,CAAC;AAED,wFAAwF;AACxF,MAAM,UAAU,mBAAmB,CACjC,IAA2D;IAE3D,IAAI,CAAC,IAAI;QAAE,OAAO,KAAK,CAAC;IACxB,IAAI,IAAI,CAAC,MAAM,KAAK,SAAS,IAAI,IAAI,CAAC,MAAM,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IACxE,IAAI,IAAI,CAAC,IAAI,KAAK,OAAO;QAAE,OAAO,IAAI,CAAC;IACvC,OAAO,sBAAsB,EAAE,KAAK,WAAW,CAAC;AAClD,CAAC;AASD,MAAM,OAAO,GAAG,CAAC,KAAc,EAAE,GAAW,EAAU,EAAE,CACtD,OAAO,KAAK,KAAK,QAAQ;IACvB,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC;IACjD,CAAC,CAAC,EAAE,CAAC;AAET,MAAM,CAAC,KAAK,UAAU,SAAS,CAC7B,KAAa,EACb,UAAmB;IAEnB,MAAM,MAAM,GAAG,kBAAkB,EAAE,CAAC;IACpC,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC;QACtB,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;IAC/D,CAAC;IACD,MAAM,YAAY,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,eAAe,CAAC,CAAC;IAC5D,IAAI,CAAC,YAAY,EAAE,CAAC;QAClB,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAC;IACjD,CAAC;IACD,wEAAwE;IACxE,yCAAyC;IACzC,MAAM,SAAS,GACb,UAAU,KAAK,SAAS;QACtB,CAAC,CAAC,MAAM,CAAC,UAAU;QACnB,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC;IAC1C,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,SAAS,EAAE,MAAM,CAAC,UAAU,CAAC,CAAC;IAErD,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,GAAG,MAAM,CAAC,GAAG,SAAS,CAAC,CAAC;IAC/C,MAAM,CAAC,YAAY,CAAC,GAAG,CAAC,GAAG,EAAE,YAAY,CAAC,CAAC;IAC3C,MAAM,CAAC,YAAY,CAAC,GAAG,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IAC1C,MAAM,CAAC,YAAY,CAAC,GAAG,CAAC,YAAY,EAAE,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;IAErE,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;IACzC,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,iBAAiB,CAAC,CAAC;IACtE,IAAI,QAA6B,CAAC;IAClC,IAAI,CAAC;QACH,QAAQ,GAAG,MAAM,KAAK,CAAC,MAAM,EAAE;YAC7B,MAAM,EAAE,UAAU,CAAC,MAAM;YACzB,OAAO,EAAE,EAAE,MAAM,EAAE,kBAAkB,EAAE;SACxC,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,CAAC,IAAI,CAAC,4BAA4B,EAAE,KAAK,CAAC,CAAC;QACjD,MAAM,IAAI,KAAK,CACb,iEAAiE,CAClE,CAAC;IACJ,CAAC;YAAS,CAAC;QACT,YAAY,CAAC,KAAK,CAAC,CAAC;IACtB,CAAC;IACD,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,MAAM,IAAI,KAAK,CACb,yCAAyC,QAAQ,CAAC,MAAM,gDAAgD,CACzG,CAAC;IACJ,CAAC;IACD,IAAI,OAAsC,CAAC;IAC3C,IAAI,CAAC;QACH,OAAO,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAkC,CAAC;IACrE,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,KAAK,CACb,yFAAyF,CAC1F,CAAC;IACJ,CAAC;IAED,MAAM,OAAO,GAAsB,EAAE,CAAC;IACtC,KAAK,MAAM,GAAG,IAAI,OAAO,CAAC,OAAO,IAAI,EAAE,EAAE,CAAC;QACxC,MAAM,GAAG,GAAG,OAAO,GAAG,CAAC,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC9D,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,GAAG,CAAC;YAAE,SAAS;QACzC,OAAO,CAAC,IAAI,CAAC;YACX,KAAK,EAAE,OAAO,CAAC,GAAG,CAAC,KAAK,EAAE,GAAG,CAAC,IAAI,GAAG;YACrC,GAAG,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,IAAK,CAAC;YACxB,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,OAAO,EAAE,qBAAqB,CAAC;YACpD,GAAG,CAAC,OAAO,GAAG,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAClE,CAAC,CAAC;QACH,IAAI,OAAO,CAAC,MAAM,IAAI,KAAK;YAAE,MAAM;IACrC,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,6BAA6B,CAC3C,OAAe,EACf,OAAmC,EACnC,KAAa;IAEb,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,OAAO,CAAC;IACzC,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CACxB,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE,CAChB,IAAI,KAAK,GAAG,CAAC,KAAK,MAAM,CAAC,KAAK,KAAK,MAAM,CAAC,GAAG,GAC3C,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAC3C,EAAE,CACL,CAAC;IACF,OAAO,2BAA2B,KAAK,SAAS,MAAM,CAAC,IAAI,CACzD,MAAM,CACP,6LAA6L,OAAO,EAAE,CAAC;AAC1M,CAAC;AAED,eAAe;IACb,kBAAkB;IAClB,kBAAkB;IAClB,oBAAoB;IACpB,sBAAsB;IACtB,sBAAsB;IACtB,mBAAmB;IACnB,SAAS;IACT,6BAA6B;CAC9B,CAAC"}

package/backend/dist/services/workAgentGuidance.d.ts

@@ -20,5 +20,6 @@ export declare const WORK_WRITE_FILE_RECOMMENDED_CHARS = 8000;
 export declare const WORK_AGENT_SKILLS: readonly WorkAgentSkill[];
 export declare function workToolCallBudget(roundBudget: number): number;
 export declare function buildWorkAgentSystemPrompt(context: WorkAgentGuidanceContext): string;
+export declare function buildWorkEmptyRoundNudgePrompt(): string;
 export declare function buildWorkBudgetExhaustionPrompt(): string;
 //# sourceMappingURL=workAgentGuidance.d.ts.map

package/backend/dist/services/workAgentGuidance.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"workAgentGuidance.d.ts","sourceRoot":"","sources":["../../src/services/workAgentGuidance.ts"],"names":[],"mappings":"AAiBA,MAAM,WAAW,wBAAwB;IACvC,cAAc,EAAE,OAAO,CAAC;IACxB,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,MAAM,CAAC;IACpB,gBAAgB,EAAE,MAAM,CAAC;IACzB,cAAc,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,WAAW,cAAc;IAC7B,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,YAAY,EAAE,SAAS,MAAM,EAAE,CAAC;CACjC;AAID,eAAO,MAAM,iCAAiC,OAAQ,CAAC;AAEvD;;;;;GAKG;AACH,eAAO,MAAM,iBAAiB,EAAE,SAAS,cAAc,EAiD7C,CAAC;AAEX,wBAAgB,kBAAkB,CAAC,WAAW,EAAE,MAAM,GAAG,MAAM,CAE9D;AAED,wBAAgB,0BAA0B,CACxC,OAAO,EAAE,wBAAwB,GAChC,MAAM,CA4BR;AAED,wBAAgB,+BAA+B,IAAI,MAAM,CAQxD"}
+{"version":3,"file":"workAgentGuidance.d.ts","sourceRoot":"","sources":["../../src/services/workAgentGuidance.ts"],"names":[],"mappings":"AAiBA,MAAM,WAAW,wBAAwB;IACvC,cAAc,EAAE,OAAO,CAAC;IACxB,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,MAAM,CAAC;IACpB,gBAAgB,EAAE,MAAM,CAAC;IACzB,cAAc,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,WAAW,cAAc;IAC7B,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,YAAY,EAAE,SAAS,MAAM,EAAE,CAAC;CACjC;AAID,eAAO,MAAM,iCAAiC,OAAQ,CAAC;AAEvD;;;;;GAKG;AACH,eAAO,MAAM,iBAAiB,EAAE,SAAS,cAAc,EAiD7C,CAAC;AAEX,wBAAgB,kBAAkB,CAAC,WAAW,EAAE,MAAM,GAAG,MAAM,CAE9D;AAED,wBAAgB,0BAA0B,CACxC,OAAO,EAAE,wBAAwB,GAChC,MAAM,CA4BR;AAED,wBAAgB,8BAA8B,IAAI,MAAM,CAEvD;AAED,wBAAgB,+BAA+B,IAAI,MAAM,CAQxD"}

package/backend/dist/services/workAgentGuidance.js

@@ -101,6 +101,9 @@ ${skills}
 
 Finish with a concise summary of what changed and the checks that actually ran.`;
 }
+export function buildWorkEmptyRoundNudgePrompt() {
+    return `Your last turn contained no reply and no tool calls, so nothing happened. Continue the task now: either call the tools you need, or reply with your findings and the next step.`;
+}
 export function buildWorkBudgetExhaustionPrompt() {
     return `The autonomous execution budget is exhausted. Do not call any more tools.
