libre-webui 0.36.0 → 0.37.1

package/backend/dist/cordis/host/model.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"model.d.ts","sourceRoot":"","sources":["../../../src/cordis/host/model.ts"],"names":[],"mappings":"AAiBA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,KAAK,EAAE,gBAAgB,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC;AAExE;;;;;;GAMG;AACH,eAAO,MAAM,iBAAiB,gBAAgB,CAAC;AAQ/C;;;;;;;;;;;;GAYG;AACH,wBAAgB,uBAAuB,CACrC,MAAM,EAAE,kBAAkB,GACzB,MAAM,GAAG,SAAS,CAEpB;AAED;;;;GAIG;AACH,wBAAgB,uBAAuB,CAAC,MAAM,EAAE,gBAAgB,GAAG,OAAO,CAIzE"}

package/backend/dist/cordis/host/model.js

@@ -0,0 +1,54 @@
+/*
+ * Libre WebUI
+ * Copyright (C) 2025 Kroonen AI, Inc.
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at:
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+/**
+ * Route the engine addresses Libre WebUI's provider layer by.
+ *
+ * The engine must always name a route: an agent with no provider refuses every
+ * turn. In `libre-webui` mode this is the route regardless of what `route`
+ * says, because that field describes a provider package's own route.
+ */
+export const LIBRE_WEBUI_ROUTE = 'libre-webui';
+/** Provider modes that expect a package to be installed. */
+const PACKAGE_MODES = {
+    deepseek: '@deepseek-ai/dsh-llm-deepseek',
+    'pi-ai': '@deepseek-ai/dsh-llm-pi-ai',
+};
+/**
+ * Describe a model configuration the host cannot serve itself.
+ *
+ * The provider packages are not dependencies of this backend: carrying every
+ * provider SDK pulled in a large tree, including deprecated packages for
+ * capabilities the engine never reaches. A deployment that wants one installs
+ * it and mounts it through the composition, so the fix belongs in the message
+ * rather than in a hard dependency.
+ *
+ * @param config - the resolved adapter configuration.
+ * @returns the package that must be installed, or undefined when nothing is
+ *   required beyond the provider layer.
+ */
+export function requiredProviderPackage(config) {
+    return PACKAGE_MODES[config.provider];
+}
+/**
+ * Whether a configuration is served without an extra provider package.
+ * @param config - the resolved host configuration.
+ * @returns true when the host can serve the configured route as it stands.
+ */
+export function isServedByProviderLayer(config) {
+    return (config.model.provider === 'none' || config.model.provider === 'libre-webui');
+}
+//# sourceMappingURL=model.js.map

package/backend/dist/cordis/host/model.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"model.js","sourceRoot":"","sources":["../../../src/cordis/host/model.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAoBH;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAG,aAAa,CAAC;AAE/C,4DAA4D;AAC5D,MAAM,aAAa,GAAqC;IACtD,QAAQ,EAAE,+BAA+B;IACzC,OAAO,EAAE,4BAA4B;CACtC,CAAC;AAEF;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,uBAAuB,CACrC,MAA0B;IAE1B,OAAO,aAAa,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;AACxC,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,uBAAuB,CAAC,MAAwB;IAC9D,OAAO,CACL,MAAM,CAAC,KAAK,CAAC,QAAQ,KAAK,MAAM,IAAI,MAAM,CAAC,KAAK,CAAC,QAAQ,KAAK,aAAa,CAC5E,CAAC;AACJ,CAAC"}

package/backend/dist/cordis/host/privacy.d.ts

@@ -0,0 +1,8 @@
+import type { Context } from '@deepseek-ai/cordis';
+/** Recognize the known uploader packages and their normal module paths. */
+export declare function isDshUploadPackage(specifier: string): boolean;
+/** Check direct host imports as well as imports initiated through the Loader. */
+export declare function assertDshModuleAllowed(specifier: string): void;
+/** Install before mounting any entries, including nested Include trees. */
+export declare function enforceDshPrivacy(context: Context): void;
+//# sourceMappingURL=privacy.d.ts.map

package/backend/dist/cordis/host/privacy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"privacy.d.ts","sourceRoot":"","sources":["../../../src/cordis/host/privacy.ts"],"names":[],"mappings":"AAsBA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,qBAAqB,CAAC;AASnD,2EAA2E;AAC3E,wBAAgB,kBAAkB,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAiB7D;AAED,iFAAiF;AACjF,wBAAgB,sBAAsB,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI,CAM9D;AAcD,2EAA2E;AAC3E,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,OAAO,GAAG,IAAI,CAexD"}

