libre-webui 0.36.0 → 0.37.1

package/README.md

@@ -310,6 +310,62 @@ HTTP, web search, MCP, memory, approvals, and schedules.
 - [Installed agent CLIs](https://docs.librewebui.org/AGENT_CLI_MODELS)
 - [Libre Claw integration](https://docs.librewebui.org/LIBRE_CLAW_INTEGRATION)
 
+## Cordis bridge
+
+The optional Cordis bridge embeds the
+[DeepSeek Harness](https://github.com/deepseek-ai/deepseek-harness) engine inside
+Libre WebUI's backend. The engine runs as a plugin tree in a
+[Cordis](https://github.com/cordiverse/cordis) runtime that Libre WebUI hosts, so
+its sessions, agents, and tools arrive as Cordis services rather than as
+imported modules.
+
+> **Privacy warning for external DSH:** Upstream `dsh-base` profiles enable
+> session-log and plugin-inventory sharing by default, plus feedback-triggered
+> session exports that can include tool output and earlier context. LWUI's
+> embedded composition omits these uploaders. Before connecting a separate DSH
+> instance, follow the [complete opt-out instructions](docs/65-CORDIS_CONFIGURATION.md#privacy-and-telemetry).
+
+The engine is off by default. An administrator enables it in **Settings → User
+Management → Access & policies → Cordis Engine**; the change takes effect
+immediately, with no restart.
+
+The engine still needs a composition, so configure one once:
+
+```bash
+cd backend
+cp cordis.patch.example.yml cordis.patch.yml
+cp cordis.config.example.yml cordis.config.yml
+```
+
+Because the engine is a plugin tree rather than an import, operators can:
+
+- **Retarget the model provider** by editing YAML — Ollama, an
+  OpenAI-compatible gateway, or the first-party DeepSeek adapter.
+- **Swap the model adapter at runtime** by reloading one plugin row, without
+  restarting Libre WebUI or losing the session store, tool registry, or agents.
+- **Remove the engine cleanly** by disposing the tree, which withdraws its
+  services, releases its listeners, and disposes the agents it created.
+
+Once enabled, administrators can use the **Cordis Engine** page for persistent
+engine sessions and select **DeepSeek Harness** in Chat (with Agent CLI models also
+enabled). In Work, select **DeepSeek Harness** in the **Engine** control to run its agent loop
+through Work's existing container runtime, approval gates, and durable records.
+Normal provider models remain available.
+
+The host Engine is a shared administrator console for single-replica solo
+installations. Its shipped filesystem tools are confined to the configured
+workspace and use DSH's mutation policies. Work uses a separate in-memory DSH
+composition with no host filesystem tools. Review the security notes before
+enabling either surface.
+
+```bash
+curl -s http://127.0.0.1:3001/api/cordis/health | jq
+```
+
+- [Cordis bridge architecture](https://docs.librewebui.org/CORDIS_BRIDGE)
+- [Cordis configuration reference](https://docs.librewebui.org/CORDIS_CONFIGURATION)
+- [Writing Cordis plugins](https://docs.librewebui.org/CORDIS_PLUGIN_AUTHORING)
+
 ## Deployment options
 
 | Deployment          | Command or link                                                         | Use case                                 |
@@ -349,6 +405,9 @@ See the [deployment documentation](https://docs.librewebui.org) for details.
 - [Calendar](https://docs.librewebui.org/CALENDAR)
 - [Public API](https://docs.librewebui.org/PUBLIC_API)
 - [Plugin architecture](https://docs.librewebui.org/PLUGIN_ARCHITECTURE)
+- [Cordis bridge](https://docs.librewebui.org/CORDIS_BRIDGE)
+- [Cordis configuration](https://docs.librewebui.org/CORDIS_CONFIGURATION)
+- [Writing Cordis plugins](https://docs.librewebui.org/CORDIS_PLUGIN_AUTHORING)
 - [Capability contracts](https://docs.librewebui.org/CAPABILITY_CONTRACTS)
 - [Authentication](https://docs.librewebui.org/AUTHENTICATION)
 - [Data portability](https://docs.librewebui.org/DATA_PORTABILITY)

