libre-webui 0.37.2 → 0.38.0

package/backend/dist/strands/model.js

@@ -0,0 +1,381 @@
+/*
+ * Libre WebUI
+ * Copyright (C) 2025 Kroonen AI, Inc.
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at:
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+/**
+ * A Strands model that serves every turn through Libre WebUI's own provider
+ * services. The agent loop, tools, and sessions belong to Strands; the model
+ * call goes through the same Ollama and plugin paths Chat uses, so provider
+ * credentials, usage metering, and the Ollama switch apply unchanged.
+ *
+ * Strands expects one content block at a time and a message stop event that
+ * says why the turn ended. Tools only run when that reason is 'toolUse'.
+ */
+import { randomUUID } from 'node:crypto';
+import { Model, } from '@strands-agents/sdk';
+import pluginService from '../services/pluginService.js';
+import ollamaService from '../services/ollamaService.js';
+import { toOpenAICompatibleTools } from '../utils/pluginChatAdapter.js';
+const MAX_BUFFERED_EVENTS = 2048;
+const MAX_BUFFERED_BYTES = 2000000;
+function systemText(prompt) {
+    if (!prompt)
+        return '';
+    if (typeof prompt === 'string')
+        return prompt;
+    return prompt
+        .map(block => (block.type === 'textBlock' ? block.text : ''))
+        .filter(Boolean)
+        .join('\n\n');
+}
+function toolResultText(block) {
+    return block.content
+        .map(item => {
+        if (item.type === 'textBlock')
+            return item.text ?? '';
+        if (item.type === 'jsonBlock')
+            return JSON.stringify(item.json);
+        return `[${item.type} omitted]`;
+    })
+        .join('\n');
+}
+/** Convert a Strands transcript into Libre WebUI's provider message shape. */
+export function toChatMessages(messages, systemPrompt) {
+    const now = Date.now();
+    let index = 0;
+    const id = () => `strands-${now}-${index++}`;
+    const out = [];
+    const system = systemText(systemPrompt);
+    if (system) {
+        out.push({ id: id(), role: 'system', content: system, timestamp: now });
+    }
+    for (const message of messages) {
+        const text = [];
+        const thinking = [];
+        const toolCalls = [];
+        for (const block of message.content) {
+            switch (block.type) {
+                case 'textBlock':
+                    text.push(block.text);
+                    break;
+                case 'reasoningBlock':
+                    if (block.text)
+                        thinking.push(block.text);
+                    break;
+                case 'toolUseBlock':
+                    toolCalls.push({
+                        id: block.toolUseId,
+                        type: 'function',
+                        function: {
+                            name: block.name,
+                            arguments: JSON.stringify(block.input ?? {}),
+                        },
+                    });
+                    break;
+                case 'toolResultBlock':
+                    out.push({
+                        id: id(),
+                        role: 'tool',
+                        content: (block.status === 'error' ? 'Error: ' : '') +
+                            toolResultText(block),
+                        tool_call_id: block.toolUseId,
+                        timestamp: now,
+                    });
+                    break;
+                default:
+                    break;
+            }
+        }
+        if (text.length === 0 && toolCalls.length === 0)
+            continue;
+        out.push({
+            id: id(),
+            role: message.role === 'assistant' ? 'assistant' : 'user',
+            content: text.join(''),
+            ...(thinking.length ? { thinking: thinking.join('') } : {}),
+            ...(toolCalls.length ? { tool_calls: toolCalls } : {}),
+            timestamp: now,
+        });
+    }
+    return out;
+}
+export function toProviderTools(specs) {
+    if (!specs?.length)
+        return undefined;
+    return specs.map(spec => ({
+        name: spec.name,
+        description: spec.description,
+        parameters: spec.inputSchema ?? {
+            type: 'object',
+            properties: {},
+        },
+    }));
+}
+export function stopReasonFor(reason, hasTools) {
+    if (hasTools)
+        return 'toolUse';
+    if (reason === 'length' ||
+        reason === 'max_tokens' ||
+        reason === 'max-tokens' ||
+        reason === 'incomplete:max_output_tokens') {
+        return 'maxTokens';
+    }
+    return 'endTurn';
+}
+export class LibreWebUiModel extends Model {
+    constructor(target, userId, config = {}) {
+        super();
+        this.target = target;
+        this.userId = userId;
+        this.config = { ...config, modelId: target.id };
+    }
+    updateConfig(modelConfig) {
+        this.config = { ...this.config, ...modelConfig, modelId: this.target.id };
+    }
+    getConfig() {
+        return { ...this.config };
+    }
+    async *stream(messages, options = {}) {
+        const signal = options.cancelSignal;
+        signal?.throwIfAborted();
+        const chatMessages = toChatMessages(messages, options.systemPrompt);
+        const tools = toProviderTools(options.toolSpecs);
+        const generation = {
+            ...(this.config.temperature === undefined
+                ? {}
+                : { temperature: this.config.temperature }),
+            ...(this.config.maxTokens === undefined
+                ? {}
+                : { num_predict: this.config.maxTokens }),
+        };
+        yield { type: 'modelMessageStartEvent', role: 'assistant' };
+        let open;
+        let hasTools = false;
+        let doneReason;
+        let inputTokens = 0;
+        let outputTokens = 0;
+        let sawUsage = false;
+        const source = this.target.route.type === 'plugin'
+            ? this.pluginEvents(chatMessages, generation, tools, signal)
+            : this.ollamaEvents(chatMessages, generation, tools, signal);
+        for await (const event of source) {
+            if (event.type === 'text' || event.type === 'reasoning') {
+                if (!event.text)
+                    continue;
+                if (open && open !== event.type) {
+                    yield { type: 'modelContentBlockStopEvent' };
+                    open = undefined;
+                }
+                open = event.type;
+                yield {
+                    type: 'modelContentBlockDeltaEvent',
+                    delta: event.type === 'text'
+                        ? { type: 'textDelta', text: event.text }
+                        : { type: 'reasoningContentDelta', text: event.text },
+                };
+                continue;
+            }
+            if (event.type === 'tool-call') {
+                if (open) {
+                    yield { type: 'modelContentBlockStopEvent' };
+                    open = undefined;
+                }
+                hasTools = true;
+                yield {
+                    type: 'modelContentBlockStartEvent',
+                    start: {