package/backend/dist/cordis/host/privacy.js

@@ -0,0 +1,73 @@
+/*
+ * Libre WebUI
+ * Copyright (C) 2025 Kroonen AI, Inc.
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at:
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+/**
+ * Prevent configured DSH data-upload plugins from activating in LWUI's host.
+ * This guards Loader imports, not arbitrary code inside trusted plugins.
+ */
+import { fileURLToPath } from 'node:url';
+const UPLOAD_PACKAGES = [
+    '@deepseek-ai/dsh-session-telemetry-otel',
+    '@deepseek-ai/dsh-session-log-deepseek',
+    '@deepseek-ai/dsh-plugin-package-inventory-deepseek',
+];
+/** Recognize the known uploader packages and their normal module paths. */
+export function isDshUploadPackage(specifier) {
+    let normalized = specifier;
+    if (specifier.startsWith('file:')) {
+        try {
+            normalized = fileURLToPath(specifier);
+        }
+        catch {
+            // Leave invalid active specifiers to the Loader. Disabled rows are inert.
+            return false;
+        }
+    }
+    normalized = normalized.replace(/\\/g, '/');
+    return UPLOAD_PACKAGES.some(name => normalized === name ||
+        normalized.startsWith(`${name}/`) ||
+        normalized.includes(`/node_modules/${name}/`));
+}
+/** Check direct host imports as well as imports initiated through the Loader. */
+export function assertDshModuleAllowed(specifier) {
+    if (isDshUploadPackage(specifier)) {
+        throw new Error(`Libre WebUI disables DSH data-upload plugin "${specifier}". Set its Loader row to disabled: true.`);
+    }
+}
+function requirePrivateEntry(options, allowDisabled = true) {
+    if (typeof options.name !== 'string' ||
+        (allowDisabled && options.disabled === true && !options.group))
+        return;
+    assertDshModuleAllowed(options.name);
+}
+/** Install before mounting any entries, including nested Include trees. */
+export function enforceDshPrivacy(context) {
+    context.on('loader/entry-init', entry => {
+        // Name changes on active entries import directly from update(), while
+        // refresh() uses init(). Guard both public entry lifecycle methods.
+        const update = entry.update.bind(entry);
+        entry.update = async (options, create, force) => {
+            requirePrivateEntry(create ? options : { ...entry.options, ...options });
+            await update(options, create, force);
+        };
+        const init = entry.init.bind(entry);
+        entry.init = async () => {
+            requirePrivateEntry(entry.options, false);
+            await init();
+        };
+    });
+}
+//# sourceMappingURL=privacy.js.map

package/backend/dist/cordis/host/privacy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"privacy.js","sourceRoot":"","sources":["../../../src/cordis/host/privacy.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH;;;GAGG;AACH,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAIzC,MAAM,eAAe,GAAG;IACtB,yCAAyC;IACzC,uCAAuC;IACvC,oDAAoD;CACrD,CAAC;AAEF,2EAA2E;AAC3E,MAAM,UAAU,kBAAkB,CAAC,SAAiB;IAClD,IAAI,UAAU,GAAG,SAAS,CAAC;IAC3B,IAAI,SAAS,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;QAClC,IAAI,CAAC;YACH,UAAU,GAAG,aAAa,CAAC,SAAS,CAAC,CAAC;QACxC,CAAC;QAAC,MAAM,CAAC;YACP,0EAA0E;YAC1E,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IACD,UAAU,GAAG,UAAU,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;IAC5C,OAAO,eAAe,CAAC,IAAI,CACzB,IAAI,CAAC,EAAE,CACL,UAAU,KAAK,IAAI;QACnB,UAAU,CAAC,UAAU,CAAC,GAAG,IAAI,GAAG,CAAC;QACjC,UAAU,CAAC,QAAQ,CAAC,iBAAiB,IAAI,GAAG,CAAC,CAChD,CAAC;AACJ,CAAC;AAED,iFAAiF;AACjF,MAAM,UAAU,sBAAsB,CAAC,SAAiB;IACtD,IAAI,kBAAkB,CAAC,SAAS,CAAC,EAAE,CAAC;QAClC,MAAM,IAAI,KAAK,CACb,gDAAgD,SAAS,0CAA0C,CACpG,CAAC;IACJ,CAAC;AACH,CAAC;AAED,SAAS,mBAAmB,CAC1B,OAA8B,EAC9B,aAAa,GAAG,IAAI;IAEpB,IACE,OAAO,OAAO,CAAC,IAAI,KAAK,QAAQ;QAChC,CAAC,aAAa,IAAI,OAAO,CAAC,QAAQ,KAAK,IAAI,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC;QAE9D,OAAO;IACT,sBAAsB,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;AACvC,CAAC;AAED,2EAA2E;AAC3E,MAAM,UAAU,iBAAiB,CAAC,OAAgB;IAChD,OAAO,CAAC,EAAE,CAAC,mBAAmB,EAAE,KAAK,CAAC,EAAE;QACtC,sEAAsE;QACtE,oEAAoE;QACpE,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACxC,KAAK,CAAC,MAAM,GAAG,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,EAAE;YAC9C,mBAAmB,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,GAAG,KAAK,CAAC,OAAO,EAAE,GAAG,OAAO,EAAE,CAAC,CAAC;YACzE,MAAM,MAAM,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC;QACvC,CAAC,CAAC;QACF,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACpC,KAAK,CAAC,IAAI,GAAG,KAAK,IAAI,EAAE;YACtB,mBAAmB,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;YAC1C,MAAM,IAAI,EAAE,CAAC;QACf,CAAC,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC"}