package/backend/dist/cordis/contracts.d.ts

@@ -0,0 +1,270 @@
+/**
+ * Transport- and implementation-neutral contracts for the embedded DSH engine.
+ *
+ * Everything Libre WebUI consumes from the DSH engine crosses this file. The
+ * route layer, the WebSocket bridge, and the frontend client all program
+ * against these shapes, and the `dsh-engine` Cordis plugin is what satisfies
+ * them. No Libre WebUI module outside `src/cordis/dsh/` may import a concrete
+ * `@deepseek-ai/dsh-*` package: that restriction is what makes the engine
+ * hot-swappable and what keeps the Cordis bridge a genuine seam rather than a
+ * direct dependency in disguise.
+ *
+ * @module cordis/contracts
+ */
+/** Stable Cordis service name under which the engine contract is published. */
+export declare const DSH_ENGINE_SERVICE: 'libreDshEngine';
+/** Lifecycle phase of one engine service, mirroring Cordis fiber states. */
+export type EngineServiceState = 
+/** The providing plugin has not been mounted yet. */
+'pending'
+/** The providing plugin is mounted and the service is usable. */
+ | 'ready'
+/** The providing plugin is mounted but cannot serve requests. */
+ | 'failed';
+/** One engine service as observed through the contract. */
+export interface EngineServiceStatus {
+    /** Service name as registered on the Cordis context. */
+    readonly name: string;
+    /** Current lifecycle phase. */
+    readonly state: EngineServiceState;
+    /** Human-readable reason, present only when `state` is `failed`. */
+    readonly detail?: string;
+}
+/** Role of one message projected from an engine session log. */
+export type EngineMessageRole = 'user' | 'assistant' | 'system' | 'tool' | 'unknown';
+/** One message projected from an engine session log. */
+export interface EngineMessage {
+    /** Engine-assigned identifier, stable within a session. */
+    readonly id: string;
+    /** Projected author role. */
+    readonly role: EngineMessageRole;
+    /** Flattened text content; empty when the message carried none. */
+    readonly text: string;
+    /** Reasoning exposed by the provider, kept separate from the answer. */
+    readonly reasoning?: string;
+    /** Distinguishes human input from harness-injected runtime context. */
+    readonly source?: 'user' | 'model' | 'system' | 'context' | 'tool';
+    readonly toolCalls?: readonly EngineToolCall[];
+    readonly toolResults?: readonly EngineToolResult[];
+    /** Engine sequence number of the originating event, when known. */
+    readonly seq?: number;
+}
+/** One structured model-requested operation. */
+export interface EngineToolCall {
+    readonly callId: string;
+    readonly name: string;
+    readonly arguments: string;
+}
+/** One structured operation result. */
+export interface EngineToolResult {
+    readonly callId: string;
+    readonly name?: string;
+    readonly output: string;
+    readonly isError: boolean;
+}
+export type EnginePermissionMode = 'read-only' | 'workspace-write';
+export interface EngineSessionSettings {
+    readonly model?: string;
+    readonly permissionMode: EnginePermissionMode;
+}
+export interface EngineApproval {
+    readonly id: string;
+    readonly sessionId: string;
+    readonly callId?: string;
+    readonly toolName: string;
+    readonly reason?: string;
+}
+export type EngineApprovalOutcome = 'allowed-once' | 'rejected' | 'cancelled' | 'unavailable';
+/** Summary of one engine session. */
+export interface EngineSessionSummary {
+    /** Opaque session identifier used by every other session operation. */
+    readonly id: string;
+    /** Engine-supplied title, absent until one is generated. */
+    readonly title?: string;
+    /** Epoch milliseconds when the session was created, when known. */
+    readonly createdAt?: number;
+    /** Number of events currently recorded for the session. */
+    readonly eventCount: number;
+    /** Canonical working directory recorded for this session. */
+    readonly workspacePath?: string;
+}
+/** A live or restored engine session. */
+export interface EngineSession extends EngineSessionSummary {
+    readonly active: boolean;
+    readonly settings: EngineSessionSettings;
+    readonly capabilities: {
+        readonly permissions: boolean;
+        readonly approvals: boolean;
+    };
+    readonly approvals: readonly EngineApproval[];
+    /** Messages projected from the session log, oldest first. */
+    readonly messages: readonly EngineMessage[];
+}
+/** Identifies one live agent. */
+export interface EngineAgentSummary {
+    /** Agent identifier, equal to its backing session id. */
+    readonly id: string;
+    /** Whether this agent is a runtime root rather than a child of another. */
+    readonly root: boolean;
+}
+/** One tool the engine can expose to a model. */
+export interface EngineToolSummary {
+    /** Model-facing tool name. */
+    readonly name: string;
+    /** Model-facing description, empty when the tool declared none. */
+    readonly description: string;
+}
+/** Options accepted when creating an engine session. */
+export interface EngineCreateSessionOptions {
+    /** Absolute working directory recorded in the session header. */
+    readonly cwd: string;
+    /** A temporary Chat invocation, excluded from the engine console. */
+    readonly transient?: boolean;
+    readonly model?: string;
+    readonly permissionMode?: EnginePermissionMode;
+    /** Authenticated caller used to validate a requested model; never persisted. */
+    readonly userId?: string;
