libre-webui 0.27.0 → 0.28.0

package/README.md

@@ -101,7 +101,7 @@ The first account created on a fresh installation becomes the administrator.
 Install Ollama, then pull a model:
 
 ```bash
-ollama pull gemma4:12b
+ollama pull gemma3:4b
 ```
 
 Libre WebUI can now use Ollama for local inference. No cloud account or API key
@@ -123,32 +123,33 @@ persistent storage.
 
 ## Features
 
-| Feature                | Description                                                                                            |
-| ---------------------- | ------------------------------------------------------------------------------------------------------ |
-| **Chat**               | Streaming conversations with prompt queueing, multi-model comparison, and chat forking                 |
-| **Local inference**    | Ollama support with no required cloud account                                                          |
-| **Provider plugins**   | Chat, image, video, embedding, and speech providers through an extensible plugin layer                 |
-| **Knowledge**          | Chat with PDF, Office, Markdown, HTML, code, and CSV documents via hybrid retrieval with cited sources |
-| **Web search**         | Self-hosted SearXNG search for chats and Work tasks                                                    |
-| **Artifacts**          | Generate and preview HTML, SVG, JSON, code, and multi-file projects                                    |
-| **Workspaces**         | Persistent, task-scoped environments with files, terminal, diffs, and previews                         |
-| **Channels**           | Public, private, and direct-message team conversations with threads, reactions, files, and `@model`    |
-| **Calendar**           | Multiple shareable calendars with recurrence, reminders, and ICS import/export, encrypted at rest      |
-| **Automations**        | Scheduled AI runs delivered as normal chat sessions                                                    |
-| **Notifications**      | Durable in-app inbox with live delivery and signed, egress-guarded outbound webhooks                   |
-| **Notes**              | Notebook with revision history, attachments, sharing, and reversible AI edits                          |
-| **Personas**           | Reusable assistant profiles with their own prompts, models, and memory                                 |
-| **Media generation**   | Image generation and editing plus video generation, with a persistent gallery and retention controls   |
-| **Voice**              | Speech-to-text dictation, text-to-speech playback, and hands-free voice mode with consent-aware voices |
-| **Context management** | Context meter and undoable conversation compaction for long chats                                      |
-| **Agents**             | Optional integration with installed agent CLIs and Libre Claw                                          |
-| **Sharing**            | One grant model for chats, notes, knowledge, personas, prompts, skills, and calendars                  |
-| **Accounts**           | Local accounts, roles, groups, API tokens, and SSO                                                     |
-| **Public API**         | OpenAI-compatible `/v1` endpoints on scoped API tokens                                                 |
-| **Evaluations**        | Feedback with topic tags, blind arena matches with an Elo leaderboard, and reproducible eval runs      |
-| **Monitoring**         | System diagnostics, usage analytics with tariffs and budgets, OpenTelemetry export, and an audit log   |
-| **Deployment**         | npm, Docker Compose, Kubernetes, Helm, and desktop client                                              |
-| **Interface**          | Tabs, full-text search across chats, notes, and documents, themes, and 25 locales including Arabic RTL |
+| Feature                | Description                                                                                                                                                          |
+| ---------------------- | -------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
+| **Chat**               | Streaming conversations with prompt queueing, multi-model comparison, and chat forking                                                                               |
+| **Local inference**    | Ollama support with no required cloud account                                                                                                                        |
+| **Provider plugins**   | Chat, image, video, embedding, and speech providers through an extensible plugin layer                                                                               |
+| **Knowledge**          | Chat with PDF, Office, Markdown, HTML, code, and CSV documents via hybrid retrieval with cited sources                                                               |
+| **Web search**         | Self-hosted SearXNG search for chats and Work tasks                                                                                                                  |
+| **Artifacts**          | Generate and preview HTML, SVG, JSON, code, and multi-file projects                                                                                                  |
+| **Workspaces**         | Persistent, task-scoped environments with files, terminal, diffs, and previews                                                                                       |
+| **Work Computer**      | A watchable desktop with a browser for each agent — verified clicks and typing, take over for sign-ins, hear its audio, and teach it anchored tasks by demonstration |