+                        type: 'toolUseStart',
+                        name: event.toolCall.name,
+                        toolUseId: event.toolCall.id || `call_${randomUUID()}`,
+                    },
+                };
+                yield {
+                    type: 'modelContentBlockDeltaEvent',
+                    delta: {
+                        type: 'toolUseInputDelta',
+                        input: event.toolCall.arguments || '{}',
+                    },
+                };
+                yield { type: 'modelContentBlockStopEvent' };
+                continue;
+            }
+            if (event.type === 'usage') {
+                sawUsage = true;
+                inputTokens = event.inputTokens;
+                outputTokens = event.outputTokens;
+                continue;
+            }
+            doneReason = event.reason;
+        }
+        signal?.throwIfAborted();
+        if (open)
+            yield { type: 'modelContentBlockStopEvent' };
+        yield {
+            type: 'modelMessageStopEvent',
+            stopReason: stopReasonFor(doneReason, hasTools),
+        };
+        if (sawUsage) {
+            yield {
+                type: 'modelMetadataEvent',
+                usage: {
+                    inputTokens,
+                    outputTokens,
+                    totalTokens: inputTokens + outputTokens,
+                },
+            };
+        }
+    }
+    async *pluginEvents(messages, generation, tools, signal) {
+        const route = this.target.route;
+        if (route.type !== 'plugin')
+            return;
+        for await (const chunk of pluginService.executePluginStreamRequest(route.model, messages, { ...generation, ...(tools ? { tools } : {}) }, this.userId, route.pluginId, signal)) {
+            signal?.throwIfAborted();
+            if (chunk.type === 'content' && chunk.content) {
+                yield { type: 'text', text: chunk.content };
+            }
+            else if (chunk.type === 'reasoning' && chunk.content) {
+                yield { type: 'reasoning', text: chunk.content };
+            }
+            else if (chunk.type === 'tool_call' && chunk.toolCall) {
+                yield { type: 'tool-call', toolCall: chunk.toolCall };
+            }
+            else if (chunk.type === 'usage' && chunk.usage) {
+                yield {
+                    type: 'usage',
+                    inputTokens: chunk.usage.promptTokens ?? 0,
+                    outputTokens: chunk.usage.completionTokens ?? 0,
+                };
+            }
+            else if (chunk.type === 'done') {
+                yield { type: 'done', reason: chunk.doneReason };
+            }
+        }
+    }
+    /** Ollama streams through callbacks, so bridge them onto a bounded queue. */
+    async *ollamaEvents(messages, generation, tools, outer) {
+        const controller = new AbortController();
+        const signal = outer
+            ? AbortSignal.any([outer, controller.signal])
+            : controller.signal;
+        const queue = [];
+        let bufferedBytes = 0;
+        let settled = false;
+        let failure;
+        let wake;
+        let doneReason;
+        const notify = () => {
+            wake?.();
+            wake = undefined;
+        };
+        const fail = (error) => {
+            failure ?? (failure = error);
+            settled = true;
+            notify();
+        };
+        const push = (event) => {
+            if (settled || signal.aborted)
+                return;
+            const bytes = Buffer.byteLength(JSON.stringify(event));
+            if (queue.length >= MAX_BUFFERED_EVENTS ||
+                bufferedBytes + bytes > MAX_BUFFERED_BYTES) {
+                const error = new Error('Strands provider output exceeded its stream buffer limit.');
+                fail(error);
+                controller.abort(error);
+                return;
+            }
+            queue.push(event);
+            bufferedBytes += bytes;
+            notify();
+        };
+        const abort = () => fail(signal.reason instanceof Error
+            ? signal.reason
+            : new Error('Request aborted'));
+        signal.addEventListener('abort', abort, { once: true });
+        if (signal.aborted)
+            abort();
+        const route = this.target.route;
+        const finished = ollamaService
+            .generateChatStreamResponse({
+            model: route.model,
+            messages,
+            stream: true,
+            options: { ...generation },
+            ...(tools?.length ? { tools: toOpenAICompatibleTools(tools) } : {}),
+        }, chunk => {
+            const text = chunk.message?.content;
+            if (text)
+                push({ type: 'text', text });
+            if (chunk.message?.thinking) {
+                push({ type: 'reasoning', text: chunk.message.thinking });
+            }
+            for (const rawCall of chunk.message?.tool_calls ?? []) {
+                const fn = rawCall.function;
+                push({
+                    type: 'tool-call',
+                    toolCall: {
+                        id: typeof rawCall.id === 'string' && rawCall.id
+                            ? rawCall.id
+                            : `call_${randomUUID()}`,
+                        name: typeof fn?.name === 'string' ? fn.name : '',
+                        arguments: typeof fn?.arguments === 'string'
+                            ? fn.arguments
+                            : JSON.stringify(fn?.arguments ?? {}),
+                    },
+                });
+            }
+            if (typeof chunk.prompt_eval_count === 'number' &&
+                typeof chunk.eval_count === 'number') {
+                push({
+                    type: 'usage',
+                    inputTokens: chunk.prompt_eval_count,
+                    outputTokens: chunk.eval_count,
+                });
+            }
+            if (chunk.done_reason)
+                doneReason = chunk.done_reason;
+        }, fail, () => push({ type: 'done', reason: doneReason }), signal, { userId: this.userId })
+            .catch(error => fail(error instanceof Error ? error : new Error(String(error))))
+            .finally(() => {
+            settled = true;
+            notify();
+        });
+        try {
+            while (!settled || queue.length) {
+                if (failure)
+                    throw failure;
+                const event = queue.shift();
+                if (event) {
+                    bufferedBytes -= Buffer.byteLength(JSON.stringify(event));
+                    yield event;
+                }
+                else {
+                    await new Promise(resolve => {
+                        wake = resolve;
+                    });
+                }
+            }
+            if (failure)
+                throw failure;
+        }
+        finally {
+            signal.removeEventListener('abort', abort);
+            controller.abort();
+            queue.length = 0;
+            await finished;
+        }
+    }
+}
+//# sourceMappingURL=model.js.map