 Return a concise final response that states:

package/backend/dist/services/workAgentGuidance.js.map

@@ -1 +1 @@
-{"version":3,"file":"workAgentGuidance.js","sourceRoot":"","sources":["../../src/services/workAgentGuidance.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAgBH,MAAM,sBAAsB,GAAG,MAAO,CAAC;AACvC,MAAM,mBAAmB,GAAG,OAAS,CAAC;AACtC,MAAM,CAAC,MAAM,iCAAiC,GAAG,IAAK,CAAC;AAEvD;;;;;GAKG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAA8B;IAC1D;QACE,EAAE,EAAE,qBAAqB;QACzB,KAAK,EAAE,qBAAqB;QAC5B,YAAY,EAAE;YACZ,qJAAqJ;YACrJ,uLAAuL;YACvL,kKAAkK;SACnK;KACF;IACD;QACE,EAAE,EAAE,wBAAwB;QAC5B,KAAK,EAAE,wBAAwB;QAC/B,YAAY,EAAE;YACZ,6FAA6F;YAC7F,gHAAgH;YAChH,6RAA6R;YAC7R,sCAAsC,iCAAiC,CAAC,cAAc,CAAC,OAAO,CAAC,4IAA4I;YAC3O,wIAAwI;SACzI;KACF;IACD;QACE,EAAE,EAAE,cAAc;QAClB,KAAK,EAAE,2BAA2B;QAClC,YAAY,EAAE;YACZ,iIAAiI;YACjI,8HAA8H;YAC9H,wGAAwG;SACzG;KACF;IACD;QACE,EAAE,EAAE,iBAAiB;QACrB,KAAK,EAAE,iBAAiB;QACxB,YAAY,EAAE;YACZ,qGAAqG;YACrG,0JAA0J;YAC1J,iKAAiK;YACjK,yJAAyJ;SAC1J;KACF;IACD;QACE,EAAE,EAAE,mBAAmB;QACvB,KAAK,EAAE,mBAAmB;QAC1B,YAAY,EAAE;YACZ,oIAAoI;YACpI,2JAA2J;YAC3J,4JAA4J;SAC7J;KACF;CACO,CAAC;AAEX,MAAM,UAAU,kBAAkB,CAAC,WAAmB;IACpD,OAAO,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,eAAe,CAAC,WAAW,EAAE,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC;AACxE,CAAC;AAED,MAAM,UAAU,0BAA0B,CACxC,OAAiC;IAEjC,uBAAuB,CAAC,OAAO,CAAC,CAAC;IACjC,MAAM,UAAU,GAAG,kBAAkB,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;IAC3D,MAAM,eAAe,GAAG,OAAO,CAAC,cAAc;QAC5C,CAAC,CAAC,kHAAkH;QACpH,CAAC,CAAC,oGAAoG,CAAC;IACzG,MAAM,MAAM,GAAG,iBAAiB,CAAC,GAAG,CAClC,KAAK,CAAC,EAAE,CACN,MAAM,KAAK,CAAC,KAAK,KAAK,KAAK,CAAC,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CACjF,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAEf,OAAO;;;;;;;IAOL,eAAe;oCACiB,aAAa,CAAC,mBAAmB,CAAC;wBAC9C,aAAa,CAAC,OAAO,CAAC,gBAAgB,CAAC,+BAA+B,aAAa,CAAC,sBAAsB,CAAC;4CACvF,aAAa,CAAC,OAAO,CAAC,cAAc,CAAC;+CAClC,aAAa,CAAC,OAAO,CAAC,WAAW,CAAC,qBAAqB,aAAa,CAAC,UAAU,CAAC;6CAClF,OAAO,CAAC,WAAW;;EAE9D,MAAM;;gFAEwE,CAAC;AACjF,CAAC;AAED,MAAM,UAAU,+BAA+B;IAC7C,OAAO;;;;;;iFAMwE,CAAC;AAClF,CAAC;AAED,SAAS,uBAAuB,CAAC,OAAiC;IAChE,eAAe,CAAC,OAAO,CAAC,WAAW,EAAE,aAAa,CAAC,CAAC;IACpD,eAAe,CAAC,OAAO,CAAC,gBAAgB,EAAE,kBAAkB,CAAC,CAAC;IAC9D,eAAe,CAAC,OAAO,CAAC,cAAc,EAAE,gBAAgB,CAAC,CAAC;IAC1D,MAAM,WAAW,GAAG,eAAe,CAAC,OAAO,CAAC,WAAW,EAAE,aAAa,CAAC,CAAC;IACxE,IAAI,WAAW,GAAG,KAAM,EAAE,CAAC;QACzB,MAAM,IAAI,UAAU,CAAC,oCAAoC,CAAC,CAAC;IAC7D,CAAC;AACH,CAAC;AAED,SAAS,eAAe,CAAC,KAAa,EAAE,IAAY;IAClD,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,KAAK,IAAI,CAAC,EAAE,CAAC;QAC/C,MAAM,IAAI,UAAU,CAAC,GAAG,IAAI,mCAAmC,CAAC,CAAC;IACnE,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,aAAa,CAAC,KAAa;IAClC,OAAO,IAAI,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AACtD,CAAC"}
+{"version":3,"file":"workAgentGuidance.js","sourceRoot":"","sources":["../../src/services/workAgentGuidance.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAgBH,MAAM,sBAAsB,GAAG,MAAO,CAAC;AACvC,MAAM,mBAAmB,GAAG,OAAS,CAAC;AACtC,MAAM,CAAC,MAAM,iCAAiC,GAAG,IAAK,CAAC;AAEvD;;;;;GAKG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAA8B;IAC1D;QACE,EAAE,EAAE,qBAAqB;QACzB,KAAK,EAAE,qBAAqB;QAC5B,YAAY,EAAE;YACZ,qJAAqJ;YACrJ,uLAAuL;YACvL,kKAAkK;SACnK;KACF;IACD;QACE,EAAE,EAAE,wBAAwB;QAC5B,KAAK,EAAE,wBAAwB;QAC/B,YAAY,EAAE;YACZ,6FAA6F;YAC7F,gHAAgH;YAChH,6RAA6R;YAC7R,sCAAsC,iCAAiC,CAAC,cAAc,CAAC,OAAO,CAAC,4IAA4I;YAC3O,wIAAwI;SACzI;KACF;IACD;QACE,EAAE,EAAE,cAAc;QAClB,KAAK,EAAE,2BAA2B;QAClC,YAAY,EAAE;YACZ,iIAAiI;YACjI,8HAA8H;YAC9H,wGAAwG;SACzG;KACF;IACD;QACE,EAAE,EAAE,iBAAiB;QACrB,KAAK,EAAE,iBAAiB;QACxB,YAAY,EAAE;YACZ,qGAAqG;YACrG,0JAA0J;YAC1J,iKAAiK;YACjK,yJAAyJ;SAC1J;KACF;IACD;QACE,EAAE,EAAE,mBAAmB;QACvB,