tinywebui 0.1.4 → 0.1.5

package/src/tools/task_tool.js

@@ -1,63 +1,66 @@
-/** A small, chat-scoped checklist that the model can maintain during a task. */
 export const MANAGE_TASKS = 'manage_tasks';
-
 export function taskToolDef() {
-  return {
-    type: 'function',
-    function: {
-      name: MANAGE_TASKS,
-      description: 'Keep a visible checklist for this chat. Create tasks when a request has multiple steps. Mark a task in_progress when you start it and completed as soon as it is done; before your final answer, make sure no finished task is still open. Update several tasks at once with ids. This is a checklist, not a scheduled automation.',
-      parameters: {
-        type: 'object',
-        properties: {
-          action: { type: 'string', enum: ['add', 'update', 'list'] },
-          title: { type: 'string', description: 'Short task title for add.' },
-          id: { type: 'string', description: 'Task ID returned by add or list, for update.' },
-          ids: { type: 'array', items: { type: 'string' }, description: 'Several task IDs to set to the same status, for update.' },
-          status: { type: 'string', enum: ['pending', 'in_progress', 'completed'], description: 'New status for update.' }
-        },
-        required: ['action']
-      }
-    }
-  };
+    return {
+        type: 'function',
+        function: {
+            name: MANAGE_TASKS,
+            description: 'Keep a visible checklist for this chat. Create tasks when a request has multiple steps. Mark a task in_progress when you start it and completed as soon as it is done; before your final answer, make sure no finished task is still open. Update several tasks at once with ids. This is a checklist, not a scheduled automation.',
+            parameters: {
+                type: 'object',
+                properties: {
+                    action: { type: 'string', enum: ['add', 'update', 'list'] },
+                    title: { type: 'string', description: 'Short task title for add.' },
+                    id: { type: 'string', description: 'Task ID returned by add or list, for update.' },
+                    ids: { type: 'array', items: { type: 'string' }, description: 'Several task IDs to set to the same status, for update.' },
+                    status: { type: 'string', enum: ['pending', 'in_progress', 'completed'], description: 'New status for update.' }
+                },
+                required: ['action']
+            }
+        }
+    };
 }
-
 export function callManageTasks(args, { store, chatId, onChange } = {}) {
-  if (!store || !chatId) return 'Error: this tool requires a chat.';
-  const { action } = args || {};
-  if (action === 'list') return JSON.stringify({ tasks: store.chats.listTasks(chatId) });
-  if (action === 'add') {
-    const title = typeof args.title === 'string' ? args.title.trim() : '';
-    if (!title || title.length > 200) return 'Error: title must be 1–200 characters.';
-    if (store.chats.listTasks(chatId).length >= 50) return 'Error: this chat has reached the 50-task limit.';
-    const task = store.chats.addTask(chatId, title);
-    onChange?.(store.chats.listTasks(chatId));
-    return JSON.stringify({ task });
-  }
-  if (action === 'update') {
-    const ids = Array.isArray(args.ids) ? args.ids : [args.id];
-    if (!ids.length || ids.some((id) => typeof id !== 'string' || !id)
-      || !['pending', 'in_progress', 'completed'].includes(args.status)) {
-      return 'Error: update requires a valid task id (or ids) and status.';
+    if (!store || !chatId)
+        return 'Error: this tool requires a chat.';
+    const { action } = args || {};
+    if (action === 'list')
+        return JSON.stringify({ tasks: store.chats.listTasks(chatId) });
+    if (action === 'add') {
+        const title = typeof args.title === 'string' ? args.title.trim() : '';
+        if (!title || title.length > 200)
+            return 'Error: title must be 1–200 characters.';
+        if (store.chats.listTasks(chatId).length >= 50)
+            return 'Error: this chat has reached the 50-task limit.';
+        const task = store.chats.addTask(chatId, title);
+        onChange?.(store.chats.listTasks(chatId));
+        return JSON.stringify({ task });
+    }
+    if (action === 'update') {
+        const ids = Array.isArray(args.ids) ? args.ids : [args.id];
+        if (!ids.length || ids.some((id) => typeof id !== 'string' || !id)
+            || !['pending', 'in_progress', 'completed'].includes(args.status)) {
+            return 'Error: update requires a valid task id (or ids) and status.';
+        }
+        const tasks = ids.map((id) => store.chats.updateTask(chatId, id, args.status));
+        const missing = ids.filter((_, i) => !tasks[i]);
+        if (missing.length === ids.length)
+            return 'Error: task not found in this chat.';
+        onChange?.(store.chats.listTasks(chatId));
+        if (!Array.isArray(args.ids))
+            return JSON.stringify({ task: tasks[0] });
+        return JSON.stringify({ tasks: tasks.filter(Boolean), ...(missing.length ? { not_found: missing } : {}) });
     }
-    const tasks = ids.map((id) => store.chats.updateTask(chatId, id, args.status));
-    const missing = ids.filter((_, i) => !tasks[i]);
-    if (missing.length === ids.length) return 'Error: task not found in this chat.';
-    onChange?.(store.chats.listTasks(chatId));
-    if (!Array.isArray(args.ids)) return JSON.stringify({ task: tasks[0] });
-    return JSON.stringify({ tasks: tasks.filter(Boolean), ...(missing.length ? { not_found: missing } : {}) });
-  }
-  return 'Error: action must be add, update, or list.';
+    return 'Error: action must be add, update, or list.';
 }
-
 /**
  * The open checklist, for the budget footer. The model otherwise sees tasks
  * only in the tool results that created them, which scroll out of attention
  * within a turn and are gone from view entirely on the next one.
  */
 export function openTasksNote(tasks) {
-  const open = (tasks || []).filter((t) => t.status !== 'completed');
-  if (!open.length) return '';
-  const lines = open.map((t) => `- ${t.id} [${t.status}] ${t.title}`);
-  return `\n[Open tasks -- update them with ${MANAGE_TASKS} as you finish each one:\n${lines.join('\n')}]`;
+    const open = (tasks || []).filter((t) => t.status !== 'completed');
+    if (!open.length)
+        return '';
+    const lines = open.map((t) => `- ${t.id} [${t.status}] ${t.title}`);
+    return `\n[Open tasks -- update them with ${MANAGE_TASKS} as you finish each one:\n${lines.join('\n')}]`;
 }