package/backend/dist/cordis/index.d.ts

@@ -0,0 +1,14 @@
+/**
+ * Public surface of the Libre WebUI Cordis bridge.
+ *
+ * Route handlers import from here and nowhere deeper: the host, the bridge
+ * plugin, and the contract types are one unit of API so that the internal file
+ * layout stays free to change.
+ *
+ * @module cordis
+ */
+export { DSH_ENGINE_SERVICE, type DshEngine, type EngineAgentSummary, type EngineCreateAgentOptions, type EngineCreateSessionOptions, type EngineMessage, type EngineMessageRole, type EngineServiceState, type EngineServiceStatus, type EngineSession, type EngineSessionSummary, type EngineStreamChunk, type EngineStreamHandle, type EngineStreamSubscription, type EngineToolSummary, } from './contracts.js';
+export { CORDIS_PATCH_FILENAME, readConfigDocument, resolveCordisHostConfig, type CordisHostConfig, type EngineFeatures, type ModelAdapterConfig, type ModelProviderMode, } from './host/config.js';
+export { ENGINE_ENTRY_ID, requiredServices, startCordisHost, type CordisHost, type CordisHostStatus, type RequiredService, } from './host/host.js';
+export { isServedByProviderLayer, requiredProviderPackage, } from './host/model.js';
+//# sourceMappingURL=index.d.ts.map

package/backend/dist/cordis/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/cordis/index.ts"],"names":[],"mappings":"AAiBA;;;;;;;;GAQG;AAEH,OAAO,EACL,kBAAkB,EAClB,KAAK,SAAS,EACd,KAAK,kBAAkB,EACvB,KAAK,wBAAwB,EAC7B,KAAK,0BAA0B,EAC/B,KAAK,aAAa,EAClB,KAAK,iBAAiB,EACtB,KAAK,kBAAkB,EACvB,KAAK,mBAAmB,EACxB,KAAK,aAAa,EAClB,KAAK,oBAAoB,EACzB,KAAK,iBAAiB,EACtB,KAAK,kBAAkB,EACvB,KAAK,wBAAwB,EAC7B,KAAK,iBAAiB,GACvB,MAAM,gBAAgB,CAAC;AAExB,OAAO,EACL,qBAAqB,EACrB,kBAAkB,EAClB,uBAAuB,EACvB,KAAK,gBAAgB,EACrB,KAAK,cAAc,EACnB,KAAK,kBAAkB,EACvB,KAAK,iBAAiB,GACvB,MAAM,kBAAkB,CAAC;AAE1B,OAAO,EACL,eAAe,EACf,gBAAgB,EAChB,eAAe,EACf,KAAK,UAAU,EACf,KAAK,gBAAgB,EACrB,KAAK,eAAe,GACrB,MAAM,gBAAgB,CAAC;AAExB,OAAO,EACL,uBAAuB,EACvB,uBAAuB,GACxB,MAAM,iBAAiB,CAAC"}

package/backend/dist/cordis/index.js

@@ -0,0 +1,30 @@
+/*
+ * Libre WebUI
+ * Copyright (C) 2025 Kroonen AI, Inc.
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at:
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+/**
+ * Public surface of the Libre WebUI Cordis bridge.
+ *
+ * Route handlers import from here and nowhere deeper: the host, the bridge
+ * plugin, and the contract types are one unit of API so that the internal file
+ * layout stays free to change.
+ *
+ * @module cordis
+ */
+export { DSH_ENGINE_SERVICE, } from './contracts.js';
+export { CORDIS_PATCH_FILENAME, readConfigDocument, resolveCordisHostConfig, } from './host/config.js';
+export { ENGINE_ENTRY_ID, requiredServices, startCordisHost, } from './host/host.js';
+export { isServedByProviderLayer, requiredProviderPackage, } from './host/model.js';
+//# sourceMappingURL=index.js.map

package/backend/dist/cordis/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/cordis/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH;;;;;;;;GAQG;AAEH,OAAO,EACL,kBAAkB,GAenB,MAAM,gBAAgB,CAAC;AAExB,OAAO,EACL,qBAAqB,EACrB,kBAAkB,EAClB,uBAAuB,GAKxB,MAAM,kBAAkB,CAAC;AAE1B,OAAO,EACL,eAAe,EACf,gBAAgB,EAChB,eAAe,GAIhB,MAAM,gBAAgB,CAAC;AAExB,OAAO,EACL,uBAAuB,EACvB,uBAAuB,GACxB,MAAM,iBAAiB,CAAC"}