package/backend/dist/strands/model.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"model.js","sourceRoot":"","sources":["../../src/strands/model.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH;;;;;;;;GAQG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EACL,KAAK,GAON,MAAM,qBAAqB,CAAC;AAM7B,OAAO,aAAa,MAAM,8BAA8B,CAAC;AACzD,OAAO,aAAa,MAAM,8BAA8B,CAAC;AACzD,OAAO,EAAE,uBAAuB,EAAE,MAAM,+BAA+B,CAAC;AAIxE,MAAM,mBAAmB,GAAG,IAAI,CAAC;AACjC,MAAM,kBAAkB,GAAG,OAAS,CAAC;AAcrC,SAAS,UAAU,CAAC,MAAgC;IAClD,IAAI,CAAC,MAAM;QAAE,OAAO,EAAE,CAAC;IACvB,IAAI,OAAO,MAAM,KAAK,QAAQ;QAAE,OAAO,MAAM,CAAC;IAC9C,OAAO,MAAM;SACV,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,IAAI,KAAK,WAAW,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;SAC5D,MAAM,CAAC,OAAO,CAAC;SACf,IAAI,CAAC,MAAM,CAAC,CAAC;AAClB,CAAC;AAED,SAAS,cAAc,CAAC,KAEvB;IACC,OAAO,KAAK,CAAC,OAAO;SACjB,GAAG,CAAC,IAAI,CAAC,EAAE;QACV,IAAI,IAAI,CAAC,IAAI,KAAK,WAAW;YAAE,OAAO,IAAI,CAAC,IAAI,IAAI,EAAE,CAAC;QACtD,IAAI,IAAI,CAAC,IAAI,KAAK,WAAW;YAAE,OAAO,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAChE,OAAO,IAAI,IAAI,CAAC,IAAI,WAAW,CAAC;IAClC,CAAC,CAAC;SACD,IAAI,CAAC,IAAI,CAAC,CAAC;AAChB,CAAC;AAED,8EAA8E;AAC9E,MAAM,UAAU,cAAc,CAC5B,QAA4B,EAC5B,YAA2B;IAE3B,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACvB,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,MAAM,EAAE,GAAG,GAAG,EAAE,CAAC,WAAW,GAAG,IAAI,KAAK,EAAE,EAAE,CAAC;IAC7C,MAAM,GAAG,GAAkB,EAAE,CAAC;IAC9B,MAAM,MAAM,GAAG,UAAU,CAAC,YAAY,CAAC,CAAC;IACxC,IAAI,MAAM,EAAE,CAAC;QACX,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC,CAAC;IAC1E,CAAC;IACD,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;QAC/B,MAAM,IAAI,GAAa,EAAE,CAAC;QAC1B,MAAM,QAAQ,GAAa,EAAE,CAAC;QAC9B,MAAM,SAAS,GAA2C,EAAE,CAAC;QAC7D,KAAK,MAAM,KAAK,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;YACpC,QAAQ,KAAK,CAAC,IAAI,EAAE,CAAC;gBACnB,KAAK,WAAW;oBACd,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;oBACtB,MAAM;gBACR,KAAK,gBAAgB;oBACnB,IAAI,KAAK,CAAC,IAAI;wBAAE,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;oBAC1C,MAAM;gBACR,KAAK,cAAc;oBACjB,SAAS,CAAC,IAAI,CAAC;wBACb,EAAE,EAAE,KAAK,CAAC,SAAS;wBACnB,IAAI,EAAE,UAAU;wBAChB,QAAQ,EAAE;4BACR,IAAI,EAAE,KAAK,CAAC,IAAI;4BAChB,SAAS,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,KAAK,IAAI,EAAE,CAAC;yBAC7C;qBACF,CAAC,CAAC;oBACH,MAAM;gBACR,KAAK,iBAAiB;oBACpB,GAAG,CAAC,IAAI,CAAC;wBACP,EAAE,EAAE,EAAE,EAAE;wBACR,IAAI,EAAE,MAAM;wBACZ,OAAO,EACL,CAAC,KAAK,CAAC,MAAM,KAAK,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC;4BAC3C,cAAc,CAAC,KAAK,CAAC;wBACvB,YAAY,EAAE,KAAK,CAAC,SAAS;wBAC7B,SAAS,EAAE,GAAG;qBACf,CAAC,CAAC;oBACH,MAAM;gBACR;oBACE,MAAM;YACV,CAAC;QACH,CAAC;QACD,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC;YAAE,SAAS;QAC1D,GAAG,CAAC,IAAI,CAAC;YACP,EAAE,EAAE,EAAE,EAAE;YACR,IAAI,EAAE,OAAO,CAAC,IAAI,KAAK,WAAW,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,MAAM;YACzD,OAAO,EAAE,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YACtB,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC3D,GAAG,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACtD,SAAS,EAAE,GAAG;SACf,CAAC,CAAC;IACL,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,MAAM,UAAU,eAAe,CAC7B,KAAsC;IAEtC,IAAI,CAAC,KAAK,EAAE,MAAM;QAAE,OAAO,SAAS,CAAC;IACrC,OAAO,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACxB,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,WAAW,EAAE,IAAI,CAAC,WAAW;QAC7B,UAAU,EAAG,IAAI,CAAC,WAAmD,IAAI;YACvE,IAAI,EAAE,QAAQ;YACd,UAAU,EAAE,EAAE;SACf;KACF,CAAC,CAAC,CAAC;AACN,CAAC;AAED,MAAM,UAAU,aAAa,CAC3B,MAA0B,EAC1B,QAAiB;IAEjB,IAAI,QAAQ;QAAE,OAAO,SAAS,CAAC;IAC/B,IACE,MAAM,KAAK,QAAQ;QACnB,MAAM,KAAK,YAAY;QACvB,MAAM,KAAK,YAAY;QACvB,MAAM,KAAK,8BAA8B,EACzC,CAAC;QACD,OAAO,WAAW,CAAC;IACrB,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,MAAM,OAAO,eAAgB,SAAQ,KAA4B;IAG/D,YACmB,MAA4B,EAC5B,MAAc,EAC/B,MAAM,GAAmC,EAAE;QAE3C,KAAK,EAAE,CAAC;sBAJS,MAAM;sBACN,MAAM;QAIvB,IAAI,CAAC,MAAM,GAAG,EAAE,GAAG,MAAM,EAAE,OAAO,EAAE,MAAM,CAAC,EAAE,EAAE,CAAC;IAClD,CAAC;IAED,YAAY,CAAC,WAAkC;QAC7C,IAAI,CAAC,MAAM,GAAG,EAAE,GAAG,IAAI,CAAC,MAAM,EAAE,GAAG,WAAW,EAAE,OAAO,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;IAC5E,CAAC;IAED,SAAS;QACP,OAAO,EAAE,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC;IAC5B,CAAC;IAED,KAAK,CAAC,CAAC,MAAM,CACX,QAAmB,EACnB,OAAO,GAAkB,