KAAK,EAAE,mBAAmB;QAC1B,YAAY,EAAE;YACZ,oIAAoI;YACpI,2JAA2J;YAC3J,4JAA4J;SAC7J;KACF;CACO,CAAC;AAEX,MAAM,UAAU,kBAAkB,CAAC,WAAmB;IACpD,OAAO,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,eAAe,CAAC,WAAW,EAAE,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC;AACxE,CAAC;AAED,MAAM,UAAU,0BAA0B,CACxC,OAAiC;IAEjC,uBAAuB,CAAC,OAAO,CAAC,CAAC;IACjC,MAAM,UAAU,GAAG,kBAAkB,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;IAC3D,MAAM,eAAe,GAAG,OAAO,CAAC,cAAc;QAC5C,CAAC,CAAC,kHAAkH;QACpH,CAAC,CAAC,oGAAoG,CAAC;IACzG,MAAM,MAAM,GAAG,iBAAiB,CAAC,GAAG,CAClC,KAAK,CAAC,EAAE,CACN,MAAM,KAAK,CAAC,KAAK,KAAK,KAAK,CAAC,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CACjF,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAEf,OAAO;;;;;;;IAOL,eAAe;oCACiB,aAAa,CAAC,mBAAmB,CAAC;wBAC9C,aAAa,CAAC,OAAO,CAAC,gBAAgB,CAAC,+BAA+B,aAAa,CAAC,sBAAsB,CAAC;4CACvF,aAAa,CAAC,OAAO,CAAC,cAAc,CAAC;+CAClC,aAAa,CAAC,OAAO,CAAC,WAAW,CAAC,qBAAqB,aAAa,CAAC,UAAU,CAAC;6CAClF,OAAO,CAAC,WAAW;;EAE9D,MAAM;;gFAEwE,CAAC;AACjF,CAAC;AAED,MAAM,UAAU,8BAA8B;IAC5C,OAAO,iLAAiL,CAAC;AAC3L,CAAC;AAED,MAAM,UAAU,+BAA+B;IAC7C,OAAO;;;;;;iFAMwE,CAAC;AAClF,CAAC;AAED,SAAS,uBAAuB,CAAC,OAAiC;IAChE,eAAe,CAAC,OAAO,CAAC,WAAW,EAAE,aAAa,CAAC,CAAC;IACpD,eAAe,CAAC,OAAO,CAAC,gBAAgB,EAAE,kBAAkB,CAAC,CAAC;IAC9D,eAAe,CAAC,OAAO,CAAC,cAAc,EAAE,gBAAgB,CAAC,CAAC;IAC1D,MAAM,WAAW,GAAG,eAAe,CAAC,OAAO,CAAC,WAAW,EAAE,aAAa,CAAC,CAAC;IACxE,IAAI,WAAW,GAAG,KAAM,EAAE,CAAC;QACzB,MAAM,IAAI,UAAU,CAAC,oCAAoC,CAAC,CAAC;IAC7D,CAAC;AACH,CAAC;AAED,SAAS,eAAe,CAAC,KAAa,EAAE,IAAY;IAClD,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,KAAK,IAAI,CAAC,EAAE,CAAC;QAC/C,MAAM,IAAI,UAAU,CAAC,GAAG,IAAI,mCAAmC,CAAC,CAAC;IACnE,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,aAAa,CAAC,KAAa;IAClC,OAAO,IAAI,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AACtD,CAAC"}

package/backend/dist/services/workAgentService.d.ts

@@ -1,7 +1,13 @@
 import { OllamaChatMessage, OllamaChatResponse } from '../types/index.js';
 import { WorkMessage, WorkRun, WorkTaskDetail, WorkToolCall } from '../types/work.js';
 export declare const WORK_PROVIDER_STATE_METADATA_KEY = "workProviderState";
+export declare const WORK_EMPTY_MODEL_RESPONSE_METADATA_KEY = "emptyModelResponse";
 export declare const WORK_TOOL_SCHEMAS: Record<string, unknown>[];
+export declare const WORK_WEB_SEARCH_TOOL_SCHEMA: Record<string, unknown>;
+export declare function workToolSchemasForTask(task: {
+    networkEnabled: boolean;
+    userId: string;
+}): Record<string, unknown>[];
 export declare class WorkAgentService {
     private controllers;
     private executions;

package/backend/dist/services/workAgentService.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"workAgentService.d.ts","sourceRoot":"","sources":["../../src/services/workAgentService.ts"],"names":[],"mappings":"AAmCA,OAAO,EAAE,iBAAiB,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAC;AAC1E,OAAO,EACL,WAAW,EACX,OAAO,EACP,cAAc,EAEd,YAAY,EACb,MAAM,kBAAkB,CAAC;AAU1B,eAAO,MAAM,gCAAgC,sBAAsB,CAAC;AAEpE,eAAO,MAAM,iBAAiB,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EA8EtD,CAAC;AAEF,qBAAa,gBAAgB;IAC3B,OAAO,CAAC,WAAW,CAAsC;IACzD,OAAO,CAAC,UAAU,CAAoC;IAEtD,KAAK,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,IAAI,CAazD;IAEK,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,cAAc,CAAC,CAGpE;IAEK,UAAU,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAE9D;YAEa,UAAU;IA2BlB,kBAAkB,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAWtD;IAEK,uBAAuB,CAAC,CAAC,EAC7B,MAAM,EAAE,MAAM,EACd,MAAM,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,GACvB,OAAO,CAAC,CAAC,CAAC,CAmEZ;IAED,qBAAqB,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAE1C;YAEa,kBAAkB;IA2B1B,QAAQ,IAAI,OAAO,CAAC;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC,CAc7D;YAEa,OAAO;YAojBP,yBAAyB;IA6BvC,OAAO,CAAC,2BAA2B;IAsBnC,OAAO,CAAC,eAAe;YA0BT,WAAW;IAgHzB,OAAO,CAAC,gBAAgB;CAYzB;AA+CD,qBAAa,kBAAmB,SAAQ,KAAK;IAC3C,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAEtB,YAAY,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAKxD;CACF;AA8CD,wBAAgB,2BAA2B,CACzC,QAAQ,EAAE,WAAW,EAAE,EACvB,QAAQ,EAAE,IAAI,CAAC,OAAO,EAAE,cAAc,GAAG,YAAY,GAAG,OAAO,CAAC,EAChE,kBAAkB,CAAC,EAAE,MAAM,GAC1B,iBAAiB,EAAE,CAkKrB;AA4ED,wBAAgB,kBAAkB,CAChC,QAAQ,EAAE,kBAAkB,GAC3B,YAAY,EAAE,CA+GhB;AAwLD,eAAO,MAAM,gBAAgB,kBAAyB,CAAC;eACxC,gBAAgB"}
+{"version":3,"file":"workAgentService.d.ts","sourceRoot":"","sources":["../../src/services/workAgentService.ts"],"names":[],"mappings":"AA0CA,OAAO,EAAE,iBAAiB,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAC;AAC1E,OAAO,EACL,WAAW,EACX,OAAO,EACP,cAAc,EAEd,YAAY,EACb,MAAM,kBAAkB,CAAC;AAU1B,eAAO,MAAM,gCAAgC,sBAAsB,CAAC;AACpE,eAAO,MAAM,sCAAsC,uBAAuB,CAAC;AAS3E,eAAO,MAAM,iBAAiB,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EA8EtD,CAAC;AAKF,eAAO,MAAM,2BAA2B,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAa7D,CAAC;AAEJ,wBAAgB,sBAAsB,CAAC,IAAI,EAAE;IAC3C,cAAc,EAAE,OAAO,CAAC;IACxB,MAAM,EAAE,MAAM,CAAC;CAChB,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,CAM5B;AAED,qBAAa,gBAAgB;IAC3B,OAAO,CAAC,WAAW,CAAsC;IACzD,OAAO,CAAC,UAAU,CAAoC;IAEtD,KAAK,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,IAAI,CAazD;IAEK,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,cAAc,CAAC,CAGpE;IAEK,UAAU,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAE9D;YAEa,UAAU;IA2BlB,kBAAkB,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAWtD;IAEK,uBAAuB,CAAC,CAAC,EAC7B,MAAM,EAAE,MAAM,EACd,MAAM,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,GACvB,OAAO,CAAC,CAAC,CAAC,CAmEZ;IAED,qBAAqB,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAE1C;YAEa,kBAAkB;IA2B1B,QAAQ,IAAI,OAAO,CAAC;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC,CAc7D;YAEa,OAAO;YAimBP,yBAAyB;IA6BvC,OAAO,CAAC,2BAA2B;IAsBnC,OAAO,CAAC,eAAe;YA0BT,WAAW;IAiJzB,OAAO,CAAC,gBAAgB;CAYzB;AA+CD,qBAAa,kBAAmB,SAAQ,KAAK;IAC3C,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAEtB,YAAY,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAKxD;CACF;AAsJD,wBAAgB,2BAA2B,CACzC,QAAQ,EAAE,WAAW,EAAE,EACvB,QAAQ,EAAE,IAAI,CAAC,OAAO,EAAE,cAAc,GAAG,YAAY,GAAG,OAAO,CAAC,EAChE,kBAAkB,CAAC,EAAE,MAAM,GAC1B,iBAAiB,EAAE,CAwLrB;AA4ED,wBAAgB,kBAAkB,CAChC,QAAQ,EAAE,kBAAkB,GAC3B,YAAY,EAAE,CA+GhB;AA4LD,eAAO,MAAM,gBAAgB,kBAAyB,CAAC;eACxC,gBAAgB"}

package/backend/dist/services/workAgentService.js

@@ -16,13 +16,23 @@
  */
 import workModelProviderService, { WORK_TOOL_ARGUMENTS_ERROR_METADATA_KEY, WORK_TOOL_ARGUMENTS_ERROR_MESSAGE, } from './workModelProviderService.js';
 import workEventService from './workEventService.js';
-import { buildWorkAgentSystemPrompt, buildWorkBudgetExhaustionPrompt, WORK_AGENT_SKILLS, WORK_WRITE_FILE_RECOMMENDED_CHARS, workToolCallBudget, } from './workAgentGuidance.js';
+import { buildWorkAgentSystemPrompt, buildWorkBudgetExhaustionPrompt, buildWorkEmptyRoundNudgePrompt, WORK_AGENT_SKILLS, WORK_WRITE_FILE_RECOMMENDED_CHARS, workToolCallBudget, } from './workAgentGuidance.js';
 import workRuntimeService from './workRuntimeService.js';
+import { isWebSearchAvailable, userCanUseWebSearch, webSearch, } from './webSearchService.js';
+import { userModel } from '../models/userModel.js';
 import workTaskService, { WORK_MESSAGE_METADATA_MAX_BYTES, WorkConflictError, WorkNotFoundError, } from './workTaskService.js';
 import { createLogger } from '../utils/logger.js';
