libre-webui 0.39.0 → 0.40.0

package/backend/dist/utils/pluginDefinitionTrust.js

@@ -22,7 +22,7 @@ import { createHash } from 'crypto';
 export const BUNDLED_PLUGIN_DEFINITION_FINGERPRINTS = Object.freeze({
     anthropic: '282d559305b7a3a8010854cb5889aac992d799d1f3c6bdfd7b3b1009af53dca8',
     bedrock: '22eaf01882bfbf2d911cb320103de97f534f3aef829001b982d21445a9ed4980',
-    'codex-oauth': '733d9992eb9209deaec037230cae31178e6000c009d971fef6c26a7666a6f46f',
+    'codex-oauth': '685ec47cc56dcf8cb9bd1667f41ad69a94eb66c1d6dd9aeca5564134c1b1b1f3',
     comfyui: 'eaefe81897b58bffdf92bae8f0d0b675a062af276d5379e43147d6a0adaf0f47',
     deepseek: '32cc8662939e304869f9e02ef3b7c8ced6ffe14c333bea9230bfabe2f2350181',
     elevenlabs: 'de6afcbd123600f484a078227618b5c9687bc56f6e2637b57514349fbcea63d6',
@@ -68,6 +68,54 @@ export function getPluginDefinitionFingerprint(plugin) {
         .update(JSON.stringify(canonicalize(definition)))
         .digest('hex');
 }
+const MODEL_PLACEHOLDER = '{model}';
+/** True when every `{model}` sits after the host of an absolute URL. */
+function modelPlaceholderStaysInPath(value) {
+    let index = value.indexOf(MODEL_PLACEHOLDER);
+    while (index !== -1) {
+        if (!/^[a-z][a-z\d+.-]*:\/\/[^/?#]*[/?#]/i.test(value.slice(0, index))) {
+            return false;
+        }
+        index = value.indexOf(MODEL_PLACEHOLDER, index + MODEL_PLACEHOLDER.length);
+    }
+    return true;
+}
+function someString(value, predicate) {
+    if (typeof value === 'string')
+        return predicate(value);
+    if (Array.isArray(value)) {
+        return value.some(item => someString(item, predicate));
+    }
+    if (value && typeof value === 'object') {
+        return Object.values(value).some(item => someString(item, predicate));
+    }
+    return false;
+}
+/** Model catalog fields: which models exist, never where a request goes. */
+const MODEL_CATALOG_FIELDS = ['model_map', 'model_context', 'model_reasoning'];
+/**
+ * Definition fingerprint that binds a saved credential. The model catalogs,
+ * top-level and per capability, are left out so adding a model does not
+ * strand every saved key. When a `{model}` placeholder could pick the
+ * destination host, the catalog is routing and stays bound.
+ */
+export function getCredentialBindingDefinitionFingerprint(plugin, connectionValues = []) {
+    if (someString([plugin, connectionValues], text => !modelPlaceholderStaysInPath(text))) {
+        return getPluginDefinitionFingerprint(plugin);
+    }
+    const withoutCatalog = (value) => Object.fromEntries(Object.entries(value).filter(([key]) => !MODEL_CATALOG_FIELDS.includes(key)));
+    const definition = withoutCatalog(plugin);
+    const capabilities = definition.capabilities;
+    if (capabilities && typeof capabilities === 'object') {
+        definition.capabilities = Object.fromEntries(Object.entries(capabilities).map(([name, capability]) => [
+            name,
+            capability && typeof capability === 'object'
+                ? withoutCatalog(capability)
+                : capability,
+        ]));
+    }
+    return getPluginDefinitionFingerprint(definition);
+}
 export function matchesBundledPluginTrustAnchor(plugin) {
     return (BUNDLED_PLUGIN_DEFINITION_FINGERPRINTS[plugin.id] ===
         getPluginDefinitionFingerprint(plugin));