package/backend/dist/cordis/runtime.d.ts

@@ -0,0 +1,97 @@
+/**
+ * Process-wide owner of the Cordis host.
+ *
+ * The host is started lazily rather than during boot: an operator who has not
+ * enabled the bridge must not pay for an engine they do not run, and a failure
+ * inside the engine must not be able to stop Libre WebUI from serving the rest
+ * of its features. Startup therefore happens on first use and reports its own
+ * failure through the route layer, where an operator can see it.
+ *
+ * @module cordis/runtime
+ */
+import type { CordisHost, CordisHostConfig, DshEngine } from './index.js';
+import type { CordisAccessState } from '../services/cordisAccessService.js';
+/** Why the bridge cannot serve a request. */
+export type CordisUnavailableReason = 
+/** The operator has not enabled the bridge. */
+'disabled'
+/** Startup is still in flight. */
+ | 'starting'
+/** Startup failed; `detail` carries the reason. */
+ | 'failed';
+/** Result of asking the runtime for the engine. */
+export type CordisEngineResult = {
+    readonly ok: true;
+    readonly engine: DshEngine;
+} | {
+    readonly ok: false;
+    readonly reason: CordisUnavailableReason;
+    readonly detail?: string;
+};
+/**
+ * Override resolution inputs, for tests and for callers that own their own
+ * paths. Values are merged over the resolved configuration.
+ * @param next - partial configuration overriding resolved values.
+ */
+export declare function configureCordisRuntime(next: Partial<CordisHostConfig> | undefined): void;
+/**
+ * Resolve the configuration this runtime would start with.
+ *
+ * Overridden paths are handed to the resolver rather than only spread over its
+ * result: a caller that owns its own composition and settings paths expects the
+ * *parsed* values to come from those files. Spreading alone would leave
+ * file-derived fields — such as whether the file declared `features.enabled` —
+ * describing whatever document the environment happened to point at.
+ * @returns the fully resolved configuration for this runtime.
+ */
+export declare function cordisRuntimeConfig(): CordisHostConfig;
+/**
+ * Install the provider capability for the engine's adapter row.
+ * @param handler - the handler implementing Libre WebUI's provider layer.
+ */
+export declare function setCordisProviderCapability(handler: unknown): void;
+/**
+ * Whether the engine is offered.
+ *
+ * The administrator's persisted opt-in is the live switch, and
+ * `LIBRE_CORDIS_ENABLED` can pin it. The settings document's
+ * `features.enabled` pins it only when the file states it and no override is in
+ * force: an override is a caller stating the answer, so consulting the file's
+ * lock alongside it would make the seam unusable.
+ * @returns the effective boolean.
+ */
+export declare function isCordisBridgeEnabled(): Promise<boolean>;
+/**
+ * Resolve the effective access state for this runtime.
+ *
+ * The runtime's own resolved configuration is the one that matters: a caller
+ * that supplied overrides expects the decision to describe those paths, and the
+ * settings document's lock is only visible through them.
+ * @returns the decision and whether a deployment-level source pinned it.
+ */
+export declare function cordisAccessState(): Promise<CordisAccessState>;
+/**
+ * Start the host if it is enabled and not already running.
+ *
+ * Concurrent callers share one startup: the first request begins the mount and
+ * every other waiter observes the same promise, so the engine is never mounted
+ * twice.
+ * @returns the running host, or undefined when the bridge is disabled.
+ * @throws when startup fails.
+ */
+export declare function ensureCordisHost(): Promise<CordisHost | undefined>;
+/**
+ * Read the engine contract, starting the host on first use.
+ * @returns the engine, or a typed reason the bridge cannot serve the request.
+ */
+export declare function getCordisEngine(): Promise<CordisEngineResult>;
+/** The running host, if any. Used by diagnostics and tests. */
+export declare function cordisHost(): CordisHost | undefined;
+/**
+ * Stop the host and release every engine effect.
+ *
+ * Safe to call when the bridge was never started or is already stopped.
+ * @returns a promise resolving once teardown has completed.
+ */
+export declare function stopCordisHost(): Promise<void>;
+//# sourceMappingURL=runtime.d.ts.map

package/backend/dist/cordis/runtime.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"runtime.d.ts","sourceRoot":"","sources":["../../src/cordis/runtime.ts"],"names":[],"mappings":"AAiBA;;;;;;;;;;GAUG;AAEH,OAAO,KAAK,EAAE,UAAU,EAAE,gBAAgB,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AAM1E,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,oCAAoC,CAAC;AAS5E,6CAA6C;AAC7C,MAAM,MAAM,uBAAuB;AACjC,+CAA+C;AAC7C,UAAU;AACZ,kCAAkC;GAChC,UAAU;AACZ,mDAAmD;GACjD,QAAQ,CAAC;AAEb,mDAAmD;AACnD,MAAM,MAAM,kBAAkB,GAC1B;IAAE,QAAQ,CAAC,EAAE,EAAE,IAAI,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,SAAS,CAAA;CAAE,GACjD;IACE,QAAQ,CAAC,EAAE,EAAE,KAAK,CAAC;IACnB,QAAQ,CAAC,MAAM,EAAE,uBAAuB,CAAC;IACzC,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;CAC1B,CAAC;AASN;;;;GAIG;AACH,wBAAgB,sBAAsB,CACpC,IAAI,EAAE,OAAO,CAAC,gBAAgB,CAAC,GAAG,SAAS,GAC1C,IAAI,CAEN;AAED;;;;;;;;;GASG;AACH,wBAAgB,mBAAmB,IAAI,gBAAgB,CA+BtD;AAYD;;;GAGG;AACH,wBAAgB,2BAA2B,CAAC,OAAO,EAAE,OAAO,GAAG,IAAI,CAElE;AAED;;;;;;;;;GASG;AACH,wBAAsB,qBAAqB,IAAI,OAAO,CAAC,OAAO,CAAC,CAG9D;AAED;;;;;;;GAOG;AACH,wBAAsB,iBAAiB,IAAI,OAAO,CAAC,iBAAiB,CAAC,CAEpE;AAED;;;;;;;;GAQG;AACH,wBAAsB,gBAAgB,IAAI,OAAO,CAAC,UAAU,GAAG,SAAS,CAAC,CAmCxE;AAED;;;GAGG;AACH,wBAAsB,eAAe,IAAI,OAAO,CAAC,kBAAkB,CAAC,CA4BnE;AAED,+DAA+D;AAC/D,wBAAgB,UAAU,IAAI,UAAU,GAAG,SAAS,CAEnD;AAED;;;;;GAKG;AACH,wBAAsB,cAAc,IAAI,OAAO,CAAC,IAAI,CAAC,CAiBpD"}