+    /** Optional author-supplied title. */
+    readonly title?: string;
+}
+/** Options accepted when creating an agent bound to a session. */
+export interface EngineCreateAgentOptions {
+    /** Session the agent should operate on. */
+    readonly sessionId: string;
+    /** Absolute working directory recorded in the session header. */
+    readonly cwd: string;
+    /** Provider route name, when the caller wants to pin one. */
+    readonly provider?: string;
+    /** Model identifier, when the caller wants to pin one. */
+    readonly model?: string;
+}
+/** One increment of a streaming agent response. */
+export type EngineStreamChunk = 
+/** Incremental assistant text. */
+{
+    readonly type: 'text';
+    readonly text: string;
+}
+/**
+ * Incremental reasoning the model exposed.
+ *
+ * Separate from `text` because it is not part of the reply: a consumer may
+ * show it, collapse it, or drop it, and mixing it into the answer would make
+ * that choice impossible.
+ */
+ | {
+    readonly type: 'reasoning';
+    readonly text: string;
+}
+/**
+ * The turn failed before producing a reply.
+ *
+ * Carried separately from `done` because the engine reports a structured
+ * failure reason, and collapsing it into a terminal status would leave a
+ * caller with "the turn ended" and no way to say why.
+ */
+ | {
+    readonly type: 'error';
+    readonly message: string;
+    readonly code?: string;
+}
+/** A tool call the agent started. */
+ | {
+    readonly type: 'tool-call';
+    readonly callId: string;
+    readonly name: string;
+    readonly arguments?: string;
+}
+/** A tool call that finished, successfully or not. */
+ | {
+    readonly type: 'tool-result';
+    readonly callId: string;
+    readonly name: string;
+    readonly isError: boolean;
+    readonly output?: string;
+} | {
+    readonly type: 'approval-request';
+    readonly approval: EngineApproval;
+} | {
+    readonly type: 'approval-decision';
+    readonly approvalId: string;
+    readonly outcome: EngineApprovalOutcome;
+}
+/** A turn boundary; the terminal chunk of one response. */
+ | {
+    readonly type: 'done';
+    readonly reason: string;
+    readonly interrupted?: boolean;
+};
+/** Subscription handle returned by {@link EngineStreamHandle}. */
+export interface EngineStreamSubscription {
+    /** Stop receiving chunks. Safe to call more than once. */
+    unsubscribe(): void;
+}
+/** Handle over one in-flight streaming response. */
+export interface EngineStreamHandle {
+    /** Session the response belongs to. */
+    readonly sessionId: string;
+    /**
+     * Register a chunk listener.
+     *
+     * Everything the response has already produced is replayed first, so a
+     * listener that attaches after a fast answer still receives it.
+     */
+    subscribe(listener: (chunk: EngineStreamChunk) => void): EngineStreamSubscription;
+    /**
+     * Release this handle's resources.
+     *
+     * Called when a client disconnects, so an abandoned response stops buffering
+     * for a reader that is gone. The turn stays durable: its transcript remains
+     * readable and the next message is not blocked.
+     */
+    close(): void;
+}
+/**
+ * The engine contract published as the `libreDshEngine` Cordis service.
+ *
+ * Every method rejects rather than returning a partial result when the engine
+ * is not ready, so callers never mistake an unmounted engine for an empty one.
+ */
+export interface DshEngine {
+    /** Report the lifecycle state of each engine service. */
+    status(): readonly EngineServiceStatus[];
+    /** Model defaults of the running composition, before per-session choices. */
+    modelConfiguration(): {
+        readonly provider?: string;
+        readonly model?: string;
+    };
+    /** List live and restored sessions, newest first. */
+    listSessions(): Promise<readonly EngineSessionSummary[]>;
+    /** Read one session with its projected messages. */
+    getSession(sessionId: string): Promise<EngineSession | undefined>;
+    /** Create a session. */
+    createSession(options: EngineCreateSessionOptions): Promise<EngineSession>;
+    updateSessionSettings(sessionId: string, settings: Partial<EngineSessionSettings>, options?: {
+        readonly userId?: string;
+    }): Promise<EngineSession>;
+    decideApproval(sessionId: string, approvalId: string, outcome: 'allowed-once' | 'rejected'): Promise<boolean>;
+    /** Delete a session and dispose any agent still bound to it. */
+    deleteSession(sessionId: string): Promise<boolean>;
+    /** List live agents. */
+    listAgents(): Promise<readonly EngineAgentSummary[]>;
+    /** List tools currently registered with the engine. */
+    listTools(): Promise<readonly EngineToolSummary[]>;
+    /**
+     * Send a user message to a session and stream the agent response.
+     *
+     * The returned handle is usable immediately: chunks emitted before the first
+     * subscriber attaches are buffered and replayed to that subscriber, so a
+     * caller can await the HTTP response and then attach without losing text.
+     */
+    sendMessage(sessionId: string, text: string, options?: {
+        readonly cwd?: string;
+        readonly userId?: string;
+    }): Promise<EngineStreamHandle>;
+    /** Authenticated actor attached to the current turn only. */
+    requestUserId(sessionId: string): string | undefined;
+    /** Cancel the in-flight response for a session, if any. */
+    cancel(sessionId: string): Promise<boolean>;
+}
+//# sourceMappingURL=contracts.d.ts.map

