From 6c0f886cdf4b4249dca29e9340b3b998a7262d61 Mon Sep 17 00:00:00 2001
From: Tim Baek <tim@openwebui.com>
Date: Fri, 6 Feb 2026 02:48:35 +0400
Subject: [PATCH 01/42] refac

---
 backend/open_webui/env.py           |  6 ++++++
 backend/open_webui/utils/headers.py | 15 +++++++++++----
 2 files changed, 17 insertions(+), 4 deletions(-)

diff --git a/backend/open_webui/env.py b/backend/open_webui/env.py
index 3fc75c72bb..dea5d67870 100644
--- a/backend/open_webui/env.py
+++ b/backend/open_webui/env.py
@@ -194,6 +194,12 @@ ENABLE_FORWARD_USER_INFO_HEADERS = (
     os.environ.get("ENABLE_FORWARD_USER_INFO_HEADERS", "False").lower() == "true"
 )
 
+# Header names for user info forwarding (customizable via environment variables)
+FORWARD_USER_INFO_HEADER_NAME = os.environ.get("FORWARD_USER_INFO_HEADER_NAME", "X-OpenWebUI-User-Name")
+FORWARD_USER_INFO_HEADER_ID = os.environ.get("FORWARD_USER_INFO_HEADER_ID", "X-OpenWebUI-User-Id")
+FORWARD_USER_INFO_HEADER_EMAIL = os.environ.get("FORWARD_USER_INFO_HEADER_EMAIL", "X-OpenWebUI-User-Email")
+FORWARD_USER_INFO_HEADER_ROLE = os.environ.get("FORWARD_USER_INFO_HEADER_ROLE", "X-OpenWebUI-User-Role")
+
 # Experimental feature, may be removed in future
 ENABLE_STAR_SESSIONS_MIDDLEWARE = (
     os.environ.get("ENABLE_STAR_SESSIONS_MIDDLEWARE", "False").lower() == "true"
diff --git a/backend/open_webui/utils/headers.py b/backend/open_webui/utils/headers.py
index 3caee50334..cdf5d2d85d 100644
--- a/backend/open_webui/utils/headers.py
+++ b/backend/open_webui/utils/headers.py
@@ -1,11 +1,18 @@
 from urllib.parse import quote
 
+from open_webui.env import (
+    FORWARD_USER_INFO_HEADER_NAME,
+    FORWARD_USER_INFO_HEADER_ID,
+    FORWARD_USER_INFO_HEADER_EMAIL,
+    FORWARD_USER_INFO_HEADER_ROLE,
+)
+
 
 def include_user_info_headers(headers, user):
     return {
         **headers,
-        "X-OpenWebUI-User-Name": quote(user.name, safe=" "),
-        "X-OpenWebUI-User-Id": user.id,
-        "X-OpenWebUI-User-Email": user.email,
-        "X-OpenWebUI-User-Role": user.role,
+        FORWARD_USER_INFO_HEADER_NAME: quote(user.name, safe=" "),
+        FORWARD_USER_INFO_HEADER_ID: user.id,
+        FORWARD_USER_INFO_HEADER_EMAIL: user.email,
+        FORWARD_USER_INFO_HEADER_ROLE: user.role,
     }

From 8e79b3d0bc4903f30e747b663ac818976618c83c Mon Sep 17 00:00:00 2001
From: Tim Baek <tim@openwebui.com>
Date: Fri, 6 Feb 2026 03:03:34 +0400
Subject: [PATCH 02/42] refac

---
 backend/open_webui/utils/tools.py | 11 +++++++----
 src/lib/apis/index.ts             |  7 ++++---
 src/lib/utils/index.ts            | 15 +++++++++------
 3 files changed, 20 insertions(+), 13 deletions(-)

diff --git a/backend/open_webui/utils/tools.py b/backend/open_webui/utils/tools.py
index b2f95a8297..6a55a9536b 100644
--- a/backend/open_webui/utils/tools.py
+++ b/backend/open_webui/utils/tools.py
@@ -697,9 +697,10 @@ def convert_openapi_to_tool_payload(openapi_spec):
                     "parameters": {"type": "object", "properties": {}, "required": []},
                 }
 
-                # Extract path and query parameters
                 for param in operation.get("parameters", []):
-                    param_name = param["name"]
+                    param_name = param.get("name")
+                    if not param_name:
+                        continue
                     param_schema = param.get("schema", {})
                     description = param_schema.get("description", "")
                     if not description:
@@ -971,8 +972,10 @@ async def execute_tool_server(
         body_params = {}
 
         for param in operation.get("parameters", []):
-            param_name = param["name"]
-            param_in = param["in"]
+            param_name = param.get("name")
+            if not param_name:
+                continue
+            param_in = param.get("in")
             if param_name in params:
                 if param_in == "path":
                     path_params[param_name] = params[param_name]
diff --git a/src/lib/apis/index.ts b/src/lib/apis/index.ts
index 8f35fbf881..92c28e1d9d 100644
--- a/src/lib/apis/index.ts
+++ b/src/lib/apis/index.ts
@@ -449,8 +449,9 @@ export const executeToolServer = async (
 
 		if (operation.parameters) {
 			operation.parameters.forEach((param: any) => {
-				const paramName = param.name;
-				const paramIn = param.in;
+				const paramName = param?.name;
+				if (!paramName) return;
+				const paramIn = param?.in;
 				if (params.hasOwnProperty(paramName)) {
 					if (paramIn === 'path') {
 						pathParams[paramName] = params[paramName];
@@ -1674,7 +1675,7 @@ export interface ModelMeta {
 	profile_image_url?: string;
 }
 
-export interface ModelParams {}
+export interface ModelParams { }
 
 export type GlobalModelConfig = ModelConfig[];
 
diff --git a/src/lib/utils/index.ts b/src/lib/utils/index.ts
index 3577eb0045..c4046f05d2 100644
--- a/src/lib/utils/index.ts
+++ b/src/lib/utils/index.ts
@@ -1277,17 +1277,20 @@ export const convertOpenApiToToolPayload = (openApiSpec) => {
 				// Extract path and query parameters
 				if (operation.parameters) {
 					operation.parameters.forEach((param) => {
-						let description = param.schema.description || param.description || '';
-						if (param.schema.enum && Array.isArray(param.schema.enum)) {
-							description += `. Possible values: ${param.schema.enum.join(', ')}`;
+						const paramName = param?.name;
+						if (!paramName) return;
+						const paramSchema = param?.schema ?? {};
+						let description = paramSchema.description || param.description || '';
+						if (paramSchema.enum && Array.isArray(paramSchema.enum)) {
+							description += `. Possible values: ${paramSchema.enum.join(', ')}`;
 						}
-						tool.parameters.properties[param.name] = {
-							type: param.schema.type,
+						tool.parameters.properties[paramName] = {
+							type: paramSchema.type,
 							description: description
 						};
 
 						if (param.required) {
-							tool.parameters.required.push(param.name);
+							tool.parameters.required.push(paramName);
 						}
 					});
 				}

From 2c37daef86a058e370151ecead17f10078102307 Mon Sep 17 00:00:00 2001
From: Tim Baek <tim@openwebui.com>
Date: Fri, 6 Feb 2026 03:23:37 +0400
Subject: [PATCH 03/42] refac

---
 backend/open_webui/env.py                    | 11 +++++++----
 backend/open_webui/retrieval/web/external.py |  3 ++-
 backend/open_webui/retrieval/web/yandex.py   |  3 ++-
 backend/open_webui/routers/ollama.py         |  3 ++-
 backend/open_webui/routers/openai.py         |  3 ++-
 backend/open_webui/utils/headers.py          | 16 ++++++++--------
 backend/open_webui/utils/middleware.py       |  9 +++++++++
 backend/open_webui/utils/tools.py            | 10 ++++++++++
 8 files changed, 42 insertions(+), 16 deletions(-)

diff --git a/backend/open_webui/env.py b/backend/open_webui/env.py
index dea5d67870..4289475c04 100644
--- a/backend/open_webui/env.py
+++ b/backend/open_webui/env.py
@@ -195,10 +195,13 @@ ENABLE_FORWARD_USER_INFO_HEADERS = (
 )
 
 # Header names for user info forwarding (customizable via environment variables)
-FORWARD_USER_INFO_HEADER_NAME = os.environ.get("FORWARD_USER_INFO_HEADER_NAME", "X-OpenWebUI-User-Name")
-FORWARD_USER_INFO_HEADER_ID = os.environ.get("FORWARD_USER_INFO_HEADER_ID", "X-OpenWebUI-User-Id")
-FORWARD_USER_INFO_HEADER_EMAIL = os.environ.get("FORWARD_USER_INFO_HEADER_EMAIL", "X-OpenWebUI-User-Email")
-FORWARD_USER_INFO_HEADER_ROLE = os.environ.get("FORWARD_USER_INFO_HEADER_ROLE", "X-OpenWebUI-User-Role")
+FORWARD_USER_INFO_HEADER_USER_NAME = os.environ.get("FORWARD_USER_INFO_HEADER_USER_NAME", "X-OpenWebUI-User-Name")
+FORWARD_USER_INFO_HEADER_USER_ID = os.environ.get("FORWARD_USER_INFO_HEADER_USER_ID", "X-OpenWebUI-User-Id")
+FORWARD_USER_INFO_HEADER_USER_EMAIL = os.environ.get("FORWARD_USER_INFO_HEADER_USER_EMAIL", "X-OpenWebUI-User-Email")
+FORWARD_USER_INFO_HEADER_USER_ROLE = os.environ.get("FORWARD_USER_INFO_HEADER_USER_ROLE", "X-OpenWebUI-User-Role")
+
+# Header name for chat ID forwarding (customizable via environment variable)
+FORWARD_SESSION_INFO_HEADER_CHAT_ID = os.environ.get("FORWARD_SESSION_INFO_HEADER_CHAT_ID", "X-OpenWebUI-Chat-Id")
 
 # Experimental feature, may be removed in future
 ENABLE_STAR_SESSIONS_MIDDLEWARE = (
diff --git a/backend/open_webui/retrieval/web/external.py b/backend/open_webui/retrieval/web/external.py
index 527c918a47..1dd63273ae 100644
--- a/backend/open_webui/retrieval/web/external.py
+++ b/backend/open_webui/retrieval/web/external.py
@@ -8,6 +8,7 @@ from fastapi import Request
 
 from open_webui.retrieval.web.main import SearchResult, get_filtered_results
 from open_webui.utils.headers import include_user_info_headers
+from open_webui.env import FORWARD_SESSION_INFO_HEADER_CHAT_ID
 
 
 log = logging.getLogger(__name__)
@@ -31,7 +32,7 @@ def search_external(
 
         chat_id = getattr(request.state, "chat_id", None)
         if chat_id:
-            headers["X-OpenWebUI-Chat-Id"] = str(chat_id)
+            headers[FORWARD_SESSION_INFO_HEADER_CHAT_ID] = str(chat_id)
 
         response = requests.post(
             external_url,
diff --git a/backend/open_webui/retrieval/web/yandex.py b/backend/open_webui/retrieval/web/yandex.py
index def134d996..fd1bc7274a 100644
--- a/backend/open_webui/retrieval/web/yandex.py
+++ b/backend/open_webui/retrieval/web/yandex.py
@@ -11,6 +11,7 @@ from fastapi import Request
 
 from open_webui.retrieval.web.main import SearchResult, get_filtered_results
 from open_webui.utils.headers import include_user_info_headers
+from open_webui.env import FORWARD_SESSION_INFO_HEADER_CHAT_ID
 
 from xml.etree import ElementTree as ET
 from xml.etree.ElementTree import Element
@@ -50,7 +51,7 @@ def search_yandex(
 
         chat_id = getattr(request.state, "chat_id", None)
         if chat_id:
-            headers["X-OpenWebUI-Chat-Id"] = str(chat_id)
+            headers[FORWARD_SESSION_INFO_HEADER_CHAT_ID] = str(chat_id)
 
         payload = {} if yandex_search_config == "" else json.loads(yandex_search_config)
 
diff --git a/backend/open_webui/routers/ollama.py b/backend/open_webui/routers/ollama.py
index cfbdbcac08..ed231aabce 100644
--- a/backend/open_webui/routers/ollama.py
+++ b/backend/open_webui/routers/ollama.py
@@ -23,6 +23,7 @@ from open_webui.models.users import UserModel
 
 from open_webui.env import (
     ENABLE_FORWARD_USER_INFO_HEADERS,
+    FORWARD_SESSION_INFO_HEADER_CHAT_ID,
 )
 
 from fastapi import (
@@ -137,7 +138,7 @@ async def send_post_request(
         if ENABLE_FORWARD_USER_INFO_HEADERS and user:
             headers = include_user_info_headers(headers, user)
             if metadata and metadata.get("chat_id"):
-                headers["X-OpenWebUI-Chat-Id"] = metadata.get("chat_id")
+                headers[FORWARD_SESSION_INFO_HEADER_CHAT_ID] = metadata.get("chat_id")
 
         r = await session.post(
             url,
diff --git a/backend/open_webui/routers/openai.py b/backend/open_webui/routers/openai.py
index b1d31afb8f..0b5433314c 100644
--- a/backend/open_webui/routers/openai.py
+++ b/backend/open_webui/routers/openai.py
@@ -33,6 +33,7 @@ from open_webui.env import (
     AIOHTTP_CLIENT_TIMEOUT,
     AIOHTTP_CLIENT_TIMEOUT_MODEL_LIST,
     ENABLE_FORWARD_USER_INFO_HEADERS,
+    FORWARD_SESSION_INFO_HEADER_CHAT_ID,
     BYPASS_MODEL_ACCESS_CONTROL,
 )
 from open_webui.models.users import UserModel
@@ -142,7 +143,7 @@ async def get_headers_and_cookies(
     if ENABLE_FORWARD_USER_INFO_HEADERS and user:
         headers = include_user_info_headers(headers, user)
         if metadata and metadata.get("chat_id"):
-            headers["X-OpenWebUI-Chat-Id"] = metadata.get("chat_id")
+            headers[FORWARD_SESSION_INFO_HEADER_CHAT_ID] = metadata.get("chat_id")
 
     token = None
     auth_type = config.get("auth_type")
diff --git a/backend/open_webui/utils/headers.py b/backend/open_webui/utils/headers.py
index cdf5d2d85d..f0b13c00d3 100644
--- a/backend/open_webui/utils/headers.py
+++ b/backend/open_webui/utils/headers.py
@@ -1,18 +1,18 @@
 from urllib.parse import quote
 
 from open_webui.env import (
-    FORWARD_USER_INFO_HEADER_NAME,
-    FORWARD_USER_INFO_HEADER_ID,
-    FORWARD_USER_INFO_HEADER_EMAIL,
-    FORWARD_USER_INFO_HEADER_ROLE,
+    FORWARD_USER_INFO_HEADER_USER_NAME,
+    FORWARD_USER_INFO_HEADER_USER_ID,
+    FORWARD_USER_INFO_HEADER_USER_EMAIL,
+    FORWARD_USER_INFO_HEADER_USER_ROLE,
 )
 
 
 def include_user_info_headers(headers, user):
     return {
         **headers,
-        FORWARD_USER_INFO_HEADER_NAME: quote(user.name, safe=" "),
-        FORWARD_USER_INFO_HEADER_ID: user.id,
-        FORWARD_USER_INFO_HEADER_EMAIL: user.email,
-        FORWARD_USER_INFO_HEADER_ROLE: user.role,
+        FORWARD_USER_INFO_HEADER_USER_NAME: quote(user.name, safe=" "),
+        FORWARD_USER_INFO_HEADER_USER_ID: user.id,
+        FORWARD_USER_INFO_HEADER_USER_EMAIL: user.email,
+        FORWARD_USER_INFO_HEADER_USER_ROLE: user.role,
     }
diff --git a/backend/open_webui/utils/middleware.py b/backend/open_webui/utils/middleware.py
index 3fcaf0fe97..5db562725d 100644
--- a/backend/open_webui/utils/middleware.py
+++ b/backend/open_webui/utils/middleware.py
@@ -127,7 +127,10 @@ from open_webui.env import (
     ENABLE_REALTIME_CHAT_SAVE,
     ENABLE_QUERIES_CACHE,
     RAG_SYSTEM_CONTEXT,
+    ENABLE_FORWARD_USER_INFO_HEADERS,
+    FORWARD_SESSION_INFO_HEADER_CHAT_ID,
 )
+from open_webui.utils.headers import include_user_info_headers
 from open_webui.constants import TASKS
 
 
@@ -2207,6 +2210,12 @@ async def process_chat_payload(request, form_data, user, metadata, model):
                         for key, value in connection_headers.items():
                             headers[key] = value
 
+                    # Add user info headers if enabled
+                    if ENABLE_FORWARD_USER_INFO_HEADERS and user:
+                        headers = include_user_info_headers(headers, user)
+                        if metadata and metadata.get("chat_id"):
+                            headers[FORWARD_SESSION_INFO_HEADER_CHAT_ID] = metadata.get("chat_id")
+
                     mcp_clients[server_id] = MCPClient()
                     await mcp_clients[server_id].connect(
                         url=mcp_server_connection.get("url", ""),
diff --git a/backend/open_webui/utils/tools.py b/backend/open_webui/utils/tools.py
index 6a55a9536b..ec281b43a1 100644
--- a/backend/open_webui/utils/tools.py
+++ b/backend/open_webui/utils/tools.py
@@ -45,7 +45,10 @@ from open_webui.env import (
     AIOHTTP_CLIENT_TIMEOUT,
     AIOHTTP_CLIENT_TIMEOUT_TOOL_SERVER_DATA,
     AIOHTTP_CLIENT_SESSION_TOOL_SERVER_SSL,
+    ENABLE_FORWARD_USER_INFO_HEADERS,
+    FORWARD_SESSION_INFO_HEADER_CHAT_ID,
 )
+from open_webui.utils.headers import include_user_info_headers
 from open_webui.tools.builtin import (
     search_web,
     fetch_url,
@@ -335,6 +338,13 @@ async def get_tools(
                             for key, value in connection_headers.items():
                                 headers[key] = value
 
+                        # Add user info headers if enabled
+                        if ENABLE_FORWARD_USER_INFO_HEADERS and user:
+                            headers = include_user_info_headers(headers, user)
+                            metadata = extra_params.get("__metadata__", {})
+                            if metadata and metadata.get("chat_id"):
+                                headers[FORWARD_SESSION_INFO_HEADER_CHAT_ID] = metadata.get("chat_id")
+
                         def make_tool_function(
                             function_name, tool_server_data, headers
                         ):

From a214ec40ea00eebcba49570647ca6ab8f61765d5 Mon Sep 17 00:00:00 2001
From: Tim Baek <tim@openwebui.com>
Date: Fri, 6 Feb 2026 03:34:21 +0400
Subject: [PATCH 04/42] fix

---
 backend/open_webui/retrieval/web/utils.py | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/backend/open_webui/retrieval/web/utils.py b/backend/open_webui/retrieval/web/utils.py
index 6c1ea4b1bf..45787cb4bd 100644
--- a/backend/open_webui/retrieval/web/utils.py
+++ b/backend/open_webui/retrieval/web/utils.py
@@ -174,7 +174,7 @@ class URLProcessingMixin:
 
     def _safe_process_url_sync(self, url: str) -> bool:
         """Synchronous version of safety checks."""
-        if self.verify_ssl and not self._verify_ssl_cert(url):
+        if self.verify_ssl and not verify_ssl_cert(url):
             raise ValueError(f"SSL certificate verification failed for {url}")
         self._sync_wait_for_rate_limit()
         return True

From 26286625f4f8207f690371c7bfab947d1d3a7f79 Mon Sep 17 00:00:00 2001
From: Timothy Jaeryang Baek <tim@openwebui.com>
Date: Thu, 5 Feb 2026 23:40:58 -0600
Subject: [PATCH 05/42] refac

---
 src/lib/components/chat/MessageInput.svelte | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/lib/components/chat/MessageInput.svelte b/src/lib/components/chat/MessageInput.svelte
index 5914e7afce..d3b10d3caf 100644
--- a/src/lib/components/chat/MessageInput.svelte
+++ b/src/lib/components/chat/MessageInput.svelte
@@ -1746,7 +1746,7 @@
 											<!-- {$i18n.t('Create Note')}  -->
 											<Tooltip content={$i18n.t('Create note')} className=" flex items-center">
 												<button
-													id="send-message-button"
+													id="create-note-button"
 													class=" text-gray-600 dark:text-gray-300 hover:text-gray-700 dark:hover:text-gray-200 transition rounded-full p-1.5 self-center"
 													type="button"
 													disabled={prompt === '' && files.length === 0}

From b1737040a7d3bb5efcfe0f1432e89d7e82e51d2d Mon Sep 17 00:00:00 2001
From: Tim Baek <tim@openwebui.com>
Date: Fri, 6 Feb 2026 22:25:18 +0400
Subject: [PATCH 06/42] refac

---
 backend/open_webui/tools/builtin.py    |  6 ++---
 backend/open_webui/utils/middleware.py |  6 ++---
 backend/open_webui/utils/sanitize.py   | 37 ++++++++++++++++++++++++++
 3 files changed, 43 insertions(+), 6 deletions(-)

diff --git a/backend/open_webui/tools/builtin.py b/backend/open_webui/tools/builtin.py
index 78d64faafc..6aca621c97 100644
--- a/backend/open_webui/tools/builtin.py
+++ b/backend/open_webui/tools/builtin.py
@@ -36,7 +36,7 @@ from open_webui.models.chats import Chats
 from open_webui.models.channels import Channels, ChannelMember, Channel
 from open_webui.models.messages import Messages, Message
 from open_webui.models.groups import Groups
-from open_webui.utils.sanitize import strip_markdown_code_fences
+from open_webui.utils.sanitize import sanitize_code
 
 log = logging.getLogger(__name__)
 
@@ -371,8 +371,8 @@ async def execute_code(
         return json.dumps({"error": "Request context not available"})
 
     try:
-        # Strip markdown fences if model included them
-        code = strip_markdown_code_fences(code)
+        # Sanitize code (strips ANSI codes and markdown fences)
+        code = sanitize_code(code)
 
         # Import blocked modules from config (same as middleware)
         from open_webui.config import CODE_INTERPRETER_BLOCKED_MODULES
diff --git a/backend/open_webui/utils/middleware.py b/backend/open_webui/utils/middleware.py
index 5db562725d..402898ad7c 100644
--- a/backend/open_webui/utils/middleware.py
+++ b/backend/open_webui/utils/middleware.py
@@ -73,7 +73,7 @@ from open_webui.models.models import Models
 from open_webui.retrieval.utils import get_sources_from_items
 
 
-from open_webui.utils.sanitize import strip_markdown_code_fences
+from open_webui.utils.sanitize import sanitize_code
 from open_webui.utils.chat import generate_chat_completion
 from open_webui.utils.task import (
     get_task_model_id,
@@ -4175,8 +4175,8 @@ async def streaming_chat_response_handler(response, ctx):
                         try:
                             if content_blocks[-1]["attributes"].get("type") == "code":
                                 code = content_blocks[-1]["content"]
-                                # Strip markdown fences if model included them
-                                code = strip_markdown_code_fences(code)
+                                # Sanitize code (strips ANSI codes and markdown fences)
+                                code = sanitize_code(code)
 
                                 if CODE_INTERPRETER_BLOCKED_MODULES:
                                     blocking_code = textwrap.dedent(
diff --git a/backend/open_webui/utils/sanitize.py b/backend/open_webui/utils/sanitize.py
index 5755a9be48..344a7e08e2 100644
--- a/backend/open_webui/utils/sanitize.py
+++ b/backend/open_webui/utils/sanitize.py
@@ -1,5 +1,25 @@
 import re
 
+# ANSI escape code pattern - matches all common ANSI sequences
+# This includes color codes, cursor movement, and other terminal control sequences
+ANSI_ESCAPE_PATTERN = re.compile(r'\x1b\[[0-9;]*[A-Za-z]|\x1b\([AB]|\x1b[PX^_].*?\x1b\\|\x1b\].*?(?:\x07|\x1b\\)')
+
+
+def strip_ansi_codes(text: str) -> str:
+    """
+    Strip ANSI escape codes from text.
+
+    ANSI escape codes can be introduced by LLMs that include terminal
+    color codes in their output. These codes cause syntax errors when
+    the code is sent to Jupyter for execution.
+
+    Common ANSI codes include:
+    - Color codes: \x1b[31m (red), \x1b[32m (green), etc.
+    - Reset codes: \x1b[0m, \x1b[39m
+    - Cursor movement: \x1b[1A, \x1b[2J, etc.
+    """
+    return ANSI_ESCAPE_PATTERN.sub('', text)
+
 
 def strip_markdown_code_fences(code: str) -> str:
     """
@@ -19,3 +39,20 @@ def strip_markdown_code_fences(code: str) -> str:
     # Remove closing fence
     code = re.sub(r"\n?```\s*$", "", code)
     return code.strip()
+
+
+def sanitize_code(code: str) -> str:
+    """
+    Sanitize code for execution by applying all necessary cleanup steps.
+
+    This is the recommended function to use before sending code to
+    interpreters like Jupyter or Pyodide.
+
+    Steps applied:
+    1. Strip ANSI escape codes (from LLM output)
+    2. Strip markdown code fences (if model included them)
+    """
+    code = strip_ansi_codes(code)
+    code = strip_markdown_code_fences(code)
+    return code
+

From 938d1b0743c64f0ce513d68e57dfbb86987cb06b Mon Sep 17 00:00:00 2001
From: Tim Baek <tim@openwebui.com>
Date: Fri, 6 Feb 2026 22:29:16 +0400
Subject: [PATCH 07/42] refac

---
 src/lib/components/layout/Sidebar.svelte          | 6 ------
 src/lib/components/layout/Sidebar/UserMenu.svelte | 6 ------
 2 files changed, 12 deletions(-)

diff --git a/src/lib/components/layout/Sidebar.svelte b/src/lib/components/layout/Sidebar.svelte
index 03591d2b71..2b0a448d63 100644
--- a/src/lib/components/layout/Sidebar.svelte
+++ b/src/lib/components/layout/Sidebar.svelte
@@ -815,9 +815,6 @@
 									{#if $config?.features?.enable_user_status}
 										<div class="absolute -bottom-0.5 -right-0.5">
 											<span class="relative flex size-2.5">
-												<span
-													class="absolute inline-flex h-full w-full animate-ping rounded-full bg-green-400 opacity-75"
-												></span>
 												<span
 													class="relative inline-flex size-2.5 rounded-full {true
 														? 'bg-green-500'
@@ -1384,9 +1381,6 @@
 									{#if $config?.features?.enable_user_status}
 										<div class="absolute -bottom-0.5 -right-0.5">
 											<span class="relative flex size-2.5">
-												<span
-													class="absolute inline-flex h-full w-full animate-ping rounded-full bg-green-400 opacity-75"
-												></span>
 												<span
 													class="relative inline-flex size-2.5 rounded-full {true
 														? 'bg-green-500'
diff --git a/src/lib/components/layout/Sidebar/UserMenu.svelte b/src/lib/components/layout/Sidebar/UserMenu.svelte
index 782d0577db..502d09b344 100644
--- a/src/lib/components/layout/Sidebar/UserMenu.svelte
+++ b/src/lib/components/layout/Sidebar/UserMenu.svelte
@@ -110,9 +110,6 @@
 							{#if $user?.is_active ?? true}
 								<div>
 									<span class="relative flex size-2">
-										<span
-											class="animate-ping absolute inline-flex h-full w-full rounded-full bg-green-400 opacity-75"
-										/>
 										<span class="relative inline-flex rounded-full size-2 bg-green-500" />
 									</span>
 								</div>
@@ -371,9 +368,6 @@
 						>
 							<div class=" flex items-center">
 								<span class="relative flex size-2">
-									<span
-										class="animate-ping absolute inline-flex h-full w-full rounded-full bg-green-400 opacity-75"
-									/>
 									<span class="relative inline-flex rounded-full size-2 bg-green-500" />
 								</span>
 							</div>

From 258454276e1ef8ded24968515f7bf5e1833ca011 Mon Sep 17 00:00:00 2001
From: Tim Baek <tim@openwebui.com>
Date: Fri, 6 Feb 2026 22:33:49 +0400
Subject: [PATCH 08/42] fix: files settings save issue

---
 backend/open_webui/routers/retrieval.py | 16 ++++++++++++++--
 1 file changed, 14 insertions(+), 2 deletions(-)

diff --git a/backend/open_webui/routers/retrieval.py b/backend/open_webui/routers/retrieval.py
index 05b6ef8068..68f8a1ee9b 100644
--- a/backend/open_webui/routers/retrieval.py
+++ b/backend/open_webui/routers/retrieval.py
@@ -1042,13 +1042,25 @@ async def update_rag_config(
     )
 
     # File upload settings
-    request.app.state.config.FILE_MAX_SIZE = form_data.FILE_MAX_SIZE
-    request.app.state.config.FILE_MAX_COUNT = form_data.FILE_MAX_COUNT
+    request.app.state.config.FILE_MAX_SIZE = (
+        form_data.FILE_MAX_SIZE
+        if form_data.FILE_MAX_SIZE is not None
+        else request.app.state.config.FILE_MAX_SIZE
+    )
+    request.app.state.config.FILE_MAX_COUNT = (
+        form_data.FILE_MAX_COUNT
+        if form_data.FILE_MAX_COUNT is not None
+        else request.app.state.config.FILE_MAX_COUNT
+    )
     request.app.state.config.FILE_IMAGE_COMPRESSION_WIDTH = (
         form_data.FILE_IMAGE_COMPRESSION_WIDTH
+        if form_data.FILE_IMAGE_COMPRESSION_WIDTH is not None
+        else request.app.state.config.FILE_IMAGE_COMPRESSION_WIDTH
     )
     request.app.state.config.FILE_IMAGE_COMPRESSION_HEIGHT = (
         form_data.FILE_IMAGE_COMPRESSION_HEIGHT
+        if form_data.FILE_IMAGE_COMPRESSION_HEIGHT is not None
+        else request.app.state.config.FILE_IMAGE_COMPRESSION_HEIGHT
     )
     request.app.state.config.ALLOWED_FILE_EXTENSIONS = (
         form_data.ALLOWED_FILE_EXTENSIONS

From 7e79f8d1c6b5a02f1a46e792540c6bbf7bed8edc Mon Sep 17 00:00:00 2001
From: Tim Baek <tim@openwebui.com>
Date: Fri, 6 Feb 2026 22:39:20 +0400
Subject: [PATCH 09/42] refac

---
 backend/open_webui/main.py | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/backend/open_webui/main.py b/backend/open_webui/main.py
index d505e77f3c..2d0aeecf1d 100644
--- a/backend/open_webui/main.py
+++ b/backend/open_webui/main.py
@@ -1329,7 +1329,9 @@ class APIKeyRestrictionMiddleware(BaseHTTPMiddleware):
         token = None
 
         if auth_header:
-            scheme, token = auth_header.split(" ")
+            parts = auth_header.split(" ", 1)
+            if len(parts) == 2:
+                token = parts[1]
 
         # Only apply restrictions if an sk- API key is used
         if token and token.startswith("sk-"):

From 284b97bd84c824013ad00ea07621192ec69a5e93 Mon Sep 17 00:00:00 2001
From: Tim Baek <tim@openwebui.com>
Date: Fri, 6 Feb 2026 22:46:56 +0400
Subject: [PATCH 10/42] refac

---
 src/lib/components/chat/Messages/Markdown/MarkdownTokens.svelte | 1 +
 1 file changed, 1 insertion(+)

diff --git a/src/lib/components/chat/Messages/Markdown/MarkdownTokens.svelte b/src/lib/components/chat/Messages/Markdown/MarkdownTokens.svelte
index dcb403e279..305073fb8c 100644
--- a/src/lib/components/chat/Messages/Markdown/MarkdownTokens.svelte
+++ b/src/lib/components/chat/Messages/Markdown/MarkdownTokens.svelte
@@ -134,6 +134,7 @@
 			<div class="scrollbar-hidden relative overflow-x-auto max-w-full">
 				<table
 					class=" w-full text-sm text-left text-gray-500 dark:text-gray-400 max-w-full rounded-xl"
+					dir="auto"
 				>
 					<thead
 						class="text-xs text-gray-700 uppercase bg-white dark:bg-gray-900 dark:text-gray-400 border-none"

From 9cf4d348327cc6c0900d249140e5ba87eae6fe12 Mon Sep 17 00:00:00 2001
From: Tim Baek <tim@openwebui.com>
Date: Fri, 6 Feb 2026 23:21:09 +0400
Subject: [PATCH 11/42] refac

---
 .../Messages/Markdown/MarkdownTokens.svelte   |  11 +-
 src/lib/components/common/Collapsible.svelte  | 159 ---------------
 .../components/common/ToolCallDisplay.svelte  | 186 ++++++++++++++++++
 3 files changed, 196 insertions(+), 160 deletions(-)
 create mode 100644 src/lib/components/common/ToolCallDisplay.svelte

diff --git a/src/lib/components/chat/Messages/Markdown/MarkdownTokens.svelte b/src/lib/components/chat/Messages/Markdown/MarkdownTokens.svelte
index 305073fb8c..3550560542 100644
--- a/src/lib/components/chat/Messages/Markdown/MarkdownTokens.svelte
+++ b/src/lib/components/chat/Messages/Markdown/MarkdownTokens.svelte
@@ -17,6 +17,7 @@
 	import KatexRenderer from './KatexRenderer.svelte';
 	import AlertRenderer, { alertComponent } from './AlertRenderer.svelte';
 	import Collapsible from '$lib/components/common/Collapsible.svelte';
+	import ToolCallDisplay from '$lib/components/common/ToolCallDisplay.svelte';
 	import Tooltip from '$lib/components/common/Tooltip.svelte';
 	import Download from '$lib/components/icons/Download.svelte';
 
@@ -323,7 +324,15 @@
 			.replace(/<summary>.*?<\/summary>/gi, '')
 			.trim()}
 
-		{#if textContent.length > 0}
+		{#if token?.attributes?.type === 'tool_calls'}
+			<!-- Tool calls have dedicated handling with ToolCallDisplay component -->
+			<ToolCallDisplay
+				id={`${id}-${tokenIdx}-tc`}
+				attributes={token.attributes}
+				open={false}
+				className="w-full space-y-1"
+			/>
+		{:else if textContent.length > 0}
 			<Collapsible
 				title={token.summary}
 				open={$settings?.expandDetails ?? false}
diff --git a/src/lib/components/common/Collapsible.svelte b/src/lib/components/common/Collapsible.svelte
index efaa83f385..fb397bf502 100644
--- a/src/lib/components/common/Collapsible.svelte
+++ b/src/lib/components/common/Collapsible.svelte
@@ -35,11 +35,6 @@
 	import ChevronUp from '../icons/ChevronUp.svelte';
 	import ChevronDown from '../icons/ChevronDown.svelte';
 	import Spinner from './Spinner.svelte';
-	import CodeBlock from '../chat/Messages/CodeBlock.svelte';
-	import Markdown from '../chat/Messages/Markdown.svelte';
-	import Image from './Image.svelte';
-	import FullHeightIframe from './FullHeightIframe.svelte';
-	import { settings } from '$lib/stores';
 
 	export let open = false;
 
@@ -62,162 +57,9 @@
 	$: onChange(open);
 
 	const collapsibleId = uuidv4();
-
-	function parseJSONString(str) {
-		try {
-			return parseJSONString(JSON.parse(str));
-		} catch (e) {
-			return str;
-		}
-	}
-
-	function formatJSONString(str) {
-		try {
-			const parsed = parseJSONString(str);
-			// If parsed is an object/array, then it's valid JSON
-			if (typeof parsed === 'object') {
-				return JSON.stringify(parsed, null, 2);
-			} else {
-				// It's a primitive value like a number, boolean, etc.
-				return `${JSON.stringify(String(parsed))}`;
-			}
-		} catch (e) {
-			// Not valid JSON, return as-is
-			return str;
-		}
-	}
 </script>
 
 <div {id} class={className}>
-	{#if attributes?.type === 'tool_calls'}
-		{@const args = decode(attributes?.arguments)}
-		{@const result = decode(attributes?.result ?? '')}
-		{@const files = parseJSONString(decode(attributes?.files ?? ''))}
-		{@const embeds = parseJSONString(decode(attributes?.embeds ?? ''))}
-
-		{#if embeds && Array.isArray(embeds) && embeds.length > 0}
-			<div class="py-1 w-full cursor-pointer">
-				<div class=" w-full text-xs text-gray-500">
-					<div class="">
-						{attributes.name}
-					</div>
-				</div>
-
-				{#each embeds as embed, idx}
-					<div class="my-2" id={`${collapsibleId}-tool-calls-${attributes?.id}-embed-${idx}`}>
-						<FullHeightIframe
-							src={embed}
-							{args}
-							allowScripts={true}
-							allowForms={true}
-							allowSameOrigin={true}
-							allowPopups={true}
-						/>
-					</div>
-				{/each}
-			</div>
-		{:else}
-			<div
-				class="{buttonClassName} cursor-pointer"
-				on:pointerup={() => {
-					if (!disabled) {
-						open = !open;
-					}
-				}}
-			>
-				<div
-					class=" w-full font-medium flex items-center justify-between gap-2 {attributes?.done &&
-					attributes?.done !== 'true'
-						? 'shimmer'
-						: ''}
-			"
-				>
-					{#if attributes?.done && attributes?.done !== 'true'}
-						<div>
-							<Spinner className="size-4" />
-						</div>
-					{/if}
-
-					<div class="">
-						{#if attributes?.done === 'true'}
-							<Markdown
-								id={`${collapsibleId}-tool-calls-${attributes?.id}`}
-								content={$i18n.t('View Result from **{{NAME}}**', {
-									NAME: attributes.name
-								})}
-							/>
-						{:else}
-							<Markdown
-								id={`${collapsibleId}-tool-calls-${attributes?.id}-executing`}
-								content={$i18n.t('Executing **{{NAME}}**...', {
-									NAME: attributes.name
-								})}
-							/>
-						{/if}
-					</div>
-
-					<div class="flex self-center translate-y-[1px]">
-						{#if open}
-							<ChevronUp strokeWidth="3.5" className="size-3.5" />
-						{:else}
-							<ChevronDown strokeWidth="3.5" className="size-3.5" />
-						{/if}
-					</div>
-				</div>
-			</div>
-
-			{#if !grow}
-				{#if open && !hide}
-					<div transition:slide={{ duration: 300, easing: quintOut, axis: 'y' }}>
-						{#if attributes?.type === 'tool_calls'}
-							{#if attributes?.done === 'true'}
-								<Markdown
-									id={`${collapsibleId}-tool-calls-${attributes?.id}-result`}
-									content={`> \`\`\`json
-> ${formatJSONString(args)}
-> ${formatJSONString(result)}
-> \`\`\``}
-								/>
-							{:else}
-								<Markdown
-									id={`${collapsibleId}-tool-calls-${attributes?.id}-result`}
-									content={`> \`\`\`json
-> ${formatJSONString(args)}
-> \`\`\``}
-								/>
-							{/if}
-						{:else}
-							<slot name="content" />
-						{/if}
-					</div>
-				{/if}
-			{/if}
-		{/if}
-
-		{#if attributes?.done === 'true'}
-			{#if typeof files === 'object'}
-				{#each files ?? [] as file, idx}
-					{#if typeof file === 'string'}
-						{#if file.startsWith('data:image/')}
-							<Image
-								id={`${collapsibleId}-tool-calls-${attributes?.id}-result-${idx}`}
-								src={file}
-								alt="Image"
-							/>
-						{/if}
-					{:else if typeof file === 'object'}
-						{#if (file.type === 'image' || (file?.content_type ?? '').startsWith('image/')) && file.url}
-							<Image
-								id={`${collapsibleId}-tool-calls-${attributes?.id}-result-${idx}`}
-								src={file.url}
-								alt="Image"
-							/>
-						{/if}
-					{/if}
-				{/each}
-			{/if}
-		{/if}
-	{:else}
 		{#if title !== null}
 			<!-- svelte-ignore a11y-no-static-element-interactions -->
 			<!-- svelte-ignore a11y-click-events-have-key-events -->
@@ -333,5 +175,4 @@
 				</div>
 			{/if}
 		{/if}
-	{/if}
 </div>
diff --git a/src/lib/components/common/ToolCallDisplay.svelte b/src/lib/components/common/ToolCallDisplay.svelte
new file mode 100644
index 0000000000..d3495eab27
--- /dev/null
+++ b/src/lib/components/common/ToolCallDisplay.svelte
@@ -0,0 +1,186 @@
+<script lang="ts">
+	import { decode } from 'html-entities';
+	import { v4 as uuidv4 } from 'uuid';
+
+	import { getContext } from 'svelte';
+	const i18n = getContext('i18n');
+
+	import { slide } from 'svelte/transition';
+	import { quintOut } from 'svelte/easing';
+
+	import ChevronUp from '../icons/ChevronUp.svelte';
+	import ChevronDown from '../icons/ChevronDown.svelte';
+	import Spinner from './Spinner.svelte';
+	import Markdown from '../chat/Messages/Markdown.svelte';
+	import Image from './Image.svelte';
+	import FullHeightIframe from './FullHeightIframe.svelte';
+
+	export let id: string = '';
+	export let attributes: {
+		type?: string;
+		id?: string;
+		name?: string;
+		arguments?: string;
+		result?: string;
+		files?: string;
+		embeds?: string;
+		done?: string;
+	} = {};
+
+	export let open = false;
+	export let className = '';
+	export let buttonClassName =
+		'w-fit text-gray-500 hover:text-gray-700 dark:hover:text-gray-300 transition';
+
+	const componentId = id || uuidv4();
+
+	function parseJSONString(str: string) {
+		try {
+			return parseJSONString(JSON.parse(str));
+		} catch (e) {
+			return str;
+		}
+	}
+
+	function formatJSONString(str: string) {
+		try {
+			const parsed = parseJSONString(str);
+			// If parsed is an object/array, then it's valid JSON
+			if (typeof parsed === 'object') {
+				return JSON.stringify(parsed, null, 2);
+			} else {
+				// It's a primitive value like a number, boolean, etc.
+				return `${JSON.stringify(String(parsed))}`;
+			}
+		} catch (e) {
+			// Not valid JSON, return as-is
+			return str;
+		}
+	}
+
+	// Decode and parse attributes
+	$: args = decode(attributes?.arguments ?? '');
+	$: result = decode(attributes?.result ?? '');
+	$: files = parseJSONString(decode(attributes?.files ?? ''));
+	$: embeds = parseJSONString(decode(attributes?.embeds ?? ''));
+	$: isDone = attributes?.done === 'true';
+	$: isExecuting = attributes?.done && attributes?.done !== 'true';
+</script>
+
+<div {id} class={className}>
+	{#if embeds && Array.isArray(embeds) && embeds.length > 0}
+		<!-- Embed Mode: Show iframes without collapsible behavior -->
+		<div class="py-1 w-full cursor-pointer">
+			<div class="w-full text-xs text-gray-500">
+				<div class="">
+					{attributes.name}
+				</div>
+			</div>
+
+			{#each embeds as embed, idx}
+				<div class="my-2" id={`${componentId}-tool-call-embed-${idx}`}>
+					<FullHeightIframe
+						src={embed}
+						{args}
+						allowScripts={true}
+						allowForms={true}
+						allowSameOrigin={true}
+						allowPopups={true}
+					/>
+				</div>
+			{/each}
+		</div>
+	{:else}
+		<!-- Standard collapsible tool call display -->
+		<div
+			class="{buttonClassName} cursor-pointer"
+			on:pointerup={() => {
+				open = !open;
+			}}
+		>
+			<div
+				class="w-full font-medium flex items-center justify-between gap-2 {isExecuting
+					? 'shimmer'
+					: ''}"
+			>
+				{#if isExecuting}
+					<div>
+						<Spinner className="size-4" />
+					</div>
+				{/if}
+
+				<div class="">
+					{#if isDone}
+						<Markdown
+							id={`${componentId}-tool-call-title`}
+							content={$i18n.t('View Result from **{{NAME}}**', {
+								NAME: attributes.name
+							})}
+						/>
+					{:else}
+						<Markdown
+							id={`${componentId}-tool-call-executing`}
+							content={$i18n.t('Executing **{{NAME}}**...', {
+								NAME: attributes.name
+							})}
+						/>
+					{/if}
+				</div>
+
+				<div class="flex self-center translate-y-[1px]">
+					{#if open}
+						<ChevronUp strokeWidth="3.5" className="size-3.5" />
+					{:else}
+						<ChevronDown strokeWidth="3.5" className="size-3.5" />
+					{/if}
+				</div>
+			</div>
+		</div>
+
+		{#if open}
+			<div transition:slide={{ duration: 300, easing: quintOut, axis: 'y' }}>
+				{#if isDone}
+					<Markdown
+						id={`${componentId}-tool-call-result`}
+						content={`> \`\`\`json
+> ${formatJSONString(args)}
+> ${formatJSONString(result)}
+> \`\`\``}
+					/>
+				{:else}
+					<Markdown
+						id={`${componentId}-tool-call-args`}
+						content={`> \`\`\`json
+> ${formatJSONString(args)}
+> \`\`\``}
+					/>
+				{/if}
+			</div>
+		{/if}
+	{/if}
+
+	<!-- Files display (images etc.) when done -->
+	{#if isDone}
+		{#if typeof files === 'object'}
+			{#each files ?? [] as file, idx}
+				{#if typeof file === 'string'}
+					{#if file.startsWith('data:image/')}
+						<Image
+							id={`${componentId}-tool-call-result-${idx}`}
+							src={file}
+							alt="Image"
+						/>
+					{/if}
+				{:else if typeof file === 'object'}
+					{#if (file.type === 'image' || (file?.content_type ?? '').startsWith('image/')) && file.url}
+						<Image
+							id={`${componentId}-tool-call-result-${idx}`}
+							src={file.url}
+							alt="Image"
+						/>
+					{/if}
+				{/if}
+			{/each}
+		{/if}
+	{/if}
+</div>

From 73bb600034c8532e30726129743a5ffe9002c5fb Mon Sep 17 00:00:00 2001
From: Tim Baek <tim@openwebui.com>
Date: Fri, 6 Feb 2026 23:35:21 +0400
Subject: [PATCH 12/42] refac

---
 src/lib/components/NotificationToast.svelte | 23 ++++++++++++++++++++-
 1 file changed, 22 insertions(+), 1 deletion(-)

diff --git a/src/lib/components/NotificationToast.svelte b/src/lib/components/NotificationToast.svelte
index 1b8d9fae8b..3eb6a17d08 100644
--- a/src/lib/components/NotificationToast.svelte
+++ b/src/lib/components/NotificationToast.svelte
@@ -5,6 +5,7 @@
 
 	import { marked } from 'marked';
 	import { createEventDispatcher, onMount } from 'svelte';
+	import XMark from '$lib/components/icons/XMark.svelte';
 
 	const dispatch = createEventDispatcher();
 
@@ -15,6 +16,7 @@
 	let startX = 0,
 		startY = 0;
 	let moved = false;
+	let closeButtonElement: HTMLButtonElement;
 	const DRAG_THRESHOLD_PX = 6;
 
 	const clickHandler = () => {
@@ -22,6 +24,10 @@
 		dispatch('closeToast');
 	};
 
+	const closeHandler = () => {
+		dispatch('closeToast');
+	};
+
 	function onPointerDown(e: PointerEvent) {
 		startX = e.clientX;
 		startY = e.clientY;
@@ -43,6 +49,11 @@
 		// Release capture if taken
 		(e.currentTarget as HTMLElement).releasePointerCapture?.(e.pointerId);
 
+		// Skip if clicking the close button
+		if (closeButtonElement && (e.target === closeButtonElement || closeButtonElement.contains(e.target as Node))) {
+			return;
+		}
+
 		// Only treat as a click if there wasn't a drag
 		if (!moved) {
 			clickHandler();
@@ -71,7 +82,7 @@
 <!-- svelte-ignore a11y-click-events-have-key-events -->
 <!-- svelte-ignore a11y-no-static-element-interactions -->
 <div
-	class="flex gap-2.5 text-left min-w-[var(--width)] w-full dark:bg-gray-850 dark:text-white bg-white text-black border border-gray-100 dark:border-gray-800 rounded-3xl px-4 py-3.5 cursor-pointer select-none"
+	class="group relative flex gap-2.5 text-left min-w-[var(--width)] w-full dark:bg-gray-850 dark:text-white bg-white text-black border border-gray-100 dark:border-gray-800 rounded-3xl px-4 py-3.5 cursor-pointer select-none"
 	on:dragstart|preventDefault
 	on:pointerdown={onPointerDown}
 	on:pointermove={onPointerMove}
@@ -84,6 +95,16 @@
 		}
 	}}
 >
+	<!-- Close button (visible on hover) -->
+	<button
+		bind:this={closeButtonElement}
+		class="absolute -top-0.5 -left-0.5 p-0.5 rounded-full opacity-0 group-hover:opacity-100 bg-gray-200 dark:bg-gray-700 hover:bg-gray-300 dark:hover:bg-gray-600 text-gray-500 dark:text-gray-400 hover:text-gray-700 dark:hover:text-gray-200 transition-opacity z-10"
+		on:click|stopPropagation={closeHandler}
+		aria-label="Dismiss notification"
+	>
+		<XMark className="size-3" />
+	</button>
+
 	<div class="shrink-0 self-top -translate-y-0.5">
 		<img src="{WEBUI_BASE_URL}/static/favicon.png" alt="favicon" class="size-6 rounded-full" />
 	</div>

From 494cf8b3ef0a1617d2cde2ac4cbfd86822644c62 Mon Sep 17 00:00:00 2001
From: Classic298 <27028174+Classic298@users.noreply.github.com>
Date: Sun, 8 Feb 2026 00:19:26 +0100
Subject: [PATCH 13/42] fix (#21226)

---
 backend/open_webui/routers/ollama.py | 33 ++++++++++++++++++++++++++++
 backend/open_webui/routers/openai.py |  3 +++
 2 files changed, 36 insertions(+)

diff --git a/backend/open_webui/routers/ollama.py b/backend/open_webui/routers/ollama.py
index ed231aabce..cd14f4526b 100644
--- a/backend/open_webui/routers/ollama.py
+++ b/backend/open_webui/routers/ollama.py
@@ -443,6 +443,9 @@ async def get_filtered_models(models, user, db=None):
 async def get_ollama_tags(
     request: Request, url_idx: Optional[int] = None, user=Depends(get_verified_user)
 ):
+    if not request.app.state.config.ENABLE_OLLAMA_API:
+        raise HTTPException(status_code=503, detail="Ollama API is disabled")
+
     models = []
 
     if url_idx is None:
@@ -707,6 +710,9 @@ async def pull_model(
     url_idx: int = 0,
     user=Depends(get_admin_user),
 ):
+    if not request.app.state.config.ENABLE_OLLAMA_API:
+        raise HTTPException(status_code=503, detail="Ollama API is disabled")
+
     form_data = form_data.model_dump(exclude_none=True)
     form_data["model"] = form_data.get("model", form_data.get("name"))
 
@@ -738,6 +744,9 @@ async def push_model(
     url_idx: Optional[int] = None,
     user=Depends(get_admin_user),
 ):
+    if not request.app.state.config.ENABLE_OLLAMA_API:
+        raise HTTPException(status_code=503, detail="Ollama API is disabled")
+
     if url_idx is None:
         await get_all_models(request, user=user)
         models = request.app.state.OLLAMA_MODELS
@@ -777,6 +786,9 @@ async def create_model(
     url_idx: int = 0,
     user=Depends(get_admin_user),
 ):
+    if not request.app.state.config.ENABLE_OLLAMA_API:
+        raise HTTPException(status_code=503, detail="Ollama API is disabled")
+
     log.debug(f"form_data: {form_data}")
     url = request.app.state.config.OLLAMA_BASE_URLS[url_idx]
 
@@ -801,6 +813,9 @@ async def copy_model(
     url_idx: Optional[int] = None,
     user=Depends(get_admin_user),
 ):
+    if not request.app.state.config.ENABLE_OLLAMA_API:
+        raise HTTPException(status_code=503, detail="Ollama API is disabled")
+
     if url_idx is None:
         await get_all_models(request, user=user)
         models = request.app.state.OLLAMA_MODELS
@@ -861,6 +876,9 @@ async def delete_model(
     url_idx: Optional[int] = None,
     user=Depends(get_admin_user),
 ):
+    if not request.app.state.config.ENABLE_OLLAMA_API:
+        raise HTTPException(status_code=503, detail="Ollama API is disabled")
+
     form_data = form_data.model_dump(exclude_none=True)
     form_data["model"] = form_data.get("model", form_data.get("name"))
 
@@ -923,6 +941,9 @@ async def delete_model(
 async def show_model_info(
     request: Request, form_data: ModelNameForm, user=Depends(get_verified_user)
 ):
+    if not request.app.state.config.ENABLE_OLLAMA_API:
+        raise HTTPException(status_code=503, detail="Ollama API is disabled")
+
     form_data = form_data.model_dump(exclude_none=True)
     form_data["model"] = form_data.get("model", form_data.get("name"))
 
@@ -995,6 +1016,9 @@ async def embed(
     url_idx: Optional[int] = None,
     user=Depends(get_verified_user),
 ):
+    if not request.app.state.config.ENABLE_OLLAMA_API:
+        raise HTTPException(status_code=503, detail="Ollama API is disabled")
+
     log.info(f"generate_ollama_batch_embeddings {form_data}")
 
     if url_idx is None:
@@ -1077,6 +1101,9 @@ async def embeddings(
     url_idx: Optional[int] = None,
     user=Depends(get_verified_user),
 ):
+    if not request.app.state.config.ENABLE_OLLAMA_API:
+        raise HTTPException(status_code=503, detail="Ollama API is disabled")
+
     log.info(f"generate_ollama_embeddings {form_data}")
 
     if url_idx is None:
@@ -1167,6 +1194,9 @@ async def generate_completion(
     url_idx: Optional[int] = None,
     user=Depends(get_verified_user),
 ):
+    if not request.app.state.config.ENABLE_OLLAMA_API:
+        raise HTTPException(status_code=503, detail="Ollama API is disabled")
+
     if url_idx is None:
         await get_all_models(request, user=user)
         models = request.app.state.OLLAMA_MODELS
@@ -1259,6 +1289,9 @@ async def generate_chat_completion(
     bypass_filter: Optional[bool] = False,
     bypass_system_prompt: bool = False,
 ):
+    if not request.app.state.config.ENABLE_OLLAMA_API:
+        raise HTTPException(status_code=503, detail="Ollama API is disabled")
+
     # NOTE: We intentionally do NOT use Depends(get_session) here.
     # Database operations (get_model_by_id, has_access) manage their own short-lived sessions.
     # This prevents holding a connection during the entire LLM call (30-60+ seconds),
diff --git a/backend/open_webui/routers/openai.py b/backend/open_webui/routers/openai.py
index 0b5433314c..a4dce3fe0c 100644
--- a/backend/open_webui/routers/openai.py
+++ b/backend/open_webui/routers/openai.py
@@ -545,6 +545,9 @@ async def get_all_models(request: Request, user: UserModel) -> dict[str, list]:
 async def get_models(
     request: Request, url_idx: Optional[int] = None, user=Depends(get_verified_user)
 ):
+    if not request.app.state.config.ENABLE_OPENAI_API:
+        raise HTTPException(status_code=503, detail="OpenAI API is disabled")
+
     models = {
         "data": [],
     }

From 4fa6123c0498c822326923992fdf2d54ae206b4d Mon Sep 17 00:00:00 2001
From: Edgaras <42358442+Edgaras0x4E@users.noreply.github.com>
Date: Sat, 7 Feb 2026 23:33:34 +0000
Subject: [PATCH 14/42] i18n: Add Latvian translation (#21234)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Co-authored-by: Tim Baek <tim@openwebui.com>
Co-authored-by: joaoback <156559121+joaoback@users.noreply.github.com>
Co-authored-by: Edgaras0x4E <edgaras217t@gmail.com >
---
 src/lib/i18n/locales/languages.json         |    4 +
 src/lib/i18n/locales/lv-LV/translation.json | 1913 +++++++++++++++++++
 2 files changed, 1917 insertions(+)
 create mode 100644 src/lib/i18n/locales/lv-LV/translation.json

