libre-webui 0.21.2 → 0.22.0

package/backend/dist/platform/storage/storageSchemaContracts.js

@@ -0,0 +1,299 @@
+/*
+ * Libre WebUI
+ * Copyright (C) 2025 Kroonen AI, Inc.
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at:
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+/**
+ * This table is deliberately backend-neutral. It is the durable link between
+ * an application resource and a private blob; physical S3 keys and local paths
+ * never cross this boundary.
+ */
+export const SQLITE_BLOB_REFERENCE_SCHEMA_SQL = `
+  CREATE TABLE IF NOT EXISTS platform_blob_references (
+    blob_id TEXT PRIMARY KEY,
+    owner_user_id TEXT NOT NULL,
+    resource_type TEXT NOT NULL,
+    resource_id TEXT NOT NULL,
+    purpose TEXT NOT NULL,
+    created_at INTEGER NOT NULL,
+    UNIQUE(resource_type, resource_id, purpose)
+  );
+
+  CREATE INDEX IF NOT EXISTS idx_platform_blob_references_owner
+    ON platform_blob_references(owner_user_id, purpose, created_at);
+  CREATE INDEX IF NOT EXISTS idx_platform_blob_references_resource
+    ON platform_blob_references(resource_type, resource_id);
+`;
+/** Added after the immutable v5 blob-reference protocol. */
+export const SQLITE_BLOB_QUOTA_SCHEMA_SQL = `
+  CREATE TABLE IF NOT EXISTS platform_blob_quota_usage (
+    owner_user_id TEXT PRIMARY KEY,
+    stored_bytes INTEGER NOT NULL DEFAULT 0 CHECK(stored_bytes >= 0),
+    reserved_bytes INTEGER NOT NULL DEFAULT 0 CHECK(reserved_bytes >= 0),
+    updated_at INTEGER NOT NULL
+  );
+
+  CREATE TABLE IF NOT EXISTS platform_blob_quota_reservations (
+    id TEXT PRIMARY KEY,
+    owner_user_id TEXT NOT NULL,
+    purpose TEXT NOT NULL,
+    reserved_bytes INTEGER NOT NULL CHECK(reserved_bytes >= 0),
+    consumed_bytes INTEGER NOT NULL CHECK(consumed_bytes >= 0),
+    expires_at INTEGER NOT NULL,
+    created_at INTEGER NOT NULL,
+    updated_at INTEGER NOT NULL
+  );
+
+  CREATE INDEX IF NOT EXISTS idx_platform_blob_quota_reservations_expiry
+    ON platform_blob_quota_reservations(expires_at, id);
+  CREATE INDEX IF NOT EXISTS idx_platform_blob_quota_reservations_owner
+    ON platform_blob_quota_reservations(owner_user_id, expires_at);
+
+  CREATE TABLE IF NOT EXISTS platform_blob_quota_objects (
+    blob_id TEXT PRIMARY KEY,
+    owner_user_id TEXT NOT NULL,
+    purpose TEXT NOT NULL,
+    stored_bytes INTEGER NOT NULL CHECK(stored_bytes >= 0),
+    created_at INTEGER NOT NULL
+  );
+
+  CREATE INDEX IF NOT EXISTS idx_platform_blob_quota_objects_owner
+    ON platform_blob_quota_objects(owner_user_id, purpose, created_at);
+`;
+export const POSTGRES_BLOB_SCHEMA_SQL = `
+  CREATE TABLE platform_blob_objects (
+    id TEXT PRIMARY KEY,
+    owner_user_id TEXT NOT NULL,
+    purpose TEXT NOT NULL,
+    object_key TEXT NOT NULL UNIQUE,
+    encrypted_bytes BIGINT NOT NULL CHECK (encrypted_bytes >= 0),
+    plaintext_bytes BIGINT NOT NULL CHECK (plaintext_bytes >= 0),
+    plaintext_sha256 TEXT NOT NULL CHECK (plaintext_sha256 ~ '^[0-9a-f]{64}$'),
+    ciphertext_sha256 TEXT NOT NULL CHECK (ciphertext_sha256 ~ '^[0-9a-f]{64}$'),
+    wrapped_data_key JSONB NOT NULL,
+    metadata_iv BYTEA NOT NULL,
+    metadata_tag BYTEA NOT NULL,
+    encrypted_metadata BYTEA NOT NULL,
+    state TEXT NOT NULL CHECK (state IN ('ready', 'deleting')),
+    created_at BIGINT NOT NULL,
+    updated_at BIGINT NOT NULL
+  );
+
+  CREATE INDEX idx_platform_blob_objects_owner
+    ON platform_blob_objects(owner_user_id, purpose, created_at);
+  CREATE INDEX idx_platform_blob_objects_state
+    ON platform_blob_objects(state, updated_at);
+
+  CREATE TABLE platform_generated_media (
+    id TEXT PRIMARY KEY,
+    user_id TEXT NOT NULL REFERENCES users(id) ON DELETE CASCADE,
+    kind TEXT NOT NULL CHECK (kind IN ('image', 'audio', 'video')),
+    encrypted_prompt TEXT NOT NULL,
+    model TEXT NOT NULL,
+    plugin_id TEXT,
+    blob_id TEXT NOT NULL REFERENCES platform_blob_objects(id) ON DELETE RESTRICT,
+    mime_type TEXT NOT NULL,
+    size_label TEXT,
+    quality TEXT,
+    encrypted_metadata TEXT,
+    created_at BIGINT NOT NULL
+  );
+
+  CREATE INDEX idx_platform_generated_media_user
+    ON platform_generated_media(user_id, kind, created_at DESC);
+  CREATE INDEX idx_platform_generated_media_blob
+    ON platform_generated_media(blob_id);
+
+  CREATE TABLE platform_blob_references (
+    blob_id TEXT PRIMARY KEY,
+    owner_user_id TEXT NOT NULL,
+    resource_type TEXT NOT NULL,
+    resource_id TEXT NOT NULL,
+    purpose TEXT NOT NULL,
+    created_at BIGINT NOT NULL,
+    UNIQUE(resource_type, resource_id, purpose)
+  );
+
+  CREATE INDEX idx_platform_blob_references_owner
+    ON platform_blob_references(owner_user_id, purpose, created_at);
+  CREATE INDEX idx_platform_blob_references_resource
+    ON platform_blob_references(resource_type, resource_id);
+
+  CREATE TABLE platform_blob_quota_usage (
+    owner_user_id TEXT PRIMARY KEY,
+    stored_bytes BIGINT NOT NULL DEFAULT 0 CHECK(stored_bytes >= 0),
+    reserved_bytes BIGINT NOT NULL DEFAULT 0 CHECK(reserved_bytes >= 0),
+    updated_at BIGINT NOT NULL
+  );
+
+  CREATE TABLE platform_blob_quota_reservations (
+    id TEXT PRIMARY KEY,
+    owner_user_id TEXT NOT NULL,
+    purpose TEXT NOT NULL,
+    reserved_bytes BIGINT NOT NULL CHECK(reserved_bytes >= 0),
+    consumed_bytes BIGINT NOT NULL CHECK(consumed_bytes >= 0),
+    expires_at BIGINT NOT NULL,
+    created_at BIGINT NOT NULL,
+    updated_at BIGINT NOT NULL
+  );
+
+  CREATE INDEX idx_platform_blob_quota_reservations_expiry
+    ON platform_blob_quota_reservations(expires_at, id);
+  CREATE INDEX idx_platform_blob_quota_reservations_owner
+    ON platform_blob_quota_reservations(owner_user_id, expires_at);