+| **Channels**           | Public, private, and direct-message team conversations with threads, reactions, files, and `@model`                                                                  |
+| **Calendar**           | Multiple shareable calendars with recurrence, reminders, and ICS import/export, encrypted at rest                                                                    |
+| **Automations**        | Scheduled AI runs delivered as normal chat sessions                                                                                                                  |
+| **Notifications**      | Durable in-app inbox with live delivery and signed, egress-guarded outbound webhooks                                                                                 |
+| **Notes**              | Notebook with revision history, attachments, sharing, and reversible AI edits                                                                                        |
+| **Personas**           | Reusable assistant profiles with their own prompts, models, and memory                                                                                               |
+| **Media generation**   | Image generation and editing plus video generation, with a persistent gallery and retention controls                                                                 |
+| **Voice**              | Speech-to-text dictation, text-to-speech playback, and hands-free voice mode with consent-aware voices                                                               |
+| **Context management** | Context meter and undoable conversation compaction for long chats                                                                                                    |
+| **Agents**             | Optional integration with installed agent CLIs and Libre Claw                                                                                                        |
+| **Sharing**            | One grant model for chats, notes, knowledge, personas, prompts, skills, and calendars                                                                                |
+| **Accounts**           | Local accounts, roles, groups, API tokens, and SSO                                                                                                                   |
+| **Public API**         | OpenAI-compatible `/v1` endpoints on scoped API tokens                                                                                                               |
+| **Evaluations**        | Feedback with topic tags, blind arena matches with an Elo leaderboard, and reproducible eval runs                                                                    |
+| **Monitoring**         | System diagnostics, usage analytics with tariffs and budgets, OpenTelemetry export, and an audit log                                                                 |
+| **Deployment**         | npm, Docker Compose, Kubernetes, Helm, and desktop client                                                                                                            |
+| **Interface**          | Tabs, full-text search across chats, notes, and documents, themes, and 25 locales including Arabic RTL                                                               |
 
 ## Models and providers
 
@@ -172,6 +173,7 @@ Supported integrations include:
 - Qwen3-TTS
 - Kyutai TTS
 - MLX LM on Apple Silicon
+- llama.cpp
 - OpenAI-compatible services
 
 Provider availability can change between releases. See the
@@ -193,7 +195,7 @@ Work task
 ├── Persistent conversation and run history
 ├── Dedicated workspace volume
 ├── Policy-checked command sandbox
-└── Files · Activity · Terminal · Preview
+└── Files · Activity · Changes · Terminal · Preview · Screen
 ```
 
 Work can allow a model to:
@@ -201,10 +203,35 @@ Work can allow a model to:
 - Read, create, edit, move, delete, and search files
 - Run bounded shell commands
 - Start and stop a browser preview
+- Drive a real desktop with a browser through screenshots and input
 - Produce syntax-highlighted code
 - Show file diffs
 - Continue work in the same environment later
 
+**[▶ Watch a real run (2:22)](https://s3.librewebui.org/media/work-computer-demo.mp4?v=2)** —
+a Work agent browsing NASA's galleries on its own screen, choosing
+photos, then building and testing an interactive Three.js gallery,
+unedited, from a single prompt.
+
+https://github.com/user-attachments/assets/acd1ee80-c643-4622-bee6-3cdc2325a4ca
+
+With the **Work Computer** enabled (one click for an administrator; the
+GUI image is published ready to pull), each task also gets a live virtual
+desktop: watch the agent browse in real time, unmute the computer's
+audio, take over the mouse and keyboard for sign-ins or CAPTCHAs —
+credentials go directly from your keyboard to the page, never through the
+model — and teach reusable tasks by demonstrating them once on screen.
+Taught playbooks name the controls that were clicked, carry the sites the
+demonstration actually visited as their allowed scope, and collect a
+worked/failed track record from your one-click reviews. The agent's own
+actions are verified, not assumed: typing asserts the focused field,
+batches stop when the screen changes underneath them, outcomes are
+checked against declared expectations, and repeated no-effect actions end
+the run asking for help instead of burning its budget. Policies decide
+whether takeover is allowed at all. You can message the agent while it
+works; it picks the message up at its next step without stopping the
+run.
+
 Work is disabled for regular users by default and never falls back to executing
 commands directly on the host.
 
@@ -249,7 +276,7 @@ For multi-user deployments, Libre WebUI supports:
 - Optional GitHub and Hugging Face OAuth, plus generic OIDC single sign-on
 - An admin-facing security audit log
 - AES-256-GCM encryption for sensitive application values
-- Persistent SQLite storage
+- Persistent SQLite storage, or PostgreSQL with S3 blobs and pgvector for the multi-replica team profile
 - Configurable data directories
 
 Application-layer encryption is not full-disk encryption or end-to-end
@@ -291,6 +318,7 @@ HTTP, web search, MCP, memory, approvals, and schedules.
 | **External Ollama** | `docker compose -f docker-compose.external-ollama.yml up -d`            | Use an existing Ollama instance          |
 | **NVIDIA Docker**   | `docker compose -f docker-compose.gpu.yml up -d`                        | GPU-enabled local inference              |
 | **Kubernetes**      | `helm install libre-webui oci://ghcr.io/libre-webui/charts/libre-webui` | Cluster deployment                       |
+| **Team profile**    | `docker compose -f docker-compose.team.yml up -d`                       | Multi-replica PostgreSQL + S3 deployment |
 | **Desktop client**  | [GitHub Releases](https://github.com/libre-webui/libre-webui/releases)  | Desktop interface over a managed backend |
 | **Source**          | `npm install && npm run dev`                                            | Development                              |
 

package/backend/dist/persistence/postgresAutomationWorkTargetMigration.d.ts

@@ -0,0 +1,9 @@
+import type { PostgresMigration } from './postgresMigrationTypes.js';
+/**
+ * Automations gain a run target: 'chat' keeps today's scheduled chat
+ * sessions, 'work' launches an isolated Work task instead, optionally under
+ * a named Work policy. Runs record the task they created.
+ */
+export declare const POSTGRES_AUTOMATION_WORK_TARGET_SQL = "ALTER TABLE automations ADD COLUMN target text NOT NULL DEFAULT 'chat' CHECK (target IN ('chat', 'work'));\nALTER TABLE automations ADD COLUMN work_policy_id text;\nALTER TABLE automation_runs ADD COLUMN work_task_id text;";
+export declare const POSTGRES_AUTOMATION_WORK_TARGET_MIGRATION: PostgresMigration;
+//# sourceMappingURL=postgresAutomationWorkTargetMigration.d.ts.map

package/backend/dist/persistence/postgresAutomationWorkTargetMigration.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"postgresAutomationWorkTargetMigration.d.ts","sourceRoot":"","sources":["../../src/persistence/postgresAutomationWorkTargetMigration.ts"],"names":[],"mappings":"AAkBA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,6BAA6B,CAAC;AAErE;;;;GAIG;AAIH,eAAO,MAAM,mCAAmC,mOAEU,CAAC;AAK3D,eAAO,MAAM,yCAAyC,EAAE,iBAcpD,CAAC"}

package/backend/dist/persistence/postgresAutomationWorkTargetMigration.js

@@ -0,0 +1,44 @@
+/*
+ * Libre WebUI
+ * Copyright (C) 2025 Kroonen AI, Inc.
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at:
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+import { createHash } from 'node:crypto';
+/**
+ * Automations gain a run target: 'chat' keeps today's scheduled chat
+ * sessions, 'work' launches an isolated Work task instead, optionally under
+ * a named Work policy. Runs record the task they created.
+ */
+// CHECK expressions use the exact form PostgreSQL reconstructs in
+// pg_get_constraintdef, so the schema inspector's declared and actual
+// constraint texts normalize identically.