diff --git a/src/lib/i18n/locales/languages.json b/src/lib/i18n/locales/languages.json
index c66671ecc7..f229915d6d 100644
--- a/src/lib/i18n/locales/languages.json
+++ b/src/lib/i18n/locales/languages.json
@@ -131,6 +131,10 @@
 		"code": "lt-LT",
 		"title": "Lithuanian (Lietuvių)"
 	},
+	{
+		"code": "lv-LV",
+		"title": "Latvian (Latviešu)"
+	},
 	{
 		"code": "ms-MY",
 		"title": "Malay (Bahasa Malaysia)"
diff --git a/src/lib/i18n/locales/lv-LV/translation.json b/src/lib/i18n/locales/lv-LV/translation.json
new file mode 100644
index 0000000000..9724db38d3
--- /dev/null
+++ b/src/lib/i18n/locales/lv-LV/translation.json
@@ -0,0 +1,1913 @@
+{
+	"-1 for no limit, or a positive integer for a specific limit": "-1 bez ierobežojuma vai pozitīvs skaitlis konkrētam ierobežojumam",
+	"'s', 'm', 'h', 'd', 'w' or '-1' for no expiration.": "'s', 'm', 'h', 'd', 'w' vai '-1' bez derīguma termiņa.",
+	"(e.g. `sh webui.sh --api --api-auth username_password`)": "(piem., `sh webui.sh --api --api-auth lietotājvārds_parole`)",
+	"(e.g. `sh webui.sh --api`)": "(piem., `sh webui.sh --api`)",
+	"(latest)": "(jaunākā)",
+	"(leave blank for to use commercial endpoint)": "(atstājiet tukšu, lai izmantotu komerciālo galapunktu)",
+	"[Last] dddd [at] h:mm A": "[Pagājušā] dddd [plkst.] H:mm",
+	"[Today at] h:mm A": "[Šodien plkst.] H:mm",
+	"[Yesterday at] h:mm A": "[Vakar plkst.] H:mm",
+	"{{ models }}": "{{ models }}",
+	"{{COUNT}} Available Tools": "{{COUNT}} pieejamie rīki",
+	"{{COUNT}} characters": "{{COUNT}} rakstzīmes",
+	"{{COUNT}} extracted lines": "{{COUNT}} izvilktās rindas",
+	"{{COUNT}} files": "{{COUNT}} faili",
+	"{{COUNT}} hidden lines": "{{COUNT}} slēptās rindas",
+	"{{COUNT}} Replies": "{{COUNT}} atbildes",
+	"{{COUNT}} Rows": "{{COUNT}} rindas",
+	"{{COUNT}} Sources": "{{COUNT}} avoti",
+	"{{COUNT}} words": "{{COUNT}} vārdi",
+	"{{LOCALIZED_DATE}} at {{LOCALIZED_TIME}}": "{{LOCALIZED_DATE}} plkst. {{LOCALIZED_TIME}}",
+	"{{model}} download has been canceled": "{{model}} lejupielāde ir atcelta",
+	"{{NAMES}} reacted with {{REACTION}}": "{{NAMES}} reaģēja ar {{REACTION}}",
+	"{{user}}'s Chats": "{{user}} tērzēšanas",
+	"{{webUIName}} Backend Required": "Nepieciešama {{webUIName}} aizmugursistēma",
+	"*Prompt node ID(s) are required for image generation": "*Attēla ģenerēšanai nepieciešami uzvednes mezgla ID",
+	"1 Source": "1 avots",
+	"A collaboration channel where people join as members": "Sadarbības kanāls, kurā cilvēki pievienojas kā dalībnieki",
+	"A discussion channel where access is controlled by groups and permissions": "Diskusiju kanāls, kur piekļuvi kontrolē grupas un atļaujas",
+	"A new version (v{{LATEST_VERSION}}) is now available.": "Ir pieejama jauna versija (v{{LATEST_VERSION}}).",
+	"A private conversation between you and selected users": "Privāta saruna starp jums un izvēlētajiem lietotājiem",
+	"A task model is used when performing tasks such as generating titles for chats and web search queries": "Uzdevumu modelis tiek izmantots, veicot uzdevumus, piemēram, ģenerējot virsrakstus tērzēšanām un tīmekļa meklēšanas vaicājumiem",
+	"a user": "lietotājs",
+	"About": "Par",
+	"Accept Autocomplete Generation\nJump to Prompt Variable": "Pieņemt automātisko pabeigšanu\nPāriet uz uzvednes mainīgo",
+	"Access": "Piekļuve",
+	"Access Control": "Piekļuves kontrole",
+	"Accessible to all users": "Pieejams visiem lietotājiem",
+	"Account": "Konts",
+	"Account Activation Pending": "Gaida konta aktivizēšanu",
+	"Accurate information": "Precīza informācija",
+	"Action": "Darbība",
+	"Action not found": "Darbība nav atrasta",
+	"Action Required for Chat Log Storage": "Nepieciešama darbība tērzēšanas žurnāla glabāšanai",
+	"Actions": "Darbības",
+	"Activate": "Aktivizēt",
+	"Activate this command by typing \"/{{COMMAND}}\" to chat input.": "Aktivizējiet šo komandu, ierakstot \"/{{COMMAND}}\" tērzēšanas ievadē.",
+	"Active": "Aktīvs",
+	"Active Users": "Aktīvie lietotāji",
+	"Activity": "Aktivitāte",
+	"Add": "Pievienot",
+	"Add a model ID": "Pievienot modeļa ID",
+	"Add a short description about what this model does": "Pievienojiet īsu aprakstu par to, ko šis modelis dara",
+	"Add a tag": "Pievienot tagu",
+	"Add Arena Model": "Pievienot arēnas modeli",
+	"Add Connection": "Pievienot savienojumu",
+	"Add Content": "Pievienot saturu",
+	"Add content here": "Pievienojiet saturu šeit",
+	"Add Custom Parameter": "Pievienot pielāgotu parametru",
+	"Add Custom Prompt": "Pievienot pielāgotu uzvedni",
+	"Add Details": "Pievienot detaļas",
+	"Add Files": "Pievienot failus",
+	"Add Member": "Pievienot dalībnieku",
+	"Add Members": "Pievienot dalībniekus",
+	"Add Memory": "Pievienot atmiņu",
+	"Add Model": "Pievienot modeli",
+	"Add Reaction": "Pievienot reakciju",
+	"Add Tag": "Pievienot tagu",
+	"Add Tags": "Pievienot tagus",
+	"Add text content": "Pievienot teksta saturu",
+	"Add User": "Pievienot lietotāju",
+	"Add User Group": "Pievienot lietotāju grupu",
+	"Add webpage": "Pievienot tīmekļa lapu",
+	"Additional Config": "Papildu konfigurācija",
+	"Additional configuration options for marker. This should be a JSON string with key-value pairs. For example, '{\"key\": \"value\"}'. Supported keys include: disable_links, keep_pageheader_in_output, keep_pagefooter_in_output, filter_blank_pages, drop_repeated_text, layout_coverage_threshold, merge_threshold, height_tolerance, gap_threshold, image_threshold, min_line_length, level_count, default_level": "Papildu konfigurācijas opcijas marķierim. Tam jābūt JSON virknei ar atslēgu-vērtību pāriem. Piemēram, '{\"key\": \"value\"}'. Atbalstītās atslēgas ietver: disable_links, keep_pageheader_in_output, keep_pagefooter_in_output, filter_blank_pages, drop_repeated_text, layout_coverage_threshold, merge_threshold, height_tolerance, gap_threshold, image_threshold, min_line_length, level_count, default_level",
+	"Additional Parameters": "Papildu parametri",
+	"Adds filenames, titles, sections, and snippets into the BM25 text to improve lexical recall.": "Pievieno failu nosaukumus, virsrakstus, sadaļas un fragmentus BM25 tekstam, lai uzlabotu leksisko atgūšanu.",
+	"Adjusting these settings will apply changes universally to all users.": "Šo iestatījumu pielāgošana piemēros izmaiņas visiem lietotājiem.",
+	"admin": "administrators",
+	"Admin": "Administrators",
+	"Admin Contact Email": "Administratora kontakt e-pasts",
+	"Admin Panel": "Administratora panelis",
+	"Admin Settings": "Administratora iestatījumi",
+	"Admins have access to all tools at all times; users need tools assigned per model in the workspace.": "Administratoriem vienmēr ir piekļuve visiem rīkiem; lietotājiem rīki jāpiešķir katram modelim darba vidē.",
+	"Advanced Parameters": "Papildu parametri",
+	"Advanced parameters for MinerU parsing (enable_ocr, enable_formula, enable_table, language, model_version, page_ranges)": "MinerU parsēšanas papildu parametri (enable_ocr, enable_formula, enable_table, language, model_version, page_ranges)",
+	"Advanced Params": "Papildu parametri",
+	"After updating or changing the embedding model, you must reindex the knowledge base for the changes to take effect. You can do this using the \"Reindex\" button below.": "Pēc iegulšanas modeļa atjaunināšanas vai maiņas jums jāpārindeksē zināšanu bāze, lai izmaiņas stātos spēkā. To var izdarīt, izmantojot zemāk esošo pogu \"Pārindeksēt\".",
+	"AI": "MI",
+	"All": "Visi",
+	"All chats have been unarchived.": "Visas tērzēšanas ir atarhivētas.",
+	"All models deleted successfully": "Visi modeļi veiksmīgi dzēsti",
+	"Allow Call": "Atļaut zvanu",
+	"Allow Chat Controls": "Atļaut tērzēšanas vadības",
+	"Allow Chat Delete": "Atļaut tērzēšanas dzēšanu",
+	"Allow Chat Deletion": "Atļaut tērzēšanas dzēšanu",
+	"Allow Chat Edit": "Atļaut tērzēšanas rediģēšanu",
+	"Allow Chat Export": "Atļaut tērzēšanas eksportēšanu",
+	"Allow Chat Params": "Atļaut tērzēšanas parametrus",
+	"Allow Chat Share": "Atļaut tērzēšanas kopīgošanu",
+	"Allow Chat System Prompt": "Atļaut tērzēšanas sistēmas uzvedni",
+	"Allow Chat Valves": "Atļaut tērzēšanas vārstus",
+	"Allow Continue Response": "Atļaut turpināt atbildi",
+	"Allow Delete Messages": "Atļaut dzēst ziņojumus",
+	"Allow File Upload": "Atļaut failu augšupielādi",
+	"Allow Multiple Models in Chat": "Atļaut vairākus modeļus tērzēšanā",
+	"Allow non-local voices": "Atļaut ne-lokālās balsis",
+	"Allow Rate Response": "Atļaut vērtēt atbildi",
+	"Allow Regenerate Response": "Atļaut atkārtoti ģenerēt atbildi",
+	"Allow Speech to Text": "Atļaut runu uz tekstu",
+	"Allow Temporary Chat": "Atļaut pagaidu tērzēšanu",
+	"Allow Text to Speech": "Atļaut tekstu uz runu",
+	"Allow User Location": "Atļaut lietotāja atrašanās vietu",
+	"Allow Voice Interruption in Call": "Atļaut balss pārtraukšanu zvana laikā",
+	"Allowed Endpoints": "Atļautie galapunkti",
+	"Allowed File Extensions": "Atļautie failu paplašinājumi",
+	"Allowed file extensions for upload. Separate multiple extensions with commas. Leave empty for all file types.": "Atļautie failu paplašinājumi augšupielādei. Atdaliet vairākus paplašinājumus ar komatiem. Atstājiet tukšu visiem failu tipiem.",
+	"Already have an account?": "Jau ir konts?",
+	"Alternative to the top_p, and aims to ensure a balance of quality and variety. The parameter p represents the minimum probability for a token to be considered, relative to the probability of the most likely token. For example, with p=0.05 and the most likely token having a probability of 0.9, logits with a value less than 0.045 are filtered out.": "Alternatīva top_p, kuras mērķis ir nodrošināt kvalitātes un dažādības līdzsvaru. Parametrs p apzīmē minimālo varbūtību, lai tokens tiktu ņemts vērā, attiecībā pret visticamākā tokena varbūtību. Piemēram, ar p=0.05 un visticamākā tokena varbūtību 0.9, logiti ar vērtību mazāku par 0.045 tiek izfiltrēti.",
+	"Always": "Vienmēr",
+	"Always Collapse Code Blocks": "Vienmēr sabrucināt koda blokus",
+	"Always Expand Details": "Vienmēr izvērst detaļas",
+	"Always Play Notification Sound": "Vienmēr atskaņot paziņojuma skaņu",
+	"Amazing": "Lieliski",
+	"an assistant": "asistents",
+	"An error occurred while fetching the explanation": "Iegūstot skaidrojumu, radās kļūda",
+	"Analytics": "Analītika",
+	"Analyzed": "Analizēts",
+	"Analyzing...": "Analizē...",
+	"and": "un",
+	"and {{COUNT}} more": "un vēl {{COUNT}}",
+	"and create a new shared link.": "un izveidot jaunu kopīgotu saiti.",
+	"Android": "Android",
+	"Anyone": "Jebkurš",
+	"API Base URL": "API bāzes URL",
+	"API Base URL for Datalab Marker service. Defaults to: https://www.datalab.to/api/v1/marker": "API bāzes URL Datalab Marker pakalpojumam. Noklusējums: https://www.datalab.to/api/v1/marker",
+	"API Key": "API atslēga",
+	"API Key created.": "API atslēga izveidota.",
+	"API Key Endpoint Restrictions": "API atslēgas galapunkta ierobežojumi",
+	"API keys": "API atslēgas",
+	"API Keys": "API atslēgas",
+	"API Mode": "API režīms",
+	"API Timeout": "API pārtraukums",
+	"API Version": "API versija",
+	"API Version is required": "API versija ir nepieciešama",
+	"Application DN": "Lietojumprogrammas DN",
+	"Application DN Password": "Lietojumprogrammas DN parole",
+	"applies to all users with the \"user\" role": "attiecas uz visiem lietotājiem ar \"lietotāja\" lomu",
+	"April": "Aprīlis",
+	"Archive": "Arhivēt",
+	"Archive All Chats": "Arhivēt visas tērzēšanas",
+	"Archived Chats": "Arhivētās tērzēšanas",
+	"archived-chat-export": "arhivēto-tērzēšanu-eksports",
+	"Are you sure you want to clear all memories? This action cannot be undone.": "Vai tiešām vēlaties dzēst visas atmiņas? Šo darbību nevar atsaukt.",
+	"Are you sure you want to delete \"{{NAME}}\"?": "Vai tiešām vēlaties dzēst \"{{NAME}}\"?",
+	"Are you sure you want to delete this channel?": "Vai tiešām vēlaties dzēst šo kanālu?",
+	"Are you sure you want to delete this message?": "Vai tiešām vēlaties dzēst šo ziņojumu?",
+	"Are you sure you want to unarchive all archived chats?": "Vai tiešām vēlaties atarhivēt visas arhivētās tērzēšanas?",
+	"Are you sure?": "Vai esat pārliecināts?",
+	"Arena Models": "Arēnas modeļi",
+	"Artifacts": "Artefakti",
+	"Asc": "Augoši",
+	"Ask": "Jautāt",
+	"Ask a question": "Uzdot jautājumu",
+	"Assistant": "Asistents",
+	"Async Embedding Processing": "Asinhronā iegulšanas apstrāde",
+	"Attach File From Knowledge": "Pievienot failu no zināšanām",
+	"Attach Knowledge": "Pievienot zināšanau bāzi",
+	"Attach Notes": "Pievienot piezīmes",
+	"Attach Webpage": "Pievienot tīmekļa lapu",
+	"Attention to detail": "Uzmanība detaļām",
+	"Attribute for Mail": "E-pasta atribūts",
+	"Attribute for Username": "Lietotājvārda atribūts",
+	"Audio": "Audio",
+	"August": "Augusts",
+	"Auth": "Autorizācija",
+	"Authenticate": "Autentificēties",
+	"Authentication": "Autentifikācija",
+	"Auto": "Automātiski",
+	"Auto (Random)": "Automātiski (nejauši)",
+	"Auto-Copy Response to Clipboard": "Automātiski kopēt atbildi starpliktuvē",
+	"Auto-playback response": "Automātiski atskaņot atbildi",
+	"Autocomplete Generation": "Automātiskās pabeigšanas ģenerēšana",
+	"Autocomplete Generation Input Max Length": "Automātiskās pabeigšanas ievades maksimālais garums",
+	"Automatic1111": "Automatic1111",
+	"AUTOMATIC1111 Api Auth String": "AUTOMATIC1111 API autorizācijas virkne",
+	"AUTOMATIC1111 Base URL": "AUTOMATIC1111 bāzes URL",
+	"AUTOMATIC1111 Base URL is required.": "AUTOMATIC1111 bāzes URL ir nepieciešams.",
+	"Automatically inject system tools in native function calling mode (e.g., timestamps, memory, chat history, notes, etc.)": "Automātiski ievietot sistēmas rīkus vietējā funkciju izsaukšanas režīmā (piem., laika zīmogi, atmiņa, tērzēšanas vēsture, piezīmes utt.)",
+	"Available list": "Pieejamo saraksts",
+	"Available Tools": "Pieejamie rīki",
+	"available users": "pieejamie lietotāji",
+	"available!": "pieejams!",
+	"Away": "Prom",
+	"Awful": "Šausmīgi",
+	"Azure AI Speech": "Azure AI runa",
+	"Azure OpenAI": "Azure OpenAI",
+	"Azure Region": "Azure reģions",
+	"Back": "Atpakaļ",
+	"Bad Response": "Slikta atbilde",
+	"Banners": "Baneri",
+	"Base Model (From)": "Bāzes modelis (no)",
+	"Base Model List Cache speeds up access by fetching base models only at startup or on settings save—faster, but may not show recent base model changes.": "Bāzes modeļu saraksta kešatmiņa paātrina piekļuvi, ielādējot bāzes modeļus tikai startējot vai saglabājot iestatījumus — ātrāk, bet var nerādīt nesenās bāzes modeļu izmaiņas.",
+	"Bearer": "Bearer",
+	"before": "pirms",
+	"Being lazy": "Esmu slinks",
+	"Beta": "Beta",
+	"Bing": "Bing",
+	"Bing Search V7 Endpoint": "Bing Search V7 galapunkts",
+	"Bing Search V7 Subscription Key": "Bing Search V7 abonementa atslēga",
+	"Bio": "Biogrāfija",
+	"Birth Date": "Dzimšanas datums",
+	"BM25 Weight": "BM25 svars",
+	"Bocha Search API Key": "Bocha Search API atslēga",
+	"Bold": "Treknraksts",
+	"Boosting or penalizing specific tokens for constrained responses. Bias values will be clamped between -100 and 100 (inclusive). (Default: none)": "Konkrētu tokenu pastiprinājums vai sodīšana ierobežotām atbildēm. Novirzes vērtības tiks ierobežotas starp -100 un 100 (ieskaitot). (Noklusējums: nav)",
+	"Brave": "Brave",
+	"Brave Search API Key": "Brave Search API atslēga",
+	"Builtin Tools": "Iebūvētie rīki",
+	"Bullet List": "Aizzīmju saraksts",
+	"Button ID": "Pogas ID",
+	"Button Label": "Pogas etiķete",
+	"Button Prompt": "Pogas uzvedne",
+	"by {{name}}": "autors {{name}}",
+	"By {{name}}": "Autors {{name}}",
+	"Bypass Embedding and Retrieval": "Apiet iegulšanu un izgūšanu",
+	"Bypass Web Loader": "Apiet tīmekļa ielādētāju",
+	"Cache Base Model List": "Kešot bāzes modeļu sarakstu",
+	"Calendar": "Kalendārs",
+	"Call": "Zvans",
+	"Call feature is not supported when using Web STT engine": "Zvana funkcija nav atbalstīta, izmantojot Web STT dzinēju",
+	"Camera": "Kamera",
+	"Cancel": "Atcelt",
+	"Cannot create an empty note.": "Nevar izveidot tukšu piezīmi.",
+	"Capabilities": "Iespējas",
+	"Capture": "Uzņemt",
+	"Capture Audio": "Ierakstīt audio",
+	"Certificate Path": "Sertifikāta ceļš",
+	"Change Password": "Mainīt paroli",
+	"Channel": "Kanāls",
+	"Channel deleted successfully": "Kanāls veiksmīgi dzēsts",
+	"Channel Name": "Kanāla nosaukums",
+	"Channel name cannot be empty.": "Kanāla nosaukums nevar būt tukšs.",
+	"Channel name must be less than 128 characters": "Kanāla nosaukumam jābūt mazākam par 128 rakstzīmēm",
+	"Channel Type": "Kanāla tips",
+	"Channel updated successfully": "Kanāls veiksmīgi atjaunināts",
+	"Channels": "Kanāli",
+	"Character": "Rakstzīme",
+	"Character limit for autocomplete generation input": "Rakstzīmju ierobežojums automātiskās pabeigšanas ievadei",
+	"Chart new frontiers": "Atklāj jaunas robežas",
+	"Chat": "Tērzēšana",
+	"Chat Background Image": "Tērzēšanas fona attēls",
+	"Chat Bubble UI": "Tērzēšanas burbuļa saskarne",
+	"Chat Controls": "Tērzēšanas vadības",
+	"Chat Conversation": "Tērzēšanas saruna",
+	"Chat direction": "Tērzēšanas virziens",
+	"Chat ID": "Tērzēšanas ID",
+	"Chat moved successfully": "Tērzēšana veiksmīgi pārvietota",
+	"Chat Overview": "Tērzēšanas pārskats",
+	"Chat Permissions": "Tērzēšanas atļaujas",
+	"Chat Tags Auto-Generation": "Tērzēšanas tagu automātiska ģenerēšana",
+	"Chats": "Tērzēšanas",
+	"Check Again": "Pārbaudīt vēlreiz",
+	"Check for updates": "Pārbaudīt atjauninājumus",
+	"Checking for updates...": "Pārbauda atjauninājumus...",
+	"Choose a model before saving...": "Izvēlieties modeli pirms saglabāšanas...",
+	"Chunk Min Size Target": "Fragmenta minimālā izmēra mērķis",
+	"Chunk Overlap": "Fragmentu pārklāšanās",
+	"Chunk Size": "Fragmenta izmērs",
+	"Chunks smaller than this threshold will be merged with neighboring chunks when possible. Set to 0 to disable merging.": "Fragmenti, kas mazāki par šo slieksni, tiks apvienoti ar blakus esošajiem fragmentiem, ja iespējams. Iestatiet 0, lai atspējotu apvienošanu.",
+	"Ciphers": "Šifri",
+	"Citation": "Citāts",
+	"Citations": "Citāti",
+	"Clear memory": "Notīrīt atmiņu",
+	"Clear Memory": "Notīrīt atmiņu",
+	"Clear status": "Notīrīt statusu",
+	"click here": "noklikšķiniet šeit",
+	"Click here for filter guides.": "Noklikšķiniet šeit, lai skatītu filtru rokasgrāmatas.",
+	"Click here for help.": "Noklikšķiniet šeit, lai saņemtu palīdzību.",
+	"Click here to": "Noklikšķiniet šeit, lai",
+	"Click here to download user import template file.": "Noklikšķiniet šeit, lai lejupielādētu lietotāju importa veidnes failu.",
+	"Click here to learn more about faster-whisper and see the available models.": "Noklikšķiniet šeit, lai uzzinātu vairāk par faster-whisper un skatītu pieejamos modeļus.",
+	"Click here to see available models.": "Noklikšķiniet šeit, lai skatītu pieejamos modeļus.",
+	"Click here to select": "Noklikšķiniet šeit, lai izvēlētos",
+	"Click here to select a csv file.": "Noklikšķiniet šeit, lai izvēlētos csv failu.",
+	"Click here to select a py file.": "Noklikšķiniet šeit, lai izvēlētos py failu.",
+	"Click here to upload a workflow.json file.": "Noklikšķiniet šeit, lai augšupielādētu workflow.json failu.",
+	"click here.": "noklikšķiniet šeit.",
+	"Click on the user role button to change a user's role.": "Noklikšķiniet uz lietotāja lomas pogas, lai mainītu lietotāja lomu.",
+	"Clipboard write permission denied. Please check your browser settings to grant the necessary access.": "Starpliktuves rakstīšanas atļauja liegta. Lūdzu, pārbaudiet pārlūka iestatījumus, lai piešķirtu nepieciešamo piekļuvi.",
+	"Clone": "Klonēt",
+	"Clone Chat": "Klonēt tērzēšanu",
+	"Clone of {{TITLE}}": "{{TITLE}} klons",
+	"Close": "Aizvērt",
+	"Close Banner": "Aizvērt baneri",
+	"Close Configure Connection Modal": "Aizvērt savienojuma konfigurēšanas logu",
+	"Close modal": "Aizvērt logu",
+	"Close Modal": "Aizvērt logu",
+	"Close settings modal": "Aizvērt iestatījumu logu",
+	"Close Sidebar": "Aizvērt sānjoslu",
+	"cloud": "mākonis",
+	"CMU ARCTIC speaker embedding name": "CMU ARCTIC runātāja iegulšanas nosaukums",
+	"Code Block": "Koda bloks",
+	"Code Editor": "Koda redaktors",
+	"Code execution": "Koda izpilde",
+	"Code Execution": "Koda izpilde",
+	"Code Execution Engine": "Koda izpildes dzinējs",
+	"Code Execution Timeout": "Koda izpildes taimauts",
+	"Code formatted successfully": "Kods veiksmīgi formatēts",
+	"Code Interpreter": "Koda interpretators",
+	"Code Interpreter Engine": "Koda interpretatora dzinējs",
+	"Code Interpreter Prompt Template": "Koda interpretatora uzvednes veidne",
+	"Collaboration channel where people join as members": "Sadarbības kanāls, kurā cilvēki pievienojas kā dalībnieki",
+	"Collapse": "Sakļaut",
+	"Collection": "Kolekcija",
+	"Collections": "Kolekcijas",
+	"Color": "Krāsa",
+	"ComfyUI": "ComfyUI",
+	"ComfyUI API Key": "ComfyUI API atslēga",
+	"ComfyUI Base URL": "ComfyUI bāzes URL",
+	"ComfyUI Base URL is required.": "ComfyUI bāzes URL ir nepieciešams.",
+	"ComfyUI Workflow": "ComfyUI darbplūsma",
+	"ComfyUI Workflow Nodes": "ComfyUI darbplūsmas mezgli",
+	"Comma separated Node Ids (e.g. 1 or 1,2)": "Ar komatu atdalīti mezglu ID (piem., 1 vai 1,2)",
+	"Command": "Komanda",
+	"Comment": "Komentārs",
+	"Completions": "Pabeigšanas",
+	"Compress Images in Channels": "Saspiest attēlus kanālos",
+	"Concurrent Requests": "Vienlaicīgie pieprasījumi",
+	"Config imported successfully": "Konfigurācija veiksmīgi importēta",
+	"Configure": "Konfigurēt",
+	"Confirm": "Apstiprināt",
+	"Confirm Password": "Apstiprināt paroli",
+	"Confirm your action": "Apstipriniet savu darbību",
+	"Confirm your new password": "Apstipriniet savu jauno paroli",
+	"Confirm Your Password": "Apstipriniet savu paroli",
+	"Connect to your own OpenAI compatible API endpoints.": "Savienojieties ar saviem OpenAI saderīgajiem API galapunktiem.",
+	"Connect to your own OpenAPI compatible external tool servers.": "Savienojieties ar saviem OpenAPI saderīgajiem ārējo rīku serveriem.",
+	"Connection failed": "Savienojums neizdevās",
+	"Connection successful": "Savienojums veiksmīgs",
+	"Connection Type": "Savienojuma tips",
+	"Connections": "Savienojumi",
+	"Connections saved successfully": "Savienojumi veiksmīgi saglabāti",
+	"Connections settings updated": "Savienojumu iestatījumi atjaunināti",
+	"Constrains effort on reasoning for reasoning models. Only applicable to reasoning models from specific providers that support reasoning effort.": "Ierobežo spriedumu pūles spriedumu modeļiem. Attiecas tikai uz spriedumu modeļiem no konkrētiem pakalpojumu sniedzējiem, kas atbalsta spriedumu pūles.",
+	"Contact Admin for WebUI Access": "Sazinieties ar administratoru, lai piekļūtu WebUI",
+	"Content": "Saturs",
+	"Content Extraction Engine": "Satura ekstrakcijas dzinējs",
+	"Content lengths (character counts only)": "Satura garumi (tikai rakstzīmju skaits)",
+	"Continue Response": "Turpināt atbildi",
+	"Continue with {{provider}}": "Turpināt ar {{provider}}",
+	"Continue with Email": "Turpināt ar e-pastu",
+	"Continue with LDAP": "Turpināt ar LDAP",
+	"Control how message text is split for TTS requests. 'Punctuation' splits into sentences, 'paragraphs' splits into paragraphs, and 'none' keeps the message as a single string.": "Kontrolējiet, kā ziņojuma teksts tiek sadalīts TTS pieprasījumiem. 'Pieturzīmes' sadala teikumos, 'rindkopas' sadala rindkopās, un 'nav' saglabā ziņojumu kā vienu virkni.",
+	"Control the repetition of token sequences in the generated text. A higher value (e.g., 1.5) will penalize repetitions more strongly, while a lower value (e.g., 1.1) will be more lenient. At 1, it is disabled.": "Kontrolējiet tokenu secību atkārtošanos ģenerētajā tekstā. Augstāka vērtība (piem., 1.5) stingrāk sodīs atkārtojumus, bet zemāka vērtība (piem., 1.1) būs iecietīgāka. Pie 1 tas ir atspējots.",
+	"Controls": "Vadīklas",
+	"Controls the balance between coherence and diversity of the output. A lower value will result in more focused and coherent text.": "Kontrolē līdzsvaru starp izvades saskaņotību un dažādību. Zemāka vērtība radīs fokusētāku un saskaņotāku tekstu.",
+	"Conversation saved successfully": "Saruna veiksmīgi saglabāta",
+	"Copied": "Nokopēts",
+	"Copied link to clipboard": "Saite nokopēta starpliktuvē",
+	"Copied shared chat URL to clipboard!": "Kopīgotās tērzēšanas URL nokopēts starpliktuvē!",
+	"Copied to clipboard": "Nokopēts starpliktuvē",
+	"Copy": "Kopēt",
+	"Copy Formatted Text": "Kopēt formatētu tekstu",
+	"Copy Last Code Block": "Kopēt pēdējo koda bloku",
+	"Copy Last Response": "Kopēt pēdējo atbildi",
+	"Copy link": "Kopēt saiti",
+	"Copy Link": "Kopēt saiti",
+	"Copy to clipboard": "Kopēt starpliktuvē",
+	"Copy URL": "Kopēt URL",
+	"Copying to clipboard was successful!": "Kopēšana starpliktuvē bija veiksmīga!",
+	"CORS must be properly configured by the provider to allow requests from Open WebUI.": "Pakalpojumu sniedzējam jākonfigurē CORS pareizi, lai atļautu pieprasījumus no Open WebUI.",
+	"Create": "Izveidot",
+	"Create a knowledge base": "Izveidot zināšanu bāzi",
+	"Create a model": "Izveidot modeli",
+	"Create a new note": "Izveidot jaunu piezīmi",
+	"Create Account": "Izveidot kontu",
+	"Create Admin Account": "Izveidot administratora kontu",
+	"Create Channel": "Izveidot kanālu",
+	"Create Folder": "Izveidot mapi",
+	"Create Group": "Izveidot grupu",
+	"Create Image": "Izveidot attēlu",
+	"Create Knowledge": "Izveidot zināšanas",
+	"Create Model": "Izveidot modeli",
+	"Create new key": "Izveidot jaunu atslēgu",
+	"Create new secret key": "Izveidot jaunu slepeno atslēgu",
+	"Create note": "Izveidot piezīmi",
+	"Create Note": "Izveidot piezīmi",
+	"Create your first note by clicking on the plus button below.": "Izveidojiet savu pirmo piezīmi, noklikšķinot uz pluszīmes pogas zemāk.",
+	"Created at": "Izveidots",
+	"Created At": "Izveidots",
+	"Created by": "Izveidoja",
+	"Created by you": "Jūs izveidojāt",
+	"Created on {{date}}": "Izveidots {{date}}",
+	"CSV Import": "CSV imports",
+	"Ctrl+Enter to Send": "Ctrl+Enter, lai nosūtītu",
+	"Current Model": "Pašreizējais modelis",
+	"Current Password": "Pašreizējā parole",
+	"Custom": "Pielāgots",
+	"Custom description enabled": "Pielāgots apraksts iespējots",
+	"Custom Parameter Name": "Pielāgota parametra nosaukums",
+	"Custom Parameter Value": "Pielāgota parametra vērtība",
+	"Danger Zone": "Bīstamā zona",
+	"Dark": "Tumšs",
+	"Data Controls": "Datu vadības",
+	"Database": "Datubāze",
+	"Datalab Marker API": "Datalab Marker API",
+	"DD/MM/YYYY": "DD/MM/GGGG",
+	"DDGS Backend": "DDGS aizmugursistēma",
+	"December": "Decembris",
+	"Decrease UI Scale": "Samazināt saskarnes mērogu",
+	"Deepgram": "Deepgram",
+	"Default": "Noklusējums",
+	"Default (Open AI)": "Noklusējums (Open AI)",
+	"Default (SentenceTransformers)": "Noklusējums (SentenceTransformers)",
+	"Default action buttons will be used.": "Tiks izmantotas noklusējuma darbību pogas.",
+	"Default description enabled": "Noklusējuma apraksts iespējots",
+	"Default Features": "Noklusējuma funkcijas",
+	"Default Filters": "Noklusējuma filtri",
+	"Default Group": "Noklusējuma grupa",
+	"Default mode works with a wider range of models by calling tools once before execution. Native mode leverages the model's built-in tool-calling capabilities, but requires the model to inherently support this feature.": "Noklusējuma režīms darbojas ar plašāku modeļu klāstu, izsaucot rīkus vienu reizi pirms izpildes. Vietējais režīms izmanto modeļa iebūvētās rīku izsaukšanas iespējas, bet prasa, lai modelis dabiski atbalstītu šo funkciju.",
+	"Default Model": "Noklusējuma modelis",
+	"Default model updated": "Noklusējuma modelis atjaunināts",
+	"Default Models": "Noklusējuma modeļi",
+	"Default permissions": "Noklusējuma atļaujas",
+	"Default permissions updated successfully": "Noklusējuma atļaujas veiksmīgi atjauninātas",
+	"Default Pinned Models": "Noklusējuma piesprausti modeļi",
+	"Default Prompt Suggestions": "Noklusējuma uzvedņu ieteikumi",
+	"Default to 389 or 636 if TLS is enabled": "Noklusējums ir 389 vai 636, ja TLS ir iespējots",
+	"Default to ALL": "Noklusējums ir VISI",
+	"Default to segmented retrieval for focused and relevant content extraction, this is recommended for most cases.": "Noklusējums ir segmentēta izgūšana fokusētai un atbilstošai satura ekstrakcijai, tas ir ieteicams vairumā gadījumu.",
+	"Default User Role": "Noklusējuma lietotāja loma",
+	"Delete": "Dzēst",
+	"Delete a model": "Dzēst modeli",
+	"Delete All Chats": "Dzēst visas tērzēšanas",
+	"Delete all contents inside this folder": "Dzēst visu saturu šajā mapē",
+	"Delete All Models": "Dzēst visus modeļus",
+	"Delete Chat": "Dzēst tērzēšanu",
+	"Delete chat?": "Dzēst tērzēšanu?",
+	"Delete folder?": "Dzēst mapi?",
+	"Delete function?": "Dzēst funkciju?",
+	"Delete Message": "Dzēst ziņojumu",
+	"Delete message?": "Dzēst ziņojumu?",
+	"Delete Model": "Dzēst modeli",
+	"Delete note?": "Dzēst piezīmi?",
+	"Delete prompt?": "Dzēst uzvedni?",
+	"delete this link": "dzēst šo saiti",
+	"Delete tool?": "Dzēst rīku?",
+	"Delete User": "Dzēst lietotāju",
+	"Deleted": "Dzēsts",
+	"Deleted {{deleteModelTag}}": "Dzēsts {{deleteModelTag}}",
+	"Deleted {{name}}": "Dzēsts {{name}}",
+	"Deleted User": "Dzēsts lietotājs",
+	"Deployment names are required for Azure OpenAI": "Azure OpenAI ir nepieciešami izvietojumu nosaukumi",
+	"Desc": "Dilstoši",
+	"Describe your knowledge base and objectives": "Aprakstiet savu zināšanu bāzi un mērķus",
+	"Description": "Apraksts",
+	"Detect Artifacts Automatically": "Automātiski noteikt artefaktus",
+	"Dictate": "Diktēt",
+	"Didn't fully follow instructions": "Pilnībā neievēroja norādījumus",
+	"Direct": "Tiešs",
+	"Direct Connections": "Tiešie savienojumi",
+	"Direct Connections allow users to connect to their own OpenAI compatible API endpoints.": "Tiešie savienojumi ļauj lietotājiem savienoties ar saviem OpenAI saderīgajiem API galapunktiem.",
+	"Direct Message": "Tiešais ziņojums",
+	"Direct Tool Servers": "Tiešo rīku serveri",
+	"Directory selection was cancelled": "Direktorijas izvēle tika atcelta",
+	"Disable Code Interpreter": "Atspējot koda interpretatoru",
+	"Disable Image Extraction": "Atspējot attēlu ekstrakciju",
+	"Disable image extraction from the PDF. If Use LLM is enabled, images will be automatically captioned. Defaults to False.": "Atspējot attēlu ekstrakciju no PDF. Ja ir iespējots Lietot LLM, attēliem automātiski tiks pievienoti paraksti. Noklusējums ir False.",
+	"Disabled": "Atspējots",
+	"Discover a function": "Atklāt funkciju",
+	"Discover a model": "Atklāt modeli",
+	"Discover a prompt": "Atklāt uzvedni",
+	"Discover a tool": "Atklāt rīku",
+	"Discover how to use Open WebUI and seek support from the community.": "Uzziniet, kā lietot Open WebUI un meklējiet atbalstu no kopienas.",
+	"Discover wonders": "Atklāj brīnumus",
+	"Discover, download, and explore custom functions": "Atklājiet, lejupielādējiet un izpētiet pielāgotas funkcijas",
+	"Discover, download, and explore custom prompts": "Atklājiet, lejupielādējiet un izpētiet pielāgotas uzvednes",
+	"Discover, download, and explore custom tools": "Atklājiet, lejupielādējiet un izpētiet pielāgotus rīkus",
+	"Discover, download, and explore model presets": "Atklājiet, lejupielādējiet un izpētiet modeļu iestatījumu kopas",
+	"Discussion channel where access is based on groups and permissions": "Diskusiju kanāls, kur piekļuve balstās uz grupām un atļaujām",
+	"Display": "Attēlojums",
+	"Display chat title in tab": "Rādīt tērzēšanas virsrakstu cilnē",
+	"Display Emoji in Call": "Rādīt emocijzīmes zvana laikā",
+	"Display Multi-model Responses in Tabs": "Rādīt vairāku modeļu atbildes cilnēs",
+	"Display the username instead of You in the Chat": "Rādīt lietotājvārdu nevis 'Jūs' tērzēšanā",
+	"Displays citations in the response": "Rāda citātus atbildē",
+	"Displays status updates (e.g., web search progress) in the response": "Rāda statusa atjauninājumus (piem., tīmekļa meklēšanas progresu) atbildē",
+	"Dive into knowledge": "Ienirstiet zināšanās",
+	"Do not install functions from sources you do not fully trust.": "Neinstalējiet funkcijas no avotiem, kuriem pilnībā neuzticaties.",
+	"Do not install tools from sources you do not fully trust.": "Neinstalējiet rīkus no avotiem, kuriem pilnībā neuzticaties.",
+	"Do you want to sync your usage stats with Open WebUI Community?": "Vai vēlaties sinhronizēt savu lietošanas statistiku ar Open WebUI kopienu?",
+	"Docling": "Docling",
+	"Docling Parameters": "Docling parametri",
+	"Docling Server URL required.": "Nepieciešams Docling servera URL.",
+	"Document": "Dokuments",
+	"Document Intelligence": "Document Intelligence",
+	"Document Intelligence endpoint required.": "Nepieciešams Document Intelligence galapunkts.",
+	"Document Intelligence Model": "Document Intelligence modelis",
+	"Documentation": "Dokumentācija",
+	"Documents": "Dokumenti",
+	"does not make any external connections, and your data stays securely on your locally hosted server.": "neveido nekādus ārējos savienojumus, un jūsu dati droši paliek jūsu lokāli mitinātajā serverī.",
+	"Domain Filter List": "Domēnu filtru saraksts",
+	"don't fetch random pipelines from sources you don't trust.": "neielādējiet nejaušas plūsmas no avotiem, kuriem neuzticaties.",
+	"Don't have an account?": "Nav konta?",
+	"don't install random functions from sources you don't trust.": "neinstalējiet nejaušas funkcijas no avotiem, kuriem neuzticaties.",
+	"don't install random tools from sources you don't trust.": "neinstalējiet nejaušus rīkus no avotiem, kuriem neuzticaties.",
+	"Don't like the style": "Nepatīk stils",
+	"Done": "Gatavs",
+	"Download": "Lejupielādēt",
+	"Download & Delete": "Lejupielādēt un dzēst",
+	"Download as JSON": "Lejupielādēt kā JSON",
+	"Download as SVG": "Lejupielādēt kā SVG",
+	"Download canceled": "Lejupielāde atcelta",
+	"Download Database": "Lejupielādēt datubāzi",
+	"Downloading stats...": "Lejupielādē statistiku...",
+	"Draw": "Zīmēt",
+	"Drop any files here to upload": "Nometiet jebkurus failus šeit, lai augšupielādētu",
+	"DuckDuckGo": "DuckDuckGo",
+	"e.g. '30s','10m'. Valid time units are 's', 'm', 'h'.": "piem., '30s','10m'. Derīgas laika vienības ir 's', 'm', 'h'.",
+	"e.g. \"json\" or a JSON schema": "piem., \"json\" vai JSON shēma",
+	"e.g. 60": "piem., 60",
+	"e.g. A filter to remove profanity from text": "piem., Filtrs rupjību noņemšanai no teksta",
+	"e.g. about the Roman Empire": "piem., par Romas impēriju",
+	"e.g. alloy, echo, shimmer": "piem., alloy, echo, shimmer",
+	"e.g. en": "piem., lv",
+	"e.g. My Filter": "piem., Mans filtrs",
+	"e.g. My Tools": "piem., Mani rīki",
+	"e.g. my_filter": "piem., mans_filtrs",
+	"e.g. my_tools": "piem., mani_riki",
+	"e.g. pdf, docx, txt": "piem., pdf, docx, txt",
+	"e.g. Tell me a fun fact": "piem., Pastāsti man interesantu faktu",
+	"e.g. Tell me a fun fact about the Roman Empire": "piem., Pastāsti man interesantu faktu par Romas impēriju",
+	"e.g. Tools for performing various operations": "piem., Rīki dažādu operāciju veikšanai",
+	"e.g., 3, 4, 5 (leave blank for default)": "piem., 3, 4, 5 (atstājiet tukšu noklusējumam)",
+	"e.g., audio/wav,audio/mpeg,video/* (leave blank for defaults)": "piem., audio/wav,audio/mpeg,video/* (atstājiet tukšu noklusējumiem)",
+	"e.g., en-US,ja-JP (leave blank for auto-detect)": "piem., lv-LV,en-US (atstājiet tukšu automātiskai noteikšanai)",
+	"e.g., westus (leave blank for eastus)": "piem., westus (atstājiet tukšu priekš eastus)",
+	"Edit": "Rediģēt",
+	"Edit Arena Model": "Rediģēt arēnas modeli",
+	"Edit Channel": "Rediģēt kanālu",
+	"Edit Connection": "Rediģēt savienojumu",
+	"Edit Default Permissions": "Rediģēt noklusējuma atļaujas",
+	"Edit Folder": "Rediģēt mapi",
+	"Edit Image": "Rediģēt attēlu",
+	"Edit Last Message": "Rediģēt pēdējo ziņojumu",
+	"Edit Memory": "Rediģēt atmiņu",
+	"Edit User": "Rediģēt lietotāju",
+	"Edit User Group": "Rediģēt lietotāju grupu",
+	"Edit workflow.json content": "Rediģēt workflow.json saturu",
+	"edited": "rediģēts",
+	"Edited": "Rediģēts",
+	"Editing": "Rediģēšana",
+	"Eject": "Izņemt",
+	"ElevenLabs": "ElevenLabs",
+	"Email": "E-pasts",
+	"Embark on adventures": "Dodieties piedzīvojumos",
+	"Embedding": "Iegulšana",
+	"Embedding Batch Size": "Iegulšanas paketes izmērs",
+	"Embedding Model": "Iegulšanas modelis",
+	"Embedding Model Engine": "Iegulšanas modeļa dzinējs",
+	"Enable API Keys": "Iespējot API atslēgas",
+	"Enable autocomplete generation for chat messages": "Iespējot automātisko pabeigšanu tērzēšanas ziņojumiem",
+	"Enable Code Execution": "Iespējot koda izpildi",
+	"Enable Code Interpreter": "Iespējot koda interpretatoru",
+	"Enable Community Sharing": "Iespējot kopienas kopīgošanu",
+	"Enable Memory Locking (mlock) to prevent model data from being swapped out of RAM. This option locks the model's working set of pages into RAM, ensuring that they will not be swapped out to disk. This can help maintain performance by avoiding page faults and ensuring fast data access.": "Iespējot atmiņas bloķēšanu (mlock), lai novērstu modeļa datu izņemšanu no RAM. Šī opcija bloķē modeļa darba lapu kopu RAM, nodrošinot, ka tās netiks izņemtas uz disku. Tas var palīdzēt uzturēt veiktspēju, izvairoties no lapu kļūdām un nodrošinot ātru datu piekļuvi.",
+	"Enable Memory Mapping (mmap) to load model data. This option allows the system to use disk storage as an extension of RAM by treating disk files as if they were in RAM. This can improve model performance by allowing for faster data access. However, it may not work correctly with all systems and can consume a significant amount of disk space.": "Iespējot atmiņas kartēšanu (mmap), lai ielādētu modeļa datus. Šī opcija ļauj sistēmai izmantot diska krātuvi kā RAM paplašinājumu, apstrādājot diska failus tā, it kā tie būtu RAM. Tas var uzlabot modeļa veiktspēju, nodrošinot ātrāku datu piekļuvi. Tomēr tas var nedarboties pareizi ar visām sistēmām un var patērēt ievērojamu diska vietu.",
+	"Enable Message Rating": "Iespējot ziņojumu vērtēšanu",
+	"Enable Mirostat sampling for controlling perplexity.": "Iespējot Mirostat paraugu ņemšanu neizpratnes kontrolei.",
+	"Enable New Sign Ups": "Iespējot jaunu reģistrāciju",
+	"Enable, disable, or customize the reasoning tags used by the model. \"Enabled\" uses default tags, \"Disabled\" turns off reasoning tags, and \"Custom\" lets you specify your own start and end tags.": "Iespējojiet, atspējojiet vai pielāgojiet modeļa izmantotos spriedumu tagus. \"Iespējots\" izmanto noklusējuma tagus, \"Atspējots\" izslēdz spriedumu tagus, un \"Pielāgots\" ļauj norādīt savus sākuma un beigu tagus.",
+	"Enabled": "Iespējots",
+	"End Tag": "Beigu tags",
+	"Endpoint URL": "Galapunkta URL",
+	"Enforce Temporary Chat": "Uzspiest pagaidu tērzēšanu",
+	"Enhance": "Uzlabot",
+	"Enrich Hybrid Search Text": "Bagātināt hibrīda meklēšanas tekstu",
+	"Ensure your CSV file includes 4 columns in this order: Name, Email, Password, Role.": "Pārliecinieties, ka jūsu CSV failā ir 4 kolonnas šādā secībā: Vārds, E-pasts, Parole, Loma.",
+	"Enter {{role}} message here": "Ievadiet {{role}} ziņojumu šeit",
+	"Enter a detail about yourself for your LLMs to recall": "Ievadiet detaļu par sevi, ko jūsu LLM atcerēsies",
+	"Enter a title for the pending user info overlay. Leave empty for default.": "Ievadiet virsrakstu gaidošā lietotāja informācijas pārklājumam. Atstājiet tukšu noklusējumam.",
+	"Enter a watermark for the response. Leave empty for none.": "Ievadiet ūdenszīmi atbildei. Atstājiet tukšu, ja nevajag.",
+	"Enter additional headers in JSON format": "Ievadiet papildu galvenes JSON formātā",
+	"Enter additional headers in JSON format (e.g. {\"X-Custom-Header\": \"value\"}": "Ievadiet papildu galvenes JSON formātā (piem., {\"X-Custom-Header\": \"value\"}",
+	"Enter additional parameters in JSON format": "Ievadiet papildu parametrus JSON formātā",
+	"Enter api auth string (e.g. username:password)": "Ievadiet API autorizācijas virkni (piem., lietotājvārds:parole)",
+	"Enter Application DN": "Ievadiet lietojumprogrammas DN",
+	"Enter Application DN Password": "Ievadiet lietojumprogrammas DN paroli",
+	"Enter Bing Search V7 Endpoint": "Ievadiet Bing Search V7 galapunktu",
+	"Enter Bing Search V7 Subscription Key": "Ievadiet Bing Search V7 abonementa atslēgu",
+	"Enter Bocha Search API Key": "Ievadiet Bocha Search API atslēgu",
+	"Enter Brave Search API Key": "Ievadiet Brave Search API atslēgu",
+	"Enter certificate path": "Ievadiet sertifikāta ceļu",
+	"Enter Chunk Min Size Target": "Ievadiet fragmenta minimālā izmēra mērķi",
+	"Enter Chunk Overlap": "Ievadiet fragmentu pārklāšanos",
+	"Enter Chunk Size": "Ievadiet fragmenta izmēru",
+	"Enter comma-separated \"token:bias_value\" pairs (example: 5432:100, 413:-100)": "Ievadiet ar komatu atdalītus \"tokens:novirzes_vērtība\" pārus (piemērs: 5432:100, 413:-100)",
+	"Enter content for the pending user info overlay. Leave empty for default.": "Ievadiet saturu gaidošā lietotāja informācijas pārklājumam. Atstājiet tukšu noklusējumam.",
+	"Enter coordinates (e.g. 51.505, -0.09)": "Ievadiet koordinātas (piem., 51.505, -0.09)",
+	"Enter Datalab Marker API Base URL": "Ievadiet Datalab Marker API bāzes URL",
+	"Enter Datalab Marker API Key": "Ievadiet Datalab Marker API atslēgu",
+	"Enter description": "Ievadiet aprakstu",
+	"Enter Docling API Key": "Ievadiet Docling API atslēgu",
+	"Enter Docling Server URL": "Ievadiet Docling servera URL",
+	"Enter Document Intelligence Endpoint": "Ievadiet Document Intelligence galapunktu",
+	"Enter Document Intelligence Key": "Ievadiet Document Intelligence atslēgu",
+	"Enter Document Intelligence Model": "Ievadiet Document Intelligence modeli",
+	"Enter domains separated by commas (e.g., example.com,site.org,!excludedsite.com)": "Ievadiet domēnus, atdalītus ar komatiem (piem., example.com,site.org,!excludedsite.com)",
+	"Enter Exa API Key": "Ievadiet Exa API atslēgu",
+	"Enter External Document Loader API Key": "Ievadiet ārējā dokumentu ielādētāja API atslēgu",
+	"Enter External Document Loader URL": "Ievadiet ārējā dokumentu ielādētāja URL",
+	"Enter External Web Loader API Key": "Ievadiet ārējā tīmekļa ielādētāja API atslēgu",
+	"Enter External Web Loader URL": "Ievadiet ārējā tīmekļa ielādētāja URL",
+	"Enter External Web Search API Key": "Ievadiet ārējās tīmekļa meklēšanas API atslēgu",
+	"Enter External Web Search URL": "Ievadiet ārējās tīmekļa meklēšanas URL",
+	"Enter Firecrawl API Base URL": "Ievadiet Firecrawl API bāzes URL",
+	"Enter Firecrawl API Key": "Ievadiet Firecrawl API atslēgu",
+	"Enter Firecrawl Timeout": "Ievadiet Firecrawl taimautu",
+	"Enter folder name": "Ievadiet mapes nosaukumu",
+	"Enter function name filter list (e.g. func1, !func2)": "Ievadiet funkciju nosaukumu filtru sarakstu (piem., func1, !func2)",
+	"Enter Github Raw URL": "Ievadiet Github Raw URL",
+	"Enter Google PSE API Key": "Ievadiet Google PSE API atslēgu",
+	"Enter Google PSE Engine Id": "Ievadiet Google PSE dzinēja ID",
+	"Enter hex color (e.g. #FF0000)": "Ievadiet hex krāsu (piem., #FF0000)",
+	"Enter ID": "Ievadiet ID",
+	"Enter Image Size (e.g. 512x512)": "Ievadiet attēla izmēru (piem., 512x512)",
+	"Enter Jina API Base URL": "Ievadiet Jina API bāzes URL",
+	"Enter Jina API Key": "Ievadiet Jina API atslēgu",
+	"Enter JSON config (e.g., {\"disable_links\": true})": "Ievadiet JSON konfigurāciju (piem., {\"disable_links\": true})",
+	"Enter Jupyter Password": "Ievadiet Jupyter paroli",
+	"Enter Jupyter Token": "Ievadiet Jupyter tokenu",
+	"Enter Jupyter URL": "Ievadiet Jupyter URL",
+	"Enter Kagi Search API Key": "Ievadiet Kagi Search API atslēgu",
+	"Enter Key Behavior": "Ievadiet taustiņa uzvedību",
+	"Enter language codes": "Ievadiet valodu kodus",
+	"Enter MinerU API Key": "Ievadiet MinerU API atslēgu",
+	"Enter Mistral API Base URL": "Ievadiet Mistral API bāzes URL",
+	"Enter Mistral API Key": "Ievadiet Mistral API atslēgu",
+	"Enter Model ID": "Ievadiet modeļa ID",
+	"Enter model tag (e.g. {{modelTag}})": "Ievadiet modeļa tagu (piem., {{modelTag}})",
+	"Enter Mojeek Search API Key": "Ievadiet Mojeek Search API atslēgu",
+	"Enter name": "Ievadiet vārdu",
+	"Enter New Password": "Ievadiet jaunu paroli",
+	"Enter Number of Steps (e.g. 50)": "Ievadiet soļu skaitu (piem., 50)",
+	"Enter Ollama Cloud API Key": "Ievadiet Ollama Cloud API atslēgu",
+	"Enter Perplexity API Key": "Ievadiet Perplexity API atslēgu",
+	"Enter Perplexity Search API URL": "Ievadiet Perplexity Search API URL",
+	"Enter Playwright Timeout": "Ievadiet Playwright taimautu",
+	"Enter Playwright WebSocket URL": "Ievadiet Playwright WebSocket URL",
+	"Enter proxy URL (e.g. https://user:password@host:port)": "Ievadiet starpniekservera URL (piem., https://lietotājs:parole@host:ports)",
+	"Enter reasoning effort": "Ievadiet spriedumu pūles",
+	"Enter Score": "Ievadiet rezultātu",
+	"Enter SearchApi API Key": "Ievadiet SearchApi API atslēgu",
+	"Enter SearchApi Engine": "Ievadiet SearchApi dzinēju",
+	"Enter Searxng Query URL": "Ievadiet Searxng vaicājuma URL",
+	"Enter Searxng search language": "Ievadiet Searxng meklēšanas valodu",
+	"Enter Seed": "Ievadiet sēklu",
+	"Enter SerpApi API Key": "Ievadiet SerpApi API atslēgu",
+	"Enter SerpApi Engine": "Ievadiet SerpApi dzinēju",
+	"Enter Serper API Key": "Ievadiet Serper API atslēgu",
+	"Enter Serply API Key": "Ievadiet Serply API atslēgu",
+	"Enter Serpstack API Key": "Ievadiet Serpstack API atslēgu",
+	"Enter server host": "Ievadiet servera hostu",
+	"Enter server label": "Ievadiet servera etiķeti",
+	"Enter server port": "Ievadiet servera portu",
+	"Enter Sougou Search API sID": "Ievadiet Sougou Search API sID",
+	"Enter Sougou Search API SK": "Ievadiet Sougou Search API SK",
+	"Enter stop sequence": "Ievadiet apstāšanās secību",
+	"Enter system prompt": "Ievadiet sistēmas uzvedni",
+	"Enter system prompt here": "Ievadiet sistēmas uzvedni šeit",
+	"Enter Tavily API Key": "Ievadiet Tavily API atslēgu",
+	"Enter Tavily Extract Depth": "Ievadiet Tavily ekstrakcijas dziļumu",
+	"Enter the public URL of your WebUI. This URL will be used to generate links in the notifications.": "Ievadiet sava WebUI publisko URL. Šis URL tiks izmantots saišu ģenerēšanai paziņojumos.",
+	"Enter the URL of the function to import": "Ievadiet importējamās funkcijas URL",
+	"Enter the URL to import": "Ievadiet importējamo URL",
+	"Enter Tika Server URL": "Ievadiet Tika servera URL",
+	"Enter timeout in seconds": "Ievadiet taimautu sekundēs",
+	"Enter to Send": "Enter, lai nosūtītu",
+	"Enter Top K": "Ievadiet Top K",
+	"Enter Top K Reranker": "Ievadiet Top K pārkārtotāju",
+	"Enter URL (e.g. http://127.0.0.1:7860/)": "Ievadiet URL (piem., http://127.0.0.1:7860/)",
+	"Enter URL (e.g. http://localhost:11434)": "Ievadiet URL (piem., http://localhost:11434)",
+	"Enter value": "Ievadiet vērtību",
+	"Enter value (true/false)": "Ievadiet vērtību (true/false)",
+	"Enter Yacy Password": "Ievadiet Yacy paroli",
+	"Enter Yacy URL (e.g. http://yacy.example.com:8090)": "Ievadiet Yacy URL (piem., http://yacy.example.com:8090)",
+	"Enter Yacy Username": "Ievadiet Yacy lietotājvārdu",
+	"Enter your code here...": "Ievadiet savu kodu šeit...",
+	"Enter your current password": "Ievadiet savu pašreizējo paroli",
+	"Enter Your Email": "Ievadiet savu e-pastu",
+	"Enter Your Full Name": "Ievadiet savu pilno vārdu",
+	"Enter your gender": "Ievadiet savu dzimumu",
+	"Enter your message": "Ievadiet savu ziņojumu",
+	"Enter your name": "Ievadiet savu vārdu",
+	"Enter Your Name": "Ievadiet savu vārdu",
+	"Enter your new password": "Ievadiet savu jauno paroli",
+	"Enter Your Password": "Ievadiet savu paroli",
+	"Enter Your Role": "Ievadiet savu lomu",
+	"Enter Your Username": "Ievadiet savu lietotājvārdu",
+	"Enter your webhook URL": "Ievadiet savu webhook URL",
+	"Entra ID": "Entra ID",
+	"Error": "Kļūda",
+	"ERROR": "KĻŪDA",
+	"Error accessing directory": "Kļūda, piekļūstot direktorijai",
+	"Error accessing Google Drive: {{error}}": "Kļūda, piekļūstot Google Drive: {{error}}",
+	"Error accessing media devices.": "Kļūda, piekļūstot multivides ierīcēm.",
+	"Error starting recording.": "Kļūda, sākot ierakstīšanu.",
+	"Error unloading model: {{error}}": "Kļūda, izlādējot modeli: {{error}}",
+	"Error uploading file: {{error}}": "Kļūda, augšupielādējot failu: {{error}}",
+	"Error: A model with the ID '{{modelId}}' already exists. Please select a different ID to proceed.": "Kļūda: Modelis ar ID '{{modelId}}' jau eksistē. Lūdzu, izvēlieties citu ID, lai turpinātu.",
+	"Error: Model ID cannot be empty. Please enter a valid ID to proceed.": "Kļūda: Modeļa ID nevar būt tukšs. Lūdzu, ievadiet derīgu ID, lai turpinātu.",
+	"Evaluations": "Novērtējumi",
+	"Everyone": "Visi",
+	"Exa API Key": "Exa API atslēga",
+	"Example: (&(objectClass=inetOrgPerson)(uid=%s))": "Piemērs: (&(objectClass=inetOrgPerson)(uid=%s))",
+	"Example: ALL": "Piemērs: ALL",
+	"Example: mail": "Piemērs: mail",
+	"Example: ou=users,dc=foo,dc=example": "Piemērs: ou=users,dc=foo,dc=example",
+	"Example: sAMAccountName or uid or userPrincipalName": "Piemērs: sAMAccountName vai uid vai userPrincipalName",
+	"Exceeded the number of seats in your license. Please contact support to increase the number of seats.": "Pārsniegts vietu skaits jūsu licencē. Lūdzu, sazinieties ar atbalsta dienestu, lai palielinātu vietu skaitu.",
+	"Exclude": "Izslēgt",
+	"Execute code for analysis": "Izpildīt kodu analīzei",
+	"Executing **{{NAME}}**...": "Izpilda **{{NAME}}**...",
+	"Expand": "Izvērst",
+	"Experimental": "Eksperimentāls",
+	"Explain": "Paskaidrot",
+	"Explore the cosmos": "Izpētiet cosmos",
+	"Export": "Eksportēt",
+	"Export All Archived Chats": "Eksportēt visas arhivētās tērzēšanas",
+	"Export All Chats (All Users)": "Eksportēt visas tērzēšanas (visi lietotāji)",
+	"Export chat (.json)": "Eksportēt tērzēšanu (.json)",
+	"Export Chats": "Eksportēt tērzēšanas",
+	"Export Config to JSON File": "Eksportēt konfigurāciju JSON failā",
+	"Export Models": "Eksportēt modeļus",
+	"Export Presets": "Eksportēt iestatījumu kopas",
+	"Export Prompts": "Eksportēt uzvednes",
+	"Export to CSV": "Eksportēt uz CSV",
+	"Export Tools": "Eksportēt rīkus",
+	"Export Users": "Eksportēt lietotājus",
+	"External": "Ārējs",
+	"External Document Loader URL required.": "Nepieciešams ārējā dokumentu ielādētāja URL.",
+	"External Task Model": "Ārējais uzdevumu modelis",
+	"External Tools": "Ārējie rīki",
+	"External Web Loader API Key": "Ārējā tīmekļa ielādētāja API atslēga",
+	"External Web Loader URL": "Ārējā tīmekļa ielādētāja URL",
+	"External Web Search API Key": "Ārējās tīmekļa meklēšanas API atslēga",
+	"External Web Search URL": "Ārējās tīmekļa meklēšanas URL",
+	"Fade Effect for Streaming Text": "Izbalēšanas efekts straumēšanas tekstam",
+	"Failed to add file.": "Neizdevās pievienot failu.",
+	"Failed to add members": "Neizdevās pievienot dalībniekus",
+	"Failed to clear status": "Neizdevās notīrīt statusu",
+	"Failed to connect to {{URL}} OpenAPI tool server": "Neizdevās savienoties ar {{URL}} OpenAPI rīku serveri",
+	"Failed to copy link": "Neizdevās nokopēt saiti",
+	"Failed to create API Key.": "Neizdevās izveidot API atslēgu.",
+	"Failed to delete note": "Neizdevās dzēst piezīmi",
+	"Failed to extract content from the file: {{error}}": "Neizdevās ekstrahēt saturu no faila: {{error}}",
+	"Failed to extract content from the file.": "Neizdevās ekstrahēt saturu no faila.",
+	"Failed to fetch models": "Neizdevās iegūt modeļus",
+	"Failed to generate title": "Neizdevās ģenerēt virsrakstu",
+	"Failed to import models": "Neizdevās importēt modeļus",
+	"Failed to load chat preview": "Neizdevās ielādēt tērzēšanas priekšskatījumu",
+	"Failed to load Excel/CSV file. Please try downloading it instead.": "Neizdevās ielādēt Excel/CSV failu. Lūdzu, mēģiniet to lejupielādēt.",
+	"Failed to load file content.": "Neizdevās ielādēt faila saturu.",
+	"Failed to move chat": "Neizdevās pārvietot tērzēšanu",
+	"Failed to process URL: {{url}}": "Neizdevās apstrādāt URL: {{url}}",
+	"Failed to read clipboard contents": "Neizdevās nolasīt starpliktuves saturu",
+	"Failed to remove member": "Neizdevās noņemt dalībnieku",
+	"Failed to render diagram": "Neizdevās attēlot diagrammu",
+	"Failed to render visualization": "Neizdevās attēlot vizualizāciju",
+	"Failed to save connections": "Neizdevās saglabāt savienojumus",
+	"Failed to save conversation": "Neizdevās saglabāt sarunu",
+	"Failed to save models configuration": "Neizdevās saglabāt modeļu konfigurāciju",
+	"Failed to update settings": "Neizdevās atjaunināt iestatījumus",
+	"Failed to update status": "Neizdevās atjaunināt statusu",
+	"Failed to upload file.": "Neizdevās augšupielādēt failu.",
+	"Features": "Funkcijas",
+	"Features Permissions": "Funkciju atļaujas",
+	"February": "Februāris",
+	"Feedback": "Atsauksmes",
+	"Feedback deleted successfully": "Atsauksme veiksmīgi dzēsta",
+	"Feedback Details": "Atsauksmes detaļas",
+	"Feedback History": "Atsauksmju vēsture",
+	"Feel free to add specific details": "Droši pievienojiet konkrētas detaļas",
+	"Female": "Sieviete",
+	"File": "Fails",
+	"File added successfully.": "Fails veiksmīgi pievienots.",
+	"File content updated successfully.": "Faila saturs veiksmīgi atjaunināts.",
+	"File Context": "Faila konteksts",
+	"File Mode": "Faila režīms",
+	"File not found.": "Fails nav atrasts.",
+	"File removed successfully.": "Fails veiksmīgi noņemts.",
+	"File size should not exceed {{maxSize}} MB.": "Faila izmērs nedrīkst pārsniegt {{maxSize}} MB.",
+	"File Upload": "Faila augšupielāde",
+	"File uploaded successfully": "Fails veiksmīgi augšupielādēts",
+	"File uploaded!": "Fails augšupielādēts!",
+	"Files": "Faili",
+	"Filter": "Filtrs",
+	"Filter is now globally disabled": "Filtrs tagad ir globāli atspējots",
+	"Filter is now globally enabled": "Filtrs tagad ir globāli iespējots",
+	"Filters": "Filtri",
+	"Fingerprint spoofing detected: Unable to use initials as avatar. Defaulting to default profile image.": "Konstatēta pirkstu nospiedumu viltošana: Nevar izmantot iniciāļus kā avatāru. Izmantojam noklusējuma profila attēlu.",
+	"Firecrawl API Base URL": "Firecrawl API bāzes URL",
+	"Firecrawl API Key": "Firecrawl API atslēga",
+	"Firecrawl Timeout (s)": "Firecrawl taimauts (s)",
+	"Floating Quick Actions": "Peldošās ātrās darbības",
+	"Focus Chat Input": "Fokusēt tērzēšanas ievadi",
+	"Folder": "Mape",
+	"Folder Background Image": "Mapes fona attēls",
+	"Folder deleted successfully": "Mape veiksmīgi dzēsta",
+	"Folder Max File Count": "Mapes maksimālais failu skaits",
+	"Folder Name": "Mapes nosaukums",
+	"Folder name cannot be empty.": "Mapes nosaukums nevar būt tukšs.",
+	"Folder name updated successfully": "Mapes nosaukums veiksmīgi atjaunināts",
+	"Folder updated successfully": "Mape veiksmīgi atjaunināta",
+	"Folders": "Mapes",
+	"Follow up": "Turpinājums",
+	"Follow Up Generation": "Turpinājuma ģenerēšana",
+	"Follow Up Generation Prompt": "Turpinājuma ģenerēšanas uzvedne",
+	"Follow-Up Auto-Generation": "Automātiska turpinājuma ģenerēšana",
+	"Followed instructions perfectly": "Pilnīgi ievēroja norādījumus",
+	"Force OCR": "Piespiedu OCR",
+	"Force OCR on all pages of the PDF. This can lead to worse results if you have good text in your PDFs. Defaults to False.": "Piespiedu OCR visām PDF lapām. Tas var novest pie sliktākiem rezultātiem, ja jūsu PDF ir labs teksts. Noklusējums ir False.",
+	"Forge new paths": "Kaldiniet jaunus ceļus",
+	"Form": "Forma",
+	"Format Lines": "Formatēt rindas",
+	"Format the lines in the output. Defaults to False. If set to True, the lines will be formatted to detect inline math and styles.": "Formatēt rindas izvadē. Noklusējums ir False. Ja iestatīts uz True, rindas tiks formatētas, lai noteiktu iekļauto matemātiku un stilus.",
+	"Format your variables using brackets like this:": "Formatējiet savus mainīgos, izmantojot iekavas šādi:",
+	"Formatting may be inconsistent from source.": "Formatējums var atšķirties no avota.",
+	"Forwards system user OAuth access token to authenticate": "Pārsūta sistēmas lietotāja OAuth piekļuves tokenu autentifikācijai",
+	"Forwards system user session credentials to authenticate": "Pārsūta sistēmas lietotāja sesijas akreditācijas datus autentifikācijai",
+	"Full Context Mode": "Pilna konteksta režīms",
+	"Function": "Funkcija",
+	"Function Calling": "Funkciju izsaukšana",
+	"Function created successfully": "Funkcija veiksmīgi izveidota",
+	"Function deleted successfully": "Funkcija veiksmīgi dzēsta",
+	"Function Description": "Funkcijas apraksts",
+	"Function ID": "Funkcijas ID",
+	"Function imported successfully": "Funkcija veiksmīgi importēta",
+	"Function is now globally disabled": "Funkcija tagad ir globāli atspējota",
+	"Function is now globally enabled": "Funkcija tagad ir globāli iespējota",
+	"Function Name": "Funkcijas nosaukums",
+	"Function Name Filter List": "Funkciju nosaukumu filtru saraksts",
+	"Function updated successfully": "Funkcija veiksmīgi atjaunināta",
+	"Functions": "Funkcijas",
+	"Functions allow arbitrary code execution.": "Funkcijas atļauj patvaļīgu koda izpildi.",
+	"Functions imported successfully": "Funkcijas veiksmīgi importētas",
+	"Gemini": "Gemini",
+	"Gemini API Key": "Gemini API atslēga",
+	"Gemini API Key is required.": "Nepieciešama Gemini API atslēga.",
+	"Gemini Base URL": "Gemini bāzes URL",
+	"Gemini Endpoint Method": "Gemini galapunkta metode",
+	"Gender": "Dzimums",
+	"General": "Vispārīgi",
+	"Generate": "Ģenerēt",
+	"Generate an image": "Ģenerēt attēlu",
+	"Generate Message Pair": "Ģenerēt ziņojumu pāri",
+	"Generated Image": "Ģenerēts attēls",
+	"Generating search query": "Ģenerē meklēšanas vaicājumu",
+	"Generating...": "Ģenerē...",
+	"Get information on {{name}} in the UI": "Iegūt informāciju par {{name}} saskarnē",
+	"Get started": "Sākt darbu",
+	"Get started with {{WEBUI_NAME}}": "Sāciet ar {{WEBUI_NAME}}",
+	"Global": "Globāls",
+	"Good Response": "Laba atbilde",
+	"Google": "Google",
+	"Google Drive": "Google Drive",
+	"Google PSE API Key": "Google PSE API atslēga",
+	"Google PSE Engine Id": "Google PSE dzinēja ID",
+	"Gravatar": "Gravatar",
+	"Grid": "Režģis",
+	"Grokipedia": "Grokipedia",
+	"Group": "Grupa",
+	"Group Channel": "Grupas kanāls",
+	"Group created successfully": "Grupa veiksmīgi izveidota",
+	"Group deleted successfully": "Grupa veiksmīgi dzēsta",
+	"Group Description": "Grupas apraksts",
+	"Group Name": "Grupas nosaukums",
+	"Group updated successfully": "Grupa veiksmīgi atjaunināta",
+	"groups": "grupas",
+	"Groups": "Grupas",
+	"H1": "H1",
+	"H2": "H2",
+	"H3": "H3",
+	"Haptic Feedback": "Haptiskā atgriezeniskā saite",
+	"Headers": "Galvenes",
+	"Headers must be a valid JSON object": "Galvenēm jābūt derīgam JSON objektam",
+	"Height": "Augstums",
+	"Hello, {{name}}": "Sveiki, {{name}}",
+	"Help": "Palīdzība",
+	"Hex Color": "Hex krāsa",
+	"Hex Color - Leave empty for default color": "Hex krāsa - Atstājiet tukšu noklusējuma krāsai",
+	"Hide": "Slēpt",
+	"Hide from Sidebar": "Slēpt no sānjoslas",
+	"Hide Model": "Slēpt modeli",
+	"High": "Augsts",
+	"High Contrast Mode": "Augsta kontrasta režīms",
+	"Home": "Sākums",
+	"Host": "Hosts",
+	"How can I help you today?": "Kā es varu jums šodien palīdzēt?",
+	"How would you rate this response?": "Kā jūs novērtētu šo atbildi?",
+	"HTML": "HTML",
+	"http://localhost:8000": "http://localhost:8000",
+	"https://mineru.net/api/v4": "https://mineru.net/api/v4",
+	"Hybrid Search": "Hibrīda meklēšana",
+	"I acknowledge that I have read and I understand the implications of my action. I am aware of the risks associated with executing arbitrary code and I have verified the trustworthiness of the source.": "Es atzīstu, ka esmu izlasījis un saprotu savas darbības sekas. Es apzinos riskus, kas saistīti ar patvaļīga koda izpildi, un esmu pārbaudījis avota uzticamību.",
+	"ID": "ID",
+	"ID cannot contain \":\" or \"|\" characters": "ID nedrīkst saturēt \":\" vai \"|\" rakstzīmes",
+	"iframe Sandbox Allow Forms": "iframe smilškastes atļaut formas",
+	"iframe Sandbox Allow Same Origin": "iframe smilškastes atļaut to pašu izcelsmi",
+	"Ignite curiosity": "Iededziet ziņkāri",
+	"Image": "Attēls",
+	"Image Compression": "Attēlu saspiešana",
+	"Image Compression Height": "Attēlu saspiešanas augstums",
+	"Image Compression Width": "Attēlu saspiešanas platums",
+	"Image Edit": "Attēla rediģēšana",
+	"Image Edit Engine": "Attēlu rediģēšanas dzinējs",
+	"Image Generation": "Attēlu ģenerēšana",
+	"Image Generation Engine": "Attēlu ģenerēšanas dzinējs",
+	"Image Max Compression Size": "Attēla maksimālais saspiešanas izmērs",
+	"Image Max Compression Size height": "Attēla maksimālais saspiešanas izmērs augstums",
+	"Image Max Compression Size width": "Attēla maksimālais saspiešanas izmērs platums",
+	"Image Prompt Generation": "Attēla uzvednes ģenerēšana",
+	"Image Prompt Generation Prompt": "Attēla uzvednes ģenerēšanas uzvedne",
+	"Image Size": "Attēla izmērs",
+	"Images": "Attēli",
+	"Import": "Importēt",
+	"Import Chats": "Importēt tērzēšanas",
+	"Import Config from JSON File": "Importēt konfigurāciju no JSON faila",
+	"Import From Link": "Importēt no saites",
+	"Import Models": "Importēt modeļus",
+	"Import Presets": "Importēt iestatījumu kopas",
+	"Import Prompts": "Importēt uzvednes",
+	"Import successful": "Imports veiksmīgs",
+	"Import Tools": "Importēt rīkus",
+	"Important Update": "Svarīgs atjauninājums",
+	"Include": "Iekļaut",
+	"Include `--api-auth` flag when running stable-diffusion-webui": "Iekļaut `--api-auth` karogu, palaižot stable-diffusion-webui",
+	"Include `--api` flag when running stable-diffusion-webui": "Iekļaut `--api` karogu, palaižot stable-diffusion-webui",
+	"Includes SharePoint": "Iekļauj SharePoint",
+	"Increase UI Scale": "Palielināt saskarnes mērogu",
+	"Influences how quickly the algorithm responds to feedback from the generated text. A lower learning rate will result in slower adjustments, while a higher learning rate will make the algorithm more responsive.": "Ietekmē, cik ātri algoritms reaģē uz atgriezenisko saiti no ģenerētā teksta. Zemāks mācīšanās ātrums radīs lēnākus pielāgojumus, bet augstāks mācīšanās ātrums padarīs algoritmu atsaucīgāku.",
+	"Info": "Info",
+	"Initials": "Iniciāļi",
+	"Inject file content into conversation context": "Ievadīt faila saturu sarunas kontekstā",
+	"Inject the entire content as context for comprehensive processing, this is recommended for complex queries.": "Ievadīt visu saturu kā kontekstu visaptverošai apstrādei, tas ir ieteicams sarežģītiem vaicājumiem.",
+	"Input": "Ievade",
+	"Input Key (e.g. text, unet_name, steps)": "Ievades atslēga (piem., text, unet_name, steps)",
+	"Input Variables": "Ievades mainīgie",
+	"Insert": "Ievietot",
+	"Insert Follow-Up Prompt to Input": "Ievietot turpinājuma uzvedni ievadē",
+	"Insert Prompt as Rich Text": "Ievietot uzvedni kā bagātinātu tekstu",
+	"Insert Suggestion Prompt to Input": "Ievietot ieteikuma uzvedni ievadē",
+	"Install from Github URL": "Instalēt no Github URL",
+	"Instant Auto-Send After Voice Transcription": "Tūlītēja automātiska nosūtīšana pēc balss transkripcijas",
+	"Integration": "Integrācija",
+	"Integrations": "Integrācijas",
+	"Interface": "Saskarne",
+	"Interface Settings Access": "Saskarnes iestatījumu piekļuve",
+	"Invalid file content": "Nederīgs faila saturs",
+	"Invalid file format.": "Nederīgs faila formāts.",
+	"Invalid JSON file": "Nederīgs JSON fails",
+	"Invalid JSON format for ComfyUI Edit Workflow.": "Nederīgs JSON formāts ComfyUI rediģēšanas darbplūsmai.",
+	"Invalid JSON format for ComfyUI Workflow.": "Nederīgs JSON formāts ComfyUI darbplūsmai.",
+	"Invalid JSON format for Parameters": "Nederīgs JSON formāts parametriem",
+	"Invalid JSON format in {{NAME}}": "Nederīgs JSON formāts {{NAME}}",
+	"Invalid JSON format in Additional Config": "Nederīgs JSON formāts papildu konfigurācijā",
+	"Invalid JSON format in MinerU Parameters": "Nederīgs JSON formāts MinerU parametros",
+	"Invalid Tag": "Nederīgs tags",
+	"is typing...": "raksta...",
+	"Italic": "Slīpraksts",
+	"January": "Janvāris",
+	"Jina API Base URL": "Jina API bāzes URL",
+	"Jina API Key": "Jina API atslēga",
+	"join our Discord for help.": "pievienojieties mūsu Discord, lai saņemtu palīdzību.",
+	"JSON": "JSON",
+	"JSON Preview": "JSON priekšskatījums",
+	"JSON Spec": "JSON specifikācija",
+	"July": "Jūlijs",
+	"June": "Jūnijs",
+	"Jupyter Auth": "Jupyter autorizācija",
+	"Jupyter URL": "Jupyter URL",
+	"JWT Expiration": "JWT derīguma termiņš",
+	"JWT Token": "JWT tokens",
+	"Kagi Search API Key": "Kagi Search API atslēga",
+	"Keep Follow-Up Prompts in Chat": "Saglabāt turpinājuma uzvednes tērzēšanā",
+	"Keep in Sidebar": "Saglabāt sānjoslā",
+	"Key": "Atslēga",
+	"Key is required": "Atslēga ir nepieciešama",
+	"Keyboard shortcuts": "Tastatūras īsceļi",
+	"Keyboard Shortcuts": "Tastatūras īsceļi",
+	"Knowledge": "Zināšanas",
+	"Knowledge Access": "Zināšanu piekļuve",
+	"Knowledge Base": "Zināšanu bāze",
+	"Knowledge created successfully.": "Zināšanas veiksmīgi izveidotas.",
+	"Knowledge deleted successfully.": "Zināšanas veiksmīgi dzēstas.",