package/src/tools/types.js

@@ -0,0 +1 @@
+export {};

package/public/panels/connectors.js

@@ -1,184 +0,0 @@
-/**
- * The admin editors for connectors (endpoint + key) and the model catalog.
- * Keys are write-only: a row shows whether one is set (and its last four
- * characters), and a blank key field means "keep it". Everything is read back
- * from the DOM on save, so the rows are the draft until then.
- */
-import { $, el } from '../core/dom.js';
-import { api } from '../core/api.js';
-
-const TAGS = ['vision', 'reasoning', 'tools'];
-// Per-model settings with no field of their own; edited as one JSON object.
-const OVERRIDE_KEYS = ['systemPrompt', 'temperature', 'maxTokens', 'maxToolRounds', 'cacheMode', 'cacheTtl', 'extraBody', 'reasoningReplay'];
-
-function field(label, input, note) {
-  const wrap = el('div');
-  const l = el('label');
-  l.textContent = label;
-  wrap.append(l, input);
-  if (note) wrap.appendChild(Object.assign(el('small'), { textContent: note }));
-  return wrap;
-}
-
-const textInput = (value, placeholder) => Object.assign(el('input'), { value: value ?? '', placeholder: placeholder || '', spellcheck: false });
-
-function removeButton(row) {
-  const b = Object.assign(el('button'), { type: 'button', textContent: 'Remove' });
-  b.onclick = () => row.remove();
-  return b;
-}
-
-/* ---------- connectors ---------- */
-
-function connectorRow(c = {}) {
-  const row = el('div', 'cfg-row');
-  row.dataset.kind = 'connector';
-  const id = textInput(c.id, 'local');
-  // An id is what models name; renaming a saved one would orphan them.
-  if (c.id) id.readOnly = true;
-  const label = textInput(c.label, 'Local models');
-  const url = textInput(c.baseUrl, 'http://localhost:11434/v1');
-  const key = Object.assign(textInput('', c.hasApiKey ? `set (…${c.keyHint || ''})` : 'none'), { type: 'password', autocomplete: 'off' });
-  const clear = Object.assign(el('input'), { type: 'checkbox' });
-  const grid = el('div', 'set-grid');
-  grid.append(
-    field('Id', id, 'What a model names in its connector field.'),
-    field('Label', label),
-    Object.assign(field('API URL', url), { className: 'span-2' }),
-    Object.assign(field('API key', key, 'Write-only. Blank keeps the current key.'), { className: 'span-2' })
-  );
-  const test = Object.assign(el('button'), { type: 'button', textContent: 'Test connection' });
-  const msg = el('span', 'usage');
-  test.onclick = async () => {
-    msg.textContent = 'testing…';
-    try {
-      const out = await api.post('/api/connectors/test', { id: id.value.trim(), baseUrl: url.value.trim(), apiKey: key.value });
-      msg.textContent = out.ok ? `reachable${out.models != null ? ` · ${out.models} models` : ''}` : out.error || `status ${out.status}`;
-    } catch (err) { msg.textContent = err.message; }
-  };
-  const clearLabel = el('label');
-  clearLabel.append(clear, ' remove stored key');
-  const actions = el('div', 'cfg-actions');
-  actions.append(test, msg, ...(c.hasApiKey ? [clearLabel] : []), removeButton(row));
-  row.append(grid, actions);
-  row.read = () => ({
-    id: id.value.trim(),
-    ...(label.value.trim() ? { label: label.value.trim() } : {}),
-    baseUrl: url.value.trim(),
-    // undefined keeps the stored key on the server; null clears it.
-    ...(key.value ? { apiKey: key.value } : clear.checked ? { apiKey: null } : {})
-  });
-  return row;
-}
-
-/* ---------- model catalog ---------- */
-
-function modelRow(m = {}, connectorIds = []) {
-  const row = el('div', 'cfg-row');
-  row.dataset.kind = 'model';
-  const id = textInput(m.id, 'fast');
-  const label = textInput(m.label, 'Quick');
-  const description = textInput(m.description, 'Everyday questions');
-  const model = textInput(m.model, 'vendor/model-id');
-  const connector = el('select');
-  connector.className = 'model-connector';
-  const none = Object.assign(el('option'), { value: '', textContent: 'Default endpoint' });
-  connector.appendChild(none);
-  for (const cid of connectorIds) connector.appendChild(Object.assign(el('option'), { value: cid, textContent: cid }));
-  if (m.connector && !connectorIds.includes(m.connector)) connector.appendChild(Object.assign(el('option'), { value: m.connector, textContent: m.connector }));
-  connector.value = m.connector || '';
-  const enabled = Object.assign(el('input'), { type: 'checkbox', checked: m.enabled !== false });
-  const tags = el('div', 'cfg-tags');
-  const tagBoxes = TAGS.map((t) => {