EAAE;QAE3B,MAAM,MAAM,GAAG,OAAO,CAAC,YAAY,CAAC;QACpC,MAAM,EAAE,cAAc,EAAE,CAAC;QACzB,MAAM,YAAY,GAAG,cAAc,CAAC,QAAQ,EAAE,OAAO,CAAC,YAAY,CAAC,CAAC;QACpE,MAAM,KAAK,GAAG,eAAe,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QACjD,MAAM,UAAU,GAAsB;YACpC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,WAAW,KAAK,SAAS;gBACvC,CAAC,CAAC,EAAE;gBACJ,CAAC,CAAC,EAAE,WAAW,EAAE,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC;YAC7C,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,KAAK,SAAS;gBACrC,CAAC,CAAC,EAAE;gBACJ,CAAC,CAAC,EAAE,WAAW,EAAE,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC;SAC5C,CAAC;QAEF,MAAM,EAAE,IAAI,EAAE,wBAAwB,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC;QAC5D,IAAI,IAAsC,CAAC;QAC3C,IAAI,QAAQ,GAAG,KAAK,CAAC;QACrB,IAAI,UAA8B,CAAC;QACnC,IAAI,WAAW,GAAG,CAAC,CAAC;QACpB,IAAI,YAAY,GAAG,CAAC,CAAC;QACrB,IAAI,QAAQ,GAAG,KAAK,CAAC;QAErB,MAAM,MAAM,GACV,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,KAAK,QAAQ;YACjC,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,YAAY,EAAE,UAAU,EAAE,KAAK,EAAE,MAAM,CAAC;YAC5D,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,YAAY,EAAE,UAAU,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC;QAEjE,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;YACjC,IAAI,KAAK,CAAC,IAAI,KAAK,MAAM,IAAI,KAAK,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;gBACxD,IAAI,CAAC,KAAK,CAAC,IAAI;oBAAE,SAAS;gBAC1B,IAAI,IAAI,IAAI,IAAI,KAAK,KAAK,CAAC,IAAI,EAAE,CAAC;oBAChC,MAAM,EAAE,IAAI,EAAE,4BAA4B,EAAE,CAAC;oBAC7C,IAAI,GAAG,SAAS,CAAC;gBACnB,CAAC;gBACD,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC;gBAClB,MAAM;oBACJ,IAAI,EAAE,6BAA6B;oBACnC,KAAK,EACH,KAAK,CAAC,IAAI,KAAK,MAAM;wBACnB,CAAC,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE;wBACzC,CAAC,CAAC,EAAE,IAAI,EAAE,uBAAuB,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE;iBAC1D,CAAC;gBACF,SAAS;YACX,CAAC;YACD,IAAI,KAAK,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;gBAC/B,IAAI,IAAI,EAAE,CAAC;oBACT,MAAM,EAAE,IAAI,EAAE,4BAA4B,EAAE,CAAC;oBAC7C,IAAI,GAAG,SAAS,CAAC;gBACnB,CAAC;gBACD,QAAQ,GAAG,IAAI,CAAC;gBAChB,MAAM;oBACJ,IAAI,EAAE,6BAA6B;oBACnC,KAAK,EAAE;wBACL,IAAI,EAAE,cAAc;wBACpB,IAAI,EAAE,KAAK,CAAC,QAAQ,CAAC,IAAI;wBACzB,SAAS,EAAE,KAAK,CAAC,QAAQ,CAAC,EAAE,IAAI,QAAQ,UAAU,EAAE,EAAE;qBACvD;iBACF,CAAC;gBACF,MAAM;oBACJ,IAAI,EAAE,6BAA6B;oBACnC,KAAK,EAAE;wBACL,IAAI,EAAE,mBAAmB;wBACzB,KAAK,EAAE,KAAK,CAAC,QAAQ,CAAC,SAAS,IAAI,IAAI;qBACxC;iBACF,CAAC;gBACF,MAAM,EAAE,IAAI,EAAE,4BAA4B,EAAE,CAAC;gBAC7C,SAAS;YACX,CAAC;YACD,IAAI,KAAK,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;gBAC3B,QAAQ,GAAG,IAAI,CAAC;gBAChB,WAAW,GAAG,KAAK,CAAC,WAAW,CAAC;gBAChC,YAAY,GAAG,KAAK,CAAC,YAAY,CAAC;gBAClC,SAAS;YACX,CAAC;YACD,UAAU,GAAG,KAAK,CAAC,MAAM,CAAC;QAC5B,CAAC;QACD,MAAM,EAAE,cAAc,EAAE,CAAC;QACzB,IAAI,IAAI;YAAE,MAAM,EAAE,IAAI,EAAE,4BAA4B,EAAE,CAAC;QACvD,MAAM;YACJ,IAAI,EAAE,uBAAuB;YAC7B,UAAU,EAAE,aAAa,CAAC,UAAU,EAAE,QAAQ,CAAC;SAChD,CAAC;QACF,IAAI,QAAQ,EAAE,CAAC;YACb,MAAM;gBACJ,IAAI,EAAE,oBAAoB;gBAC1B,KAAK,EAAE;oBACL,WAAW;oBACX,YAAY;oBACZ,WAAW,EAAE,WAAW,GAAG,YAAY;iBACxC;aACF,CAAC;QACJ,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,CAAC,YAAY,CACzB,QAAuB,EACvB,UAA6B,EAC7B,KAAqC,EACrC,MAAoB;QAEpB,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC;QAChC,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO;QACpC,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,aAAa,CAAC,0BAA0B,CAChE,KAAK,CAAC,KAAK,EACX,QAAQ,EACR,EAAE,GAAG,UAAU,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAC9C,IAAI,CAAC,MAAM,EACX,KAAK,CAAC,QAAQ,EACd,MAAM,CACP,EAAE,CAAC;YACF,MAAM,EAAE,cAAc,EAAE,CAAC;YACzB,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;gBAC9C,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC;YAC9C,CAAC;iBAAM,IAAI,KAAK,CAAC,IAAI,KAAK,WAAW,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;gBACvD,MAAM,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC;YACnD,CAAC;iBAAM,IAAI,KAAK,CAAC,IAAI,KAAK,WAAW,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC;gBACxD,MAAM,EAAE,IAAI,EAAE,WAAW,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,CAAC;YACxD,CAAC;iBAAM,IAAI,KAAK,CAAC,IAAI,KAAK,OAAO,IAAI,KAAK,CAAC,KAAK,EAAE,CAAC;gBACjD,MAAM;oBACJ,IAAI,EAAE,OAAO;oBACb,WAAW,EAAE,KAAK,CAAC,KAAK,CAAC,YAAY,IAAI,CAAC;oBAC1C,YAAY,EAAE,KAAK,CAAC,KAAK,CAAC,gBAAgB,IAAI,CAAC;iBAChD,CAAC;YACJ,CAAC;iBAAM,IAAI,KAAK,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;gBACjC,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,CAAC,UAAU,EAAE,CAAC;YACnD,CAAC;QACH,CAAC;IACH,CAAC;IAED,6EAA6E;IACrE,KAAK,CAAC,CAAC,YAAY,CACzB,QAAuB,EACvB,UAA6B,EAC7B,KAAqC,EACrC,KAAmB;QAEnB,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;QACzC,MAAM,MAAM,GAAG,KAAK;YAClB,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,UAAU,CAAC,MAAM,CAAC,CAAC;YAC7C,CAAC,CAAC,UAAU,CAAC,MAAM,CAAC;QACtB,MAAM,KAAK,GAAoB,EAAE,CAAC;QAClC,IAAI,aAAa,GAAG,CAAC,CAAC;QACtB,IAAI,OAAO,GAAG,KAAK,CAAC;QACpB,IAAI,OAA0B,CAAC;QAC/B,IAAI,IAA8B,CAAC;QACnC,IAAI,UAA8B,CAAC;QACnC,MAAM,MAAM,GAAG,GAAG,EAAE;YAClB,IAAI,EAAE,EAAE,CAAC;YACT,IAAI,GAAG,SAAS,CAAC;QACnB,CAAC,CAAC;QACF,MAAM,IAAI,GAAG,CAAC,KAAY,EAAE,EAAE;YAC5B,OAAO,KAAP,OAAO,GAAK,KAAK,EAAC;YAClB,OAAO,GAAG,IAAI,CAAC;YACf,MAAM,EAAE,CAAC;QACX,CAAC,CAAC;QACF,MAAM,IAAI,GAAG,CAAC,KAAoB,EAAE,EAAE;YACpC,IAAI,OAAO,IAAI,MAAM,CAAC,OAAO;gBAAE,OAAO;YACtC,MAAM,KAAK,GAAG,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC;YACvD,IACE,KAAK,CAAC,MAAM,IAAI,mBAAmB;gBACnC,aAAa,GAAG,KAAK,GAAG,kBAAkB,EAC1C,CAAC;gBACD,MAAM,KAAK,GAAG,IAAI,KAAK,CACrB,2DAA2D,CAC5D,CAAC;gBACF,IAAI,CAAC,KAAK,CAAC,CAAC;gBACZ,UAAU,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;gBACxB,OAAO;YACT,CAAC;YACD,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAClB,aAAa,IAAI,KAAK,CAAC;YACvB,MAAM,EAAE,CAAC;QACX,CAAC,CAAC;QACF,MAAM,KAAK,GAAG,GAAG,EAAE,CACjB,IAAI,CACF,MAAM,CAAC,MAAM,YAAY,KAAK;YAC5B,CAAC,CAAC,MAAM,CAAC,MAAM;YACf,CAAC,CAAC,IAAI,KAAK,CAAC,iBAAiB,CAAC,CACjC,CAAC;QACJ,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QACxD,IAAI,MAAM,CAAC,OAAO;YAAE,KAAK,EAAE,CAAC;QAE5B,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC;QAChC,MAAM,QAAQ,GAAG,aAAa;aAC3B,0BAA0B,CACzB;YACE,KAAK,EAAE,KAAK,CAAC,KAAK;YAClB,QAAQ;YACR,MAAM,EAAE,IAAI;YACZ,OAAO,EAAE,EAAE,GAAG,UAAU,EAA6B;YACrD,GAAG,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,uBAAuB,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACpE,EACD,KAAK,CAAC,EAAE;YACN,MAAM,IAAI,GAAG,KAAK,CAAC,OAAO,EAAE,OAAO,CAAC;YACpC,IAAI,IAAI;gBAAE,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;YACvC,IAAI,KAAK,CAAC,OAAO,EAAE,QAAQ,EAAE,CAAC;gBAC5B,IAAI,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,KAAK,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAC;YAC5D,CAAC;YACD,KAAK,MAAM,OAAO,IAAI,KAAK,CAAC,OAAO,EAAE,UAAU,IAAI,EAAE,EAAE,CAAC;gBACtD,MAAM,EAAE,GAAG,OAAO,CAAC,QACkC,CAAC;gBACtD,IAAI,CAAC;oBACH,IAAI,EAAE,WAAW;oBACjB,QAAQ,EAAE;wBACR,EAAE,EACA,OAAO,OAAO,CAAC,EAAE,KAAK,QAAQ,IAAI,OAAO,CAAC,EAAE;4BAC1C,CAAC,CAAC,OAAO,CAAC,EAAE;4BACZ,CAAC,CAAC,QAAQ,UAAU,EAAE,EAAE;wBAC5B,IAAI,EAAE,OAAO,EAAE,EAAE,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE;wBACjD,SAAS,EACP,OAAO,EAAE,EAAE,SAAS,KAAK,QAAQ;4BAC/B,CAAC,CAAC,EAAE,CAAC,SAAS;4BACd,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,SAAS,IAAI,EAAE,CAAC;qBAC1C;iBACF,CAAC,CAAC;YACL,CAAC;YACD,IACE,OAAO,KAAK,CAAC,iBAAiB,KAAK,QAAQ;gBAC3C,OAAO,KAAK,CAAC,UAAU,KAAK,QAAQ,EACpC,CAAC;gBACD,IAAI,CAAC;oBACH,IAAI,EAAE,OAAO;oBACb,WAAW,EAAE,KAAK,CAAC,iBAAiB;oBACpC,YAAY,EAAE,KAAK,CAAC,UAAU;iBAC/B,CAAC,CAAC;YACL,CAAC;YACD,IAAI,KAAK,CAAC,WAAW;gBAAE,UAAU,GAAG,KAAK,CAAC,WAAW,CAAC;QACxD,CAAC,EACD,IAAI,EACJ,GAAG,EAAE,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC,EAChD,MAAM,EACN,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CACxB;aACA,KAAK,CAAC,KAAK,CAAC,EAAE,CACb,IAAI,CAAC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAChE;aACA,OAAO,CAAC,GAAG,EAAE;YACZ,OAAO,GAAG,IAAI,CAAC;YACf,MAAM,EAAE,CAAC;QACX,CAAC,CAAC,CAAC;QACL,IAAI,CAAC;YACH,OAAO,CAAC,OAAO,IAAI,KAAK,CAAC,MAAM,EAAE,CAAC;gBAChC,IAAI,OAAO;oBAAE,MAAM,OAAO,CAAC;gBAC3B,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,EAAE,CAAC;gBAC5B,IAAI,KAAK,EAAE,CAAC;oBACV,aAAa,IAAI,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC;oBAC1D,MAAM,KAAK,CAAC;gBACd,CAAC;qBAAM,CAAC;oBACN,MAAM,IAAI,OAAO,CAAO,OAAO,CAAC,EAAE;wBAChC,IAAI,GAAG,OAAO,CAAC;oBACjB,CAAC,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;YACD,IAAI,OAAO;gBAAE,MAAM,OAAO,CAAC;QAC7B,CAAC;gBAAS,CAAC;YACT,MAAM,CAAC,mBAAmB,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;YAC3C,UAAU,CAAC,KAAK,EAAE,CAAC;YACnB,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC;YACjB,MAAM,QAAQ,CAAC;QACjB,CAAC;IACH,CAAC;CACF"}