+	"Knowledge Description": "Zināšanu apraksts",
+	"Knowledge exported successfully": "Zināšanas veiksmīgi eksportētas",
+	"Knowledge Name": "Zināšanu nosaukums",
+	"Knowledge Public Sharing": "Zināšanu publiska kopīgošana",
+	"Knowledge reset successfully.": "Zināšanas veiksmīgi atiestatītas.",
+	"Knowledge Sharing": "Zināšanu kopīgošana",
+	"Knowledge updated successfully": "Zināšanas veiksmīgi atjauninātas",
+	"Kokoro.js (Browser)": "Kokoro.js (pārlūks)",
+	"Kokoro.js Dtype": "Kokoro.js Dtype",
+	"Label": "Etiķete",
+	"Landing Page Mode": "Sākumlapas režīms",
+	"Language": "Valoda",
+	"Language Locales": "Valodu lokalizācijas",
+	"Last Active": "Pēdējo reizi aktīvs",
+	"Last Modified": "Pēdējoreiz modificēts",
+	"Last reply": "Pēdējā atbilde",
+	"LDAP": "LDAP",
+	"LDAP server updated": "LDAP serveris atjaunināts",
+	"Leaderboard": "Līderu tabula",
+	"Learn More": "Uzzināt vairāk",
+	"Learn more about OpenAPI tool servers.": "Uzziniet vairāk par OpenAPI rīku serveriem.",
+	"Learn more about Voxtral transcription.": "Uzziniet vairāk par Voxtral transkripciju.",
+	"Leave empty for no compression": "Atstājiet tukšu bez saspiešanas",
+	"Leave empty for unlimited": "Atstājiet tukšu neierobežotam",
+	"Leave empty to include all models from \"{{url}}\" endpoint": "Atstājiet tukšu, lai iekļautu visus modeļus no \"{{url}}\" galapunkta",
+	"Leave empty to include all models from \"{{url}}/api/tags\" endpoint": "Atstājiet tukšu, lai iekļautu visus modeļus no \"{{url}}/api/tags\" galapunkta",
+	"Leave empty to include all models from \"{{url}}/models\" endpoint": "Atstājiet tukšu, lai iekļautu visus modeļus no \"{{url}}/models\" galapunkta",
+	"Leave empty to include all models or select specific models": "Atstājiet tukšu, lai iekļautu visus modeļus, vai izvēlieties konkrētus modeļus",
+	"Leave empty to use first admin user": "Atstājiet tukšu, lai izmantotu pirmo administratora lietotāju",
+	"Leave empty to use the default model (voxtral-mini-latest).": "Atstājiet tukšu, lai izmantotu noklusējuma modeli (voxtral-mini-latest).",
+	"Leave empty to use the default prompt, or enter a custom prompt": "Atstājiet tukšu, lai izmantotu noklusējuma uzvedni, vai ievadiet pielāgotu uzvedni",
+	"Leave model field empty to use the default model.": "Atstājiet modeļa lauku tukšu, lai izmantotu noklusējuma modeli.",
+	"Legacy": "Mantojums",
+	"lexical": "leksikāls",
+	"License": "Licence",
+	"Lift List": "Pacelt sarakstu",
+	"Light": "Gaišs",
+	"Limit concurrent search queries. 0 = unlimited (default). Set to 1 for sequential execution (recommended for APIs with strict rate limits like Brave free tier).": "Ierobežot vienlaicīgos meklēšanas vaicājumus. 0 = neierobežots (noklusējums). Iestatiet 1 secīgai izpildei (ieteicams API ar stingriem ātruma ierobežojumiem, piemēram, Brave bezmaksas līmenim).",
+	"List": "Saraksts",
+	"Listening...": "Klausās...",
+	"Llama.cpp": "Llama.cpp",
+	"LLMs can make mistakes. Verify important information.": "LLM var kļūdīties. Pārbaudiet svarīgu informāciju.",
+	"Loader": "Ielādētājs",
+	"Loading Kokoro.js...": "Ielādē Kokoro.js...",
+	"Loading...": "Ielādē...",
+	"local": "lokāls",
+	"Local": "Lokāls",
+	"Local Task Model": "Lokālais uzdevumu modelis",
+	"Location access not allowed": "Atrašanās vietas piekļuve nav atļauta",
+	"Lost": "Zaudēts",
+	"Low": "Zems",
+	"LTR": "LTR",
+	"Made by Open WebUI Community": "Izveidoja Open WebUI kopiena",
+	"Make password visible in the user interface": "Padarīt paroli redzamu lietotāja saskarnē",
+	"Make sure to enclose them with": "Noteikti iekļaujiet tos ar",
+	"Make sure to export a workflow.json file as API format from ComfyUI.": "Noteikti eksportējiet workflow.json failu API formātā no ComfyUI.",
+	"Male": "Vīrietis",
+	"Manage": "Pārvaldīt",
+	"Manage Direct Connections": "Pārvaldīt tiešos savienojumus",
+	"Manage Models": "Pārvaldīt modeļus",
+	"Manage Ollama": "Pārvaldīt Ollama",
+	"Manage Ollama API Connections": "Pārvaldīt Ollama API savienojumus",
+	"Manage OpenAI API Connections": "Pārvaldīt OpenAI API savienojumus",
+	"Manage Pipelines": "Pārvaldīt konveijerlīnijas",
+	"Manage Tool Servers": "Pārvaldīt rīku serverus",
+	"Manage your account information.": "Pārvaldiet sava konta informāciju.",
+	"March": "Marts",
+	"Markdown": "Markdown",
+	"Markdown Header Text Splitter": "Markdown galvenes teksta sadalītājs",
+	"Max Speakers": "Maksimālais runātāju skaits",
+	"Max Upload Count": "Maksimālais augšupielāžu skaits",
+	"Max Upload Size": "Maksimālais augšupielādes izmērs",
+	"Maximum number of files allowed per folder.": "Maksimālais atļauto failu skaits mapē.",
+	"Maximum number of files per folder is {{max}}.": "Maksimālais failu skaits mapē ir {{max}}.",
+	"Maximum of 3 models can be downloaded simultaneously. Please try again later.": "Vienlaicīgi var lejupielādēt ne vairāk kā 3 modeļus. Lūdzu, mēģiniet vēlāk.",
+	"May": "Maijs",
+	"MBR": "MBR",
+	"MCP": "MCP",
+	"MCP support is experimental and its specification changes often, which can lead to incompatibilities. OpenAPI specification support is directly maintained by the Open WebUI team, making it the more reliable option for compatibility.": "MCP atbalsts ir eksperimentāls un tā specifikācija bieži mainās, kas var novest pie nesaderības. OpenAPI specifikācijas atbalstu tieši uztur Open WebUI komanda, padarot to par uzticamāku opciju saderībai.",
+	"Medium": "Vidējs",
+	"Member removed successfully": "Dalībnieks veiksmīgi noņemts",
+	"Members": "Dalībnieki",
+	"Members added successfully": "Dalībnieki veiksmīgi pievienoti",
+	"Memories": "Atmiņas",
+	"Memories accessible by LLMs will be shown here.": "Šeit tiks rādītas atmiņas, kurām var piekļūt LLM.",
+	"Memory": "Atmiņa",
+	"Memory added successfully": "Atmiņa veiksmīgi pievienota",
+	"Memory cleared successfully": "Atmiņa veiksmīgi notīrīta",
+	"Memory deleted successfully": "Atmiņa veiksmīgi dzēsta",
+	"Memory updated successfully": "Atmiņa veiksmīgi atjaunināta",
+	"Merge Responses": "Apvienot atbildes",
+	"Merged Response": "Apvienotā atbilde",
+	"Message": "Ziņojums",
+	"Message counts and response timestamps": "Ziņojumu skaits un atbilžu laika zīmogi",
+	"Message rating should be enabled to use this feature": "Ziņojumu vērtēšanai jābūt iespējotai, lai izmantotu šo funkciju",
+	"Messages you send after creating your link won't be shared. Users with the URL will be able to view the shared chat.": "Ziņojumi, ko nosūtīsiet pēc saites izveidošanas, netiks kopīgoti. Lietotāji ar URL varēs skatīt kopīgoto tērzēšanu.",
+	"Microsoft OneDrive": "Microsoft OneDrive",
+	"Microsoft OneDrive (personal)": "Microsoft OneDrive (personīgais)",
+	"Microsoft OneDrive (work/school)": "Microsoft OneDrive (darbs/skola)",
+	"MinerU": "MinerU",
+	"MinerU API Key required for Cloud API mode.": "MinerU API atslēga nepieciešama mākoņa API režīmam.",
+	"Mistral OCR": "Mistral OCR",
+	"Mistral OCR API Key required.": "Nepieciešama Mistral OCR API atslēga.",
+	"MistralAI": "MistralAI",
+	"Model": "Modelis",
+	"Model '{{modelName}}' has been successfully downloaded.": "Modelis '{{modelName}}' ir veiksmīgi lejupielādēts.",
+	"Model '{{modelTag}}' is already in queue for downloading.": "Modelis '{{modelTag}}' jau ir lejupielādes rindā.",
+	"Model {{modelId}} not found": "Modelis {{modelId}} nav atrasts",
+	"Model {{modelName}} is not vision capable": "Modelis {{modelName}} neatbalsta redzi",
+	"Model {{name}} is now {{status}}": "Modelis {{name}} tagad ir {{status}}",
+	"Model {{name}} is now hidden": "Modelis {{name}} tagad ir slēpts",
+	"Model {{name}} is now visible": "Modelis {{name}} tagad ir redzams",
+	"Model accepts file inputs": "Modelis pieņem failu ievades",
+	"Model accepts image inputs": "Modelis pieņem attēlu ievades",
+	"Model can execute code and perform calculations": "Modelis var izpildīt kodu un veikt aprēķinus",
+	"Model can generate images based on text prompts": "Modelis var ģenerēt attēlus, pamatojoties uz teksta uzvednēm",
+	"Model can search the web for information": "Modelis var meklēt informāciju tīmeklī",
+	"Model created successfully!": "Modelis veiksmīgi izveidots!",
+	"Model filesystem path detected. Model shortname is required for update, cannot continue.": "Konstatēts modeļa failu sistēmas ceļš. Atjaunināšanai nepieciešams modeļa īsais nosaukums, nevar turpināt.",
+	"Model Filtering": "Modeļu filtrēšana",
+	"Model ID": "Modeļa ID",
+	"Model ID is required.": "Modeļa ID ir nepieciešams.",
+	"Model IDs": "Modeļu ID",
+	"Model Name": "Modeļa nosaukums",
+	"Model name already exists, please choose a different one": "Modeļa nosaukums jau eksistē, lūdzu, izvēlieties citu",
+	"Model Name is required.": "Modeļa nosaukums ir nepieciešams.",
+	"Model names and usage frequency": "Modeļu nosaukumi un lietošanas biežums",
+	"Model not selected": "Modelis nav izvēlēts",
+	"Model Params": "Modeļa parametri",
+	"Model Permissions": "Modeļa atļaujas",
+	"Model responses or outputs": "Modeļa atbildes vai izvades",
+	"Model unloaded successfully": "Modelis veiksmīgi izlādēts",
+	"Model updated successfully": "Modelis veiksmīgi atjaunināts",
+	"Model(s) do not support file upload": "Modelis(-i) neatbalsta failu augšupielādi",
+	"Modelfile Content": "Modeļfaila saturs",
+	"Models": "Modeļi",
+	"Models Access": "Modeļu piekļuve",
+	"Models configuration saved successfully": "Modeļu konfigurācija veiksmīgi saglabāta",
+	"Models imported successfully": "Modeļi veiksmīgi importēti",
+	"Models Public Sharing": "Modeļu publiska kopīgošana",
+	"Models Sharing": "Modeļu kopīgošana",
+	"Mojeek": "Mojeek",
+	"Mojeek Search API Key": "Mojeek Search API atslēga",
+	"More": "Vairāk",
+	"More Concise": "Kodolīgāk",
+	"More Options": "Vairāk opciju",
+	"Move": "Pārvietot",
+	"Name": "Nosaukums",
+	"Name and ID are required, please fill them out": "Nosaukums un ID ir nepieciešami, lūdzu, aizpildiet tos",
+	"Name your knowledge base": "Nosauciet savu zināšanu bāzi",
+	"Native": "Vietējais",
+	"New": "Jauns",
+	"New Button": "Jauna poga",
+	"New Chat": "Jauna tērzēšana",
+	"New Folder": "Jauna mape",
+	"New Function": "Jauna funkcija",
+	"New Knowledge": "Jaunas zināšanas",
+	"New Model": "Jauns modelis",
+	"New Note": "Jauna piezīme",
+	"New Password": "Jauna parole",
+	"New Prompt": "Jauna uzvedne",
+	"New Temporary Chat": "Jauna pagaidu tērzēšana",
+	"New Tool": "Jauns rīks",
+	"New Webhook": "Jauns webhook",
+	"new-channel": "jauns-kanāls",
+	"Next message": "Nākamais ziņojums",
+	"No activity data": "Nav aktivitātes datu",
+	"No authentication": "Nav autentifikācijas",
+	"No chats found": "Tērzēšanas nav atrastas",
+	"No chats found for this user.": "Šim lietotājam nav atrasta neviena tērzēšana.",
+	"No chats found.": "Tērzēšanas nav atrastas.",
+	"No content": "Nav satura",
+	"No content found": "Saturs nav atrasts",
+	"No content to speak": "Nav satura, ko izrunāt",
+	"No conversation to save": "Nav sarunas, ko saglabāt",
+	"No distance available": "Attālums nav pieejams",
+	"No expiration can pose security risks.": "Bez derīguma termiņa var rasties drošības riski.",
+	"No feedback found": "Atsauksmes nav atrastas",
+	"No file selected": "Fails nav izvēlēts",
+	"No files in this knowledge base.": "Šajā zināšanu bāzē nav failu.",
+	"No functions found": "Funkcijas nav atrastas",
+	"No groups with access, add a group to grant access": "Nav grupu ar piekļuvi, pievienojiet grupu, lai piešķirtu piekļuvi",
+	"No HTML, CSS, or JavaScript content found.": "HTML, CSS vai JavaScript saturs nav atrasts.",
+	"No inference engine with management support found": "Nav atrasts secinājumu dzinējs ar pārvaldības atbalstu",
+	"No knowledge bases found.": "Zināšanu bāzes nav atrastas.",
+	"No knowledge found": "Zināšanau bāze nav atrasta",
+	"No memories to clear": "Nav atmiņu, ko notīrīt",
+	"No model IDs": "Nav modeļu ID",
+	"No models found": "Modeļi nav atrasti",
+	"No models selected": "Modeļi nav izvēlēti",
+	"No Notes": "Nav piezīmju",
+	"No notes found": "Piezīmes nav atrastas",
+	"No one": "Neviens",
+	"No pinned messages": "Nav piespraustu ziņojumu",
+	"No prompts found": "Uzvednes nav atrastas",
+	"No results": "Nav rezultātu",
+	"No results found": "Rezultāti nav atrasti",
+	"No search query generated": "Meklēšanas vaicājums nav ģenerēts",
+	"No source available": "Avots nav pieejams",
+	"No sources found": "Avoti nav atrasti",
+	"No suggestion prompts": "Nav ieteikumu uzvedņu",
+	"No tools found": "Rīki nav atrasti",
+	"No users were found.": "Lietotāji nav atrasti.",
+	"No valves": "Nav vārstu",
+	"No valves to update": "Nav vārstu, ko atjaunināt",
+	"No webhooks yet": "Pagaidām nav webhook",
+	"Node Ids": "Mezglu ID",
+	"None": "Nav",
+	"Not factually correct": "Faktiski nepareizi",
+	"Not helpful": "Nav noderīgs",
+	"Not Registered": "Nav reģistrēts",
+	"Note": "Piezīme",
+	"Note deleted successfully": "Piezīme veiksmīgi dzēsta",
+	"Note: If you set a minimum score, the search will only return documents with a score greater than or equal to the minimum score.": "Piezīme: Ja iestatāt minimālo punktu skaitu, meklēšana atgriezīs tikai dokumentus ar punktu skaitu, kas lielāks vai vienāds ar minimālo punktu skaitu.",
+	"Notes": "Piezīmes",
+	"Notes Public Sharing": "Piezīmju publiska kopīgošana",
+	"Notes Sharing": "Piezīmju kopīgošana",
+	"Notification Sound": "Paziņojuma skaņa",
+	"Notification Webhook": "Paziņojumu webhook",
+	"Notifications": "Paziņojumi",
+	"November": "Novembris",
+	"OAuth": "OAuth",
+	"OAuth 2.1": "OAuth 2.1",
+	"OAuth ID": "OAuth ID",
+	"October": "Oktobris",
+	"Off": "Izslēgts",
+	"Okay, Let's Go!": "Labi, ejam!",
+	"OLED Dark": "OLED tumšs",
+	"Ollama": "Ollama",
+	"Ollama API": "Ollama API",
+	"Ollama API settings updated": "Ollama API iestatījumi atjaunināti",
+	"Ollama Cloud API Key": "Ollama Cloud API atslēga",
+	"Ollama Version": "Ollama versija",
+	"On": "Ieslēgts",
+	"OneDrive": "OneDrive",
+	"Only active when \"Paste Large Text as File\" setting is toggled on.": "Aktīvs tikai, ja ir ieslēgts iestatījums \"Ielīmēt lielu tekstu kā failu\".",
+	"Only active when the chat input is in focus and an LLM is generating a response.": "Aktīvs tikai, kad tērzēšanas ievade ir fokusā un LLM ģenerē atbildi.",
+	"Only active when the chat input is in focus.": "Aktīvs tikai, kad tērzēšanas ievade ir fokusā.",
+	"Only alphanumeric characters and hyphens are allowed": "Atļautas tikai burtciparu rakstzīmes un defises",
+	"Only alphanumeric characters and hyphens are allowed in the command string.": "Komandas virknē atļautas tikai burtciparu rakstzīmes un defises.",
+	"Only can be triggered when the chat input is in focus.": "Var aktivizēt tikai, kad tērzēšanas ievade ir fokusā.",
+	"Only collections can be edited, create a new knowledge base to edit/add documents.": "Var rediģēt tikai kolekcijas, izveidojiet jaunu zināšanu bāzi, lai rediģētu/pievienotu dokumentus.",
+	"Only invited users can access": "Piekļūt var tikai uzaicinātie lietotāji",
+	"Only markdown files are allowed": "Atļauti tikai markdown faili",
+	"Only select users and groups with permission can access": "Piekļūt var tikai izvēlētie lietotāji un grupas ar atļauju",
+	"Only sync new/updated chats": "Sinhronizēt tikai jaunas/atjauninātas tērzēšanas",
+	"Oops! Looks like the URL is invalid. Please double-check and try again.": "Hmm! Izskatās, ka URL ir nederīgs. Lūdzu, pārbaudiet un mēģiniet vēlreiz.",
+	"Oops! There are files still uploading. Please wait for the upload to complete.": "Hmm! Faili joprojām tiek augšupielādēti. Lūdzu, pagaidiet, līdz augšupielāde ir pabeigta.",
+	"Oops! There was an error in the previous response.": "Hmm! Iepriekšējā atbildē bija kļūda.",
+	"Oops! You're using an unsupported method (frontend only). Please serve the WebUI from the backend.": "Hmm! Jūs izmantojat neatbalstītu metodi (tikai priekšgals). Lūdzu, apkalpojiet WebUI no aizmugursistēmas.",
+	"Open file": "Atvērt failu",
+	"Open in full screen": "Atvērt pilnekrāna režīmā",
+	"Open link": "Atvērt saiti",
+	"Open modal to configure connection": "Atvērt logu, lai konfigurētu savienojumu",
+	"Open Modal To Manage Floating Quick Actions": "Atvērt logu peldošo ātro darbību pārvaldībai",
+	"Open Modal To Manage Image Compression": "Atvērt logu attēlu saspiešanas pārvaldībai",
+	"Open Settings": "Atvērt iestatījumus",
+	"Open Sidebar": "Atvērt sānjoslu",
+	"Open User Profile Menu": "Atvērt lietotāja profila izvēlni",
+	"Open WebUI can use tools provided by any OpenAPI server.": "Open WebUI var izmantot rīkus, ko nodrošina jebkurš OpenAPI serveris.",
+	"Open WebUI uses faster-whisper internally.": "Open WebUI iekšēji izmanto faster-whisper.",
+	"Open WebUI uses SpeechT5 and CMU Arctic speaker embeddings.": "Open WebUI izmanto SpeechT5 un CMU Arctic runātāju iegulšanas.",
+	"Open WebUI version": "Open WebUI versija",
+	"Open WebUI version (v{{OPEN_WEBUI_VERSION}}) is lower than required version (v{{REQUIRED_VERSION}})": "Open WebUI versija (v{{OPEN_WEBUI_VERSION}}) ir zemāka par nepieciešamo versiju (v{{REQUIRED_VERSION}})",
+	"OpenAI": "OpenAI",
+	"OpenAI API": "OpenAI API",
+	"OpenAI API Base URL": "OpenAI API bāzes URL",
+	"OpenAI API Key": "OpenAI API atslēga",
+	"OpenAI API Key is required.": "OpenAI API atslēga ir nepieciešama.",
+	"OpenAI API settings updated": "OpenAI API iestatījumi atjaunināti",
+	"OpenAI API Version": "OpenAI API versija",
+	"OpenAI URL/Key required.": "Nepieciešams OpenAI URL/atslēga.",
+	"OpenAPI": "OpenAPI",
+	"OpenAPI Spec": "OpenAPI specifikācija",
+	"openapi.json URL or Path": "openapi.json URL vai ceļš",
+	"Optional": "Neobligāts",
+	"or": "vai",
+	"Ordered List": "Numurēts saraksts",
+	"Organize your users": "Organizējiet savus lietotājus",
+	"Other": "Cits",
+	"OUTPUT": "IZVADE",
+	"Output format": "Izvades formāts",
+	"Output Format": "Izvades formāts",
+	"Overview": "Pārskats",
+	"page": "lapa",
+	"Paginate": "Lappušot",
+	"Parameters": "Parametri",
+	"Parent message not found": "Vecākziņojums nav atrasts",
+	"Participate in community leaderboards and evaluations! Syncing aggregated usage stats helps drive research and improvements to Open WebUI. Your privacy is paramount: no message content is ever shared.": "Piedalieties kopienas līderu tabulās un novērtējumos! Apkopoto lietošanas statistiku sinhronizācija palīdz veicināt pētījumus un Open WebUI uzlabojumus. Jūsu privātums ir vissvarīgākais: ziņojumu saturs nekad netiek kopīgots.",
+	"Password": "Parole",
+	"Passwords do not match.": "Paroles nesakrīt.",
+	"Paste Large Text as File": "Ielīmēt lielu tekstu kā failu",
+	"PDF document (.pdf)": "PDF dokuments (.pdf)",
+	"PDF Extract Images (OCR)": "PDF attēlu ekstrakcija (OCR)",
+	"pending": "gaida",
+	"Pending": "Gaida",
+	"Pending User Overlay Content": "Gaidošā lietotāja pārklājuma saturs",
+	"Pending User Overlay Title": "Gaidošā lietotāja pārklājuma virsraksts",
+	"Permission denied when accessing media devices": "Piekļuve multivides ierīcēm liegta",
+	"Permission denied when accessing microphone": "Piekļuve mikrofonam liegta",
+	"Permission denied when accessing microphone: {{error}}": "Piekļuve mikrofonam liegta: {{error}}",
+	"Permissions": "Atļaujas",
+	"Perplexity API Key": "Perplexity API atslēga",
+	"Perplexity Model": "Perplexity modelis",
+	"Perplexity Search API URL": "Perplexity Search API URL",
+	"Perplexity Search Context Usage": "Perplexity meklēšanas konteksta lietojums",
+	"Personalization": "Personalizācija",
+	"Pin": "Piespraust",
+	"Pinned": "Piesprausts",
+	"Pinned Messages": "Piespraustie ziņojumi",
+	"Pioneer insights": "Pionieriskas atziņas",
+	"Pipe": "Caurule",
+	"Pipeline deleted successfully": "Konveijerlīnija veiksmīgi dzēsta",
+	"Pipeline downloaded successfully": "Konveijerlīnija veiksmīgi lejupielādēta",
+	"Pipelines": "Konveijerlīnijas",
+	"Pipelines are a plugin system with arbitrary code execution —": "Konveijerlīnijas ir spraudņu sistēma ar patvaļīgu koda izpildi —",
+	"Pipelines Not Detected": "Konveijerlīnijas nav konstatētas",
+	"Pipelines Valves": "Konveijerlīniju vārsti",
+	"Plain text (.md)": "Vienkāršs teksts (.md)",
+	"Plain text (.txt)": "Vienkāršs teksts (.txt)",
+	"Playground": "Spēļu laukums",
+	"Playwright Timeout (ms)": "Playwright taimauts (ms)",
+	"Playwright WebSocket URL": "Playwright WebSocket URL",
+	"Please carefully review the following warnings:": "Lūdzu, rūpīgi pārskatiet šādus brīdinājumus:",
+	"Please do not close the settings page while loading the model.": "Lūdzu, neaizveriet iestatījumu lapu, kamēr modelis tiek ielādēts.",
+	"Please enter a message or attach a file.": "Lūdzu, ievadiet ziņojumu vai pievienojiet failu.",
+	"Please enter a prompt": "Lūdzu, ievadiet uzvedni",
+	"Please enter a valid ID": "Lūdzu, ievadiet derīgu ID",
+	"Please enter a valid JSON spec": "Lūdzu, ievadiet derīgu JSON specifikāciju",
+	"Please enter a valid path": "Lūdzu, ievadiet derīgu ceļu",
+	"Please enter a valid URL": "Lūdzu, ievadiet derīgu URL",
+	"Please enter a valid URL.": "Lūdzu, ievadiet derīgu URL.",
+	"Please fill in all fields.": "Lūdzu, aizpildiet visus laukus.",
+	"Please register the OAuth client": "Lūdzu, reģistrējiet OAuth klientu",
+	"Please save the connection to persist the OAuth client information and do not change the ID": "Lūdzu, saglabājiet savienojumu, lai saglabātu OAuth klienta informāciju, un nemainiet ID",
+	"Please select a model first.": "Lūdzu, vispirms izvēlieties modeli.",
+	"Please select a model.": "Lūdzu, izvēlieties modeli.",
+	"Please select a reason": "Lūdzu, izvēlieties iemeslu",
+	"Please select a valid JSON file": "Lūdzu, izvēlieties derīgu JSON failu",
+	"Please select at least one user for Direct Message channel.": "Lūdzu, izvēlieties vismaz vienu lietotāju tiešo ziņojumu kanālam.",
+	"Please wait until all files are uploaded.": "Lūdzu, pagaidiet, līdz visi faili ir augšupielādēti.",
+	"Port": "Ports",
+	"Positive attitude": "Pozitīva attieksme",
+	"Prefer not to say": "Nevēlos atklāt",
+	"Prefix ID": "Prefiksa ID",
+	"Prefix ID is used to avoid conflicts with other connections by adding a prefix to the model IDs - leave empty to disable": "Prefiksa ID tiek izmantots, lai izvairītos no konfliktiem ar citiem savienojumiem, pievienojot prefiksu modeļu ID - atstājiet tukšu, lai atspējotu",
+	"Prevent File Creation": "Novērst failu izveidi",
+	"Preview": "Priekšskatījums",
+	"Previous 30 days": "Iepriekšējās 30 dienas",
+	"Previous 7 days": "Iepriekšējās 7 dienas",
+	"Previous message": "Iepriekšējais ziņojums",
+	"Private": "Privāts",
+	"Private conversation between selected users": "Privāta saruna starp izvēlētajiem lietotājiem",
+	"Profile": "Profils",
+	"Prompt": "Uzvedne",
+	"Prompt Autocompletion": "Uzvednes automātiskā pabeigšana",
+	"Prompt Content": "Uzvednes saturs",
+	"Prompt created successfully": "Uzvedne veiksmīgi izveidota",
+	"Prompt updated successfully": "Uzvedne veiksmīgi atjaunināta",
+	"Prompts": "Uzvednes",
+	"Prompts Access": "Uzvedņu piekļuve",
+	"Prompts Public Sharing": "Uzvedņu publiska kopīgošana",
+	"Prompts Sharing": "Uzvedņu kopīgošana",
+	"Provider Type": "Pakalpojuma sniedzēja tips",
+	"Public": "Publisks",
+	"Pull \"{{searchValue}}\" from Ollama.com": "Lejupielādēt \"{{searchValue}}\" no Ollama.com",
+	"Pull a model from Ollama.com": "Lejupielādēt modeli no Ollama.com",
+	"Pull Model": "Lejupielādēt modeli",
+	"Query Generation Prompt": "Vaicājuma ģenerēšanas uzvedne",
+	"Querying": "Vaicā",
+	"Quick Actions": "Ātrās darbības",
+	"RAG Template": "RAG veidne",
+	"Rating": "Vērtējums",
+	"Re-rank models by topic similarity": "Pārkārtot modeļus pēc tēmas līdzības",
+	"Read": "Lasīt",
+	"Read Aloud": "Nolasīt skaļi",
+	"Read more →": "Lasīt vairāk →",
+	"Read Only": "Tikai lasīšanai",
+	"Read-Only Access": "Tikai lasīšanas piekļuve",
+	"Reason": "Iemesls",
+	"Reasoning Effort": "Spriedumu pūles",
+	"Reasoning Tags": "Spriedumu tagi",
+	"Record": "Ierakstīt",
+	"Record voice": "Ierakstīt balsi",
+	"Redirecting you to Open WebUI Community": "Novirza jūs uz Open WebUI kopienu",
+	"Reduces the probability of generating nonsense. A higher value (e.g. 100) will give more diverse answers, while a lower value (e.g. 10) will be more conservative.": "Samazina bezjēdzīga teksta ģenerēšanas varbūtību. Augstāka vērtība (piem., 100) sniegs daudzveidīgākas atbildes, bet zemāka vērtība (piem., 10) būs konservatīvāka.",
+	"Refer to yourself as \"User\" (e.g., \"User is learning Spanish\")": "Atsaucieties uz sevi kā \"Lietotājs\" (piem., \"Lietotājs mācās spāņu valodu\")",
+	"Reference Chats": "Atsauces tērzēšanas",
+	"Refused when it shouldn't have": "Atteica, kad nevajadzēja",
+	"Regenerate": "Atkārtoti ģenerēt",
+	"Regenerate Menu": "Atkārtotas ģenerēšanas izvēlne",
+	"Regenerate Response": "Atkārtoti ģenerēt atbildi",
+	"Register Again": "Reģistrēties vēlreiz",
+	"Register Client": "Reģistrēt klientu",
+	"Registered": "Reģistrēts",
+	"Registration failed": "Reģistrācija neizdevās",
+	"Registration successful": "Reģistrācija veiksmīga",
+	"Reindex": "Pārindeksēt",
+	"Reindex Knowledge Base Vectors": "Pārindeksēt zināšanu bāzes vektorus",
+	"Release Notes": "Laidiena piezīmes",
+	"Releases": "Laidieni",
+	"Relevance": "Atbilstība",
+	"Relevance Threshold": "Atbilstības slieksnis",
+	"Remember Dismissal": "Atcerēties noraidījumu",
+	"Remove": "Noņemt",
+	"Remove {{MODELID}} from list.": "Noņemt {{MODELID}} no saraksta.",
+	"Remove file": "Noņemt failu",
+	"Remove File": "Noņemt failu",
+	"Remove image": "Noņemt attēlu",
+	"Remove Model": "Noņemt modeli",
+	"Remove this tag from list": "Noņemt šo tagu no saraksta",
+	"Rename": "Pārdēvēt",
+	"Reorder Models": "Pārkārtot modeļus",
+	"Reply": "Atbildēt",
+	"Reply in Thread": "Atbildēt pavedienā",
+	"Reply to thread...": "Atbildēt pavedienā...",
+	"Replying to {{NAME}}": "Atbild {{NAME}}",
+	"required": "nepieciešams",
+	"Reranking Engine": "Pārkārtošanas dzinējs",
+	"Reranking Model": "Pārkārtošanas modelis",
+	"Reset": "Atiestatīt",
+	"Reset All Models": "Atiestatīt visus modeļus",
+	"Reset Image": "Atiestatīt attēlu",
+	"Reset Upload Directory": "Atiestatīt augšupielādes direktoriju",
+	"Reset Vector Storage/Knowledge": "Atiestatīt vektoru krātuvi/zināšanas",
+	"Reset view": "Atiestatīt skatu",
+	"Response": "Atbilde",
+	"Response notifications cannot be activated as the website permissions have been denied. Please visit your browser settings to grant the necessary access.": "Atbilžu paziņojumus nevar aktivizēt, jo vietnes atļaujas ir liegtas. Lūdzu, apmeklējiet pārlūka iestatījumus, lai piešķirtu nepieciešamo piekļuvi.",
+	"Response splitting": "Atbilžu sadalīšana",
+	"Response Watermark": "Atbildes ūdenszīme",
+	"Result": "Rezultāts",
+	"RESULT": "REZULTĀTS",
+	"Retrieval": "Izgūšana",
+	"Retrieval Query Generation": "Izgūšanas vaicājuma ģenerēšana",
+	"Retrieved {{count}} sources": "Izgūti {{count}} avoti",
+	"Retrieved {{count}} sources_one": "Izgūts {{count}} avots",
+	"Retrieved {{count}} sources_other": "Izgūti {{count}} avoti",
+	"Retrieved 1 source": "Izgūts 1 avots",
+	"Rich Text Input for Chat": "Bagātinātā teksta ievade tērzēšanai",
+	"Role": "Loma",
+	"Rosé Pine": "Rosé Pine",
+	"Rosé Pine Dawn": "Rosé Pine Dawn",
+	"RTL": "RTL",
+	"Run": "Palaist",
+	"Running": "Darbojas",
+	"Running...": "Darbojas...",
+	"Runs embedding tasks concurrently to speed up processing. Turn off if rate limits become an issue.": "Palaiž iegulšanas uzdevumus vienlaicīgi, lai paātrinātu apstrādi. Izslēdziet, ja rodas ātruma ierobežojumu problēmas.",
+	"Save": "Saglabāt",
+	"Save & Create": "Saglabāt un izveidot",
+	"Save & Update": "Saglabāt un atjaunināt",
+	"Save As Copy": "Saglabāt kā kopiju",
+	"Save Chat": "Saglabāt tērzēšanu",
+	"Save Tag": "Saglabāt tagu",
+	"Saved": "Saglabāts",
+	"Saving chat logs directly to your browser's storage is no longer supported. Please take a moment to download and delete your chat logs by clicking the button below. Don't worry, you can easily re-import your chat logs to the backend through": "Tērzēšanas žurnālu saglabāšana tieši pārlūka krātuvē vairs netiek atbalstīta. Lūdzu, veltiet brīdi, lai lejupielādētu un dzēstu tērzēšanas žurnālus, noklikšķinot uz pogas zemāk. Neuztraucieties, jūs varat viegli atkārtoti importēt tērzēšanas žurnālus aizmugursistēmā caur",
+	"Scroll On Branch Change": "Ritināt pie zara maiņas",
+	"Search": "Meklēt",
+	"Search a model": "Meklēt modeli",
+	"Search all emojis": "Meklēt visas emocijzīmes",
+	"Search Base": "Meklēšanas bāze",
+	"Search Chats": "Meklēt tērzēšanas",
+	"Search Collection": "Meklēt kolekcijā",
+	"Search Filters": "Meklēšanas filtri",
+	"search for archived chats": "meklēt arhivētās tērzēšanas",
+	"search for folders": "meklēt mapes",
+	"search for pinned chats": "meklēt piespraustās tērzēšanas",
+	"search for shared chats": "meklēt kopīgotās tērzēšanas",
+	"search for tags": "meklēt tagus",
+	"Search Functions": "Meklēt funkcijas",
+	"Search In Models": "Meklēt modeļos",
+	"Search Knowledge": "Meklēt zināšanas",
+	"Search Models": "Meklēt modeļus",
+	"Search Notes": "Meklēt piezīmes",
+	"Search options": "Meklēšanas opcijas",
+	"Search Prompts": "Meklēt uzvednes",
+	"Search Result Count": "Meklēšanas rezultātu skaits",
+	"Search the internet": "Meklēt internetā",
+	"Search Tools": "Meklēt rīkus",
+	"SearchApi API Key": "SearchApi API atslēga",
+	"SearchApi Engine": "SearchApi dzinējs",
+	"Searched {{count}} sites": "Meklēts {{count}} vietnēs",
+	"Searching": "Meklē",
+	"Searching \"{{searchQuery}}\"": "Meklē \"{{searchQuery}}\"",
+	"Searching Knowledge for \"{{searchQuery}}\"": "Meklē zināšanas \"{{searchQuery}}\"",
+	"Searching the web": "Meklē tīmeklī",
+	"Searxng Query URL": "Searxng vaicājuma URL",
+	"Searxng search language (all, en, es, de, fr, etc.)": "Searxng meklēšanas valoda (all, lv, en, de, fr utt.)",
+	"See readme.md for instructions": "Skatiet readme.md norādījumiem",
+	"See what's new": "Skatiet, kas jauns",
+	"Seed": "Sēkla",
+	"Select": "Izvēlēties",
+	"Select a base model": "Izvēlieties bāzes modeli",
+	"Select a base model (e.g. llama3, gpt-4o)": "Izvēlieties bāzes modeli (piem., llama3, gpt-4o)",
+	"Select a conversation to preview": "Izvēlieties sarunu priekšskatījumam",
+	"Select a engine": "Izvēlieties dzinēju",
+	"Select a function": "Izvēlieties funkciju",
+	"Select a group": "Izvēlieties grupu",
+	"Select a language": "Izvēlieties valodu",
+	"Select a mode": "Izvēlieties režīmu",
+	"Select a model": "Izvēlieties modeli",
+	"Select a model (optional)": "Izvēlieties modeli (neobligāti)",
+	"Select a pipeline": "Izvēlieties plūsmu",
+	"Select a pipeline url": "Izvēlieties plūsmas URL",
+	"Select a reranking model engine": "Izvēlieties pārkārtošanas modeļa dzinēju",
+	"Select a role": "Izvēlieties lomu",
+	"Select a theme": "Izvēlieties tēmu",
+	"Select a tool": "Izvēlieties rīku",
+	"Select a voice": "Izvēlieties balsi",
+	"Select an auth method": "Izvēlieties autentifikācijas metodi",
+	"Select an embedding model engine": "Izvēlieties iegulšanas modeļa dzinēju",
+	"Select an engine": "Izvēlieties dzinēju",
+	"Select an Ollama instance": "Izvēlieties Ollama instanci",
+	"Select an output format": "Izvēlieties izvades formātu",
+	"Select dtype": "Izvēlieties dtype",
+	"Select Engine": "Izvēlieties dzinēju",
+	"Select how to split message text for TTS requests": "Izvēlieties, kā sadalīt ziņojuma tekstu TTS pieprasījumiem",
+	"Select Knowledge": "Izvēlieties zināšanas",
+	"Select Method": "Izvēlieties metodi",
+	"Select only one model to call": "Izvēlieties tikai vienu modeli izsaukšanai",
+	"Select view": "Izvēlieties skatu",
+	"Selected model(s) do not support image inputs": "Izvēlētais(-ie) modelis(-i) neatbalsta attēlu ievades",
+	"semantic": "semantisks",
+	"Send": "Nosūtīt",
+	"Send a Message": "Nosūtīt ziņojumu",
+	"Send message": "Nosūtīt ziņojumu",
+	"Sends `stream_options: { include_usage: true }` in the request.\nSupported providers will return token usage information in the response when set.": "Nosūta `stream_options: { include_usage: true }` pieprasījumā.\nAtbalstītie pakalpojumu sniedzēji atgriezīs tokenu lietojuma informāciju atbildē, ja iestatīts.",
+	"September": "Septembris",
+	"SerpApi API Key": "SerpApi API atslēga",
+	"SerpApi Engine": "SerpApi dzinējs",
+	"Serper API Key": "Serper API atslēga",
+	"Serply API Key": "Serply API atslēga",
+	"Serpstack API Key": "Serpstack API atslēga",
+	"Server connection verified": "Servera savienojums pārbaudīts",
+	"Session": "Sesija",
+	"Set as default": "Iestatīt kā noklusējumu",
+	"Set embedding model": "Iestatīt iegulšanas modeli",
+	"Set embedding model (e.g. {{model}})": "Iestatīt iegulšanas modeli (piem., {{model}})",
+	"Set reranking model (e.g. {{model}})": "Iestatīt pārkārtošanas modeli (piem., {{model}})",
+	"Set the number of layers, which will be off-loaded to GPU. Increasing this value can significantly improve performance for models that are optimized for GPU acceleration but may also consume more power and GPU resources.": "Iestatiet slāņu skaitu, kas tiks novirzīti uz GPU. Šīs vērtības palielināšana var ievērojami uzlabot veiktspēju modeļiem, kas ir optimizēti GPU paātrināšanai, bet var arī patērēt vairāk enerģijas un GPU resursu.",
+	"Set the number of worker threads used for computation. This option controls how many threads are used to process incoming requests concurrently. Increasing this value can improve performance under high concurrency workloads but may also consume more CPU resources.": "Iestatiet darba pavedienu skaitu, kas tiek izmantoti aprēķiniem. Šī opcija kontrolē, cik pavedienu tiek izmantoti, lai vienlaicīgi apstrādātu ienākošos pieprasījumus. Šīs vērtības palielināšana var uzlabot veiktspēju pie lielas vienlaicīguma slodzes, bet var arī patērēt vairāk CPU resursu.",
+	"Set Voice": "Iestatīt balsi",
+	"Set whisper model": "Iestatīt whisper modeli",
+	"Set your status": "Iestatiet savu statusu",
+	"Sets a flat bias against tokens that have appeared at least once. A higher value (e.g., 1.5) will penalize repetitions more strongly, while a lower value (e.g., 0.9) will be more lenient. At 0, it is disabled.": "Iestata fiksētu novirzi pret tokeniem, kas ir parādījušies vismaz vienu reizi. Augstāka vērtība (piem., 1.5) stingrāk sodīs atkārtojumus, bet zemāka vērtība (piem., 0.9) būs iecietīgāka. Pie 0 tas ir atspējots.",
+	"Sets a scaling bias against tokens to penalize repetitions, based on how many times they have appeared. A higher value (e.g., 1.5) will penalize repetitions more strongly, while a lower value (e.g., 0.9) will be more lenient. At 0, it is disabled.": "Iestata mērogojamu novirzi pret tokeniem, lai sodītu atkārtojumus, pamatojoties uz to, cik reizes tie ir parādījušies. Augstāka vērtība (piem., 1.5) stingrāk sodīs atkārtojumus, bet zemāka vērtība (piem., 0.9) būs iecietīgāka. Pie 0 tas ir atspējots.",
+	"Sets how far back for the model to look back to prevent repetition.": "Iestata, cik tālu atpakaļ modelim skatīties, lai novērstu atkārtošanos.",
+	"Sets the random number seed to use for generation. Setting this to a specific number will make the model generate the same text for the same prompt.": "Iestata nejaušo skaitļu sēklu, ko izmantot ģenerēšanai. Iestatot to uz konkrētu skaitli, modelis ģenerēs tādu pašu tekstu tai pašai uzvednei.",
+	"Sets the size of the context window used to generate the next token.": "Iestata konteksta loga izmēru, kas tiek izmantots nākamā tokena ģenerēšanai.",
+	"Sets the stop sequences to use. When this pattern is encountered, the LLM will stop generating text and return. Multiple stop patterns may be set by specifying multiple separate stop parameters in a modelfile.": "Iestata izmantojamās apstāšanās secības. Kad šis patterns tiek sastapts, LLM pārtrauks teksta ģenerēšanu un atgriezīs rezultātu. Vairākus apstāšanās paternus var iestatīt, norādot vairākus atsevišķus apstāšanās parametrus modeļfailā.",
+	"Setting": "Iestatījums",
+	"Settings": "Iestatījumi",
+	"Settings Permissions": "Iestatījumu atļaujas",
+	"Settings saved successfully!": "Iestatījumi veiksmīgi saglabāti!",
+	"Share": "Kopīgot",
+	"Share Chat": "Kopīgot tērzēšanu",
+	"Share to Open WebUI Community": "Kopīgot Open WebUI kopienā",
+	"Share your background and interests": "Dalieties ar savu pieredzi un interesēm",
+	"Shared with you": "Kopīgots ar jums",
+	"Sharing Permissions": "Kopīgošanas atļaujas",
+	"Show": "Rādīt",
+	"Show \"What's New\" modal on login": "Rādīt \"Kas jauns\" logu pie pieteikšanās",
+	"Show Admin Details in Account Pending Overlay": "Rādīt administratora detaļas konta gaidīšanas pārklājumā",
+	"Show Files": "Rādīt failus",
+	"Show Formatting Toolbar": "Rādīt formatēšanas rīkjoslu",
+	"Show image preview": "Rādīt attēla priekšskatījumu",
+	"Show Model": "Rādīt modeli",
+	"Show Shortcuts": "Rādīt īsceļus",
+	"Show your support!": "Parādiet savu atbalstu!",
+	"Showcased creativity": "Demonstrēta radošums",
+	"Sign in": "Pieteikties",
+	"Sign in to {{WEBUI_NAME}}": "Pieteikties {{WEBUI_NAME}}",
+	"Sign in to {{WEBUI_NAME}} with LDAP": "Pieteikties {{WEBUI_NAME}} ar LDAP",
+	"Sign Out": "Izrakstīties",
+	"Sign up": "Reģistrēties",
+	"Sign up to {{WEBUI_NAME}}": "Reģistrēties {{WEBUI_NAME}}",
+	"Significantly improves accuracy by using an LLM to enhance tables, forms, inline math, and layout detection. Will increase latency. Defaults to False.": "Ievērojami uzlabo precizitāti, izmantojot LLM, lai uzlabotu tabulas, formas, iekļauto matemātiku un izkārtojuma noteikšanu. Palielinās latentumu. Noklusējums ir False.",
+	"Signing in to {{WEBUI_NAME}}": "Piesakās {{WEBUI_NAME}}",
+	"Sink List": "Izlietnes saraksts",
+	"sk-1234": "sk-1234",
+	"Skip Cache": "Izlaist kešatmiņu",
+	"Skip the cache and re-run the inference. Defaults to False.": "Izlaist kešatmiņu un atkārtoti palaist secinājumu. Noklusējums ir False.",
+	"Something went wrong :/": "Kaut kas nogāja greizi :/",
+	"Sonar": "Sonar",
+	"Sonar Deep Research": "Sonar Deep Research",
+	"Sonar Pro": "Sonar Pro",
+	"Sonar Reasoning": "Sonar Reasoning",
+	"Sonar Reasoning Pro": "Sonar Reasoning Pro",
+	"Sort": "Kārtot",
+	"Sougou Search API sID": "Sougou Search API sID",
+	"Sougou Search API SK": "Sougou Search API SK",
+	"Source": "Avots",
+	"Speech Playback Speed": "Runas atskaņošanas ātrums",
+	"Speech recognition error: {{error}}": "Runas atpazīšanas kļūda: {{error}}",
+	"Speech-to-Text": "Runa uz tekstu",
+	"Speech-to-Text Engine": "Runas uz teksta dzinējs",
+	"Split documents by markdown headers before applying character/token splitting.": "Sadalīt dokumentus pēc markdown galvenēm pirms rakstzīmju/tokenu sadalīšanas piemērošanas.",
+	"Start a new conversation": "Sākt jaunu sarunu",
+	"Start of the channel": "Kanāla sākums",
+	"Start Tag": "Sākuma tags",
+	"Status": "Statuss",
+	"Status cleared successfully": "Statuss veiksmīgi notīrīts",
+	"Status updated successfully": "Statuss veiksmīgi atjaunināts",
+	"Status Updates": "Statusa atjauninājumi",
+	"STDOUT/STDERR": "STDOUT/STDERR",
+	"Steps": "Soļi",
+	"Stop": "Apturēt",
+	"Stop Download": "Apturēt lejupielādi",
+	"Stop Generating": "Apturēt ģenerēšanu",
+	"Stop Sequence": "Apstāšanās secība",
+	"Stream Chat Response": "Straumēt tērzēšanas atbildi",
+	"Stream Delta Chunk Size": "Straumes delta fragmenta izmērs",
+	"Streamable HTTP": "Straumējams HTTP",
+	"Strikethrough": "Pārsvītrojums",
+	"Strip Existing OCR": "Noņemt esošo OCR",
+	"Strip existing OCR text from the PDF and re-run OCR. Ignored if Force OCR is enabled. Defaults to False.": "Noņemt esošo OCR tekstu no PDF un atkārtoti palaist OCR. Tiek ignorēts, ja ir iespējots piespiedu OCR. Noklusējums ir False.",
+	"STT Model": "STT modelis",
+	"STT Settings": "STT iestatījumi",
+	"Stylized PDF Export": "Stilizēts PDF eksports",
+	"Subtitle": "Apakšvirsraksts",
+	"Success": "Veiksmīgi",
+	"Successfully imported {{userCount}} users.": "Veiksmīgi importēti {{userCount}} lietotāji.",
+	"Successfully updated.": "Veiksmīgi atjaunināts.",
+	"Suggest a change": "Ieteikt izmaiņas",
+	"Suggested": "Ieteikts",
+	"Support": "Atbalsts",
+	"Support this plugin:": "Atbalstiet šo spraudni:",
+	"Supported MIME Types": "Atbalstītie MIME tipi",
+	"Sync": "Sinhronizēt",
+	"Sync Complete!": "Sinhronizācija pabeigta!",
+	"Sync directory": "Sinhronizēt direktoriju",
+	"Sync Failed": "Sinhronizācija neizdevās",
+	"Sync Usage Stats": "Sinhronizēt lietošanas statistiku",
+	"Syncing stats...": "Sinhronizē statistiku...",
+	"Syncing...": "Sinhronizē...",
+	"Syncs only chats with updates after your last sync timestamp. Disable to re-sync all chats.": "Sinhronizē tikai tērzēšanas ar atjauninājumiem pēc jūsu pēdējās sinhronizācijas laika zīmoga. Atspējojiet, lai atkārtoti sinhronizētu visas tērzēšanas.",
+	"System": "Sistēma",
+	"System Instructions": "Sistēmas instrukcijas",
+	"System Prompt": "Sistēmas uzvedne",
+	"Tag": "Tags",
+	"Tags": "Tagi",
+	"Tags Generation": "Tagu ģenerēšana",
+	"Tags Generation Prompt": "Tagu ģenerēšanas uzvedne",
+	"Tail free sampling is used to reduce the impact of less probable tokens from the output. A higher value (e.g., 2.0) will reduce the impact more, while a value of 1.0 disables this setting.": "Astes brīvā paraugu ņemšana tiek izmantota, lai samazinātu mazāk iespējamo tokenu ietekmi uz izvadi. Augstāka vērtība (piem., 2.0) vairāk samazinās ietekmi, bet vērtība 1.0 atspējo šo iestatījumu.",
+	"Talk to Model": "Runāt ar modeli",
+	"Tap to interrupt": "Pieskarieties, lai pārtrauktu",
+	"Task List": "Uzdevumu saraksts",
+	"Task Model": "Uzdevumu modelis",
+	"Tasks": "Uzdevumi",
+	"Tavily API Key": "Tavily API atslēga",
+	"Tavily Extract Depth": "Tavily ekstrakcijas dziļums",
+	"Tell us more:": "Pastāstiet vairāk:",
+	"Temperature": "Temperatūra",
+	"Temporary Chat": "Pagaidu tērzēšana",
+	"Temporary Chat by Default": "Pagaidu tērzēšana pēc noklusējuma",
+	"Text Splitter": "Teksta sadalītājs",
+	"Text-to-Speech": "Teksts uz runu",
+	"Text-to-Speech Engine": "Teksta uz runas dzinējs",
+	"Thanks for your feedback!": "Paldies par jūsu atsauksmēm!",
+	"The Application Account DN you bind with for search": "Lietojumprogrammas konta DN, ar kuru saistāties meklēšanai",
+	"The base to search for users": "Bāze lietotāju meklēšanai",
+	"The batch size determines how many text requests are processed together at once. A higher batch size can increase the performance and speed of the model, but it also requires more memory.": "Paketes izmērs nosaka, cik teksta pieprasījumi tiek apstrādāti kopā vienlaicīgi. Lielāks paketes izmērs var palielināt modeļa veiktspēju un ātrumu, bet tam arī nepieciešams vairāk atmiņas.",
+	"The developers behind this plugin are passionate volunteers from the community. If you find this plugin helpful, please consider contributing to its development.": "Šī spraudņa izstrādātāji ir entuziasmu pilni brīvprātīgie no kopienas. Ja šis spraudnis jums šķiet noderīgs, lūdzu, apsveriet iespēju piedalīties tā izstrādē.",
+	"The evaluation leaderboard is based on the Elo rating system and is updated in real-time.": "Novērtēšanas līderu tabula ir balstīta uz Elo vērtējuma sistēmu un tiek atjaunināta reāllaikā.",
+	"The format to return a response in. Format can be json or a JSON schema.": "Formāts, kādā atgriezt atbildi. Formāts var būt json vai JSON shēma.",
+	"The height in pixels to compress images to. Leave empty for no compression.": "Augstums pikseļos, līdz kuram saspiest attēlus. Atstājiet tukšu bez saspiešanas.",
+	"The language of the input audio. Supplying the input language in ISO-639-1 (e.g. en) format will improve accuracy and latency. Leave blank to automatically detect the language.": "Ievades audio valoda. Ievades valodas norādīšana ISO-639-1 formātā (piem., lv) uzlabos precizitāti un latentumu. Atstājiet tukšu, lai automātiski noteiktu valodu.",
+	"The LDAP attribute that maps to the mail that users use to sign in.": "LDAP atribūts, kas tiek kartēts uz e-pastu, ko lietotāji izmanto pieteikšanās.",
+	"The LDAP attribute that maps to the username that users use to sign in.": "LDAP atribūts, kas tiek kartēts uz lietotājvārdu, ko lietotāji izmanto pieteikšanās.",
+	"The leaderboard is currently in beta, and we may adjust the rating calculations as we refine the algorithm.": "Līderu tabula pašlaik ir beta versijā, un mēs varam pielāgot vērtējuma aprēķinus, uzlabojot algoritmu.",
+	"The maximum file size in MB. If the file size exceeds this limit, the file will not be uploaded.": "Maksimālais faila izmērs MB. Ja faila izmērs pārsniedz šo ierobežojumu, fails netiks augšupielādēts.",
+	"The maximum number of files that can be used at once in chat. If the number of files exceeds this limit, the files will not be uploaded.": "Maksimālais failu skaits, ko var izmantot vienlaicīgi tērzēšanā. Ja failu skaits pārsniedz šo ierobežojumu, faili netiks augšupielādēti.",
+	"The output format for the text. Can be 'json', 'markdown', or 'html'. Defaults to 'markdown'.": "Teksta izvades formāts. Var būt 'json', 'markdown' vai 'html'. Noklusējums ir 'markdown'.",
+	"The passwords you entered don't quite match. Please double-check and try again.": "Ievadītās paroles nesakrīt. Lūdzu, pārbaudiet un mēģiniet vēlreiz.",
+	"The score should be a value between 0.0 (0%) and 1.0 (100%).": "Rezultātam jābūt vērtībai starp 0.0 (0%) un 1.0 (100%).",
+	"The stream delta chunk size for the model. Increasing the chunk size will make the model respond with larger pieces of text at once.": "Modeļa straumes delta fragmenta izmērs. Fragmenta izmēra palielināšana liks modelim vienlaicīgi atbildēt ar lielākiem teksta gabaliem.",
+	"The temperature of the model. Increasing the temperature will make the model answer more creatively.": "Modeļa temperatūra. Temperatūras palielināšana liks modelim atbildēt radošāk.",
+	"The Weight of BM25 Hybrid Search. 0 more semantic, 1 more lexical. Default 0.5": "BM25 hibrīda meklēšanas svars. 0 semantiskāks, 1 leksiskāks. Noklusējums 0.5",
+	"The width in pixels to compress images to. Leave empty for no compression.": "Platums pikseļos, līdz kuram saspiest attēlus. Atstājiet tukšu bez saspiešanas.",
+	"Theme": "Tēma",
+	"There was an error syncing your stats. Please try again.": "Sinhronizējot jūsu statistiku, radās kļūda. Lūdzu, mēģiniet vēlreiz.",
+	"Thinking...": "Domā...",
+	"This action cannot be undone. Do you wish to continue?": "Šo darbību nevar atsaukt. Vai vēlaties turpināt?",
+	"This channel was created on {{createdAt}}. This is the very beginning of the {{channelName}} channel.": "Šis kanāls tika izveidots {{createdAt}}. Šis ir paša sākums {{channelName}} kanālam.",
+	"This chat won't appear in history and your messages will not be saved.": "Šī tērzēšana neparādīsies vēsturē un jūsu ziņojumi netiks saglabāti.",
+	"This ensures that your valuable conversations are securely saved to your backend database. Thank you!": "Tas nodrošina, ka jūsu vērtīgās sarunas tiek droši saglabātas jūsu aizmugursistēmas datubāzē. Paldies!",
+	"This feature is experimental and may be modified or discontinued without notice.": "Šī funkcija ir eksperimentāla un var tikt modificēta vai pārtraukta bez brīdinājuma.",
+	"This is a default user permission and will remain enabled.": "Šī ir noklusējuma lietotāja atļauja un paliks iespējota.",
+	"This is an experimental feature, it may not function as expected and is subject to change at any time.": "Šī ir eksperimentāla funkcija, tā var nedarboties kā paredzēts un var tikt mainīta jebkurā laikā.",
+	"This model is not publicly available. Please select another model.": "Šis modelis nav publiski pieejams. Lūdzu, izvēlieties citu modeli.",
+	"This option controls how long the model will stay loaded into memory following the request (default: 5m)": "Šī opcija kontrolē, cik ilgi modelis paliks ielādēts atmiņā pēc pieprasījuma (noklusējums: 5m)",
+	"This option controls how many tokens are preserved when refreshing the context. For example, if set to 2, the last 2 tokens of the conversation context will be retained. Preserving context can help maintain the continuity of a conversation, but it may reduce the ability to respond to new topics.": "Šī opcija kontrolē, cik tokenu tiek saglabāti, atsvaidzinot kontekstu. Piemēram, ja iestatīts uz 2, tiks saglabāti pēdējie 2 sarunas konteksta tokeni. Konteksta saglabāšana var palīdzēt uzturēt sarunas nepārtrauktību, bet var samazināt spēju atbildēt uz jaunām tēmām.",
+	"This option enables or disables the use of the reasoning feature in Ollama, which allows the model to think before generating a response. When enabled, the model can take a moment to process the conversation context and generate a more thoughtful response.": "Šī opcija iespējo vai atspējo spriedumu funkcijas izmantošanu Ollama, kas ļauj modelim padomāt pirms atbildes ģenerēšanas. Ja iespējots, modelis var veltīt brīdi sarunas konteksta apstrādei un ģenerēt pārdomātāku atbildi.",
+	"This option sets the maximum number of tokens the model can generate in its response. Increasing this limit allows the model to provide longer answers, but it may also increase the likelihood of unhelpful or irrelevant content being generated.": "Šī opcija iestata maksimālo tokenu skaitu, ko modelis var ģenerēt savā atbildē. Šī ierobežojuma palielināšana ļauj modelim sniegt garākas atbildes, bet var arī palielināt nevēlama vai neatbilstoša satura ģenerēšanas iespējamību.",
+	"This option will delete all existing files in the collection and replace them with newly uploaded files.": "Šī opcija dzēsīs visus esošos failus kolekcijā un aizstās tos ar jaunaugšupielādētiem failiem.",
+	"This response was generated by \"{{model}}\"": "Šo atbildi ģenerēja \"{{model}}\"",
+	"This will delete": "Tas dzēsīs",
+	"This will delete <strong>{{NAME}}</strong> and <strong>all its contents</strong>.": "Tas dzēsīs <strong>{{NAME}}</strong> un <strong>visu tā saturu</strong>.",
+	"This will delete all models including custom models": "Tas dzēsīs visus modeļus, ieskaitot pielāgotos modeļus",
+	"This will delete all models including custom models and cannot be undone.": "Tas dzēsīs visus modeļus, ieskaitot pielāgotos modeļus, un to nevar atsaukt.",
+	"This will reset the knowledge base and sync all files. Do you wish to continue?": "Tas atiestatīs zināšanu bāzi un sinhronizēs visus failus. Vai vēlaties turpināt?",
+	"Thorough explanation": "Pamatīgs skaidrojums",
+	"Thought for {{DURATION}}": "Domāja {{DURATION}}",
+	"Thought for {{DURATION}} seconds": "Domāja {{DURATION}} sekundes",
+	"Thought for less than a second": "Domāja mazāk par sekundi",
+	"Thread": "Pavediens",
+	"Tika": "Tika",
+	"Tika Server URL required.": "Nepieciešams Tika servera URL.",
+	"Tiktoken": "Tiktoken",
+	"Timeout": "Taimauts",
+	"Title": "Virsraksts",
+	"Title Auto-Generation": "Virsraksta automātiska ģenerēšana",
+	"Title cannot be an empty string.": "Virsraksts nevar būt tukša virkne.",
+	"Title Generation": "Virsraksta ģenerēšana",
+	"Title Generation Prompt": "Virsraksta ģenerēšanas uzvedne",
+	"TLS": "TLS",
+	"To access the available model names for downloading,": "Lai piekļūtu pieejamajiem modeļu nosaukumiem lejupielādei,",
+	"To access the GGUF models available for downloading,": "Lai piekļūtu GGUF modeļiem, kas pieejami lejupielādei,",
+	"To access the WebUI, please reach out to the administrator. Admins can manage user statuses from the Admin Panel.": "Lai piekļūtu WebUI, lūdzu, sazinieties ar administratoru. Administratori var pārvaldīt lietotāju statusus no administrēšanas paneļa.",
+	"To attach knowledge base here, add them to the \"Knowledge\" workspace first.": "Lai pievienotu zināšanu bāzi šeit, vispirms pievienojiet tās \"Zināšanu\" darba videi.",
+	"To learn more about available endpoints, visit our documentation.": "Lai uzzinātu vairāk par pieejamajiem galapunktiem, apmeklējiet mūsu dokumentāciju.",
+	"To learn more about powerful prompt variables, click here": "Lai uzzinātu vairāk par jaudīgajiem uzvedņu mainīgajiem, noklikšķiniet šeit",
+	"To select toolkits here, add them to the \"Tools\" workspace first.": "Lai izvēlētos rīku komplektus šeit, vispirms pievienojiet tos \"Rīku\" darba videi.",
+	"Toast notifications for new updates": "Uznirstošie paziņojumi par jauniem atjauninājumiem",
+	"Today": "Šodien",
+	"Today at {{LOCALIZED_TIME}}": "Šodien plkst. {{LOCALIZED_TIME}}",
+	"Toggle Sidebar": "Pārslēgt sānjoslu",
+	"Toggle whether current connection is active.": "Pārslēgt, vai pašreizējais savienojums ir aktīvs.",
+	"Token": "Tokens",
+	"Too verbose": "Pārāk gari",
+	"Tool created successfully": "Rīks veiksmīgi izveidots",
+	"Tool deleted successfully": "Rīks veiksmīgi dzēsts",
+	"Tool Description": "Rīka apraksts",
+	"Tool ID": "Rīka ID",
+	"Tool imported successfully": "Rīks veiksmīgi importēts",
+	"Tool Name": "Rīka nosaukums",
+	"Tool Servers": "Rīku serveri",
+	"Tool updated successfully": "Rīks veiksmīgi atjaunināts",
+	"Tools": "Rīki",
+	"Tools Access": "Rīku piekļuve",
+	"Tools are a function calling system with arbitrary code execution": "Rīki ir funkciju izsaukšanas sistēma ar patvaļīgu koda izpildi",
+	"Tools Function Calling Prompt": "Rīku funkciju izsaukšanas uzvedne",
+	"Tools have a function calling system that allows arbitrary code execution.": "Rīkiem ir funkciju izsaukšanas sistēma, kas ļauj patvaļīgu koda izpildi.",
+	"Tools Public Sharing": "Rīku publiska kopīgošana",
+	"Tools Sharing": "Rīku kopīgošana",
+	"Top": "Augša",
+	"Top K": "Top K",
+	"Top K Reranker": "Top K pārkārtotājs",
+	"Transformers": "Transformers",
+	"Trouble accessing Ollama?": "Problēmas piekļūt Ollama?",
+	"Trust Proxy Environment": "Uzticēties starpniekservera videi",
+	"Try adjusting your search or filter to find what you are looking for.": "Mēģiniet pielāgot meklēšanu vai filtru, lai atrastu meklēto.",
+	"Try Again": "Mēģināt vēlreiz",
+	"TTS Model": "TTS modelis",
+	"TTS Settings": "TTS iestatījumi",
+	"TTS Voice": "TTS balss",
+	"Type": "Tips",
+	"Type here...": "Rakstiet šeit...",
+	"Type Hugging Face Resolve (Download) URL": "Ievadiet Hugging Face Resolve (lejupielādes) URL",
+	"Uh-oh! There was an issue with the response.": "Ak vai! Radās problēma ar atbildi.",
+	"UI": "Saskarne",
+	"UI Scale": "Saskarnes mērogs",
+	"Unarchive All": "Atarhivēt visus",
+	"Unarchive All Archived Chats": "Atarhivēt visas arhivētās tērzēšanas",
+	"Unarchive Chat": "Atarhivēt tērzēšanu",
+	"Underline": "Pasvītrojums",
+	"Unknown": "Nezināms",
+	"Unknown User": "Nezināms lietotājs",
+	"Unloads {{FROM_NOW}}": "Izlādēs {{FROM_NOW}}",
+	"Unlock mysteries": "Atklājiet noslēpumus",
+	"Unpin": "Atspraust",
+	"Unravel secrets": "Atšķetiniet noslēpumus",
+	"Unsupported file type.": "Neatbalstīts faila tips.",
+	"Untagged": "Bez tagiem",
+	"Untitled": "Bez nosaukuma",
+	"Update": "Atjaunināt",
+	"Update and Copy Link": "Atjaunināt un kopēt saiti",
+	"Update for the latest features and improvements.": "Atjauniniet, lai iegūtu jaunākās funkcijas un uzlabojumus.",
+	"Update password": "Atjaunināt paroli",
+	"Update your status": "Atjauniniet savu statusu",
+	"Updated": "Atjaunināts",
+	"Updated at": "Atjaunināts",
+	"Updated At": "Atjaunināts",
+	"Upgrade to a licensed plan for enhanced capabilities, including custom theming and branding, and dedicated support.": "Jauniniet uz licencētu plānu uzlabotām iespējām, tostarp pielāgotai tematikai un zīmolvedībai, un īpašam atbalstam.",
+	"Upload": "Augšupielādēt",
+	"Upload a GGUF model": "Augšupielādēt GGUF modeli",
+	"Upload Audio": "Augšupielādēt audio",
+	"Upload directory": "Augšupielādes direktorija",
+	"Upload files": "Augšupielādēt failus",
+	"Upload Files": "Augšupielādēt failus",
+	"Upload Model": "Augšupielādēt modeli",
+	"Upload Pipeline": "Augšupielādēt plūsmu",
+	"Upload Progress": "Augšupielādes progress",
+	"Upload Progress: {{uploadedFiles}}/{{totalFiles}} ({{percentage}}%)": "Augšupielādes progress: {{uploadedFiles}}/{{totalFiles}} ({{percentage}}%)",
+	"Uploaded files or images": "Augšupielādēti faili vai attēli",
+	"Uploading file...": "Augšupielādē failu...",
+	"URL": "URL",
+	"URL is required": "URL ir nepieciešams",
+	"URL Mode": "URL režīms",
+	"Usage": "Lietojums",
+	"Use '#' in the prompt input to load and include your knowledge.": "Izmantojiet '#' uzvednes ievadē, lai ielādētu un iekļautu savas zināšanas.",
+	"Use /v1/chat/completions endpoint instead of /v1/audio/transcriptions for potentially better accuracy.": "Izmantojiet /v1/chat/completions galapunktu /v1/audio/transcriptions vietā potenciāli labākai precizitātei.",
+	"Use Chat Completions API": "Izmantot tērzēšanas pabeigšanas API",
+	"Use groups to group your users and assign permissions.": "Izmantojiet grupas, lai grupētu savus lietotājus un piešķirtu atļaujas.",
+	"Use LLM": "Izmantot LLM",
+	"Use no proxy to fetch page contents.": "Neizmantot starpniekserveri lapu satura iegūšanai.",
+	"Use proxy designated by http_proxy and https_proxy environment variables to fetch page contents.": "Izmantot starpniekserveri, kas norādīts http_proxy un https_proxy vides mainīgajos, lapu satura iegūšanai.",
+	"user": "lietotājs",
+	"User": "Lietotājs",
+	"User Groups": "Lietotāju grupas",
+	"User location successfully retrieved.": "Lietotāja atrašanās vieta veiksmīgi iegūta.",
+	"User menu": "Lietotāja izvēlne",
+	"User ratings (thumbs up/down)": "Lietotāju vērtējumi (patīk/nepatīk)",
+	"User Status": "Lietotāja statuss",
+	"User Webhooks": "Lietotāja webhook",
+	"Username": "Lietotājvārds",
+	"users": "lietotāji",
+	"Users": "Lietotāji",
+	"Uses DefaultAzureCredential to authenticate": "Izmanto DefaultAzureCredential autentifikācijai",
+	"Uses OAuth 2.1 Dynamic Client Registration": "Izmanto OAuth 2.1 dinamisko klientu reģistrāciju",
+	"Using Entire Document": "Izmanto visu dokumentu",
+	"Using Focused Retrieval": "Izmanto fokusētu izgūšanu",
+	"Using the default arena model with all models. Click the plus button to add custom models.": "Izmanto noklusējuma arēnas modeli ar visiem modeļiem. Noklikšķiniet uz pluszīmes pogas, lai pievienotu pielāgotus modeļus.",
+	"Valid time units:": "Derīgas laika vienības:",
+	"Validate certificate": "Pārbaudīt sertifikātu",
+	"Valves": "Vārsti",
+	"Valves updated": "Vārsti atjaunināti",
+	"Valves updated successfully": "Vārsti veiksmīgi atjaunināti",
+	"variable": "mainīgais",
+	"Verify Connection": "Pārbaudīt savienojumu",
+	"Verify SSL Certificate": "Pārbaudīt SSL sertifikātu",
+	"Version": "Versija",
+	"Version {{selectedVersion}} of {{totalVersions}}": "Versija {{selectedVersion}} no {{totalVersions}}",
+	"View Replies": "Skatīt atbildes",
+	"View Result from **{{NAME}}**": "Skatīt rezultātu no **{{NAME}}**",
+	"Visibility": "Redzamība",
+	"Visible to all users": "Redzams visiem lietotājiem",
+	"Vision": "Redze",
+	"Voice": "Balss",
+	"Voice Input": "Balss ievade",
+	"Voice mode": "Balss režīms",
+	"Voice Mode Custom Prompt": "Balss režīma pielāgotā uzvedne",
+	"Voice Mode Prompt": "Balss režīma uzvedne",
+	"Warning": "Brīdinājums",
+	"Warning:": "Brīdinājums:",
+	"Warning: Enabling this will allow users to upload arbitrary code on the server.": "Brīdinājums: Šīs opcijas iespējošana ļaus lietotājiem augšupielādēt patvaļīgu kodu serverī.",
+	"Warning: Jupyter execution enables arbitrary code execution, posing severe security risks—proceed with extreme caution.": "Brīdinājums: Jupyter izpilde ļauj patvaļīgu koda izpildi, radot nopietnus drošības riskus — rīkojieties ar ārkārtēju piesardzību.",
+	"Web": "Tīmeklis",
+	"Web API": "Tīmekļa API",
+	"Web Loader Engine": "Tīmekļa ielādētāja dzinējs",
+	"Web Search": "Tīmekļa meklēšana",
+	"Web Search Engine": "Tīmekļa meklētājs",
+	"Web Search in Chat": "Tīmekļa meklēšana tērzēšanā",
+	"Web Search Query Generation": "Tīmekļa meklēšanas vaicājuma ģenerēšana",
+	"Webhook Name": "Webhook nosaukums",
+	"Webhook URL": "Webhook URL",
+	"Webhooks": "Webhook",
+	"Webpage URLs": "Tīmekļa lapu URL",
+	"WebUI Settings": "WebUI iestatījumi",
+	"WebUI URL": "WebUI URL",
+	"WebUI will make requests to \"{{url}}\"": "WebUI veiks pieprasījumus uz \"{{url}}\"",
+	"WebUI will make requests to \"{{url}}/api/chat\"": "WebUI veiks pieprasījumus uz \"{{url}}/api/chat\"",
+	"WebUI will make requests to \"{{url}}/chat/completions\"": "WebUI veiks pieprasījumus uz \"{{url}}/chat/completions\"",
+	"What are you trying to achieve?": "Ko jūs mēģināt sasniegt?",
+	"What are you working on?": "Pie kā jūs strādājat?",
+	"What is NOT shared:": "Kas NETIEK kopīgots:",
+	"What is shared:": "Kas tiek kopīgots:",
+	"What's New in": "Kas jauns",
+	"What's on your mind?": "Par ko jūs domājat?",
+	"When enabled, the model will respond to each chat message in real-time, generating a response as soon as the user sends a message. This mode is useful for live chat applications, but may impact performance on slower hardware.": "Ja iespējots, modelis atbildēs uz katru tērzēšanas ziņojumu reāllaikā, ģenerējot atbildi, tiklīdz lietotājs nosūta ziņojumu. Šis režīms ir noderīgs tiešsaistes tērzēšanas lietojumprogrammām, bet var ietekmēt veiktspēju lēnākā aparatūrā.",
+	"wherever you are": "lai kur jūs būtu",
+	"Whether to paginate the output. Each page will be separated by a horizontal rule and page number. Defaults to False.": "Vai lappušot izvadi. Katra lapa tiks atdalīta ar horizontālu līniju un lapas numuru. Noklusējums ir False.",
+	"Whisper (Local)": "Whisper (lokāls)",
+	"Who can share to this group": "Kas var kopīgot šai grupai",
+	"Why?": "Kāpēc?",
+	"Widescreen Mode": "Platekrāna režīms",
+	"Width": "Platums",
+	"Wikipedia": "Wikipedia",
+	"Won": "Uzvarēja",
+	"Works together with top-k. A higher value (e.g., 0.95) will lead to more diverse text, while a lower value (e.g., 0.5) will generate more focused and conservative text.": "Darbojas kopā ar top-k. Augstāka vērtība (piem., 0.95) radīs daudzveidīgāku tekstu, bet zemāka vērtība (piem., 0.5) ģenerēs fokusētāku un konservatīvāku tekstu.",
+	"Workspace": "Darba vide",
+	"Workspace Permissions": "Darba vides atļaujas",
+	"Write": "Rakstīt",
+	"Write a summary in 50 words that summarizes {{topic}}.": "Uzrakstiet kopsavilkumu 50 vārdos, kas apkopo {{topic}}.",
+	"Write something...": "Rakstiet kaut ko...",
+	"Write your model system prompt content here\ne.g.) You are Mario from Super Mario Bros, acting as an assistant.": "Šeit ierakstiet sava modeļa sistēmas uzvednes saturu\npiem.) Tu esi Mario no Super Mario Bros, darbojoties kā asistents.",
+	"Yacy Instance URL": "Yacy instances URL",
+	"Yacy Password": "Yacy parole",
+	"Yacy Username": "Yacy lietotājvārds",
+	"Yahoo": "Yahoo",
+	"Yandex": "Yandex",
+	"Yesterday": "Vakar",
+	"Yesterday at {{LOCALIZED_TIME}}": "Vakar plkst. {{LOCALIZED_TIME}}",
+	"You": "Jūs",
+	"You are currently using a trial license. Please contact support to upgrade your license.": "Jūs pašlaik izmantojat izmēģinājuma licenci. Lūdzu, sazinieties ar atbalsta dienestu, lai jauninātu savu licenci.",
+	"You can only chat with a maximum of {{maxCount}} file(s) at a time.": "Jūs varat tērzēt ar ne vairāk kā {{maxCount}} failu(-iem) vienlaicīgi.",
+	"You can personalize your interactions with LLMs by adding memories through the 'Manage' button below, making them more helpful and tailored to you.": "Jūs varat personalizēt savu mijiedarbību ar LLM, pievienojot atmiņas caur pogu 'Pārvaldīt' zemāk, padarot tās noderīgākas un pielāgotas jums.",
+	"You cannot upload an empty file.": "Jūs nevarat augšupielādēt tukšu failu.",
+	"You do not have permission to edit this model": "Jums nav atļaujas rediģēt šo modeli",
+	"You do not have permission to edit this prompt.": "Jums nav atļaujas rediģēt šo uzvedni.",
+	"You do not have permission to save this prompt.": "Jums nav atļaujas saglabāt šo uzvedni.",
+	"You do not have permission to send messages in this channel.": "Jums nav atļaujas sūtīt ziņojumus šajā kanālā.",
+	"You do not have permission to send messages in this thread.": "Jums nav atļaujas sūtīt ziņojumus šajā pavedienā.",
+	"You do not have permission to upload files to this knowledge base.": "Jums nav atļaujas augšupielādēt failus šajā zināšanu bāzē.",
+	"You do not have permission to upload files.": "Jums nav atļaujas augšupielādēt failus.",
+	"You have no archived conversations.": "Jums nav arhivētu sarunu.",
+	"You have shared this chat": "Jūs esat kopīgojis šo tērzēšanu",
+	"You're a helpful assistant.": "Tu esi noderīgs asistents.",
+	"You're now logged in.": "Jūs tagad esat pieteicies.",
+	"Your Account": "Jūsu konts",
+	"Your account status is currently pending activation.": "Jūsu konta statuss pašlaik gaida aktivizēšanu.",
+	"Your entire contribution will go directly to the plugin developer; Open WebUI does not take any percentage. However, the chosen funding platform might have its own fees.": "Visa jūsu iemaksa nonāks tieši pie spraudņa izstrādātāja; Open WebUI neņem nekādu procentu. Tomēr izvēlētajai finansējuma platformai var būt savas maksas.",
+	"Your message text or inputs": "Jūsu ziņojuma teksts vai ievades",
+	"Your usage stats have been successfully synced.": "Jūsu lietošanas statistika ir veiksmīgi sinhronizēta.",
+	"YouTube": "YouTube",
+	"Youtube Language": "YouTube valoda",
+	"Youtube Proxy URL": "YouTube proxy URL"
+}
\ No newline at end of file