package/backend/dist/utils/pluginDefinitionTrust.js.map

@@ -1 +1 @@
-{"version":3,"file":"pluginDefinitionTrust.js","sourceRoot":"","sources":["../../src/utils/pluginDefinitionTrust.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,QAAQ,CAAC;AAGpC;;;GAGG;AACH,MAAM,CAAC,MAAM,sCAAsC,GAE/C,MAAM,CAAC,MAAM,CAAC;IAChB,SAAS,EAAE,kEAAkE;IAC7E,OAAO,EAAE,kEAAkE;IAC3E,aAAa,EACX,kEAAkE;IACpE,OAAO,EAAE,kEAAkE;IAC3E,QAAQ,EAAE,kEAAkE;IAC5E,UAAU,EACR,kEAAkE;IACpE,MAAM,EAAE,kEAAkE;IAC1E,MAAM,EAAE,kEAAkE;IAC1E,IAAI,EAAE,kEAAkE;IACxE,WAAW,EACT,kEAAkE;IACpE,WAAW,EACT,kEAAkE;IACpE,iBAAiB,EACf,kEAAkE;IACpE,YAAY,EACV,kEAAkE;IACpE,WAAW,EACT,kEAAkE;IACpE,kBAAkB,EAChB,kEAAkE;IACpE,OAAO,EAAE,kEAAkE;IAC3E,QAAQ,EAAE,kEAAkE;IAC5E,YAAY,EACV,kEAAkE;IACpE,MAAM,EAAE,kEAAkE;IAC1E,UAAU,EACR,kEAAkE;IACpE,UAAU,EACR,kEAAkE;CACrE,CAAC,CAAC;AAEH,MAAM,yBAAyB,GAAG,IAAI,GAAG,CAAC;IACxC,QAAQ;IACR,YAAY;IACZ,YAAY;CACb,CAAC,CAAC;AAEH,SAAS,YAAY,CAAC,KAAc;IAClC,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,KAAK,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;IACjC,CAAC;IACD,IAAI,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QACvC,OAAO,MAAM,CAAC,WAAW,CACvB,MAAM,CAAC,IAAI,CAAC,KAAgC,CAAC;aAC1C,IAAI,EAAE;aACN,MAAM,CAAC,GAAG,CAAC,EAAE,CAAE,KAAiC,CAAC,GAAG,CAAC,KAAK,SAAS,CAAC;aACpE,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;YACV,GAAG;YACH,YAAY,CAAE,KAAiC,CAAC,GAAG,CAAC,CAAC;SACtD,CAAC,CACL,CAAC;IACJ,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,UAAU,8BAA8B,CAAC,MAAc;IAC3D,MAAM,UAAU,GAAG,MAAM,CAAC,WAAW,CACnC,MAAM,CAAC,OAAO,CAAC,MAA4C,CAAC,CAAC,MAAM,CACjE,CAAC,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC,yBAAyB,CAAC,GAAG,CAAC,GAAG,CAAC,CAC/C,CACF,CAAC;IACF,OAAO,UAAU,CAAC,QAAQ,CAAC;SACxB,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC,UAAU,CAAC,CAAC,CAAC;SAChD,MAAM,CAAC,KAAK,CAAC,CAAC;AACnB,CAAC;AAED,MAAM,UAAU,+BAA+B,CAAC,MAAc;IAC5D,OAAO,CACL,sCAAsC,CAAC,MAAM,CAAC,EAAE,CAAC;QACjD,8BAA8B,CAAC,MAAM,CAAC,CACvC,CAAC;AACJ,CAAC"}
+{"version":3,"file":"pluginDefinitionTrust.js","sourceRoot":"","sources":["../../src/utils/pluginDefinitionTrust.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,QAAQ,CAAC;AAGpC;;;GAGG;AACH,MAAM,CAAC,MAAM,sCAAsC,GAE/C,MAAM,CAAC,MAAM,CAAC;IAChB,SAAS,EAAE,kEAAkE;IAC7E,OAAO,EAAE,kEAAkE;IAC3E,aAAa,EACX,kEAAkE;IACpE,OAAO,EAAE,kEAAkE;IAC3E,QAAQ,EAAE,kEAAkE;IAC5E,UAAU,EACR,kEAAkE;IACpE,MAAM,EAAE,kEAAkE;IAC1E,MAAM,EAAE,kEAAkE;IAC1E,IAAI,EAAE,kEAAkE;IACxE,WAAW,EACT,kEAAkE;IACpE,WAAW,EACT,kEAAkE;IACpE,iBAAiB,EACf,kEAAkE;IACpE,YAAY,EACV,kEAAkE;IACpE,WAAW,EACT,kEAAkE;IACpE,kBAAkB,EAChB,kEAAkE;IACpE,OAAO,EAAE,kEAAkE;IAC3E,QAAQ,EAAE,kEAAkE;IAC5E,YAAY,EACV,kEAAkE;IACpE,MAAM,EAAE,kEAAkE;IAC1E,UAAU,EACR,kEAAkE;IACpE,UAAU,EACR,kEAAkE;CACrE,CAAC,CAAC;AAEH,MAAM,yBAAyB,GAAG,IAAI,GAAG,CAAC;IACxC,QAAQ;IACR,YAAY;IACZ,YAAY;CACb,CAAC,CAAC;AAEH,SAAS,YAAY,CAAC,KAAc;IAClC,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,KAAK,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;IACjC,CAAC;IACD,IAAI,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QACvC,OAAO,MAAM,CAAC,WAAW,CACvB,MAAM,CAAC,IAAI,CAAC,KAAgC,CAAC;