package/backend/dist/strands/runtime.d.ts

@@ -0,0 +1,4 @@
+export declare function getStrandsEngine(): Promise<import('./engine.js').StrandsEngine>;
+/** Cancel live turns during shutdown. A never-loaded engine has none. */
+export declare function stopStrandsEngine(): Promise<void>;
+//# sourceMappingURL=runtime.d.ts.map

package/backend/dist/strands/runtime.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"runtime.d.ts","sourceRoot":"","sources":["../../src/strands/runtime.ts"],"names":[],"mappings":"AAyBA,wBAAgB,gBAAgB,IAAI,OAAO,CACzC,OAAO,aAAa,EAAE,aAAa,CACpC,CAGA;AAED,yEAAyE;AACzE,wBAAsB,iBAAiB,IAAI,OAAO,CAAC,IAAI,CAAC,CAIvD"}

package/backend/dist/{cordis/work-model.js → strands/runtime.js}

@@ -14,17 +14,21 @@
  * See the License for the specific language governing permissions and
  * limitations under the License.
  */
-/** Engine selection stored alongside the model in existing Work records. */
-export const WORK_DSH_MODEL_PREFIX = 'dsh:';
-/** Whether Work should use its isolated DSH driver for this model selection. */
-export function isWorkDshModel(model) {
-    return model.trim().startsWith(WORK_DSH_MODEL_PREFIX);
+/**
+ * Entry points the rest of the server uses for the Strands engine. Keeping
+ * them here, behind dynamic imports, means the SDK loads only when a turn
+ * actually needs it.
+ */
+let loaded;
+export function getStrandsEngine() {
+    loaded ?? (loaded = import('./engine.js'));
+    return loaded.then(module => module.strandsEngine);
 }
-/** Recover the provider's exact model id without changing provider identity. */
-export function workProviderModel(model) {
-    const selected = model.trim();
-    return isWorkDshModel(selected)
-        ? selected.slice(WORK_DSH_MODEL_PREFIX.length).trim()
-        : selected;
+/** Cancel live turns during shutdown. A never-loaded engine has none. */
+export async function stopStrandsEngine() {
+    if (!loaded)
+        return;
+    const engine = await loaded.then(module => module.strandsEngine);
+    await engine.stop();
 }
-//# sourceMappingURL=work-model.js.map
+//# sourceMappingURL=runtime.js.map

package/backend/dist/strands/runtime.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"runtime.js","sourceRoot":"","sources":["../../src/strands/runtime.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH;;;;GAIG;AAEH,IAAI,MAAyD,CAAC;AAE9D,MAAM,UAAU,gBAAgB;IAG9B,MAAM,KAAN,MAAM,GAAK,MAAM,CAAC,aAAa,CAAC,EAAC;IACjC,OAAO,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC;AACrD,CAAC;AAED,yEAAyE;AACzE,MAAM,CAAC,KAAK,UAAU,iBAAiB;IACrC,IAAI,CAAC,MAAM;QAAE,OAAO;IACpB,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC;IACjE,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;AACtB,CAAC"}

package/backend/dist/strands/sandbox.d.ts

@@ -0,0 +1,24 @@
+import { Sandbox, type ExecuteOptions } from '@strands-agents/sdk/sandbox';
+import type { ExecutionResult, FileInfo, StreamChunk } from '@strands-agents/sdk/sandbox';
+/** The path the agent sees as its workspace root. */
+export declare const STRANDS_WORKSPACE_ROOT = "/workspace";
+/** Largest file an agent may read or write in one call. */
+export declare const STRANDS_MAX_FILE_BYTES: number;
+export declare class StrandsSandboxError extends Error {
+    constructor(message: string);
+}
+export declare class WorkspaceSandbox extends Sandbox {
+    private readonly root;
+    private realRoot;
+    constructor(root: string);
+    /** Resolve a virtual path to a host path inside the workspace. */
+    resolve(virtualPath: string): Promise<string>;
+    private ensureRoot;
+    executeStreaming(_command: string, _options?: ExecuteOptions): AsyncIterable<StreamChunk | ExecutionResult>;
+    executeCodeStreaming(_code: string, _language: string, _options?: ExecuteOptions): AsyncIterable<StreamChunk | ExecutionResult>;
+    readFile(virtualPath: string): Promise<Uint8Array>;
+    writeFile(virtualPath: string, content: Uint8Array): Promise<void>;
+    removeFile(virtualPath: string): Promise<void>;
+    listFiles(virtualPath: string): Promise<FileInfo[]>;
+}
+//# sourceMappingURL=sandbox.d.ts.map

package/backend/dist/strands/sandbox.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sandbox.d.ts","sourceRoot":"","sources":["../../src/strands/sandbox.ts"],"names":[],"mappings":"AA4BA,OAAO,EAAE,OAAO,EAAE,KAAK,cAAc,EAAE,MAAM,6BAA6B,CAAC;AAC3E,OAAO,KAAK,EACV,eAAe,EACf,QAAQ,EACR,WAAW,EACZ,MAAM,6BAA6B,CAAC;AAErC,qDAAqD;AACrD,eAAO,MAAM,sBAAsB,eAAe,CAAC;AAEnD,2DAA2D;AAC3D,eAAO,MAAM,sBAAsB,QAAkB,CAAC;AAEtD,qBAAa,mBAAoB,SAAQ,KAAK;IAC5C,YAAY,OAAO,EAAE,MAAM,EAG1B;CACF;AAUD,qBAAa,gBAAiB,SAAQ,OAAO;IAG/B,OAAO,CAAC,QAAQ,CAAC,IAAI;IAFjC,OAAO,CAAC,QAAQ,CAAqB;IAErC,YAA6B,IAAI,EAAE,MAAM,EAExC;IAED,kEAAkE;IAC5D,OAAO,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAwClD;YAEa,UAAU;IAQjB,gBAAgB,CACrB,QAAQ,EAAE,MAAM,EAChB,QAAQ,CAAC,EAAE,cAAc,GACxB,aAAa,CAAC,WAAW,GAAG,eAAe,CAAC,CAI9C;IAGM,oBAAoB,CACzB,KAAK,EAAE,MAAM,EACb,SAAS,EAAE,MAAM,EACjB,QAAQ,CAAC,EAAE,cAAc,GACxB,aAAa,CAAC,WAAW,GAAG,eAAe,CAAC,CAI9C;IAEK,QAAQ,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC,CAUvD;IAEK,SAAS,CAAC,WAAW,EAAE,MAAM,EAAE,OAAO,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC,CAiBvE;IAEK,UAAU,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAMnD;IAEK,SAAS,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,QAAQ,EAAE,CAAC,CAkBxD;CACF"}