 import { boundedOpenAIResponsesOutputItems, OPENAI_RESPONSES_OUTPUT_ITEMS_METADATA_KEY, OPENAI_RESPONSES_STATE_DROPPED_METADATA_KEY, OPENAI_RESPONSES_STATE_SCOPE_METADATA_KEY, } from '../utils/openAIResponsesAdapter.js';
 const logger = createLogger('services:work-agent');
 export const WORK_PROVIDER_STATE_METADATA_KEY = 'workProviderState';
+export const WORK_EMPTY_MODEL_RESPONSE_METADATA_KEY = 'emptyModelResponse';
+// A reasoning-heavy model occasionally ends a round with neither text nor
+// tool calls. Treating that as the final answer strands the run mid-task,
+// so nudge it back to work a bounded number of times per run first.
+const WORK_EMPTY_ROUND_NUDGE_LIMIT = 2;
+// Cross-run replay only needs the shape of past tool calls, not full
+// write_file payloads; bound each persisted argument set.
+const WORK_CHAT_TOOL_CALL_ARGUMENTS_MAX_BYTES = 4096;
 export const WORK_TOOL_SCHEMAS = [
     functionTool('list_files', 'List direct children of a workspace directory.', {
         path: stringProperty('Relative directory path. Defaults to workspace root.'),
@@ -59,6 +69,23 @@ export const WORK_TOOL_SCHEMAS = [
     }),
     functionTool('stop_preview', 'Stop the running workspace preview.', {}),
 ];
+// Offered per run, only when an administrator enabled web search and the
+// task has network access: an "offline" task should stay offline even
+// though the search request itself egresses from the backend.
+export const WORK_WEB_SEARCH_TOOL_SCHEMA = functionTool('web_search', 'Search the web through the server-configured search engine. Returns titles, URLs, and snippets.', {
+    query: stringProperty('Search query.'),
+    max_results: {
+        type: 'integer',
+        description: "Optional result count. Defaults to 5, capped by the server's configured limit.",
+    },
+}, ['query']);
+export function workToolSchemasForTask(task) {
+    return task.networkEnabled &&
+        isWebSearchAvailable() &&
+        userCanUseWebSearch(userModel.getUserById(task.userId))
+        ? [...WORK_TOOL_SCHEMAS, WORK_WEB_SEARCH_TOOL_SCHEMA]
+        : WORK_TOOL_SCHEMAS;
+}
 export class WorkAgentService {
     constructor() {
         this.controllers = new Map();
@@ -271,6 +298,7 @@ export class WorkAgentService {
             let streamedAssistantTotal = '';
             let streamedReasoningTotal = '';
             let budgetReason = 'round';
+            let emptyRoundNudges = 0;
             roundLoop: for (let round = 0; round < roundLimit; round++) {
                 this.throwIfCancelled(runId, controller);
                 workEventService.publish(taskId, runId, 'run_state', {
@@ -290,7 +318,7 @@ export class WorkAgentService {
                     response = await workModelProviderService.generateChatStreamResponse({
                         model: run.model,
                         messages,
-                        tools: WORK_TOOL_SCHEMAS,
+                        tools: workToolSchemasForTask(task),
                         stream: true,
                     }, providerSelection, userId, {
                         onContent: delta => contentStream.push(delta),
@@ -352,9 +380,39 @@ export class WorkAgentService {
                     workTaskService.addMessage(taskId, runId, 'assistant', 'reasoning', reasoningContent, { providerExposed: true, round: round + 1 });
                 }
                 if (toolCalls.length === 0) {
+                    if (!assistantContent &&
+                        emptyRoundNudges < WORK_EMPTY_ROUND_NUDGE_LIMIT) {
+                        // A round with no text and no tool calls carries no result;
+                        // completing here would strand the run mid-task. Preserve any
+                        // provider replay state, then send the model back to work.