From 691a04f0dd5f3b3cfecfca193d6f81ad773b3b4c Mon Sep 17 00:00:00 2001
From: Tim Baek <tim@openwebui.com>
Date: Sun, 8 Feb 2026 03:39:29 +0400
Subject: [PATCH 15/42] refac

---
 src/lib/components/layout/Sidebar.svelte      |  2 ++
 .../components/layout/Sidebar/ChatItem.svelte | 29 +++++++++++++++++--
 .../layout/Sidebar/RecursiveFolder.svelte     |  1 +
 3 files changed, 30 insertions(+), 2 deletions(-)

diff --git a/src/lib/components/layout/Sidebar.svelte b/src/lib/components/layout/Sidebar.svelte
index 2b0a448d63..5a92d991ba 100644
--- a/src/lib/components/layout/Sidebar.svelte
+++ b/src/lib/components/layout/Sidebar.svelte
@@ -1244,6 +1244,7 @@
 												className=""
 												id={chat.id}
 												title={chat.title}
+												updatedAt={chat.updated_at}
 												{shiftKey}
 												selected={selectedChatId === chat.id}
 												on:select={() => {
@@ -1304,6 +1305,7 @@
 										className=""
 										id={chat.id}
 										title={chat.title}
+										updatedAt={chat.updated_at}
 										{shiftKey}
 										selected={selectedChatId === chat.id}
 										on:select={() => {
diff --git a/src/lib/components/layout/Sidebar/ChatItem.svelte b/src/lib/components/layout/Sidebar/ChatItem.svelte
index 46aedd2045..f9d1f5d17d 100644
--- a/src/lib/components/layout/Sidebar/ChatItem.svelte
+++ b/src/lib/components/layout/Sidebar/ChatItem.svelte
@@ -47,12 +47,30 @@
 
 	export let id;
 	export let title;
+	export let updatedAt: number | null = null;
 
 	export let selected = false;
 	export let shiftKey = false;
 
 	export let onDragEnd = () => {};
 
+	function formatTimeAgo(timestamp: number): string {
+		const now = Date.now();
+		const diff = now - timestamp * 1000; // timestamp is in seconds
+
+		const seconds = Math.floor(diff / 1000);
+		const minutes = Math.floor(seconds / 60);
+		const hours = Math.floor(minutes / 60);
+		const days = Math.floor(hours / 24);
+		const weeks = Math.floor(days / 7);
+
+		if (weeks > 0) return `${weeks}w`;
+		if (days > 0) return `${days}d`;
+		if (hours > 0) return `${hours}h`;
+		if (minutes > 0) return `${minutes}m`;
+		return 'now';
+	}
+
 	let chat = null;
 
 	let mouseOver = false;
@@ -423,11 +441,18 @@
 			on:focus={(e) => {}}
 			draggable="false"
 		>
-			<div class=" flex self-center flex-1 w-full">
-				<div dir="auto" class=" text-left self-center overflow-hidden w-full h-[20px] truncate">
+			<div class="flex self-center flex-1 w-full min-w-0">
+				<div dir="auto" class="text-left self-center overflow-hidden w-full h-[20px] truncate">
 					{title}
 				</div>
 			</div>
+
+			<!-- Time ago indicator -->
+			{#if updatedAt && !mouseOver}
+				<div class="shrink-0 self-center text-[10px] text-gray-400 dark:text-gray-500 pl-2">
+					{formatTimeAgo(updatedAt)}
+				</div>
+			{/if}
 		</a>
 	{/if}
 
diff --git a/src/lib/components/layout/Sidebar/RecursiveFolder.svelte b/src/lib/components/layout/Sidebar/RecursiveFolder.svelte
index ed210cf7c4..fc5a3f061a 100644
--- a/src/lib/components/layout/Sidebar/RecursiveFolder.svelte
+++ b/src/lib/components/layout/Sidebar/RecursiveFolder.svelte
@@ -643,6 +643,7 @@
 						<ChatItem
 							id={chat.id}
 							title={chat.title}
+							updatedAt={chat.updated_at}
 							{shiftKey}
 							on:change={(e) => {
 								dispatch('change', e.detail);

From 690686f3c7866ccd73e9ae0fbc598feb5e1e1c8d Mon Sep 17 00:00:00 2001
From: Tim Baek <tim@openwebui.com>
Date: Sun, 8 Feb 2026 03:40:54 +0400
Subject: [PATCH 16/42] refac

---
 src/lib/components/layout/Sidebar/ChatItem.svelte | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/lib/components/layout/Sidebar/ChatItem.svelte b/src/lib/components/layout/Sidebar/ChatItem.svelte
index f9d1f5d17d..c73f46578f 100644
--- a/src/lib/components/layout/Sidebar/ChatItem.svelte
+++ b/src/lib/components/layout/Sidebar/ChatItem.svelte
@@ -68,7 +68,7 @@
 		if (days > 0) return `${days}d`;
 		if (hours > 0) return `${hours}h`;
 		if (minutes > 0) return `${minutes}m`;
-		return 'now';
+		return '1m';
 	}
 
 	let chat = null;

From 59b98ab7308f80f144b907e32984c429a94db969 Mon Sep 17 00:00:00 2001
From: Tim Baek <tim@openwebui.com>
Date: Sun, 8 Feb 2026 03:42:57 +0400
Subject: [PATCH 17/42] refac

---
 src/lib/components/layout/Sidebar/ChatItem.svelte | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/src/lib/components/layout/Sidebar/ChatItem.svelte b/src/lib/components/layout/Sidebar/ChatItem.svelte
index c73f46578f..f9ec3f9023 100644
--- a/src/lib/components/layout/Sidebar/ChatItem.svelte
+++ b/src/lib/components/layout/Sidebar/ChatItem.svelte
@@ -63,7 +63,9 @@
 		const hours = Math.floor(minutes / 60);
 		const days = Math.floor(hours / 24);
 		const weeks = Math.floor(days / 7);
+		const years = Math.floor(days / 365);
 
+		if (years > 0) return `${years}y`;
 		if (weeks > 0) return `${weeks}w`;
 		if (days > 0) return `${days}d`;
 		if (hours > 0) return `${hours}h`;

From 9be85b6d3c30549ce1eea1e1653846d65bfb4087 Mon Sep 17 00:00:00 2001
From: Timothy Jaeryang Baek <tim@openwebui.com>
Date: Sat, 7 Feb 2026 19:07:49 -0600
Subject: [PATCH 18/42] refac: access control migration

---
 .../f1e2d3c4b5a6_add_access_grant_table.py    | 350 ++++++++++++++++++
 1 file changed, 350 insertions(+)
 create mode 100644 backend/open_webui/migrations/versions/f1e2d3c4b5a6_add_access_grant_table.py

diff --git a/backend/open_webui/migrations/versions/f1e2d3c4b5a6_add_access_grant_table.py b/backend/open_webui/migrations/versions/f1e2d3c4b5a6_add_access_grant_table.py
new file mode 100644
index 0000000000..eabf1860a1
--- /dev/null
+++ b/backend/open_webui/migrations/versions/f1e2d3c4b5a6_add_access_grant_table.py
@@ -0,0 +1,350 @@
+"""Add access_grant table
+
+Revision ID: f1e2d3c4b5a6
+Revises: 8452d01d26d7
+Create Date: 2026-02-05 10:00:00.000000
+
+Migrates from JSON access_control columns to normalized access_grant table.
+Access control semantics:
+- NULL: Public access (all users can read) -> insert user:* for read
+- {}: Private/owner-only (no grants) -> insert nothing
+- {read: {...}, write: {...}}: Custom permissions -> insert specific grants
+"""
+
+from typing import Sequence, Union
+import time
+import uuid
+
+from alembic import op
+import sqlalchemy as sa
+
+from open_webui.migrations.util import get_existing_tables
+
+revision: str = "f1e2d3c4b5a6"
+down_revision: Union[str, None] = "8452d01d26d7"
+branch_labels: Union[str, Sequence[str], None] = None
+depends_on: Union[str, Sequence[str], None] = None
+
+
+def upgrade() -> None:
+    existing_tables = set(get_existing_tables())
+
+    # Create access_grant table
+    if "access_grant" not in existing_tables:
+        op.create_table(
+            "access_grant",
+            sa.Column("id", sa.Text(), nullable=False, primary_key=True),
+            sa.Column("resource_type", sa.Text(), nullable=False),
+            sa.Column("resource_id", sa.Text(), nullable=False),
+            sa.Column("principal_type", sa.Text(), nullable=False),
+            sa.Column("principal_id", sa.Text(), nullable=False),
+            sa.Column("permission", sa.Text(), nullable=False),
+            sa.Column("created_at", sa.BigInteger(), nullable=False),
+            sa.UniqueConstraint(
+                "resource_type",
+                "resource_id",
+                "principal_type",
+                "principal_id",
+                "permission",
+                name="uq_access_grant_grant",
+            ),
+        )
+        op.create_index(
+            "idx_access_grant_resource",
+            "access_grant",
+            ["resource_type", "resource_id"],
+        )
+        op.create_index(
+            "idx_access_grant_principal",
+            "access_grant",
+            ["principal_type", "principal_id"],
+        )
+
+    # Backfill existing access_control JSON data
+    conn = op.get_bind()
+
+    # Tables with access_control JSON columns: (table_name, resource_type)
+    resource_tables = [
+        ("knowledge", "knowledge"),
+        ("prompt", "prompt"),
+        ("tool", "tool"),
+        ("model", "model"),
+        ("note", "note"),
+        ("channel", "channel"),
+        ("file", "file"),
+    ]
+
+    now = int(time.time())
+    inserted = set()
+
+    for table_name, resource_type in resource_tables:
+        if table_name not in existing_tables:
+            continue
+
+        # Query all rows
+        try:
+            result = conn.execute(
+                sa.text(f'SELECT id, access_control FROM "{table_name}"')
+            )
+            rows = result.fetchall()
+        except Exception:
+            continue
+
+        for row in rows:
+            resource_id = row[0]
+            access_control_json = row[1]
+
+            # Handle NULL or JSON "null" = public access (user:* for read)
+            # Could be Python None (SQL NULL) or string "null" (JSON null)
+            # EXCEPTION: files with NULL are PRIVATE (owner-only), not public
+            is_null = (
+                access_control_json is None or 
+                access_control_json == "null" or
+                (isinstance(access_control_json, str) and access_control_json.strip().lower() == "null")
+            )
+            if is_null:
+                # Files: NULL = private (no entry needed, owner has implicit access)
+                # Other resources: NULL = public (insert user:* for read)
+                if resource_type == "file":
+                    continue  # Private - no entry needed
+                
+                key = (resource_type, resource_id, "user", "*", "read")
+                if key not in inserted:
+                    try:
+                        conn.execute(
+                            sa.text(
+                                """
+                                INSERT INTO access_grant (id, resource_type, resource_id, principal_type, principal_id, permission, created_at)
+                                VALUES (:id, :resource_type, :resource_id, :principal_type, :principal_id, :permission, :created_at)
+                            """
+                            ),
+                            {
+                                "id": str(uuid.uuid4()),
+                                "resource_type": resource_type,
+                                "resource_id": resource_id,
+                                "principal_type": "user",
+                                "principal_id": "*",
+                                "permission": "read",
+                                "created_at": now,
+                            },
+                        )
+                        inserted.add(key)
+                    except Exception:
+                        pass
+                continue
+
+            # Handle JSON parsing
+            if isinstance(access_control_json, str):
+                import json
+
+                try:
+                    access_control_json = json.loads(access_control_json)
+                except Exception:
+                    continue
+
+            # Handle {} = private/owner-only - NO entries needed
+            # Owner access is implicit, no grants to store
+            if not access_control_json or not isinstance(access_control_json, dict):
+                continue
+
+            # Check if it's effectively empty (no read/write keys with content)
+            read_data = access_control_json.get("read", {})
+            write_data = access_control_json.get("write", {})
+
+            has_read_grants = read_data.get("group_ids", []) or read_data.get(
+                "user_ids", []
+            )
+            has_write_grants = write_data.get("group_ids", []) or write_data.get(
+                "user_ids", []
+            )
+
+            if not has_read_grants and not has_write_grants:
+                # Empty permissions = private, no grants needed
+                continue
+
+            # Extract permissions and insert into access_grant table
+            for permission in ["read", "write"]:
+                perm_data = access_control_json.get(permission, {})
+                if not perm_data:
+                    continue
+
+                for group_id in perm_data.get("group_ids", []):
+                    key = (resource_type, resource_id, "group", group_id, permission)
+                    if key in inserted:
+                        continue
+                    try:
+                        conn.execute(
+                            sa.text(
+                                """
+                                INSERT INTO access_grant (id, resource_type, resource_id, principal_type, principal_id, permission, created_at)
+                                VALUES (:id, :resource_type, :resource_id, :principal_type, :principal_id, :permission, :created_at)
+                            """
+                            ),
+                            {
+                                "id": str(uuid.uuid4()),
+                                "resource_type": resource_type,
+                                "resource_id": resource_id,
+                                "principal_type": "group",
+                                "principal_id": group_id,
+                                "permission": permission,
+                                "created_at": now,
+                            },
+                        )
+                        inserted.add(key)
+                    except Exception:
+                        pass
+
+                for user_id in perm_data.get("user_ids", []):
+                    key = (resource_type, resource_id, "user", user_id, permission)
+                    if key in inserted:
+                        continue
+                    try:
+                        conn.execute(
+                            sa.text(
+                                """
+                                INSERT INTO access_grant (id, resource_type, resource_id, principal_type, principal_id, permission, created_at)
+                                VALUES (:id, :resource_type, :resource_id, :principal_type, :principal_id, :permission, :created_at)
+                            """
+                            ),
+                            {
+                                "id": str(uuid.uuid4()),
+                                "resource_type": resource_type,
+                                "resource_id": resource_id,
+                                "principal_type": "user",
+                                "principal_id": user_id,
+                                "permission": permission,
+                                "created_at": now,
+                            },
+                        )
+                        inserted.add(key)
+                    except Exception:
+                        pass
+
+    # Drop access_control columns from resource tables
+    for table_name, _ in resource_tables:
+        if table_name not in existing_tables:
+            continue
+        try:
+            op.drop_column(table_name, "access_control")
+        except Exception:
+            pass
+
+
+def downgrade() -> None:
+    import json
+    
+    conn = op.get_bind()
+    
+    # Resource tables mapping: (table_name, resource_type)
+    resource_tables = [
+        ("knowledge", "knowledge"),
+        ("prompt", "prompt"),
+        ("tool", "tool"),
+        ("model", "model"),
+        ("note", "note"),
+        ("channel", "channel"),
+        ("file", "file"),
+    ]
+
+    # Step 1: Re-add access_control columns to resource tables
+    for table_name, _ in resource_tables:
+        try:
+            op.add_column(
+                table_name, sa.Column("access_control", sa.JSON(), nullable=True)
+            )
+        except Exception:
+            pass
+
+    # Step 2: Query access_grant table and reconstruct JSON for each resource
+    for table_name, resource_type in resource_tables:
+        try:
+            # Get all grants for this resource type
+            result = conn.execute(
+                sa.text("""
+                    SELECT resource_id, principal_type, principal_id, permission
+                    FROM access_grant
+                    WHERE resource_type = :resource_type
+                """),
+                {"resource_type": resource_type}
+            )
+            rows = result.fetchall()
+        except Exception:
+            continue
+
+        # Group by resource_id and reconstruct JSON structure
+        resource_grants = {}
+        for row in rows:
+            resource_id = row[0]
+            principal_type = row[1]
+            principal_id = row[2]
+            permission = row[3]
+
+            if resource_id not in resource_grants:
+                resource_grants[resource_id] = {
+                    "is_public": False,
+                    "read": {"group_ids": [], "user_ids": []},
+                    "write": {"group_ids": [], "user_ids": []},
+                }
+
+            # Handle public access (user:* for read)
+            if principal_type == "user" and principal_id == "*" and permission == "read":
+                resource_grants[resource_id]["is_public"] = True
+                continue
+
+            # Add to appropriate list
+            if permission in ["read", "write"]:
+                if principal_type == "group":
+                    if principal_id not in resource_grants[resource_id][permission]["group_ids"]:
+                        resource_grants[resource_id][permission]["group_ids"].append(principal_id)
+                elif principal_type == "user":
+                    if principal_id not in resource_grants[resource_id][permission]["user_ids"]:
+                        resource_grants[resource_id][permission]["user_ids"].append(principal_id)
+
+        # Step 3: Update each resource with reconstructed JSON
+        for resource_id, grants in resource_grants.items():
+            if grants["is_public"]:
+                # Public = NULL
+                access_control_value = None
+            elif (not grants["read"]["group_ids"] and not grants["read"]["user_ids"] and
+                  not grants["write"]["group_ids"] and not grants["write"]["user_ids"]):
+                # No grants = should not happen (would mean no entries), default to {}
+                access_control_value = json.dumps({})
+            else:
+                # Custom permissions
+                access_control_value = json.dumps({
+                    "read": grants["read"],
+                    "write": grants["write"],
+                })
+
+            try:
+                conn.execute(
+                    sa.text(f'UPDATE "{table_name}" SET access_control = :access_control WHERE id = :id'),
+                    {"access_control": access_control_value, "id": resource_id}
+                )
+            except Exception:
+                pass
+
+        # Step 4: Set all resources WITHOUT entries to private
+        # For files: NULL means private (owner-only), so leave as NULL
+        # For other resources: {} means private, so update to {}
+        if resource_type != "file":
+            try:
+                conn.execute(
+                    sa.text(f'''
+                        UPDATE "{table_name}" 
+                        SET access_control = :private_value
+                        WHERE id NOT IN (
+                            SELECT DISTINCT resource_id FROM access_grant WHERE resource_type = :resource_type
+                        )
+                        AND access_control IS NULL
+                    '''),
+                    {"private_value": json.dumps({}), "resource_type": resource_type}
+                )
+            except Exception:
+                pass
+        # For files, NULL stays NULL - no action needed
+
+    # Step 5: Drop the access_grant table
+    op.drop_index("idx_access_grant_principal", table_name="access_grant")
+    op.drop_index("idx_access_grant_resource", table_name="access_grant")
+    op.drop_table("access_grant")

From 48522271586a5bf24b649610f03b4ffd8afb2782 Mon Sep 17 00:00:00 2001
From: Tim Baek <tim@openwebui.com>
Date: Sun, 8 Feb 2026 06:22:56 +0400
Subject: [PATCH 19/42] refac

---
 backend/open_webui/main.py                    | 16 +++++++
 backend/open_webui/routers/tasks.py           | 15 ++++++
 backend/open_webui/tasks.py                   | 15 ++++++
 src/lib/apis/tasks/index.ts                   | 14 ++++++
 src/lib/components/layout/Sidebar.svelte      | 46 +++++++++++++++++--
 .../components/layout/Sidebar/ChatItem.svelte | 18 ++++++--
 .../layout/Sidebar/RecursiveFolder.svelte     |  2 +-
 src/lib/stores/index.ts                       |  1 +
 8 files changed, 119 insertions(+), 8 deletions(-)
 create mode 100644 src/lib/apis/tasks/index.ts

diff --git a/backend/open_webui/main.py b/backend/open_webui/main.py
index 2d0aeecf1d..5fab6990d3 100644
--- a/backend/open_webui/main.py
+++ b/backend/open_webui/main.py
@@ -1804,6 +1804,16 @@ async def chat_completion(
             except Exception as e:
                 log.debug(f"Error cleaning up: {e}")
                 pass
+            # Emit chat:active=false when task completes
+            try:
+                if metadata.get("chat_id"):
+                    event_emitter = get_event_emitter(metadata, update_db=False)
+                    if event_emitter:
+                        await event_emitter(
+                            {"type": "chat:active", "data": {"active": False}}
+                        )
+            except Exception as e:
+                log.debug(f"Error emitting chat:active: {e}")
 
     if (
         metadata.get("session_id")
@@ -1816,6 +1826,12 @@ async def chat_completion(
             process_chat(request, form_data, user, metadata, model),
             id=metadata["chat_id"],
         )
+        # Emit chat:active=true when task starts
+        event_emitter = get_event_emitter(metadata, update_db=False)
+        if event_emitter:
+            await event_emitter(
+                {"type": "chat:active", "data": {"active": True}}
+            )
         return {"status": True, "task_id": task_id}
     else:
         return await process_chat(request, form_data, user, metadata, model)
diff --git a/backend/open_webui/routers/tasks.py b/backend/open_webui/routers/tasks.py
index 37a80e2ce0..a89e28d3af 100644
--- a/backend/open_webui/routers/tasks.py
+++ b/backend/open_webui/routers/tasks.py
@@ -49,6 +49,21 @@ router = APIRouter()
 ##################################
 
 
+class ActiveChatsForm(BaseModel):
+    chat_ids: list[str]
+
+
+@router.post("/active/chats")
+async def check_active_chats(
+    request: Request, form_data: ActiveChatsForm, user=Depends(get_verified_user)
+):
+    """Check which chat IDs have active tasks."""
+    from open_webui.tasks import get_active_chat_ids
+
+    active = await get_active_chat_ids(request.app.state.redis, form_data.chat_ids)
+    return {"active_chat_ids": active}
+
+
 @router.get("/config")
 async def get_task_config(request: Request, user=Depends(get_verified_user)):
     return {
diff --git a/backend/open_webui/tasks.py b/backend/open_webui/tasks.py
index d83226ffb7..cc91cde1a0 100644
--- a/backend/open_webui/tasks.py
+++ b/backend/open_webui/tasks.py
@@ -183,3 +183,18 @@ async def stop_item_tasks(redis: Redis, item_id: str):
             return result  # Return the first failure
 
     return {"status": True, "message": f"All tasks for item {item_id} stopped."}
+
+
+async def has_active_tasks(redis, chat_id: str) -> bool:
+    """Check if a chat has any active tasks."""
+    task_ids = await list_task_ids_by_item_id(redis, chat_id)
+    return len(task_ids) > 0
+
+
+async def get_active_chat_ids(redis, chat_ids: List[str]) -> List[str]:
+    """Filter a list of chat_ids to only those with active tasks."""
+    active = []
+    for chat_id in chat_ids:
+        if await has_active_tasks(redis, chat_id):
+            active.append(chat_id)
+    return active
diff --git a/src/lib/apis/tasks/index.ts b/src/lib/apis/tasks/index.ts
new file mode 100644
index 0000000000..83299b843b
--- /dev/null
+++ b/src/lib/apis/tasks/index.ts
@@ -0,0 +1,14 @@
+import { WEBUI_API_BASE_URL } from '$lib/constants';
+
+export const checkActiveChats = async (token: string, chatIds: string[]) => {
+    const res = await fetch(`${WEBUI_API_BASE_URL}/tasks/active/chats`, {
+        method: 'POST',
+        headers: {
+            'Content-Type': 'application/json',
+            Authorization: `Bearer ${token}`
+        },
+        body: JSON.stringify({ chat_ids: chatIds })
+    });
+    if (!res.ok) throw await res.json();
+    return res.json();
+};
diff --git a/src/lib/components/layout/Sidebar.svelte b/src/lib/components/layout/Sidebar.svelte
index 5a92d991ba..5c78145fe7 100644
--- a/src/lib/components/layout/Sidebar.svelte
+++ b/src/lib/components/layout/Sidebar.svelte
@@ -26,7 +26,8 @@
 		models,
 		selectedFolder,
 		WEBUI_NAME,
-		sidebarWidth
+		sidebarWidth,
+		activeChatIds
 	} from '$lib/stores';
 	import { onMount, getContext, tick, onDestroy } from 'svelte';
 
@@ -42,6 +43,7 @@
 		importChats
 	} from '$lib/apis/chats';
 	import { createNewFolder, getFolders, updateFolderParentIdById } from '$lib/apis/folders';
+	import { checkActiveChats } from '$lib/apis/tasks';
 	import { WEBUI_API_BASE_URL, WEBUI_BASE_URL } from '$lib/constants';
 
 	import ArchivedChatsModal from './ArchivedChatsModal.svelte';
@@ -469,6 +471,17 @@
 						await initChannels();
 					}
 					await initChatList();
+
+					// Check which chats have active tasks
+					const allChatIds = [...$chats.map((c) => c.id), ...$pinnedChats.map((c) => c.id)];
+					if (allChatIds.length > 0) {
+						try {
+							const res = await checkActiveChats(localStorage.token, allChatIds);
+							activeChatIds.set(new Set(res.active_chat_ids || []));
+						} catch (e) {
+							console.debug('Failed to check active chats:', e);
+						}
+					}
 				}
 			}),
 			settings.subscribe((value) => {
@@ -493,8 +506,32 @@
 		dropZone?.addEventListener('dragover', onDragOver);
 		dropZone?.addEventListener('drop', onDrop);
 		dropZone?.addEventListener('dragleave', onDragLeave);
+
+		// Listen for real-time chat:active events via the events channel
+		$socket?.off('events', chatActiveEventHandler);
+		$socket?.on('events', chatActiveEventHandler);
 	});
 
+	// Handler for chat:active events (defined outside onMount for proper cleanup)
+	const chatActiveEventHandler = (event: {
+		chat_id: string;
+		message_id: string;
+		data: { type: string; data: any };
+	}) => {
+		if (event.data?.type === 'chat:active') {
+			const { active } = event.data.data;
+			activeChatIds.update((ids) => {
+				const newSet = new Set(ids);
+				if (active) {
+					newSet.add(event.chat_id);
+				} else {
+					newSet.delete(event.chat_id);
+				}
+				return newSet;
+			});
+		}
+	};
+
 	onDestroy(() => {
 		if (unsubscribers && unsubscribers.length > 0) {
 			unsubscribers.forEach((unsubscriber) => {
@@ -518,6 +555,9 @@
 		dropZone?.removeEventListener('dragover', onDragOver);
 		dropZone?.removeEventListener('drop', onDrop);
 		dropZone?.removeEventListener('dragleave', onDragLeave);
+
+		// Clean up socket listener
+		$socket?.off('events', chatActiveEventHandler);
 	});
 
 	const newChatHandler = async () => {
@@ -1244,7 +1284,7 @@
 												className=""
 												id={chat.id}
 												title={chat.title}
-												updatedAt={chat.updated_at}
+												createdAt={chat.created_at}
 												{shiftKey}
 												selected={selectedChatId === chat.id}
 												on:select={() => {
@@ -1305,7 +1345,7 @@
 										className=""
 										id={chat.id}
 										title={chat.title}
-										updatedAt={chat.updated_at}
+										createdAt={chat.created_at}
 										{shiftKey}
 										selected={selectedChatId === chat.id}
 										on:select={() => {
diff --git a/src/lib/components/layout/Sidebar/ChatItem.svelte b/src/lib/components/layout/Sidebar/ChatItem.svelte
index f9ec3f9023..427adb1f2f 100644
--- a/src/lib/components/layout/Sidebar/ChatItem.svelte
+++ b/src/lib/components/layout/Sidebar/ChatItem.svelte
@@ -27,7 +27,8 @@
 		showSidebar,
 		currentChatPage,
 		tags,
-		selectedFolder
+		selectedFolder,
+		activeChatIds
 	} from '$lib/stores';
 
 	import ChatMenu from './ChatMenu.svelte';
@@ -41,13 +42,14 @@
 	import XMark from '$lib/components/icons/XMark.svelte';
 	import Document from '$lib/components/icons/Document.svelte';
 	import Sparkles from '$lib/components/icons/Sparkles.svelte';
+	import Spinner from '$lib/components/common/Spinner.svelte';
 	import { generateTitle } from '$lib/apis';
 
 	export let className = '';
 
 	export let id;
 	export let title;
-	export let updatedAt: number | null = null;
+	export let createdAt: number | null = null;
 
 	export let selected = false;
 	export let shiftKey = false;
@@ -73,6 +75,7 @@
 		return '1m';
 	}
 
+
 	let chat = null;
 
 	let mouseOver = false;
@@ -443,6 +446,13 @@
 			on:focus={(e) => {}}
 			draggable="false"
 		>
+			<!-- Loading spinner for active chat (left side) -->
+			{#if $activeChatIds.has(id)}
+				<div class="shrink-0 self-center pr-2">
+					<Spinner className="size-3" />
+				</div>
+			{/if}
+
 			<div class="flex self-center flex-1 w-full min-w-0">
 				<div dir="auto" class="text-left self-center overflow-hidden w-full h-[20px] truncate">
 					{title}
@@ -450,9 +460,9 @@
 			</div>
 
 			<!-- Time ago indicator -->
-			{#if updatedAt && !mouseOver}
+			{#if createdAt && !mouseOver}
 				<div class="shrink-0 self-center text-[10px] text-gray-400 dark:text-gray-500 pl-2">
-					{formatTimeAgo(updatedAt)}
+					{formatTimeAgo(createdAt)}
 				</div>
 			{/if}
 		</a>
diff --git a/src/lib/components/layout/Sidebar/RecursiveFolder.svelte b/src/lib/components/layout/Sidebar/RecursiveFolder.svelte
index fc5a3f061a..f800cfe9ba 100644
--- a/src/lib/components/layout/Sidebar/RecursiveFolder.svelte
+++ b/src/lib/components/layout/Sidebar/RecursiveFolder.svelte
@@ -643,7 +643,7 @@
 						<ChatItem
 							id={chat.id}
 							title={chat.title}
-							updatedAt={chat.updated_at}
+							createdAt={chat.created_at}
 							{shiftKey}
 							on:change={(e) => {
 								dispatch('change', e.detail);
diff --git a/src/lib/stores/index.ts b/src/lib/stores/index.ts
index 5475480194..3fbc001f01 100644
--- a/src/lib/stores/index.ts
+++ b/src/lib/stores/index.ts
@@ -27,6 +27,7 @@ export const mobile = writable(false);
 
 export const socket: Writable<null | Socket> = writable(null);
 export const activeUserIds: Writable<null | string[]> = writable(null);
+export const activeChatIds: Writable<Set<string>> = writable(new Set());
 export const USAGE_POOL: Writable<null | string[]> = writable(null);
 
 export const theme = writable('system');

From c3fa0f30fe0c3cd4291fecd15ec9b6f32a9283a5 Mon Sep 17 00:00:00 2001
From: Tim Baek <tim@openwebui.com>
Date: Sun, 8 Feb 2026 06:45:01 +0400
Subject: [PATCH 20/42] refac

---
 src/lib/components/chat/Tags.svelte           |  2 ++
 src/lib/components/common/Tags.svelte         | 30 +++++++++++--------
 .../components/common/Tags/TagInput.svelte    |  5 +++-
 src/lib/components/common/Tags/TagItem.svelte | 29 +++++++++++-------
 src/lib/components/common/Tags/TagList.svelte |  2 ++
 .../workspace/Prompts/PromptEditor.svelte     |  1 +
 6 files changed, 45 insertions(+), 24 deletions(-)

diff --git a/src/lib/components/chat/Tags.svelte b/src/lib/components/chat/Tags.svelte
index 7b330146a7..8580088686 100644
--- a/src/lib/components/chat/Tags.svelte
+++ b/src/lib/components/chat/Tags.svelte
@@ -23,6 +23,7 @@
 	import { toast } from 'svelte-sonner';
 
 	export let chatId = '';
+	export let disabled = false;
 	let tags = [];
 
 	const getTags = async () => {
@@ -73,6 +74,7 @@
 
 <Tags
 	{tags}
+	{disabled}
 	suggestionTags={$_tags ?? []}
 	on:delete={(e) => {
 		deleteTag(e.detail);
diff --git a/src/lib/components/common/Tags.svelte b/src/lib/components/common/Tags.svelte
index 3bdaca41cc..65340f3320 100644
--- a/src/lib/components/common/Tags.svelte
+++ b/src/lib/components/common/Tags.svelte
@@ -7,6 +7,7 @@
 
 	export let tags = [];
 	export let suggestionTags = [];
+	export let disabled = false;
 
 	let inputValue = '';
 
@@ -22,22 +23,25 @@
 <div class="flex flex-wrap items-center gap-1 w-full">
 	<TagList
 		{tags}
+		{disabled}
 		on:delete={(e) => {
 			dispatch('delete', e.detail);
 		}}
 	/>
 
-	<input
-		bind:value={inputValue}
-		class="flex-1 min-w-24 {tags.length > 0
-			? 'px-0.5'
-			: ''} text-xs bg-transparent outline-hidden placeholder:text-gray-400 dark:placeholder:text-gray-500"
-		placeholder={$i18n.t('Add a tag...')}
-		on:keydown={(event) => {
-			if (event.key === 'Enter' || event.key === ' ') {
-				event.preventDefault();
-				addTag();
-			}
-		}}
-	/>
+	{#if !disabled}
+		<input
+			bind:value={inputValue}
+			class="flex-1 min-w-24 {tags.length > 0
+				? 'px-0.5'
+				: ''} text-xs bg-transparent outline-hidden placeholder:text-gray-400 dark:placeholder:text-gray-500"
+			placeholder={$i18n.t('Add a tag...')}
+			on:keydown={(event) => {
+				if (event.key === 'Enter' || event.key === ' ') {
+					event.preventDefault();
+					addTag();
+				}
+			}}
+		/>
+	{/if}
 </div>
diff --git a/src/lib/components/common/Tags/TagInput.svelte b/src/lib/components/common/Tags/TagInput.svelte
index 9388b4cbe9..8b8f4d019d 100644
--- a/src/lib/components/common/Tags/TagInput.svelte
+++ b/src/lib/components/common/Tags/TagInput.svelte
@@ -5,6 +5,7 @@
 	const i18n = getContext('i18n');
 
 	export let suggestionTags = [];
+	export let disabled = false;
 
 	let tagName = '';
 	let showInput = false;
@@ -30,7 +31,9 @@
 	};
 </script>
 
-{#if showInput}
+{#if disabled}
+	<!-- hidden when disabled -->
+{:else if showInput}
 	<div class="flex items-center gap-2 px-3 py-1.5 rounded-lg bg-gray-200/80 dark:bg-gray-700">
 		<span class="text-gray-500 dark:text-blue-400">+</span>
 		<input
diff --git a/src/lib/components/common/Tags/TagItem.svelte b/src/lib/components/common/Tags/TagItem.svelte
index c17d87edf6..768b2334b7 100644
--- a/src/lib/components/common/Tags/TagItem.svelte
+++ b/src/lib/components/common/Tags/TagItem.svelte
@@ -6,18 +6,27 @@
 	import XMark from '$lib/components/icons/XMark.svelte';
 
 	export let tag;
+	export let disabled = false;
 	export let onDelete = () => {};
 </script>
 
 {#if tag}
-	<button
-		type="button"
-		class="flex items-center gap-1 px-1.5 py-[1px] rounded-full bg-gray-100/50 dark:bg-gray-800/50 border border-gray-100 dark:border-gray-800 text-gray-600 dark:text-gray-300 text-xs font-medium hover:bg-gray-100 dark:hover:bg-gray-800 transition-colors"
-		on:click={() => {
-			onDelete();
-		}}
-	>
-		<span class="line-clamp-1">{tag.name}</span>
-		<XMark className="size-3" strokeWidth="2.5" />
-	</button>
+	{#if disabled}
+		<span
+			class="flex items-center gap-1 px-1.5 py-[1px] rounded-full bg-gray-100/50 dark:bg-gray-800/50 border border-gray-100 dark:border-gray-800 text-gray-600 dark:text-gray-300 text-xs font-medium"
+		>
+			<span class="line-clamp-1">{tag.name}</span>
+		</span>
+	{:else}
+		<button
+			type="button"
+			class="flex items-center gap-1 px-1.5 py-[1px] rounded-full bg-gray-100/50 dark:bg-gray-800/50 border border-gray-100 dark:border-gray-800 text-gray-600 dark:text-gray-300 text-xs font-medium hover:bg-gray-100 dark:hover:bg-gray-800 transition-colors"
+			on:click={() => {
+				onDelete();
+			}}
+		>
+			<span class="line-clamp-1">{tag.name}</span>
+			<XMark className="size-3" strokeWidth="2.5" />
+		</button>
+	{/if}
 {/if}
diff --git a/src/lib/components/common/Tags/TagList.svelte b/src/lib/components/common/Tags/TagList.svelte
index 9631b08d6b..49c48d80c8 100644
--- a/src/lib/components/common/Tags/TagList.svelte
+++ b/src/lib/components/common/Tags/TagList.svelte
@@ -7,11 +7,13 @@
 	const dispatch = createEventDispatcher();
 
 	export let tags = [];
+	export let disabled = false;
 </script>
 
 {#each tags as tag}
 	<TagItem
 		{tag}
+		{disabled}
 		onDelete={() => {
 			dispatch('delete', tag.name);
 		}}
diff --git a/src/lib/components/workspace/Prompts/PromptEditor.svelte b/src/lib/components/workspace/Prompts/PromptEditor.svelte
index 6f251f36c7..7f24bac728 100644
--- a/src/lib/components/workspace/Prompts/PromptEditor.svelte
+++ b/src/lib/components/workspace/Prompts/PromptEditor.svelte
@@ -435,6 +435,7 @@
 			<div class="flex-1 min-w-0">
 				<Tags
 					{tags}
+					{disabled}
 					{suggestionTags}
 					on:add={(e) => {
 						tags = [...tags, { name: e.detail }];

From fd97ae9bd7f00cac19366d1779577cd044e1f2a8 Mon Sep 17 00:00:00 2001
From: Tim Baek <tim@openwebui.com>
Date: Sun, 8 Feb 2026 06:48:41 +0400
Subject: [PATCH 21/42] refac

---
 src/lib/components/NotificationToast.svelte | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/lib/components/NotificationToast.svelte b/src/lib/components/NotificationToast.svelte
index 3eb6a17d08..d232009b21 100644
--- a/src/lib/components/NotificationToast.svelte
+++ b/src/lib/components/NotificationToast.svelte
@@ -98,7 +98,7 @@
 	<!-- Close button (visible on hover) -->
 	<button
 		bind:this={closeButtonElement}
-		class="absolute -top-0.5 -left-0.5 p-0.5 rounded-full opacity-0 group-hover:opacity-100 bg-gray-200 dark:bg-gray-700 hover:bg-gray-300 dark:hover:bg-gray-600 text-gray-500 dark:text-gray-400 hover:text-gray-700 dark:hover:text-gray-200 transition-opacity z-10"
+		class="absolute -top-0.5 -left-0.5 p-0.5 rounded-full opacity-0 group-hover:opacity-100 bg-gray-50 dark:bg-gray-800 hover:bg-gray-100 dark:hover:bg-gray-700 text-gray-500 dark:text-gray-400 hover:text-gray-700 dark:hover:text-gray-200 transition-opacity z-10"
 		on:click|stopPropagation={closeHandler}
 		aria-label="Dismiss notification"
 	>

From 26460917c42aadf995a6b0fae553500bf0cd8358 Mon Sep 17 00:00:00 2001
From: Tim Baek <tim@openwebui.com>
Date: Sun, 8 Feb 2026 07:20:28 +0400
Subject: [PATCH 22/42] refac

---
 src/lib/components/admin/Users/Groups/GroupItem.svelte | 4 ----
 1 file changed, 4 deletions(-)

diff --git a/src/lib/components/admin/Users/Groups/GroupItem.svelte b/src/lib/components/admin/Users/Groups/GroupItem.svelte
index 8d4a761529..944e824d1c 100644
--- a/src/lib/components/admin/Users/Groups/GroupItem.svelte
+++ b/src/lib/components/admin/Users/Groups/GroupItem.svelte
@@ -9,7 +9,6 @@
 
 	import Pencil from '$lib/components/icons/Pencil.svelte';
 	import User from '$lib/components/icons/User.svelte';
-	import UserCircleSolid from '$lib/components/icons/UserCircleSolid.svelte';
 	import EditGroupModal from './EditGroupModal.svelte';
 
 	export let group = {
@@ -70,9 +69,6 @@
 	}}
 >
 	<div class="flex items-center gap-1.5 w-full font-medium flex-1">
-		<div>
-			<UserCircleSolid className="size-4" />
-		</div>
 		<div class="line-clamp-1">
 			{group.name}
 		</div>

From d193c143a5b20bde113880973fcb288ff9188cad Mon Sep 17 00:00:00 2001
From: Timothy Jaeryang Baek <tim@openwebui.com>
Date: Sun, 8 Feb 2026 21:18:38 -0600
Subject: [PATCH 23/42] refac

---
 backend/open_webui/functions.py | 1 -
 backend/open_webui/main.py      | 1 -
 2 files changed, 2 deletions(-)

diff --git a/backend/open_webui/functions.py b/backend/open_webui/functions.py
index e1604d126a..5381daf0cc 100644
--- a/backend/open_webui/functions.py
+++ b/backend/open_webui/functions.py
@@ -35,7 +35,6 @@ from open_webui.utils.plugin import (
     get_function_module_from_cache,
 )
 from open_webui.utils.tools import get_tools
-from open_webui.utils.access_control import has_access
 
 from open_webui.env import GLOBAL_LOG_LEVEL
 
diff --git a/backend/open_webui/main.py b/backend/open_webui/main.py
index d505e77f3c..9da1a6b7e8 100644
--- a/backend/open_webui/main.py
+++ b/backend/open_webui/main.py
@@ -516,7 +516,6 @@ from open_webui.utils.middleware import (
     process_chat_payload,
     process_chat_response,
 )
-from open_webui.utils.access_control import has_access
 
 from open_webui.utils.auth import (
     get_license_data,

From 42763cbbd8bdebc0b7a068c8f5f6eff166685b65 Mon Sep 17 00:00:00 2001
From: Timothy Jaeryang Baek <tim@openwebui.com>
Date: Sun, 8 Feb 2026 21:21:25 -0600
Subject: [PATCH 24/42] enh: access grants table

---
 backend/open_webui/models/access_grants.py | 776 +++++++++++++++++++++
 1 file changed, 776 insertions(+)
 create mode 100644 backend/open_webui/models/access_grants.py

diff --git a/backend/open_webui/models/access_grants.py b/backend/open_webui/models/access_grants.py
new file mode 100644
index 0000000000..aac475f3e1
--- /dev/null
+++ b/backend/open_webui/models/access_grants.py
@@ -0,0 +1,776 @@
+import logging
+import time
+import uuid
+from typing import Optional
+
+from sqlalchemy.orm import Session
+from open_webui.internal.db import Base, get_db_context
+
+from pydantic import BaseModel, ConfigDict
+from sqlalchemy import BigInteger, Column, Text, UniqueConstraint, or_, and_
+from sqlalchemy.dialects.postgresql import JSONB
+
+log = logging.getLogger(__name__)
+
+
+####################
+# AccessGrant DB Schema
+####################
+
+
+class AccessGrant(Base):
+    __tablename__ = "access_grant"
+
+    id = Column(Text, primary_key=True)
+    resource_type = Column(Text, nullable=False)  # "knowledge", "model", "prompt", "tool", "note", "channel", "file"
+    resource_id = Column(Text, nullable=False)
+    principal_type = Column(Text, nullable=False)  # "user" or "group"
+    principal_id = Column(Text, nullable=False)  # user_id, group_id, or "*" (wildcard for public)
+    permission = Column(Text, nullable=False)  # "read" or "write"
+    created_at = Column(BigInteger, nullable=False)
+
+    __table_args__ = (
+        UniqueConstraint(
+            "resource_type",
+            "resource_id",
+            "principal_type",
+            "principal_id",
+            "permission",
+            name="uq_access_grant_grant",
+        ),
+    )
+
+
+class AccessGrantModel(BaseModel):
+    model_config = ConfigDict(from_attributes=True)
+
+    id: str
+    resource_type: str
+    resource_id: str
+    principal_type: str
+    principal_id: str
+    permission: str
+    created_at: int
+
+
+class AccessGrantResponse(BaseModel):
+    """Slim grant model for API responses — resource context is implicit from the parent."""
+
+    id: str
+    principal_type: str
+    principal_id: str
+    permission: str
+
+    @classmethod
+    def from_grant(cls, grant: "AccessGrantModel") -> "AccessGrantResponse":
+        return cls(
+            id=grant.id,
+            principal_type=grant.principal_type,
+            principal_id=grant.principal_id,
+            permission=grant.permission,
+        )
+
+
+####################
+# Conversion utilities
+####################
+
+
+def access_control_to_grants(
+    resource_type: str,
+    resource_id: str,
+    access_control: Optional[dict],
+) -> list[dict]:
+    """
+    Convert an old-style access_control JSON dict to a flat list of grant dicts.
+
+    Semantics:
+    - None  → public read (user:* read) — except files which are private
+    - {}    → private/owner-only (no grants)
+    - {read: {group_ids, user_ids}, write: {group_ids, user_ids}} → specific grants
+
+    Returns a list of dicts with keys: resource_type, resource_id, principal_type, principal_id, permission
+    """
+    grants = []
+
+    if access_control is None:
+        # NULL → public read (user:* for read)
+        # Exception: files with NULL are private (owner-only), no grants needed
+        if resource_type != "file":
+            grants.append(
+                {
+                    "resource_type": resource_type,
+                    "resource_id": resource_id,
+                    "principal_type": "user",
+                    "principal_id": "*",
+                    "permission": "read",
+                }
+            )
+        return grants
+
+    # {} → private/owner-only, no grants
+    if not access_control:
+        return grants
+
+    # Parse structured permissions
+    for permission in ["read", "write"]:
+        perm_data = access_control.get(permission, {})
+        if not perm_data:
+            continue
+
+        for group_id in perm_data.get("group_ids", []):
+            grants.append(
+                {
+                    "resource_type": resource_type,
+                    "resource_id": resource_id,
+                    "principal_type": "group",
+                    "principal_id": group_id,
+                    "permission": permission,
+                }
+            )
+
+        for user_id in perm_data.get("user_ids", []):
+            grants.append(
+                {
+                    "resource_type": resource_type,
+                    "resource_id": resource_id,
+                    "principal_type": "user",
+                    "principal_id": user_id,
+                    "permission": permission,
+                }
+            )
+
+    return grants
+
+
+def normalize_access_grants(access_grants: Optional[list]) -> list[dict]:
+    """
+    Normalize direct access_grants payloads from API forms.
+
+    Keeps only valid grants and removes duplicates by
+    (principal_type, principal_id, permission).
+    """
+    if not access_grants:
+        return []
+
+    deduped = {}
+    for grant in access_grants:
+        if isinstance(grant, BaseModel):
+            grant = grant.model_dump()
+        if not isinstance(grant, dict):
+            continue
+
+        principal_type = grant.get("principal_type")
+        principal_id = grant.get("principal_id")
+        permission = grant.get("permission")
+
+        if principal_type not in ("user", "group"):
+            continue
+        if permission not in ("read", "write"):
+            continue
+        if not isinstance(principal_id, str) or not principal_id:
+            continue
+
+        key = (principal_type, principal_id, permission)
+        deduped[key] = {
+            "id": grant.get("id")
+            if isinstance(grant.get("id"), str) and grant.get("id")
+            else str(uuid.uuid4()),
+            "principal_type": principal_type,
+            "principal_id": principal_id,
+            "permission": permission,
+        }
+
+    return list(deduped.values())
+
+
+def has_public_read_access_grant(access_grants: Optional[list]) -> bool:
+    """
+    Returns True when a direct grant list includes wildcard public-read.
+    """
+    for grant in normalize_access_grants(access_grants):
+        if (
+            grant["principal_type"] == "user"
+            and grant["principal_id"] == "*"
+            and grant["permission"] == "read"
+        ):
+            return True
+    return False
+
+
+def grants_to_access_control(grants: list) -> Optional[dict]:
+    """
+    Convert a list of grant objects (AccessGrantModel or AccessGrantResponse)
+    back to the old-style access_control JSON dict for backward compatibility.
+
+    Semantics:
+    - [] (empty) → {} (private/owner-only)
+    - Contains user:*:read → None (public), but write grants are preserved
+    - Otherwise → {read: {group_ids, user_ids}, write: {group_ids, user_ids}}
+
+    Note: "public" (user:*:read) still allows additional write permissions
+    to coexist.  When the wildcard read is present the function returns None
+    for the legacy dict, so callers that need write info should inspect the
+    grants list directly.
+    """
+    if not grants:
+        return {}  # No grants = private/owner-only
+
+    result = {
+        "read": {"group_ids": [], "user_ids": []},
+        "write": {"group_ids": [], "user_ids": []},
+    }
+
+    is_public = False
+    for grant in grants:
+        if (
+            grant.principal_type == "user"
+            and grant.principal_id == "*"
+            and grant.permission == "read"
+        ):
+            is_public = True
+            continue  # Don't add wildcard to user_ids list
+
+        if grant.permission not in ("read", "write"):
+            continue
+
+        if grant.principal_type == "group":
+            if grant.principal_id not in result[grant.permission]["group_ids"]:
+                result[grant.permission]["group_ids"].append(grant.principal_id)
+        elif grant.principal_type == "user":
+            if grant.principal_id not in result[grant.permission]["user_ids"]:
+                result[grant.permission]["user_ids"].append(grant.principal_id)
+
+    if is_public:
+        return None  # Public read access
+
+    return result
+
+
+####################
+# Table Operations
+####################
+
+
+class AccessGrantsTable:
+    def grant_access(
+        self,
+        resource_type: str,
+        resource_id: str,
+        principal_type: str,
+        principal_id: str,
+        permission: str,
+        db: Optional[Session] = None,
+    ) -> Optional[AccessGrantModel]:
+        """Add a single access grant. Idempotent (ignores duplicates)."""
+        with get_db_context(db) as db:
+            # Check for existing grant
+            existing = (
+                db.query(AccessGrant)
+                .filter_by(
+                    resource_type=resource_type,
+                    resource_id=resource_id,
+                    principal_type=principal_type,
+                    principal_id=principal_id,
+                    permission=permission,
+                )
+                .first()
+            )
+            if existing:
+                return AccessGrantModel.model_validate(existing)
+
+            grant = AccessGrant(
+                id=str(uuid.uuid4()),
+                resource_type=resource_type,
+                resource_id=resource_id,
+                principal_type=principal_type,
+                principal_id=principal_id,
+                permission=permission,
+                created_at=int(time.time()),
+            )
+            db.add(grant)
+            db.commit()
+            db.refresh(grant)
+            return AccessGrantModel.model_validate(grant)
+
+    def revoke_access(
+        self,
+        resource_type: str,
+        resource_id: str,
+        principal_type: str,
+        principal_id: str,
+        permission: str,
+        db: Optional[Session] = None,
+    ) -> bool:
+        """Remove a single access grant."""
+        with get_db_context(db) as db:
+            deleted = (
+                db.query(AccessGrant)
+                .filter_by(
+                    resource_type=resource_type,
+                    resource_id=resource_id,
+                    principal_type=principal_type,
+                    principal_id=principal_id,
+                    permission=permission,
+                )
+                .delete()
+            )
+            db.commit()
+            return deleted > 0
+
+    def revoke_all_access(
+        self,
+        resource_type: str,
+        resource_id: str,
+        db: Optional[Session] = None,
+    ) -> int:
+        """Remove all access grants for a resource."""
+        with get_db_context(db) as db:
+            deleted = (
+                db.query(AccessGrant)
+                .filter_by(
+                    resource_type=resource_type,
+                    resource_id=resource_id,
+                )
+                .delete()
+            )
+            db.commit()
+            return deleted
+
+    def set_access_control(
+        self,
+        resource_type: str,
+        resource_id: str,
+        access_control: Optional[dict],
+        db: Optional[Session] = None,
+    ) -> list[AccessGrantModel]:
+        """
+        Replace all grants for a resource from an access_control JSON dict.
+        This is the primary bridge for backward compat with the frontend.
+        """
+        with get_db_context(db) as db:
+            # Delete all existing grants for this resource
+            db.query(AccessGrant).filter_by(
+                resource_type=resource_type,
+                resource_id=resource_id,
+            ).delete()
+
+            # Convert JSON to grant dicts
+            grant_dicts = access_control_to_grants(
+                resource_type, resource_id, access_control
+            )
+
+            # Insert new grants
+            results = []
+            for grant_dict in grant_dicts:
+                grant = AccessGrant(
+                    id=str(uuid.uuid4()),
+                    **grant_dict,
+                    created_at=int(time.time()),
+                )
+                db.add(grant)
+                results.append(grant)
+
+            db.commit()
+
+            return [AccessGrantModel.model_validate(g) for g in results]
+
+    def set_access_grants(
+        self,
+        resource_type: str,
+        resource_id: str,
+        access_grants: Optional[list],
+        db: Optional[Session] = None,
+    ) -> list[AccessGrantModel]:
+        """
+        Replace all grants for a resource from a direct access_grants list.
+        """
+        with get_db_context(db) as db:
+            db.query(AccessGrant).filter_by(
+                resource_type=resource_type,
+                resource_id=resource_id,
+            ).delete()
+
+            normalized_grants = normalize_access_grants(access_grants)
+
+            results = []
+            for grant_dict in normalized_grants:
+                grant = AccessGrant(
+                    id=grant_dict["id"],
+                    resource_type=resource_type,
+                    resource_id=resource_id,
+                    principal_type=grant_dict["principal_type"],
+                    principal_id=grant_dict["principal_id"],
+                    permission=grant_dict["permission"],
+                    created_at=int(time.time()),
+                )
+                db.add(grant)
+                results.append(grant)
+
+            db.commit()
+            return [AccessGrantModel.model_validate(g) for g in results]
+
+    def get_access_control(
+        self,
+        resource_type: str,
+        resource_id: str,
+        db: Optional[Session] = None,
+    ) -> Optional[dict]:
+        """
+        Reconstruct the old-style access_control JSON dict from grants.
+        For backward compat with the frontend.
+        """
+        with get_db_context(db) as db:
+            grants = (
+                db.query(AccessGrant)
+                .filter_by(
+                    resource_type=resource_type,
+                    resource_id=resource_id,
+                )
+                .all()
+            )
+            grant_models = [AccessGrantModel.model_validate(g) for g in grants]
+            return grants_to_access_control(grant_models)
+
+    def get_grants_by_resource(
+        self,
+        resource_type: str,
+        resource_id: str,
+        db: Optional[Session] = None,
+    ) -> list[AccessGrantModel]:
+        """Get all grants for a specific resource."""
+        with get_db_context(db) as db:
+            grants = (
+                db.query(AccessGrant)
+                .filter_by(
+                    resource_type=resource_type,
+                    resource_id=resource_id,
+                )
+                .all()
+            )
+            return [AccessGrantModel.model_validate(g) for g in grants]
+
+    def has_access(
+        self,
+        user_id: str,
+        resource_type: str,
+        resource_id: str,
+        permission: str = "read",
+        user_group_ids: Optional[set[str]] = None,
+        db: Optional[Session] = None,
+    ) -> bool:
+        """
+        Check if a user has the specified permission on a resource.
+
+        Access is granted if any of the following is true:
+        - There's a grant for user:* (public) with the requested permission
+        - There's a grant for the specific user with the requested permission
+        - There's a grant for any of the user's groups with the requested permission
+        """
+        with get_db_context(db) as db:
+            # Build conditions for matching grants
+            conditions = [
+                # Public access
+                and_(
+                    AccessGrant.principal_type == "user",
+                    AccessGrant.principal_id == "*",
+                ),
+                # Direct user access
+                and_(
+                    AccessGrant.principal_type == "user",
+                    AccessGrant.principal_id == user_id,
+                ),
+            ]
+
+            # Group access
+            if user_group_ids is None:
+                from open_webui.models.groups import Groups
+
+                user_groups = Groups.get_groups_by_member_id(user_id, db=db)
+                user_group_ids = {group.id for group in user_groups}
+
+            if user_group_ids:
+                conditions.append(
+                    and_(
+                        AccessGrant.principal_type == "group",
+                        AccessGrant.principal_id.in_(user_group_ids),
+                    )
+                )
+
+            exists = (
+                db.query(AccessGrant)
+                .filter(
+                    AccessGrant.resource_type == resource_type,
+                    AccessGrant.resource_id == resource_id,
+                    AccessGrant.permission == permission,
+                    or_(*conditions),
+                )
+                .first()
+            )
+            return exists is not None
+
+    def get_users_with_access(
+        self,
+        resource_type: str,
+        resource_id: str,
+        permission: str = "read",
+        db: Optional[Session] = None,
+    ) -> list:
+        """
+        Get all users who have the specified permission on a resource.
+        Returns a list of UserModel instances.
+        """
+        from open_webui.models.users import Users, UserModel
+        from open_webui.models.groups import Groups
+
+        with get_db_context(db) as db:
+            grants = (
+                db.query(AccessGrant)
+                .filter_by(
+                    resource_type=resource_type,
+                    resource_id=resource_id,
+                    permission=permission,
+                )
+                .all()
+            )
+
+            # Check for public access
+            for grant in grants:
+                if grant.principal_type == "user" and grant.principal_id == "*":
+                    result = Users.get_users(filter={"roles": ["!pending"]}, db=db)
+                    return result.get("users", [])
+
+            user_ids_with_access = set()
+
+            for grant in grants:
+                if grant.principal_type == "user":
+                    user_ids_with_access.add(grant.principal_id)
+                elif grant.principal_type == "group":
+                    group_user_ids = Groups.get_group_user_ids_by_id(
+                        grant.principal_id, db=db
+                    )
+                    if group_user_ids:
+                        user_ids_with_access.update(group_user_ids)
+
+            if not user_ids_with_access:
+                return []
+
+            return Users.get_users_by_user_ids(list(user_ids_with_access), db=db)
+
+    def has_permission_filter(
+        self,
+        db,
+        query,
+        DocumentModel,
+        filter: dict,
+        resource_type: str,
+        permission: str = "read",
+    ):
+        """
+        Apply access control filtering to a SQLAlchemy query by JOINing with access_grant.
+
+        This replaces the old JSON-column-based filtering with a proper relational JOIN.
+        """
+        group_ids = filter.get("group_ids", [])
+        user_id = filter.get("user_id")
+
+        if permission == "read_only":
+            return self._has_read_only_permission_filter(
+                db, query, DocumentModel, filter, resource_type
+            )
+
+        # Build principal conditions
+        principal_conditions = []
+
+        if group_ids or user_id:
+            # Public access: user:* read
+            principal_conditions.append(
+                and_(
+                    AccessGrant.principal_type == "user",
+                    AccessGrant.principal_id == "*",
+                )
+            )
+
+        if user_id:
+            # Owner always has access
+            principal_conditions.append(DocumentModel.user_id == user_id)
+
+            # Direct user grant
+            principal_conditions.append(
+                and_(
+                    AccessGrant.principal_type == "user",
+                    AccessGrant.principal_id == user_id,
+                )
+            )
+
+        if group_ids:
+            # Group grants
+            principal_conditions.append(
+                and_(
+                    AccessGrant.principal_type == "group",
+                    AccessGrant.principal_id.in_(group_ids),
+                )
+            )
+
+        if not principal_conditions:
+            return query
+
+        # LEFT JOIN access_grant and filter
+        # We use a subquery approach to avoid duplicates from multiple matching grants
+        from sqlalchemy import exists as sa_exists, select
+
+        grant_exists = (
+            select(AccessGrant.id)
+            .where(
+                AccessGrant.resource_type == resource_type,
+                AccessGrant.resource_id == DocumentModel.id,
+                AccessGrant.permission == permission,
+                or_(
+                    and_(
+                        AccessGrant.principal_type == "user",
+                        AccessGrant.principal_id == "*",
+                    ),
+                    *(
+                        [
+                            and_(
+                                AccessGrant.principal_type == "user",
+                                AccessGrant.principal_id == user_id,
+                            )
+                        ]
+                        if user_id
+                        else []
+                    ),
+                    *(
+                        [
+                            and_(
+                                AccessGrant.principal_type == "group",
+                                AccessGrant.principal_id.in_(group_ids),
+                            )
+                        ]
+                        if group_ids
+                        else []
+                    ),
+                ),
+            )
+            .correlate(DocumentModel)
+            .exists()
+        )
+
+        # Owner OR has a matching grant
+        owner_or_grant = [grant_exists]
+        if user_id:
+            owner_or_grant.append(DocumentModel.user_id == user_id)
+
+        query = query.filter(or_(*owner_or_grant))
+        return query
+
+    def _has_read_only_permission_filter(
+        self,
+        db,
+        query,
+        DocumentModel,
+        filter: dict,
+        resource_type: str,
+    ):
+        """
+        Filter for items where user has read BUT NOT write access.
+        Public items are NOT considered read_only.
+        """
+        group_ids = filter.get("group_ids", [])
+        user_id = filter.get("user_id")
+
+        from sqlalchemy import exists as sa_exists, select
+
+        # Has read grant (not public)
+        read_grant_exists = (
+            select(AccessGrant.id)
+            .where(
+                AccessGrant.resource_type == resource_type,
+                AccessGrant.resource_id == DocumentModel.id,
+                AccessGrant.permission == "read",
+                or_(
+                    *(
+                        [
+                            and_(
+                                AccessGrant.principal_type == "user",
+                                AccessGrant.principal_id == user_id,
+                            )
+                        ]
+                        if user_id
+                        else []
+                    ),
+                    *(
+                        [
+                            and_(
+                                AccessGrant.principal_type == "group",
+                                AccessGrant.principal_id.in_(group_ids),
+                            )
+                        ]
+                        if group_ids
+                        else []
+                    ),
+                ),
+            )
+            .correlate(DocumentModel)
+            .exists()
+        )
+
+        # Does NOT have write grant
+        write_grant_exists = (
+            select(AccessGrant.id)
+            .where(
+                AccessGrant.resource_type == resource_type,
+                AccessGrant.resource_id == DocumentModel.id,
+                AccessGrant.permission == "write",
+                or_(
+                    *(
+                        [
+                            and_(
+                                AccessGrant.principal_type == "user",
+                                AccessGrant.principal_id == user_id,
+                            )
+                        ]
+                        if user_id
+                        else []
+                    ),
+                    *(
+                        [
+                            and_(
+                                AccessGrant.principal_type == "group",
+                                AccessGrant.principal_id.in_(group_ids),
+                            )
+                        ]
+                        if group_ids
+                        else []
+                    ),
+                ),
+            )
+            .correlate(DocumentModel)
+            .exists()
+        )
+
+        # Is NOT public
+        public_grant_exists = (
+            select(AccessGrant.id)
+            .where(
+                AccessGrant.resource_type == resource_type,
+                AccessGrant.resource_id == DocumentModel.id,
+                AccessGrant.permission == "read",
+                AccessGrant.principal_type == "user",
+                AccessGrant.principal_id == "*",
+            )
+            .correlate(DocumentModel)
+            .exists()
+        )
+
+        conditions = [read_grant_exists, ~write_grant_exists, ~public_grant_exists]
+
+        # Not owner
+        if user_id:
+            conditions.append(DocumentModel.user_id != user_id)
+
+        query = query.filter(and_(*conditions))
+        return query
+
+
+AccessGrants = AccessGrantsTable()