package/backend/dist/cordis/runtime.js

@@ -0,0 +1,231 @@
+/*
+ * Libre WebUI
+ * Copyright (C) 2025 Kroonen AI, Inc.
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at:
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+import { resolveCordisHostConfig, startCordisHost, DSH_ENGINE_SERVICE, } from './index.js';
+import { getCordisAccess, getCordisEnabled, } from '../services/cordisAccessService.js';
+import { createLogger } from '../utils/logger.js';
+const logger = createLogger('cordis-runtime');
+let host;
+let startPromise;
+let stopPromise;
+let generation = 0;
+let failure;
+let overrides;
+/**
+ * Override resolution inputs, for tests and for callers that own their own
+ * paths. Values are merged over the resolved configuration.
+ * @param next - partial configuration overriding resolved values.
+ */
+export function configureCordisRuntime(next) {
+    overrides = next;
+}
+/**
+ * Resolve the configuration this runtime would start with.
+ *
+ * Overridden paths are handed to the resolver rather than only spread over its
+ * result: a caller that owns its own composition and settings paths expects the
+ * *parsed* values to come from those files. Spreading alone would leave
+ * file-derived fields — such as whether the file declared `features.enabled` —
+ * describing whatever document the environment happened to point at.
+ * @returns the fully resolved configuration for this runtime.
+ */
+export function cordisRuntimeConfig() {
+    const resolved = resolveCordisHostConfig({
+        ...(overrides?.configPath ? { configPath: overrides.configPath } : {}),
+        ...(overrides?.settingsPath
+            ? { settingsPath: overrides.settingsPath }
+            : {}),
+        ...(overrides?.workspacePath
+            ? { workspacePath: overrides.workspacePath }
+            : {}),
+        ...(overrides?.sessionStorePath
+            ? { sessionStorePath: overrides.sessionStorePath }
+            : {}),
+    });
+    const effective = overrides
+        ? {
+            ...resolved,
+            ...overrides,
+            // These overrides were resolved above. Keep their canonical values so
+            // blank or relative inputs cannot restore a cwd-dependent directory.
+            configPath: resolved.configPath,
+            settingsPath: resolved.settingsPath,
+            workspacePath: resolved.workspacePath,
+            sessionStorePath: resolved.sessionStorePath,
+        }
+        : resolved;
+    // Attach the runtime capability the host hands to the adapter row. It is not
+    // configuration and never reaches the composed document, so it is added here
+    // rather than resolved from a file.
+    return providerCapability
+        ? { ...effective, providerHandler: providerCapability }
+        : effective;
+}
+/**
+ * The provider capability the host passes to the adapter row.
+ *
+ * Installed by the application at startup. It is held here rather than in the
+ * adapter module because that module is loaded twice — once by path for the
+ * application and once by URL for the plugin row — and a registration on one
+ * copy is invisible to the other.
+ */
+let providerCapability;
+/**
+ * Install the provider capability for the engine's adapter row.
+ * @param handler - the handler implementing Libre WebUI's provider layer.
+ */
+export function setCordisProviderCapability(handler) {
+    providerCapability = handler;
+}
+/**
+ * Whether the engine is offered.
+ *
+ * The administrator's persisted opt-in is the live switch, and
+ * `LIBRE_CORDIS_ENABLED` can pin it. The settings document's
+ * `features.enabled` pins it only when the file states it and no override is in
+ * force: an override is a caller stating the answer, so consulting the file's
+ * lock alongside it would make the seam unusable.
+ * @returns the effective boolean.
+ */
+export async function isCordisBridgeEnabled() {
+    if (overrides?.features)
+        return overrides.features.enabled;
+    return getCordisEnabled(cordisRuntimeConfig());
+}
+/**
+ * Resolve the effective access state for this runtime.
+ *
+ * The runtime's own resolved configuration is the one that matters: a caller
+ * that supplied overrides expects the decision to describe those paths, and the
+ * settings document's lock is only visible through them.
+ * @returns the decision and whether a deployment-level source pinned it.
+ */
+export async function cordisAccessState() {
+    return getCordisAccess(cordisRuntimeConfig());
+}
+/**
+ * Start the host if it is enabled and not already running.
+ *
+ * Concurrent callers share one startup: the first request begins the mount and
+ * every other waiter observes the same promise, so the engine is never mounted
+ * twice.
+ * @returns the running host, or undefined when the bridge is disabled.
+ * @throws when startup fails.
+ */
+export async function ensureCordisHost() {
+    await stopPromise;
+    if (!(await isCordisBridgeEnabled()))
+        return undefined;
+    if (host)
+        return host;
+    if (!startPromise) {
+        const currentGeneration = generation;
+        const config = cordisRuntimeConfig();
+        const pending = (async () => {
+            try {
+                const candidate = await startCordisHost(config);
+                if (currentGeneration !== generation ||
+                    !(await isCordisBridgeEnabled())) {
+                    await candidate.stop();
+                    return;
+                }
+                host = candidate;
+                failure = undefined;
+            }
+            catch (error) {
+                if (currentGeneration === generation)
+                    failure = error instanceof Error ? error.message : String(error);
+                logger.error('Cordis host failed to start', { error: String(error) });
+                throw error;
+            }
+        })();
+        startPromise = pending;
+        void pending
+            .finally(() => {
+            if (startPromise === pending)
+                startPromise = undefined;
+        })
+            .catch(() => undefined);
+    }
+    await startPromise;
+    return host;
+}
+/**
+ * Read the engine contract, starting the host on first use.
+ * @returns the engine, or a typed reason the bridge cannot serve the request.
+ */
+export async function getCordisEngine() {
+    if (!(await isCordisBridgeEnabled())) {
+        return { ok: false, reason: 'disabled' };
+    }
+    if (!host && !startPromise && failure !== undefined) {
+        return { ok: false, reason: 'failed', detail: failure };
+    }
+    try {
+        const running = await ensureCordisHost();
+        if (!running)
+            return { ok: false, reason: 'disabled' };
+        const engine = running.context.get(DSH_ENGINE_SERVICE);
+        if (!engine) {
+            return {
+                ok: false,
+                reason: 'failed',
+                detail: 'the composition mounted no libreDshEngine service; check the bridge row',
+            };
+        }
+        return { ok: true, engine };
+    }
+    catch (error) {
+        return {
+            ok: false,
+            reason: 'failed',
+            detail: error instanceof Error ? error.message : String(error),
+        };
+    }
+}
+/** The running host, if any. Used by diagnostics and tests. */
+export function cordisHost() {
+    return host;
+}
+/**
+ * Stop the host and release every engine effect.
+ *
+ * Safe to call when the bridge was never started or is already stopped.
+ * @returns a promise resolving once teardown has completed.
+ */
+export async function stopCordisHost() {
+    if (stopPromise)
+        return stopPromise;
+    generation += 1;
+    const pending = startPromise;
+    const running = host;
+    host = undefined;
+    failure = undefined;
+    const stopping = (async () => {
+        await pending?.catch(() => undefined);
+        if (running)
+            await running.stop();
+    })();
+    stopPromise = stopping;
+    try {
+        await stopping;
+    }
+    finally {
+        if (stopPromise === stopping)
+            stopPromise = undefined;
+    }
+}
+//# sourceMappingURL=runtime.js.map