package/backend/dist/strands/sandbox.js

@@ -0,0 +1,156 @@
+/*
+ * Libre WebUI
+ * Copyright (C) 2025 Kroonen AI, Inc.
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at:
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+/**
+ * The only filesystem a Strands agent can see. The SDK's default environment
+ * runs on the host with no isolation, so Libre WebUI replaces it with a
+ * sandbox that maps a virtual `/workspace` onto one private directory per
+ * account and refuses to execute commands. Paths are checked after symlink
+ * resolution, so a link inside the workspace cannot reach the rest of the
+ * disk.
+ */
+import fs from 'node:fs/promises';
+import path from 'node:path';
+import { Sandbox } from '@strands-agents/sdk/sandbox';
+/** The path the agent sees as its workspace root. */
+export const STRANDS_WORKSPACE_ROOT = '/workspace';
+/** Largest file an agent may read or write in one call. */
+export const STRANDS_MAX_FILE_BYTES = 2 * 1024 * 1024;
+export class StrandsSandboxError extends Error {
+    constructor(message) {
+        super(message);
+        this.name = 'StrandsSandboxError';
+    }
+}
+function isInside(root, candidate) {
+    const relative = path.relative(root, candidate);
+    return (relative === '' ||
+        (!relative.startsWith('..') && !path.isAbsolute(relative)));
+}
+export class WorkspaceSandbox extends Sandbox {
+    constructor(root) {
+        super();
+        this.root = root;
+    }
+    /** Resolve a virtual path to a host path inside the workspace. */
+    async resolve(virtualPath) {
+        if (typeof virtualPath !== 'string' || virtualPath.includes('\0')) {
+            throw new StrandsSandboxError('The path is invalid.');
+        }
+        const normalized = path.posix.normalize(virtualPath.startsWith('/')
+            ? virtualPath
+            : `${STRANDS_WORKSPACE_ROOT}/${virtualPath}`);
+        if (normalized !== STRANDS_WORKSPACE_ROOT &&
+            !normalized.startsWith(`${STRANDS_WORKSPACE_ROOT}/`)) {
+            throw new StrandsSandboxError(`Only paths under ${STRANDS_WORKSPACE_ROOT} are available.`);
+        }
+        const relative = normalized.slice(STRANDS_WORKSPACE_ROOT.length);
+        const root = await this.ensureRoot();
+        const target = path.join(root, ...relative.split('/').filter(Boolean));
+        if (!isInside(root, target)) {
+            throw new StrandsSandboxError('The path leaves the workspace.');
+        }
+        // Resolve the deepest existing ancestor so symlinks cannot escape.
+        let probe = target;
+        for (;;) {
+            try {
+                const real = await fs.realpath(probe);
+                if (!isInside(root, real)) {
+                    throw new StrandsSandboxError('The path leaves the workspace.');
+                }
+                break;
+            }
+            catch (error) {
+                if (error instanceof StrandsSandboxError)
+                    throw error;
+                const parent = path.dirname(probe);
+                if (parent === probe)
+                    break;
+                probe = parent;
+            }
+        }
+        return target;
+    }
+    async ensureRoot() {
+        if (this.realRoot)
+            return this.realRoot;
+        await fs.mkdir(this.root, { recursive: true, mode: 0o700 });
+        this.realRoot = await fs.realpath(this.root);
+        return this.realRoot;
+    }
+    // eslint-disable-next-line require-yield
+    async *executeStreaming(_command, _options) {
+        throw new StrandsSandboxError('Command execution is not available in the Strands workspace.');
+    }
+    // eslint-disable-next-line require-yield
+    async *executeCodeStreaming(_code, _language, _options) {
+        throw new StrandsSandboxError('Code execution is not available in the Strands workspace.');
+    }
+    async readFile(virtualPath) {
+        const target = await this.resolve(virtualPath);
+        const stat = await fs.stat(target).catch(() => undefined);
+        if (!stat?.isFile()) {
+            throw new StrandsSandboxError(`No file at ${virtualPath}.`);
+        }
+        if (stat.size > STRANDS_MAX_FILE_BYTES) {
+            throw new StrandsSandboxError(`${virtualPath} is too large to read.`);
+        }
+        return new Uint8Array(await fs.readFile(target));
+    }
+    async writeFile(virtualPath, content) {
+        if (content.byteLength > STRANDS_MAX_FILE_BYTES) {
+            throw new StrandsSandboxError('The file is too large to write.');
+        }
+        const target = await this.resolve(virtualPath);
+        const root = await this.ensureRoot();
+        if (target === root) {
+            throw new StrandsSandboxError('The workspace root is a directory.');
+        }
+        await fs.mkdir(path.dirname(target), { recursive: true, mode: 0o700 });
+        // Re-check after creating parents in case a concurrent link appeared.
+        await this.resolve(virtualPath);
+        const existing = await fs.lstat(target).catch(() => undefined);
+        if (existing?.isSymbolicLink()) {
+            throw new StrandsSandboxError('Writing through a symlink is refused.');
+        }
+        await fs.writeFile(target, content, { mode: 0o600 });
+    }
+    async removeFile(virtualPath) {
+        const target = await this.resolve(virtualPath);
+        if (target === (await this.ensureRoot())) {
+            throw new StrandsSandboxError('The workspace root cannot be removed.');
+        }
+        await fs.rm(target, { force: false });
+    }
+    async listFiles(virtualPath) {
+        const target = await this.resolve(virtualPath);
+        const entries = await fs.readdir(target, { withFileTypes: true });
+        return Promise.all(entries.map(async (entry) => {
+            const info = entry.isDirectory()
+                ? { name: entry.name, isDir: true }
+                : {
+                    name: entry.name,
+                    isDir: false,
+                    size: await fs
+                        .stat(path.join(target, entry.name))
+                        .then(stat => stat.size)
+                        .catch(() => undefined),
+                };
+            return info;
+        }));
+    }
+}
+//# sourceMappingURL=sandbox.js.map