+export const POSTGRES_AUTOMATION_WORK_TARGET_SQL = `ALTER TABLE automations ADD COLUMN target text NOT NULL DEFAULT 'chat' CHECK (target IN ('chat', 'work'));
+ALTER TABLE automations ADD COLUMN work_policy_id text;
+ALTER TABLE automation_runs ADD COLUMN work_task_id text;`;
+const version = 21;
+const name = 'automation-work-target';
+export const POSTGRES_AUTOMATION_WORK_TARGET_MIGRATION = Object.freeze({
+    version,
+    name,
+    checksum: createHash('sha256')
+        .update(`${version}\n${name}\n${POSTGRES_AUTOMATION_WORK_TARGET_SQL}`)
+        .digest('hex'),
+    sql: POSTGRES_AUTOMATION_WORK_TARGET_SQL,
+    rollbackPlan: 'ALTER TABLE automations DROP COLUMN target, DROP COLUMN ' +
+        'work_policy_id; ALTER TABLE automation_runs DROP COLUMN ' +
+        'work_task_id; delete ledger row 21. Every automation reverts to ' +
+        'running as a scheduled chat session.',
+    minimumCompatibleVersion: 21,
+});
+//# sourceMappingURL=postgresAutomationWorkTargetMigration.js.map

package/backend/dist/persistence/postgresAutomationWorkTargetMigration.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"postgresAutomationWorkTargetMigration.js","sourceRoot":"","sources":["../../src/persistence/postgresAutomationWorkTargetMigration.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAGzC;;;;GAIG;AACH,kEAAkE;AAClE,sEAAsE;AACtE,0CAA0C;AAC1C,MAAM,CAAC,MAAM,mCAAmC,GAAG;;0DAEO,CAAC;AAE3D,MAAM,OAAO,GAAG,EAAE,CAAC;AACnB,MAAM,IAAI,GAAG,wBAAwB,CAAC;AAEtC,MAAM,CAAC,MAAM,yCAAyC,GACpD,MAAM,CAAC,MAAM,CAAC;IACZ,OAAO;IACP,IAAI;IACJ,QAAQ,EAAE,UAAU,CAAC,QAAQ,CAAC;SAC3B,MAAM,CAAC,GAAG,OAAO,KAAK,IAAI,KAAK,mCAAmC,EAAE,CAAC;SACrE,MAAM,CAAC,KAAK,CAAC;IAChB,GAAG,EAAE,mCAAmC;IACxC,YAAY,EACV,0DAA0D;QAC1D,0DAA0D;QAC1D,kEAAkE;QAClE,sCAAsC;IACxC,wBAAwB,EAAE,EAAE;CAC7B,CAAC,CAAC"}

package/backend/dist/persistence/postgresMfaPushRecoveryMigration.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"postgresMfaPushRecoveryMigration.d.ts","sourceRoot":"","sources":["../../src/persistence/postgresMfaPushRecoveryMigration.ts"],"names":[],"mappings":"AAkBA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,6BAA6B,CAAC;AAErE;;;;GAIG;AAIH,eAAO,MAAM,8BAA8B,ywDAgET,CAAC;AAKnC,eAAO,MAAM,oCAAoC,EAAE,iBAe/C,CAAC"}
+{"version":3,"file":"postgresMfaPushRecoveryMigration.d.ts","sourceRoot":"","sources":["../../src/persistence/postgresMfaPushRecoveryMigration.ts"],"names":[],"mappings":"AAiBA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,6BAA6B,CAAC;AAErE;;;;GAIG;AAIH,eAAO,MAAM,8BAA8B,ywDAgET,CAAC;AASnC,eAAO,MAAM,oCAAoC,EAAE,iBAa/C,CAAC"}

package/backend/dist/persistence/postgresMfaPushRecoveryMigration.js

@@ -14,7 +14,6 @@
  * See the License for the specific language governing permissions and
  * limitations under the License.
  */
-import { createHash } from 'node:crypto';
 /**
  * Account-security and client-delivery schema: TOTP multi-factor state with
  * one-time recovery codes, WebAuthn passkey credentials, browser Web Push
@@ -90,12 +89,13 @@ CREATE INDEX idx_recovery_drills_started
   ON recovery_drills(started_at);`;
 const version = 20;
 const name = 'mfa-push-recovery';
+// Frozen integrity checksum of `${version}\n${name}\n${SQL}`. This migration is
+// already released, so changing its DDL must fail registry validation.