package/backend/dist/cordis/contracts.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"contracts.d.ts","sourceRoot":"","sources":["../../src/cordis/contracts.ts"],"names":[],"mappings":"AAiBA;;;;;;;;;;;;GAYG;AAEH,+EAA+E;AAC/E,eAAO,MAAM,kBAAkB,EAAG,gBAAyB,CAAC;AAE5D,4EAA4E;AAC5E,MAAM,MAAM,kBAAkB;AAC5B,qDAAqD;AACnD,SAAS;AACX,iEAAiE;GAC/D,OAAO;AACT,iEAAiE;GAC/D,QAAQ,CAAC;AAEb,2DAA2D;AAC3D,MAAM,WAAW,mBAAmB;IAClC,wDAAwD;IACxD,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,+BAA+B;IAC/B,QAAQ,CAAC,KAAK,EAAE,kBAAkB,CAAC;IACnC,oEAAoE;IACpE,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED,gEAAgE;AAChE,MAAM,MAAM,iBAAiB,GAC3B,MAAM,GAAG,WAAW,GAAG,QAAQ,GAAG,MAAM,GAAG,SAAS,CAAC;AAEvD,wDAAwD;AACxD,MAAM,WAAW,aAAa;IAC5B,2DAA2D;IAC3D,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,6BAA6B;IAC7B,QAAQ,CAAC,IAAI,EAAE,iBAAiB,CAAC;IACjC,mEAAmE;IACnE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,wEAAwE;IACxE,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,uEAAuE;IACvE,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,GAAG,OAAO,GAAG,QAAQ,GAAG,SAAS,GAAG,MAAM,CAAC;IACnE,QAAQ,CAAC,SAAS,CAAC,EAAE,SAAS,cAAc,EAAE,CAAC;IAC/C,QAAQ,CAAC,WAAW,CAAC,EAAE,SAAS,gBAAgB,EAAE,CAAC;IACnD,mEAAmE;IACnE,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC;CACvB;AAED,gDAAgD;AAChD,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;CAC5B;AAED,uCAAuC;AACvC,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;CAC3B;AAED,MAAM,MAAM,oBAAoB,GAAG,WAAW,GAAG,iBAAiB,CAAC;AAEnE,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,cAAc,EAAE,oBAAoB,CAAC;CAC/C;AAED,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED,MAAM,MAAM,qBAAqB,GAC/B,cAAc,GAAG,UAAU,GAAG,WAAW,GAAG,aAAa,CAAC;AAE5D,qCAAqC;AACrC,MAAM,WAAW,oBAAoB;IACnC,uEAAuE;IACvE,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,4DAA4D;IAC5D,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,mEAAmE;IACnE,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,2DAA2D;IAC3D,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,6DAA6D;IAC7D,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;CACjC;AAED,yCAAyC;AACzC,MAAM,WAAW,aAAc,SAAQ,oBAAoB;IACzD,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC;IACzB,QAAQ,CAAC,QAAQ,EAAE,qBAAqB,CAAC;IACzC,QAAQ,CAAC,YAAY,EAAE;QACrB,QAAQ,CAAC,WAAW,EAAE,OAAO,CAAC;QAC9B,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAC;KAC7B,CAAC;IACF,QAAQ,CAAC,SAAS,EAAE,SAAS,cAAc,EAAE,CAAC;IAC9C,6DAA6D;IAC7D,QAAQ,CAAC,QAAQ,EAAE,SAAS,aAAa,EAAE,CAAC;CAC7C;AAED,iCAAiC;AACjC,MAAM,WAAW,kBAAkB;IACjC,yDAAyD;IACzD,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,2EAA2E;IAC3E,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC;CACxB;AAED,iDAAiD;AACjD,MAAM,WAAW,iBAAiB;IAChC,8BAA8B;IAC9B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,mEAAmE;IACnE,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;CAC9B;AAED,wDAAwD;AACxD,MAAM,WAAW,0BAA0B;IACzC,iEAAiE;IACjE,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,qEAAqE;IACrE,QAAQ,CAAC,SAAS,CAAC,EAAE,OAAO,CAAC;IAC7B,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