From 0f78451c2b66af48f0ef0d6aa86197b79d6c3771 Mon Sep 17 00:00:00 2001
From: Timothy Jaeryang Baek <tim@openwebui.com>
Date: Sun, 8 Feb 2026 21:24:20 -0600
Subject: [PATCH 25/42] refac

---
 backend/open_webui/models/channels.py       | 109 ++++++------
 backend/open_webui/models/files.py          |   5 -
 backend/open_webui/models/knowledge.py      | 125 +++++++++-----
 backend/open_webui/models/models.py         | 159 ++++++++---------
 backend/open_webui/models/notes.py          | 180 +++++---------------
 backend/open_webui/models/prompt_history.py |  50 +++---
 backend/open_webui/models/prompts.py        | 130 ++++++++------
 backend/open_webui/models/tools.py          |  84 ++++-----
 8 files changed, 398 insertions(+), 444 deletions(-)

diff --git a/backend/open_webui/models/channels.py b/backend/open_webui/models/channels.py
index 8e70918e1a..3ff6fb7554 100644
--- a/backend/open_webui/models/channels.py
+++ b/backend/open_webui/models/channels.py
@@ -7,8 +7,12 @@ from typing import Optional
 from sqlalchemy.orm import Session
 from open_webui.internal.db import Base, JSONField, get_db, get_db_context
 from open_webui.models.groups import Groups
+from open_webui.models.access_grants import (
+    AccessGrantModel,
+    AccessGrants,
+)
 
-from pydantic import BaseModel, ConfigDict
+from pydantic import BaseModel, ConfigDict, Field
 from sqlalchemy.dialects.postgresql import JSONB
 
 
@@ -47,7 +51,6 @@ class Channel(Base):
 
     data = Column(JSON, nullable=True)
     meta = Column(JSON, nullable=True)
-    access_control = Column(JSON, nullable=True)
 
     created_at = Column(BigInteger)
 
@@ -76,7 +79,7 @@ class ChannelModel(BaseModel):
 
     data: Optional[dict] = None
     meta: Optional[dict] = None
-    access_control: Optional[dict] = None
+    access_grants: list[AccessGrantModel] = Field(default_factory=list)
 
     created_at: int  # timestamp in epoch (time_ns)
 
@@ -237,7 +240,7 @@ class ChannelForm(BaseModel):
     is_private: Optional[bool] = None
     data: Optional[dict] = None
     meta: Optional[dict] = None
-    access_control: Optional[dict] = None
+    access_grants: Optional[list[dict]] = None
     group_ids: Optional[list[str]] = None
     user_ids: Optional[list[str]] = None
 
@@ -252,6 +255,18 @@ class ChannelWebhookForm(BaseModel):
 
 
 class ChannelTable:
+    def _get_access_grants(
+        self, channel_id: str, db: Optional[Session] = None
+    ) -> list[AccessGrantModel]:
+        return AccessGrants.get_grants_by_resource("channel", channel_id, db=db)
+
+    def _to_channel_model(
+        self, channel: Channel, db: Optional[Session] = None
+    ) -> ChannelModel:
+        channel_data = ChannelModel.model_validate(channel).model_dump(exclude={"access_grants"})
+        access_grants = self._get_access_grants(channel_data["id"], db=db)
+        channel_data["access_grants"] = access_grants
+        return ChannelModel.model_validate(channel_data)
 
     def _collect_unique_user_ids(
         self,
@@ -316,16 +331,17 @@ class ChannelTable:
         with get_db_context(db) as db:
             channel = ChannelModel(
                 **{
-                    **form_data.model_dump(),
+                    **form_data.model_dump(exclude={"access_grants"}),
                     "type": form_data.type if form_data.type else None,
                     "name": form_data.name.lower(),
                     "id": str(uuid.uuid4()),
                     "user_id": user_id,
                     "created_at": int(time.time_ns()),
                     "updated_at": int(time.time_ns()),
+                    "access_grants": [],
                 }
             )
-            new_channel = Channel(**channel.model_dump())
+            new_channel = Channel(**channel.model_dump(exclude={"access_grants"}))
 
             if form_data.type in ["group", "dm"]:
                 users = self._collect_unique_user_ids(
@@ -342,54 +358,25 @@ class ChannelTable:
                 db.add_all(memberships)
             db.add(new_channel)
             db.commit()
-            return channel
+            AccessGrants.set_access_grants(
+                "channel", new_channel.id, form_data.access_grants, db=db
+            )
+            return self._to_channel_model(new_channel, db=db)
 
     def get_channels(self, db: Optional[Session] = None) -> list[ChannelModel]:
         with get_db_context(db) as db:
             channels = db.query(Channel).all()
-            return [ChannelModel.model_validate(channel) for channel in channels]
+            return [self._to_channel_model(channel, db=db) for channel in channels]
 
     def _has_permission(self, db, query, filter: dict, permission: str = "read"):
-        group_ids = filter.get("group_ids", [])
-        user_id = filter.get("user_id")
-
-        dialect_name = db.bind.dialect.name
-
-        # Public access
-        conditions = []
-        if group_ids or user_id:
-            conditions.extend(
-                [
-                    Channel.access_control.is_(None),
-                    cast(Channel.access_control, String) == "null",
-                ]
-            )
-
-        # User-level permission
-        if user_id:
-            conditions.append(Channel.user_id == user_id)
-
-        # Group-level permission
-        if group_ids:
-            group_conditions = []
-            for gid in group_ids:
-                if dialect_name == "sqlite":
-                    group_conditions.append(
-                        Channel.access_control[permission]["group_ids"].contains([gid])
-                    )
-                elif dialect_name == "postgresql":
-                    group_conditions.append(
-                        cast(
-                            Channel.access_control[permission]["group_ids"],
-                            JSONB,
-                        ).contains([gid])
-                    )
-            conditions.append(or_(*group_conditions))
-
-        if conditions:
-            query = query.filter(or_(*conditions))
-
-        return query
+        return AccessGrants.has_permission_filter(
+            db=db,
+            query=query,
+            DocumentModel=Channel,
+            filter=filter,
+            resource_type="channel",
+            permission=permission,
+        )
 
     def get_channels_by_user_id(
         self, user_id: str, db: Optional[Session] = None
@@ -428,7 +415,7 @@ class ChannelTable:
             standard_channels = query.all()
 
             all_channels = membership_channels + standard_channels
-            return [ChannelModel.model_validate(c) for c in all_channels]
+            return [self._to_channel_model(c, db=db) for c in all_channels]
 
     def get_dm_channel_by_user_ids(
         self, user_ids: list[str], db: Optional[Session] = None
@@ -463,7 +450,7 @@ class ChannelTable:
                 .first()
             )
 
-            return ChannelModel.model_validate(channel) if channel else None
+            return self._to_channel_model(channel, db=db) if channel else None
 
     def add_members_to_channel(
         self,
@@ -722,7 +709,7 @@ class ChannelTable:
         try:
             with get_db_context(db) as db:
                 channel = db.query(Channel).filter(Channel.id == id).first()
-                return ChannelModel.model_validate(channel) if channel else None
+                return self._to_channel_model(channel, db=db) if channel else None
         except Exception:
             return None
 
@@ -735,7 +722,7 @@ class ChannelTable:
             )
             channel_ids = [cf.channel_id for cf in channel_files]
             channels = db.query(Channel).filter(Channel.id.in_(channel_ids)).all()
-            return [ChannelModel.model_validate(channel) for channel in channels]
+            return [self._to_channel_model(channel, db=db) for channel in channels]
 
     def get_channels_by_file_id_and_user_id(
         self, file_id: str, user_id: str, db: Optional[Session] = None
@@ -783,7 +770,9 @@ class ChannelTable:
                         .first()
                     )
                     if membership:
-                        allowed_channels.append(ChannelModel.model_validate(channel))
+                        allowed_channels.append(
+                            self._to_channel_model(channel, db=db)
+                        )
                     continue
 
                 # --- Case B: standard channel => rely on ACL permissions ---
@@ -798,7 +787,7 @@ class ChannelTable:
 
                 allowed = query.first()
                 if allowed:
-                    allowed_channels.append(ChannelModel.model_validate(allowed))
+                    allowed_channels.append(self._to_channel_model(allowed, db=db))
 
             return allowed_channels
 
@@ -832,7 +821,7 @@ class ChannelTable:
                     .first()
                 )
                 if membership:
-                    return ChannelModel.model_validate(channel)
+                    return self._to_channel_model(channel, db=db)
                 else:
                     return None
 
@@ -854,7 +843,7 @@ class ChannelTable:
 
             channel_allowed = query.first()
             return (
-                ChannelModel.model_validate(channel_allowed)
+                self._to_channel_model(channel_allowed, db=db)
                 if channel_allowed
                 else None
             )
@@ -874,11 +863,14 @@ class ChannelTable:
             channel.data = form_data.data
             channel.meta = form_data.meta
 
-            channel.access_control = form_data.access_control
+            if form_data.access_grants is not None:
+                AccessGrants.set_access_grants(
+                    "channel", id, form_data.access_grants, db=db
+                )
             channel.updated_at = int(time.time_ns())
 
             db.commit()
-            return ChannelModel.model_validate(channel) if channel else None
+            return self._to_channel_model(channel, db=db) if channel else None
 
     def add_file_to_channel_by_id(
         self, channel_id: str, file_id: str, user_id: str, db: Optional[Session] = None
@@ -947,6 +939,7 @@ class ChannelTable:
 
     def delete_channel_by_id(self, id: str, db: Optional[Session] = None) -> bool:
         with get_db_context(db) as db:
+            AccessGrants.revoke_all_access("channel", id, db=db)
             db.query(Channel).filter(Channel.id == id).delete()
             db.commit()
             return True
diff --git a/backend/open_webui/models/files.py b/backend/open_webui/models/files.py
index c24b242bd8..67f2891605 100644
--- a/backend/open_webui/models/files.py
+++ b/backend/open_webui/models/files.py
@@ -26,8 +26,6 @@ class File(Base):
     data = Column(JSON, nullable=True)
     meta = Column(JSON, nullable=True)
 
-    access_control = Column(JSON, nullable=True)
-
     created_at = Column(BigInteger)
     updated_at = Column(BigInteger)
 
@@ -45,8 +43,6 @@ class FileModel(BaseModel):
     data: Optional[dict] = None
     meta: Optional[dict] = None
 
-    access_control: Optional[dict] = None
-
     created_at: Optional[int]  # timestamp in epoch
     updated_at: Optional[int]  # timestamp in epoch
 
@@ -113,7 +109,6 @@ class FileForm(BaseModel):
     path: str
     data: dict = {}
     meta: dict = {}
-    access_control: Optional[dict] = None
 
 
 class FileUpdateForm(BaseModel):
diff --git a/backend/open_webui/models/knowledge.py b/backend/open_webui/models/knowledge.py
index 81aa4099d9..817cab5caf 100644
--- a/backend/open_webui/models/knowledge.py
+++ b/backend/open_webui/models/knowledge.py
@@ -15,9 +15,10 @@ from open_webui.models.files import (
 )
 from open_webui.models.groups import Groups
 from open_webui.models.users import User, UserModel, Users, UserResponse
+from open_webui.models.access_grants import AccessGrantModel, AccessGrants
 
 
-from pydantic import BaseModel, ConfigDict
+from pydantic import BaseModel, ConfigDict, Field
 from sqlalchemy import (
     BigInteger,
     Column,
@@ -29,9 +30,6 @@ from sqlalchemy import (
     or_,
 )
 
-from open_webui.utils.access_control import has_access
-from open_webui.utils.db.access_control import has_permission
-
 
 log = logging.getLogger(__name__)
 
@@ -50,22 +48,6 @@ class Knowledge(Base):
     description = Column(Text)
 
     meta = Column(JSON, nullable=True)
-    access_control = Column(JSON, nullable=True)  # Controls data access levels.
-    # Defines access control rules for this entry.
-    # - `None`: Public access, available to all users with the "user" role.
-    # - `{}`: Private access, restricted exclusively to the owner.
-    # - Custom permissions: Specific access control for reading and writing;
-    #   Can specify group or user-level restrictions:
-    #   {
-    #      "read": {
-    #          "group_ids": ["group_id1", "group_id2"],
-    #          "user_ids":  ["user_id1", "user_id2"]
-    #      },
-    #      "write": {
-    #          "group_ids": ["group_id1", "group_id2"],
-    #          "user_ids":  ["user_id1", "user_id2"]
-    #      }
-    #   }
 
     created_at = Column(BigInteger)
     updated_at = Column(BigInteger)
@@ -82,7 +64,7 @@ class KnowledgeModel(BaseModel):
 
     meta: Optional[dict] = None
 
-    access_control: Optional[dict] = None
+    access_grants: list[AccessGrantModel] = Field(default_factory=list)
 
     created_at: int  # timestamp in epoch
     updated_at: int  # timestamp in epoch
@@ -139,7 +121,7 @@ class KnowledgeUserResponse(KnowledgeUserModel):
 class KnowledgeForm(BaseModel):
     name: str
     description: str
-    access_control: Optional[dict] = None
+    access_grants: Optional[list[dict]] = None
 
 
 class FileUserResponse(FileModelResponse):
@@ -157,27 +139,47 @@ class KnowledgeFileListResponse(BaseModel):
 
 
 class KnowledgeTable:
+    def _get_access_grants(
+        self, knowledge_id: str, db: Optional[Session] = None
+    ) -> list[AccessGrantModel]:
+        return AccessGrants.get_grants_by_resource("knowledge", knowledge_id, db=db)
+
+    def _to_knowledge_model(
+        self, knowledge: Knowledge, db: Optional[Session] = None
+    ) -> KnowledgeModel:
+        knowledge_data = KnowledgeModel.model_validate(knowledge).model_dump(
+            exclude={"access_grants"}
+        )
+        knowledge_data["access_grants"] = self._get_access_grants(
+            knowledge_data["id"], db=db
+        )
+        return KnowledgeModel.model_validate(knowledge_data)
+
     def insert_new_knowledge(
         self, user_id: str, form_data: KnowledgeForm, db: Optional[Session] = None
     ) -> Optional[KnowledgeModel]:
         with get_db_context(db) as db:
             knowledge = KnowledgeModel(
                 **{
-                    **form_data.model_dump(),
+                    **form_data.model_dump(exclude={"access_grants"}),
                     "id": str(uuid.uuid4()),
                     "user_id": user_id,
                     "created_at": int(time.time()),
                     "updated_at": int(time.time()),
+                    "access_grants": [],
                 }
             )
 
             try:
-                result = Knowledge(**knowledge.model_dump())
+                result = Knowledge(**knowledge.model_dump(exclude={"access_grants"}))
                 db.add(result)
                 db.commit()
                 db.refresh(result)
+                AccessGrants.set_access_grants(
+                    "knowledge", result.id, form_data.access_grants, db=db
+                )
                 if result:
-                    return KnowledgeModel.model_validate(result)
+                    return self._to_knowledge_model(result, db=db)
                 else:
                     return None
             except Exception:
@@ -201,7 +203,7 @@ class KnowledgeTable:
                 knowledge_bases.append(
                     KnowledgeUserModel.model_validate(
                         {
-                            **KnowledgeModel.model_validate(knowledge).model_dump(),
+                            **self._to_knowledge_model(knowledge, db=db).model_dump(),
                             "user": user.model_dump() if user else None,
                         }
                     )
@@ -241,7 +243,14 @@ class KnowledgeTable:
                     elif view_option == "shared":
                         query = query.filter(Knowledge.user_id != user_id)
 
-                    query = has_permission(db, Knowledge, query, filter)
+                    query = AccessGrants.has_permission_filter(
+                        db=db,
+                        query=query,
+                        DocumentModel=Knowledge,
+                        filter=filter,
+                        resource_type="knowledge",
+                        permission="read",
+                    )
 
                 query = query.order_by(Knowledge.updated_at.desc(), Knowledge.id.asc())
 
@@ -258,8 +267,8 @@ class KnowledgeTable:
                     knowledge_bases.append(
                         KnowledgeUserModel.model_validate(
                             {
-                                **KnowledgeModel.model_validate(
-                                    knowledge_base
+                                **self._to_knowledge_model(
+                                    knowledge_base, db=db
                                 ).model_dump(),
                                 "user": (
                                     UserModel.model_validate(user).model_dump()
@@ -294,7 +303,14 @@ class KnowledgeTable:
 
                 # Apply access-control directly to the joined query
                 # This makes the database handle filtering, even with 10k+ KBs
-                query = has_permission(db, Knowledge, query, filter)
+                query = AccessGrants.has_permission_filter(
+                    db=db,
+                    query=query,
+                    DocumentModel=Knowledge,
+                    filter=filter,
+                    resource_type="knowledge",
+                    permission="read",
+                )
 
                 # Apply filename search
                 if filter:
@@ -327,8 +343,8 @@ class KnowledgeTable:
                                 if user
                                 else None
                             ),
-                            collection=KnowledgeModel.model_validate(
-                                knowledge
+                            collection=self._to_knowledge_model(
+                                knowledge, db=db
                             ).model_dump(),
                         )
                     )
@@ -350,7 +366,14 @@ class KnowledgeTable:
         user_group_ids = {
             group.id for group in Groups.get_groups_by_member_id(user_id, db=db)
         }
-        return has_access(user_id, permission, knowledge.access_control, user_group_ids)
+        return AccessGrants.has_access(
+            user_id=user_id,
+            resource_type="knowledge",
+            resource_id=knowledge.id,
+            permission=permission,
+            user_group_ids=user_group_ids,
+            db=db,
+        )
 
     def get_knowledge_bases_by_user_id(
         self, user_id: str, permission: str = "write", db: Optional[Session] = None
@@ -363,8 +386,13 @@ class KnowledgeTable:
             knowledge_base
             for knowledge_base in knowledge_bases
             if knowledge_base.user_id == user_id
-            or has_access(
-                user_id, permission, knowledge_base.access_control, user_group_ids
+            or AccessGrants.has_access(
+                user_id=user_id,
+                resource_type="knowledge",
+                resource_id=knowledge_base.id,
+                permission=permission,
+                user_group_ids=user_group_ids,
+                db=db,
             )
         ]
 
@@ -374,7 +402,9 @@ class KnowledgeTable:
         try:
             with get_db_context(db) as db:
                 knowledge = db.query(Knowledge).filter_by(id=id).first()
-                return KnowledgeModel.model_validate(knowledge) if knowledge else None
+                return (
+                    self._to_knowledge_model(knowledge, db=db) if knowledge else None
+                )
         except Exception:
             return None
 
@@ -391,7 +421,14 @@ class KnowledgeTable:
         user_group_ids = {
             group.id for group in Groups.get_groups_by_member_id(user_id, db=db)
         }
-        if has_access(user_id, "write", knowledge.access_control, user_group_ids):
+        if AccessGrants.has_access(
+            user_id=user_id,
+            resource_type="knowledge",
+            resource_id=knowledge.id,
+            permission="write",
+            user_group_ids=user_group_ids,
+            db=db,
+        ):
             return knowledge
         return None
 
@@ -406,9 +443,7 @@ class KnowledgeTable:
                     .filter(KnowledgeFile.file_id == file_id)
                     .all()
                 )
-                return [
-                    KnowledgeModel.model_validate(knowledge) for knowledge in knowledges
-                ]
+                return [self._to_knowledge_model(knowledge, db=db) for knowledge in knowledges]
         except Exception:
             return []
 
@@ -591,11 +626,15 @@ class KnowledgeTable:
                 knowledge = self.get_knowledge_by_id(id=id, db=db)
                 db.query(Knowledge).filter_by(id=id).update(
                     {
-                        **form_data.model_dump(),
+                        **form_data.model_dump(exclude={"access_grants"}),
                         "updated_at": int(time.time()),
                     }
                 )
                 db.commit()
+                if form_data.access_grants is not None:
+                    AccessGrants.set_access_grants(
+                        "knowledge", id, form_data.access_grants, db=db
+                    )
                 return self.get_knowledge_by_id(id=id, db=db)
         except Exception as e:
             log.exception(e)
@@ -622,6 +661,7 @@ class KnowledgeTable:
     def delete_knowledge_by_id(self, id: str, db: Optional[Session] = None) -> bool:
         try:
             with get_db_context(db) as db:
+                AccessGrants.revoke_all_access("knowledge", id, db=db)
                 db.query(Knowledge).filter_by(id=id).delete()
                 db.commit()
                 return True
@@ -631,6 +671,9 @@ class KnowledgeTable:
     def delete_all_knowledge(self, db: Optional[Session] = None) -> bool:
         with get_db_context(db) as db:
             try:
+                knowledge_ids = [row[0] for row in db.query(Knowledge.id).all()]
+                for knowledge_id in knowledge_ids:
+                    AccessGrants.revoke_all_access("knowledge", knowledge_id, db=db)
                 db.query(Knowledge).delete()
                 db.commit()
 
diff --git a/backend/open_webui/models/models.py b/backend/open_webui/models/models.py
index 5a59861dd7..d523ae0fc1 100755
--- a/backend/open_webui/models/models.py
+++ b/backend/open_webui/models/models.py
@@ -7,18 +7,16 @@ from open_webui.internal.db import Base, JSONField, get_db, get_db_context
 
 from open_webui.models.groups import Groups
 from open_webui.models.users import User, UserModel, Users, UserResponse
+from open_webui.models.access_grants import AccessGrantModel, AccessGrants
 
 
-from pydantic import BaseModel, ConfigDict
+from pydantic import BaseModel, ConfigDict, Field
 
 from sqlalchemy import String, cast, or_, and_, func
 from sqlalchemy.dialects import postgresql, sqlite
 
 from sqlalchemy.dialects.postgresql import JSONB
-from sqlalchemy import BigInteger, Column, Text, JSON, Boolean
-
-
-from open_webui.utils.access_control import has_access
+from sqlalchemy import BigInteger, Column, Text, Boolean
 
 
 log = logging.getLogger(__name__)
@@ -80,23 +78,6 @@ class Model(Base):
         Holds a JSON encoded blob of metadata, see `ModelMeta`.
     """
 
-    access_control = Column(JSON, nullable=True)  # Controls data access levels.
-    # Defines access control rules for this entry.
-    # - `None`: Public access, available to all users with the "user" role.
-    # - `{}`: Private access, restricted exclusively to the owner.
-    # - Custom permissions: Specific access control for reading and writing;
-    #   Can specify group or user-level restrictions:
-    #   {
-    #      "read": {
-    #          "group_ids": ["group_id1", "group_id2"],
-    #          "user_ids":  ["user_id1", "user_id2"]
-    #      },
-    #      "write": {
-    #          "group_ids": ["group_id1", "group_id2"],
-    #          "user_ids":  ["user_id1", "user_id2"]
-    #      }
-    #   }
-
     is_active = Column(Boolean, default=True)
 
     updated_at = Column(BigInteger)
@@ -112,7 +93,7 @@ class ModelModel(BaseModel):
     params: ModelParams
     meta: ModelMeta
 
-    access_control: Optional[dict] = None
+    access_grants: list[AccessGrantModel] = Field(default_factory=list)
 
     is_active: bool
     updated_at: int  # timestamp in epoch
@@ -154,31 +135,45 @@ class ModelForm(BaseModel):
     name: str
     meta: ModelMeta
     params: ModelParams
-    access_control: Optional[dict] = None
+    access_grants: Optional[list[dict]] = None
     is_active: bool = True
 
 
 class ModelsTable:
+    def _get_access_grants(
+        self, model_id: str, db: Optional[Session] = None
+    ) -> list[AccessGrantModel]:
+        return AccessGrants.get_grants_by_resource("model", model_id, db=db)
+
+    def _to_model_model(self, model: Model, db: Optional[Session] = None) -> ModelModel:
+        model_data = ModelModel.model_validate(model).model_dump(
+            exclude={"access_grants"}
+        )
+        model_data["access_grants"] = self._get_access_grants(model_data["id"], db=db)
+        return ModelModel.model_validate(model_data)
+
     def insert_new_model(
         self, form_data: ModelForm, user_id: str, db: Optional[Session] = None
     ) -> Optional[ModelModel]:
-        model = ModelModel(
-            **{
-                **form_data.model_dump(),
-                "user_id": user_id,
-                "created_at": int(time.time()),
-                "updated_at": int(time.time()),
-            }
-        )
         try:
             with get_db_context(db) as db:
-                result = Model(**model.model_dump())
+                result = Model(
+                    **{
+                        **form_data.model_dump(exclude={"access_grants"}),
+                        "user_id": user_id,
+                        "created_at": int(time.time()),
+                        "updated_at": int(time.time()),
+                    }
+                )
                 db.add(result)
                 db.commit()
                 db.refresh(result)
+                AccessGrants.set_access_grants(
+                    "model", result.id, form_data.access_grants, db=db
+                )
 
                 if result:
-                    return ModelModel.model_validate(result)
+                    return self._to_model_model(result, db=db)
                 else:
                     return None
         except Exception as e:
@@ -187,7 +182,7 @@ class ModelsTable:
 
     def get_all_models(self, db: Optional[Session] = None) -> list[ModelModel]:
         with get_db_context(db) as db:
-            return [ModelModel.model_validate(model) for model in db.query(Model).all()]
+            return [self._to_model_model(model, db=db) for model in db.query(Model).all()]
 
     def get_models(self, db: Optional[Session] = None) -> list[ModelUserResponse]:
         with get_db_context(db) as db:
@@ -204,7 +199,7 @@ class ModelsTable:
                 models.append(
                     ModelUserResponse.model_validate(
                         {
-                            **ModelModel.model_validate(model).model_dump(),
+                            **self._to_model_model(model, db=db).model_dump(),
                             "user": user.model_dump() if user else None,
                         }
                     )
@@ -214,7 +209,7 @@ class ModelsTable:
     def get_base_models(self, db: Optional[Session] = None) -> list[ModelModel]:
         with get_db_context(db) as db:
             return [
-                ModelModel.model_validate(model)
+                self._to_model_model(model, db=db)
                 for model in db.query(Model).filter(Model.base_model_id == None).all()
             ]
 
@@ -229,50 +224,25 @@ class ModelsTable:
             model
             for model in models
             if model.user_id == user_id
-            or has_access(user_id, permission, model.access_control, user_group_ids)
+            or AccessGrants.has_access(
+                user_id=user_id,
+                resource_type="model",
+                resource_id=model.id,
+                permission=permission,
+                user_group_ids=user_group_ids,
+                db=db,
+            )
         ]
 
     def _has_permission(self, db, query, filter: dict, permission: str = "read"):
-        group_ids = filter.get("group_ids", [])
-        user_id = filter.get("user_id")
-
-        dialect_name = db.bind.dialect.name
-
-        # Public access
-        conditions = []
-        if group_ids or user_id:
-            conditions.extend(
-                [
-                    Model.access_control.is_(None),
-                    cast(Model.access_control, String) == "null",
-                ]
-            )
-
-        # User-level permission
-        if user_id:
-            conditions.append(Model.user_id == user_id)
-
-        # Group-level permission
-        if group_ids:
-            group_conditions = []
-            for gid in group_ids:
-                if dialect_name == "sqlite":
-                    group_conditions.append(
-                        Model.access_control[permission]["group_ids"].contains([gid])
-                    )
-                elif dialect_name == "postgresql":
-                    group_conditions.append(
-                        cast(
-                            Model.access_control[permission]["group_ids"],
-                            JSONB,
-                        ).contains([gid])
-                    )
-            conditions.append(or_(*group_conditions))
-
-        if conditions:
-            query = query.filter(or_(*conditions))
-
-        return query
+        return AccessGrants.has_permission_filter(
+            db=db,
+            query=query,
+            DocumentModel=Model,
+            filter=filter,
+            resource_type="model",
+            permission=permission,
+        )
 
     def search_models(
         self,
@@ -358,7 +328,7 @@ class ModelsTable:
             for model, user in items:
                 models.append(
                     ModelUserResponse(
-                        **ModelModel.model_validate(model).model_dump(),
+                        **self._to_model_model(model, db=db).model_dump(),
                         user=(
                             UserResponse(**UserModel.model_validate(user).model_dump())
                             if user
@@ -375,7 +345,7 @@ class ModelsTable:
         try:
             with get_db_context(db) as db:
                 model = db.get(Model, id)
-                return ModelModel.model_validate(model)
+                return self._to_model_model(model, db=db) if model else None
         except Exception:
             return None
 
@@ -385,7 +355,7 @@ class ModelsTable:
         try:
             with get_db_context(db) as db:
                 models = db.query(Model).filter(Model.id.in_(ids)).all()
-                return [ModelModel.model_validate(model) for model in models]
+                return [self._to_model_model(model, db=db) for model in models]
         except Exception:
             return []
 
@@ -403,7 +373,7 @@ class ModelsTable:
                 db.commit()
                 db.refresh(model)
 
-                return ModelModel.model_validate(model)
+                return self._to_model_model(model, db=db)
             except Exception:
                 return None
 
@@ -413,14 +383,16 @@ class ModelsTable:
         try:
             with get_db_context(db) as db:
                 # update only the fields that are present in the model
-                data = model.model_dump(exclude={"id"})
+                data = model.model_dump(exclude={"id", "access_grants"})
                 result = db.query(Model).filter_by(id=id).update(data)
 
                 db.commit()
+                if model.access_grants is not None:
+                    AccessGrants.set_access_grants(
+                        "model", id, model.access_grants, db=db
+                    )
 
-                model = db.get(Model, id)
-                db.refresh(model)
-                return ModelModel.model_validate(model)
+                return self.get_model_by_id(id, db=db)
         except Exception as e:
             log.exception(f"Failed to update the model by id {id}: {e}")
             return None
@@ -428,6 +400,7 @@ class ModelsTable:
     def delete_model_by_id(self, id: str, db: Optional[Session] = None) -> bool:
         try:
             with get_db_context(db) as db:
+                AccessGrants.revoke_all_access("model", id, db=db)
                 db.query(Model).filter_by(id=id).delete()
                 db.commit()
 
@@ -438,6 +411,9 @@ class ModelsTable:
     def delete_all_models(self, db: Optional[Session] = None) -> bool:
         try:
             with get_db_context(db) as db:
+                model_ids = [row[0] for row in db.query(Model.id).all()]
+                for model_id in model_ids:
+                    AccessGrants.revoke_all_access("model", model_id, db=db)
                 db.query(Model).delete()
                 db.commit()
 
@@ -462,7 +438,7 @@ class ModelsTable:
                     if model.id in existing_ids:
                         db.query(Model).filter_by(id=model.id).update(
                             {
-                                **model.model_dump(),
+                                **model.model_dump(exclude={"access_grants"}),
                                 "user_id": user_id,
                                 "updated_at": int(time.time()),
                             }
@@ -470,22 +446,27 @@ class ModelsTable:
                     else:
                         new_model = Model(
                             **{
-                                **model.model_dump(),
+                                **model.model_dump(exclude={"access_grants"}),
                                 "user_id": user_id,
                                 "updated_at": int(time.time()),
                             }
                         )
                         db.add(new_model)
+                    AccessGrants.set_access_grants(
+                        "model", model.id, model.access_grants, db=db
+                    )
 
                 # Remove models that are no longer present
                 for model in existing_models:
                     if model.id not in new_model_ids:
+                        AccessGrants.revoke_all_access("model", model.id, db=db)
                         db.delete(model)
 
                 db.commit()
 
                 return [
-                    ModelModel.model_validate(model) for model in db.query(Model).all()
+                    self._to_model_model(model, db=db)
+                    for model in db.query(Model).all()
                 ]
         except Exception as e:
             log.exception(f"Error syncing models for user {user_id}: {e}")
diff --git a/backend/open_webui/models/notes.py b/backend/open_webui/models/notes.py
index bd23530785..d17c749d1c 100644
--- a/backend/open_webui/models/notes.py
+++ b/backend/open_webui/models/notes.py
@@ -7,17 +7,13 @@ from functools import lru_cache
 from sqlalchemy.orm import Session
 from open_webui.internal.db import Base, get_db, get_db_context
 from open_webui.models.groups import Groups
-from open_webui.utils.access_control import has_access
 from open_webui.models.users import User, UserModel, Users, UserResponse
+from open_webui.models.access_grants import AccessGrantModel, AccessGrants
 
 
-from pydantic import BaseModel, ConfigDict
-from sqlalchemy import BigInteger, Boolean, Column, String, Text, JSON
-from sqlalchemy.dialects.postgresql import JSONB
-
-
-from sqlalchemy import or_, func, select, and_, text, cast, or_, and_, func
-from sqlalchemy.sql import exists
+from pydantic import BaseModel, ConfigDict, Field
+from sqlalchemy import BigInteger, Column, Text, JSON
+from sqlalchemy import or_, func, cast
 
 ####################
 # Note DB Schema
@@ -34,8 +30,6 @@ class Note(Base):
     data = Column(JSON, nullable=True)
     meta = Column(JSON, nullable=True)
 
-    access_control = Column(JSON, nullable=True)
-
     created_at = Column(BigInteger)
     updated_at = Column(BigInteger)
 
@@ -50,7 +44,7 @@ class NoteModel(BaseModel):
     data: Optional[dict] = None
     meta: Optional[dict] = None
 
-    access_control: Optional[dict] = None
+    access_grants: list[AccessGrantModel] = Field(default_factory=list)
 
     created_at: int  # timestamp in epoch
     updated_at: int  # timestamp in epoch
@@ -65,14 +59,14 @@ class NoteForm(BaseModel):
     title: str
     data: Optional[dict] = None
     meta: Optional[dict] = None
-    access_control: Optional[dict] = None
+    access_grants: Optional[list[dict]] = None
 
 
 class NoteUpdateForm(BaseModel):
     title: Optional[str] = None
     data: Optional[dict] = None
     meta: Optional[dict] = None
-    access_control: Optional[dict] = None
+    access_grants: Optional[list[dict]] = None
 
 
 class NoteUserResponse(NoteModel):
@@ -94,122 +88,25 @@ class NoteListResponse(BaseModel):
 
 
 class NoteTable:
+    def _get_access_grants(
+        self, note_id: str, db: Optional[Session] = None
+    ) -> list[AccessGrantModel]:
+        return AccessGrants.get_grants_by_resource("note", note_id, db=db)
+
+    def _to_note_model(self, note: Note, db: Optional[Session] = None) -> NoteModel:
+        note_data = NoteModel.model_validate(note).model_dump(exclude={"access_grants"})
+        note_data["access_grants"] = self._get_access_grants(note_data["id"], db=db)
+        return NoteModel.model_validate(note_data)
+
     def _has_permission(self, db, query, filter: dict, permission: str = "read"):
-        group_ids = filter.get("group_ids", [])
-        user_id = filter.get("user_id")
-        dialect_name = db.bind.dialect.name
-
-        conditions = []
-
-        # Handle read_only permission separately
-        if permission == "read_only":
-            # For read_only, we want items where:
-            # 1. User has explicit read permission (via groups or user-level)
-            # 2. BUT does NOT have write permission
-            # 3. Public items are NOT considered read_only
-
-            read_conditions = []
-
-            # Group-level read permission
-            if group_ids:
-                group_read_conditions = []
-                for gid in group_ids:
-                    if dialect_name == "sqlite":
-                        group_read_conditions.append(
-                            Note.access_control["read"]["group_ids"].contains([gid])
-                        )
-                    elif dialect_name == "postgresql":
-                        group_read_conditions.append(
-                            cast(
-                                Note.access_control["read"]["group_ids"],
-                                JSONB,
-                            ).contains([gid])
-                        )
-
-                if group_read_conditions:
-                    read_conditions.append(or_(*group_read_conditions))
-
-            # Combine read conditions
-            if read_conditions:
-                has_read = or_(*read_conditions)
-            else:
-                # If no read conditions, return empty result
-                return query.filter(False)
-
-            # Now exclude items where user has write permission
-            write_exclusions = []
-
-            # Exclude items owned by user (they have implicit write)
-            if user_id:
-                write_exclusions.append(Note.user_id != user_id)
-
-            # Exclude items where user has explicit write permission via groups
-            if group_ids:
-                group_write_conditions = []
-                for gid in group_ids:
-                    if dialect_name == "sqlite":
-                        group_write_conditions.append(
-                            Note.access_control["write"]["group_ids"].contains([gid])
-                        )
-                    elif dialect_name == "postgresql":
-                        group_write_conditions.append(
-                            cast(
-                                Note.access_control["write"]["group_ids"],
-                                JSONB,
-                            ).contains([gid])
-                        )
-
-                if group_write_conditions:
-                    # User should NOT have write permission
-                    write_exclusions.append(~or_(*group_write_conditions))
-
-            # Exclude public items (items without access_control)
-            write_exclusions.append(Note.access_control.isnot(None))
-            write_exclusions.append(cast(Note.access_control, String) != "null")
-
-            # Combine: has read AND does not have write AND not public
-            if write_exclusions:
-                query = query.filter(and_(has_read, *write_exclusions))
-            else:
-                query = query.filter(has_read)
-
-            return query
-
-        # Original logic for other permissions (read, write, etc.)
-        # Public access conditions
-        if group_ids or user_id:
-            conditions.extend(
-                [
-                    Note.access_control.is_(None),
-                    cast(Note.access_control, String) == "null",
-                ]
-            )
-
-        # User-level permission (owner has all permissions)
-        if user_id:
-            conditions.append(Note.user_id == user_id)
-
-        # Group-level permission
-        if group_ids:
-            group_conditions = []
-            for gid in group_ids:
-                if dialect_name == "sqlite":
-                    group_conditions.append(
-                        Note.access_control[permission]["group_ids"].contains([gid])
-                    )
-                elif dialect_name == "postgresql":
-                    group_conditions.append(
-                        cast(
-                            Note.access_control[permission]["group_ids"],
-                            JSONB,
-                        ).contains([gid])
-                    )
-            conditions.append(or_(*group_conditions))
-
-        if conditions:
-            query = query.filter(or_(*conditions))
-
-        return query
+        return AccessGrants.has_permission_filter(
+            db=db,
+            query=query,
+            DocumentModel=Note,
+            filter=filter,
+            resource_type="note",
+            permission=permission,
+        )
 
     def insert_new_note(
         self, user_id: str, form_data: NoteForm, db: Optional[Session] = None
@@ -219,17 +116,21 @@ class NoteTable:
                 **{
                     "id": str(uuid.uuid4()),
                     "user_id": user_id,
-                    **form_data.model_dump(),
+                    **form_data.model_dump(exclude={"access_grants"}),
                     "created_at": int(time.time_ns()),
                     "updated_at": int(time.time_ns()),
+                    "access_grants": [],
                 }
             )
 
-            new_note = Note(**note.model_dump())
+            new_note = Note(**note.model_dump(exclude={"access_grants"}))
 
             db.add(new_note)
             db.commit()
-            return note
+            AccessGrants.set_access_grants(
+                "note", note.id, form_data.access_grants, db=db
+            )
+            return self._to_note_model(new_note, db=db)
 
     def get_notes(
         self, skip: int = 0, limit: int = 50, db: Optional[Session] = None
@@ -241,7 +142,7 @@ class NoteTable:
             if limit is not None:
                 query = query.limit(limit)
             notes = query.all()
-            return [NoteModel.model_validate(note) for note in notes]
+            return [self._to_note_model(note, db=db) for note in notes]
 
     def search_notes(
         self,
@@ -330,7 +231,7 @@ class NoteTable:
             for note, user in items:
                 notes.append(
                     NoteUserResponse(
-                        **NoteModel.model_validate(note).model_dump(),
+                        **self._to_note_model(note, db=db).model_dump(),
                         user=(
                             UserResponse(**UserModel.model_validate(user).model_dump())
                             if user
@@ -365,14 +266,14 @@ class NoteTable:
                 query = query.limit(limit)
 
             notes = query.all()
-            return [NoteModel.model_validate(note) for note in notes]
+            return [self._to_note_model(note, db=db) for note in notes]
 
     def get_note_by_id(
         self, id: str, db: Optional[Session] = None
     ) -> Optional[NoteModel]:
         with get_db_context(db) as db:
             note = db.query(Note).filter(Note.id == id).first()
-            return NoteModel.model_validate(note) if note else None
+            return self._to_note_model(note, db=db) if note else None
 
     def update_note_by_id(
         self, id: str, form_data: NoteUpdateForm, db: Optional[Session] = None
@@ -391,17 +292,20 @@ class NoteTable:
             if "meta" in form_data:
                 note.meta = {**note.meta, **form_data["meta"]}
 
-            if "access_control" in form_data:
-                note.access_control = form_data["access_control"]
+            if "access_grants" in form_data:
+                AccessGrants.set_access_grants(
+                    "note", id, form_data["access_grants"], db=db
+                )
 
             note.updated_at = int(time.time_ns())
 
             db.commit()
-            return NoteModel.model_validate(note) if note else None
+            return self._to_note_model(note, db=db) if note else None
 
     def delete_note_by_id(self, id: str, db: Optional[Session] = None) -> bool:
         try:
             with get_db_context(db) as db:
+                AccessGrants.revoke_all_access("note", id, db=db)
                 db.query(Note).filter(Note.id == id).delete()
                 db.commit()
                 return True
diff --git a/backend/open_webui/models/prompt_history.py b/backend/open_webui/models/prompt_history.py
index ea7f566fb1..0f5e7cea87 100644
--- a/backend/open_webui/models/prompt_history.py
+++ b/backend/open_webui/models/prompt_history.py
@@ -45,6 +45,7 @@ class PromptHistoryModel(BaseModel):
 
 class PromptHistoryResponse(PromptHistoryModel):
     """Response model with user info."""
+
     user: Optional[UserResponse] = None
 
 
@@ -91,16 +92,20 @@ class PromptHistoryTable:
                 .limit(limit)
                 .all()
             )
-            
+
             # Get user info for each entry
             user_ids = list(set(e.user_id for e in entries))
             users = Users.get_users_by_user_ids(user_ids, db=db) if user_ids else []
             users_dict = {user.id: user for user in users}
-            
+
             return [
                 PromptHistoryResponse(
                     **PromptHistoryModel.model_validate(entry).model_dump(),
-                    user=users_dict.get(entry.user_id).model_dump() if users_dict.get(entry.user_id) else None,
+                    user=(
+                        users_dict.get(entry.user_id).model_dump()
+                        if users_dict.get(entry.user_id)
+                        else None
+                    ),
                 )
                 for entry in entries
             ]
@@ -112,7 +117,9 @@ class PromptHistoryTable:
     ) -> Optional[PromptHistoryModel]:
         """Get a specific history entry by ID."""
         with get_db_context(db) as db:
-            entry = db.query(PromptHistory).filter(PromptHistory.id == history_id).first()
+            entry = (
+                db.query(PromptHistory).filter(PromptHistory.id == history_id).first()
+            )
             if entry:
                 return PromptHistoryModel.model_validate(entry)
             return None
@@ -155,27 +162,31 @@ class PromptHistoryTable:
     ) -> Optional[dict]:
         """Compute diff between two history entries."""
         with get_db_context(db) as db:
-            from_entry = db.query(PromptHistory).filter(PromptHistory.id == from_id).first()
+            from_entry = (
+                db.query(PromptHistory).filter(PromptHistory.id == from_id).first()
+            )
             to_entry = db.query(PromptHistory).filter(PromptHistory.id == to_id).first()
-            
+
             if not from_entry or not to_entry:
                 return None
-            
+
             from_snapshot = from_entry.snapshot
             to_snapshot = to_entry.snapshot
-            
+
             # Compute diff for content field
             from_content = from_snapshot.get("content", "")
             to_content = to_snapshot.get("content", "")
-            
-            diff_lines = list(difflib.unified_diff(
-                from_content.splitlines(keepends=True),
-                to_content.splitlines(keepends=True),
-                fromfile=f"v{from_id[:8]}",
-                tofile=f"v{to_id[:8]}",
-                lineterm="",
-            ))
-            
+
+            diff_lines = list(
+                difflib.unified_diff(
+                    from_content.splitlines(keepends=True),
+                    to_content.splitlines(keepends=True),
+                    fromfile=f"v{from_id[:8]}",
+                    tofile=f"v{to_id[:8]}",
+                    lineterm="",
+                )
+            )
+
             return {
                 "from_id": from_id,
                 "to_id": to_id,
@@ -183,7 +194,6 @@ class PromptHistoryTable:
                 "to_snapshot": to_snapshot,
                 "content_diff": diff_lines,
                 "name_changed": from_snapshot.get("name") != to_snapshot.get("name"),
-                "access_control_changed": from_snapshot.get("access_control") != to_snapshot.get("access_control"),
             }
 
     def delete_history_by_prompt_id(
@@ -193,7 +203,9 @@ class PromptHistoryTable:
     ) -> bool:
         """Delete all history entries for a prompt."""
         with get_db_context(db) as db:
-            db.query(PromptHistory).filter(PromptHistory.prompt_id == prompt_id).delete()
+            db.query(PromptHistory).filter(
+                PromptHistory.prompt_id == prompt_id
+            ).delete()
             db.commit()
             return True
 
diff --git a/backend/open_webui/models/prompts.py b/backend/open_webui/models/prompts.py
index 4a85ba9029..544aea767b 100644
--- a/backend/open_webui/models/prompts.py
+++ b/backend/open_webui/models/prompts.py
@@ -7,15 +7,13 @@ from open_webui.internal.db import Base, JSONField, get_db, get_db_context
 from open_webui.models.groups import Groups
 from open_webui.models.users import Users, UserResponse
 from open_webui.models.prompt_history import PromptHistories
+from open_webui.models.access_grants import AccessGrantModel, AccessGrants
 
 
-from pydantic import BaseModel, ConfigDict
+from pydantic import BaseModel, ConfigDict, Field
 from sqlalchemy import BigInteger, Boolean, Column, String, Text, JSON, or_, func, cast
 
 
-from open_webui.utils.access_control import has_access
-
-
 ####################
 # Prompts DB Schema
 ####################
@@ -37,23 +35,6 @@ class Prompt(Base):
     created_at = Column(BigInteger, nullable=True)
     updated_at = Column(BigInteger, nullable=True)
 
-    access_control = Column(JSON, nullable=True)  # Controls data access levels.
-    # Defines access control rules for this entry.
-    # - `None`: Public access, available to all users with the "user" role.
-    # - `{}`: Private access, restricted exclusively to the owner.
-    # - Custom permissions: Specific access control for reading and writing;
-    #   Can specify group or user-level restrictions:
-    #   {
-    #      "read": {
-    #          "group_ids": ["group_id1", "group_id2"],
-    #          "user_ids":  ["user_id1", "user_id2"]
-    #      },
-    #      "write": {
-    #          "group_ids": ["group_id1", "group_id2"],
-    #          "user_ids":  ["user_id1", "user_id2"]
-    #      }
-    #   }
-
 
 class PromptModel(BaseModel):
     id: Optional[str] = None
@@ -68,7 +49,7 @@ class PromptModel(BaseModel):
     version_id: Optional[str] = None
     created_at: Optional[int] = None
     updated_at: Optional[int] = None
-    access_control: Optional[dict] = None
+    access_grants: list[AccessGrantModel] = Field(default_factory=list)
 
     model_config = ConfigDict(from_attributes=True)
 
@@ -104,13 +85,27 @@ class PromptForm(BaseModel):
     data: Optional[dict] = None
     meta: Optional[dict] = None
     tags: Optional[list[str]] = None
-    access_control: Optional[dict] = None
+    access_grants: Optional[list[dict]] = None
     version_id: Optional[str] = None  # Active version
     commit_message: Optional[str] = None  # For history tracking
     is_production: Optional[bool] = True  # Whether to set new version as production
 
 
 class PromptsTable:
+    def _get_access_grants(
+        self, prompt_id: str, db: Optional[Session] = None
+    ) -> list[AccessGrantModel]:
+        return AccessGrants.get_grants_by_resource("prompt", prompt_id, db=db)
+
+    def _to_prompt_model(
+        self, prompt: Prompt, db: Optional[Session] = None
+    ) -> PromptModel:
+        prompt_data = PromptModel.model_validate(prompt).model_dump(
+            exclude={"access_grants"}
+        )
+        prompt_data["access_grants"] = self._get_access_grants(prompt_data["id"], db=db)
+        return PromptModel.model_validate(prompt_data)
+
     def insert_new_prompt(
         self, user_id: str, form_data: PromptForm, db: Optional[Session] = None
     ) -> Optional[PromptModel]:
@@ -126,7 +121,7 @@ class PromptsTable:
             data=form_data.data or {},
             meta=form_data.meta or {},
             tags=form_data.tags or [],
-            access_control=form_data.access_control,
+            access_grants=[],
             is_active=True,
             created_at=now,
             updated_at=now,
@@ -134,12 +129,16 @@ class PromptsTable:
 
         try:
             with get_db_context(db) as db:
-                result = Prompt(**prompt.model_dump())
+                result = Prompt(**prompt.model_dump(exclude={"access_grants"}))
                 db.add(result)
                 db.commit()
                 db.refresh(result)
+                AccessGrants.set_access_grants(
+                    "prompt", prompt_id, form_data.access_grants, db=db
+                )
 
                 if result:
+                    current_access_grants = self._get_access_grants(prompt_id, db=db)
                     snapshot = {
                         "name": form_data.name,
                         "content": form_data.content,
@@ -147,7 +146,7 @@ class PromptsTable:
                         "data": form_data.data or {},
                         "meta": form_data.meta or {},
                         "tags": form_data.tags or [],
-                        "access_control": form_data.access_control,
+                        "access_grants": [grant.model_dump() for grant in current_access_grants],
                     }
 
                     history_entry = PromptHistories.create_history_entry(
@@ -165,7 +164,7 @@ class PromptsTable:
                         db.commit()
                         db.refresh(result)
 
-                    return PromptModel.model_validate(result)
+                    return self._to_prompt_model(result, db=db)
                 else:
                     return None
         except Exception:
@@ -179,7 +178,7 @@ class PromptsTable:
             with get_db_context(db) as db:
                 prompt = db.query(Prompt).filter_by(id=prompt_id).first()
                 if prompt:
-                    return PromptModel.model_validate(prompt)
+                    return self._to_prompt_model(prompt, db=db)
                 return None
         except Exception:
             return None
@@ -191,7 +190,7 @@ class PromptsTable:
             with get_db_context(db) as db:
                 prompt = db.query(Prompt).filter_by(command=command).first()
                 if prompt:
-                    return PromptModel.model_validate(prompt)
+                    return self._to_prompt_model(prompt, db=db)
                 return None
         except Exception:
             return None
@@ -216,7 +215,7 @@ class PromptsTable:
                 prompts.append(
                     PromptUserResponse.model_validate(
                         {
-                            **PromptModel.model_validate(prompt).model_dump(),
+                            **self._to_prompt_model(prompt, db=db).model_dump(),
                             "user": user.model_dump() if user else None,
                         }
                     )
@@ -236,7 +235,14 @@ class PromptsTable:
             prompt
             for prompt in prompts
             if prompt.user_id == user_id
-            or has_access(user_id, permission, prompt.access_control, user_group_ids)
+            or AccessGrants.has_access(
+                user_id=user_id,
+                resource_type="prompt",
+                resource_id=prompt.id,
+                permission=permission,
+                user_group_ids=user_group_ids,
+                db=db,
+            )
         ]
 
     def search_prompts(
@@ -273,17 +279,15 @@ class PromptsTable:
                 elif view_option == "shared":
                     query = query.filter(Prompt.user_id != user_id)
 
-                # Apply access control filtering
-                group_ids = filter.get("group_ids", [])
-                filter_user_id = filter.get("user_id")
-
-                if filter_user_id:
-                    # User must have access: owner OR public OR explicit access
-                    access_conditions = [
-                        Prompt.user_id == filter_user_id,  # Owner
-                        Prompt.access_control == None,  # Public
-                    ]
-                    query = query.filter(or_(*access_conditions))
+                # Apply access grant filtering
+                query = AccessGrants.has_permission_filter(
+                    db=db,
+                    query=query,
+                    DocumentModel=Prompt,
+                    filter=filter,
+                    resource_type="prompt",
+                    permission="read",
+                )
 
                 tag = filter.get("tag")
                 if tag:
@@ -329,7 +333,7 @@ class PromptsTable:
             for prompt, user in items:
                 prompts.append(
                     PromptUserResponse(
-                        **PromptModel.model_validate(prompt).model_dump(),
+                        **self._to_prompt_model(prompt, db=db).model_dump(),
                         user=(
                             UserResponse(**UserModel.model_validate(user).model_dump())
                             if user
@@ -358,12 +362,13 @@ class PromptsTable:
                     prompt.id, db=db
                 )
                 parent_id = latest_history.id if latest_history else None
+                current_access_grants = self._get_access_grants(prompt.id, db=db)
 
                 # Check if content changed to decide on history creation
                 content_changed = (
                     prompt.name != form_data.name
                     or prompt.content != form_data.content
-                    or prompt.access_control != form_data.access_control
+                    or form_data.access_grants is not None
                 )
 
                 # Update prompt fields
@@ -371,8 +376,12 @@ class PromptsTable:
                 prompt.content = form_data.content
                 prompt.data = form_data.data or prompt.data
                 prompt.meta = form_data.meta or prompt.meta
-                prompt.access_control = form_data.access_control
                 prompt.updated_at = int(time.time())
+                if form_data.access_grants is not None:
+                    AccessGrants.set_access_grants(
+                        "prompt", prompt.id, form_data.access_grants, db=db
+                    )
+                    current_access_grants = self._get_access_grants(prompt.id, db=db)
 
                 db.commit()
 
@@ -384,7 +393,9 @@ class PromptsTable:
                         "command": command,
                         "data": form_data.data or {},
                         "meta": form_data.meta or {},
-                        "access_control": form_data.access_control,
+                        "access_grants": [
+                            grant.model_dump() for grant in current_access_grants
+                        ],
                     }
 
                     history_entry = PromptHistories.create_history_entry(
@@ -401,7 +412,7 @@ class PromptsTable:
                         prompt.version_id = history_entry.id
                         db.commit()
 
-                return PromptModel.model_validate(prompt)
+                return self._to_prompt_model(prompt, db=db)
         except Exception:
             return None
 
@@ -422,13 +433,14 @@ class PromptsTable:
                     prompt.id, db=db
                 )
                 parent_id = latest_history.id if latest_history else None
+                current_access_grants = self._get_access_grants(prompt.id, db=db)
 
                 # Check if content changed to decide on history creation
                 content_changed = (
                     prompt.name != form_data.name
                     or prompt.command != form_data.command
                     or prompt.content != form_data.content
-                    or prompt.access_control != form_data.access_control
+                    or form_data.access_grants is not None
                     or (form_data.tags is not None and prompt.tags != form_data.tags)
                 )
 
@@ -438,10 +450,15 @@ class PromptsTable:
                 prompt.content = form_data.content
                 prompt.data = form_data.data or prompt.data
                 prompt.meta = form_data.meta or prompt.meta
-                prompt.access_control = form_data.access_control
                 
                 if form_data.tags is not None:
                     prompt.tags = form_data.tags
+
+                if form_data.access_grants is not None:
+                    AccessGrants.set_access_grants(
+                        "prompt", prompt.id, form_data.access_grants, db=db
+                    )
+                    current_access_grants = self._get_access_grants(prompt.id, db=db)
                     
                 prompt.updated_at = int(time.time())
 
@@ -456,7 +473,9 @@ class PromptsTable:
                         "data": form_data.data or {},
                         "meta": form_data.meta or {},
                         "tags": prompt.tags or [],
-                        "access_control": form_data.access_control,
+                        "access_grants": [
+                            grant.model_dump() for grant in current_access_grants
+                        ],
                     }
 
                     history_entry = PromptHistories.create_history_entry(
@@ -473,7 +492,7 @@ class PromptsTable:
                         prompt.version_id = history_entry.id
                         db.commit()
 
-                return PromptModel.model_validate(prompt)
+                return self._to_prompt_model(prompt, db=db)
         except Exception:
             return None
 
@@ -501,7 +520,7 @@ class PromptsTable:
                 prompt.updated_at = int(time.time())
                 db.commit()
                 
-                return PromptModel.model_validate(prompt)
+                return self._to_prompt_model(prompt, db=db)
         except Exception:
             return None
 
@@ -533,13 +552,13 @@ class PromptsTable:
                     prompt.data = snapshot.get("data", prompt.data)
                     prompt.meta = snapshot.get("meta", prompt.meta)
                     prompt.tags = snapshot.get("tags", prompt.tags)
-                    # Note: command and access_control are not restored from snapshot
+                    # Note: command and access_grants are not restored from snapshot
 
                 prompt.version_id = version_id
                 prompt.updated_at = int(time.time())
                 db.commit()
 
-                return PromptModel.model_validate(prompt)
+                return self._to_prompt_model(prompt, db=db)
         except Exception:
             return None
 
@@ -552,6 +571,7 @@ class PromptsTable:
                 prompt = db.query(Prompt).filter_by(command=command).first()
                 if prompt:
                     PromptHistories.delete_history_by_prompt_id(prompt.id, db=db)
+                    AccessGrants.revoke_all_access("prompt", prompt.id, db=db)
 
                     prompt.is_active = False
                     prompt.updated_at = int(time.time())
@@ -568,6 +588,7 @@ class PromptsTable:
                 prompt = db.query(Prompt).filter_by(id=prompt_id).first()
                 if prompt:
                     PromptHistories.delete_history_by_prompt_id(prompt.id, db=db)
+                    AccessGrants.revoke_all_access("prompt", prompt.id, db=db)
 
                     prompt.is_active = False
                     prompt.updated_at = int(time.time())
@@ -586,6 +607,7 @@ class PromptsTable:
                 prompt = db.query(Prompt).filter_by(command=command).first()
                 if prompt:
                     PromptHistories.delete_history_by_prompt_id(prompt.id, db=db)
+                    AccessGrants.revoke_all_access("prompt", prompt.id, db=db)
 
                     # Delete prompt
                     db.query(Prompt).filter_by(command=command).delete()
diff --git a/backend/open_webui/models/tools.py b/backend/open_webui/models/tools.py
index cd7d0bd1a0..da439161e9 100644
--- a/backend/open_webui/models/tools.py
+++ b/backend/open_webui/models/tools.py
@@ -6,11 +6,10 @@ from sqlalchemy.orm import Session
 from open_webui.internal.db import Base, JSONField, get_db, get_db_context
 from open_webui.models.users import Users, UserResponse
 from open_webui.models.groups import Groups
+from open_webui.models.access_grants import AccessGrantModel, AccessGrants
 
-from pydantic import BaseModel, ConfigDict
-from sqlalchemy import BigInteger, Column, String, Text, JSON
-
-from open_webui.utils.access_control import has_access
+from pydantic import BaseModel, ConfigDict, Field
+from sqlalchemy import BigInteger, Column, String, Text
 
 
 log = logging.getLogger(__name__)
@@ -31,23 +30,6 @@ class Tool(Base):
     meta = Column(JSONField)
     valves = Column(JSONField)
 
