libre-webui 0.21.3 → 0.22.0

package/backend/dist/platform/storage/index.js

@@ -0,0 +1,35 @@
+/*
+ * Libre WebUI
+ * Copyright (C) 2025 Kroonen AI, Inc.
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+export * from './aesGcmKeyring.js';
+export * from './blobStore.js';
+export * from './blobReferenceRepository.js';
+export * from './localEncryptedBlobStore.js';
+export * from './platformStorageRuntime.js';
+export * from './platformDomainRepositories.js';
+export * from './personaMemoryIndexing.js';
+export * from './postgresPlatformDomainRepositories.js';
+export * from './sqlitePlatformDomainRepositories.js';
+export * from './durableBlobQuotaPolicy.js';
+export * from './documentVectorIndex.js';
+export * from './resourceContentCleanup.js';
+export * from './pgVectorStore.js';
+export * from './s3EncryptedBlobStore.js';
+export * from './sqliteEncryptedVectorStore.js';
+export * from './storageSchemaContracts.js';
+export * from './storageFactory.js';
+export * from './vectorStore.js';
+//# sourceMappingURL=index.js.map

package/backend/dist/platform/storage/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/platform/storage/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,cAAc,oBAAoB,CAAC;AACnC,cAAc,gBAAgB,CAAC;AAC/B,cAAc,8BAA8B,CAAC;AAC7C,cAAc,8BAA8B,CAAC;AAC7C,cAAc,6BAA6B,CAAC;AAC5C,cAAc,iCAAiC,CAAC;AAChD,cAAc,4BAA4B,CAAC;AAC3C,cAAc,yCAAyC,CAAC;AACxD,cAAc,uCAAuC,CAAC;AACtD,cAAc,6BAA6B,CAAC;AAC5C,cAAc,0BAA0B,CAAC;AACzC,cAAc,6BAA6B,CAAC;AAC5C,cAAc,oBAAoB,CAAC;AACnC,cAAc,2BAA2B,CAAC;AAC1C,cAAc,iCAAiC,CAAC;AAChD,cAAc,6BAA6B,CAAC;AAC5C,cAAc,qBAAqB,CAAC;AACpC,cAAc,kBAAkB,CAAC"}