package/backend/dist/cordis/runtime.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"runtime.js","sourceRoot":"","sources":["../../src/cordis/runtime.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAeH,OAAO,EACL,uBAAuB,EACvB,eAAe,EACf,kBAAkB,GACnB,MAAM,YAAY,CAAC;AAEpB,OAAO,EACL,eAAe,EACf,gBAAgB,GACjB,MAAM,oCAAoC,CAAC;AAC5C,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAElD,MAAM,MAAM,GAAG,YAAY,CAAC,gBAAgB,CAAC,CAAC;AAoB9C,IAAI,IAA4B,CAAC;AACjC,IAAI,YAAuC,CAAC;AAC5C,IAAI,WAAsC,CAAC;AAC3C,IAAI,UAAU,GAAG,CAAC,CAAC;AACnB,IAAI,OAA2B,CAAC;AAChC,IAAI,SAAgD,CAAC;AAErD;;;;GAIG;AACH,MAAM,UAAU,sBAAsB,CACpC,IAA2C;IAE3C,SAAS,GAAG,IAAI,CAAC;AACnB,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,mBAAmB;IACjC,MAAM,QAAQ,GAAG,uBAAuB,CAAC;QACvC,GAAG,CAAC,SAAS,EAAE,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,SAAS,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACtE,GAAG,CAAC,SAAS,EAAE,YAAY;YACzB,CAAC,CAAC,EAAE,YAAY,EAAE,SAAS,CAAC,YAAY,EAAE;YAC1C,CAAC,CAAC,EAAE,CAAC;QACP,GAAG,CAAC,SAAS,EAAE,aAAa;YAC1B,CAAC,CAAC,EAAE,aAAa,EAAE,SAAS,CAAC,aAAa,EAAE;YAC5C,CAAC,CAAC,EAAE,CAAC;QACP,GAAG,CAAC,SAAS,EAAE,gBAAgB;YAC7B,CAAC,CAAC,EAAE,gBAAgB,EAAE,SAAS,CAAC,gBAAgB,EAAE;YAClD,CAAC,CAAC,EAAE,CAAC;KACR,CAAC,CAAC;IACH,MAAM,SAAS,GAAG,SAAS;QACzB,CAAC,CAAC;YACE,GAAG,QAAQ;YACX,GAAG,SAAS;YACZ,sEAAsE;YACtE,qEAAqE;YACrE,UAAU,EAAE,QAAQ,CAAC,UAAU;YAC/B,YAAY,EAAE,QAAQ,CAAC,YAAY;YACnC,aAAa,EAAE,QAAQ,CAAC,aAAa;YACrC,gBAAgB,EAAE,QAAQ,CAAC,gBAAgB;SAC5C;QACH,CAAC,CAAC,QAAQ,CAAC;IACb,6EAA6E;IAC7E,6EAA6E;IAC7E,oCAAoC;IACpC,OAAO,kBAAkB;QACvB,CAAC,CAAC,EAAE,GAAG,SAAS,EAAE,eAAe,EAAE,kBAAkB,EAAE;QACvD,CAAC,CAAC,SAAS,CAAC;AAChB,CAAC;AAED;;;;;;;GAOG;AACH,IAAI,kBAA2B,CAAC;AAEhC;;;GAGG;AACH,MAAM,UAAU,2BAA2B,CAAC,OAAgB;IAC1D,kBAAkB,GAAG,OAAO,CAAC;AAC/B,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,CAAC,KAAK,UAAU,qBAAqB;IACzC,IAAI,SAAS,EAAE,QAAQ;QAAE,OAAO,SAAS,CAAC,QAAQ,CAAC,OAAO,CAAC;IAC3D,OAAO,gBAAgB,CAAC,mBAAmB,EAAE,CAAC,CAAC;AACjD,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB;IACrC,OAAO,eAAe,CAAC,mBAAmB,EAAE,CAAC,CAAC;AAChD,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB;IACpC,MAAM,WAAW,CAAC;IAClB,IAAI,CAAC,CAAC,MAAM,qBAAqB,EAAE,CAAC;QAAE,OAAO,SAAS,CAAC;IACvD,IAAI,IAAI;QAAE,OAAO,IAAI,CAAC;IACtB,IAAI,CAAC,YAAY,EAAE,CAAC;QAClB,MAAM,iBAAiB,GAAG,UAAU,CAAC;QACrC,MAAM,MAAM,GAAG,mBAAmB,EAAE,CAAC;QACrC,MAAM,OAAO,GAAG,CAAC,KAAK,IAAI,EAAE;YAC1B,IAAI,CAAC;gBACH,MAAM,SAAS,GAAG,MAAM,eAAe,CAAC,MAAM,CAAC,CAAC;gBAChD,IACE,iBAAiB,KAAK,UAAU;oBAChC,CAAC,CAAC,MAAM,qBAAqB,EAAE,CAAC,EAChC,CAAC;oBACD,MAAM,SAAS,CAAC,IAAI,EAAE,CAAC;oBACvB,OAAO;gBACT,CAAC;gBACD,IAAI,GAAG,SAAS,CAAC;gBACjB,OAAO,GAAG,SAAS,CAAC;YACtB,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,iBAAiB,KAAK,UAAU;oBAClC,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;gBACnE,MAAM,CAAC,KAAK,CAAC,6BAA6B,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;gBACtE,MAAM,KAAK,CAAC;YACd,CAAC;QACH,CAAC,CAAC,EAAE,CAAC;QACL,YAAY,GAAG,OAAO,CAAC;QACvB,KAAK,OAAO;aACT,OAAO,CAAC,GAAG,EAAE;YACZ,IAAI,YAAY,KAAK,OAAO;gBAAE,YAAY,GAAG,SAAS,CAAC;QACzD,CAAC,CAAC;aACD,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;IAC5B,CAAC;IACD,MAAM,YAAY,CAAC;IACnB,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe;IACnC,IAAI,CAAC,CAAC,MAAM,qBAAqB,EAAE,CAAC,EAAE,CAAC;QACrC,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC;IAC3C,CAAC;IACD,IAAI,CAAC,IAAI,IAAI,CAAC,YAAY,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;QACpD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;IAC1D,CAAC;IACD,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,MAAM,gBAAgB,EAAE,CAAC;QACzC,IAAI,CAAC,OAAO;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC;QACvD,MAAM,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAC9B,CAAC;QACxB,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,MAAM,EAAE,QAAQ;gBAChB,MAAM,EACJ,yEAAyE;aAC5E,CAAC;QACJ,CAAC;QACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;IAC9B,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO;YACL,EAAE,EAAE,KAAK;YACT,MAAM,EAAE,QAAQ;YAChB,MAAM,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;SAC/D,CAAC;IACJ,CAAC;AACH,CAAC;AAED,+DAA+D;AAC/D,MAAM,UAAU,UAAU;IACxB,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc;IAClC,IAAI,WAAW;QAAE,OAAO,WAAW,CAAC;IACpC,UAAU,IAAI,CAAC,CAAC;IAChB,MAAM,OAAO,GAAG,YAAY,CAAC;IAC7B,MAAM,OAAO,GAAG,IAAI,CAAC;IACrB,IAAI,GAAG,SAAS,CAAC;IACjB,OAAO,GAAG,SAAS,CAAC;IACpB,MAAM,QAAQ,GAAG,CAAC,KAAK,IAAI,EAAE;QAC3B,MAAM,OAAO,EAAE,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QACtC,IAAI,OAAO;YAAE,MAAM,OAAO,CAAC,IAAI,EAAE,CAAC;IACpC,CAAC,CAAC,EAAE,CAAC;IACL,WAAW,GAAG,QAAQ,CAAC;IACvB,IAAI,CAAC;QACH,MAAM,QAAQ,CAAC;IACjB,CAAC;YAAS,CAAC;QACT,IAAI,WAAW,KAAK,QAAQ;YAAE,WAAW,GAAG,SAAS,CAAC;IACxD,CAAC;AACH,CAAC"}