-    access_control = Column(JSON, nullable=True)  # Controls data access levels.
-    # Defines access control rules for this entry.
-    # - `None`: Public access, available to all users with the "user" role.
-    # - `{}`: Private access, restricted exclusively to the owner.
-    # - Custom permissions: Specific access control for reading and writing;
-    #   Can specify group or user-level restrictions:
-    #   {
-    #      "read": {
-    #          "group_ids": ["group_id1", "group_id2"],
-    #          "user_ids":  ["user_id1", "user_id2"]
-    #      },
-    #      "write": {
-    #          "group_ids": ["group_id1", "group_id2"],
-    #          "user_ids":  ["user_id1", "user_id2"]
-    #      }
-    #   }
-
     updated_at = Column(BigInteger)
     created_at = Column(BigInteger)
 
@@ -64,7 +46,7 @@ class ToolModel(BaseModel):
     content: str
     specs: list[dict]
     meta: ToolMeta
-    access_control: Optional[dict] = None
+    access_grants: list[AccessGrantModel] = Field(default_factory=list)
 
     updated_at: int  # timestamp in epoch
     created_at: int  # timestamp in epoch
@@ -86,7 +68,7 @@ class ToolResponse(BaseModel):
     user_id: str
     name: str
     meta: ToolMeta
-    access_control: Optional[dict] = None
+    access_grants: list[AccessGrantModel] = Field(default_factory=list)
     updated_at: int  # timestamp in epoch
     created_at: int  # timestamp in epoch
 
@@ -106,7 +88,7 @@ class ToolForm(BaseModel):
     name: str
     content: str
     meta: ToolMeta
-    access_control: Optional[dict] = None
+    access_grants: Optional[list[dict]] = None
 
 
 class ToolValves(BaseModel):
@@ -114,6 +96,16 @@ class ToolValves(BaseModel):
 
 
 class ToolsTable:
+    def _get_access_grants(
+        self, tool_id: str, db: Optional[Session] = None
+    ) -> list[AccessGrantModel]:
+        return AccessGrants.get_grants_by_resource("tool", tool_id, db=db)
+
+    def _to_tool_model(self, tool: Tool, db: Optional[Session] = None) -> ToolModel:
+        tool_data = ToolModel.model_validate(tool).model_dump(exclude={"access_grants"})
+        tool_data["access_grants"] = self._get_access_grants(tool_data["id"], db=db)
+        return ToolModel.model_validate(tool_data)
+
     def insert_new_tool(
         self,
         user_id: str,
@@ -122,23 +114,24 @@ class ToolsTable:
         db: Optional[Session] = None,
     ) -> Optional[ToolModel]:
         with get_db_context(db) as db:
-            tool = ToolModel(
-                **{
-                    **form_data.model_dump(),
-                    "specs": specs,
-                    "user_id": user_id,
-                    "updated_at": int(time.time()),
-                    "created_at": int(time.time()),
-                }
-            )
-
             try:
-                result = Tool(**tool.model_dump())
+                result = Tool(
+                    **{
+                        **form_data.model_dump(exclude={"access_grants"}),
+                        "specs": specs,
+                        "user_id": user_id,
+                        "updated_at": int(time.time()),
+                        "created_at": int(time.time()),
+                    }
+                )
                 db.add(result)
                 db.commit()
                 db.refresh(result)
+                AccessGrants.set_access_grants(
+                    "tool", result.id, form_data.access_grants, db=db
+                )
                 if result:
-                    return ToolModel.model_validate(result)
+                    return self._to_tool_model(result, db=db)
                 else:
                     return None
             except Exception as e:
@@ -151,7 +144,7 @@ class ToolsTable:
         try:
             with get_db_context(db) as db:
                 tool = db.get(Tool, id)
-                return ToolModel.model_validate(tool)
+                return self._to_tool_model(tool, db=db) if tool else None
         except Exception:
             return None
 
@@ -170,7 +163,7 @@ class ToolsTable:
                 tools.append(
                     ToolUserModel.model_validate(
                         {
-                            **ToolModel.model_validate(tool).model_dump(),
+                            **self._to_tool_model(tool, db=db).model_dump(),
                             "user": user.model_dump() if user else None,
                         }
                     )
@@ -189,7 +182,14 @@ class ToolsTable:
             tool
             for tool in tools
             if tool.user_id == user_id
-            or has_access(user_id, permission, tool.access_control, user_group_ids)
+            or AccessGrants.has_access(
+                user_id=user_id,
+                resource_type="tool",
+                resource_id=tool.id,
+                permission=permission,
+                user_group_ids=user_group_ids,
+                db=db,
+            )
         ]
 
     def get_tool_valves_by_id(
@@ -266,20 +266,24 @@ class ToolsTable:
     ) -> Optional[ToolModel]:
         try:
             with get_db_context(db) as db:
+                access_grants = updated.pop("access_grants", None)
                 db.query(Tool).filter_by(id=id).update(
                     {**updated, "updated_at": int(time.time())}
                 )
                 db.commit()
+                if access_grants is not None:
+                    AccessGrants.set_access_grants("tool", id, access_grants, db=db)
 
                 tool = db.query(Tool).get(id)
                 db.refresh(tool)
-                return ToolModel.model_validate(tool)
+                return self._to_tool_model(tool, db=db)
         except Exception:
             return None
 
     def delete_tool_by_id(self, id: str, db: Optional[Session] = None) -> bool:
         try:
             with get_db_context(db) as db:
+                AccessGrants.revoke_all_access("tool", id, db=db)
                 db.query(Tool).filter_by(id=id).delete()
                 db.commit()
 

From 9747b07ca5fb2d7a6e32b73ba98ca306a7b25f2d Mon Sep 17 00:00:00 2001
From: Timothy Jaeryang Baek <tim@openwebui.com>
Date: Sun, 8 Feb 2026 21:24:38 -0600
Subject: [PATCH 26/42] refac

---
 backend/open_webui/retrieval/utils.py | 23 +++++++++++++++++++----
 1 file changed, 19 insertions(+), 4 deletions(-)

diff --git a/backend/open_webui/retrieval/utils.py b/backend/open_webui/retrieval/utils.py
index 56315c73fd..e2e1b85770 100644
--- a/backend/open_webui/retrieval/utils.py
+++ b/backend/open_webui/retrieval/utils.py
@@ -29,9 +29,9 @@ from open_webui.models.knowledge import Knowledges
 
 from open_webui.models.chats import Chats
 from open_webui.models.notes import Notes
+from open_webui.models.access_grants import AccessGrants
 
 from open_webui.retrieval.vector.main import GetResult
-from open_webui.utils.access_control import has_access
 from open_webui.utils.headers import include_user_info_headers
 from open_webui.utils.misc import get_message_list
 
@@ -999,7 +999,12 @@ async def get_sources_from_items(
             if note and (
                 user.role == "admin"
                 or note.user_id == user.id
-                or has_access(user.id, "read", note.access_control)
+                or AccessGrants.has_access(
+                    user_id=user.id,
+                    resource_type="note",
+                    resource_id=note.id,
+                    permission="read",
+                )
             ):
                 # User has access to the note
                 query_result = {
@@ -1091,7 +1096,12 @@ async def get_sources_from_items(
             if knowledge_base and (
                 user.role == "admin"
                 or knowledge_base.user_id == user.id
-                or has_access(user.id, "read", knowledge_base.access_control)
+                or AccessGrants.has_access(
+                    user_id=user.id,
+                    resource_type="knowledge",
+                    resource_id=knowledge_base.id,
+                    permission="read",
+                )
             ):
                 if (
                     item.get("context") == "full"
@@ -1100,7 +1110,12 @@ async def get_sources_from_items(
                     if knowledge_base and (
                         user.role == "admin"
                         or knowledge_base.user_id == user.id
-                        or has_access(user.id, "read", knowledge_base.access_control)
+                        or AccessGrants.has_access(
+                            user_id=user.id,
+                            resource_type="knowledge",
+                            resource_id=knowledge_base.id,
+                            permission="read",
+                        )
                     ):
                         files = Knowledges.get_files_by_id(knowledge_base.id)
 

From b147616080a97e7b36d133500e9e41043e5ccd06 Mon Sep 17 00:00:00 2001
From: Timothy Jaeryang Baek <tim@openwebui.com>
Date: Sun, 8 Feb 2026 21:32:12 -0600
Subject: [PATCH 27/42] refac

---
 backend/open_webui/models/groups.py | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/backend/open_webui/models/groups.py b/backend/open_webui/models/groups.py
index eab817534b..cbd0bb2ff9 100644
--- a/backend/open_webui/models/groups.py
+++ b/backend/open_webui/models/groups.py
@@ -305,14 +305,14 @@ class GroupTable:
 
     def get_group_user_ids_by_id(
         self, id: str, db: Optional[Session] = None
-    ) -> Optional[list[str]]:
+    ) -> list[str]:
         with get_db_context(db) as db:
             members = (
                 db.query(GroupMember.user_id).filter(GroupMember.group_id == id).all()
             )
 
             if not members:
-                return None
+                return []
 
             return [m[0] for m in members]
 

From aa8c2959ca8476f269786e1317fb6d2938abd3f9 Mon Sep 17 00:00:00 2001
From: Tim Baek <tim@openwebui.com>
Date: Mon, 9 Feb 2026 08:07:33 +0400
Subject: [PATCH 28/42] refac

---
 backend/open_webui/utils/middleware.py | 930 +++++++++++--------------
 backend/open_webui/utils/misc.py       | 112 ++-
 2 files changed, 482 insertions(+), 560 deletions(-)

diff --git a/backend/open_webui/utils/middleware.py b/backend/open_webui/utils/middleware.py
index 402898ad7c..58ea3f249f 100644
--- a/backend/open_webui/utils/middleware.py
+++ b/backend/open_webui/utils/middleware.py
@@ -2777,8 +2777,21 @@ async def non_streaming_chat_response_handler(response, ctx):
 
                     title = Chats.get_chat_title_by_id(metadata["chat_id"])
 
-                    # Use output from backend if provided (OR-compliant backends)
+                    # Use output from backend if provided (OR-compliant backends),
+                    # otherwise generate from response content
                     response_output = response_data.get("output")
+                    if not response_output:
+                        response_output = [
+                            {
+                                "type": "message",
+                                "id": output_id("msg"),
+                                "status": "completed",
+                                "role": "assistant",
+                                "content": [
+                                    {"type": "output_text", "text": content}
+                                ],
+                            }
+                        ]
 
                     await event_emitter(
                         {
@@ -2786,11 +2799,7 @@ async def non_streaming_chat_response_handler(response, ctx):
                             "data": {
                                 "done": True,
                                 "content": content,
-                                **(
-                                    {"output": response_output}
-                                    if response_output
-                                    else {}
-                                ),
+                                "output": response_output,
                                 "title": title,
                             },
                         }
@@ -2803,7 +2812,7 @@ async def non_streaming_chat_response_handler(response, ctx):
                         {
                             "role": "assistant",
                             "content": content,
-                            **({"output": response_output} if response_output else {}),
+                            "output": response_output,
                         },
                     )
 
@@ -2878,326 +2887,54 @@ async def streaming_chat_response_handler(response, ctx):
 
         # Handle as a background task
         async def response_handler(response, events):
-            def serialize_content_blocks(content_blocks, raw=False):
-                content = ""
-
-                for block in content_blocks:
-                    if block["type"] == "text":
-                        block_content = block["content"].strip()
-                        if block_content:
-                            content = f"{content}{block_content}\n"
-                    elif block["type"] == "tool_calls":
-                        attributes = block.get("attributes", {})
-
-                        tool_calls = block.get("content", [])
-                        results = block.get("results", [])
-
-                        if content and not content.endswith("\n"):
-                            content += "\n"
-
-                        if results:
-
-                            tool_calls_display_content = ""
-                            for tool_call in tool_calls:
-
-                                tool_call_id = tool_call.get("id", "")
-                                tool_name = tool_call.get("function", {}).get(
-                                    "name", ""
-                                )
-                                tool_arguments = tool_call.get("function", {}).get(
-                                    "arguments", ""
-                                )
-
-                                tool_result = None
-                                tool_result_files = None
-                                for result in results:
-                                    if tool_call_id == result.get("tool_call_id", ""):
-                                        tool_result = result.get("content", None)
-                                        tool_result_files = result.get("files", None)
-                                        break
-
-                                if tool_result is not None:
-                                    tool_result_embeds = result.get("embeds", "")
-                                    tool_calls_display_content = f'{tool_calls_display_content}<details type="tool_calls" done="true" id="{tool_call_id}" name="{tool_name}" arguments="{html.escape(json.dumps(tool_arguments))}" result="{html.escape(json.dumps(tool_result, ensure_ascii=False))}" files="{html.escape(json.dumps(tool_result_files)) if tool_result_files else ""}" embeds="{html.escape(json.dumps(tool_result_embeds))}">\n<summary>Tool Executed</summary>\n</details>\n'
-                                else:
-                                    tool_calls_display_content = f'{tool_calls_display_content}<details type="tool_calls" done="false" id="{tool_call_id}" name="{tool_name}" arguments="{html.escape(json.dumps(tool_arguments))}">\n<summary>Executing...</summary>\n</details>\n'
-
-                            if not raw:
-                                content = f"{content}{tool_calls_display_content}"
-                        else:
-                            tool_calls_display_content = ""
-
-                            for tool_call in tool_calls:
-                                tool_call_id = tool_call.get("id", "")
-                                tool_name = tool_call.get("function", {}).get(
-                                    "name", ""
-                                )
-                                tool_arguments = tool_call.get("function", {}).get(
-                                    "arguments", ""
-                                )
-
-                                tool_calls_display_content = f'{tool_calls_display_content}\n<details type="tool_calls" done="false" id="{tool_call_id}" name="{tool_name}" arguments="{html.escape(json.dumps(tool_arguments))}">\n<summary>Executing...</summary>\n</details>\n'
-
-                            if not raw:
-                                content = f"{content}{tool_calls_display_content}"
-
-                    elif block["type"] == "reasoning":
-                        reasoning_display_content = html.escape(
-                            "\n".join(
-                                (f"> {line}" if not line.startswith(">") else line)
-                                for line in block["content"].splitlines()
-                            )
-                        )
-
-                        reasoning_duration = block.get("duration", None)
-
-                        start_tag = block.get("start_tag", "")
-                        end_tag = block.get("end_tag", "")
-
-                        if content and not content.endswith("\n"):
-                            content += "\n"
-
-                        if reasoning_duration is not None:
-                            if raw:
-                                content = (
-                                    f'{content}{start_tag}{block["content"]}{end_tag}\n'
-                                )
-                            else:
-                                content = f'{content}<details type="reasoning" done="true" duration="{reasoning_duration}">\n<summary>Thought for {reasoning_duration} seconds</summary>\n{reasoning_display_content}\n</details>\n'
-                        else:
-                            if raw:
-                                content = (
-                                    f'{content}{start_tag}{block["content"]}{end_tag}\n'
-                                )
-                            else:
-                                content = f'{content}<details type="reasoning" done="false">\n<summary>Thinking…</summary>\n{reasoning_display_content}\n</details>\n'
-
-                    elif block["type"] == "code_interpreter":
-                        attributes = block.get("attributes", {})
-                        output = block.get("output", None)
-                        lang = attributes.get("lang", "")
-
-                        content_stripped, original_whitespace = (
-                            split_content_and_whitespace(content)
-                        )
-                        if is_opening_code_block(content_stripped):
-                            # Remove trailing backticks that would open a new block
-                            content = (
-                                content_stripped.rstrip("`").rstrip()
-                                + original_whitespace
-                            )
-                        else:
-                            # Keep content as is - either closing backticks or no backticks
-                            content = content_stripped + original_whitespace
-
-                        if content and not content.endswith("\n"):
-                            content += "\n"
-
-                        if output:
-                            output = html.escape(json.dumps(output))
-
-                            if raw:
-                                content = f'{content}<code_interpreter type="code" lang="{lang}">\n{block["content"]}\n</code_interpreter>\n```output\n{output}\n```\n'
-                            else:
-                                content = f'{content}<details type="code_interpreter" done="true" output="{output}">\n<summary>Analyzed</summary>\n```{lang}\n{block["content"]}\n```\n</details>\n'
-                        else:
-                            if raw:
-                                content = f'{content}<code_interpreter type="code" lang="{lang}">\n{block["content"]}\n</code_interpreter>\n'
-                            else:
-                                content = f'{content}<details type="code_interpreter" done="false">\n<summary>Analyzing...</summary>\n```{lang}\n{block["content"]}\n```\n</details>\n'
-
-                    else:
-                        block_content = str(block["content"]).strip()
-                        if block_content:
-                            content = f"{content}{block['type']}: {block_content}\n"
-
-                return content.strip()
-
-                return content.strip()
-
-            def convert_content_blocks_to_messages(content_blocks, raw=False):
-                messages = []
-
-                temp_blocks = []
-                for idx, block in enumerate(content_blocks):
-                    if block["type"] == "tool_calls":
-                        messages.append(
-                            {
-                                "role": "assistant",
-                                "content": serialize_content_blocks(temp_blocks, raw),
-                                "tool_calls": block.get("content"),
-                            }
-                        )
-
-                        results = block.get("results", [])
-
-                        for result in results:
-                            messages.append(
-                                {
-                                    "role": "tool",
-                                    "tool_call_id": result["tool_call_id"],
-                                    "content": result.get("content", "") or "",
-                                }
-                            )
-                        temp_blocks = []
-                    else:
-                        temp_blocks.append(block)
-
-                if temp_blocks:
-                    content = serialize_content_blocks(temp_blocks, raw)
-                    if content:
-                        messages.append(
-                            {
-                                "role": "assistant",
-                                "content": content,
-                            }
-                        )
-
-                return messages
-
-            def convert_content_blocks_to_output(content_blocks):
+            def tag_output_handler(content_type, tags, content, output):
                 """
-                Convert content_blocks to Open Responses-aligned output items.
-                See: https://openresponses.org/specification
+                Detect special tags (reasoning, solution, code_interpreter) in streaming
+                content and create corresponding OR-aligned output items directly.
+                Operates on output items instead of content_blocks.
                 """
-                output_items = []
-
-                def next_id(prefix):
-                    return f"{prefix}_{uuid4().hex[:24]}"
-
-                for block in content_blocks:
-                    block_type = block.get("type", "")
-                    # Use backend-provided ID if available, fallback to generated
-                    block_id = block.get("id")
-
-                    if block_type == "text":
-                        text_content = block.get("content", "").strip()
-                        if text_content:
-                            output_items.append(
-                                {
-                                    "type": "message",
-                                    "id": block_id or next_id("msg"),
-                                    "status": "completed",
-                                    "role": "assistant",
-                                    "content": [
-                                        {"type": "output_text", "text": text_content}
-                                    ],
-                                }
-                            )
-
-                    elif block_type == "tool_calls":
-                        tool_calls = block.get("content", [])
-                        results = block.get("results", [])
-
-                        # Emit function_call items
-                        for tool_call in tool_calls:
-                            call_id = tool_call.get("id", "")
-                            func = tool_call.get("function", {})
-                            output_items.append(
-                                {
-                                    "type": "function_call",
-                                    "id": call_id
-                                    or next_id(
-                                        "fc"
-                                    ),  # Use call_id as item id if available
-                                    "call_id": call_id,
-                                    "name": func.get("name", ""),
-                                    "arguments": func.get("arguments", "{}"),
-                                    "status": "completed" if results else "in_progress",
-                                }
-                            )
-
-                        # Emit function_call_output items
-                        for result in results:
-                            output_items.append(
-                                {
-                                    "type": "function_call_output",
-                                    "id": result.get("id") or next_id("fco"),
-                                    "call_id": result.get("tool_call_id", ""),
-                                    "output": [
-                                        {
-                                            "type": "input_text",
-                                            "text": result.get("content", ""),
-                                        }
-                                    ],
-                                    "status": "completed",
-                                    **(
-                                        {"files": result.get("files")}
-                                        if result.get("files")
-                                        else {}
-                                    ),
-                                    **(
-                                        {"embeds": result.get("embeds")}
-                                        if result.get("embeds")
-                                        else {}
-                                    ),
-                                }
-                            )
-
-                    elif block_type == "reasoning":
-                        reasoning_content = block.get("content", "").strip()
-                        duration = block.get("duration")
-                        output_items.append(
-                            {
-                                "type": "reasoning",
-                                "id": block_id or next_id("r"),
-                                "status": (
-                                    "completed"
-                                    if duration is not None
-                                    else "in_progress"
-                                ),
-                                "content": (
-                                    [{"type": "output_text", "text": reasoning_content}]
-                                    if reasoning_content
-                                    else None
-                                ),
-                                "summary": None,
-                            }
-                        )
-
-                    elif block_type == "code_interpreter":
-                        code = block.get("content", "")
-                        output_val = block.get("output")
-                        attrs = block.get("attributes", {})
-                        output_items.append(
-                            {
-                                "type": "open_webui:code_interpreter",
-                                "id": block_id or next_id("ci"),
-                                "status": (
-                                    "completed"
-                                    if output_val is not None
-                                    else "in_progress"
-                                ),
-                                "lang": attrs.get("lang", ""),
-                                "code": code,
-                                "output": output_val,
-                            }
-                        )
-
-                return output_items
-
-            def tag_content_handler(content_type, tags, content, content_blocks):
                 end_flag = False
 
                 def extract_attributes(tag_content):
                     """Extract attributes from a tag if they exist."""
                     attributes = {}
-                    if not tag_content:  # Ensure tag_content is not None
+                    if not tag_content:
                         return attributes
-                    # Match attributes in the format: key="value" (ignores single quotes for simplicity)
                     matches = re.findall(r'(\w+)\s*=\s*"([^"]+)"', tag_content)
                     for key, value in matches:
                         attributes[key] = value
                     return attributes
 
-                if content_blocks[-1]["type"] == "text":
+                def get_last_text(out):
+                    """Get text from last message item, or empty string."""
+                    if out and out[-1].get("type") == "message":
+                        parts = out[-1].get("content", [])
+                        if parts and parts[-1].get("type") == "output_text":
+                            return parts[-1].get("text", "")
+                    return ""
+
+                def set_last_text(out, text):
+                    """Set text on last message item's output_text."""
+                    if out and out[-1].get("type") == "message":
+                        parts = out[-1].get("content", [])
+                        if parts and parts[-1].get("type") == "output_text":
+                            parts[-1]["text"] = text
+
+                # Map content_type to output item type
+                output_type_map = {
+                    "reasoning": "reasoning",
+                    "solution": "message",  # solution tags just produce text
+                    "code_interpreter": "open_webui:code_interpreter",
+                }
+                output_item_type = output_type_map.get(content_type, content_type)
+
+                last_type = output[-1].get("type", "") if output else ""
+
+                if last_type == "message":
                     for start_tag, end_tag in tags:
 
                         start_tag_pattern = rf"{re.escape(start_tag)}"
                         if start_tag.startswith("<") and start_tag.endswith(">"):
-                            # Match start tag e.g., <tag> or <tag attr="value">
-                            # remove both '<' and '>' from start_tag
-                            # Match start tag with attributes
                             start_tag_pattern = (
                                 rf"<{re.escape(start_tag[1:-1])}(\s.*?)?>"
                             )
@@ -3207,70 +2944,128 @@ async def streaming_chat_response_handler(response, ctx):
                             try:
                                 attr_content = (
                                     match.group(1) if match.group(1) else ""
-                                )  # Ensure it's not None
+                                )
                             except:
                                 attr_content = ""
 
-                            attributes = extract_attributes(
-                                attr_content
-                            )  # Extract attributes safely
+                            attributes = extract_attributes(attr_content)
 
-                            # Capture everything before and after the matched tag
-                            before_tag = content[
-                                : match.start()
-                            ]  # Content before opening tag
-                            after_tag = content[
-                                match.end() :
-                            ]  # Content after opening tag
+                            before_tag = content[: match.start()]
+                            after_tag = content[match.end() :]
 
-                            # Remove the start tag and after from the currently handling text block
-                            content_blocks[-1]["content"] = content_blocks[-1][
-                                "content"
-                            ].replace(match.group(0) + after_tag, "")
-
-                            if before_tag:
-                                content_blocks[-1]["content"] = before_tag
-
-                            if not content_blocks[-1]["content"]:
-                                content_blocks.pop()
-
-                            # Append the new block
-                            content_blocks.append(
-                                {
-                                    "type": content_type,
-                                    "start_tag": start_tag,
-                                    "end_tag": end_tag,
-                                    "attributes": attributes,
-                                    "content": "",
-                                    "started_at": time.time(),
-                                }
+                            # Remove the start tag and everything after from last message
+                            current_text = get_last_text(output)
+                            set_last_text(
+                                output,
+                                current_text.replace(match.group(0) + after_tag, "")
                             )
 
+                            if before_tag:
+                                set_last_text(output, before_tag)
+
+                            if not get_last_text(output).strip():
+                                # Remove empty message item
+                                if output and output[-1].get("type") == "message":
+                                    output.pop()
+
+                            # Append the new output item
+                            if output_item_type == "reasoning":
+                                output.append(
+                                    {
+                                        "type": "reasoning",
+                                        "id": output_id("r"),
+                                        "status": "in_progress",
+                                        "start_tag": start_tag,
+                                        "end_tag": end_tag,
+                                        "attributes": attributes,
+                                        "content": [],
+                                        "summary": None,
+                                        "started_at": time.time(),
+                                    }
+                                )
+                            elif output_item_type == "open_webui:code_interpreter":
+                                output.append(
+                                    {
+                                        "type": "open_webui:code_interpreter",
+                                        "id": output_id("ci"),
+                                        "status": "in_progress",
+                                        "start_tag": start_tag,
+                                        "end_tag": end_tag,
+                                        "attributes": attributes,
+                                        "lang": attributes.get("lang", "python"),
+                                        "code": "",
+                                        "output": None,
+                                        "started_at": time.time(),
+                                    }
+                                )
+                            else:
+                                # solution or other text-producing tag
+                                output.append(
+                                    {
+                                        "type": "message",
+                                        "id": output_id("msg"),
+                                        "status": "in_progress",
+                                        "role": "assistant",
+                                        "content": [{"type": "output_text", "text": ""}],
+                                        "_tag_type": content_type,
+                                        "start_tag": start_tag,
+                                        "end_tag": end_tag,
+                                        "attributes": attributes,
+                                        "started_at": time.time(),
+                                    }
+                                )
+
                             if after_tag:
-                                content_blocks[-1]["content"] = after_tag
-                                tag_content_handler(
-                                    content_type, tags, after_tag, content_blocks
+                                # Set the after_tag content on the new item
+                                if output_item_type == "reasoning":
+                                    output[-1]["content"] = [
+                                        {"type": "output_text", "text": after_tag}
+                                    ]
+                                elif output_item_type == "open_webui:code_interpreter":
+                                    output[-1]["code"] = after_tag
+                                else:
+                                    set_last_text(output, after_tag)
+
+                                tag_output_handler(
+                                    content_type, tags, after_tag, output
                                 )
 
                             break
-                elif content_blocks[-1]["type"] == content_type:
-                    start_tag = content_blocks[-1]["start_tag"]
-                    end_tag = content_blocks[-1]["end_tag"]
+
+                elif (
+                    (last_type == "reasoning" and content_type == "reasoning")
+                    or (last_type == "open_webui:code_interpreter" and content_type == "code_interpreter")
+                    or (last_type == "message" and output[-1].get("_tag_type") == content_type)
+                ):
+                    item = output[-1]
+                    start_tag = item.get("start_tag", "")
+                    end_tag = item.get("end_tag", "")
 
                     if end_tag.startswith("<") and end_tag.endswith(">"):
-                        # Match end tag e.g., </tag>
                         end_tag_pattern = rf"{re.escape(end_tag)}"
                     else:
-                        # Handle cases where end_tag is just a tag name
                         end_tag_pattern = rf"{re.escape(end_tag)}"
 
-                    # Check if the content has the end tag
                     if re.search(end_tag_pattern, content):
                         end_flag = True
 
-                        block_content = content_blocks[-1]["content"]
-                        # Strip start and end tags from the content
-                        start_tag_pattern = rf"<{re.escape(start_tag)}(.*?)>"
+                        # Get the block content
+                        if last_type == "reasoning":
+                            parts = item.get("content", [])
+                            block_content = ""
+                            if parts and parts[-1].get("type") == "output_text":
+                                block_content = parts[-1].get("text", "")
+                        elif last_type == "open_webui:code_interpreter":
+                            block_content = item.get("code", "")
+                        else:
+                            block_content = get_last_text(output)
+
+                        # Strip start and end tags from content
+                        start_tag_pattern = rf"{re.escape(start_tag)}"
+                        if start_tag.startswith("<") and start_tag.endswith(">"):
+                            start_tag_pattern = (
+                                rf"<{re.escape(start_tag[1:-1])}(\s.*?)?>"
+                            )
                         block_content = re.sub(
                             start_tag_pattern, "", block_content
                         ).strip()
@@ -3278,79 +3073,98 @@ async def streaming_chat_response_handler(response, ctx):
                         end_tag_regex = re.compile(end_tag_pattern, re.DOTALL)
                         split_content = end_tag_regex.split(block_content, maxsplit=1)
 
-                        # Content inside the tag
                         block_content = (
                             split_content[0].strip() if split_content else ""
                         )
-
-                        # Leftover content (everything after `</tag>`)
                         leftover_content = (
                             split_content[1].strip() if len(split_content) > 1 else ""
                         )
 
                         if block_content:
-                            content_blocks[-1]["content"] = block_content
-                            content_blocks[-1]["ended_at"] = time.time()
-                            content_blocks[-1]["duration"] = int(
-                                content_blocks[-1]["ended_at"]
-                                - content_blocks[-1]["started_at"]
-                            )
+                            # Update the item with final content
+                            if last_type == "reasoning":
+                                item["content"] = [
+                                    {"type": "output_text", "text": block_content}
+                                ]
+                                item["ended_at"] = time.time()
+                                item["duration"] = int(
+                                    item["ended_at"] - item["started_at"]
+                                )
+                                item["status"] = "completed"
+                            elif last_type == "open_webui:code_interpreter":
+                                item["code"] = block_content
+                                item["ended_at"] = time.time()
+                                item["duration"] = int(
+                                    item["ended_at"] - item["started_at"]
+                                )
+                            else:
+                                set_last_text(output, block_content)
+                                item["ended_at"] = time.time()
 
-                            # Reset the content_blocks by appending a new text block
+                            # Reset by appending a new message item for leftover
                             if content_type != "code_interpreter":
-                                if leftover_content:
-
-                                    content_blocks.append(
-                                        {
-                                            "type": "text",
-                                            "content": leftover_content,
-                                        }
-                                    )
-                                else:
-                                    content_blocks.append(
-                                        {
-                                            "type": "text",
-                                            "content": "",
-                                        }
-                                    )
-
-                        else:
-                            # Remove the block if content is empty
-                            content_blocks.pop()
-
-                            if leftover_content:
-                                content_blocks.append(
+                                output.append(
                                     {
-                                        "type": "text",
-                                        "content": leftover_content,
+                                        "type": "message",
+                                        "id": output_id("msg"),
+                                        "status": "in_progress",
+                                        "role": "assistant",
+                                        "content": [
+                                            {
+                                                "type": "output_text",
+                                                "text": leftover_content,
+                                            }
+                                        ],
                                     }
                                 )
                             else:
-                                content_blocks.append(
+                                output.append(
                                     {
-                                        "type": "text",
-                                        "content": "",
+                                        "type": "message",
+                                        "id": output_id("msg"),
+                                        "status": "in_progress",
+                                        "role": "assistant",
+                                        "content": [
+                                            {
+                                                "type": "output_text",
+                                                "text": leftover_content,
+                                            }
+                                        ],
                                     }
                                 )
+                        else:
+                            # Remove the block if content is empty
+                            output.pop()
+                            output.append(
+                                {
+                                    "type": "message",
+                                    "id": output_id("msg"),
+                                    "status": "in_progress",
+                                    "role": "assistant",
+                                    "content": [
+                                        {
+                                            "type": "output_text",
+                                            "text": leftover_content,
+                                        }
+                                    ],
+                                }
+                            )
 
                         # Clean processed content
-                        start_tag_pattern = rf"{re.escape(start_tag)}"
+                        start_tag_clean = rf"{re.escape(start_tag)}"
                         if start_tag.startswith("<") and start_tag.endswith(">"):
-                            # Match start tag e.g., <tag> or <tag attr="value">
-                            # remove both '<' and '>' from start_tag
-                            # Match start tag with attributes
-                            start_tag_pattern = (
+                            start_tag_clean = (
                                 rf"<{re.escape(start_tag[1:-1])}(\s.*?)?>"
                             )
 
                         content = re.sub(
-                            rf"{start_tag_pattern}(.|\n)*?{re.escape(end_tag)}",
+                            rf"{start_tag_clean}(.|\n)*?{re.escape(end_tag)}",
                             "",
                             content,
                             flags=re.DOTALL,
                         )
 
-                return content, content_blocks, end_flag
+                return content, output, end_flag
 
             message = Chats.get_message_by_id_and_message_id(
                 metadata["chat_id"], metadata["message_id"]
@@ -3392,13 +3206,7 @@ async def streaming_chat_response_handler(response, ctx):
                 else:
                     output = []
 
-            # Keep content_blocks for backward compatibility during transition
-            content_blocks = [
-                {
-                    "type": "text",
-                    "content": content,
-                }
-            ]
+
             usage = None
 
             reasoning_tags_param = metadata.get("params", {}).get("reasoning_tags")
@@ -3439,7 +3247,6 @@ async def streaming_chat_response_handler(response, ctx):
 
                 async def stream_body_handler(response, form_data):
                     nonlocal content
-                    nonlocal content_blocks
                     nonlocal usage
                     nonlocal output
 
@@ -3677,19 +3484,26 @@ async def streaming_chat_response_handler(response, ctx):
                                             # Flush any pending text first
                                             await flush_pending_delta_data()
 
-                                            pending_content_blocks = content_blocks + [
-                                                {
-                                                    "type": "tool_calls",
-                                                    "content": response_tool_calls,
-                                                    "pending": True,
-                                                }
-                                            ]
+                                            # Build pending function_call output items for display
+                                            pending_fc_items = []
+                                            for tc in response_tool_calls:
+                                                call_id = tc.get("id", "")
+                                                func = tc.get("function", {})
+                                                pending_fc_items.append({
+                                                    "type": "function_call",
+                                                    "id": call_id or output_id("fc"),
+                                                    "call_id": call_id,
+                                                    "name": func.get("name", ""),
+                                                    "arguments": func.get("arguments", "{}"),
+                                                    "status": "in_progress",
+                                                })
+                                            pending_output = output + pending_fc_items
                                             await event_emitter(
                                                 {
                                                     "type": "chat:completion",
                                                     "data": {
-                                                        "content": serialize_content_blocks(
-                                                            pending_content_blocks
+                                                        "content": serialize_output(
+                                                            pending_output
                                                         ),
                                                     },
                                                 }
@@ -3724,52 +3538,64 @@ async def streaming_chat_response_handler(response, ctx):
                                     )
                                     if reasoning_content:
                                         if (
-                                            not content_blocks
-                                            or content_blocks[-1]["type"] != "reasoning"
+                                            not output
+                                            or output[-1].get("type") != "reasoning"
                                         ):
-                                            reasoning_block = {
+                                            reasoning_item = {
                                                 "type": "reasoning",
+                                                "id": output_id("r"),
+                                                "status": "in_progress",
                                                 "start_tag": "<think>",
                                                 "end_tag": "</think>",
                                                 "attributes": {
                                                     "type": "reasoning_content"
                                                 },
-                                                "content": "",
+                                                "content": [],
+                                                "summary": None,
                                                 "started_at": time.time(),
                                             }
-                                            content_blocks.append(reasoning_block)
+                                            output.append(reasoning_item)
                                         else:
-                                            reasoning_block = content_blocks[-1]
+                                            reasoning_item = output[-1]
 
-                                        reasoning_block["content"] += reasoning_content
+                                        # Append to reasoning content
+                                        parts = reasoning_item.get("content", [])
+                                        if parts and parts[-1].get("type") == "output_text":
+                                            parts[-1]["text"] += reasoning_content
+                                        else:
+                                            reasoning_item["content"] = [
+                                                {"type": "output_text", "text": reasoning_content}
+                                            ]
 
                                         data = {
-                                            "content": serialize_content_blocks(
-                                                content_blocks
-                                            )
+                                            "content": serialize_output(output)
                                         }
 
                                     if value:
                                         if (
-                                            content_blocks
-                                            and content_blocks[-1]["type"]
+                                            output
+                                            and output[-1].get("type")
                                             == "reasoning"
-                                            and content_blocks[-1]
+                                            and output[-1]
                                             .get("attributes", {})
                                             .get("type")
                                             == "reasoning_content"
                                         ):
-                                            reasoning_block = content_blocks[-1]
-                                            reasoning_block["ended_at"] = time.time()
-                                            reasoning_block["duration"] = int(
-                                                reasoning_block["ended_at"]
-                                                - reasoning_block["started_at"]
+                                            reasoning_item = output[-1]
+                                            reasoning_item["ended_at"] = time.time()
+                                            reasoning_item["duration"] = int(
+                                                reasoning_item["ended_at"]
+                                                - reasoning_item["started_at"]
                                             )
+                                            reasoning_item["status"] = "completed"
 
-                                            content_blocks.append(
+                                            output.append(
                                                 {
-                                                    "type": "text",
-                                                    "content": "",
+                                                    "type": "message",
+                                                    "id": output_id("msg"),
+                                                    "status": "in_progress",
+                                                    "role": "assistant",
+                                                    "content": [{"type": "output_text", "text": ""}],
                                                 }
                                             )
 
@@ -3789,44 +3615,55 @@ async def streaming_chat_response_handler(response, ctx):
                                             )
 
                                         content = f"{content}{value}"
-                                        if not content_blocks:
-                                            content_blocks.append(
+                                        if (
+                                            not output
+                                            or output[-1].get("type") != "message"
+                                        ):
+                                            output.append(
                                                 {
-                                                    "type": "text",
-                                                    "content": "",
+                                                    "type": "message",
+                                                    "id": output_id("msg"),
+                                                    "status": "in_progress",
+                                                    "role": "assistant",
+                                                    "content": [{"type": "output_text", "text": ""}],
                                                 }
                                             )
 
-                                        content_blocks[-1]["content"] = (
-                                            content_blocks[-1]["content"] + value
-                                        )
+                                        # Append value to last message item's text
+                                        msg_parts = output[-1].get("content", [])
+                                        if msg_parts and msg_parts[-1].get("type") == "output_text":
+                                            msg_parts[-1]["text"] += value
+                                        else:
+                                            output[-1]["content"] = [
+                                                {"type": "output_text", "text": value}
+                                            ]
 
                                         if DETECT_REASONING_TAGS:
-                                            content, content_blocks, _ = (
-                                                tag_content_handler(
+                                            content, output, _ = (
+                                                tag_output_handler(
                                                     "reasoning",
                                                     reasoning_tags,
                                                     content,
-                                                    content_blocks,
+                                                    output,
                                                 )
                                             )
 
-                                            content, content_blocks, _ = (
-                                                tag_content_handler(
+                                            content, output, _ = (
+                                                tag_output_handler(
                                                     "solution",
                                                     DEFAULT_SOLUTION_TAGS,
                                                     content,
-                                                    content_blocks,
+                                                    output,
                                                 )
                                             )
 
                                         if DETECT_CODE_INTERPRETER:
-                                            content, content_blocks, end = (
-                                                tag_content_handler(
+                                            content, output, end = (
+                                                tag_output_handler(
                                                     "code_interpreter",
                                                     DEFAULT_CODE_INTERPRETER_TAGS,
                                                     content,
-                                                    content_blocks,
+                                                    output,
                                                 )
                                             )
 
@@ -3835,9 +3672,6 @@ async def streaming_chat_response_handler(response, ctx):
 
                                         if ENABLE_REALTIME_CHAT_SAVE:
                                             # Save message in the database
-                                            output = convert_content_blocks_to_output(
-                                                content_blocks
-                                            )
                                             Chats.upsert_message_to_chat_by_id_and_message_id(
                                                 metadata["chat_id"],
                                                 metadata["message_id"],
@@ -3848,8 +3682,8 @@ async def streaming_chat_response_handler(response, ctx):
                                             )
                                         else:
                                             data = {
-                                                "content": serialize_content_blocks(
-                                                    content_blocks
+                                                "content": serialize_output(
+                                                    output
                                                 ),
                                             }
 
@@ -3874,32 +3708,36 @@ async def streaming_chat_response_handler(response, ctx):
                                 continue
                     await flush_pending_delta_data()
 
-                    if content_blocks:
-                        # Clean up the last text block
-                        if content_blocks[-1]["type"] == "text":
-                            content_blocks[-1]["content"] = content_blocks[-1][
-                                "content"
-                            ].strip()
+                    if output:
+                        # Clean up the last message item
+                        if output[-1].get("type") == "message":
+                            parts = output[-1].get("content", [])
+                            if parts and parts[-1].get("type") == "output_text":
+                                parts[-1]["text"] = parts[-1]["text"].strip()
 
-                            if not content_blocks[-1]["content"]:
-                                content_blocks.pop()
+                                if not parts[-1]["text"]:
+                                    output.pop()
 
-                                if not content_blocks:
-                                    content_blocks.append(
-                                        {
-                                            "type": "text",
-                                            "content": "",
-                                        }
-                                    )
+                                    if not output:
+                                        output.append(
+                                            {
+                                                "type": "message",
+                                                "id": output_id("msg"),
+                                                "status": "in_progress",
+                                                "role": "assistant",
+                                                "content": [{"type": "output_text", "text": ""}],
+                                            }
+                                        )
 
-                        if content_blocks[-1]["type"] == "reasoning":
-                            reasoning_block = content_blocks[-1]
-                            if reasoning_block.get("ended_at") is None:
-                                reasoning_block["ended_at"] = time.time()
-                                reasoning_block["duration"] = int(
-                                    reasoning_block["ended_at"]
-                                    - reasoning_block["started_at"]
+                        if output[-1].get("type") == "reasoning":
+                            reasoning_item = output[-1]
+                            if reasoning_item.get("ended_at") is None:
+                                reasoning_item["ended_at"] = time.time()
+                                reasoning_item["duration"] = int(
+                                    reasoning_item["ended_at"]
+                                    - reasoning_item["started_at"]
                                 )
+                                reasoning_item["status"] = "completed"
 
                     if response_tool_calls:
                         tool_calls.append(response_tool_calls)
@@ -3921,14 +3759,19 @@ async def streaming_chat_response_handler(response, ctx):
 
                     response_tool_calls = tool_calls.pop(0)
 
-                    content_blocks.append(
-                        {
-                            "type": "tool_calls",
-                            "content": response_tool_calls,
-                        }
-                    )
+                    # Append function_call items for each tool call
+                    for tc in response_tool_calls:
+                        call_id = tc.get("id", "")
+                        func = tc.get("function", {})
+                        output.append({
+                            "type": "function_call",
+                            "id": call_id or output_id("fc"),
+                            "call_id": call_id,
+                            "name": func.get("name", ""),
+                            "arguments": func.get("arguments", "{}"),
+                            "status": "in_progress",
+                        })
 
-                    output = convert_content_blocks_to_output(content_blocks)
                     await event_emitter(
                         {
                             "type": "chat:completion",
@@ -3964,11 +3807,7 @@ async def streaming_chat_response_handler(response, ctx):
                                     f"Error parsing tool call arguments: {tool_args}"
                                 )
 
-                        # Mutate the original tool call response params as they are passed back to the passed
-                        # back to the LLM via the content blocks. If they are in a json block and are invalid json,
-                        # this can cause downstream LLM integrations to fail (e.g. bedrock gateway) where response
-                        # params are not valid json.
-                        # Main case so far is no args = "" = invalid json.
+                        # Ensure arguments are valid JSON for downstream LLM integrations
                         log.debug(
                             f"Parsed args from {tool_args} to {tool_function_params}"
                         )
@@ -4085,11 +3924,49 @@ async def streaming_chat_response_handler(response, ctx):
                             }
                         )
 
-                    content_blocks[-1]["results"] = results
-                    content_blocks.append(
+                    # Update function_call statuses and append function_call_output items
+                    for tc in response_tool_calls:
+                        call_id = tc.get("id", "")
+                        # Mark function_call as completed
+                        for item in output:
+                            if item.get("type") == "function_call" and item.get("call_id") == call_id:
+                                item["status"] = "completed"
+                                # Update arguments with parsed/sanitized version
+                                item["arguments"] = tc.get("function", {}).get("arguments", "{}")
+                                break
+
+                    for result in results:
+                        output.append({
+                            "type": "function_call_output",
+                            "id": output_id("fco"),
+                            "call_id": result.get("tool_call_id", ""),
+                            "output": [
+                                {
+                                    "type": "input_text",
+                                    "text": result.get("content", ""),
+                                }
+                            ],
+                            "status": "completed",
+                            **(
+                                {"files": result.get("files")}
+                                if result.get("files")
+                                else {}
+                            ),
+                            **(
+                                {"embeds": result.get("embeds")}
+                                if result.get("embeds")
+                                else {}
+                            ),
+                        })
+
+                    # Append a new empty message item for the next response
+                    output.append(
                         {
-                            "type": "text",
-                            "content": "",
+                            "type": "message",
+                            "id": output_id("msg"),
+                            "status": "in_progress",
+                            "role": "assistant",
+                            "content": [{"type": "output_text", "text": ""}],
                         }
                     )
 
@@ -4109,7 +3986,6 @@ async def streaming_chat_response_handler(response, ctx):
                             )
                         tool_call_sources.clear()
 
-                    output = convert_content_blocks_to_output(content_blocks)
                     await event_emitter(
                         {
                             "type": "chat:completion",
@@ -4127,9 +4003,7 @@ async def streaming_chat_response_handler(response, ctx):
                             "stream": True,
                             "messages": [
                                 *form_data["messages"],
-                                *convert_content_blocks_to_messages(
-                                    content_blocks, True
-                                ),
+                                *convert_output_to_messages(output, raw=True),
                             ],
                         }
 
@@ -4153,11 +4027,11 @@ async def streaming_chat_response_handler(response, ctx):
                     retries = 0
 
                     while (
-                        content_blocks[-1]["type"] == "code_interpreter"
+                        output
+                        and output[-1].get("type") == "open_webui:code_interpreter"
                         and retries < MAX_RETRIES
                     ):
 
-                        output = convert_content_blocks_to_output(content_blocks)
                         await event_emitter(
                             {
                                 "type": "chat:completion",
@@ -4171,10 +4045,11 @@ async def streaming_chat_response_handler(response, ctx):
                         retries += 1
                         log.debug(f"Attempt count: {retries}")
 
-                        output = ""
+                        ci_item = output[-1]
+                        ci_output = ""
                         try:
-                            if content_blocks[-1]["attributes"].get("type") == "code":
-                                code = content_blocks[-1]["content"]
+                            if ci_item.get("attributes", {}).get("type") == "code":
+                                code = ci_item.get("code", "")
                                 # Sanitize code (strips ANSI codes and markdown fences)
                                 code = sanitize_code(code)
 
@@ -4204,7 +4079,7 @@ async def streaming_chat_response_handler(response, ctx):
                                     request.app.state.config.CODE_INTERPRETER_ENGINE
                                     == "pyodide"
                                 ):
-                                    output = await event_caller(
+                                    ci_output = await event_caller(
                                         {
                                             "type": "execute:python",
                                             "data": {
@@ -4220,7 +4095,7 @@ async def streaming_chat_response_handler(response, ctx):
                                     request.app.state.config.CODE_INTERPRETER_ENGINE
                                     == "jupyter"
                                 ):
-                                    output = await execute_code_jupyter(
+                                    ci_output = await execute_code_jupyter(
                                         request.app.state.config.CODE_INTERPRETER_JUPYTER_URL,
                                         code,
                                         (
@@ -4238,14 +4113,14 @@ async def streaming_chat_response_handler(response, ctx):
                                         request.app.state.config.CODE_INTERPRETER_JUPYTER_TIMEOUT,
                                     )
                                 else:
-                                    output = {
+                                    ci_output = {
                                         "stdout": "Code interpreter engine not configured."
                                     }
 
-                                log.debug(f"Code interpreter output: {output}")
+                                log.debug(f"Code interpreter output: {ci_output}")
 
-                                if isinstance(output, dict):
-                                    stdout = output.get("stdout", "")
+                                if isinstance(ci_output, dict):
+                                    stdout = ci_output.get("stdout", "")
 
                                     if isinstance(stdout, str):
                                         stdoutLines = stdout.split("\n")
@@ -4263,9 +4138,9 @@ async def streaming_chat_response_handler(response, ctx):
                                                         f"![Output Image]({image_url})"
                                                     )
 
-                                        output["stdout"] = "\n".join(stdoutLines)
+                                        ci_output["stdout"] = "\n".join(stdoutLines)
 
-                                    result = output.get("result", "")
+                                    result = ci_output.get("result", "")
 
                                     if isinstance(result, str):
                                         resultLines = result.split("\n")
@@ -4280,20 +4155,23 @@ async def streaming_chat_response_handler(response, ctx):
                                                 resultLines[idx] = (
                                                     f"![Output Image]({image_url})"
                                                 )
-                                        output["result"] = "\n".join(resultLines)
+                                        ci_output["result"] = "\n".join(resultLines)
                         except Exception as e:
-                            output = str(e)
+                            ci_output = str(e)
 
-                        content_blocks[-1]["output"] = output
+                        ci_item["output"] = ci_output
+                        ci_item["status"] = "completed"
 
-                        content_blocks.append(
+                        output.append(
                             {
-                                "type": "text",
-                                "content": "",
+                                "type": "message",
+                                "id": output_id("msg"),
+                                "status": "in_progress",
+                                "role": "assistant",
+                                "content": [{"type": "output_text", "text": ""}],
                             }
                         )
 
-                        output = convert_content_blocks_to_output(content_blocks)
                         await event_emitter(
                             {
                                 "type": "chat:completion",
@@ -4311,12 +4189,7 @@ async def streaming_chat_response_handler(response, ctx):
                                 "stream": True,
                                 "messages": [
                                     *form_data["messages"],
-                                    {
-                                        "role": "assistant",
-                                        "content": serialize_content_blocks(
-                                            content_blocks, raw=True
-                                        ),
-                                    },
+                                    *convert_output_to_messages(output, raw=True),
                                 ],
                             }
 
@@ -4335,8 +4208,12 @@ async def streaming_chat_response_handler(response, ctx):
                             log.debug(e)
                             break
 
+                # Mark all in-progress items as completed
+                for item in output:
+                    if item.get("status") == "in_progress":
+                        item["status"] = "completed"
+
                 title = Chats.get_chat_title_by_id(metadata["chat_id"])
-                output = convert_content_blocks_to_output(content_blocks)
                 data = {
                     "done": True,
                     "content": serialize_output(output),
@@ -4392,7 +4269,6 @@ async def streaming_chat_response_handler(response, ctx):
 
                 if not ENABLE_REALTIME_CHAT_SAVE:
                     # Save message in the database
-                    output = convert_content_blocks_to_output(content_blocks)
                     Chats.upsert_message_to_chat_by_id_and_message_id(
                         metadata["chat_id"],
                         metadata["message_id"],
diff --git a/backend/open_webui/utils/misc.py b/backend/open_webui/utils/misc.py
index b931476ca9..b2b10bf56e 100644
--- a/backend/open_webui/utils/misc.py
+++ b/backend/open_webui/utils/misc.py
@@ -128,22 +128,40 @@ def get_content_from_message(message: dict) -> Optional[str]:
     return None
 
 
-def convert_output_to_messages(output: list) -> list[dict]:
+def convert_output_to_messages(output: list, raw: bool = False) -> list[dict]:
     """
-    Convert OR-aligned output items to OpenAI-format messages for LLM consumption.
-    
-    This is the inverse of convert_content_blocks_to_output() in middleware.py.
+    Convert OR-aligned output items to OpenAI Chat Completion-format messages.
+
+    This reconstructs the full conversation from the stored Responses API-native
+    output items, including assistant messages with tool_calls arrays and tool
+    role messages.
+
+    Args:
+        output: List of OR-aligned output items (Responses API format).
+        raw: If True, include reasoning blocks (with original tags) and code
+             interpreter blocks for LLM re-processing follow-ups.
     """
     if not output or not isinstance(output, list):
         return []
-    
+
     messages = []
     pending_tool_calls = []
     pending_content = []
-    
+
+    def flush_pending():
+        nonlocal pending_content, pending_tool_calls
+        if pending_content or pending_tool_calls:
+            messages.append({
+                "role": "assistant",
+                "content": "\n".join(pending_content) if pending_content else "",
+                **({"tool_calls": pending_tool_calls} if pending_tool_calls else {}),
+            })
+            pending_content = []
+            pending_tool_calls = []
+
     for item in output:
         item_type = item.get("type", "")
-        
+
         if item_type == "message":
             # Extract text from output_text content parts
             content_parts = item.get("content", [])
@@ -153,58 +171,86 @@ def convert_output_to_messages(output: list) -> list[dict]:
                     text += part.get("text", "")
             if text:
                 pending_content.append(text)
-        
+
         elif item_type == "function_call":
             # Collect tool calls to batch into assistant message
+            arguments = item.get("arguments", "{}")
+            # Ensure arguments is always a JSON string
+            if not isinstance(arguments, str):
+                arguments = json.dumps(arguments)
             pending_tool_calls.append({
                 "id": item.get("call_id", ""),
                 "type": "function",
                 "function": {
                     "name": item.get("name", ""),
-                    "arguments": item.get("arguments", "{}"),
+                    "arguments": arguments,
                 }
             })
-        
+
         elif item_type == "function_call_output":
             # Flush any pending content/tool_calls before adding tool result
-            if pending_content or pending_tool_calls:
-                messages.append({
-                    "role": "assistant",
-                    "content": "\n".join(pending_content) if pending_content else "",
-                    **({"tool_calls": pending_tool_calls} if pending_tool_calls else {}),
-                })
-                pending_content = []
-                pending_tool_calls = []
-            
+            flush_pending()
+
             # Extract text from output content parts
             output_parts = item.get("output", [])
             content = ""
             for part in output_parts:
                 if part.get("type") == "input_text":
                     content += part.get("text", "")
-            
+
             messages.append({
                 "role": "tool",
                 "tool_call_id": item.get("call_id", ""),
                 "content": content,
             })
-        
+
         elif item_type == "reasoning":
-            # Skip reasoning blocks for LLM messages
-            pass
-        
+            if raw:
+                # Include reasoning with original tags for LLM re-processing
+                reasoning_text = ""
+                source_list = item.get("summary", []) or item.get("content", [])
+                for part in source_list:
+                    if part.get("type") == "output_text":
+                        reasoning_text += part.get("text", "")
+                    elif "text" in part:
+                        reasoning_text += part.get("text", "")
+
+                if reasoning_text:
+                    start_tag = item.get("start_tag", "<think>")
+                    end_tag = item.get("end_tag", "</think>")
+                    pending_content.append(
+                        f"{start_tag}{reasoning_text}{end_tag}"
+                    )
+            # else: skip reasoning blocks for normal LLM messages
+
+        elif item_type == "open_webui:code_interpreter":
+            if raw:
+                # Include code interpreter content for LLM re-processing
+                code = item.get("code", "")
+                code_output = item.get("output", "")
+
+                if code:
+                    lang = item.get("lang", "python")
+                    pending_content.append(f"```{lang}\n{code}\n```")
+
+                if code_output:
+                    if isinstance(code_output, dict):
+                        stdout = code_output.get("stdout", "")
+                        result = code_output.get("result", "")
+                        output_text = stdout or result
+                    else:
+                        output_text = str(code_output)
+                    if output_text:
+                        pending_content.append(f"Output:\n{output_text}")
+            # else: skip extension types
+
         elif item_type.startswith("open_webui:"):
-            # Skip extension types
+            # Skip other extension types
             pass
-    
+
     # Flush remaining content/tool_calls
-    if pending_content or pending_tool_calls:
-        messages.append({
-            "role": "assistant",
-            "content": "\n".join(pending_content) if pending_content else "",
-            **({"tool_calls": pending_tool_calls} if pending_tool_calls else {}),
-        })
-    
+    flush_pending()
+
     return messages
 
 

From 3ae44d11a5789429a3277070d6f03f6e4c4979a8 Mon Sep 17 00:00:00 2001
From: Timothy Jaeryang Baek <tim@openwebui.com>
Date: Sun, 8 Feb 2026 22:37:13 -0600
Subject: [PATCH 29/42] refac

---
 backend/open_webui/models/groups.py           |  2 +
 .../workspace/common/AddAccessModal.svelte    | 69 +++++++++++++++++++
 2 files changed, 71 insertions(+)
 create mode 100644 src/lib/components/workspace/common/AddAccessModal.svelte

diff --git a/backend/open_webui/models/groups.py b/backend/open_webui/models/groups.py
index cbd0bb2ff9..f2f364c144 100644
--- a/backend/open_webui/models/groups.py
+++ b/backend/open_webui/models/groups.py
@@ -171,10 +171,12 @@ class GroupTable:
                     if share_value:
                         # Groups open to anyone: data is null, config.share is null, or share is true
                         # Use case-insensitive string comparison to handle variations like "True", "TRUE"
+                        # Handle potential JSON boolean to string casting issues by checking for both string 'true' and boolean equivalence if possible, 
                         anyone_can_share = or_(
                             Group.data.is_(None),
                             json_share_str.is_(None),
                             json_share_lower == "true",
+                            json_share_lower == "1", # Handle SQLite boolean true
                         )
 
                         if member_id:
diff --git a/src/lib/components/workspace/common/AddAccessModal.svelte b/src/lib/components/workspace/common/AddAccessModal.svelte
new file mode 100644
index 0000000000..5180fef10a
--- /dev/null
+++ b/src/lib/components/workspace/common/AddAccessModal.svelte
@@ -0,0 +1,69 @@
+<script lang="ts">
+	import { getContext } from 'svelte';
+	const i18n = getContext('i18n');
+
+	import Modal from '$lib/components/common/Modal.svelte';
+	import XMark from '$lib/components/icons/XMark.svelte';
+	import MemberSelector from '$lib/components/workspace/common/MemberSelector.svelte';
+
+	export let show = false;
+	export let onAdd = (payload: { userIds: string[]; groupIds: string[] }) => {};
+
+	let userIds: string[] = [];
+	let groupIds: string[] = [];
+	let loading = false;
+
+	const submitHandler = () => {
+		loading = true;
+		onAdd({ userIds, groupIds });
+		show = false;
+
+		userIds = [];
+		groupIds = [];
+		loading = false;
+	};
+</script>
+
+<Modal size="sm" bind:show>
+	<div>
+		<div class=" flex justify-between dark:text-gray-100 px-5 pt-4 mb-1.5">
+			<div class="self-center text-base">
+				<div class="flex items-center gap-0.5 shrink-0">
+					{$i18n.t('Add Access')}
+				</div>
+			</div>
+			<button
+				class="self-center"
+				on:click={() => {
+					show = false;
+				}}
+			>
+				<XMark className={'size-5'} />
+			</button>
+		</div>
+
+		<div class="flex flex-col md:flex-row w-full px-3 pb-4 md:space-x-4 dark:text-gray-200">
+			<div class=" flex flex-col w-full sm:flex-row sm:justify-center sm:space-x-6">
+				<form
+					class="flex flex-col w-full"
+					on:submit|preventDefault={() => {
+						submitHandler();
+					}}
+				>
+					<div class="flex flex-col w-full h-full pb-2">
+						<MemberSelector bind:userIds bind:groupIds includeGroups={true} />
+					</div>
+
+					<div class="flex justify-end pt-3 text-sm font-medium gap-1.5">
+						<button
+							class="px-3.5 py-1.5 text-sm font-medium bg-black hover:bg-gray-950 text-white dark:bg-white dark:text-black dark:hover:bg-gray-100 transition rounded-full flex flex-row space-x-1 items-center"
+							type="submit"
+						>
+							{$i18n.t('Add')}
+						</button>
+					</div>
+				</form>
+			</div>
+		</div>
+	</div>
+</Modal>

From e2d09ac36174de48a7d85bafc8d3291c9ffe44cd Mon Sep 17 00:00:00 2001
From: Tim Baek <tim@openwebui.com>
Date: Mon, 9 Feb 2026 09:06:48 +0400
Subject: [PATCH 30/42] refac

---
 backend/open_webui/routers/openai.py | 27 +++++++++++++++++++++++++++
 1 file changed, 27 insertions(+)

diff --git a/backend/open_webui/routers/openai.py b/backend/open_webui/routers/openai.py
index a4dce3fe0c..5cb0deb697 100644
--- a/backend/open_webui/routers/openai.py
+++ b/backend/open_webui/routers/openai.py
@@ -858,6 +858,33 @@ def convert_to_responses_payload(payload: dict) -> dict:
     if "max_tokens" in responses_payload:
         responses_payload["max_output_tokens"] = responses_payload.pop("max_tokens")
     
+    # Remove Chat Completions-only parameters not supported by the Responses API
+    for unsupported_key in ("stream_options", "logit_bias", "frequency_penalty", "presence_penalty", "stop"):
+        responses_payload.pop(unsupported_key, None)
+    
+    # Convert Chat Completions tools format to Responses API format
+    # Chat Completions: {"type": "function", "function": {"name": ..., "description": ..., "parameters": ...}}
+    # Responses API:    {"type": "function", "name": ..., "description": ..., "parameters": ...}
+    if "tools" in responses_payload and isinstance(responses_payload["tools"], list):
+        converted_tools = []
+        for tool in responses_payload["tools"]:
+            if isinstance(tool, dict) and "function" in tool:
+                func = tool["function"]
+                converted_tool = {"type": tool.get("type", "function")}
+                if isinstance(func, dict):
+                    converted_tool["name"] = func.get("name", "")
+                    if "description" in func:
+                        converted_tool["description"] = func["description"]
+                    if "parameters" in func:
+                        converted_tool["parameters"] = func["parameters"]
+                    if "strict" in func:
+                        converted_tool["strict"] = func["strict"]
+                converted_tools.append(converted_tool)
+            else:
+                # Already in correct format or unknown format, pass through
+                converted_tools.append(tool)
+        responses_payload["tools"] = converted_tools
+    
     return responses_payload
 
 

From 65904b867ef75679b6dba6ec8f61d3b9b7256e4f Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Aindri=C3=BA=20Mac=20Giolla=20Eoin?= <aindriu80@gmail.com>
Date: Mon, 9 Feb 2026 19:25:28 +0000
Subject: [PATCH 31/42] i18n: Updated Irish translation (#21253)