package/backend/dist/platform/storage/localEncryptedBlobStore.d.ts

@@ -0,0 +1,120 @@
+import { Aes256GcmKeyring } from './aesGcmKeyring.js';
+import { type BlobDescriptor, type BlobPutRequest, type BlobQuotaPolicy, type BlobReadRequest, type BlobReadResult, type BlobStore } from './blobStore.js';
+export interface LocalEncryptedBlobStoreOptions {
+    rootDirectory: string;
+    keyring: Aes256GcmKeyring;
+    quotaPolicy?: BlobQuotaPolicy;
+    chunkBytes?: number;
+    maxObjectBytes?: number;
+    now?: () => Date;
+    /** Authenticate an existing store without creating paths or changing modes. */
+    readOnly?: boolean;
+}
+export interface BlobOrphanCleanupOptions {
+    /**
+     * Only objects older than this instant are considered. The grace period is
+     * what makes a crash between rename and relational metadata commit safe.
+     */
+    olderThan: Date;
+    isReferenced: (blobId: string) => Promise<boolean>;
+    signal?: AbortSignal;
+}
+export interface BlobOrphanCleanupResult {
+    deletedObjects: number;
+    deletedStagingFiles: number;
+    retainedObjects: number;
+}
+export interface LocalBlobReconciliationOptions extends BlobOrphanCleanupOptions {
+    /** Maximum object/staging candidates inspected during this pass. */
+    maxEntries: number;
+    /** Opaque cursor returned by an earlier incomplete pass. */
+    continuationToken?: string;
+}
+export interface LocalBlobReconciliationResult extends BlobOrphanCleanupResult {
+    inspectedEntries: number;
+    complete: boolean;
+    continuationToken?: string;
+}
+export interface BlobIntegrityVerificationOptions {
+    /** Fail closed instead of traversing an unexpectedly large object set. */
+    maxObjects?: number;
+    /** Maximum aggregate on-disk bytes authenticated by this invocation. */
+    maxEncryptedBytes?: number;
+    /** Maximum aggregate plaintext bytes authenticated by this invocation. */
+    maxPlaintextBytes?: number;
+    signal?: AbortSignal;
+}
+export interface BlobIntegrityVerificationResult {
+    objects: number;
+    encryptedBytes: number;
+    plaintextBytes: number;
+}
+/**
+ * Immutable local blob backend with chunked authenticated encryption.
+ *
+ * Each blob receives a random data key. The configured keyring wraps that key;
+ * metadata is encrypted, and every body chunk is bound to blob ID, owner,
+ * purpose, chunk index, and plaintext length through AES-GCM AAD.
+ */
+export declare class LocalEncryptedBlobStore implements BlobStore {
+    private readonly rootDirectory;
+    private readonly objectsDirectory;
+    private readonly stagingDirectory;
+    private readonly keyring;
+    private readonly quotaPolicy;
+    private readonly chunkBytes;
+    private readonly maxObjectBytes;
+    private readonly now;
+    private readonly readOnly;
+    private initialized;
+    constructor(options: LocalEncryptedBlobStoreOptions);
+    private initialize;
+    private assertPrivateDirectory;
+    private objectPath;
+    private ensureObjectDirectory;
+    private syncDirectory;
+    private unlinkIfExists;
+    private unlinkDurably;
+    private cleanupStagingFiles;
+    put(request: BlobPutRequest): Promise<BlobDescriptor>;
+    private openInternal;
+    stat(id: string, ownerUserId: string): Promise<BlobDescriptor>;
+    /**
+     * Offline migration/recovery inventory seam. This authenticates metadata
+     * without requiring the caller to trust relational owner metadata. Runtime
+     * request paths must continue to use owner-scoped stat/open.
+     */
+    inspectAuthenticated(id: string): Promise<BlobDescriptor>;
+    private authenticateFullBody;
+    private normalizeRange;
+    open(request: BlobReadRequest): Promise<BlobReadResult>;
+    delete(request: {
+        id: string;
+        ownerUserId: string;
+        signal?: AbortSignal;
+    }): Promise<boolean>;
+    private integrityDirectoryExists;
+    private integrityDirectoryEntries;
+    private integrityCandidates;
+    /**
+     * Authenticates every durable local object without creating directories,
+     * changing permissions, deleting or rewriting source data. Work is bounded
+     * before each object is opened and plaintext is processed one chunk at a
+     * time.
+     */
+    verifyIntegrity(options?: BlobIntegrityVerificationOptions): Promise<BlobIntegrityVerificationResult>;
+    private listObjectFiles;
+    private decodeReconciliationCursor;
+    private encodeReconciliationCursor;
+    /**
+     * Bounded, restart-safe local lifecycle reconciliation.
+     *
+     * Object names are traversed in their fixed UUID shard order. A cursor may
+     * therefore resume without materializing the whole object tree. New names
+     * that sort before an active cursor are picked up after the scan completes;
+     * the age grace prevents those in-flight writes from being collected.
+     */
+    reconcileOrphans(options: LocalBlobReconciliationOptions): Promise<LocalBlobReconciliationResult>;
+    cleanupOrphans(options: BlobOrphanCleanupOptions): Promise<BlobOrphanCleanupResult>;
+}
+//# sourceMappingURL=localEncryptedBlobStore.d.ts.map