,cAAc,CAAC,EAAE,oBAAoB,CAAC;IAC/C,gFAAgF;IAChF,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,sCAAsC;IACtC,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;CACzB;AAED,kEAAkE;AAClE,MAAM,WAAW,wBAAwB;IACvC,2CAA2C;IAC3C,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,iEAAiE;IACjE,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,6DAA6D;IAC7D,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC3B,0DAA0D;IAC1D,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;CACzB;AAED,mDAAmD;AACnD,MAAM,MAAM,iBAAiB;AAC3B,kCAAkC;AAChC;IAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;CAAE;AAClD;;;;;;GAMG;GACD;IAAE,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;CAAE;AACvD;;;;;;GAMG;GACD;IACE,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC;IACvB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;CACxB;AACH,qCAAqC;GACnC;IACE,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAC;IAC3B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;CAC7B;AACH,sDAAsD;GACpD;IACE,QAAQ,CAAC,IAAI,EAAE,aAAa,CAAC;IAC7B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;CAC1B,GACD;IAAE,QAAQ,CAAC,IAAI,EAAE,kBAAkB,CAAC;IAAC,QAAQ,CAAC,QAAQ,EAAE,cAAc,CAAA;CAAE,GACxE;IACE,QAAQ,CAAC,IAAI,EAAE,mBAAmB,CAAC;IACnC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,OAAO,EAAE,qBAAqB,CAAC;CACzC;AACH,2DAA2D;GACzD;IACE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,WAAW,CAAC,EAAE,OAAO,CAAC;CAChC,CAAC;AAEN,kEAAkE;AAClE,MAAM,WAAW,wBAAwB;IACvC,0DAA0D;IAC1D,WAAW,IAAI,IAAI,CAAC;CACrB;AAED,oDAAoD;AACpD,MAAM,WAAW,kBAAkB;IACjC,uCAAuC;IACvC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B;;;;;OAKG;IACH,SAAS,CACP,QAAQ,EAAE,CAAC,KAAK,EAAE,iBAAiB,KAAK,IAAI,GAC3C,wBAAwB,CAAC;IAC5B;;;;;;OAMG;IACH,KAAK,IAAI,IAAI,CAAC;CACf;AAED;;;;;GAKG;AACH,MAAM,WAAW,SAAS;IACxB,yDAAyD;IACzD,MAAM,IAAI,SAAS,mBAAmB,EAAE,CAAC;IAEzC,6EAA6E;IAC7E,kBAAkB,IAAI;QAAE,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IAE9E,qDAAqD;IACrD,YAAY,IAAI,OAAO,CAAC,SAAS,oBAAoB,EAAE,CAAC,CAAC;IAEzD,oDAAoD;IACpD,UAAU,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,GAAG,SAAS,CAAC,CAAC;IAElE,wBAAwB;IACxB,aAAa,CAAC,OAAO,EAAE,0BAA0B,GAAG,OAAO,CAAC,aAAa,CAAC,CAAC;IAE3E,qBAAqB,CACnB,SAAS,EAAE,MAAM,EACjB,QAAQ,EAAE,OAAO,CAAC,qBAAqB,CAAC,EACxC,OAAO,CAAC,EAAE;QAAE,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,GACrC,OAAO,CAAC,aAAa,CAAC,CAAC;IAE1B,cAAc,CACZ,SAAS,EAAE,MAAM,EACjB,UAAU,EAAE,MAAM,EAClB,OAAO,EAAE,cAAc,GAAG,UAAU,GACnC,OAAO,CAAC,OAAO,CAAC,CAAC;IAEpB,gEAAgE;IAChE,aAAa,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAEnD,wBAAwB;IACxB,UAAU,IAAI,OAAO,CAAC,SAAS,kBAAkB,EAAE,CAAC,CAAC;IAErD,uDAAuD;IACvD,SAAS,IAAI,OAAO,CAAC,SAAS,iBAAiB,EAAE,CAAC,CAAC;IAEnD;;;;;;OAMG;IACH,WAAW,CACT,SAAS,EAAE,MAAM,EACjB,IAAI,EAAE,MAAM,EACZ,OAAO,CAAC,EAAE;QAAE,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,GAC5D,OAAO,CAAC,kBAAkB,CAAC,CAAC;IAE/B,6DAA6D;IAC7D,aAAa,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAAC;IAErD,2DAA2D;IAC3D,MAAM,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;CAC7C"}