+const checksum = '91906a765da28e48e7d1e2d82a230f76ab06fe934a12f8cc06658ffd75671e23';
 export const POSTGRES_MFA_PUSH_RECOVERY_MIGRATION = Object.freeze({
     version,
     name,
-    checksum: createHash('sha256')
-        .update(`${version}\n${name}\n${POSTGRES_MFA_PUSH_RECOVERY_SQL}`)
-        .digest('hex'),
+    checksum,
     sql: POSTGRES_MFA_PUSH_RECOVERY_SQL,
     rollbackPlan: 'DROP TABLE recovery_drills, push_subscriptions, ' +
         'webauthn_credentials, mfa_recovery_codes, user_mfa; delete ledger ' +

package/backend/dist/persistence/postgresMfaPushRecoveryMigration.js.map

@@ -1 +1 @@
-{"version":3,"file":"postgresMfaPushRecoveryMigration.js","sourceRoot":"","sources":["../../src/persistence/postgresMfaPushRecoveryMigration.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAGzC;;;;GAIG;AACH,kEAAkE;AAClE,sEAAsE;AACtE,0CAA0C;AAC1C,MAAM,CAAC,MAAM,8BAA8B,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;kCAgEZ,CAAC;AAEnC,MAAM,OAAO,GAAG,EAAE,CAAC;AACnB,MAAM,IAAI,GAAG,mBAAmB,CAAC;AAEjC,MAAM,CAAC,MAAM,oCAAoC,GAC/C,MAAM,CAAC,MAAM,CAAC;IACZ,OAAO;IACP,IAAI;IACJ,QAAQ,EAAE,UAAU,CAAC,QAAQ,CAAC;SAC3B,MAAM,CAAC,GAAG,OAAO,KAAK,IAAI,KAAK,8BAA8B,EAAE,CAAC;SAChE,MAAM,CAAC,KAAK,CAAC;IAChB,GAAG,EAAE,8BAA8B;IACnC,YAAY,EACV,kDAAkD;QAClD,oEAAoE;QACpE,oEAAoE;QACpE,oEAAoE;QACpE,WAAW;IACb,wBAAwB,EAAE,EAAE;CAC7B,CAAC,CAAC"}
+{"version":3,"file":"postgresMfaPushRecoveryMigration.js","sourceRoot":"","sources":["../../src/persistence/postgresMfaPushRecoveryMigration.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAIH;;;;GAIG;AACH,kEAAkE;AAClE,sEAAsE;AACtE,0CAA0C;AAC1C,MAAM,CAAC,MAAM,8BAA8B,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;kCAgEZ,CAAC;AAEnC,MAAM,OAAO,GAAG,EAAE,CAAC;AACnB,MAAM,IAAI,GAAG,mBAAmB,CAAC;AACjC,gFAAgF;AAChF,uEAAuE;AACvE,MAAM,QAAQ,GACZ,kEAAkE,CAAC;AAErE,MAAM,CAAC,MAAM,oCAAoC,GAC/C,MAAM,CAAC,MAAM,CAAC;IACZ,OAAO;IACP,IAAI;IACJ,QAAQ;IACR,GAAG,EAAE,8BAA8B;IACnC,YAAY,EACV,kDAAkD;QAClD,oEAAoE;QACpE,oEAAoE;QACpE,oEAAoE;QACpE,WAAW;IACb,wBAAwB,EAAE,EAAE;CAC7B,CAAC,CAAC"}

package/backend/dist/persistence/postgresMigrationRegistry.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"postgresMigrationRegistry.d.ts","sourceRoot":"","sources":["../../src/persistence/postgresMigrationRegistry.ts"],"names":[],"mappings":"AA4BA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,6BAA6B,CAAC;AAGrE,+EAA+E;AAC/E,eAAO,MAAM,mBAAmB,EAAE,SAAS,iBAAiB,EA0BzD,CAAC"}
+{"version":3,"file":"postgresMigrationRegistry.d.ts","sourceRoot":"","sources":["../../src/persistence/postgresMigrationRegistry.ts"],"names":[],"mappings":"AA+BA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,6BAA6B,CAAC;AAGrE,+EAA+E;AAC/E,eAAO,MAAM,mBAAmB,EAAE,SAAS,iBAAiB,EA6BzD,CAAC"}

package/backend/dist/persistence/postgresMigrationRegistry.js

@@ -22,6 +22,9 @@ import { POSTGRES_NOTES_V2_MIGRATION } from './postgresNotesV2Migration.js';