package/backend/dist/strands/sandbox.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sandbox.js","sourceRoot":"","sources":["../../src/strands/sandbox.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH;;;;;;;GAOG;AAEH,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAClC,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,OAAO,EAAuB,MAAM,6BAA6B,CAAC;AAO3E,qDAAqD;AACrD,MAAM,CAAC,MAAM,sBAAsB,GAAG,YAAY,CAAC;AAEnD,2DAA2D;AAC3D,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,GAAG,IAAI,GAAG,IAAI,CAAC;AAEtD,MAAM,OAAO,mBAAoB,SAAQ,KAAK;IAC5C,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,qBAAqB,CAAC;IACpC,CAAC;CACF;AAED,SAAS,QAAQ,CAAC,IAAY,EAAE,SAAiB;IAC/C,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;IAChD,OAAO,CACL,QAAQ,KAAK,EAAE;QACf,CAAC,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,CAC3D,CAAC;AACJ,CAAC;AAED,MAAM,OAAO,gBAAiB,SAAQ,OAAO;IAG3C,YAA6B,IAAY;QACvC,KAAK,EAAE,CAAC;oBADmB,IAAI;IAEjC,CAAC;IAED,kEAAkE;IAClE,KAAK,CAAC,OAAO,CAAC,WAAmB;QAC/B,IAAI,OAAO,WAAW,KAAK,QAAQ,IAAI,WAAW,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;YAClE,MAAM,IAAI,mBAAmB,CAAC,sBAAsB,CAAC,CAAC;QACxD,CAAC;QACD,MAAM,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,CACrC,WAAW,CAAC,UAAU,CAAC,GAAG,CAAC;YACzB,CAAC,CAAC,WAAW;YACb,CAAC,CAAC,GAAG,sBAAsB,IAAI,WAAW,EAAE,CAC/C,CAAC;QACF,IACE,UAAU,KAAK,sBAAsB;YACrC,CAAC,UAAU,CAAC,UAAU,CAAC,GAAG,sBAAsB,GAAG,CAAC,EACpD,CAAC;YACD,MAAM,IAAI,mBAAmB,CAC3B,oBAAoB,sBAAsB,iBAAiB,CAC5D,CAAC;QACJ,CAAC;QACD,MAAM,QAAQ,GAAG,UAAU,CAAC,KAAK,CAAC,sBAAsB,CAAC,MAAM,CAAC,CAAC;QACjE,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,UAAU,EAAE,CAAC;QACrC,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC;QACvE,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE,CAAC;YAC5B,MAAM,IAAI,mBAAmB,CAAC,gCAAgC,CAAC,CAAC;QAClE,CAAC;QACD,mEAAmE;QACnE,IAAI,KAAK,GAAG,MAAM,CAAC;QACnB,SAAS,CAAC;YACR,IAAI,CAAC;gBACH,MAAM,IAAI,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;gBACtC,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,CAAC;oBAC1B,MAAM,IAAI,mBAAmB,CAAC,gCAAgC,CAAC,CAAC;gBAClE,CAAC;gBACD,MAAM;YACR,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,KAAK,YAAY,mBAAmB;oBAAE,MAAM,KAAK,CAAC;gBACtD,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;gBACnC,IAAI,MAAM,KAAK,KAAK;oBAAE,MAAM;gBAC5B,KAAK,GAAG,MAAM,CAAC;YACjB,CAAC;QACH,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IAEO,KAAK,CAAC,UAAU;QACtB,IAAI,IAAI,CAAC,QAAQ;YAAE,OAAO,IAAI,CAAC,QAAQ,CAAC;QACxC,MAAM,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QAC5D,IAAI,CAAC,QAAQ,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC7C,OAAO,IAAI,CAAC,QAAQ,CAAC;IACvB,CAAC;IAED,yCAAyC;IACzC,KAAK,CAAC,CAAC,gBAAgB,CACrB,QAAgB,EAChB,QAAyB;QAEzB,MAAM,IAAI,mBAAmB,CAC3B,8DAA8D,CAC/D,CAAC;IACJ,CAAC;IAED,yCAAyC;IACzC,KAAK,CAAC,CAAC,oBAAoB,CACzB,KAAa,EACb,SAAiB,EACjB,QAAyB;QAEzB,MAAM,IAAI,mBAAmB,CAC3B,2DAA2D,CAC5D,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,WAAmB;QAChC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;QAC/C,MAAM,IAAI,GAAG,MAAM,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QAC1D,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,CAAC;YACpB,MAAM,IAAI,mBAAmB,CAAC,cAAc,WAAW,GAAG,CAAC,CAAC;QAC9D,CAAC;QACD,IAAI,IAAI,CAAC,IAAI,GAAG,sBAAsB,EAAE,CAAC;YACvC,MAAM,IAAI,mBAAmB,CAAC,GAAG,WAAW,wBAAwB,CAAC,CAAC;QACxE,CAAC;QACD,OAAO,IAAI,UAAU,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;IACnD,CAAC;IAED,KAAK,CAAC,SAAS,CAAC,WAAmB,EAAE,OAAmB;QACtD,IAAI,OAAO,CAAC,UAAU,GAAG,sBAAsB,EAAE,CAAC;YAChD,MAAM,IAAI,mBAAmB,CAAC,iCAAiC,CAAC,CAAC;QACnE,CAAC;QACD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;QAC/C,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,UAAU,EAAE,CAAC;QACrC,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;YACpB,MAAM,IAAI,mBAAmB,CAAC,oCAAoC,CAAC,CAAC;QACtE,CAAC;QACD,MAAM,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QACvE,sEAAsE;QACtE,MAAM,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;QAChC,MAAM,QAAQ,GAAG,MAAM,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QAC/D,IAAI,QAAQ,EAAE,cAAc,EAAE,EAAE,CAAC;YAC/B,MAAM,IAAI,mBAAmB,CAAC,uCAAuC,CAAC,CAAC;QACzE,CAAC;QACD,MAAM,EAAE,CAAC,SAAS,CAAC,MAAM,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACvD,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,WAAmB;QAClC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;QAC/C,IAAI,MAAM,KAAK,CAAC,MAAM,IAAI,CAAC,UAAU,EAAE,CAAC,EAAE,CAAC;YACzC,MAAM,IAAI,mBAAmB,CAAC,uCAAuC,CAAC,CAAC;QACzE,CAAC;QACD,MAAM,EAAE,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;IACxC,CAAC;IAED,KAAK,CAAC,SAAS,CAAC,WAAmB;QACjC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;QAC/C,MAAM,OAAO,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;QAClE,OAAO,OAAO,CAAC,GAAG,CAChB,OAAO,CAAC,GAAG,CAAC,KAAK,EAAC,KAAK,EAAC,EAAE;YACxB,MAAM,IAAI,GAAa,KAAK,CAAC,WAAW,EAAE;gBACxC,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE;gBACnC,CAAC,CAAC;oBACE,IAAI,EAAE,KAAK,CAAC,IAAI;oBAChB,KAAK,EAAE,KAAK;oBACZ,IAAI,EAAE,MAAM,EAAE;yBACX,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;yBACnC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC;yBACvB,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC;iBAC1B,CAAC;YACN,OAAO,IAAI,CAAC;QACd,CAAC,CAAC,CACH,CAAC;IACJ,CAAC;CACF"}

package/backend/dist/strands/work-driver.d.ts

@@ -0,0 +1,11 @@
+import type { OllamaChatRequest, OllamaChatResponse } from '../types/index.js';
+import type { WorkModelStreamObserver } from '../services/workModelProviderService.js';
+export interface WorkStrandsDriver {
+    generate(request: OllamaChatRequest, observer: WorkModelStreamObserver, signal?: AbortSignal): Promise<OllamaChatResponse>;
+    dispose(): Promise<void>;
+}
+export interface WorkStrandsDriverOptions {
+    generate(request: OllamaChatRequest, observer: WorkModelStreamObserver, signal?: AbortSignal): Promise<OllamaChatResponse>;
+}
+export declare function createWorkStrandsDriver(options: WorkStrandsDriverOptions): Promise<WorkStrandsDriver>;
+//# sourceMappingURL=work-driver.d.ts.map