package/backend/dist/cordis/contracts.js

@@ -0,0 +1,32 @@
+/*
+ * Libre WebUI
+ * Copyright (C) 2025 Kroonen AI, Inc.
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at:
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+/**
+ * Transport- and implementation-neutral contracts for the embedded DSH engine.
+ *
+ * Everything Libre WebUI consumes from the DSH engine crosses this file. The
+ * route layer, the WebSocket bridge, and the frontend client all program
+ * against these shapes, and the `dsh-engine` Cordis plugin is what satisfies
+ * them. No Libre WebUI module outside `src/cordis/dsh/` may import a concrete
+ * `@deepseek-ai/dsh-*` package: that restriction is what makes the engine
+ * hot-swappable and what keeps the Cordis bridge a genuine seam rather than a
+ * direct dependency in disguise.
+ *
+ * @module cordis/contracts
+ */
+/** Stable Cordis service name under which the engine contract is published. */
+export const DSH_ENGINE_SERVICE = 'libreDshEngine';
+//# sourceMappingURL=contracts.js.map

package/backend/dist/cordis/contracts.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"contracts.js","sourceRoot":"","sources":["../../src/cordis/contracts.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH;;;;;;;;;;;;GAYG;AAEH,+EAA+E;AAC/E,MAAM,CAAC,MAAM,kBAAkB,GAAG,gBAAyB,CAAC"}

package/backend/dist/cordis/dsh/chat-model.d.ts

@@ -0,0 +1,16 @@
+import type { DshEngine } from '../contracts.js';
+import type { BridgeModel } from './librewebui-llm-adapter.js';
+/** Decode only the agent envelope; the provider route stays qualified. */
+export declare function dshProviderModel(selector: string): string | undefined;
+/** Discovery reads configuration but never starts the optional engine. */
+export declare function dshChatModelChoices(userId: string): Promise<readonly BridgeModel[]>;
+/** Validate a saved choice before starting an engine or allocating a session. */
+export declare function resolveDshSelectedModel(selector: string, userId: string): Promise<string | undefined>;
+export declare function requireDshProviderRoute(engine: DshEngine): void;
+/** Titles and summaries use the selected LLM directly, without an agent turn. */
+export declare function resolveDshProviderTarget(selector: string, userId: string): Promise<{
+    model: string;
+    providerType: 'ollama' | 'plugin' | 'dsh';
+    providerId: string | null;
+}>;
+//# sourceMappingURL=chat-model.d.ts.map

package/backend/dist/cordis/dsh/chat-model.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"chat-model.d.ts","sourceRoot":"","sources":["../../../src/cordis/dsh/chat-model.ts"],"names":[],"mappings":"AAiBA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AACjD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,6BAA6B,CAAC;AAiB/D,0EAA0E;AAC1E,wBAAgB,gBAAgB,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAarE;AAaD,0EAA0E;AAC1E,wBAAsB,mBAAmB,CACvC,MAAM,EAAE,MAAM,GACb,OAAO,CAAC,SAAS,WAAW,EAAE,CAAC,CA0BjC;AAED,iFAAiF;AACjF,wBAAsB,uBAAuB,CAC3C,QAAQ,EAAE,MAAM,EAChB,MAAM,EAAE,MAAM,GACb,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAW7B;AAED,wBAAgB,uBAAuB,CAAC,MAAM,EAAE,SAAS,GAAG,IAAI,CAK/D;AAED,iFAAiF;AACjF,wBAAsB,wBAAwB,CAC5C,QAAQ,EAAE,MAAM,EAChB,MAAM,EAAE,MAAM,GACb,OAAO,CAAC;IACT,KAAK,EAAE,MAAM,CAAC;IACd,YAAY,EAAE,QAAQ,GAAG,QAAQ,GAAG,KAAK,CAAC;IAC1C,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;CAC3B,CAAC,CAoBD"}