+
+  CREATE TABLE platform_blob_quota_objects (
+    blob_id TEXT PRIMARY KEY,
+    owner_user_id TEXT NOT NULL,
+    purpose TEXT NOT NULL,
+    stored_bytes BIGINT NOT NULL CHECK(stored_bytes >= 0),
+    created_at BIGINT NOT NULL
+  );
+
+  CREATE INDEX idx_platform_blob_quota_objects_owner
+    ON platform_blob_quota_objects(owner_user_id, purpose, created_at);
+
+  CREATE TABLE platform_media_generation_jobs (
+    id TEXT PRIMARY KEY,
+    user_id TEXT NOT NULL REFERENCES users(id) ON DELETE CASCADE,
+    provider_job_id TEXT NOT NULL,
+    plugin_id TEXT NOT NULL,
+    model TEXT NOT NULL,
+    encrypted_prompt TEXT NOT NULL,
+    status TEXT NOT NULL CHECK(status IN ('pending', 'in_progress', 'completed', 'failed')),
+    encrypted_options TEXT,
+    gallery_id TEXT REFERENCES platform_generated_media(id) ON DELETE SET NULL,
+    encrypted_error TEXT,
+    created_at BIGINT NOT NULL,
+    updated_at BIGINT NOT NULL
+  );
+
+  CREATE UNIQUE INDEX idx_platform_media_jobs_provider
+    ON platform_media_generation_jobs(user_id, plugin_id, provider_job_id);
+  CREATE INDEX idx_platform_media_jobs_user_status
+    ON platform_media_generation_jobs(user_id, status, updated_at DESC);
+`;
+export const POSTGRES_VECTOR_SCHEMA_SQL = `
+  CREATE EXTENSION IF NOT EXISTS vector;
+
+  CREATE TABLE platform_vector_entries (
+    namespace TEXT NOT NULL,
+    id TEXT NOT NULL,
+    owner_user_id TEXT NOT NULL,
+    resource_id TEXT NOT NULL,
+    model TEXT NOT NULL,
+    dimensions INTEGER NOT NULL CHECK (dimensions > 0 AND dimensions <= 16000),
+    embedding_version TEXT NOT NULL,
+    source_revision TEXT NOT NULL,
+    embedding vector NOT NULL,
+    attributes JSONB NOT NULL DEFAULT '{}'::jsonb,
+    created_at BIGINT NOT NULL,
+    updated_at BIGINT NOT NULL,
+    PRIMARY KEY (namespace, owner_user_id, id),
+    CHECK (vector_dims(embedding) = dimensions),
+    CHECK (jsonb_typeof(attributes) = 'object')
+  );
+
+  CREATE TABLE platform_vector_acl (
+    namespace TEXT NOT NULL,
+    owner_user_id TEXT NOT NULL,
+    vector_id TEXT NOT NULL,
+    principal_type TEXT NOT NULL CHECK (principal_type IN ('user', 'group')),
+    principal_id TEXT NOT NULL,
+    PRIMARY KEY (
+      namespace,
+      owner_user_id,
+      vector_id,
+      principal_type,
+      principal_id
+    ),
+    FOREIGN KEY (namespace, owner_user_id, vector_id)
+      REFERENCES platform_vector_entries(namespace, owner_user_id, id)
+      ON DELETE CASCADE
+  );
+
+  CREATE INDEX idx_platform_vectors_scope
+    ON platform_vector_entries(
+      namespace,
+      model,
+      dimensions,
+      embedding_version,
+      owner_user_id
+    );
+  CREATE INDEX idx_platform_vectors_resource
+    ON platform_vector_entries(namespace, resource_id, owner_user_id);
+  CREATE INDEX idx_platform_vectors_attributes
+    ON platform_vector_entries USING GIN(attributes jsonb_path_ops);
+  CREATE INDEX idx_platform_vector_acl_principal
+    ON platform_vector_acl(
+      principal_type,
+      principal_id,
+      namespace,
+      owner_user_id,
+      vector_id
+    );
+
+  CREATE TABLE platform_persona_memories (
+    id TEXT PRIMARY KEY,
+    user_id TEXT NOT NULL REFERENCES users(id) ON DELETE CASCADE,
+    persona_id TEXT NOT NULL REFERENCES personas(id) ON DELETE CASCADE,
+    encrypted_content TEXT NOT NULL,
+    timestamp BIGINT NOT NULL,
+    encrypted_context TEXT,
+    importance_score DOUBLE PRECISION NOT NULL DEFAULT 0.5
+      CHECK(importance_score >= 0 AND importance_score <= 1),
+    memory_type TEXT NOT NULL DEFAULT 'general'
+      CHECK(memory_type IN ('fact', 'preference', 'experience', 'emotional', 'context', 'instruction', 'general')),
+    access_count BIGINT NOT NULL DEFAULT 0 CHECK(access_count >= 0),
+    last_accessed BIGINT,
+    decay_factor DOUBLE PRECISION NOT NULL DEFAULT 1.0
+      CHECK(decay_factor >= 0 AND decay_factor <= 1),
+    encrypted_consolidated_from TEXT
+  );
+
+  CREATE INDEX idx_platform_persona_memories_owner
+    ON platform_persona_memories(user_id, persona_id, timestamp DESC);
+  CREATE INDEX idx_platform_persona_memories_core
+    ON platform_persona_memories(user_id, persona_id, memory_type, importance_score DESC);
+
+  CREATE TABLE platform_persona_states (
+    persona_id TEXT PRIMARY KEY REFERENCES personas(id) ON DELETE CASCADE,
+    user_id TEXT NOT NULL REFERENCES users(id) ON DELETE CASCADE,
+    encrypted_runtime_state TEXT NOT NULL,
+    encrypted_mutation_log TEXT NOT NULL,
+    last_updated BIGINT NOT NULL,
+    version INTEGER NOT NULL DEFAULT 1 CHECK(version >= 1)
+  );
+
+  CREATE INDEX idx_platform_persona_states_user
+    ON platform_persona_states(user_id, last_updated DESC);
+`;
+/** Checksums are immutable release artifacts: SHA-256(version\nname\nsql). */
+export const POSTGRES_BLOB_MIGRATION = {
+    version: 2,
+    name: 'platform-blob-store',
+    checksum: '6e12b6cc4b98de8a75c65f44b98d66502a70d32c8cd03c732e7e74bdeeced363',
+    sql: POSTGRES_BLOB_SCHEMA_SQL,
+    rollbackPlan: 'Stop writers, verify no platform_blob_references remain, delete S3 objects from the signed inventory, then drop platform_blob_references and platform_blob_objects.',
+    minimumCompatibleVersion: 1,
+};
+export const POSTGRES_VECTOR_MIGRATION = {
+    version: 3,
+    name: 'platform-vector-store',
+    checksum: 'b1a55a08a1efe15860c893446bb55741a68ee22763bddbc508c887347207a521',
+    sql: POSTGRES_VECTOR_SCHEMA_SQL,
+    rollbackPlan: 'Stop vector writers, export the rebuild inventory, drop platform_vector_acl and platform_vector_entries, and retain source content for deterministic re-embedding.',
+    minimumCompatibleVersion: 1,
+};
+//# sourceMappingURL=storageSchemaContracts.js.map