-    const cb = Object.assign(el('input'), { type: 'checkbox', checked: (m.tags || []).includes(t) });
-    const l = el('label');
-    l.append(cb, ` ${t}`);
-    tags.appendChild(l);
-    return [t, cb];
-  });
-  const overrides = Object.assign(el('textarea'), { rows: 3, spellcheck: false, placeholder: '{ "temperature": 0.3 }' });
-  const kept = Object.fromEntries(OVERRIDE_KEYS.filter((k) => m[k] !== undefined).map((k) => [k, m[k]]));
-  overrides.value = Object.keys(kept).length ? JSON.stringify(kept, null, 2) : '';
-  const enabledLabel = el('label');
-  enabledLabel.append(enabled, ' enabled');
-
-  const grid = el('div', 'set-grid');
-  grid.append(
-    field('Id', id, 'Stable handle: roles and preferences name this.'),
-    field('Label', label, 'What people see.'),
-    Object.assign(field('Description', description), { className: 'span-2' }),
-    field('Provider model id', model, 'Blank: the id above.'),
-    field('Connector', connector),
-    Object.assign(field('Capabilities', tags), { className: 'span-2' }),
-    Object.assign(field('Overrides (JSON)', overrides, `Optional: ${OVERRIDE_KEYS.join(', ')}.`), { className: 'span-2' })
-  );
-  const actions = el('div', 'cfg-actions');
-  actions.append(enabledLabel, removeButton(row));
-  row.append(grid, actions);
-  row.read = () => {
-    let extra = {};
-    if (overrides.value.trim()) {
-      try { extra = JSON.parse(overrides.value); } catch (err) { throw new Error(`model "${id.value.trim()}" overrides: ${err.message}`); }
-      const bad = Object.keys(extra).filter((k) => !OVERRIDE_KEYS.includes(k));
-      if (bad.length || !extra || typeof extra !== 'object' || Array.isArray(extra)) throw new Error(`model "${id.value.trim()}" overrides must be an object of: ${OVERRIDE_KEYS.join(', ')}`);
-    }
-    const chosen = tagBoxes.filter(([, cb]) => cb.checked).map(([t]) => t);
-    return {
-      id: id.value.trim(),
-      ...(label.value.trim() ? { label: label.value.trim() } : {}),
-      ...(description.value.trim() ? { description: description.value.trim() } : {}),
-      ...(model.value.trim() ? { model: model.value.trim() } : {}),
-      ...(connector.value ? { connector: connector.value } : {}),
-      ...(chosen.length ? { tags: chosen } : {}),
-      ...(enabled.checked ? {} : { enabled: false }),
-      ...extra
-    };
-  };
-  return row;
-}
-
-const rows = (box) => [...box.children];
-const connectorIds = () => rows($('connectorsBox')).map((r) => r.read().id).filter(Boolean);
-
-/** Rebuilds both editors from /api/config. */
-export function renderConnectors(cfg) {
-  $('connectorsBox').replaceChildren(...(cfg.connectors || []).map((c) => connectorRow(c)));
-  const ids = (cfg.connectors || []).map((c) => c.id);
-  $('modelsBox').replaceChildren(...(cfg.models || []).map((m) => modelRow(m, ids)));
-}
-
-/** What the editors currently hold, as the config patch to save. Throws on bad JSON. */
-export function collectConnectors() {
-  return {
-    connectors: rows($('connectorsBox')).map((r) => r.read()),
-    models: rows($('modelsBox')).map((r) => r.read())
-  };
-}
-
-/** Locks or unlocks every control in the three admin editors. */
-export function lockConnectors(locked) {
-  for (const id of ['connectorsBox', 'modelsBox']) for (const n of $(id).querySelectorAll('input,select,textarea,button')) n.disabled = locked;
-  $('addConnector').disabled = locked;
-  $('addModel').disabled = locked;
-}
-
-export function initConnectors() {
-  $('addConnector').onclick = () => {
-    $('connectorsBox').appendChild(connectorRow());
-    // New connector ids become choices in every model row.
-    refreshConnectorChoices();
-  };
-  $('addModel').onclick = () => $('modelsBox').appendChild(modelRow({}, connectorIds()));
-  // Ids are typed after the row exists, so the model rows re-read them on focus.
-  $('modelsBox').addEventListener('focusin', (e) => { if (e.target.classList?.contains('model-connector')) refreshConnectorChoices(); });
-}
-
-function refreshConnectorChoices() {
-  const ids = connectorIds();
-  for (const sel of $('modelsBox').querySelectorAll('.model-connector')) {
-    const current = sel.value;
-    sel.replaceChildren(Object.assign(el('option'), { value: '', textContent: 'Default endpoint' }),
-      ...[...new Set([...ids, ...(current && !ids.includes(current) ? [current] : [])])].map((cid) => Object.assign(el('option'), { value: cid, textContent: cid })));
-    sel.value = current;
-  }
-}