Co-authored-by: Tim Baek <tim@openwebui.com>
Co-authored-by: joaoback <156559121+joaoback@users.noreply.github.com>
---
 src/lib/i18n/locales/ie-GA/translation.json | 396 ++++++++++----------
 1 file changed, 198 insertions(+), 198 deletions(-)

diff --git a/src/lib/i18n/locales/ie-GA/translation.json b/src/lib/i18n/locales/ie-GA/translation.json
index 517f5fa4db..17e5b52cc9 100644
--- a/src/lib/i18n/locales/ie-GA/translation.json
+++ b/src/lib/i18n/locales/ie-GA/translation.json
@@ -12,23 +12,23 @@
 	"{{COUNT}} Available Tools": "{{COUNT}} Uirlisí ar Fáil",
 	"{{COUNT}} characters": "{{COUNT}} carachtair",
 	"{{COUNT}} extracted lines": "{{COUNT}} línte eastósctha",
-	"{{COUNT}} files": "",
+	"{{COUNT}} files": "{{COUNT}} comhad",
 	"{{COUNT}} hidden lines": "{{COUNT}} línte folaithe",
 	"{{COUNT}} Replies": "{{COUNT}} Freagra",
-	"{{COUNT}} Rows": "",
+	"{{COUNT}} Rows": "{{COUNT}} Sraitheanna",
 	"{{COUNT}} Sources": "{{COUNT}} Foinsí",
 	"{{COUNT}} words": "{{COUNT}} focail",
 	"{{LOCALIZED_DATE}} at {{LOCALIZED_TIME}}": "{{LOCALIZED_DATE}} ag {{LOCALIZED_TIME}}",
 	"{{model}} download has been canceled": "Tá íoslódáil {{model}} curtha ar ceal",
-	"{{NAMES}} reacted with {{REACTION}}": "",
+	"{{NAMES}} reacted with {{REACTION}}": "D’fhreagair {{NAMES}} le {{REACTION}}",
 	"{{user}}'s Chats": "Comhráite {{user}}",
 	"{{webUIName}} Backend Required": "{{webUIName}} Ceoldeireadh Riachtanach",
 	"*Prompt node ID(s) are required for image generation": "* Tá ID nód leid ag teastáil chun íomhá a ghiniúint",
 	"1 Source": "1 Foinse",
-	"A collaboration channel where people join as members": "",
-	"A discussion channel where access is controlled by groups and permissions": "",
+	"A collaboration channel where people join as members": "Cainéal comhoibrithe ina mbíonn daoine ag glacadh páirte mar bhaill",
+	"A discussion channel where access is controlled by groups and permissions": "Cainéal plé ina bhfuil rochtain rialaithe ag grúpaí agus ceadanna",
 	"A new version (v{{LATEST_VERSION}}) is now available.": "Tá leagan nua (v {{LATEST_VERSION}}) ar fáil anois.",
-	"A private conversation between you and selected users": "",
+	"A private conversation between you and selected users": "Comhrá príobháideach idir tú féin agus úsáideoirí roghnaithe",
 	"A task model is used when performing tasks such as generating titles for chats and web search queries": "Úsáidtear samhail tascanna agus tascanna á ndéanamh amhail teidil a ghiniúint le haghaidh comhráite agus fiosrúcháin chuardaigh ghréasáin",
 	"a user": "úsáideoir",
 	"About": "Maidir",
@@ -47,7 +47,7 @@
 	"Activate this command by typing \"/{{COMMAND}}\" to chat input.": "Gníomhachtaigh an t-ordú seo trí \"/{{COMMAND}}\" a chlóscríobh chun ionchur comhrá a dhéanamh.",
 	"Active": "Gníomhach",
 	"Active Users": "Úsáideoirí Gníomhacha",
-	"Activity": "",
+	"Activity": "Gníomhaíocht",
 	"Add": "Cuir",
 	"Add a model ID": "Cuir aitheantas samhail leis",
 	"Add a short description about what this model does": "Cuir cur síos gairid leis faoi na rudaí a dhéanann an tsamhail seo",
@@ -60,8 +60,8 @@
 	"Add Custom Prompt": "Cuir Leid Saincheaptha leis",
 	"Add Details": "Cuir Sonraí leis",
 	"Add Files": "Cuir Comhaid",
-	"Add Member": "",
-	"Add Members": "",
+	"Add Member": "Cuir Ball leis",
+	"Add Members": "Cuir Baill leis",
 	"Add Memory": "Cuir Cuimhne",
 	"Add Model": "Cuir Samhail leis",
 	"Add Reaction": "Cuir Frithghníomh leis",
@@ -70,15 +70,15 @@
 	"Add text content": "Cuir ábhar téacs leis",
 	"Add User": "Cuir Úsáideoir leis",
 	"Add User Group": "Cuir Grúpa Úsáideoirí leis",
-	"Add webpage": "",
+	"Add webpage": "Cuir leathanach gréasáin leis",
 	"Additional Config": "Cumraíocht Bhreise",
 	"Additional configuration options for marker. This should be a JSON string with key-value pairs. For example, '{\"key\": \"value\"}'. Supported keys include: disable_links, keep_pageheader_in_output, keep_pagefooter_in_output, filter_blank_pages, drop_repeated_text, layout_coverage_threshold, merge_threshold, height_tolerance, gap_threshold, image_threshold, min_line_length, level_count, default_level": "Roghanna cumraíochta breise don mharcóir. Ba chóir gur teaghrán JSON é seo le péirí eochrach-luachanna. Mar shampla, '{\"key\": \"value\"}'. I measc na n-eochracha a dtacaítear leo tá: disable_links, keep_pageheader_in_output, keep_pagefooter_in_output, filter_blank_pages, drop_repeated_text, layout_coverage_threshold, merge_threshold, height_tolerance, gap_threshold, image_threshold, min_line_length, level_count, default_level",
 	"Additional Parameters": "Paraiméadair Bhreise",
-	"Adds filenames, titles, sections, and snippets into the BM25 text to improve lexical recall.": "",
+	"Adds filenames, titles, sections, and snippets into the BM25 text to improve lexical recall.": "Cuireann sé ainmneacha comhad, teidil, rannóga, agus sleachta isteach sa téacs BM25 chun athghairm léacsach a fheabhsú.",
 	"Adjusting these settings will apply changes universally to all users.": "Cuirfear na socruithe seo ag coigeartú athruithe go huilíoch ar gach úsáideoir.",
 	"admin": "riarachán",
 	"Admin": "Riarachán",
-	"Admin Contact Email": "",
+	"Admin Contact Email": "Ríomhphost Teagmhála Riarthóra",
 	"Admin Panel": "Painéal Riaracháin",
 	"Admin Settings": "Socruithe Riaracháin",
 	"Admins have access to all tools at all times; users need tools assigned per model in the workspace.": "Bíonn rochtain ag riarthóirí ar na huirlisí go léir i gcónaí; teastaíonn ó úsáideoirí uirlisí a shanntar de réir samhail sa spás oibre.",
@@ -131,16 +131,16 @@
 	"and {{COUNT}} more": "agus {{COUNT}} eile",
 	"and create a new shared link.": "agus cruthaigh nasc nua roinnte.",
 	"Android": "Android",
-	"Anyone": "",
+	"Anyone": "Aon duine",
 	"API Base URL": "URL Bonn API",
 	"API Base URL for Datalab Marker service. Defaults to: https://www.datalab.to/api/v1/marker": "URL Bunúsach API do sheirbhís Marcóra Datalab. Réamhshocraithe go: https://www.datalab.to/api/v1/marker",
 	"API Key": "Eochair API",
 	"API Key created.": "Cruthaíodh Eochair API.",
 	"API Key Endpoint Restrictions": "Príomhshrianta Críochphointe API",
 	"API keys": "Eochracha API",
-	"API Keys": "",
+	"API Keys": "Eochracha API",
 	"API Mode": "Mód API",
-	"API Timeout": "",
+	"API Timeout": "Am Teorannú API",
 	"API Version": "Leagan API",
 	"API Version is required": "Tá Leagan API ag teastáil",
 	"Application DN": "Feidhmchlár DN",
@@ -152,18 +152,18 @@
 	"Archived Chats": "Comhráite Cartlann",
 	"archived-chat-export": "gcartlann-comhrá-onnmhairiú",
 	"Are you sure you want to clear all memories? This action cannot be undone.": "An bhfuil tú cinnte gur mhaith leat na cuimhní go léir a ghlanadh? Ní féidir an gníomh seo a chealú.",
-	"Are you sure you want to delete \"{{NAME}}\"?": "",
+	"Are you sure you want to delete \"{{NAME}}\"?": "An bhfuil tú cinnte gur mian leat \"{{NAME}}\" a scriosadh?",
 	"Are you sure you want to delete this channel?": "An bhfuil tú cinnte gur mhaith leat an cainéal seo a scriosadh?",
 	"Are you sure you want to delete this message?": "An bhfuil tú cinnte gur mhaith leat an teachtaireacht seo a scriosadh?",
 	"Are you sure you want to unarchive all archived chats?": "An bhfuil tú cinnte gur mhaith leat gach comhrá cartlainne a dhíchartlannú?",
 	"Are you sure?": "An bhfuil tú cinnte?",
 	"Arena Models": "Samhlacha Réimse",
 	"Artifacts": "Déantáin",
-	"Asc": "",
+	"Asc": "Ardú",
 	"Ask": "Fiafraigh",
 	"Ask a question": "Cuir ceist",
 	"Assistant": "Cúntóir",
-	"Async Embedding Processing": "",
+	"Async Embedding Processing": "Próiseáil Leabaithe Asyncrónach",
 	"Attach File From Knowledge": "Ceangail Comhad ó Eolas",
 	"Attach Knowledge": "Ceangail Eolas",
 	"Attach Notes": "Ceangail Nótaí",
@@ -177,7 +177,7 @@
 	"Authenticate": "Fíordheimhnigh",
 	"Authentication": "Fíordheimhniú",
 	"Auto": "Uath",
-	"Auto (Random)": "",
+	"Auto (Random)": "Uathoibríoch (Randamach)",
 	"Auto-Copy Response to Clipboard": "Freagra AutoCopy go Gearrthaisce",
 	"Auto-playback response": "Freagra uathsheinm",
 	"Autocomplete Generation": "Giniúint Uathchríochnaithe",
@@ -186,7 +186,7 @@
 	"AUTOMATIC1111 Api Auth String": "UATHOIBRÍOCH1111 Api Auth Teaghrán",
 	"AUTOMATIC1111 Base URL": "UATHOIBRÍOCH1111 Bun URL",
 	"AUTOMATIC1111 Base URL is required.": "Tá URL bonn UATHOIBRÍOCH1111 ag teastáil.",
-	"Automatically inject system tools in native function calling mode (e.g., timestamps, memory, chat history, notes, etc.)": "",
+	"Automatically inject system tools in native function calling mode (e.g., timestamps, memory, chat history, notes, etc.)": "Uirlisí córais a instealladh go huathoibríoch i mód glaonna feidhme dúchais (m.sh., stampaí ama, cuimhne, stair comhrá, nótaí, srl.)",
 	"Available list": "Liosta atá ar fáil",
 	"Available Tools": "Uirlisí ar Fáil",
 	"available users": "úsáideoirí ar fáil",
@@ -205,7 +205,7 @@
 	"before": "roimh",
 	"Being lazy": "A bheith leisciúil",
 	"Beta": "Béite",
-	"Bing": "",
+	"Bing": "Bing",
 	"Bing Search V7 Endpoint": "Cuardach Bing V7 Críochphointe",
 	"Bing Search V7 Subscription Key": "Eochair Síntiúis Bing Cuardach V7",
 	"Bio": "Beathaisnéis",
@@ -214,14 +214,14 @@
 	"Bocha Search API Key": "Eochair API Cuardach Bocha",
 	"Bold": "Trom",
 	"Boosting or penalizing specific tokens for constrained responses. Bias values will be clamped between -100 and 100 (inclusive). (Default: none)": "Treisiú nó pionós a ghearradh ar chomharthaí sonracha as freagraí srianta. Déanfar luachanna laofachta a chlampáil idir -100 agus 100 (san áireamh). (Réamhshocrú: ceann ar bith)",
-	"Brave": "",
+	"Brave": "Brave",
 	"Brave Search API Key": "Eochair API Cuardaigh Brave",
-	"Builtin Tools": "",
+	"Builtin Tools": "Uirlisí Tógtha",
 	"Bullet List": "Liosta Urchair",
 	"Button ID": "Aitheantas an Chnaipe",
 	"Button Label": "Lipéad Cnaipe",
 	"Button Prompt": "Leid Cnaipe",
-	"by {{name}}": "",
+	"by {{name}}": "le {{name}}",
 	"By {{name}}": "Le {{name}}",
 	"Bypass Embedding and Retrieval": "Seachbhóthar Leabú agus Aisghabháil",
 	"Bypass Web Loader": "Seachbhóthar Luchtaire Gréasáin",
@@ -231,7 +231,7 @@
 	"Call feature is not supported when using Web STT engine": "Ní thacaítear le gné glaonna agus inneall Web STT á úsáid",
 	"Camera": "Ceamara",
 	"Cancel": "Cealaigh",
-	"Cannot create an empty note.": "",
+	"Cannot create an empty note.": "Ní féidir nóta folamh a chruthú.",
 	"Capabilities": "Cumais",
 	"Capture": "Gabháil",
 	"Capture Audio": "Gabháil Fuaime",
@@ -241,8 +241,8 @@
 	"Channel deleted successfully": "Scriosadh an cainéal go rathúil",
 	"Channel Name": "Ainm Cainéal",
 	"Channel name cannot be empty.": "Ní féidir ainm an chainéil a fhágáil folamh.",
-	"Channel name must be less than 128 characters": "",
-	"Channel Type": "",
+	"Channel name must be less than 128 characters": "Ní mór ainm an chainéil a bheith níos lú ná 128 carachtar",
+	"Channel Type": "Cineál Cainéal",
 	"Channel updated successfully": "Nuashonraíodh an cainéal go rathúil",
 	"Channels": "Cainéil",
 	"Character": "Carachtar",
@@ -264,16 +264,16 @@
 	"Check for updates": "Seiceáil nuashonruithe",
 	"Checking for updates...": "Seiceáil le haghaidh nuashonruithe...",
 	"Choose a model before saving...": "Roghnaigh samhail sula sábhálann tú...",
-	"Chunk Min Size Target": "",
+	"Chunk Min Size Target": "Spriocmhéid Íosta an Bhrúid",
 	"Chunk Overlap": "Forluí smután",
 	"Chunk Size": "Méid an Píosa",
-	"Chunks smaller than this threshold will be merged with neighboring chunks when possible. Set to 0 to disable merging.": "",
+	"Chunks smaller than this threshold will be merged with neighboring chunks when possible. Set to 0 to disable merging.": "Déanfar píosaí níos lú ná an tairseach seo a chumasc le píosaí comharsanacha nuair is féidir. Socraigh go 0 chun cumasc a dhíchumasú.",
 	"Ciphers": "Cipéirí",
 	"Citation": "Lua",
 	"Citations": "Comhlua",
 	"Clear memory": "Cuimhne ghlan",
 	"Clear Memory": "Glan Cuimhne",
-	"Clear status": "",
+	"Clear status": "Glan stádas",
 	"click here": "cliceáil anseo",
 	"Click here for filter guides.": "Cliceáil anseo le haghaidh treoracha scagaire.",
 	"Click here for help.": "Cliceáil anseo le haghaidh cabhair.",
@@ -303,17 +303,17 @@
 	"Code Block": "Bloc Cód",
 	"Code Editor": "Eagarthóir Cód",
 	"Code execution": "Cód a fhorghníomhú",
-	"Code Execution": "",
+	"Code Execution": "Forghníomhú Cód",
 	"Code Execution Engine": "Inneall Forghníomhaithe Cóid",
 	"Code Execution Timeout": "Teorainn Ama Forghníomhaithe Cóid",
 	"Code formatted successfully": "Cód formáidithe go rathúil",
 	"Code Interpreter": "Ateangaire Cód",
 	"Code Interpreter Engine": "Inneall Ateangaire Cóid",
 	"Code Interpreter Prompt Template": "Teimpléad Pras Ateangaire Cód",
-	"Collaboration channel where people join as members": "",
+	"Collaboration channel where people join as members": "Cainéal comhoibrithe ina mbíonn daoine páirteach mar bhaill",
 	"Collapse": "Laghdaigh",
 	"Collection": "Bailiúchán",
-	"Collections": "",
+	"Collections": "Bailiúcháin",
 	"Color": "Dath",
 	"ComfyUI": "ComfyUI",
 	"ComfyUI API Key": "Eochair API ComfyUI",
@@ -346,7 +346,7 @@
 	"Contact Admin for WebUI Access": "Déan teagmháil le Riarachán le haghaidh Rochtana WebUI",
 	"Content": "Ábhar",
 	"Content Extraction Engine": "Inneall Eastóscadh Ábhar",
-	"Content lengths (character counts only)": "",
+	"Content lengths (character counts only)": "Fad an ábhair (líon na gcarachtar amháin)",
 	"Continue Response": "Leanúint ar aghaidh",
 	"Continue with {{provider}}": "Lean ar aghaidh le {{provider}}",
 	"Continue with Email": "Lean ar aghaidh le Ríomhphost",
@@ -367,7 +367,7 @@
 	"Copy link": "Cóipeáil nasc",
 	"Copy Link": "Cóipeáil Nasc",
 	"Copy to clipboard": "Cóipeáil chuig an ngearrthaisce",
-	"Copy URL": "",
+	"Copy URL": "Cóipeáil URL",
 	"Copying to clipboard was successful!": "D'éirigh le cóipeáil chuig an ngearrthaisce!",
 	"CORS must be properly configured by the provider to allow requests from Open WebUI.": "Ní mór don soláthraí CORS a chumrú i gceart chun iarratais ó Open WebUI a cheadú.",
 	"Create": "Cruthaigh",
@@ -384,14 +384,14 @@
 	"Create Model": "Cruthaigh Samhail",
 	"Create new key": "Cruthaigh eochair nua",
 	"Create new secret key": "Cruthaigh eochair rúnda nua",
-	"Create note": "",
+	"Create note": "Cruthaigh nóta",
 	"Create Note": "Cruthaigh Nóta",
 	"Create your first note by clicking on the plus button below.": "Cruthaigh do chéad nóta trí chliceáil ar an gcnaipe móide thíos.",
 	"Created at": "Cruthaithe ag",
 	"Created At": "Cruthaithe Ag",
 	"Created by": "Cruthaithe ag",
 	"Created by you": "Cruthaithe agatsa",
-	"Created on {{date}}": "",
+	"Created on {{date}}": "Cruthaithe ar {{date}}",
 	"CSV Import": "Iompórtáil CSV",
 	"Ctrl+Enter to Send": "Ctrl+Iontráil chun Seol",
 	"Current Model": "Samhail Reatha",
@@ -405,10 +405,10 @@
 	"Data Controls": "Rialuithe Sonraí",
 	"Database": "Bunachar Sonraí",
 	"Datalab Marker API": "API Marcóra Datalab",
-	"DD/MM/YYYY": "LL/MM/LLLL",
-	"DDGS Backend": "",
+	"DD/MM/YYYY": "DD/MM/YYYY",
+	"DDGS Backend": "Cúltaca DDGS",
 	"December": "Nollaig",
-	"Decrease UI Scale": "",
+	"Decrease UI Scale": "Laghdaigh Scála an Chomhéadain Úsáideora",
 	"Deepgram": "Deepgram",
 	"Default": "Réamhshocraithe",
 	"Default (Open AI)": "Réamhshocraithe (Oscail AI)",
@@ -417,14 +417,14 @@
 	"Default description enabled": "Cur síos réamhshocraithe cumasaithe",
 	"Default Features": "Gnéithe Réamhshocraithe",
 	"Default Filters": "Scagairí Réamhshocraithe",
-	"Default Group": "",
+	"Default Group": "Grúpa Réamhshocraithe",
 	"Default mode works with a wider range of models by calling tools once before execution. Native mode leverages the model's built-in tool-calling capabilities, but requires the model to inherently support this feature.": "Oibríonn an mód réamhshocraithe le raon níos leithne samhlacha trí uirlisí a ghlaoch uair amháin roimh an bhforghníomhú. Úsáideann an modh dúchasach cumais ionsuite glaoite uirlisí an samhail, ach éilíonn sé go dtacóidh an tsamhail leis an ngné seo go bunúsach.",
 	"Default Model": "Samhail Réamhshocrú",
 	"Default model updated": "Nuashonraithe samhail réamhshocraithe",
 	"Default Models": "Samhlacha Réamhshocraithe",
 	"Default permissions": "Ceadanna réamhshocraithe",
 	"Default permissions updated successfully": "D'éirigh le ceadanna réamhshocraithe a nuashonrú",
-	"Default Pinned Models": "",
+	"Default Pinned Models": "Samhlacha Priontáilte Réamhshocraithe",
 	"Default Prompt Suggestions": "Moltaí Leid Réamhshocraithe",
 	"Default to 389 or 636 if TLS is enabled": "Réamhshocrú go 389 nó 636 má tá TLS cumasaithe",
 	"Default to ALL": "Réamhshocrú do GACH",
@@ -433,7 +433,7 @@
 	"Delete": "Scrios",
 	"Delete a model": "Scrios samhail",
 	"Delete All Chats": "Scrios Gach Comhrá",
-	"Delete all contents inside this folder": "",
+	"Delete all contents inside this folder": "Scrios an t-ábhar go léir atá sa fhillteán seo",
 	"Delete All Models": "Scrios Gach Samhail",
 	"Delete Chat": "Scrios Comhrá",
 	"Delete chat?": "Scrios comhrá?",
@@ -447,12 +447,12 @@
 	"delete this link": "scrios an nasc seo",
 	"Delete tool?": "Uirlis a scriosadh?",
 	"Delete User": "Scrios Úsáideoir",
-	"Deleted": "",
+	"Deleted": "Scriosta",
 	"Deleted {{deleteModelTag}}": "Scriosta {{deleteModelTag}}",
 	"Deleted {{name}}": "Scriosta {{name}}",
 	"Deleted User": "Úsáideoir Scriosta",
 	"Deployment names are required for Azure OpenAI": "Tá ainmneacha imscartha ag teastáil le haghaidh Azure OpenAI",
-	"Desc": "",
+	"Desc": "Cur Síos",
 	"Describe your knowledge base and objectives": "Déan cur síos ar do bhunachar eolais agus do chuspóirí",
 	"Description": "Cur síos",
 	"Detect Artifacts Automatically": "Déan Déantáin a bhrath go huathoibríoch",
@@ -461,7 +461,7 @@
 	"Direct": "Díreach",
 	"Direct Connections": "Naisc Dhíreacha",
 	"Direct Connections allow users to connect to their own OpenAI compatible API endpoints.": "Ligeann Connections Direct d'úsáideoirí ceangal lena gcríochphointí API féin atá comhoiriúnach le OpenAI.",
-	"Direct Message": "",
+	"Direct Message": "Teachtaireacht Dhíreach",
 	"Direct Tool Servers": "Freastalaithe Uirlisí Díreacha",
 	"Directory selection was cancelled": "Cealaíodh roghnú an eolaire",
 	"Disable Code Interpreter": "Díchumasaigh Léirmhínitheoir Cód",
@@ -478,7 +478,7 @@
 	"Discover, download, and explore custom prompts": "Leideanna saincheaptha a fháil amach, a íoslódáil agus a iniúchadh",
 	"Discover, download, and explore custom tools": "Uirlisí saincheaptha a fháil amach, íoslódáil agus iniúchadh",
 	"Discover, download, and explore model presets": "Réamhshocruithe samhail a fháil amach, a íoslódáil agus a iniúchadh",
-	"Discussion channel where access is based on groups and permissions": "",
+	"Discussion channel where access is based on groups and permissions": "Cainéal plé ina bhfuil rochtain bunaithe ar ghrúpaí agus ceadanna",
 	"Display": "Taispeáin",
 	"Display chat title in tab": "Taispeáin teideal an chomhrá sa chluaisín",
 	"Display Emoji in Call": "Taispeáin Emoji i nGlao",
@@ -489,16 +489,16 @@
 	"Dive into knowledge": "Léim isteach eolas",
 	"Do not install functions from sources you do not fully trust.": "Ná suiteáil feidhmeanna ó fhoinsí nach bhfuil muinín iomlán agat.",
 	"Do not install tools from sources you do not fully trust.": "Ná suiteáil uirlisí ó fhoinsí nach bhfuil muinín iomlán agat.",
-	"Do you want to sync your usage stats with Open WebUI Community?": "",
+	"Do you want to sync your usage stats with Open WebUI Community?": "Ar mhaith leat do staitisticí úsáide a shioncronú le Pobal Open WebUI?",
 	"Docling": "Docling",
-	"Docling Parameters": "",
+	"Docling Parameters": "Paraiméadair Docling",
 	"Docling Server URL required.": "URL Freastalaí Doling ag teastáil.",
 	"Document": "Doiciméad",
 	"Document Intelligence": "Faisnéise Doiciméad",
 	"Document Intelligence endpoint required.": "Críochphointe Faisnéise Doiciméad ag teastáil.",
-	"Document Intelligence Model": "",
+	"Document Intelligence Model": "Múnla Faisnéise Doiciméad",
 	"Documentation": "Doiciméadú",
-	"Documents": "",
+	"Documents": "Doiciméid",
 	"does not make any external connections, and your data stays securely on your locally hosted server.": "ní dhéanann sé aon naisc sheachtracha, agus fanann do chuid sonraí go slán ar do fhreastalaí a óstáiltear go háitiúil.",
 	"Domain Filter List": "Liosta Scagairí Fearainn",
 	"don't fetch random pipelines from sources you don't trust.": "ná faigh píblínte randamacha ó fhoinsí nach bhfuil muinín agat astu.",
@@ -509,28 +509,28 @@
 	"Done": "Déanta",
 	"Download": "Íoslódáil",
 	"Download & Delete": "Íoslódáil agus scrios",
-	"Download as JSON": "",
+	"Download as JSON": "Íoslódáil mar JSON",
 	"Download as SVG": "Íoslódáil i SVG",
 	"Download canceled": "Íoslódáil cealaithe",
 	"Download Database": "Íoslódáil Bunachair",
-	"Downloading stats...": "",
+	"Downloading stats...": "Ag íoslódáil staitisticí...",
 	"Draw": "Tarraing",
 	"Drop any files here to upload": "Scaoil aon chomhaid anseo le huaslódáil",
-	"DuckDuckGo": "",
+	"DuckDuckGo": "DuckDuckGo",
 	"e.g. '30s','10m'. Valid time units are 's', 'm', 'h'.": "m.sh. '30s', '10m'. Is iad aonaid ama bailí ná 's', 'm', 'h'.",
 	"e.g. \"json\" or a JSON schema": "m.sh. \"json\" nó scéimre JSON",
 	"e.g. 60": "m.sh. 60",
 	"e.g. A filter to remove profanity from text": "m.sh. Scagaire chun profanity a bhaint as téacs",
-	"e.g. about the Roman Empire": "",
-	"e.g. alloy, echo, shimmer": "",
+	"e.g. about the Roman Empire": "m.sh. faoin Impireacht Rómhánach",
+	"e.g. alloy, echo, shimmer": "m.sh. cóimhiotal, macalla, lonrach",
 	"e.g. en": "m.sh. en",
 	"e.g. My Filter": "m.sh. Mo Scagaire",
 	"e.g. My Tools": "m.sh. Mo Uirlisí",
 	"e.g. my_filter": "m.sh. mo_scagaire",
 	"e.g. my_tools": "m.sh. mo_uirlisí",
 	"e.g. pdf, docx, txt": "m.sh. pdf, docx, txt",
-	"e.g. Tell me a fun fact": "",
-	"e.g. Tell me a fun fact about the Roman Empire": "",
+	"e.g. Tell me a fun fact": "m.sh. Inis dom fíric spraíúil",
+	"e.g. Tell me a fun fact about the Roman Empire": "m.sh. Inis dom fíric spraíúil faoin Impireacht Rómhánach",
 	"e.g. Tools for performing various operations": "m.sh. Uirlisí chun oibríochtaí éagsúla a dhéanamh",
 	"e.g., 3, 4, 5 (leave blank for default)": "m.sh., 3, 4, 5 (fág bán le haghaidh réamhshocraithe)",
 	"e.g., audio/wav,audio/mpeg,video/* (leave blank for defaults)": "m.sh., fuaim/wav, fuaim/mpeg, físeán/* (fág bán le haghaidh réamhshocruithe)",
@@ -559,7 +559,7 @@
 	"Embedding Batch Size": "Méid Baisc Leabaith",
 	"Embedding Model": "Samhail Leabháilte",
 	"Embedding Model Engine": "Inneall Samhail Leabaithe",
-	"Enable API Keys": "",
+	"Enable API Keys": "Cumasaigh Eochracha API",
 	"Enable autocomplete generation for chat messages": "Cumasaigh giniúint uathchríochnaithe le haghaidh teachtaireachtaí comhrá",
 	"Enable Code Execution": "Cumasaigh Forghníomhú Cód",
 	"Enable Code Interpreter": "Cumasaigh Ateangaire Cóid",
@@ -575,14 +575,14 @@
 	"Endpoint URL": "URL críochphointe",
 	"Enforce Temporary Chat": "Cuir Comhrá Sealadach i bhfeidhm",
 	"Enhance": "Feabhsaigh",
-	"Enrich Hybrid Search Text": "",
+	"Enrich Hybrid Search Text": "Saibhrigh Téacs Cuardaigh Hibrideach",
 	"Ensure your CSV file includes 4 columns in this order: Name, Email, Password, Role.": "Déan cinnte go bhfuil 4 cholún san ord seo i do chomhad CSV: Ainm, Ríomhphost, Pasfhocal, Ról.",
 	"Enter {{role}} message here": "Cuir isteach teachtaireacht {{role}} anseo",
 	"Enter a detail about yourself for your LLMs to recall": "Cuir isteach mionsonraí fút féin chun do LLManna a mheabhrú",
 	"Enter a title for the pending user info overlay. Leave empty for default.": "Cuir isteach teideal don fhorleagan faisnéise úsáideora atá ar feitheamh. Fág folamh don réamhshocrú.",
 	"Enter a watermark for the response. Leave empty for none.": "Cuir isteach comhartha uisce don fhreagra. Fág folamh mura bhfuil aon cheann ann.",
 	"Enter additional headers in JSON format": "Cuir ceanntásca breise isteach i bhformáid JSON",
-	"Enter additional headers in JSON format (e.g. {\"X-Custom-Header\": \"value\"}": "",
+	"Enter additional headers in JSON format (e.g. {\"X-Custom-Header\": \"value\"}": "Cuir isteach ceanntásca breise i bhformáid JSON (m.sh. {\"X-Custom-Header\": \"value\"}",
 	"Enter additional parameters in JSON format": "Cuir isteach paraiméadair bhreise i bhformáid JSON",
 	"Enter api auth string (e.g. username:password)": "Cuir isteach sreang auth api (m.sh. ainm úsáideora: pasfhocal)",
 	"Enter Application DN": "Cuir isteach Feidhmchlár DN",
@@ -592,7 +592,7 @@
 	"Enter Bocha Search API Key": "Cuir isteach Eochair API Bocha Cuardach",
 	"Enter Brave Search API Key": "Cuir isteach Eochair API Brave Cuardach",
 	"Enter certificate path": "Cuir isteach cosán an teastais",
-	"Enter Chunk Min Size Target": "",
+	"Enter Chunk Min Size Target": "Iontráil Spriocmhéid Íosta an Bhrúid",
 	"Enter Chunk Overlap": "Cuir isteach Chunk Forluí",
 	"Enter Chunk Size": "Cuir isteach Méid an Smután",
 	"Enter comma-separated \"token:bias_value\" pairs (example: 5432:100, 413:-100)": "Cuir isteach péirí camóg-scartha \"comhartha:luach laofachta\" (mar shampla: 5432:100, 413:-100)",
@@ -601,12 +601,12 @@
 	"Enter Datalab Marker API Base URL": "Cuir isteach URL Bonn Datalab Marker API",
 	"Enter Datalab Marker API Key": "Iontráil Eochair API Marcóra Datalab",
 	"Enter description": "Iontráil cur síos",
-	"Enter Docling API Key": "",
+	"Enter Docling API Key": "Cuir isteach Eochair API Docling",
 	"Enter Docling Server URL": "Cuir isteach URL Freastalaí Doling",
 	"Enter Document Intelligence Endpoint": "Iontráil Críochphointe Faisnéise Doiciméid",
 	"Enter Document Intelligence Key": "Iontráil Eochair Faisnéise Doiciméad",
-	"Enter Document Intelligence Model": "",
-	"Enter domains separated by commas (e.g., example.com,site.org,!excludedsite.com)": "",
+	"Enter Document Intelligence Model": "Iontráil Múnla Faisnéise Doiciméad",
+	"Enter domains separated by commas (e.g., example.com,site.org,!excludedsite.com)": "Cuir isteach fearainn scartha le camóga (m.sh., example.com,site.org, !excludedsite.com)",
 	"Enter Exa API Key": "Cuir isteach Eochair Exa API",
 	"Enter External Document Loader API Key": "Cuir isteach Eochair API Luchtaitheora Doiciméad Seachtrach",
 	"Enter External Document Loader URL": "Cuir isteach URL Luchtaitheora Doiciméad Seachtrach",
@@ -616,16 +616,16 @@
 	"Enter External Web Search URL": "Cuir isteach URL Cuardaigh Gréasáin Sheachtrach",
 	"Enter Firecrawl API Base URL": "Cuir isteach URL Bonn API Firecrawl",
 	"Enter Firecrawl API Key": "Cuir isteach Eochair API Firecrawl",
-	"Enter Firecrawl Timeout": "",
+	"Enter Firecrawl Timeout": "Cuir isteach Am Teorann Firecrawl",
 	"Enter folder name": "Cuir isteach ainm an fhillteáin",
-	"Enter function name filter list (e.g. func1, !func2)": "",
+	"Enter function name filter list (e.g. func1, !func2)": "Cuir isteach ainm feidhme liosta scagaire (m.sh. func1, !func2)",
 	"Enter Github Raw URL": "Cuir isteach URL Github Raw",
 	"Enter Google PSE API Key": "Cuir isteach Eochair API Google PSE",
 	"Enter Google PSE Engine Id": "Cuir isteach ID Inneall Google PSE",
 	"Enter hex color (e.g. #FF0000)": "Cuir isteach dath heicsidheachúlach (m.sh. #FF0000)",
 	"Enter ID": "Cuir isteach aitheantas",
 	"Enter Image Size (e.g. 512x512)": "Iontráil Méid Íomhá (m.sh. 512x512)",
-	"Enter Jina API Base URL": "",
+	"Enter Jina API Base URL": "Cuir isteach URL Bunúsach API Jina",
 	"Enter Jina API Key": "Cuir isteach Eochair API Jina",
 	"Enter JSON config (e.g., {\"disable_links\": true})": "Cuir isteach cumraíocht JSON (m.sh., {\"disable_links\": true})",
 	"Enter Jupyter Password": "Cuir isteach Pasfhocal Jupyter",
@@ -634,7 +634,7 @@
 	"Enter Kagi Search API Key": "Cuir isteach Eochair Kagi Cuardach API",
 	"Enter Key Behavior": "Iontráil Iompar Eochair",
 	"Enter language codes": "Cuir isteach cóid teanga",
-	"Enter MinerU API Key": "",
+	"Enter MinerU API Key": "Cuir isteach Eochair API MinerU",
 	"Enter Mistral API Base URL": "Cuir isteach URL Bunúsach API Mistral",
 	"Enter Mistral API Key": "Cuir isteach Eochair API Mistral",
 	"Enter Model ID": "Cuir isteach ID an tSamhail",
@@ -645,7 +645,7 @@
 	"Enter Number of Steps (e.g. 50)": "Iontráil Líon na gCéimeanna (m.sh. 50)",
 	"Enter Ollama Cloud API Key": "Cuir isteach Eochair API Ollama Cloud",
 	"Enter Perplexity API Key": "Cuir isteach Eochair API Perplexity",
-	"Enter Perplexity Search API URL": "",
+	"Enter Perplexity Search API URL": "Cuir isteach URL API Cuardaigh na Measctha",
 	"Enter Playwright Timeout": "Iontráil Teorainn Ama na nDrámadóir",
 	"Enter Playwright WebSocket URL": "Cuir isteach URL WebSocket Seinmeora",
 	"Enter proxy URL (e.g. https://user:password@host:port)": "Cuir isteach URL seachfhreastalaí (m.sh. https://user:password@host:port)",
@@ -654,8 +654,8 @@
 	"Enter SearchApi API Key": "Cuir isteach Eochair API SearchAPI",
 	"Enter SearchApi Engine": "Cuir isteach Inneall SearchAPI",
 	"Enter Searxng Query URL": "Cuir isteach URL Ceist Searxng",
-	"Enter Searxng search language": "",
-	"Enter Seed": "Cuir isteach Síl",
+	"Enter Searxng search language": "Cuir isteach teanga chuardaigh Searxng",
+	"Enter Seed": "Cuir isteach Síol",
 	"Enter SerpApi API Key": "Cuir isteach Eochair API SerpApi",
 	"Enter SerpApi Engine": "Cuir isteach Inneall SerpApi",
 	"Enter Serper API Key": "Cuir isteach Eochair API Serper",
@@ -732,11 +732,11 @@
 	"Export chat (.json)": "Easpórtáil comhrá (.json)",
 	"Export Chats": "Comhráite Easpórtá",
 	"Export Config to JSON File": "Easpórtáil Cumraíocht chuig Comhad JSON",
-	"Export Models": "",
+	"Export Models": "Samhlacha Easpórtála",
 	"Export Presets": "Easpórtáil Gach Comhrá Cartlainne",
-	"Export Prompts": "",
+	"Export Prompts": "Leideanna Easpórtála",
 	"Export to CSV": "Easpórtáil go CSV",
-	"Export Tools": "",
+	"Export Tools": "Uirlisí Easpórtála",
 	"Export Users": "Easpórtáil Úsáideoirí",
 	"External": "Seachtrach",
 	"External Document Loader URL required.": "URL Luchtaitheora Doiciméad Seachtrach ag teastáil.",
@@ -748,8 +748,8 @@
 	"External Web Search URL": "URL Cuardaigh Gréasáin Sheachtrach",
 	"Fade Effect for Streaming Text": "Éifeacht Céimnithe le haghaidh Sruthú Téacs",
 	"Failed to add file.": "Theip ar an gcomhad a chur leis.",
-	"Failed to add members": "",
-	"Failed to clear status": "",
+	"Failed to add members": "Theip ar bhaill a chur leis",
+	"Failed to clear status": "Theip ar an stádas a ghlanadh",
 	"Failed to connect to {{URL}} OpenAPI tool server": "Theip ar nascadh le {{URL}} freastalaí uirlisí OpenAPI",
 	"Failed to copy link": "Theip ar an nasc a chóipeáil",
 	"Failed to create API Key.": "Theip ar an eochair API a chruthú.",
@@ -760,25 +760,25 @@
 	"Failed to generate title": "Theip ar an teideal a ghiniúint",
 	"Failed to import models": "Theip ar samhail a iompórtáil",
 	"Failed to load chat preview": "Theip ar réamhamharc comhrá a lódáil",
-	"Failed to load Excel/CSV file. Please try downloading it instead.": "",
+	"Failed to load Excel/CSV file. Please try downloading it instead.": "Theip ar an gcomhad Excel/CSV a lódáil. Déan iarracht é a íoslódáil ina ionad.",
 	"Failed to load file content.": "Theip ar lódáil ábhar an chomhaid.",
 	"Failed to move chat": "Theip ar an gcomhrá a bhogadh",
-	"Failed to process URL: {{url}}": "",
+	"Failed to process URL: {{url}}": "Theip ar phróiseáil an URL: {{url}}",
 	"Failed to read clipboard contents": "Theip ar ábhar gearrthaisce a lé",
-	"Failed to remove member": "",
+	"Failed to remove member": "Theip ar an mball a bhaint",
 	"Failed to render diagram": "Theip ar an léaráid a rindreáil",
 	"Failed to render visualization": "Theip ar an léirshamhlú a rindreáil",
 	"Failed to save connections": "Theip ar na naisc a shábháil",
 	"Failed to save conversation": "Theip ar an gcomhrá a shábháil",
 	"Failed to save models configuration": "Theip ar chumraíocht na samhlacha a shábháil",
 	"Failed to update settings": "Theip ar shocruithe a nuashonrú",
-	"Failed to update status": "",
+	"Failed to update status": "Theip ar an stádas a nuashonrú",
 	"Failed to upload file.": "Theip ar uaslódáil an chomhaid.",
 	"Features": "Gnéithe",
 	"Features Permissions": "Ceadanna Gnéithe",
 	"February": "Feabhra",
-	"Feedback": "",
-	"Feedback deleted successfully": "",
+	"Feedback": "Aiseolas",
+	"Feedback deleted successfully": "Scriosadh an t-aiseolas go rathúil",
 	"Feedback Details": "Sonraí Aiseolais",
 	"Feedback History": "Stair Aiseolais",
 	"Feel free to add specific details": "Ná bíodh leisce ort sonraí ar leith a chur leis",
@@ -786,14 +786,14 @@
 	"File": "Comhad",
 	"File added successfully.": "D'éirigh leis an gcomhad a chur leis.",
 	"File content updated successfully.": "D'éirigh le hábhar an chomhaid a nuashonrú.",
-	"File Context": "",
+	"File Context": "Comhthéacs Comhaid",
 	"File Mode": "Mód Comhad",
 	"File not found.": "Níor aimsíodh an comhad.",
 	"File removed successfully.": "D'éirigh le baint an chomhaid.",
 	"File size should not exceed {{maxSize}} MB.": "Níor chóir go mbeadh méid an chomhaid níos mó ná {{maxSize}} MB.",
 	"File Upload": "Uaslódáil Comhaid",
 	"File uploaded successfully": "D'éirigh le huaslódáil an chomhaid",
-	"File uploaded!": "",
+	"File uploaded!": "Comhad uaslódáilte!",
 	"Files": "Comhaid",
 	"Filter": "Scagaire",
 	"Filter is now globally disabled": "Tá an scagaire faoi mhíchumas go domhanda",
@@ -802,13 +802,13 @@
 	"Fingerprint spoofing detected: Unable to use initials as avatar. Defaulting to default profile image.": "Braithíodh spoofing méarloirg: Ní féidir teachlitreacha a úsáid mar avatar. Réamhshocrú ar íomhá próifíle réamhshocraithe.",
 	"Firecrawl API Base URL": "URL Bunús API Firecrawl",
 	"Firecrawl API Key": "Eochair API Firecrawl",
-	"Firecrawl Timeout (s)": "",
+	"Firecrawl Timeout (s)": "Am Teorannú Tine (s)",
 	"Floating Quick Actions": "Gníomhartha Tapa Snámha",
 	"Focus Chat Input": "Dírigh ar Ionchur Comhrá",
 	"Folder": "Fillteán",
 	"Folder Background Image": "Íomhá Chúlra Fillteáin",
 	"Folder deleted successfully": "Scriosadh an fillteán go rathúil",
-	"Folder Max File Count": "",
+	"Folder Max File Count": "Uasmhéid Líon Comhad Fillteán",
 	"Folder Name": "Ainm an Fhillteáin",
 	"Folder name cannot be empty.": "Ní féidir ainm fillteáin a bheith folamh.",
 	"Folder name updated successfully": "D'éirigh le hainm an fhillteáin a nuashonrú",
@@ -840,7 +840,7 @@
 	"Function is now globally disabled": "Tá an fheidhm faoi mhíchumas go domhanda",
 	"Function is now globally enabled": "Tá feidhm cumasaithe go domhanda anois",
 	"Function Name": "Ainm Feidhme",
-	"Function Name Filter List": "",
+	"Function Name Filter List": "Liosta Scagaire Ainm Feidhme",
 	"Function updated successfully": "Feidhm nuashonraithe",
 	"Functions": "Feidhmeanna",
 	"Functions allow arbitrary code execution.": "Ceadaíonn feidhmeanna forghníomhú cód treallach.",
@@ -863,21 +863,21 @@
 	"Get started with {{WEBUI_NAME}}": "Cuir tús le {{WEBUI_NAME}}",
 	"Global": "Domhanda",
 	"Good Response": "Freagra Mhaith",
-	"Google": "",
+	"Google": "Google",
 	"Google Drive": "Google Drive",
 	"Google PSE API Key": "Eochair API Google PSE",
 	"Google PSE Engine Id": "ID Inneall Google PSE",
 	"Gravatar": "Gravatar",
-	"Grid": "",
-	"Grokipedia": "",
+	"Grid": "Eangach",
+	"Grokipedia": "Grokipedia",
 	"Group": "Grúpa",
-	"Group Channel": "",
+	"Group Channel": "Cainéal Grúpa",
 	"Group created successfully": "Grúpa cruthaithe go rathúil",
 	"Group deleted successfully": "D'éirigh le scriosadh an ghrúpa",
 	"Group Description": "Cur síos ar an nGrúpa",
 	"Group Name": "Ainm an Ghrúpa",
 	"Group updated successfully": "D'éirigh le nuashonrú an ghrúpa",
-	"groups": "",
+	"groups": "grúpaí",
 	"Groups": "Grúpaí",
 	"H1": "H1",
 	"H2": "H2",
@@ -913,7 +913,7 @@
 	"Image Compression": "Comhbhrú Íomhá",
 	"Image Compression Height": "Airde Comhbhrú Íomhá",
 	"Image Compression Width": "Leithead Comhbhrúite Íomhá",
-	"Image Edit": "",
+	"Image Edit": "Eagarthóireacht Íomhá",
 	"Image Edit Engine": "Inneall Eagarthóireachta Íomhá",
 	"Image Generation": "Giniúint Íomhá",
 	"Image Generation Engine": "Inneall Giniúna Íomh",
@@ -923,26 +923,26 @@
 	"Image Prompt Generation": "Giniúint Leid Íomhá",
 	"Image Prompt Generation Prompt": "Leid Giniúint Leide Íomhá",
 	"Image Size": "Méid na hÍomhá",
-	"Images": "",
+	"Images": "Íomhánna",
 	"Import": "Iompórtáil",
 	"Import Chats": "Comhráite iompórtá",
 	"Import Config from JSON File": "Cumraíocht Iompórtáil ó Chomhad JSON",
 	"Import From Link": "Iompórtáil Ó Nasc",
-	"Import Models": "",
+	"Import Models": "Iompórtáil Samhlacha",
 	"Import Presets": "Réamhshocruithe Iompórtáil",
-	"Import Prompts": "",
+	"Import Prompts": "Leideanna Iompórtála",
 	"Import successful": "D'éirigh leis an allmhairiú",
-	"Import Tools": "",
+	"Import Tools": "Uirlisí Iompórtála",
 	"Important Update": "Nuashonrú tábhachtach",
 	"Include": "Cuir san áireamh",
 	"Include `--api-auth` flag when running stable-diffusion-webui": "Cuir bratach `--api-auth` san áireamh agus webui stable-diffusion-reatha á rith",
 	"Include `--api` flag when running stable-diffusion-webui": "Cuir bratach `--api` san áireamh agus webui cobhsaí-scaipthe á rith",
 	"Includes SharePoint": "Áirítear SharePoint",
-	"Increase UI Scale": "",
+	"Increase UI Scale": "Méadaigh Scála an Chomhéadain Úsáideora",
 	"Influences how quickly the algorithm responds to feedback from the generated text. A lower learning rate will result in slower adjustments, while a higher learning rate will make the algorithm more responsive.": "Bíonn tionchar aige ar chomh tapa agus a fhreagraíonn an t-algartam d'aiseolas ón téacs ginte. Beidh coigeartuithe níos moille mar thoradh ar ráta foghlama níos ísle, agus déanfaidh ráta foghlama níos airde an t-algartam níos freagraí.",
 	"Info": "Eolas",
 	"Initials": "Túslitreacha",
-	"Inject file content into conversation context": "",
+	"Inject file content into conversation context": "Cuir ábhar an chomhaid isteach i gcomhthéacs an chomhrá",
 	"Inject the entire content as context for comprehensive processing, this is recommended for complex queries.": "Instealladh an t-ábhar ar fad mar chomhthéacs do phróiseáil chuimsitheach, moltar é seo le haghaidh ceisteanna casta.",
 	"Input": "Ionchur",
 	"Input Key (e.g. text, unet_name, steps)": "Eochair Ionchuir (m.sh. téacs, unet_name, céimeanna)",
@@ -956,21 +956,21 @@
 	"Integration": "Comhtháthú",
 	"Integrations": "Comhtháthúcháin",
 	"Interface": "Comhéadan",
-	"Interface Settings Access": "",
+	"Interface Settings Access": "Rochtain Socruithe Comhéadain",
 	"Invalid file content": "Ábhar comhaid neamhbhailí",
 	"Invalid file format.": "Formáid comhaid neamhbhailí.",
 	"Invalid JSON file": "Comhad JSON neamhbhailí",
 	"Invalid JSON format for ComfyUI Edit Workflow.": "Formáid JSON neamhbhailí do Shreabhadh Oibre Eagarthóireachta ComfyUI.",
 	"Invalid JSON format for ComfyUI Workflow.": "Formáid JSON neamhbhailí do Shreabhadh Oibre ComfyUI.",
 	"Invalid JSON format for Parameters": "Formáid JSON neamhbhailí do Pharaiméadair",
-	"Invalid JSON format in {{NAME}}": "",
+	"Invalid JSON format in {{NAME}}": "Formáid JSON neamhbhailí i {{NAME}}",
 	"Invalid JSON format in Additional Config": "Formáid JSON neamhbhailí i gCumraíocht Bhreise",
 	"Invalid JSON format in MinerU Parameters": "Formáid JSON neamhbhailí i bParaiméadair MinerU",
 	"Invalid Tag": "Clib neamhbhailí",
 	"is typing...": "ag clóscríobh...",
 	"Italic": "Iodálach",
 	"January": "Eanáir",
-	"Jina API Base URL": "",
+	"Jina API Base URL": "Bun-URL API Jina",
 	"Jina API Key": "Jina API Eochair",
 	"join our Discord for help.": "bí inár Discord chun cabhair a fháil.",
 	"JSON": "JSON",
@@ -995,11 +995,11 @@
 	"Knowledge created successfully.": "Eolas cruthaithe go rathúil.",
 	"Knowledge deleted successfully.": "D'éirigh leis an eolas a scriosadh.",
 	"Knowledge Description": "Cur Síos Eolais",
-	"Knowledge exported successfully": "",
+	"Knowledge exported successfully": "Eolas a easpórtáil go rathúil",
 	"Knowledge Name": "Ainm an Eolais",
 	"Knowledge Public Sharing": "Roinnt Faisnéise Poiblí",
 	"Knowledge reset successfully.": "D'éirigh le hathshocrú eolais.",
-	"Knowledge Sharing": "",
+	"Knowledge Sharing": "Comhroinnt Eolais",
 	"Knowledge updated successfully": "D'éirigh leis an eolas a nuashonrú",
 	"Kokoro.js (Browser)": "Kokoro.js (Brabhsálaí)",
 	"Kokoro.js Dtype": "Kokoro.js Dtype",
@@ -1022,7 +1022,7 @@
 	"Leave empty to include all models from \"{{url}}/api/tags\" endpoint": "Fág folamh chun gach samhail ó chríochphointe \"{{url}}/api/tags\" a chur san áireamh",
 	"Leave empty to include all models from \"{{url}}/models\" endpoint": "Fág folamh chun gach samhail ón gcríochphointe \"{{url}}/models\" a chur san áireamh",
 	"Leave empty to include all models or select specific models": "Fág folamh chun gach samhail a chur san áireamh nó roghnaigh samhail sonracha",
-	"Leave empty to use first admin user": "",
+	"Leave empty to use first admin user": "Fág folamh chun an chéad úsáideoir riarthóra a úsáid",
 	"Leave empty to use the default model (voxtral-mini-latest).": "Fág folamh chun an tsamhail réamhshocraithe (voxtral-mini-latest) a úsáid.",
 	"Leave empty to use the default prompt, or enter a custom prompt": "Fág folamh chun an leid réamhshocraithe a úsáid, nó cuir isteach leid saincheaptha",
 	"Leave model field empty to use the default model.": "Fág an réimse samhail folamh chun an tsamhail réamhshocraithe a úsáid.",
@@ -1031,8 +1031,8 @@
 	"License": "Ceadúnas",
 	"Lift List": "Liosta Ardaitheoirí",
 	"Light": "Solas",
-	"Limit concurrent search queries. 0 = unlimited (default). Set to 1 for sequential execution (recommended for APIs with strict rate limits like Brave free tier).": "",
-	"List": "",
+	"Limit concurrent search queries. 0 = unlimited (default). Set to 1 for sequential execution (recommended for APIs with strict rate limits like Brave free tier).": "Teorainn a chur le fiosrúcháin chuardaigh chomhuaineacha. 0 = gan teorainn (réamhshocraithe). Socraigh go 1 le haghaidh forghníomhú seicheamhach (molta do APIanna le teorainneacha ráta dochta cosúil le sraith saor in aisce Brave).",
+	"List": "Liosta",
 	"Listening...": "Éisteacht...",
 	"Llama.cpp": "Llama.cpp",
 	"LLMs can make mistakes. Verify important information.": "Is féidir le LLManna botúin a dhéanamh. Fíoraigh faisnéis thábhachtach.",
@@ -1062,22 +1062,22 @@
 	"Manage your account information.": "Bainistigh faisnéis do chuntais.",
 	"March": "Márta",
 	"Markdown": "Marcáil síos",
-	"Markdown Header Text Splitter": "",
+	"Markdown Header Text Splitter": "Scoilteoir Téacs Ceanntásc Markdown",
 	"Max Speakers": "Uasmhéid Cainteoirí",
 	"Max Upload Count": "Líon Uaslódála Max",
 	"Max Upload Size": "Méid Uaslódála Max",
-	"Maximum number of files allowed per folder.": "",
-	"Maximum number of files per folder is {{max}}.": "",
+	"Maximum number of files allowed per folder.": "Uasmhéid na gcomhad a cheadaítear in aghaidh an fhillteáin.",
+	"Maximum number of files per folder is {{max}}.": "Is é {{max}} an líon uasta comhad in aghaidh an fhillteáin.",
 	"Maximum of 3 models can be downloaded simultaneously. Please try again later.": "Is féidir uasmhéid de 3 samhail a íoslódáil ag an am Bain triail as arís níos déanaí.",
 	"May": "Bealtaine",
-	"MBR": "",
+	"MBR": "MBR",
 	"MCP": "MCP",
 	"MCP support is experimental and its specification changes often, which can lead to incompatibilities. OpenAPI specification support is directly maintained by the Open WebUI team, making it the more reliable option for compatibility.": "Is turgnamhach tacaíocht MCP agus athraítear a shonraíocht go minic, rud a d’fhéadfadh neamh-chomhoiriúnachtaí a bheith mar thoradh air. Déanann foireann Open WebUI cothabháil dhíreach ar thacaíocht sonraíochta OpenAPI, rud a fhágann gurb é an rogha is iontaofa é le haghaidh comhoiriúnachta.",
 	"Medium": "Meánach",
-	"Member removed successfully": "",
-	"Members": "",
-	"Members added successfully": "",
-	"Memories": "",
+	"Member removed successfully": "Baineadh an ball go rathúil",
+	"Members": "Baill",
+	"Members added successfully": "Baill curtha leis go rathúil",
+	"Memories": "Cuimhní",
 	"Memories accessible by LLMs will be shown here.": "Taispeánfar cuimhní atá inrochtana ag LLManna anseo.",
 	"Memory": "Cuimhne",
 	"Memory added successfully": "Cuireadh cuimhne leis go",
@@ -1087,7 +1087,7 @@
 	"Merge Responses": "Cumaisc Freagraí",
 	"Merged Response": "Freagra Cumaiscthe",
 	"Message": "Teachtaireacht",
-	"Message counts and response timestamps": "",
+	"Message counts and response timestamps": "Comhaireamh teachtaireachtaí agus stampaí ama freagartha",
 	"Message rating should be enabled to use this feature": "Ba cheart rátáil teachtaireachta a chumasú chun an ghné seo a úsáid",
 	"Messages you send after creating your link won't be shared. Users with the URL will be able to view the shared chat.": "Ní roinnfear teachtaireachtaí a sheolann tú tar éis do nasc a chruthú. Beidh úsáideoirí leis an URL in ann féachaint ar an gcomhrá roinnte.",
 	"Microsoft OneDrive": "Microsoft OneDrive",
@@ -1120,11 +1120,11 @@
 	"Model Name": "Ainm an tSamhail",
 	"Model name already exists, please choose a different one": "Tá ainm samhail ann cheana féin, roghnaigh ceann eile le do thoil",
 	"Model Name is required.": "Tá Ainm an tSamhail de dhíth.",
-	"Model names and usage frequency": "",
+	"Model names and usage frequency": "Ainmneacha samhlacha agus minicíocht úsáide",
 	"Model not selected": "Níor roghnaíodh an tsamhail",
 	"Model Params": "Paraiméadair Samhail",
 	"Model Permissions": "Ceadanna Samhail",
-	"Model responses or outputs": "",
+	"Model responses or outputs": "Freagraí nó aschuir mhúnla",
 	"Model unloaded successfully": "Díluchtaíodh an tsamhail go rathúil",
 	"Model updated successfully": "An tsamhail nuashonraithe",
 	"Model(s) do not support file upload": "Ní thacaíonn samhail(í) le huaslódáil comhaid",
@@ -1134,8 +1134,8 @@
 	"Models configuration saved successfully": "Cumraíocht na samhlacha sábháilte go rathúil",
 	"Models imported successfully": "Iompórtáladh samhlacha go rathúil",
 	"Models Public Sharing": "Samhlacha Comhroinnt Phoiblí",
-	"Models Sharing": "",
-	"Mojeek": "",
+	"Models Sharing": "Roinnt Samhlacha",
+	"Mojeek": "Mojeek",
 	"Mojeek Search API Key": "Eochair API Cuardach Mojeek",
 	"More": "Tuilleadh",
 	"More Concise": "Níos Gonta",
@@ -1145,22 +1145,22 @@
 	"Name and ID are required, please fill them out": "Tá ainm agus aitheantas ag teastáil, líon isteach iad le do thoil",
 	"Name your knowledge base": "Cuir ainm ar do bhunachar eolais",
 	"Native": "Dúchasach",
-	"New": "",
+	"New": "Nua",
 	"New Button": "Cnaipe Nua",
 	"New Chat": "Comhrá Nua",
 	"New Folder": "Fillteán Nua",
 	"New Function": "Feidhm Nua",
 	"New Knowledge": "Eolas Nua",
 	"New Model": "Samhail Nua",
-	"New Note": "",
+	"New Note": "Nóta Nua",
 	"New Password": "Pasfhocal Nua",
 	"New Prompt": "Leid Nua",
 	"New Temporary Chat": "Comhrá Sealadach Nua",
 	"New Tool": "Uirlis Nua",
-	"New Webhook": "",
+	"New Webhook": "Gréasáin Nua",
 	"new-channel": "nua-chainéil",
 	"Next message": "An chéad teachtaireacht eile",
-	"No activity data": "",
+	"No activity data": "Gan aon sonraí gníomhaíochta",
 	"No authentication": "Gan fíordheimhniú",
 	"No chats found": "Ní bhfuarthas aon chomhráite",
 	"No chats found for this user.": "Ní bhfuarthas aon chomhráite don úsáideoir seo.",
@@ -1171,14 +1171,14 @@
 	"No conversation to save": "Gan aon chomhrá le sábháil",
 	"No distance available": "Níl achar ar fáil",
 	"No expiration can pose security risks.": "Ní féidir le haon dáta éaga rioscaí slándála a chruthú.",
-	"No feedback found": "",
+	"No feedback found": "Níor aimsíodh aon aiseolas",
 	"No file selected": "Níl aon chomhad roghnaithe",
-	"No files in this knowledge base.": "",
+	"No files in this knowledge base.": "Níl aon chomhaid sa bhunachar eolais seo.",
 	"No functions found": "Níor aimsíodh aon fheidhmeanna",
 	"No groups with access, add a group to grant access": "Gan aon ghrúpa a bhfuil rochtain acu, cuir grúpa leis chun rochtain a dheonú",
 	"No HTML, CSS, or JavaScript content found.": "Níor aimsíodh aon ábhar HTML, CSS nó JavaScript.",
 	"No inference engine with management support found": "Níor aimsíodh aon inneall tátail le tacaíocht bhainistíochta",
-	"No knowledge bases found.": "",
+	"No knowledge bases found.": "Níor aimsíodh aon bhunachair eolais.",
 	"No knowledge found": "Níor aimsíodh aon eolas",
 	"No memories to clear": "Gan cuimhní cinn a ghlanadh",
 	"No model IDs": "Gan aon aitheantóirí samhail",
@@ -1186,8 +1186,8 @@
 	"No models selected": "Uimh samhlacha roghnaithe",
 	"No Notes": "Gan Nótaí",
 	"No notes found": "Níor aimsíodh aon nótaí",
-	"No one": "",
-	"No pinned messages": "",
+	"No one": "Níl aon duine",
+	"No pinned messages": "Gan aon teachtaireachtaí bioráilte",
 	"No prompts found": "Níor aimsíodh aon leideanna",
 	"No results": "Níl aon torthaí le fáil",
 	"No results found": "Níl aon torthaí le fáil",
@@ -1199,8 +1199,8 @@
 	"No users were found.": "Níor aimsíodh aon úsáideoirí.",
 	"No valves": "Gan comhlaí",
 	"No valves to update": "Gan comhlaí le nuashonrú",
-	"No webhooks yet": "",
-	"Node Ids": "Ids Nód",
+	"No webhooks yet": "Gan aon crúcaí gréasáin fós",
+	"Node Ids": "Aitheantas Nóid",
 	"None": "Dada",
 	"Not factually correct": "Níl sé ceart go fírineach",
 	"Not helpful": "Gan a bheith cabhrach",
@@ -1210,7 +1210,7 @@
 	"Note: If you set a minimum score, the search will only return documents with a score greater than or equal to the minimum score.": "Nóta: Má shocraíonn tú íosscór, ní thabharfaidh an cuardach ach doiciméid a bhfuil scór níos mó ná nó cothrom leis an scór íosta ar ais.",
 	"Notes": "Nótaí",
 	"Notes Public Sharing": "Nótaí Comhroinnte Poiblí",
-	"Notes Sharing": "",
+	"Notes Sharing": "Comhroinnt Nótaí",
 	"Notification Sound": "Fuaim Fógra",
 	"Notification Webhook": "Fógra Webook",
 	"Notifications": "Fógraí",
@@ -1236,10 +1236,10 @@
 	"Only alphanumeric characters and hyphens are allowed in the command string.": "Ní cheadaítear ach carachtair alfauméireacha agus braithíní sa sreangán ordaithe.",
 	"Only can be triggered when the chat input is in focus.": "Ní féidir é a spreagadh ach amháin nuair a bhíonn an t-ionchur comhrá i bhfócas.",
 	"Only collections can be edited, create a new knowledge base to edit/add documents.": "Ní féidir ach bailiúcháin a chur in eagar, bonn eolais nua a chruthú chun doiciméid a chur in eagar/a chur leis.",
-	"Only invited users can access": "",
+	"Only invited users can access": "Ní féidir ach le húsáideoirí cuireadh rochtain a fháil",
 	"Only markdown files are allowed": "Ní cheadaítear ach comhaid marcála síos",
 	"Only select users and groups with permission can access": "Ní féidir ach le húsáideoirí roghnaithe agus le grúpaí a bhfuil cead acu rochtain a fháil",
-	"Only sync new/updated chats": "",
+	"Only sync new/updated chats": "Sioncrónaigh comhráite nua/nuashonraithe amháin",
 	"Oops! Looks like the URL is invalid. Please double-check and try again.": "Ups! Is cosúil go bhfuil an URL neamhbhailí. Seiceáil faoi dhó le do thoil agus iarracht arís.",
 	"Oops! There are files still uploading. Please wait for the upload to complete.": "Úps! Tá comhaid fós á n-uaslódáil. Fan go mbeidh an uaslódáil críochnaithe.",
 	"Oops! There was an error in the previous response.": "Úps! Bhí earráid sa fhreagra roimhe seo.",
@@ -1256,7 +1256,7 @@
 	"Open WebUI can use tools provided by any OpenAPI server.": "Is féidir le WebUI Oscailte uirlisí a úsáid a sholáthraíonn aon fhreastalaí OpenAPI.",
 	"Open WebUI uses faster-whisper internally.": "Úsáideann Open WebUI cogar níos tapúla go hinmheánach.",
 	"Open WebUI uses SpeechT5 and CMU Arctic speaker embeddings.": "Úsáideann Open WebUI úsáidí SpeechT5 agus CMU leabaithe cainteoir Artach.",
-	"Open WebUI version": "",
+	"Open WebUI version": "Oscail leagan WebUI",
 	"Open WebUI version (v{{OPEN_WEBUI_VERSION}}) is lower than required version (v{{REQUIRED_VERSION}})": "Tá leagan WebUI oscailte (v{{OPEN_WEBUI_VERSION}}) níos ísle ná an leagan riachtanach (v{{REQUIRED_VERSION}})",
 	"OpenAI": "OpenAI",
 	"OpenAI API": "API OpenAI",
@@ -1281,8 +1281,8 @@
 	"page": "leathanach",
 	"Paginate": "Leathanaigh",
 	"Parameters": "Paraiméadair",
-	"Parent message not found": "",
-	"Participate in community leaderboards and evaluations! Syncing aggregated usage stats helps drive research and improvements to Open WebUI. Your privacy is paramount: no message content is ever shared.": "",
+	"Parent message not found": "Níor aimsíodh teachtaireacht tuismitheora",
+	"Participate in community leaderboards and evaluations! Syncing aggregated usage stats helps drive research and improvements to Open WebUI. Your privacy is paramount: no message content is ever shared.": "Glac páirt i gcláir cheannaireachta agus i meastóireachtaí pobail! Cuidíonn sioncrónú staitisticí úsáide comhiomlánaithe le taighde agus feabhsuithe a thiomáint ar Open WebUI. Tá do phríobháideacht ríthábhachtach: ní roinntear aon ábhar teachtaireachta riamh.",
 	"Password": "Pasfhocal",
 	"Passwords do not match.": "Ní hionann na pasfhocail.",
 	"Paste Large Text as File": "Greamaigh Téacs Mór mar Chomhad",
@@ -1298,17 +1298,17 @@
 	"Permissions": "Ceadanna",
 	"Perplexity API Key": "Eochair API Perplexity",
 	"Perplexity Model": "Samhail Perplexity",
-	"Perplexity Search API URL": "",
+	"Perplexity Search API URL": "URL API Cuardaigh Measctha",
 	"Perplexity Search Context Usage": "Úsáid Chomhthéacs Cuardaigh Mearbhall",
 	"Personalization": "Pearsantú",
 	"Pin": "Bioráin",
 	"Pinned": "Pinneáilte",
-	"Pinned Messages": "",
+	"Pinned Messages": "Teachtaireachtaí Pionáilte",
 	"Pioneer insights": "Léargais ceannródaí",
 	"Pipe": "Píopa",
 	"Pipeline deleted successfully": "Scriosta píblíne go rathúil",
 	"Pipeline downloaded successfully": "Íoslódáilte píblíne",
-	"Pipelines": "",
+	"Pipelines": "Píblínte",
 	"Pipelines are a plugin system with arbitrary code execution —": "Is córas breiseán é Pipelines a ligeann cód a rith go treallach —",
 	"Pipelines Not Detected": "Níor aimsíodh píblínte",
 	"Pipelines Valves": "Comhlaí Píblíne",
@@ -1333,7 +1333,7 @@
 	"Please select a model.": "Roghnaigh samhail le do thoil.",
 	"Please select a reason": "Roghnaigh cúis le do thoil",
 	"Please select a valid JSON file": "Roghnaigh comhad JSON bailí le do thoil",
-	"Please select at least one user for Direct Message channel.": "",
+	"Please select at least one user for Direct Message channel.": "Roghnaigh úsáideoir amháin ar a laghad don chainéal Teachtaireachtaí Díreacha.",
 	"Please wait until all files are uploaded.": "Fan go dtí go mbeidh na comhaid go léir uaslódáilte.",
 	"Port": "Port",
 	"Positive attitude": "Dearcadh dearfach",
@@ -1346,7 +1346,7 @@
 	"Previous 7 days": "7 lá roimhe seo",
 	"Previous message": "Teachtaireacht roimhe seo",
 	"Private": "Príobháideach",
-	"Private conversation between selected users": "",
+	"Private conversation between selected users": "Comhrá príobháideach idir úsáideoirí roghnaithe",
 	"Profile": "Próifíl",
 	"Prompt": "Leid",
 	"Prompt Autocompletion": "Uathchríochnú Pras",
@@ -1356,7 +1356,7 @@
 	"Prompts": "Leabhair",
 	"Prompts Access": "Rochtain ar Chuirí",
 	"Prompts Public Sharing": "Spreagann Roinnt Phoiblí",
-	"Prompts Sharing": "",
+	"Prompts Sharing": "Comhroinnt Leideanna",
 	"Provider Type": "Cineál Soláthraí",
 	"Public": "Poiblí",
 	"Pull \"{{searchValue}}\" from Ollama.com": "Tarraing \"{{searchValue}}\" ó Ollama.com",
@@ -1371,8 +1371,8 @@
 	"Read": "Léigh",
 	"Read Aloud": "Léigh Ard",
 	"Read more →": "Léigh tuilleadh →",
-	"Read Only": "",
-	"Read-Only Access": "",
+	"Read Only": "Léigh Amháin",
+	"Read-Only Access": "Rochtain Léite Amháin",
 	"Reason": "Cúis",
 	"Reasoning Effort": "Iarracht Réasúnúcháin",
 	"Reasoning Tags": "Clibeanna Réasúnaíochta",
@@ -1440,7 +1440,7 @@
 	"Run": "Rith",
 	"Running": "Ag rith",
 	"Running...": "Ag rith...",
-	"Runs embedding tasks concurrently to speed up processing. Turn off if rate limits become an issue.": "",
+	"Runs embedding tasks concurrently to speed up processing. Turn off if rate limits become an issue.": "Ritheann sé tascanna leabaithe ag an am céanna chun luas a chur leis an bpróiseáil. Múch é má bhíonn teorainneacha ráta ina bhfadhb.",
 	"Save": "Sábháil",
 	"Save & Create": "Sábháil & Cruthaigh",
 	"Save & Update": "Sábháil & Nuashonraigh",
@@ -1480,7 +1480,7 @@
 	"Searching Knowledge for \"{{searchQuery}}\"": "Cuardach Eolas do \"{{searchQuery}}\"",
 	"Searching the web": "Ag cuardach an ghréasáin",
 	"Searxng Query URL": "URL ceisteanna cuardaigh",
-	"Searxng search language (all, en, es, de, fr, etc.)": "",
+	"Searxng search language (all, en, es, de, fr, etc.)": "Teanga cuardaigh Searxng (gach, en, es, de, fr, etc.)",
 	"See readme.md for instructions": "Féach readme.md le haghaidh treoracha",
 	"See what's new": "Féach cad atá nua",
 	"Seed": "Síol",
@@ -1536,16 +1536,16 @@
 	"Set the number of worker threads used for computation. This option controls how many threads are used to process incoming requests concurrently. Increasing this value can improve performance under high concurrency workloads but may also consume more CPU resources.": "Socraigh líon na snáitheanna oibrithe a úsáidtear le haghaidh ríomh. Rialaíonn an rogha seo cé mhéad snáithe a úsáidtear chun iarratais a thagann isteach a phróiseáil i gcomhthráth. D'fhéadfadh méadú ar an luach seo feidhmíocht a fheabhsú faoi ualaí oibre comhairgeadra ard ach féadfaidh sé níos mó acmhainní LAP a úsáid freisin.",
 	"Set Voice": "Socraigh Guth",
 	"Set whisper model": "Socraigh samhail cogarnaí",
-	"Set your status": "",
+	"Set your status": "Socraigh do stádas",
 	"Sets a flat bias against tokens that have appeared at least once. A higher value (e.g., 1.5) will penalize repetitions more strongly, while a lower value (e.g., 0.9) will be more lenient. At 0, it is disabled.": "Socraíonn sé claonadh cothrom i gcoinne comharthaí a tháinig chun solais uair amháin ar a laghad. Cuirfidh luach níos airde (m.sh., 1.5) pionós níos láidre ar athrá, agus beidh luach níos ísle (m.sh., 0.9) níos boige. Ag 0, tá sé díchumasaithe.",
 	"Sets a scaling bias against tokens to penalize repetitions, based on how many times they have appeared. A higher value (e.g., 1.5) will penalize repetitions more strongly, while a lower value (e.g., 0.9) will be more lenient. At 0, it is disabled.": "Socraíonn sé laofacht scálaithe i gcoinne comharthaí chun pionós a ghearradh ar athrá, bunaithe ar cé mhéad uair a tháinig siad chun solais. Cuirfidh luach níos airde (m.sh., 1.5) pionós níos láidre ar athrá, agus beidh luach níos ísle (m.sh., 0.9) níos boige. Ag 0, tá sé díchumasaithe.",
 	"Sets how far back for the model to look back to prevent repetition.": "Socraíonn sé cé chomh fada siar is atá an tsamhail le breathnú siar chun athrá a chosc.",
 	"Sets the random number seed to use for generation. Setting this to a specific number will make the model generate the same text for the same prompt.": "Socraíonn sé an síol uimhir randamach a úsáid le haghaidh giniúna. Má shocraítear é seo ar uimhir shainiúil, ginfidh an tsamhail an téacs céanna don leid céanna.",
 	"Sets the size of the context window used to generate the next token.": "Socraíonn sé méid na fuinneoige comhthéacs a úsáidtear chun an chéad chomhartha eile a ghiniúint.",
 	"Sets the stop sequences to use. When this pattern is encountered, the LLM will stop generating text and return. Multiple stop patterns may be set by specifying multiple separate stop parameters in a modelfile.": "Socraíonn sé na stadanna le húsáid. Nuair a thagtar ar an bpatrún seo, stopfaidh an LLM ag giniúint téacs agus ag filleadh. Is féidir patrúin stad iolracha a shocrú trí pharaiméadair stadanna iolracha a shonrú i gcomhad samhail.",
-	"Setting": "",
+	"Setting": "Socrú",
 	"Settings": "Socruithe",
-	"Settings Permissions": "",
+	"Settings Permissions": "Ceadanna Socruithe",
 	"Settings saved successfully!": "Socruithe sábhálta go rathúil!",
 	"Share": "Comhroinn",
 	"Share Chat": "Comhroinn Comhrá",
@@ -1556,7 +1556,7 @@
 	"Show": "Taispeáin",
 	"Show \"What's New\" modal on login": "Taispeáin módúil \"Cad atá Nua\" ar logáil isteach",
 	"Show Admin Details in Account Pending Overlay": "Taispeáin Sonraí Riaracháin sa Chuntas ar Feitheamh Forleagan",
-	"Show Files": "",
+	"Show Files": "Taispeáin Comhaid",
 	"Show Formatting Toolbar": "Taispeáin Barra Uirlisí Formáidithe",
 	"Show image preview": "Taispeáin réamhamharc íomhá",
 	"Show Model": "Taispeáin Samhail",
@@ -1581,7 +1581,7 @@
 	"Sonar Pro": "Sonar Pro",
 	"Sonar Reasoning": "Réasúnaíocht Sonar",
 	"Sonar Reasoning Pro": "Réasúnaíocht Sonar Pro",
-	"Sort": "",
+	"Sort": "Sórtáil",
 	"Sougou Search API sID": "Sougou Search API sID",
 	"Sougou Search API SK": "Sougou Search API SK",
 	"Source": "Foinse",
@@ -1589,18 +1589,18 @@
 	"Speech recognition error: {{error}}": "Earráid aitheantais cainte: {{error}}",
 	"Speech-to-Text": "Urlabhra-go-Téacs",
 	"Speech-to-Text Engine": "Inneall Cainte-go-Téacs",
-	"Split documents by markdown headers before applying character/token splitting.": "",
+	"Split documents by markdown headers before applying character/token splitting.": "Scoilt doiciméid de réir ceanntásca lascaine sula gcuirtear scoilt carachtar/comhartha i bhfeidhm.",
 	"Start a new conversation": "Tosaigh comhrá nua",
 	"Start of the channel": "Tús an chainéil",
 	"Start Tag": "Clib Tosaigh",
-	"Status": "",
-	"Status cleared successfully": "",
-	"Status updated successfully": "",
+	"Status": "Stádas",
+	"Status cleared successfully": "Glanadh an stádais go rathúil",
+	"Status updated successfully": "Nuashonraíodh an stádas go rathúil",
 	"Status Updates": "Nuashonruithe Stádais",
 	"STDOUT/STDERR": "STDOUT/STDERR",
 	"Steps": "Céimeanna",
 	"Stop": "Stad",
-	"Stop Download": "",
+	"Stop Download": "Stop an Íoslódáil",
 	"Stop Generating": "Stop a Ghiniúint",
 	"Stop Sequence": "Stop Seicheamh",
 	"Stream Chat Response": "Freagra Comhrá Sruth",
@@ -1612,7 +1612,7 @@
 	"STT Model": "Samhail STT",
 	"STT Settings": "Socruithe STT",
 	"Stylized PDF Export": "Easpórtáil PDF Stílithe",
-	"Subtitle": "",
+	"Subtitle": "Fotheideal",
 	"Success": "Rath",
 	"Successfully imported {{userCount}} users.": "Iompórtáladh {{userCount}} úsáideoir go rathúil.",
 	"Successfully updated.": "Nuashonraithe go rathúil.",
@@ -1621,14 +1621,14 @@
 	"Support": "Tacaíocht",
 	"Support this plugin:": "Tacaigh leis an mbreiseán seo:",
 	"Supported MIME Types": "Cineálacha MIME a Tacaítear leo",
-	"Sync": "",
-	"Sync Complete!": "",
+	"Sync": "Sioncrónaigh",
+	"Sync Complete!": "Sioncrónú críochnaithe!",
 	"Sync directory": "Eolaire sioncronaithe",
-	"Sync Failed": "",
-	"Sync Usage Stats": "",
-	"Syncing stats...": "",
-	"Syncing...": "",
-	"Syncs only chats with updates after your last sync timestamp. Disable to re-sync all chats.": "",
+	"Sync Failed": "Theip ar an sioncrónú",
+	"Sync Usage Stats": "Staitisticí Úsáide Sioncrónaithe",
+	"Syncing stats...": "Ag sioncrónú staitisticí...",
+	"Syncing...": "Ag sioncrónú...",
+	"Syncs only chats with updates after your last sync timestamp. Disable to re-sync all chats.": "Ní shioncrónaíonn sé ach comhráite le nuashonruithe tar éis do stampa ama sioncrónaithe deireanach. Díchumasaigh chun gach comhrá a athshioncrónú.",
 	"System": "Córas",
 	"System Instructions": "Treoracha Córas",
 	"System Prompt": "Córas Leid",
@@ -1673,7 +1673,7 @@
 	"The Weight of BM25 Hybrid Search. 0 more semantic, 1 more lexical. Default 0.5": "Meáchan Chuardaigh Hibrideach BM25. 0 níos séimeantacha, 1 níos leicseach. Réamhshocrú 0.5",
 	"The width in pixels to compress images to. Leave empty for no compression.": "An leithead i bpicteilíní le híomhánna a chomhbhrú. Fág folamh mura bhfuil aon chomhbhrú ann.",
 	"Theme": "Téama",
-	"There was an error syncing your stats. Please try again.": "",
+	"There was an error syncing your stats. Please try again.": "Tharla earráid agus do staitisticí á sioncrónú. Déan iarracht arís.",
 	"Thinking...": "Ag smaoineamh...",
 	"This action cannot be undone. Do you wish to continue?": "Ní féidir an gníomh seo a chur ar ais. Ar mhaith leat leanúint ar aghaidh?",
 	"This channel was created on {{createdAt}}. This is the very beginning of the {{channelName}} channel.": "Cruthaíodh an cainéal seo ar {{createdAt}}. Seo tús an chainéil {{channelName}}.",
@@ -1702,7 +1702,7 @@
 	"Tika": "Tika",
 	"Tika Server URL required.": "Teastaíonn URL Freastalaí Tika.",
 	"Tiktoken": "Tiktoken",
-	"Timeout": "",
+	"Timeout": "Am istigh",
 	"Title": "Teideal",
 	"Title Auto-Generation": "Teideal Auto-Generation",
 	"Title cannot be an empty string.": "Ní féidir leis an teideal a bheith ina teaghrán folamh.",
@@ -1737,8 +1737,8 @@
 	"Tools Function Calling Prompt": "Leid Glaonna Feidhm Uirlisí",
 	"Tools have a function calling system that allows arbitrary code execution.": "Tá córas glaonna feidhme ag uirlisí a cheadaíonn forghníomhú cód treallach.",
 	"Tools Public Sharing": "Uirlisí Roinnte Poiblí",
-	"Tools Sharing": "",
-	"Top": "",
+	"Tools Sharing": "Comhroinnt Uirlisí",
+	"Top": "Barr",
 	"Top K": "Barr K",
 	"Top K Reranker": "Barr K Reranker",
 	"Transformers": "Claochladáin",
@@ -1754,7 +1754,7 @@
 	"Type Hugging Face Resolve (Download) URL": "Cineál Hugging Face Resolve (Íoslódáil) URL",
 	"Uh-oh! There was an issue with the response.": "Uh-ó! Bhí fadhb leis an bhfreagra.",
 	"UI": "UI",
-	"UI Scale": "",
+	"UI Scale": "Scála Chomhéadain Úsáideora",
 	"Unarchive All": "Díchartlannaigh Uile",
 	"Unarchive All Archived Chats": "Díchartlannaigh Gach Comhrá Cartlainne",
 	"Unarchive Chat": "Comhrá a dhíchartlannú",
@@ -1772,7 +1772,7 @@
 	"Update and Copy Link": "Nuashonraigh agus Cóipeáil Nasc",
 	"Update for the latest features and improvements.": "Nuashonrú le haghaidh na gnéithe agus na feabhsuithe is déanaí.",
 	"Update password": "Nuashonrú pasfhocal",
-	"Update your status": "",
+	"Update your status": "Nuashonraigh do stádas",
 	"Updated": "Nuashonraithe",
 	"Updated at": "Nuashonraithe ag",
 	"Updated At": "Nuashonraithe Ag",
@@ -1787,8 +1787,8 @@
 	"Upload Pipeline": "Uaslódáil píblíne",
 	"Upload Progress": "Dul Chun Cinn an Uaslódála",
 	"Upload Progress: {{uploadedFiles}}/{{totalFiles}} ({{percentage}}%)": "Dul Chun Cinn Uaslódála: {{uploadedFiles}}/{{totalFiles}} ({{percentage}}%)",
-	"Uploaded files or images": "",
-	"Uploading file...": "",
+	"Uploaded files or images": "Comhaid nó íomhánna uaslódáilte",
+	"Uploading file...": "Ag uaslódáil comhaid...",
 	"URL": "URL",
 	"URL is required": "Tá URL ag teastáil",
 	"URL Mode": "Mód URL",
@@ -1805,11 +1805,11 @@
 	"User Groups": "Grúpaí Úsáideoirí",
 	"User location successfully retrieved.": "Fuarthas suíomh an úsáideora go rathúil.",
 	"User menu": "Roghchlár úsáideora",
-	"User ratings (thumbs up/down)": "",
-	"User Status": "",
+	"User ratings (thumbs up/down)": "Rátálacha úsáideoirí (ordóg suas/síos)",
+	"User Status": "Stádas Úsáideora",
 	"User Webhooks": "Crúcaí Gréasáin Úsáideoir",
 	"Username": "Ainm Úsáideora",
-	"users": "",
+	"users": "úsáideoirí",
 	"Users": "Úsáideoirí",
 	"Uses DefaultAzureCredential to authenticate": "Úsáideann sé DefaultAzureCredential chun fíordheimhniú",
 	"Uses OAuth 2.1 Dynamic Client Registration": "Úsáideann Clárú Cliant Dinimiciúil OAuth 2.1",
@@ -1829,13 +1829,13 @@
 	"View Replies": "Féach ar Fhreagraí",
 	"View Result from **{{NAME}}**": "Féach ar Thoradh ó **{{NAME}}**",
 	"Visibility": "Infheictheacht",
-	"Visible to all users": "",
+	"Visible to all users": "Infheicthe ag gach úsáideoir",
 	"Vision": "Fís",
 	"Voice": "Guth",
 	"Voice Input": "Ionchur Gutha",
 	"Voice mode": "Mod Gutha",
-	"Voice Mode Custom Prompt": "",
-	"Voice Mode Prompt": "",
+	"Voice Mode Custom Prompt": "Leid Saincheaptha Mód Gutha",
+	"Voice Mode Prompt": "Leid Mód Gutha",
 	"Warning": "Rabhadh",
 	"Warning:": "Rabhadh:",
 	"Warning: Enabling this will allow users to upload arbitrary code on the server.": "Rabhadh: Cuirfidh sé seo ar chumas úsáideoirí cód treallach a uaslódáil ar an bhfreastalaí.",
@@ -1847,10 +1847,10 @@
 	"Web Search Engine": "Inneall Cuardaigh Gréasáin",
 	"Web Search in Chat": "Cuardach Gréasáin i gComhrá",
 	"Web Search Query Generation": "Giniúint Iarratas Cuardach Gréasáin",
-	"Webhook Name": "",
+	"Webhook Name": "Ainm an Crúca Gréasáin",
 	"Webhook URL": "URL Webhook",
-	"Webhooks": "",
-	"Webpage URLs": "",
+	"Webhooks": "Crúcaí Gréasáin",
+	"Webpage URLs": "URLanna leathanaigh ghréasáin",
 	"WebUI Settings": "Socruithe WebUI",
 	"WebUI URL": "URL WebUI",
 	"WebUI will make requests to \"{{url}}\"": "Déanfaidh WebUI iarratais ar \"{{url}}\"",
@@ -1858,19 +1858,19 @@
 	"WebUI will make requests to \"{{url}}/chat/completions\"": "Déanfaidh WebUI iarratais ar \"{{url}}/chat/completions\"",
 	"What are you trying to achieve?": "Cad atá tú ag iarraidh a bhaint amach?",
 	"What are you working on?": "Cad air a bhfuil tú ag obair?",
-	"What is NOT shared:": "",
-	"What is shared:": "",
+	"What is NOT shared:": "Cad NACH roinntear",
+	"What is shared:": "Cad a roinntear:",
 	"What's New in": "Cad atá Nua i",
-	"What's on your mind?": "",
+	"What's on your mind?": "Cad atá ar d’intinn?",
 	"When enabled, the model will respond to each chat message in real-time, generating a response as soon as the user sends a message. This mode is useful for live chat applications, but may impact performance on slower hardware.": "Nuair a bheidh sé cumasaithe, freagróidh an tsamhail gach teachtaireacht comhrá i bhfíor-am, ag giniúint freagra a luaithe a sheolann an t-úsáideoir teachtaireacht. Tá an mód seo úsáideach le haghaidh feidhmchláir chomhrá beo, ach d'fhéadfadh tionchar a bheith aige ar fheidhmíocht ar chrua-earraí níos moille.",
 	"wherever you are": "aon áit a bhfuil tú",
 	"Whether to paginate the output. Each page will be separated by a horizontal rule and page number. Defaults to False.": "Cibé acu an ndéanfar an t-aschur a roinnt le leathanaigh nó nach ndéanfar. Beidh riail chothrománach agus uimhir leathanaigh ag scartha ó gach leathanach. Is é Bréag an rogha réamhshocraithe.",
 	"Whisper (Local)": "Whisper (Áitiúil)",
-	"Who can share to this group": "",
+	"Who can share to this group": "Cé atá in ann a roinnt leis an ngrúpa seo",
 	"Why?": "Cén fáth?",
 	"Widescreen Mode": "Mód Leathanscáileán",
 	"Width": "Leithead",
-	"Wikipedia": "",
+	"Wikipedia": "Vicipéid",
 	"Won": "Bhuaigh",
 	"Works together with top-k. A higher value (e.g., 0.95) will lead to more diverse text, while a lower value (e.g., 0.5) will generate more focused and conservative text.": "Oibríonn sé le barr-k. Beidh téacs níos éagsúla mar thoradh ar luach níos airde (m.sh., 0.95), agus ginfidh luach níos ísle (m.sh., 0.5) téacs níos dírithe agus níos coimeádaí.",
 	"Workspace": "Spás oibre",
@@ -1882,8 +1882,8 @@
 	"Yacy Instance URL": "URL Cás Yacy",
 	"Yacy Password": "Pasfhocal Yacy",
 	"Yacy Username": "Ainm úsáideora Yacy",
-	"Yahoo": "",
-	"Yandex": "",
+	"Yahoo": "Yahoo",
+	"Yandex": "Yandex",
 	"Yesterday": "Inné",
 	"Yesterday at {{LOCALIZED_TIME}}": "Inné ag {{LOCALIZED_TIME}}",
 	"You": "Tú",
@@ -1891,12 +1891,12 @@
 	"You can only chat with a maximum of {{maxCount}} file(s) at a time.": "Ní féidir leat comhrá a dhéanamh ach le comhad {{maxCount}} ar a mhéad ag an am.",
 	"You can personalize your interactions with LLMs by adding memories through the 'Manage' button below, making them more helpful and tailored to you.": "Is féidir leat do chuid idirghníomhaíochtaí le LLManna a phearsantú ach cuimhní cinn a chur leis tríd an gcnaipe 'Bainistigh' thíos, rud a fhágann go mbeidh siad níos cabhrach agus níos oiriúnaí duit.",
 	"You cannot upload an empty file.": "Ní féidir leat comhad folamh a uaslódáil.",
-	"You do not have permission to edit this model": "",
-	"You do not have permission to edit this prompt.": "",
-	"You do not have permission to save this prompt.": "",
+	"You do not have permission to edit this model": "Níl cead agat an tsamhail seo a chur in eagar",
+	"You do not have permission to edit this prompt.": "Níl cead agat an leid seo a chur in eagar.",
+	"You do not have permission to save this prompt.": "Níl cead agat an leid seo a shábháil.",
 	"You do not have permission to send messages in this channel.": "Níl cead agat teachtaireachtaí a sheoladh sa chainéal seo.",
 	"You do not have permission to send messages in this thread.": "Níl cead agat teachtaireachtaí a sheoladh sa snáithe seo.",
-	"You do not have permission to upload files to this knowledge base.": "",
+	"You do not have permission to upload files to this knowledge base.": "Níl cead agat comhaid a uaslódáil chuig an mbunachar eolais seo.",
 	"You do not have permission to upload files.": "Níl cead agat comhaid a uaslódáil.",
 	"You have no archived conversations.": "Níl aon chomhráite cartlainne agat.",
 	"You have shared this chat": "Tá an comhrá seo roinnte agat",
@@ -1905,9 +1905,9 @@
 	"Your Account": "Do Chuntas",
 	"Your account status is currently pending activation.": "Tá stádas do chuntais ar feitheamh faoi ghníomhachtú.",
 	"Your entire contribution will go directly to the plugin developer; Open WebUI does not take any percentage. However, the chosen funding platform might have its own fees.": "Rachaidh do ranníocaíocht iomlán go díreach chuig an bhforbróir breiseán; Ní ghlacann Open WebUI aon chéatadán. Mar sin féin, d'fhéadfadh a tháillí féin a bheith ag an ardán maoinithe roghnaithe.",
-	"Your message text or inputs": "",
-	"Your usage stats have been successfully synced.": "",
-	"YouTube": "Youtube",
-	"Youtube Language": "Teanga Youtube",
+	"Your message text or inputs": "Téacs nó ionchur do theachtaireachta",
+	"Your usage stats have been successfully synced.": "Tá do staitisticí úsáide sioncronaithe go rathúil.",
+	"YouTube": "YouTube",
+	"Youtube Language": "Teanga YouTube",
 	"Youtube Proxy URL": "URL Seachfhreastalaí YouTube"
 }