package/backend/dist/platform/storage/storageSchemaContracts.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"storageSchemaContracts.js","sourceRoot":"","sources":["../../../src/platform/storage/storageSchemaContracts.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH;;;;GAIG;AACH,MAAM,CAAC,MAAM,gCAAgC,GAAG;;;;;;;;;;;;;;;CAe/C,CAAC;AAEF,4DAA4D;AAC5D,MAAM,CAAC,MAAM,4BAA4B,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAkC3C,CAAC;AAEF,MAAM,CAAC,MAAM,wBAAwB,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAgHvC,CAAC;AAEF,MAAM,CAAC,MAAM,0BAA0B,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA8FzC,CAAC;AAWF,8EAA8E;AAC9E,MAAM,CAAC,MAAM,uBAAuB,GAA6B;IAC/D,OAAO,EAAE,CAAC;IACV,IAAI,EAAE,qBAAqB;IAC3B,QAAQ,EAAE,kEAAkE;IAC5E,GAAG,EAAE,wBAAwB;IAC7B,YAAY,EACV,qKAAqK;IACvK,wBAAwB,EAAE,CAAC;CAC5B,CAAC;AAEF,MAAM,CAAC,MAAM,yBAAyB,GAA6B;IACjE,OAAO,EAAE,CAAC;IACV,IAAI,EAAE,uBAAuB;IAC7B,QAAQ,EAAE,kEAAkE;IAC5E,GAAG,EAAE,0BAA0B;IAC/B,YAAY,EACV,oKAAoK;IACtK,wBAAwB,EAAE,CAAC;CAC5B,CAAC"}