 import { POSTGRES_TEAM_COLLABORATION_MIGRATION } from './postgresTeamCollaborationMigration.js';
 import { POSTGRES_MEDIA_ENTERPRISE_OPS_MIGRATION } from './postgresMediaEnterpriseOpsMigration.js';
 import { POSTGRES_MFA_PUSH_RECOVERY_MIGRATION } from './postgresMfaPushRecoveryMigration.js';
+import { POSTGRES_AUTOMATION_WORK_TARGET_MIGRATION } from './postgresAutomationWorkTargetMigration.js';
+import { POSTGRES_WORK_COMPUTER_MIGRATION } from './postgresWorkComputerMigration.js';
+import { POSTGRES_WORK_TAKEOVER_MIGRATION } from './postgresWorkTakeoverMigration.js';
 import { validatePostgresMigrationRegistry } from './postgresMigrations.js';
 /** Ordered, immutable schema contract consumed by every PostgreSQL replica. */
 export const POSTGRES_MIGRATIONS = validatePostgresMigrationRegistry(Object.freeze([
@@ -45,5 +48,8 @@ export const POSTGRES_MIGRATIONS = validatePostgresMigrationRegistry(Object.free
     POSTGRES_TEAM_COLLABORATION_MIGRATION,
     POSTGRES_MEDIA_ENTERPRISE_OPS_MIGRATION,
     POSTGRES_MFA_PUSH_RECOVERY_MIGRATION,
+    POSTGRES_AUTOMATION_WORK_TARGET_MIGRATION,
+    POSTGRES_WORK_COMPUTER_MIGRATION,
+    POSTGRES_WORK_TAKEOVER_MIGRATION,
 ].map(migration => Object.freeze({ ...migration }))));
 //# sourceMappingURL=postgresMigrationRegistry.js.map

package/backend/dist/persistence/postgresMigrationRegistry.js.map

@@ -1 +1 @@
-{"version":3,"file":"postgresMigrationRegistry.js","sourceRoot":"","sources":["../../src/persistence/postgresMigrationRegistry.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,sCAAsC,EAAE,MAAM,iDAAiD,CAAC;AACzG,OAAO,EAAE,4CAA4C,EAAE,MAAM,8DAA8D,CAAC;AAC5H,OAAO,EAAE,6CAA6C,EAAE,MAAM,8DAA8D,CAAC;AAC7H,OAAO,EACL,uBAAuB,EACvB,yBAAyB,GAC1B,MAAM,+CAA+C,CAAC;AACvD,OAAO,EAAE,8CAA8C,EAAE,MAAM,mEAAmE,CAAC;AACnI,OAAO,EAAE,mCAAmC,EAAE,MAAM,sDAAsD,CAAC;AAC3G,OAAO,EAAE,iCAAiC,EAAE,MAAM,+DAA+D,CAAC;AAClH,OAAO,EAAE,uCAAuC,EAAE,MAAM,oEAAoE,CAAC;AAC7H,OAAO,EAAE,uBAAuB,EAAE,MAAM,4BAA4B,CAAC;AACrE,OAAO,EAAE,4BAA4B,EAAE,MAAM,iCAAiC,CAAC;AAC/E,OAAO,EAAE,oCAAoC,EAAE,MAAM,wCAAwC,CAAC;AAC9F,OAAO,EAAE,mCAAmC,EAAE,MAAM,uCAAuC,CAAC;AAC5F,OAAO,EAAE,uCAAuC,EAAE,MAAM,2CAA2C,CAAC;AACpG,OAAO,EAAE,mCAAmC,EAAE,MAAM,uCAAuC,CAAC;AAC5F,OAAO,EAAE,8BAA8B,EAAE,MAAM,kCAAkC,CAAC;AAClF,OAAO,EAAE,2BAA2B,EAAE,MAAM,+BAA+B,CAAC;AAC5E,OAAO,EAAE,qCAAqC,EAAE,MAAM,yCAAyC,CAAC;AAChG,OAAO,EAAE,uCAAuC,EAAE,MAAM,0CAA0C,CAAC;AACnG,OAAO,EAAE,oCAAoC,EAAE,MAAM,uCAAuC,CAAC;AAE7F,OAAO,EAAE,iCAAiC,EAAE,MAAM,yBAAyB,CAAC;AAE5E,+EAA+E;AAC/E,MAAM,CAAC,MAAM,mBAAmB,GAC9B,iCAAiC,CAC/B,MAAM,CAAC,MAAM,CACX;IACE,uBAAuB;IACvB,uBAAuB;IACvB,yBAAyB;IACzB,sCAAsC;IACtC,4BAA4B;IAC5B,mCAAmC;IACnC,oCAAoC;IACpC,iCAAiC;IACjC,4CAA4C;IAC5C,8CAA8C;IAC9C,uCAAuC;IACvC,6CAA6C;IAC7C,mCAAmC;IACnC,uCAAuC;IACvC,mCAAmC;IACnC,8BAA8B;IAC9B,2BAA2B;IAC3B,qCAAqC;IACrC,uCAAuC;IACvC,oCAAoC;CACrC,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,SAAS,EAAE,CAAC,CAAC,CACpD,CACF,CAAC"}