aAC1C,IAAI,EAAE;aACN,MAAM,CAAC,GAAG,CAAC,EAAE,CAAE,KAAiC,CAAC,GAAG,CAAC,KAAK,SAAS,CAAC;aACpE,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;YACV,GAAG;YACH,YAAY,CAAE,KAAiC,CAAC,GAAG,CAAC,CAAC;SACtD,CAAC,CACL,CAAC;IACJ,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,UAAU,8BAA8B,CAAC,MAAc;IAC3D,MAAM,UAAU,GAAG,MAAM,CAAC,WAAW,CACnC,MAAM,CAAC,OAAO,CAAC,MAA4C,CAAC,CAAC,MAAM,CACjE,CAAC,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC,yBAAyB,CAAC,GAAG,CAAC,GAAG,CAAC,CAC/C,CACF,CAAC;IACF,OAAO,UAAU,CAAC,QAAQ,CAAC;SACxB,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC,UAAU,CAAC,CAAC,CAAC;SAChD,MAAM,CAAC,KAAK,CAAC,CAAC;AACnB,CAAC;AAED,MAAM,iBAAiB,GAAG,SAAS,CAAC;AAEpC,wEAAwE;AACxE,SAAS,2BAA2B,CAAC,KAAa;IAChD,IAAI,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC;IAC7C,OAAO,KAAK,KAAK,CAAC,CAAC,EAAE,CAAC;QACpB,IAAI,CAAC,qCAAqC,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,EAAE,CAAC;YACvE,OAAO,KAAK,CAAC;QACf,CAAC;QACD,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,iBAAiB,EAAE,KAAK,GAAG,iBAAiB,CAAC,MAAM,CAAC,CAAC;IAC7E,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,UAAU,CACjB,KAAc,EACd,SAAoC;IAEpC,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,SAAS,CAAC,KAAK,CAAC,CAAC;IACvD,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC,CAAC;IACzD,CAAC;IACD,IAAI,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QACvC,OAAO,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC,CAAC;IACxE,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,4EAA4E;AAC5E,MAAM,oBAAoB,GAAG,CAAC,WAAW,EAAE,eAAe,EAAE,iBAAiB,CAAC,CAAC;AAE/E;;;;;GAKG;AACH,MAAM,UAAU,yCAAyC,CACvD,MAAc,EACd,gBAAgB,GAAY,EAAE;IAE9B,IACE,UAAU,CACR,CAAC,MAAM,EAAE,gBAAgB,CAAC,EAC1B,IAAI,CAAC,EAAE,CAAC,CAAC,2BAA2B,CAAC,IAAI,CAAC,CAC3C,EACD,CAAC;QACD,OAAO,8BAA8B,CAAC,MAAM,CAAC,CAAC;IAChD,CAAC;IACD,MAAM,cAAc,GAAG,CAAC,KAA8B,EAAE,EAAE,CACxD,MAAM,CAAC,WAAW,CAChB,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,MAAM,CAC1B,CAAC,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC,oBAAoB,CAAC,QAAQ,CAAC,GAAG,CAAC,CAC/C,CACF,CAAC;IACJ,MAAM,UAAU,GAAG,cAAc,CAC/B,MAA4C,CAC7C,CAAC;IACF,MAAM,YAAY,GAAG,UAAU,CAAC,YAAY,CAAC;IAC7C,IAAI,YAAY,IAAI,OAAO,YAAY,KAAK,QAAQ,EAAE,CAAC;QACrD,UAAU,CAAC,YAAY,GAAG,MAAM,CAAC,WAAW,CAC1C,MAAM,CAAC,OAAO,CAAC,YAAuC,CAAC,CAAC,GAAG,CACzD,CAAC,CAAC,IAAI,EAAE,UAAU,CAAC,EAAE,EAAE,CAAC;YACtB,IAAI;YACJ,UAAU,IAAI,OAAO,UAAU,KAAK,QAAQ;gBAC1C,CAAC,CAAC,cAAc,CAAC,UAAqC,CAAC;gBACvD,CAAC,CAAC,UAAU;SACf,CACF,CACF,CAAC;IACJ,CAAC;IACD,OAAO,8BAA8B,CAAC,UAA+B,CAAC,CAAC;AACzE,CAAC;AAED,MAAM,UAAU,+BAA+B,CAAC,MAAc;IAC5D,OAAO,CACL,sCAAsC,CAAC,MAAM,CAAC,EAAE,CAAC;QACjD,8BAA8B,CAAC,MAAM,CAAC,CACvC,CAAC;AACJ,CAAC"}

package/backend/package.json

@@ -1,6 +1,6 @@
 {
   "name": "libre-webui-backend",
-  "version": "0.39.0",
+  "version": "0.40.0",
   "license": "Apache-2.0",
   "type": "module",
   "description": "Backend API for Libre WebUI",

package/frontend/dist/artifact-runtime/.build-fingerprint

@@ -1 +1 @@
-35f90e513d3ddf5d3bfa89c7881da9d426bc100ad63414092b3d5dd8682370b3
+cdc4441c07ad66b3f9dd0bf9c6d4cd4ee1bbf3466c2959dc65ba895fb20d0aee