package/backend/dist/platform/storage/vectorStore.d.ts

@@ -0,0 +1,117 @@
+export interface VectorActor {
+    userId: string;
+    /**
+     * Untrusted compatibility claims. Stores must resolve current membership
+     * through VectorPrincipalResolver and never authorize from this array.
+     */
+    groupIds?: readonly string[];
+}
+export interface VectorPrincipalResolver {
+    /** Resolve current, trusted group membership on every authorization call. */
+    resolveGroupIds(userId: string): Promise<readonly string[]>;
+}
+/** Owner/user grants only until a trusted group repository is configured. */
+export declare class OwnerOnlyVectorPrincipalResolver implements VectorPrincipalResolver {
+    resolveGroupIds(): Promise<readonly string[]>;
+}
+export type VectorGrant = {
+    type: 'user';
+    id: string;
+} | {
+    type: 'group';
+    id: string;
+};
+export interface VectorRecord {
+    namespace: string;
+    id: string;
+    ownerUserId: string;
+    resourceId: string;
+    model: string;
+    dimensions: number;
+    version: string;
+    sourceRevision: string;
+    embedding: readonly number[];
+    /** Non-secret equality filters normalized by the backend. */
+    attributes?: Readonly<Record<string, string>>;
+    grants?: readonly VectorGrant[];
+    createdAt?: number;
+}
+export interface VectorUpsertRequest {
+    actor: VectorActor;
+    records: readonly VectorRecord[];
+}
+export interface VectorQuery {
+    actor: VectorActor;
+    namespace: string;
+    model: string;
+    dimensions: number;
+    version: string;
+    embedding: readonly number[];
+    limit: number;
+    minScore?: number;
+    resourceIds?: readonly string[];
+    attributes?: Readonly<Record<string, string>>;
+}
+export interface VectorHit {
+    id: string;
+    namespace: string;
+    ownerUserId: string;
+    resourceId: string;
+    model: string;
+    dimensions: number;
+    version: string;
+    sourceRevision: string;
+    score: number;
+    attributes: Readonly<Record<string, string>>;
+}
+export interface VectorDeleteRequest {
+    actor: VectorActor;
+    namespace: string;
+    resourceId?: string;
+    ids?: readonly string[];
+}
+export interface VectorResourceIndexEntry {
+    id: string;
+    sourceRevision: string;
+}
+/** Mutation batch size supported atomically by both vector backends. */
+export declare const MAX_VECTOR_RECORDS_PER_UPSERT = 1000;
+/**
+ * Maximum exact resource manifest accepted by the bounded paged probe. This
+ * is deliberately larger than one mutation batch so callers can publish a
+ * resource through multiple compensated batches and still prove it globally,
+ * while remaining aligned with the portable archive document-chunk ceiling.
+ */
+export declare const MAX_VECTOR_RESOURCE_INDEX_ENTRIES = 100000;
+/**
+ * Metadata-only owner probe used by repair paths before they mutate an index.
+ * Implementations must require the resource to contain exactly these records;
+ * extra, missing, stale-model, or stale-revision rows all return false.
+ */
+export interface VectorResourceIndexProbe {
+    actor: VectorActor;
+    namespace: string;
+    resourceId: string;
+    model: string;
+    dimensions: number;
+    version: string;
+    entries: readonly VectorResourceIndexEntry[];
+}
+/**
+ * Every query and mutation carries an actor. Implementations must apply ACL
+ * and resource predicates before embeddings are decrypted or scored.
+ */
+export interface VectorStore {
+    upsert(request: VectorUpsertRequest): Promise<void>;
+    query(request: VectorQuery): Promise<VectorHit[]>;
+    hasExactResourceIndex(request: VectorResourceIndexProbe): Promise<boolean>;
+    delete(request: VectorDeleteRequest): Promise<number>;
+    deleteAllForOwner(actor: VectorActor): Promise<number>;
+}
+export type VectorStoreErrorCode = 'candidate-limit' | 'corrupt' | 'forbidden' | 'invalid-input' | 'unavailable' | 'verification-limit';
+export declare class VectorStoreError extends Error {
+    readonly code: VectorStoreErrorCode;
+    readonly cause?: unknown;
+    constructor(code: VectorStoreErrorCode, message: string, cause?: unknown);
+}
+//# sourceMappingURL=vectorStore.d.ts.map