+{"version":3,"file":"postgresMigrationRegistry.js","sourceRoot":"","sources":["../../src/persistence/postgresMigrationRegistry.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,sCAAsC,EAAE,MAAM,iDAAiD,CAAC;AACzG,OAAO,EAAE,4CAA4C,EAAE,MAAM,8DAA8D,CAAC;AAC5H,OAAO,EAAE,6CAA6C,EAAE,MAAM,8DAA8D,CAAC;AAC7H,OAAO,EACL,uBAAuB,EACvB,yBAAyB,GAC1B,MAAM,+CAA+C,CAAC;AACvD,OAAO,EAAE,8CAA8C,EAAE,MAAM,mEAAmE,CAAC;AACnI,OAAO,EAAE,mCAAmC,EAAE,MAAM,sDAAsD,CAAC;AAC3G,OAAO,EAAE,iCAAiC,EAAE,MAAM,+DAA+D,CAAC;AAClH,OAAO,EAAE,uCAAuC,EAAE,MAAM,oEAAoE,CAAC;AAC7H,OAAO,EAAE,uBAAuB,EAAE,MAAM,4BAA4B,CAAC;AACrE,OAAO,EAAE,4BAA4B,EAAE,MAAM,iCAAiC,CAAC;AAC/E,OAAO,EAAE,oCAAoC,EAAE,MAAM,wCAAwC,CAAC;AAC9F,OAAO,EAAE,mCAAmC,EAAE,MAAM,uCAAuC,CAAC;AAC5F,OAAO,EAAE,uCAAuC,EAAE,MAAM,2CAA2C,CAAC;AACpG,OAAO,EAAE,mCAAmC,EAAE,MAAM,uCAAuC,CAAC;AAC5F,OAAO,EAAE,8BAA8B,EAAE,MAAM,kCAAkC,CAAC;AAClF,OAAO,EAAE,2BAA2B,EAAE,MAAM,+BAA+B,CAAC;AAC5E,OAAO,EAAE,qCAAqC,EAAE,MAAM,yCAAyC,CAAC;AAChG,OAAO,EAAE,uCAAuC,EAAE,MAAM,0CAA0C,CAAC;AACnG,OAAO,EAAE,oCAAoC,EAAE,MAAM,uCAAuC,CAAC;AAC7F,OAAO,EAAE,yCAAyC,EAAE,MAAM,4CAA4C,CAAC;AACvG,OAAO,EAAE,gCAAgC,EAAE,MAAM,oCAAoC,CAAC;AACtF,OAAO,EAAE,gCAAgC,EAAE,MAAM,oCAAoC,CAAC;AAEtF,OAAO,EAAE,iCAAiC,EAAE,MAAM,yBAAyB,CAAC;AAE5E,+EAA+E;AAC/E,MAAM,CAAC,MAAM,mBAAmB,GAC9B,iCAAiC,CAC/B,MAAM,CAAC,MAAM,CACX;IACE,uBAAuB;IACvB,uBAAuB;IACvB,yBAAyB;IACzB,sCAAsC;IACtC,4BAA4B;IAC5B,mCAAmC;IACnC,oCAAoC;IACpC,iCAAiC;IACjC,4CAA4C;IAC5C,8CAA8C;IAC9C,uCAAuC;IACvC,6CAA6C;IAC7C,mCAAmC;IACnC,uCAAuC;IACvC,mCAAmC;IACnC,8BAA8B;IAC9B,2BAA2B;IAC3B,qCAAqC;IACrC,uCAAuC;IACvC,oCAAoC;IACpC,yCAAyC;IACzC,gCAAgC;IAChC,gCAAgC;CACjC,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,SAAS,EAAE,CAAC,CAAC,CACpD,CACF,CAAC"}

package/backend/dist/persistence/postgresResourceRepositories.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"postgresResourceRepositories.d.ts","sourceRoot":"","sources":["../../src/persistence/postgresResourceRepositories.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EAAE,UAAU,EAAkB,MAAM,IAAI,CAAC;AAErD,OAAO,KAAK,EACV,+BAA+B,EAyEhC,MAAM,oBAAoB,CAAC;AAM5B,OAAO,KAAK,EACV,gBAAgB,EAEjB,MAAM,uBAAuB,CAAC;AAyyI/B,eAAO,MAAM,kCAAkC,aACnC,gBAAgB,KACzB,+BA+BD,CAAC;AAEH,4EAA4E;AAC5E,eAAO,MAAM,+CAA+C,aAChD,gBAAgB,UAClB,UAAU,KACjB,+BAOF,CAAC"}
+{"version":3,"file":"postgresResourceRepositories.d.ts","sourceRoot":"","sources":["../../src/persistence/postgresResourceRepositories.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EAAE,UAAU,EAAkB,MAAM,IAAI,CAAC;AAErD,OAAO,KAAK,EACV,+BAA+B,EAyEhC,MAAM,oBAAoB,CAAC;AAM5B,OAAO,KAAK,EACV,gBAAgB,EAEjB,MAAM,uBAAuB,CAAC;AAo0I/B,eAAO,MAAM,kCAAkC,aACnC,gBAAgB,KACzB,+BA+BD,CAAC;AAEH,4EAA4E;AAC5E,eAAO,MAAM,+CAA+C,aAChD,gBAAgB,UAClB,UAAU,KACjB,+BAOF,CAAC"}

package/backend/dist/persistence/postgresResourceRepositories.js

@@ -1426,8 +1426,10 @@ class PostgresAutomationRepository {
             }
             const result = await client.query(`INSERT INTO automations
            (id, user_id, name, instructions, triggers, provider, model,