package/backend/dist/cordis/work-model.d.ts

@@ -0,0 +1,7 @@
+/** Engine selection stored alongside the model in existing Work records. */
+export declare const WORK_DSH_MODEL_PREFIX = "dsh:";
+/** Whether Work should use its isolated DSH driver for this model selection. */
+export declare function isWorkDshModel(model: string): boolean;
+/** Recover the provider's exact model id without changing provider identity. */
+export declare function workProviderModel(model: string): string;
+//# sourceMappingURL=work-model.d.ts.map

package/backend/dist/cordis/work-model.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"work-model.d.ts","sourceRoot":"","sources":["../../src/cordis/work-model.ts"],"names":[],"mappings":"AAiBA,4EAA4E;AAC5E,eAAO,MAAM,qBAAqB,SAAS,CAAC;AAE5C,gFAAgF;AAChF,wBAAgB,cAAc,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAErD;AAED,gFAAgF;AAChF,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAKvD"}

package/backend/dist/cordis/work-model.js

@@ -0,0 +1,30 @@
+/*
+ * Libre WebUI
+ * Copyright (C) 2025 Kroonen AI, Inc.
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at:
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+/** Engine selection stored alongside the model in existing Work records. */
+export const WORK_DSH_MODEL_PREFIX = 'dsh:';
+/** Whether Work should use its isolated DSH driver for this model selection. */
+export function isWorkDshModel(model) {
+    return model.trim().startsWith(WORK_DSH_MODEL_PREFIX);
+}
+/** Recover the provider's exact model id without changing provider identity. */
+export function workProviderModel(model) {
+    const selected = model.trim();
+    return isWorkDshModel(selected)
+        ? selected.slice(WORK_DSH_MODEL_PREFIX.length).trim()
+        : selected;
+}
+//# sourceMappingURL=work-model.js.map

package/backend/dist/cordis/work-model.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"work-model.js","sourceRoot":"","sources":["../../src/cordis/work-model.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,4EAA4E;AAC5E,MAAM,CAAC,MAAM,qBAAqB,GAAG,MAAM,CAAC;AAE5C,gFAAgF;AAChF,MAAM,UAAU,cAAc,CAAC,KAAa;IAC1C,OAAO,KAAK,CAAC,IAAI,EAAE,CAAC,UAAU,CAAC,qBAAqB,CAAC,CAAC;AACxD,CAAC;AAED,gFAAgF;AAChF,MAAM,UAAU,iBAAiB,CAAC,KAAa;IAC7C,MAAM,QAAQ,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;IAC9B,OAAO,cAAc,CAAC,QAAQ,CAAC;QAC7B,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,qBAAqB,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE;QACrD,CAAC,CAAC,QAAQ,CAAC;AACf,CAAC"}

package/backend/dist/db.js

@@ -1074,7 +1074,7 @@ function runMigrations() {
             db.prepare(`UPDATE ${table}
          SET provider_type = 'ollama', provider_id = NULL
          WHERE provider_type IS NULL
-            OR provider_type NOT IN ('ollama', 'plugin')
+            OR provider_type NOT IN ('ollama', 'plugin', 'dsh')
             OR (provider_type = 'ollama' AND provider_id IS NOT NULL)`).run();
         }
         // Work networking is now an implementation detail instead of a task-level

package/backend/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAkBA,OAAO,UAAU,CAAC;AAyIlB,QAAA,MAAM,GAAG,6CAAY,CAAC;eAy2BP,GAAG"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAkBA,OAAO,UAAU,CAAC;AA2IlB,QAAA,MAAM,GAAG,6CAAY,CAAC;eAg3BP,GAAG"}

package/backend/dist/index.js

@@ -83,6 +83,8 @@ import artifactsRoutes from './routes/artifacts.js';
 import searchRoutes from './routes/search.js';
 import openaiCompatRoutes from './routes/openaiCompat.js';
 import healthRoutes from './routes/health.js';
+import cordisRoutes from './routes/cordis.js';
+import { stopCordisHost } from './cordis/runtime.js';
 import jobsRoutes from './routes/jobs.js';
 import groupsRoutes from './routes/groups.js';
 import accessRoutes from './routes/access.js';
@@ -572,6 +574,10 @@ app.use('/api/artifacts', artifactsRoutes);
 app.use('/api/search', chatRateLimiter, searchRoutes);
 // The OpenAI-compatible public API answers on the canonical /v1 base.
 app.use('/v1', chatRateLimiter, openaiCompatRoutes);
+// The embedded Cordis/DSH engine. Every route answers 503 until an
+// operator enables the bridge, so mounting it unconditionally keeps the
+// feature behind configuration rather than behind a build variant.
+app.use('/api/cordis', chatRateLimiter, cordisRoutes);
 app.use('/api/jobs', jobsRoutes);
 app.use('/api/groups', groupsRoutes);
 app.use('/api/access', accessRoutes);
@@ -846,6 +852,9 @@ const shutdown = async (signal) => {
         : Promise.resolve();
     const cleanup = Promise.allSettled([
         registeredWebSockets.close(),
+        // Disposing the Cordis root releases every engine effect, listener, and
+        // open session store handle instead of relying on process exit.
+        stopCordisHost(),
         stopWork,
         closeDurableJobRuntime(),
         httpClosed,