package/backend/dist/platform/storage/vectorStore.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"vectorStore.d.ts","sourceRoot":"","sources":["../../../src/platform/storage/vectorStore.ts"],"names":[],"mappings":"AAiBA,MAAM,WAAW,WAAW;IAC1B,MAAM,EAAE,MAAM,CAAC;IACf;;;OAGG;IACH,QAAQ,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;CAC9B;AAED,MAAM,WAAW,uBAAuB;IACtC,6EAA6E;IAC7E,eAAe,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,MAAM,EAAE,CAAC,CAAC;CAC7D;AAED,6EAA6E;AAC7E,qBAAa,gCAAiC,YAAW,uBAAuB;IACxE,eAAe,IAAI,OAAO,CAAC,SAAS,MAAM,EAAE,CAAC,CAElD;CACF;AAED,MAAM,MAAM,WAAW,GACrB;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,EAAE,EAAE,MAAM,CAAA;CAAE,GAAG;IAAE,IAAI,EAAE,OAAO,CAAC;IAAC,EAAE,EAAE,MAAM,CAAA;CAAE,CAAC;AAE/D,MAAM,WAAW,YAAY;IAC3B,SAAS,EAAE,MAAM,CAAC;IAClB,EAAE,EAAE,MAAM,CAAC;IACX,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,EAAE,MAAM,CAAC;IACnB,KAAK,EAAE,MAAM,CAAC;IACd,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC;IAChB,cAAc,EAAE,MAAM,CAAC;IACvB,SAAS,EAAE,SAAS,MAAM,EAAE,CAAC;IAC7B,6DAA6D;IAC7D,UAAU,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IAC9C,MAAM,CAAC,EAAE,SAAS,WAAW,EAAE,CAAC;IAChC,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,mBAAmB;IAClC,KAAK,EAAE,WAAW,CAAC;IACnB,OAAO,EAAE,SAAS,YAAY,EAAE,CAAC;CAClC;AAED,MAAM,WAAW,WAAW;IAC1B,KAAK,EAAE,WAAW,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,MAAM,CAAC;IACd,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,SAAS,MAAM,EAAE,CAAC;IAC7B,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,WAAW,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAChC,UAAU,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;CAC/C;AAED,MAAM,WAAW,SAAS;IACxB,EAAE,EAAE,MAAM,CAAC;IACX,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,EAAE,MAAM,CAAC;IACnB,KAAK,EAAE,MAAM,CAAC;IACd,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC;IAChB,cAAc,EAAE,MAAM,CAAC;IACvB,KAAK,EAAE,MAAM,CAAC;IACd,UAAU,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;CAC9C;AAED,MAAM,WAAW,mBAAmB;IAClC,KAAK,EAAE,WAAW,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,GAAG,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;CACzB;AAED,MAAM,WAAW,wBAAwB;IACvC,EAAE,EAAE,MAAM,CAAC;IACX,cAAc,EAAE,MAAM,CAAC;CACxB;AAED,wEAAwE;AACxE,eAAO,MAAM,6BAA6B,OAAQ,CAAC;AAEnD;;;;;GAKG;AACH,eAAO,MAAM,iCAAiC,SAAU,CAAC;AAEzD;;;;GAIG;AACH,MAAM,WAAW,wBAAwB;IACvC,KAAK,EAAE,WAAW,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;IACnB,KAAK,EAAE,MAAM,CAAC;IACd,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,SAAS,wBAAwB,EAAE,CAAC;CAC9C;AAED;;;GAGG;AACH,MAAM,WAAW,WAAW;IAC1B,MAAM,CAAC,OAAO,EAAE,mBAAmB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACpD,KAAK,CAAC,OAAO,EAAE,WAAW,GAAG,OAAO,CAAC,SAAS,EAAE,CAAC,CAAC;IAClD,qBAAqB,CAAC,OAAO,EAAE,wBAAwB,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAC3E,MAAM,CAAC,OAAO,EAAE,mBAAmB,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IACtD,iBAAiB,CAAC,KAAK,EAAE,WAAW,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;CACxD;AAED,MAAM,MAAM,oBAAoB,GAC5B,iBAAiB,GACjB,SAAS,GACT,WAAW,GACX,eAAe,GACf,aAAa,GACb,oBAAoB,CAAC;AAEzB,qBAAa,gBAAiB,SAAQ,KAAK;IAEvC,QAAQ,CAAC,IAAI,EAAE,oBAAoB;IAEnC,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO;IAH1B,YACW,IAAI,EAAE,oBAAoB,EACnC,OAAO,EAAE,MAAM,EACN,KAAK,CAAC,EAAE,OAAO,EAIzB;CACF"}