package/backend/dist/cordis/dsh/chat-model.js

@@ -0,0 +1,104 @@
+/*
+ * Libre WebUI
+ * Copyright (C) 2025 Kroonen AI, Inc.
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at:
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+import { getAgentCliModelsEnabled } from '../../services/agentAccessService.js';
+import { userModel } from '../../models/userModel.js';
+import { readCompositionFile } from '../host/composition.js';
+import { isProviderModelIdentity, parseNativeDshModelId, } from './model-identity.js';
+import { libreWebUiProviderHandler, resolveCordisProviderTarget, resolveEngineDefaultModel, } from './provider-handler.js';
+const DSH_PREFIX = 'dsh:';
+const PROVIDER_ROUTE = 'libre-webui';
+/** Decode only the agent envelope; the provider route stays qualified. */
+export function dshProviderModel(selector) {
+    if (selector === 'dsh')
+        return undefined;
+    const model = selector.startsWith(DSH_PREFIX)
+        ? selector.slice(DSH_PREFIX.length)
+        : '';
+    if (selector.length > 2048 ||
+        (!model.startsWith('lwui:') && !model.startsWith('native:')) ||
+        !isProviderModelIdentity(model)) {
+        throw new Error('Choose a valid DeepSeek Harness provider model.');
+    }
+    return model;
+}
+async function requireDshChatAccess(userId) {
+    const user = await userModel.getUserById(userId);
+    if (user?.role !== 'admin' || user.status !== 'active')
+        throw new Error('DeepSeek Harness requires an active administrator.');
+    if (!(await getAgentCliModelsEnabled()))
+        throw new Error('Agent CLI models are disabled on this server.');
+    const { isCordisBridgeEnabled } = await import('../runtime.js');
+    if (!(await isCordisBridgeEnabled()))
+        throw new Error('The DeepSeek Harness engine is not available.');
+}
+/** Discovery reads configuration but never starts the optional engine. */
+export async function dshChatModelChoices(userId) {
+    await requireDshChatAccess(userId);
+    const { cordisRuntimeConfig } = await import('../runtime.js');
+    const { BRIDGE_ENTRY_ID } = await import('../host/host.js');
+    const config = cordisRuntimeConfig();
+    const row = readCompositionFile(config.configPath).find(entry => entry.id === BRIDGE_ENTRY_ID);
+    if (!row || row.disabled)
+        return [];
+    const rowConfig = row.config && typeof row.config === 'object' && !Array.isArray(row.config)
+        ? row.config
+        : {};
+    // A row pin wins over host defaults, including an unknown !!js expression.
+    // Such compositions keep their base profile rather than advertise a route
+    // that may not be the one their engine will execute.
+    const provider = Object.prototype.hasOwnProperty.call(rowConfig, 'defaultProvider')
+        ? rowConfig.defaultProvider
+        : config.model.provider === 'libre-webui'
+            ? PROVIDER_ROUTE
+            : config.model.route;
+    if (provider !== PROVIDER_ROUTE)
+        return [];
+    return libreWebUiProviderHandler.listModels(userId);
+}
+/** Validate a saved choice before starting an engine or allocating a session. */
+export async function resolveDshSelectedModel(selector, userId) {
+    const model = dshProviderModel(selector);
+    await requireDshChatAccess(userId);
+    if (model &&
+        !(await dshChatModelChoices(userId)).some(candidate => candidate.id === model))
+        throw new Error('The selected DeepSeek Harness model is unavailable.');
+    return model;
+}
+export function requireDshProviderRoute(engine) {
+    if (engine.modelConfiguration().provider !== PROVIDER_ROUTE)
+        throw new Error('This DeepSeek Harness composition does not use Libre WebUI model providers.');
+}
+/** Titles and summaries use the selected LLM directly, without an agent turn. */
+export async function resolveDshProviderTarget(selector, userId) {
+    const selected = await resolveDshSelectedModel(selector, userId);
+    if (selected && parseNativeDshModelId(selected))
+        return resolveCordisProviderTarget(selected, userId);
+    const { getCordisEngine } = await import('../runtime.js');
+    const result = await getCordisEngine();
+    if (!result.ok)
+        throw new Error(`The DeepSeek Harness engine is not available: ${result.reason}`);
+    requireDshProviderRoute(result.engine);
+    const configured = result.engine.modelConfiguration().model;
+    const model = selected ??
+        (isProviderModelIdentity(configured)
+            ? configured
+            : await resolveEngineDefaultModel(userId));
+    if (!model)
+        throw new Error('No DeepSeek Harness provider model is available.');
+    return resolveCordisProviderTarget(model, userId);
+}
+//# sourceMappingURL=chat-model.js.map