+                        emptyRoundNudges += 1;
+                        if (response.message.providerMetadata) {
+                            messages.push({
+                                role: 'assistant',
+                                content: '',
+                                providerMetadata: response.message.providerMetadata,
+                            });
+                        }
+                        if (providerStateMetadata) {
+                            workTaskService.addMessage(taskId, runId, 'assistant', 'provider_state', '', providerStateMetadata);
+                        }
+                        messages.push({
+                            role: 'user',
+                            content: buildWorkEmptyRoundNudgePrompt(),
+                        });
+                        continue;
+                    }
                     const finalContent = assistantContent ||
                         'The model completed without returning a text response.';
-                    workTaskService.addMessage(taskId, runId, 'assistant', 'message', finalContent, providerStateMetadata);
+                    workTaskService.addMessage(taskId, runId, 'assistant', 'message', finalContent, assistantContent
+                        ? providerStateMetadata
+                        : {
+                            // The placeholder tells the user what happened, but it is
+                            // not something the model said; keep it out of future
+                            // model context unless it carries provider replay state.
+                            [WORK_EMPTY_MODEL_RESPONSE_METADATA_KEY]: true,
+                            ...(providerStateMetadata ?? {}),
+                        });
                     // Keep completion hidden until the disposable container has either
                     // stopped or been retained for a verified live preview. Consumers
                     // can then refresh files immediately without racing teardown.
@@ -385,11 +443,15 @@ export class WorkAgentService {
                         ? { providerMetadata: response.message.providerMetadata }
                         : {}),
                 });
+                // Responses-mode providers persist their durable replay state; every
+                // other provider persists the tool calls themselves so the next run's
+                // restored context keeps the tool history instead of dropping it.
+                const persistedAssistantMetadata = providerStateMetadata ?? toPersistedWorkChatToolCalls(run, toolCalls);
                 if (assistantContent) {
-                    workTaskService.addMessage(taskId, runId, 'assistant', 'message', assistantContent, providerStateMetadata);
+                    workTaskService.addMessage(taskId, runId, 'assistant', 'message', assistantContent, persistedAssistantMetadata);
                 }
-                else if (providerStateMetadata) {
-                    workTaskService.addMessage(taskId, runId, 'assistant', 'provider_state', '', providerStateMetadata);
+                else if (persistedAssistantMetadata) {
+                    workTaskService.addMessage(taskId, runId, 'assistant', 'provider_state', '', persistedAssistantMetadata);
                 }
                 for (const call of toolCalls) {
                     this.throwIfCancelled(runId, controller);
@@ -715,6 +777,24 @@ export class WorkAgentService {
                 const result = await workRuntimeService.searchFiles(task, requiredString(args.query, 'query'), optionalString(args.path) || '.');
                 return commandResult(result);
             }
+            case 'web_search': {
+                if (!task.networkEnabled ||
+                    !isWebSearchAvailable() ||
+                    !userCanUseWebSearch(userModel.getUserById(task.userId))) {
+                    throw new WorkAgentHttpError('Web search is not available for this task.', 403, 'WORK_WEB_SEARCH_UNAVAILABLE');
+                }
+                const query = requiredString(args.query, 'query');
+                const results = await webSearch(query, optionalInteger(args.max_results) ?? 5);
+                const content = results.length === 0
+                    ? 'No results.'
+                    : results
+                        .map((result, index) => `[${index + 1}] ${result.title}\n${result.url}${result.content ? `\n${result.content}` : ''}`)
+                        .join('\n\n');
+                return {
+                    content: content.slice(0, workRuntimeService.limits.maxOutputChars),
+                    metadata: { query, results: results.length },
+                };
+            }
             case 'run_command': {
                 const timeout = optionalInteger(args.timeout_ms);
                 const result = await workRuntimeService.runCommand(task, requiredString(args.command, 'command'), timeout);
@@ -824,6 +904,93 @@ function toPersistedWorkProviderState(run, providerMetadata) {
         return undefined;
     }
 }
+/**
+ * Chat-completions providers (Ollama, OpenRouter-style plugins) have no
+ * durable Responses replay state, so persist the tool calls themselves:
+ * without them, cross-run context restoration cannot rebuild the
+ * assistant/tool message pairs and silently drops every tool result — the
+ * model then re-discovers its own work each turn.