package/backend/dist/platform/storage/vectorStore.js

@@ -0,0 +1,40 @@
+/*
+ * Libre WebUI
+ * Copyright (C) 2025 Kroonen AI, Inc.
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+/** Owner/user grants only until a trusted group repository is configured. */
+export class OwnerOnlyVectorPrincipalResolver {
+    async resolveGroupIds() {
+        return [];
+    }
+}
+/** Mutation batch size supported atomically by both vector backends. */
+export const MAX_VECTOR_RECORDS_PER_UPSERT = 1000;
+/**
+ * Maximum exact resource manifest accepted by the bounded paged probe. This
+ * is deliberately larger than one mutation batch so callers can publish a
+ * resource through multiple compensated batches and still prove it globally,
+ * while remaining aligned with the portable archive document-chunk ceiling.
+ */
+export const MAX_VECTOR_RESOURCE_INDEX_ENTRIES = 100000;
+export class VectorStoreError extends Error {
+    constructor(code, message, cause) {
+        super(message);
+        this.code = code;
+        this.cause = cause;
+        this.name = 'VectorStoreError';
+    }
+}
+//# sourceMappingURL=vectorStore.js.map

package/backend/dist/platform/storage/vectorStore.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"vectorStore.js","sourceRoot":"","sources":["../../../src/platform/storage/vectorStore.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAgBH,6EAA6E;AAC7E,MAAM,OAAO,gCAAgC;IAC3C,KAAK,CAAC,eAAe;QACnB,OAAO,EAAE,CAAC;IACZ,CAAC;CACF;AAgED,wEAAwE;AACxE,MAAM,CAAC,MAAM,6BAA6B,GAAG,IAAK,CAAC;AAEnD;;;;;GAKG;AACH,MAAM,CAAC,MAAM,iCAAiC,GAAG,MAAO,CAAC;AAqCzD,MAAM,OAAO,gBAAiB,SAAQ,KAAK;IACzC,YACW,IAA0B,EACnC,OAAe,EACN,KAAe;QAExB,KAAK,CAAC,OAAO,CAAC,CAAC;oBAJN,IAAI;qBAEJ,KAAK;QAGd,IAAI,CAAC,IAAI,GAAG,kBAAkB,CAAC;IACjC,CAAC;CACF"}

package/backend/dist/platform/workPersistence/index.d.ts

@@ -0,0 +1,9 @@
+export * from './types.js';
+export * from './service.js';
+export * from './sqliteWorkPersistence.js';
+export * from './postgresWorkPersistence.js';
+export * from './workMessageContentCodec.js';
+export * from './workTextSafety.js';
+export * from './postgresWorkMigration.js';
+export * from './workExecutionTypes.js';
+//# sourceMappingURL=index.d.ts.map

package/backend/dist/platform/workPersistence/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/platform/workPersistence/index.ts"],"names":[],"mappings":"AAMA,cAAc,YAAY,CAAC;AAC3B,cAAc,cAAc,CAAC;AAC7B,cAAc,4BAA4B,CAAC;AAC3C,cAAc,8BAA8B,CAAC;AAC7C,cAAc,8BAA8B,CAAC;AAC7C,cAAc,qBAAqB,CAAC;AACpC,cAAc,4BAA4B,CAAC;AAC3C,cAAc,yBAAyB,CAAC"}

package/backend/dist/platform/workPersistence/index.js

@@ -0,0 +1,14 @@
+/*
+ * Libre WebUI
+ * Copyright (C) 2025 Kroonen AI, Inc.
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ */
+export * from './types.js';
+export * from './service.js';
+export * from './sqliteWorkPersistence.js';
+export * from './postgresWorkPersistence.js';
+export * from './workMessageContentCodec.js';
+export * from './workTextSafety.js';
+export * from './postgresWorkMigration.js';
+export * from './workExecutionTypes.js';
+//# sourceMappingURL=index.js.map

package/backend/dist/platform/workPersistence/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/platform/workPersistence/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,cAAc,YAAY,CAAC;AAC3B,cAAc,cAAc,CAAC;AAC7B,cAAc,4BAA4B,CAAC;AAC3C,cAAc,8BAA8B,CAAC;AAC7C,cAAc,8BAA8B,CAAC;AAC7C,cAAc,qBAAqB,CAAC;AACpC,cAAc,4BAA4B,CAAC;AAC3C,cAAc,yBAAyB,CAAC"}

package/backend/dist/platform/workPersistence/postgresWorkLifecycleMigration.d.ts