package/src/set-password.js

@@ -1,43 +0,0 @@
-import { readFileSync, writeFileSync, existsSync, chmodSync } from 'node:fs';
-import { createInterface } from 'node:readline';
-import { createConfigSource } from './config/config.js';
-import { hashPassword } from './access/auth.js';
-import { MIN_PASSWORD_LENGTH } from './access/policy.js';
-
-/** Reads one line without echoing it when attached to a terminal. */
-function ask(prompt) {
-  return new Promise((resolve) => {
-    const rl = createInterface({ input: process.stdin, output: process.stdout, terminal: process.stdin.isTTY });
-    if (process.stdin.isTTY) rl._writeToOutput = (s) => { if (s.startsWith(prompt)) rl.output.write(prompt); };
-    rl.question(prompt, (answer) => { rl.close(); if (process.stdin.isTTY) process.stdout.write('\n'); resolve(answer); });
-  });
-}
-
-/**
- * `tinywebui set-password`: stores an scrypt hash of a new password in the
- * config file and switches authMode to 'single'. Existing sessions are
- * signed with sessionSecret, which is rotated so they all end here too.
- */
-export async function setPassword(opts = {}) {
-  if (opts.config && Object.hasOwn(opts.config, 'authMode') && opts.config.authMode !== 'single') {
-    throw new Error('authMode is set in code; change the JS config to use password login');
-  }
-  if (opts.config && Object.hasOwn(opts.config, 'authPassword')) {
-    throw new Error('authPassword is set in code; change the JS config to update the password');
-  }
-  if (!process.stdin.isTTY || !process.stdout.isTTY) {
-    throw new Error('set-password needs an interactive terminal; for headless startup set TINYWEBUI_PASSWORD');
-  }
-  const file = createConfigSource(opts).path();
-  if (!file) throw new Error('no config file to write to');
-  const pw = await ask('New password: ');
-  if (pw.length < MIN_PASSWORD_LENGTH) throw new Error(`use at least ${MIN_PASSWORD_LENGTH} characters`);
-  if ((await ask('Repeat password: ')) !== pw) throw new Error('passwords do not match');
-  const current = existsSync(file) ? JSON.parse(readFileSync(file, 'utf8')) : {};
-  current.authMode = 'single';
-  current.authPassword = hashPassword(pw);
-  delete current.sessionSecret; // regenerated on next start: every old session ends
-  if (existsSync(file) && process.platform !== 'win32') chmodSync(file, 0o600);
-  writeFileSync(file, JSON.stringify(current, null, 2) + '\n', { mode: 0o600 });
-  console.log(`[tinywebui] password set in ${file}`);
-}