+ */
+function toPersistedWorkChatToolCalls(run, toolCalls) {
+    if (toolCalls.length === 0)
+        return undefined;
+    const persisted = {
+        [WORK_PROVIDER_STATE_METADATA_KEY]: {
+            providerType: run.providerType,
+            ...(run.providerId ? { providerId: run.providerId } : {}),
+            model: run.model,
+            toolCalls: toolCalls.map(call => ({
+                id: call.id,
+                name: call.function.name,
+                arguments: boundedToolCallArgumentsJson(call.function.arguments),
+            })),
+        },
+    };
+    try {
+        return Buffer.byteLength(JSON.stringify(persisted), 'utf8') <=
+            WORK_MESSAGE_METADATA_MAX_BYTES
+            ? persisted
+            : undefined;
+    }
+    catch {
+        return undefined;
+    }
+}
+function boundedToolCallArgumentsJson(args, maxBytes = WORK_CHAT_TOOL_CALL_ARGUMENTS_MAX_BYTES) {
+    let serialized;
+    try {
+        serialized = JSON.stringify(args ?? {});
+    }
+    catch {
+        return '{}';
+    }
+    if (Buffer.byteLength(serialized, 'utf8') <= maxBytes)
+        return serialized;
+    const truncated = {};
+    for (const [key, value] of Object.entries(args)) {
+        truncated[key] =
+            typeof value === 'string' && value.length > 512
+                ? `${value.slice(0, 512)}… [truncated for replay]`
+                : value;
+    }
+    try {
+        serialized = JSON.stringify(truncated);
+        return Buffer.byteLength(serialized, 'utf8') <= maxBytes
+            ? serialized
+            : '{}';
+    }
+    catch {
+        return '{}';
+    }
+}
+/**
+ * Read back tool calls persisted by toPersistedWorkChatToolCalls. Fails
+ * closed: any malformed entry drops the whole batch, so restoration falls
+ * back to visible assistant text exactly like malformed Responses state.
+ */
+function persistedChatToolCalls(message) {
+    const state = objectValue(message.metadata?.[WORK_PROVIDER_STATE_METADATA_KEY]);
+    const rawCalls = state?.toolCalls;
+    if (!Array.isArray(rawCalls) || rawCalls.length === 0)
+        return undefined;
+    const calls = [];
+    for (const value of rawCalls) {
+        const call = objectValue(value);
+        if (!call ||
+            typeof call.id !== 'string' ||
+            call.id.length === 0 ||
+            typeof call.name !== 'string' ||
+            call.name.length === 0) {
+            return undefined;
+        }
+        calls.push({
+            id: call.id,
+            name: call.name,
+            arguments: typeof call.arguments === 'string' ? call.arguments : '{}',
+        });
+    }
+    return calls;
+}
 export function restorePersistedWorkContext(messages, provider, expectedStateScope) {
     const restored = [];
     let pendingGroup;
@@ -854,14 +1021,31 @@ export function restorePersistedWorkContext(messages, provider, expectedStateSco
             (message.role === 'assistant' && message.kind === 'message')) {
             flushPendingGroup();
             const providerMetadata = matchingWorkProviderMetadata(message, provider, expectedStateScope);
+            // Chat-mode rounds persist their tool calls directly (no Responses
+            // replay state exists for them). Restore those only when the current
+            // provider requires no such state either — the strict Responses
+            // invariant stays fail-closed.
+            const chatCalls = !providerMetadata && !expectedStateScope
+                ? persistedChatToolCalls(message)
+                : undefined;
             const responseCalls = providerMetadata
                 ? responseFunctionCalls(providerMetadata)
-                : [];
-            const rawFunctionCallCount = Array.isArray(providerMetadata?.[OPENAI_RESPONSES_OUTPUT_ITEMS_METADATA_KEY])
-                ? providerMetadata[OPENAI_RESPONSES_OUTPUT_ITEMS_METADATA_KEY].filter(item => objectValue(item)?.type === 'function_call').length
-                : 0;
+                : (chatCalls ?? []);
+            const rawFunctionCallCount = providerMetadata
+                ? Array.isArray(providerMetadata[OPENAI_RESPONSES_OUTPUT_ITEMS_METADATA_KEY])
+                    ? providerMetadata[OPENAI_RESPONSES_OUTPUT_ITEMS_METADATA_KEY].filter(item => objectValue(item)?.type === 'function_call').length
+                    : 0
+                : responseCalls.length;
             const expectedCallIds = new Set(responseCalls.map(call => call.id));
-            if (message.kind === 'provider_state' && !providerMetadata) {
+            if (!providerMetadata &&
+                message.metadata?.[WORK_EMPTY_MODEL_RESPONSE_METADATA_KEY] === true) {
+                // The empty-response placeholder informs the user; it is not
+                // something the model said, so keep it out of model context.
+                continue;
+            }
+            if (message.kind === 'provider_state' &&
+                !providerMetadata &&
+                !chatCalls) {
                 continue;
             }
             if (message.kind !== 'message' && message.kind !== 'provider_state') {
@@ -1145,6 +1329,7 @@ function validateToolCallArguments(call) {
         case 'move_file':
             return invalidRequiredString('from') || invalidRequiredString('to');
         case 'search_files':
+        case 'web_search':
             return invalidRequiredString('query');
         case 'run_command':
             return invalidRequiredString('command');
@@ -1192,6 +1377,9 @@ function summarizeToolCall(call) {
             includeString('path', args.path);
             includeString('query', args.query, 500);
             break;
+        case 'web_search':
+            includeString('query', args.query, 500);
+            break;
         case 'run_command':
             includeString('command', args.command, 2000);
             if (typeof args.timeout_ms === 'number') {