@@ -0,0 +1,9 @@
+import type { PostgresMigration } from '../../persistence/postgresMigrationTypes.js';
+/**
+ * Additive post-v7 lifecycle state. The account constraint is replaced only
+ * here so the published v1 descriptor remains immutable. Preview endpoints
+ * are private server routing state and never appear in signed client URLs.
+ */
+export declare const POSTGRES_WORK_LIFECYCLE_SQL = "\nALTER TABLE users\n  DROP CONSTRAINT users_account_status_check;\nALTER TABLE users\n  ADD CONSTRAINT users_account_status_check\n  CHECK (account_status IN ('pending', 'active', 'retiring'));\n\nALTER TABLE work_tasks\n  ADD COLUMN preview_upstream_host TEXT;\nALTER TABLE work_tasks\n  ADD COLUMN preview_upstream_port INTEGER;\nALTER TABLE work_tasks\n  ADD CONSTRAINT work_tasks_preview_upstream_check CHECK (\n    (preview_upstream_host IS NULL AND preview_upstream_port IS NULL)\n    OR\n    (\n      preview_upstream_host IS NOT NULL\n      AND char_length(preview_upstream_host) >= 1\n      AND char_length(preview_upstream_host) <= 253\n      AND preview_upstream_port BETWEEN 1 AND 65535\n    )\n  );\n";
+export declare const POSTGRES_WORK_LIFECYCLE_MIGRATION: PostgresMigration;
+//# sourceMappingURL=postgresWorkLifecycleMigration.d.ts.map

package/backend/dist/platform/workPersistence/postgresWorkLifecycleMigration.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"postgresWorkLifecycleMigration.d.ts","sourceRoot":"","sources":["../../../src/platform/workPersistence/postgresWorkLifecycleMigration.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,6CAA6C,CAAC;AAKrF;;;;GAIG;AACH,eAAO,MAAM,2BAA2B,+sBAsBvC,CAAC;AAEF,eAAO,MAAM,iCAAiC,EAAE,iBAW5C,CAAC"}

package/backend/dist/platform/workPersistence/postgresWorkLifecycleMigration.js

@@ -0,0 +1,47 @@
+/*
+ * Libre WebUI
+ * Copyright (C) 2025 Kroonen AI, Inc.
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ */
+import { createHash } from 'node:crypto';
+const version = 8;
+const name = 'work-lifecycle-fences';
+/**
+ * Additive post-v7 lifecycle state. The account constraint is replaced only
+ * here so the published v1 descriptor remains immutable. Preview endpoints
+ * are private server routing state and never appear in signed client URLs.
+ */
+export const POSTGRES_WORK_LIFECYCLE_SQL = `
+ALTER TABLE users
+  DROP CONSTRAINT users_account_status_check;
+ALTER TABLE users
+  ADD CONSTRAINT users_account_status_check
+  CHECK (account_status IN ('pending', 'active', 'retiring'));
+
+ALTER TABLE work_tasks
+  ADD COLUMN preview_upstream_host TEXT;
+ALTER TABLE work_tasks
+  ADD COLUMN preview_upstream_port INTEGER;
+ALTER TABLE work_tasks
+  ADD CONSTRAINT work_tasks_preview_upstream_check CHECK (
+    (preview_upstream_host IS NULL AND preview_upstream_port IS NULL)
+    OR
+    (
+      preview_upstream_host IS NOT NULL
+      AND char_length(preview_upstream_host) >= 1
+      AND char_length(preview_upstream_host) <= 253
+      AND preview_upstream_port BETWEEN 1 AND 65535
+    )
+  );
+`;
+export const POSTGRES_WORK_LIFECYCLE_MIGRATION = Object.freeze({
+    version,
+    name,
+    checksum: createHash('sha256')
+        .update(`${version}\n${name}\n${POSTGRES_WORK_LIFECYCLE_SQL}`)
+        .digest('hex'),
+    sql: POSTGRES_WORK_LIFECYCLE_SQL,
+    rollbackPlan: 'Stop all app and worker replicas, verify no retiring accounts or active previews remain, restore the active/pending constraint, then drop the two preview upstream columns. Prefer restoring a verified backup.',
+    minimumCompatibleVersion: 8,
+});
+//# sourceMappingURL=postgresWorkLifecycleMigration.js.map