-            notify, status, next_run_at, last_run_at, created_at, updated_at)
-         VALUES ($1, $2, $3, $4, $5, $6, $7, $8, $9, $10, $11, $12, $13)
+            notify, status, target, work_policy_id, next_run_at,
+            last_run_at, created_at, updated_at)
+         VALUES ($1, $2, $3, $4, $5, $6, $7, $8, $9, $10, $11, $12, $13,
+                 $14, $15)
          ON CONFLICT (id) DO UPDATE SET
            name = EXCLUDED.name,
            instructions = EXCLUDED.instructions,
@@ -1436,6 +1438,8 @@ class PostgresAutomationRepository {
            model = EXCLUDED.model,
            notify = EXCLUDED.notify,
            status = EXCLUDED.status,
+           target = EXCLUDED.target,
+           work_policy_id = EXCLUDED.work_policy_id,
            next_run_at = EXCLUDED.next_run_at,
            last_run_at = EXCLUDED.last_run_at,
            updated_at = EXCLUDED.updated_at
@@ -1449,6 +1453,8 @@ class PostgresAutomationRepository {
                 value.model,
                 value.notify,
                 value.status,
+                value.target,
+                value.work_policy_id,
                 value.next_run_at,
                 value.last_run_at,
                 value.created_at,
@@ -1488,8 +1494,9 @@ class PostgresAutomationRunRepository {
     async insert(run) {
         await this.database.query(`INSERT INTO automation_runs
          (id, automation_id, user_id, scheduled_for, started_at, finished_at,
-          status, session_id, assistant_message_id, error, seen_at, created_at)
-       VALUES ($1, $2, $3, $4, $5, $6, $7, $8, $9, $10, $11, $12)`, [
+          status, session_id, assistant_message_id, work_task_id, error,
+          seen_at, created_at)
+       VALUES ($1, $2, $3, $4, $5, $6, $7, $8, $9, $10, $11, $12, $13)`, [
             run.id,
             run.automation_id,
             run.user_id,
@@ -1499,6 +1506,7 @@ class PostgresAutomationRunRepository {
             run.status,
             run.session_id,
             run.assistant_message_id,
+            run.work_task_id,
             run.error,
             run.seen_at,
             run.created_at,
@@ -1543,6 +1551,11 @@ class PostgresAutomationRunRepository {
                   status = 'running'
               WHERE id = $4 AND status = 'queued'`, [sessionId, assistantMessageId, startedAt, runId])).rowCount) > 0);
     }
+    async markStartedWork(runId, workTaskId, startedAt) {
+        return (changes((await this.database.query(`UPDATE automation_runs
+              SET work_task_id = $1, started_at = $2, status = 'running'
+              WHERE id = $3 AND status = 'queued'`, [workTaskId, startedAt, runId])).rowCount) > 0);
+    }
     async finalize(runId, status, finishedAt, error) {
         return (changes((await this.database.query(`UPDATE automation_runs
               SET status = $1, finished_at = $2, error = $3