package/backend/dist/cordis/dsh/chat-model.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"chat-model.js","sourceRoot":"","sources":["../../../src/cordis/dsh/chat-model.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAIH,OAAO,EAAE,wBAAwB,EAAE,MAAM,sCAAsC,CAAC;AAChF,OAAO,EAAE,SAAS,EAAE,MAAM,2BAA2B,CAAC;AACtD,OAAO,EAAE,mBAAmB,EAAE,MAAM,wBAAwB,CAAC;AAC7D,OAAO,EACL,uBAAuB,EACvB,qBAAqB,GACtB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EACL,yBAAyB,EACzB,2BAA2B,EAC3B,yBAAyB,GAC1B,MAAM,uBAAuB,CAAC;AAE/B,MAAM,UAAU,GAAG,MAAM,CAAC;AAC1B,MAAM,cAAc,GAAG,aAAa,CAAC;AAErC,0EAA0E;AAC1E,MAAM,UAAU,gBAAgB,CAAC,QAAgB;IAC/C,IAAI,QAAQ,KAAK,KAAK;QAAE,OAAO,SAAS,CAAC;IACzC,MAAM,KAAK,GAAG,QAAQ,CAAC,UAAU,CAAC,UAAU,CAAC;QAC3C,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC;QACnC,CAAC,CAAC,EAAE,CAAC;IACP,IACE,QAAQ,CAAC,MAAM,GAAG,IAAI;QACtB,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC;QAC5D,CAAC,uBAAuB,CAAC,KAAK,CAAC,EAC/B,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC;IACrE,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,KAAK,UAAU,oBAAoB,CAAC,MAAc;IAChD,MAAM,IAAI,GAAG,MAAM,SAAS,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;IACjD,IAAI,IAAI,EAAE,IAAI,KAAK,OAAO,IAAI,IAAI,CAAC,MAAM,KAAK,QAAQ;QACpD,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAC;IACxE,IAAI,CAAC,CAAC,MAAM,wBAAwB,EAAE,CAAC;QACrC,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAC;IACnE,MAAM,EAAE,qBAAqB,EAAE,GAAG,MAAM,MAAM,CAAC,eAAe,CAAC,CAAC;IAChE,IAAI,CAAC,CAAC,MAAM,qBAAqB,EAAE,CAAC;QAClC,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAC;AACrE,CAAC;AAED,0EAA0E;AAC1E,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,MAAc;IAEd,MAAM,oBAAoB,CAAC,MAAM,CAAC,CAAC;IACnC,MAAM,EAAE,mBAAmB,EAAE,GAAG,MAAM,MAAM,CAAC,eAAe,CAAC,CAAC;IAC9D,MAAM,EAAE,eAAe,EAAE,GAAG,MAAM,MAAM,CAAC,iBAAiB,CAAC,CAAC;IAC5D,MAAM,MAAM,GAAG,mBAAmB,EAAE,CAAC;IACrC,MAAM,GAAG,GAAG,mBAAmB,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,IAAI,CACrD,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,EAAE,KAAK,eAAe,CACtC,CAAC;IACF,IAAI,CAAC,GAAG,IAAI,GAAG,CAAC,QAAQ;QAAE,OAAO,EAAE,CAAC;IACpC,MAAM,SAAS,GACb,GAAG,CAAC,MAAM,IAAI,OAAO,GAAG,CAAC,MAAM,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC;QACxE,CAAC,CAAE,GAAG,CAAC,MAAkC;QACzC,CAAC,CAAC,EAAE,CAAC;IACT,2EAA2E;IAC3E,0EAA0E;IAC1E,qDAAqD;IACrD,MAAM,QAAQ,GAAG,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CACnD,SAAS,EACT,iBAAiB,CAClB;QACC,CAAC,CAAC,SAAS,CAAC,eAAe;QAC3B,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,KAAK,aAAa;YACvC,CAAC,CAAC,cAAc;YAChB,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC;IACzB,IAAI,QAAQ,KAAK,cAAc;QAAE,OAAO,EAAE,CAAC;IAC3C,OAAO,yBAAyB,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;AACtD,CAAC;AAED,iFAAiF;AACjF,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAC3C,QAAgB,EAChB,MAAc;IAEd,MAAM,KAAK,GAAG,gBAAgB,CAAC,QAAQ,CAAC,CAAC;IACzC,MAAM,oBAAoB,CAAC,MAAM,CAAC,CAAC;IACnC,IACE,KAAK;QACL,CAAC,CAAC,MAAM,mBAAmB,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CACvC,SAAS,CAAC,EAAE,CAAC,SAAS,CAAC,EAAE,KAAK,KAAK,CACpC;QAED,MAAM,IAAI,KAAK,CAAC,qDAAqD,CAAC,CAAC;IACzE,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,UAAU,uBAAuB,CAAC,MAAiB;IACvD,IAAI,MAAM,CAAC,kBAAkB,EAAE,CAAC,QAAQ,KAAK,cAAc;QACzD,MAAM,IAAI,KAAK,CACb,6EAA6E,CAC9E,CAAC;AACN,CAAC;AAED,iFAAiF;AACjF,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAC5C,QAAgB,EAChB,MAAc;IAMd,MAAM,QAAQ,GAAG,MAAM,uBAAuB,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IACjE,IAAI,QAAQ,IAAI,qBAAqB,CAAC,QAAQ,CAAC;QAC7C,OAAO,2BAA2B,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IACvD,MAAM,EAAE,eAAe,EAAE,GAAG,MAAM,MAAM,CAAC,eAAe,CAAC,CAAC;IAC1D,MAAM,MAAM,GAAG,MAAM,eAAe,EAAE,CAAC;IACvC,IAAI,CAAC,MAAM,CAAC,EAAE;QACZ,MAAM,IAAI,KAAK,CACb,iDAAiD,MAAM,CAAC,MAAM,EAAE,CACjE,CAAC;IACJ,uBAAuB,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IACvC,MAAM,UAAU,GAAG,MAAM,CAAC,MAAM,CAAC,kBAAkB,EAAE,CAAC,KAAK,CAAC;IAC5D,MAAM,KAAK,GACT,QAAQ;QACR,CAAC,uBAAuB,CAAC,UAAU,CAAC;YAClC,CAAC,CAAC,UAAU;YACZ,CAAC,CAAC,MAAM,yBAAyB,CAAC,MAAM,CAAC,CAAC,CAAC;IAC/C,IAAI,CAAC,KAAK;QACR,MAAM,IAAI,KAAK,CAAC,kDAAkD,CAAC,CAAC;IACtE,OAAO,2BAA2B,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;AACpD,CAAC"}