package/backend/dist/platform/workPersistence/postgresWorkLifecycleMigration.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"postgresWorkLifecycleMigration.js","sourceRoot":"","sources":["../../../src/platform/workPersistence/postgresWorkLifecycleMigration.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAGzC,MAAM,OAAO,GAAG,CAAC,CAAC;AAClB,MAAM,IAAI,GAAG,uBAAuB,CAAC;AAErC;;;;GAIG;AACH,MAAM,CAAC,MAAM,2BAA2B,GAAG;;;;;;;;;;;;;;;;;;;;;;CAsB1C,CAAC;AAEF,MAAM,CAAC,MAAM,iCAAiC,GAC5C,MAAM,CAAC,MAAM,CAAC;IACZ,OAAO;IACP,IAAI;IACJ,QAAQ,EAAE,UAAU,CAAC,QAAQ,CAAC;SAC3B,MAAM,CAAC,GAAG,OAAO,KAAK,IAAI,KAAK,2BAA2B,EAAE,CAAC;SAC7D,MAAM,CAAC,KAAK,CAAC;IAChB,GAAG,EAAE,2BAA2B;IAChC,YAAY,EACV,iNAAiN;IACnN,wBAAwB,EAAE,CAAC;CAC5B,CAAC,CAAC"}

package/backend/dist/platform/workPersistence/postgresWorkMessageContentMigration.d.ts

@@ -0,0 +1,3 @@
+import type { PostgresMigration } from '../../persistence/postgresMigrationTypes.js';
+export declare const POSTGRES_WORK_MESSAGE_CONTENT_MIGRATION: PostgresMigration;
+//# sourceMappingURL=postgresWorkMessageContentMigration.d.ts.map

package/backend/dist/platform/workPersistence/postgresWorkMessageContentMigration.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"postgresWorkMessageContentMigration.d.ts","sourceRoot":"","sources":["../../../src/platform/workPersistence/postgresWorkMessageContentMigration.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,6CAA6C,CAAC;AAarF,eAAO,MAAM,uCAAuC,EAAE,iBAWrD,CAAC"}

package/backend/dist/platform/workPersistence/postgresWorkMessageContentMigration.js

@@ -0,0 +1,28 @@
+/*
+ * Libre WebUI
+ * Copyright (C) 2025 Kroonen AI, Inc.
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ */
+import crypto from 'node:crypto';
+const version = 11;
+const name = 'work-message-content-json';
+const sql = `
+UPDATE work_messages
+   SET content = to_json(content)::text;
+
+ALTER TABLE work_messages
+  ADD CONSTRAINT work_messages_content_json_string_check
+  CHECK (json_typeof(content::json) = 'string');
+`;
+export const POSTGRES_WORK_MESSAGE_CONTENT_MIGRATION = {
+    version,
+    name,
+    checksum: crypto
+        .createHash('sha256')
+        .update(`${version}\n${name}\n${sql}`)
+        .digest('hex'),
+    sql,
+    rollbackPlan: 'Stop every Libre replica and worker, restore the verified pre-upgrade PostgreSQL backup, and deploy the matching older release. An in-place downgrade requires strict JSON-string decoding of every work_messages.content row and is intentionally unsupported.',
+    minimumCompatibleVersion: 11,
+};
+//# sourceMappingURL=postgresWorkMessageContentMigration.js.map

package/backend/dist/platform/workPersistence/postgresWorkMessageContentMigration.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"postgresWorkMessageContentMigration.js","sourceRoot":"","sources":["../../../src/platform/workPersistence/postgresWorkMessageContentMigration.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,MAAM,MAAM,aAAa,CAAC;AAGjC,MAAM,OAAO,GAAG,EAAE,CAAC;AACnB,MAAM,IAAI,GAAG,2BAA2B,CAAC;AACzC,MAAM,GAAG,GAAG;;;;;;;CAOX,CAAC;AAEF,MAAM,CAAC,MAAM,uCAAuC,GAAsB;IACxE,OAAO;IACP,IAAI;IACJ,QAAQ,EAAE,MAAM;SACb,UAAU,CAAC,QAAQ,CAAC;SACpB,MAAM,CAAC,GAAG,OAAO,KAAK,IAAI,KAAK,GAAG,EAAE,CAAC;SACrC,MAAM,CAAC,KAAK,CAAC;IAChB,GAAG;IACH,YAAY,EACV,iQAAiQ;IACnQ,wBAAwB,EAAE,EAAE;CAC7B,CAAC"}

package/backend/dist/platform/workPersistence/postgresWorkMigration.d.ts

@@ -0,0 +1,3 @@
+import type { PostgresMigration } from '../../persistence/postgresMigrationTypes.js';
+export declare const POSTGRES_WORK_PERSISTENCE_MIGRATION: PostgresMigration;
+//# sourceMappingURL=postgresWorkMigration.d.ts.map

package/backend/dist/platform/workPersistence/postgresWorkMigration.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"postgresWorkMigration.d.ts","sourceRoot":"","sources":["../../../src/platform/workPersistence/postgresWorkMigration.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,6CAA6C,CAAC;AAsFrF,eAAO,MAAM,mCAAmC,EAAE,iBAWjD,CAAC"}