package/backend/dist/platform/storage/localEncryptedBlobStore.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"localEncryptedBlobStore.d.ts","sourceRoot":"","sources":["../../../src/platform/storage/localEncryptedBlobStore.ts"],"names":[],"mappings":"AA+BA,OAAO,EACL,gBAAgB,EAGjB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAKL,KAAK,cAAc,EACnB,KAAK,cAAc,EACnB,KAAK,eAAe,EACpB,KAAK,eAAe,EACpB,KAAK,cAAc,EACnB,KAAK,SAAS,EACf,MAAM,gBAAgB,CAAC;AA0CxB,MAAM,WAAW,8BAA8B;IAC7C,aAAa,EAAE,MAAM,CAAC;IACtB,OAAO,EAAE,gBAAgB,CAAC;IAC1B,WAAW,CAAC,EAAE,eAAe,CAAC;IAC9B,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,GAAG,CAAC,EAAE,MAAM,IAAI,CAAC;IACjB,+EAA+E;IAC/E,QAAQ,CAAC,EAAE,OAAO,CAAC;CACpB;AAED,MAAM,WAAW,wBAAwB;IACvC;;;OAGG;IACH,SAAS,EAAE,IAAI,CAAC;IAChB,YAAY,EAAE,CAAC,MAAM,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;IACnD,MAAM,CAAC,EAAE,WAAW,CAAC;CACtB;AAED,MAAM,WAAW,uBAAuB;IACtC,cAAc,EAAE,MAAM,CAAC;IACvB,mBAAmB,EAAE,MAAM,CAAC;IAC5B,eAAe,EAAE,MAAM,CAAC;CACzB;AAED,MAAM,WAAW,8BAA+B,SAAQ,wBAAwB;IAC9E,oEAAoE;IACpE,UAAU,EAAE,MAAM,CAAC;IACnB,4DAA4D;IAC5D,iBAAiB,CAAC,EAAE,MAAM,CAAC;CAC5B;AAED,MAAM,WAAW,6BAA8B,SAAQ,uBAAuB;IAC5E,gBAAgB,EAAE,MAAM,CAAC;IACzB,QAAQ,EAAE,OAAO,CAAC;IAClB,iBAAiB,CAAC,EAAE,MAAM,CAAC;CAC5B;AAED,MAAM,WAAW,gCAAgC;IAC/C,0EAA0E;IAC1E,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,wEAAwE;IACxE,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,0EAA0E;IAC1E,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,MAAM,CAAC,EAAE,WAAW,CAAC;CACtB;AAED,MAAM,WAAW,+BAA+B;IAC9C,OAAO,EAAE,MAAM,CAAC;IAChB,cAAc,EAAE,MAAM,CAAC;IACvB,cAAc,EAAE,MAAM,CAAC;CACxB;AA8RD;;;;;;GAMG;AACH,qBAAa,uBAAwB,YAAW,SAAS;IACvD,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAS;IACvC,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAS;IAC1C,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAS;IAC1C,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAmB;IAC3C,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAkB;IAC9C,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAS;IACpC,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAS;IACxC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAa;IACjC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAU;IACnC,OAAO,CAAC,WAAW,CAA8B;IAEjD,YAAY,OAAO,EAAE,8BAA8B,EAgClD;YAEa,UAAU;YAyCV,sBAAsB;IAwBpC,OAAO,CAAC,UAAU;YAUJ,qBAAqB;YAwBrB,aAAa;YAYb,cAAc;YAUd,aAAa;YAMb,mBAAmB;IAgB3B,GAAG,CAAC,OAAO,EAAE,cAAc,GAAG,OAAO,CAAC,cAAc,CAAC,CA0M1D;YAEa,YAAY;IAuKpB,IAAI,CAAC,EAAE,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,cAAc,CAAC,CAOnE;IAED;;;;OAIG;IACG,oBAAoB,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,cAAc,CAAC,CAO9D;YAEa,oBAAoB;IAuDlC,OAAO,CAAC,cAAc;IAuBhB,IAAI,CAAC,OAAO,EAAE,eAAe,GAAG,OAAO,CAAC,cAAc,CAAC,CA+G5D;IAEK,MAAM,CAAC,OAAO,EAAE;QACpB,EAAE,EAAE,MAAM,CAAC;QACX,WAAW,EAAE,MAAM,CAAC;QACpB,MAAM,CAAC,EAAE,WAAW,CAAC;KACtB,GAAG,OAAO,CAAC,OAAO,CAAC,CA4CnB;YAEa,wBAAwB;YA0BvB,yBAAyB;YAwBzB,mBAAmB;IA0FlC;;;;;OAKG;IACG,eAAe,CACnB,OAAO,GAAE,gCAAqC,GAC7C,OAAO,CAAC,+BAA+B,CAAC,CAqE1C;YAEa,eAAe;IAmB7B,OAAO,CAAC,0BAA0B;IAuClC,OAAO,CAAC,0BAA0B;IAMlC;;;;;;;OAOG;IACG,gBAAgB,CACpB,OAAO,EAAE,8BAA8B,GACtC,OAAO,CAAC,6BAA6B,CAAC,CA2IxC;IAEK,cAAc,CAClB,OAAO,EAAE,wBAAwB,GAChC,OAAO,CAAC,uBAAuB,CAAC,CA2ClC;CACF"}