From f7406ff5765ebc07d18d036a51487152597254e3 Mon Sep 17 00:00:00 2001
From: Timothy Jaeryang Baek <tim@openwebui.com>
Date: Mon, 9 Feb 2026 13:28:14 -0600
Subject: [PATCH 32/42] refac

---
 backend/open_webui/models/groups.py     |  19 +++-
 backend/open_webui/routers/channels.py  | 138 +++++++++++++++++-------
 backend/open_webui/routers/files.py     |  11 +-
 backend/open_webui/routers/groups.py    |  18 ++++
 backend/open_webui/routers/knowledge.py | 108 +++++++++++++++----
 backend/open_webui/routers/models.py    |  51 +++++++--
 backend/open_webui/routers/notes.py     |  42 +++++---
 backend/open_webui/routers/ollama.py    |  54 +++++-----
 backend/open_webui/routers/openai.py    |  21 ++--
 backend/open_webui/routers/prompts.py   | 107 +++++++++++++++---
 backend/open_webui/routers/tools.py     |  68 ++++++++++--
 backend/open_webui/routers/users.py     |  18 +++-
 backend/open_webui/socket/main.py       |  23 ++--
 backend/open_webui/tools/builtin.py     |  57 +++++++---
 backend/open_webui/utils/models.py      |  19 ++--
 backend/open_webui/utils/tools.py       |   9 +-
 16 files changed, 589 insertions(+), 174 deletions(-)

diff --git a/backend/open_webui/models/groups.py b/backend/open_webui/models/groups.py
index f2f364c144..0859c053aa 100644
--- a/backend/open_webui/models/groups.py
+++ b/backend/open_webui/models/groups.py
@@ -22,6 +22,7 @@ from sqlalchemy import (
     ForeignKey,
     cast,
     or_,
+    select,
 )
 
 
@@ -99,6 +100,16 @@ class GroupResponse(GroupModel):
     member_count: Optional[int] = None
 
 
+class GroupInfoResponse(BaseModel):
+    id: str
+    user_id: str
+    name: str
+    description: str
+    member_count: Optional[int] = None
+    created_at: int
+    updated_at: int
+
+
 class GroupForm(BaseModel):
     name: str
     description: str
@@ -181,14 +192,12 @@ class GroupTable:
 
                         if member_id:
                             # Also include member-only groups where user is a member
-                            member_groups_subq = (
-                                db.query(GroupMember.group_id)
-                                .filter(GroupMember.user_id == member_id)
-                                .subquery()
+                            member_groups_select = select(GroupMember.group_id).where(
+                                GroupMember.user_id == member_id
                             )
                             members_only_and_is_member = and_(
                                 json_share_lower == "members",
-                                Group.id.in_(member_groups_subq),
+                                Group.id.in_(member_groups_select),
                             )
                             query = query.filter(
                                 or_(anyone_can_share, members_only_and_is_member)
diff --git a/backend/open_webui/routers/channels.py b/backend/open_webui/routers/channels.py
index 2c94ddd91f..4713e369ad 100644
--- a/backend/open_webui/routers/channels.py
+++ b/backend/open_webui/routers/channels.py
@@ -36,6 +36,7 @@ from open_webui.models.channels import (
     ChannelWebhookModel,
     ChannelWebhookForm,
 )
+from open_webui.models.access_grants import AccessGrants, has_public_read_access_grant
 from open_webui.models.messages import (
     Messages,
     MessageModel,
@@ -60,12 +61,7 @@ from open_webui.utils.chat import generate_chat_completion
 
 
 from open_webui.utils.auth import get_admin_user, get_verified_user
-from open_webui.utils.access_control import (
-    has_access,
-    get_users_with_access,
-    get_permitted_group_and_user_ids,
-    has_permission,
-)
+from open_webui.utils.access_control import has_permission
 from open_webui.utils.webhook import post_webhook
 from open_webui.utils.channels import extract_mentions, replace_mentions
 from open_webui.internal.db import get_session
@@ -76,6 +72,66 @@ log = logging.getLogger(__name__)
 router = APIRouter()
 
 
+def channel_has_access(
+    user_id: str,
+    channel: ChannelModel,
+    permission: str = "read",
+    strict: bool = True,
+    db: Optional[Session] = None,
+) -> bool:
+    if AccessGrants.has_access(
+        user_id=user_id,
+        resource_type="channel",
+        resource_id=channel.id,
+        permission=permission,
+        db=db,
+    ):
+        return True
+
+    if (
+        not strict
+        and permission == "write"
+        and has_public_read_access_grant(channel.access_grants)
+    ):
+        return True
+
+    return False
+
+
+def get_channel_users_with_access(
+    channel: ChannelModel, permission: str = "read", db: Optional[Session] = None
+):
+    return AccessGrants.get_users_with_access(
+        resource_type="channel",
+        resource_id=channel.id,
+        permission=permission,
+        db=db,
+    )
+
+
+def get_channel_permitted_group_and_user_ids(
+    channel: ChannelModel, permission: str = "read"
+) -> Optional[dict[str, list[str]]]:
+    if permission == "read" and has_public_read_access_grant(channel.access_grants):
+        return None
+
+    user_ids = []
+    group_ids = []
+
+    for grant in channel.access_grants:
+        if grant.permission != permission:
+            continue
+        if grant.principal_type == "group":
+            group_ids.append(grant.principal_id)
+        elif grant.principal_type == "user" and grant.principal_id != "*":
+            user_ids.append(grant.principal_id)
+
+    return {
+        "user_ids": list(dict.fromkeys(user_ids)),
+        "group_ids": list(dict.fromkeys(group_ids)),
+    }
+
+
 ############################
 # Channels Enabled Dependency
 ############################
@@ -418,22 +474,22 @@ async def get_channel_by_id(
             }
         )
     else:
-        if user.role != "admin" and not has_access(
-            user.id, type="read", access_control=channel.access_control, db=db
+        if user.role != "admin" and not channel_has_access(
+            user.id, channel, permission="read", db=db
         ):
             raise HTTPException(
                 status_code=status.HTTP_403_FORBIDDEN, detail=ERROR_MESSAGES.DEFAULT()
             )
 
-        write_access = has_access(
+        write_access = channel_has_access(
             user.id,
-            type="write",
-            access_control=channel.access_control,
+            channel,
+            permission="write",
             strict=False,
             db=db,
         )
 
-        user_count = len(get_users_with_access("read", channel.access_control))
+        user_count = len(get_channel_users_with_access(channel, "read", db=db))
 
         channel_member = Channels.get_member_by_channel_and_user_id(
             channel.id, user.id, db=db
@@ -527,8 +583,8 @@ async def get_channel_members_by_id(
             filter["channel_id"] = channel.id
         else:
             filter["roles"] = ["!pending"]
-            permitted_ids = get_permitted_group_and_user_ids(
-                "read", channel.access_control
+            permitted_ids = get_channel_permitted_group_and_user_ids(
+                channel, permission="read"
             )
             if permitted_ids:
                 filter["user_ids"] = permitted_ids.get("user_ids")
@@ -811,8 +867,8 @@ async def get_channel_messages(
                 status_code=status.HTTP_403_FORBIDDEN, detail=ERROR_MESSAGES.DEFAULT()
             )
     else:
-        if user.role != "admin" and not has_access(
-            user.id, type="read", access_control=channel.access_control, db=db
+        if user.role != "admin" and not channel_has_access(
+            user.id, channel, permission="read", db=db
         ):
             raise HTTPException(
                 status_code=status.HTTP_403_FORBIDDEN, detail=ERROR_MESSAGES.DEFAULT()
@@ -888,8 +944,8 @@ async def get_pinned_channel_messages(
                 status_code=status.HTTP_403_FORBIDDEN, detail=ERROR_MESSAGES.DEFAULT()
             )
     else:
-        if user.role != "admin" and not has_access(
-            user.id, type="read", access_control=channel.access_control, db=db
+        if user.role != "admin" and not channel_has_access(
+            user.id, channel, permission="read", db=db
         ):
             raise HTTPException(
                 status_code=status.HTTP_403_FORBIDDEN, detail=ERROR_MESSAGES.DEFAULT()
@@ -946,7 +1002,7 @@ async def get_pinned_channel_messages(
 async def send_notification(
     name, webui_url, channel, message, active_user_ids, db=None
 ):
-    users = get_users_with_access("read", channel.access_control)
+    users = get_channel_users_with_access(channel, "read", db=db)
 
     for user in users:
         if (user.id not in active_user_ids) and Channels.is_user_channel_member(
@@ -1173,10 +1229,10 @@ async def new_message_handler(
                 status_code=status.HTTP_403_FORBIDDEN, detail=ERROR_MESSAGES.DEFAULT()
             )
     else:
-        if user.role != "admin" and not has_access(
+        if user.role != "admin" and not channel_has_access(
             user.id,
-            type="write",
-            access_control=channel.access_control,
+            channel,
+            permission="write",
             strict=False,
             db=db,
         ):
@@ -1318,8 +1374,8 @@ async def get_channel_message(
                 status_code=status.HTTP_403_FORBIDDEN, detail=ERROR_MESSAGES.DEFAULT()
             )
     else:
-        if user.role != "admin" and not has_access(
-            user.id, type="read", access_control=channel.access_control, db=db
+        if user.role != "admin" and not channel_has_access(
+            user.id, channel, permission="read", db=db
         ):
             raise HTTPException(
                 status_code=status.HTTP_403_FORBIDDEN, detail=ERROR_MESSAGES.DEFAULT()
@@ -1372,8 +1428,8 @@ async def get_channel_message_data(
                 status_code=status.HTTP_403_FORBIDDEN, detail=ERROR_MESSAGES.DEFAULT()
             )
     else:
-        if user.role != "admin" and not has_access(
-            user.id, type="read", access_control=channel.access_control, db=db
+        if user.role != "admin" and not channel_has_access(
+            user.id, channel, permission="read", db=db
         ):
             raise HTTPException(
                 status_code=status.HTTP_403_FORBIDDEN, detail=ERROR_MESSAGES.DEFAULT()
@@ -1426,8 +1482,8 @@ async def pin_channel_message(
                 status_code=status.HTTP_403_FORBIDDEN, detail=ERROR_MESSAGES.DEFAULT()
             )
     else:
-        if user.role != "admin" and not has_access(
-            user.id, type="read", access_control=channel.access_control, db=db
+        if user.role != "admin" and not channel_has_access(
+            user.id, channel, permission="read", db=db
         ):
             raise HTTPException(
                 status_code=status.HTTP_403_FORBIDDEN, detail=ERROR_MESSAGES.DEFAULT()
@@ -1492,8 +1548,8 @@ async def get_channel_thread_messages(
                 status_code=status.HTTP_403_FORBIDDEN, detail=ERROR_MESSAGES.DEFAULT()
             )
     else:
-        if user.role != "admin" and not has_access(
-            user.id, type="read", access_control=channel.access_control, db=db
+        if user.role != "admin" and not channel_has_access(
+            user.id, channel, permission="read", db=db
         ):
             raise HTTPException(
                 status_code=status.HTTP_403_FORBIDDEN, detail=ERROR_MESSAGES.DEFAULT()
@@ -1577,8 +1633,8 @@ async def update_message_by_id(
         if (
             user.role != "admin"
             and message.user_id != user.id
-            and not has_access(
-                user.id, type="read", access_control=channel.access_control, db=db
+            and not channel_has_access(
+                user.id, channel, permission="read", db=db
             )
         ):
             raise HTTPException(
@@ -1644,10 +1700,10 @@ async def add_reaction_to_message(
                 status_code=status.HTTP_403_FORBIDDEN, detail=ERROR_MESSAGES.DEFAULT()
             )
     else:
-        if user.role != "admin" and not has_access(
+        if user.role != "admin" and not channel_has_access(
             user.id,
-            type="write",
-            access_control=channel.access_control,
+            channel,
+            permission="write",
             strict=False,
             db=db,
         ):
@@ -1723,10 +1779,10 @@ async def remove_reaction_by_id_and_user_id_and_name(
                 status_code=status.HTTP_403_FORBIDDEN, detail=ERROR_MESSAGES.DEFAULT()
             )
     else:
-        if user.role != "admin" and not has_access(
+        if user.role != "admin" and not channel_has_access(
             user.id,
-            type="write",
-            access_control=channel.access_control,
+            channel,
+            permission="write",
             strict=False,
             db=db,
         ):
@@ -1818,10 +1874,10 @@ async def delete_message_by_id(
         if (
             user.role != "admin"
             and message.user_id != user.id
-            and not has_access(
+            and not channel_has_access(
                 user.id,
-                type="write",
-                access_control=channel.access_control,
+                channel,
+                permission="write",
                 strict=False,
                 db=db,
             )
diff --git a/backend/open_webui/routers/files.py b/backend/open_webui/routers/files.py
index 8b17dc406b..4a12db5cd9 100644
--- a/backend/open_webui/routers/files.py
+++ b/backend/open_webui/routers/files.py
@@ -38,6 +38,7 @@ from open_webui.models.files import (
 from open_webui.models.chats import Chats
 from open_webui.models.knowledge import Knowledges
 from open_webui.models.groups import Groups
+from open_webui.models.access_grants import AccessGrants
 
 
 from open_webui.routers.retrieval import ProcessFileForm, process_file
@@ -47,7 +48,6 @@ from open_webui.storage.provider import Storage
 
 
 from open_webui.utils.auth import get_admin_user, get_verified_user
-from open_webui.utils.access_control import has_access
 from open_webui.utils.misc import strict_match_mime_type
 from pydantic import BaseModel
 
@@ -82,8 +82,13 @@ def has_access_to_file(
         group.id for group in Groups.get_groups_by_member_id(user.id, db=db)
     }
     for knowledge_base in knowledge_bases:
-        if knowledge_base.user_id == user.id or has_access(
-            user.id, access_type, knowledge_base.access_control, user_group_ids, db=db
+        if knowledge_base.user_id == user.id or AccessGrants.has_access(
+            user_id=user.id,
+            resource_type="knowledge",
+            resource_id=knowledge_base.id,
+            permission=access_type,
+            user_group_ids=user_group_ids,
+            db=db,
         ):
             return True
 
diff --git a/backend/open_webui/routers/groups.py b/backend/open_webui/routers/groups.py
index cc0cb8f5a3..a46e05473f 100755
--- a/backend/open_webui/routers/groups.py
+++ b/backend/open_webui/routers/groups.py
@@ -7,6 +7,7 @@ from open_webui.models.users import Users, UserInfoResponse
 from open_webui.models.groups import (
     Groups,
     GroupForm,
+    GroupInfoResponse,
     GroupUpdateForm,
     GroupResponse,
     UserIdsForm,
@@ -104,6 +105,23 @@ async def get_group_by_id(
         )
 
 
+@router.get("/id/{id}/info", response_model=Optional[GroupInfoResponse])
+async def get_group_info_by_id(
+    id: str, user=Depends(get_verified_user), db: Session = Depends(get_session)
+):
+    group = Groups.get_group_by_id(id, db=db)
+    if group:
+        return GroupInfoResponse(
+            **group.model_dump(),
+            member_count=Groups.get_group_member_count_by_id(group.id, db=db),
+        )
+    else:
+        raise HTTPException(
+            status_code=status.HTTP_401_UNAUTHORIZED,
+            detail=ERROR_MESSAGES.NOT_FOUND,
+        )
+
+
 ############################
 # ExportGroupById
 ############################
diff --git a/backend/open_webui/routers/knowledge.py b/backend/open_webui/routers/knowledge.py
index 96136d6898..8350fda03d 100644
--- a/backend/open_webui/routers/knowledge.py
+++ b/backend/open_webui/routers/knowledge.py
@@ -29,7 +29,8 @@ from open_webui.storage.provider import Storage
 
 from open_webui.constants import ERROR_MESSAGES
 from open_webui.utils.auth import get_verified_user, get_admin_user
-from open_webui.utils.access_control import has_access, has_permission
+from open_webui.utils.access_control import has_permission
+from open_webui.models.access_grants import AccessGrants, has_public_read_access_grant
 
 
 from open_webui.config import BYPASS_ADMIN_ACCESS_CONTROL
@@ -133,8 +134,12 @@ async def get_knowledge_bases(
                 write_access=(
                     user.id == knowledge_base.user_id
                     or (user.role == "admin" and BYPASS_ADMIN_ACCESS_CONTROL)
-                    or has_access(
-                        user.id, "write", knowledge_base.access_control, db=db
+                    or AccessGrants.has_access(
+                        user_id=user.id,
+                        resource_type="knowledge",
+                        resource_id=knowledge_base.id,
+                        permission="write",
+                        db=db,
                     )
                 ),
             )
@@ -180,8 +185,12 @@ async def search_knowledge_bases(
                 write_access=(
                     user.id == knowledge_base.user_id
                     or (user.role == "admin" and BYPASS_ADMIN_ACCESS_CONTROL)
-                    or has_access(
-                        user.id, "write", knowledge_base.access_control, db=db
+                    or AccessGrants.has_access(
+                        user_id=user.id,
+                        resource_type="knowledge",
+                        resource_id=knowledge_base.id,
+                        permission="write",
+                        db=db,
                     )
                 ),
             )
@@ -243,14 +252,14 @@ async def create_new_knowledge(
     # Check if user can share publicly
     if (
         user.role != "admin"
-        and form_data.access_control == None
+        and has_public_read_access_grant(form_data.access_grants)
         and not has_permission(
             user.id,
             "sharing.public_knowledge",
             request.app.state.config.USER_PERMISSIONS,
         )
     ):
-        form_data.access_control = {}
+        form_data.access_grants = []
 
     knowledge = Knowledges.insert_new_knowledge(user.id, form_data)
 
@@ -387,7 +396,13 @@ async def get_knowledge_by_id(
         if (
             user.role == "admin"
             or knowledge.user_id == user.id
-            or has_access(user.id, "read", knowledge.access_control, db=db)
+            or AccessGrants.has_access(
+                user_id=user.id,
+                resource_type="knowledge",
+                resource_id=knowledge.id,
+                permission="read",
+                db=db,
+            )
         ):
 
             return KnowledgeFilesResponse(
@@ -395,7 +410,13 @@ async def get_knowledge_by_id(
                 write_access=(
                     user.id == knowledge.user_id
                     or (user.role == "admin" and BYPASS_ADMIN_ACCESS_CONTROL)
-                    or has_access(user.id, "write", knowledge.access_control, db=db)
+                    or AccessGrants.has_access(
+                        user_id=user.id,
+                        resource_type="knowledge",
+                        resource_id=knowledge.id,
+                        permission="write",
+                        db=db,
+                    )
                 ),
             )
         else:
@@ -435,7 +456,12 @@ async def update_knowledge_by_id(
     # Is the user the original creator, in a group with write access, or an admin
     if (
         knowledge.user_id != user.id
-        and not has_access(user.id, "write", knowledge.access_control)
+        and not AccessGrants.has_access(
+            user_id=user.id,
+            resource_type="knowledge",
+            resource_id=knowledge.id,
+            permission="write",
+        )
         and user.role != "admin"
     ):
         raise HTTPException(
@@ -446,14 +472,14 @@ async def update_knowledge_by_id(
     # Check if user can share publicly
     if (
         user.role != "admin"
-        and form_data.access_control == None
+        and has_public_read_access_grant(form_data.access_grants)
         and not has_permission(
             user.id,
             "sharing.public_knowledge",
             request.app.state.config.USER_PERMISSIONS,
         )
     ):
-        form_data.access_control = {}
+        form_data.access_grants = []
 
     knowledge = Knowledges.update_knowledge_by_id(id=id, form_data=form_data)
     if knowledge:
@@ -502,7 +528,13 @@ async def get_knowledge_files_by_id(
     if not (
         user.role == "admin"
         or knowledge.user_id == user.id
-        or has_access(user.id, "read", knowledge.access_control, db=db)
+        or AccessGrants.has_access(
+            user_id=user.id,
+            resource_type="knowledge",
+            resource_id=knowledge.id,
+            permission="read",
+            db=db,
+        )
     ):
         raise HTTPException(
             status_code=status.HTTP_400_BAD_REQUEST,
@@ -555,7 +587,13 @@ def add_file_to_knowledge_by_id(
 
     if (
         knowledge.user_id != user.id
-        and not has_access(user.id, "write", knowledge.access_control, db=db)
+        and not AccessGrants.has_access(
+            user_id=user.id,
+            resource_type="knowledge",
+            resource_id=knowledge.id,
+            permission="write",
+            db=db,
+        )
         and user.role != "admin"
     ):
         raise HTTPException(
@@ -624,7 +662,13 @@ def update_file_from_knowledge_by_id(
 
     if (
         knowledge.user_id != user.id
-        and not has_access(user.id, "write", knowledge.access_control, db=db)
+        and not AccessGrants.has_access(
+            user_id=user.id,
+            resource_type="knowledge",
+            resource_id=knowledge.id,
+            permission="write",
+            db=db,
+        )
         and user.role != "admin"
     ):
 
@@ -693,7 +737,13 @@ def remove_file_from_knowledge_by_id(
 
     if (
         knowledge.user_id != user.id
-        and not has_access(user.id, "write", knowledge.access_control, db=db)
+        and not AccessGrants.has_access(
+            user_id=user.id,
+            resource_type="knowledge",
+            resource_id=knowledge.id,
+            permission="write",
+            db=db,
+        )
         and user.role != "admin"
     ):
         raise HTTPException(
@@ -770,7 +820,13 @@ async def delete_knowledge_by_id(
 
     if (
         knowledge.user_id != user.id
-        and not has_access(user.id, "write", knowledge.access_control, db=db)
+        and not AccessGrants.has_access(
+            user_id=user.id,
+            resource_type="knowledge",
+            resource_id=knowledge.id,
+            permission="write",
+            db=db,
+        )
         and user.role != "admin"
     ):
         raise HTTPException(
@@ -802,7 +858,7 @@ async def delete_knowledge_by_id(
                     base_model_id=model.base_model_id,
                     meta=model.meta,
                     params=model.params,
-                    access_control=model.access_control,
+                    access_grants=model.access_grants,
                     is_active=model.is_active,
                 )
                 Models.update_model_by_id(model.id, model_form, db=db)
@@ -839,7 +895,13 @@ async def reset_knowledge_by_id(
 
     if (
         knowledge.user_id != user.id
-        and not has_access(user.id, "write", knowledge.access_control, db=db)
+        and not AccessGrants.has_access(
+            user_id=user.id,
+            resource_type="knowledge",
+            resource_id=knowledge.id,
+            permission="write",
+            db=db,
+        )
         and user.role != "admin"
     ):
         raise HTTPException(
@@ -882,7 +944,13 @@ async def add_files_to_knowledge_batch(
 
     if (
         knowledge.user_id != user.id
-        and not has_access(user.id, "write", knowledge.access_control, db=db)
+        and not AccessGrants.has_access(
+            user_id=user.id,
+            resource_type="knowledge",
+            resource_id=knowledge.id,
+            permission="write",
+            db=db,
+        )
         and user.role != "admin"
     ):
         raise HTTPException(
diff --git a/backend/open_webui/routers/models.py b/backend/open_webui/routers/models.py
index 85f0fb4f64..b2bccc1958 100644
--- a/backend/open_webui/routers/models.py
+++ b/backend/open_webui/routers/models.py
@@ -15,6 +15,7 @@ from open_webui.models.models import (
     ModelAccessResponse,
     Models,
 )
+from open_webui.models.access_grants import AccessGrants
 
 from pydantic import BaseModel
 from open_webui.constants import ERROR_MESSAGES
@@ -30,7 +31,7 @@ from fastapi.responses import FileResponse, StreamingResponse
 
 
 from open_webui.utils.auth import get_admin_user, get_verified_user
-from open_webui.utils.access_control import has_access, has_permission
+from open_webui.utils.access_control import has_permission
 from open_webui.config import BYPASS_ADMIN_ACCESS_CONTROL, STATIC_DIR
 from open_webui.internal.db import get_session
 from sqlalchemy.orm import Session
@@ -98,7 +99,13 @@ async def get_models(
                 write_access=(
                     (user.role == "admin" and BYPASS_ADMIN_ACCESS_CONTROL)
                     or user.id == model.user_id
-                    or has_access(user.id, "write", model.access_control, db=db)
+                    or AccessGrants.has_access(
+                        user_id=user.id,
+                        resource_type="model",
+                        resource_id=model.id,
+                        permission="write",
+                        db=db,
+                    )
                 ),
             )
             for model in result.items
@@ -315,14 +322,26 @@ async def get_model_by_id(
         if (
             (user.role == "admin" and BYPASS_ADMIN_ACCESS_CONTROL)
             or model.user_id == user.id
-            or has_access(user.id, "read", model.access_control, db=db)
+            or AccessGrants.has_access(
+                user_id=user.id,
+                resource_type="model",
+                resource_id=model.id,
+                permission="read",
+                db=db,
+            )
         ):
             return ModelAccessResponse(
                 **model.model_dump(),
                 write_access=(
                     (user.role == "admin" and BYPASS_ADMIN_ACCESS_CONTROL)
                     or user.id == model.user_id
-                    or has_access(user.id, "write", model.access_control, db=db)
+                    or AccessGrants.has_access(
+                        user_id=user.id,
+                        resource_type="model",
+                        resource_id=model.id,
+                        permission="write",
+                        db=db,
+                    )
                 ),
             )
         else:
@@ -393,7 +412,13 @@ async def toggle_model_by_id(
         if (
             user.role == "admin"
             or model.user_id == user.id
-            or has_access(user.id, "write", model.access_control, db=db)
+            or AccessGrants.has_access(
+                user_id=user.id,
+                resource_type="model",
+                resource_id=model.id,
+                permission="write",
+                db=db,
+            )
         ):
             model = Models.toggle_model_by_id(id, db=db)
 
@@ -436,7 +461,13 @@ async def update_model_by_id(
 
     if (
         model.user_id != user.id
-        and not has_access(user.id, "write", model.access_control, db=db)
+        and not AccessGrants.has_access(
+            user_id=user.id,
+            resource_type="model",
+            resource_id=model.id,
+            permission="write",
+            db=db,
+        )
         and user.role != "admin"
     ):
         raise HTTPException(
@@ -471,7 +502,13 @@ async def delete_model_by_id(
     if (
         user.role != "admin"
         and model.user_id != user.id
-        and not has_access(user.id, "write", model.access_control, db=db)
+        and not AccessGrants.has_access(
+            user_id=user.id,
+            resource_type="model",
+            resource_id=model.id,
+            permission="write",
+            db=db,
+        )
     ):
         raise HTTPException(
             status_code=status.HTTP_401_UNAUTHORIZED,
diff --git a/backend/open_webui/routers/notes.py b/backend/open_webui/routers/notes.py
index 56730e2b6a..321b06fcda 100644
--- a/backend/open_webui/routers/notes.py
+++ b/backend/open_webui/routers/notes.py
@@ -27,7 +27,8 @@ from open_webui.constants import ERROR_MESSAGES
 
 
 from open_webui.utils.auth import get_admin_user, get_verified_user
-from open_webui.utils.access_control import has_access, has_permission
+from open_webui.utils.access_control import has_permission
+from open_webui.models.access_grants import AccessGrants, has_public_read_access_grant
 from open_webui.internal.db import get_session
 from sqlalchemy.orm import Session
 
@@ -200,8 +201,12 @@ async def get_note_by_id(
     if user.role != "admin" and (
         user.id != note.user_id
         and (
-            not has_access(
-                user.id, type="read", access_control=note.access_control, db=db
+            not AccessGrants.has_access(
+                user_id=user.id,
+                resource_type="note",
+                resource_id=note.id,
+                permission="read",
+                db=db,
             )
         )
     ):
@@ -212,13 +217,14 @@ async def get_note_by_id(
     write_access = (
         user.role == "admin"
         or (user.id == note.user_id)
-        or has_access(
-            user.id,
-            type="write",
-            access_control=note.access_control,
-            strict=False,
+        or AccessGrants.has_access(
+            user_id=user.id,
+            resource_type="note",
+            resource_id=note.id,
+            permission="write",
             db=db,
         )
+        or has_public_read_access_grant(note.access_grants)
     )
 
     return NoteResponse(**note.model_dump(), write_access=write_access)
@@ -253,8 +259,12 @@ async def update_note_by_id(
 
     if user.role != "admin" and (
         user.id != note.user_id
-        and not has_access(
-            user.id, type="write", access_control=note.access_control, db=db
+        and not AccessGrants.has_access(
+            user_id=user.id,
+            resource_type="note",
+            resource_id=note.id,
+            permission="write",
+            db=db,
         )
     ):
         raise HTTPException(
@@ -264,7 +274,7 @@ async def update_note_by_id(
     # Check if user can share publicly
     if (
         user.role != "admin"
-        and form_data.access_control == None
+        and has_public_read_access_grant(form_data.access_grants)
         and not has_permission(
             user.id,
             "sharing.public_notes",
@@ -272,7 +282,7 @@ async def update_note_by_id(
             db=db,
         )
     ):
-        form_data.access_control = {}
+        form_data.access_grants = []
 
     try:
         note = Notes.update_note_by_id(id, form_data, db=db)
@@ -318,8 +328,12 @@ async def delete_note_by_id(
 
     if user.role != "admin" and (
         user.id != note.user_id
-        and not has_access(
-            user.id, type="write", access_control=note.access_control, db=db
+        and not AccessGrants.has_access(
+            user_id=user.id,
+            resource_type="note",
+            resource_id=note.id,
+            permission="write",
+            db=db,
         )
     ):
         raise HTTPException(
diff --git a/backend/open_webui/routers/ollama.py b/backend/open_webui/routers/ollama.py
index cfbdbcac08..16e0d27956 100644
--- a/backend/open_webui/routers/ollama.py
+++ b/backend/open_webui/routers/ollama.py
@@ -44,6 +44,7 @@ from open_webui.internal.db import get_session
 
 
 from open_webui.models.models import Models
+from open_webui.models.access_grants import AccessGrants
 from open_webui.utils.misc import (
     calculate_sha256,
 )
@@ -53,9 +54,6 @@ from open_webui.utils.payload import (
     apply_system_prompt_to_body,
 )
 from open_webui.utils.auth import get_admin_user, get_verified_user
-from open_webui.utils.access_control import has_access
-
-
 from open_webui.config import (
     UPLOAD_DIR,
 )
@@ -430,8 +428,12 @@ async def get_filtered_models(models, user, db=None):
     for model in models.get("models", []):
         model_info = Models.get_model_by_id(model["model"], db=db)
         if model_info:
-            if user.id == model_info.user_id or has_access(
-                user.id, type="read", access_control=model_info.access_control, db=db
+            if user.id == model_info.user_id or AccessGrants.has_access(
+                user_id=user.id,
+                resource_type="model",
+                resource_id=model_info.id,
+                permission="read",
+                db=db,
             ):
                 filtered_models.append(model)
     return filtered_models
@@ -1259,7 +1261,7 @@ async def generate_chat_completion(
     bypass_system_prompt: bool = False,
 ):
     # NOTE: We intentionally do NOT use Depends(get_session) here.
-    # Database operations (get_model_by_id, has_access) manage their own short-lived sessions.
+    # Database operations (get_model_by_id, AccessGrants.has_access) manage their own short-lived sessions.
     # This prevents holding a connection during the entire LLM call (30-60+ seconds),
     # which would exhaust the connection pool under concurrent load.
     if BYPASS_MODEL_ACCESS_CONTROL:
@@ -1306,10 +1308,11 @@ async def generate_chat_completion(
         if not bypass_filter and user.role == "user":
             if not (
                 user.id == model_info.user_id
-                or has_access(
-                    user.id,
-                    type="read",
-                    access_control=model_info.access_control,
+                or AccessGrants.has_access(
+                    user_id=user.id,
+                    resource_type="model",
+                    resource_id=model_info.id,
+                    permission="read",
                 )
             ):
                 raise HTTPException(
@@ -1383,7 +1386,7 @@ async def generate_openai_completion(
     user=Depends(get_verified_user),
 ):
     # NOTE: We intentionally do NOT use Depends(get_session) here.
-    # Database operations (get_model_by_id, has_access) manage their own short-lived sessions.
+    # Database operations (get_model_by_id, AccessGrants.has_access) manage their own short-lived sessions.
     # This prevents holding a connection during the entire LLM call (30-60+ seconds),
     # which would exhaust the connection pool under concurrent load.
     metadata = form_data.pop("metadata", None)
@@ -1418,10 +1421,11 @@ async def generate_openai_completion(
         if user.role == "user":
             if not (
                 user.id == model_info.user_id
-                or has_access(
-                    user.id,
-                    type="read",
-                    access_control=model_info.access_control,
+                or AccessGrants.has_access(
+                    user_id=user.id,
+                    resource_type="model",
+                    resource_id=model_info.id,
+                    permission="read",
                 )
             ):
                 raise HTTPException(
@@ -1468,7 +1472,7 @@ async def generate_openai_chat_completion(
     user=Depends(get_verified_user),
 ):
     # NOTE: We intentionally do NOT use Depends(get_session) here.
-    # Database operations (get_model_by_id, has_access) manage their own short-lived sessions.
+    # Database operations (get_model_by_id, AccessGrants.has_access) manage their own short-lived sessions.
     # This prevents holding a connection during the entire LLM call (30-60+ seconds),
     # which would exhaust the connection pool under concurrent load.
     metadata = form_data.pop("metadata", None)
@@ -1507,10 +1511,11 @@ async def generate_openai_chat_completion(
         if user.role == "user":
             if not (
                 user.id == model_info.user_id
-                or has_access(
-                    user.id,
-                    type="read",
-                    access_control=model_info.access_control,
+                or AccessGrants.has_access(
+                    user_id=user.id,
+                    resource_type="model",
+                    resource_id=model_info.id,
+                    permission="read",
                 )
             ):
                 raise HTTPException(
@@ -1608,10 +1613,11 @@ async def get_openai_models(
         for model in models:
             model_info = Models.get_model_by_id(model["id"], db=db)
             if model_info:
-                if user.id == model_info.user_id or has_access(
-                    user.id,
-                    type="read",
-                    access_control=model_info.access_control,
+                if user.id == model_info.user_id or AccessGrants.has_access(
+                    user_id=user.id,
+                    resource_type="model",
+                    resource_id=model_info.id,
+                    permission="read",
                     db=db,
                 ):
                     filtered_models.append(model)
diff --git a/backend/open_webui/routers/openai.py b/backend/open_webui/routers/openai.py
index b1d31afb8f..cfb55ee80e 100644
--- a/backend/open_webui/routers/openai.py
+++ b/backend/open_webui/routers/openai.py
@@ -24,6 +24,7 @@ from sqlalchemy.orm import Session
 from open_webui.internal.db import get_session
 
 from open_webui.models.models import Models
+from open_webui.models.access_grants import AccessGrants
 from open_webui.config import (
     CACHE_DIR,
 )
@@ -50,7 +51,6 @@ from open_webui.utils.misc import (
 )
 
 from open_webui.utils.auth import get_admin_user, get_verified_user
-from open_webui.utils.access_control import has_access
 from open_webui.utils.headers import include_user_info_headers
 
 
@@ -462,8 +462,12 @@ async def get_filtered_models(models, user, db=None):
     for model in models.get("data", []):
         model_info = Models.get_model_by_id(model["id"], db=db)
         if model_info:
-            if user.id == model_info.user_id or has_access(
-                user.id, type="read", access_control=model_info.access_control, db=db
+            if user.id == model_info.user_id or AccessGrants.has_access(
+                user_id=user.id,
+                resource_type="model",
+                resource_id=model_info.id,
+                permission="read",
+                db=db,
             ):
                 filtered_models.append(model)
     return filtered_models
@@ -876,7 +880,7 @@ async def generate_chat_completion(
     bypass_system_prompt: bool = False,
 ):
     # NOTE: We intentionally do NOT use Depends(get_session) here.
-    # Database operations (get_model_by_id, has_access) manage their own short-lived sessions.
+    # Database operations (get_model_by_id, AccessGrants.has_access) manage their own short-lived sessions.
     # This prevents holding a connection during the entire LLM call (30-60+ seconds),
     # which would exhaust the connection pool under concurrent load.
     if BYPASS_MODEL_ACCESS_CONTROL:
@@ -914,10 +918,11 @@ async def generate_chat_completion(
         if not bypass_filter and user.role == "user":
             if not (
                 user.id == model_info.user_id
-                or has_access(
-                    user.id,
-                    type="read",
-                    access_control=model_info.access_control,
+                or AccessGrants.has_access(
+                    user_id=user.id,
+                    resource_type="model",
+                    resource_id=model_info.id,
+                    permission="read",
                 )
             ):
                 raise HTTPException(
diff --git a/backend/open_webui/routers/prompts.py b/backend/open_webui/routers/prompts.py
index fc24ccaf4b..77c2e84fc4 100644
--- a/backend/open_webui/routers/prompts.py
+++ b/backend/open_webui/routers/prompts.py
@@ -9,6 +9,7 @@ from open_webui.models.prompts import (
     PromptModel,
     Prompts,
 )
+from open_webui.models.access_grants import AccessGrants
 from open_webui.models.groups import Groups
 from open_webui.models.prompt_history import (
     PromptHistories,
@@ -17,7 +18,7 @@ from open_webui.models.prompt_history import (
 )
 from open_webui.constants import ERROR_MESSAGES
 from open_webui.utils.auth import get_admin_user, get_verified_user
-from open_webui.utils.access_control import has_access, has_permission
+from open_webui.utils.access_control import has_permission
 from open_webui.config import BYPASS_ADMIN_ACCESS_CONTROL
 from open_webui.internal.db import get_session
 from sqlalchemy.orm import Session
@@ -115,7 +116,13 @@ async def get_prompt_list(
                 write_access=(
                     (user.role == "admin" and BYPASS_ADMIN_ACCESS_CONTROL)
                     or user.id == prompt.user_id
-                    or has_access(user.id, "write", prompt.access_control, db=db)
+                    or AccessGrants.has_access(
+                        user_id=user.id,
+                        resource_type="prompt",
+                        resource_id=prompt.id,
+                        permission="write",
+                        db=db,
+                    )
                 ),
             )
             for prompt in result.items
@@ -186,14 +193,26 @@ async def get_prompt_by_command(
         if (
             user.role == "admin"
             or prompt.user_id == user.id
-            or has_access(user.id, "read", prompt.access_control, db=db)
+            or AccessGrants.has_access(
+                user_id=user.id,
+                resource_type="prompt",
+                resource_id=prompt.id,
+                permission="read",
+                db=db,
+            )
         ):
             return PromptAccessResponse(
                 **prompt.model_dump(),
                 write_access=(
                     (user.role == "admin" and BYPASS_ADMIN_ACCESS_CONTROL)
                     or user.id == prompt.user_id
-                    or has_access(user.id, "write", prompt.access_control, db=db)
+                    or AccessGrants.has_access(
+                        user_id=user.id,
+                        resource_type="prompt",
+                        resource_id=prompt.id,
+                        permission="write",
+                        db=db,
+                    )
                 ),
             )
 
@@ -218,14 +237,26 @@ async def get_prompt_by_id(
         if (
             user.role == "admin"
             or prompt.user_id == user.id
-            or has_access(user.id, "read", prompt.access_control, db=db)
+            or AccessGrants.has_access(
+                user_id=user.id,
+                resource_type="prompt",
+                resource_id=prompt.id,
+                permission="read",
+                db=db,
+            )
         ):
             return PromptAccessResponse(
                 **prompt.model_dump(),
                 write_access=(
                     (user.role == "admin" and BYPASS_ADMIN_ACCESS_CONTROL)
                     or user.id == prompt.user_id
-                    or has_access(user.id, "write", prompt.access_control, db=db)
+                    or AccessGrants.has_access(
+                        user_id=user.id,
+                        resource_type="prompt",
+                        resource_id=prompt.id,
+                        permission="write",
+                        db=db,
+                    )
                 ),
             )
 
@@ -258,7 +289,13 @@ async def update_prompt_by_id(
     # Is the user the original creator, in a group with write access, or an admin
     if (
         prompt.user_id != user.id
-        and not has_access(user.id, "write", prompt.access_control, db=db)
+        and not AccessGrants.has_access(
+            user_id=user.id,
+            resource_type="prompt",
+            resource_id=prompt.id,
+            permission="write",
+            db=db,
+        )
         and user.role != "admin"
     ):
         raise HTTPException(
@@ -311,7 +348,13 @@ async def update_prompt_metadata(
 
     if (
         prompt.user_id != user.id
-        and not has_access(user.id, "write", prompt.access_control, db=db)
+        and not AccessGrants.has_access(
+            user_id=user.id,
+            resource_type="prompt",
+            resource_id=prompt.id,
+            permission="write",
+            db=db,
+        )
         and user.role != "admin"
     ):
         raise HTTPException(
@@ -356,7 +399,13 @@ async def set_prompt_version(
 
     if (
         prompt.user_id != user.id
-        and not has_access(user.id, "write", prompt.access_control, db=db)
+        and not AccessGrants.has_access(
+            user_id=user.id,
+            resource_type="prompt",
+            resource_id=prompt.id,
+            permission="write",
+            db=db,
+        )
         and user.role != "admin"
     ):
         raise HTTPException(
@@ -395,7 +444,13 @@ async def delete_prompt_by_id(
 
     if (
         prompt.user_id != user.id
-        and not has_access(user.id, "write", prompt.access_control, db=db)
+        and not AccessGrants.has_access(
+            user_id=user.id,
+            resource_type="prompt",
+            resource_id=prompt.id,
+            permission="write",
+            db=db,
+        )
         and user.role != "admin"
     ):
         raise HTTPException(
@@ -434,7 +489,13 @@ async def get_prompt_history(
     if not (
         user.role == "admin"
         or prompt.user_id == user.id
-        or has_access(user.id, "read", prompt.access_control, db=db)
+        or AccessGrants.has_access(
+            user_id=user.id,
+            resource_type="prompt",
+            resource_id=prompt.id,
+            permission="read",
+            db=db,
+        )
     ):
         raise HTTPException(
             status_code=status.HTTP_401_UNAUTHORIZED,
@@ -469,7 +530,13 @@ async def get_prompt_history_entry(
     if not (
         user.role == "admin"
         or prompt.user_id == user.id
-        or has_access(user.id, "read", prompt.access_control, db=db)
+        or AccessGrants.has_access(
+            user_id=user.id,
+            resource_type="prompt",
+            resource_id=prompt.id,
+            permission="read",
+            db=db,
+        )
     ):
         raise HTTPException(
             status_code=status.HTTP_401_UNAUTHORIZED,
@@ -508,7 +575,13 @@ async def delete_prompt_history_entry(
     if not (
         user.role == "admin"
         or prompt.user_id == user.id
-        or has_access(user.id, "write", prompt.access_control, db=db)
+        or AccessGrants.has_access(
+            user_id=user.id,
+            resource_type="prompt",
+            resource_id=prompt.id,
+            permission="write",
+            db=db,
+        )
     ):
         raise HTTPException(
             status_code=status.HTTP_401_UNAUTHORIZED,
@@ -553,7 +626,13 @@ async def get_prompt_diff(
     if not (
         user.role == "admin"
         or prompt.user_id == user.id
-        or has_access(user.id, "read", prompt.access_control, db=db)
+        or AccessGrants.has_access(
+            user_id=user.id,
+            resource_type="prompt",
+            resource_id=prompt.id,
+            permission="read",
+            db=db,
+        )
     ):
         raise HTTPException(
             status_code=status.HTTP_401_UNAUTHORIZED,
diff --git a/backend/open_webui/routers/tools.py b/backend/open_webui/routers/tools.py
index 7f9b23c7ce..015bde232a 100644
--- a/backend/open_webui/routers/tools.py
+++ b/backend/open_webui/routers/tools.py
@@ -21,6 +21,7 @@ from open_webui.models.tools import (
     ToolAccessResponse,
     Tools,
 )
+from open_webui.models.access_grants import AccessGrants
 from open_webui.utils.plugin import (
     load_tool_module_by_id,
     replace_imports,
@@ -156,7 +157,24 @@ async def get_tools(
             tool
             for tool in tools
             if tool.user_id == user.id
-            or has_access(user.id, "read", tool.access_control, user_group_ids, db=db)
+            or (
+                has_access(
+                    user.id,
+                    "read",
+                    getattr(tool, "access_control", None),
+                    user_group_ids,
+                    db=db,
+                )
+                if str(tool.id).startswith("server:")
+                else AccessGrants.has_access(
+                    user_id=user.id,
+                    resource_type="tool",
+                    resource_id=tool.id,
+                    permission="read",
+                    user_group_ids=user_group_ids,
+                    db=db,
+                )
+            )
         ]
         return tools
 
@@ -181,7 +199,13 @@ async def get_tool_list(
             write_access=(
                 (user.role == "admin" and BYPASS_ADMIN_ACCESS_CONTROL)
                 or user.id == tool.user_id
-                or has_access(user.id, "write", tool.access_control, db=db)
+                or AccessGrants.has_access(
+                    user_id=user.id,
+                    resource_type="tool",
+                    resource_id=tool.id,
+                    permission="write",
+                    db=db,
+                )
             ),
         )
         for tool in tools
@@ -382,14 +406,26 @@ async def get_tools_by_id(
         if (
             user.role == "admin"
             or tools.user_id == user.id
-            or has_access(user.id, "read", tools.access_control, db=db)
+            or AccessGrants.has_access(
+                user_id=user.id,
+                resource_type="tool",
+                resource_id=tools.id,
+                permission="read",
+                db=db,
+            )
         ):
             return ToolAccessResponse(
                 **tools.model_dump(),
                 write_access=(
                     (user.role == "admin" and BYPASS_ADMIN_ACCESS_CONTROL)
                     or user.id == tools.user_id
-                    or has_access(user.id, "write", tools.access_control, db=db)
+                    or AccessGrants.has_access(
+                        user_id=user.id,
+                        resource_type="tool",
+                        resource_id=tools.id,
+                        permission="write",
+                        db=db,
+                    )
                 ),
             )
         else:
@@ -427,7 +463,13 @@ async def update_tools_by_id(
     # Is the user the original creator, in a group with write access, or an admin
     if (
         tools.user_id != user.id
-        and not has_access(user.id, "write", tools.access_control, db=db)
+        and not AccessGrants.has_access(
+            user_id=user.id,
+            resource_type="tool",
+            resource_id=tools.id,
+            permission="write",
+            db=db,
+        )
         and user.role != "admin"
     ):
         raise HTTPException(
@@ -489,7 +531,13 @@ async def delete_tools_by_id(
 
     if (
         tools.user_id != user.id
-        and not has_access(user.id, "write", tools.access_control, db=db)
+        and not AccessGrants.has_access(
+            user_id=user.id,
+            resource_type="tool",
+            resource_id=tools.id,
+            permission="write",
+            db=db,
+        )
         and user.role != "admin"
     ):
         raise HTTPException(
@@ -588,7 +636,13 @@ async def update_tools_valves_by_id(
 
     if (
         tools.user_id != user.id
-        and not has_access(user.id, "write", tools.access_control, db=db)
+        and not AccessGrants.has_access(
+            user_id=user.id,
+            resource_type="tool",
+            resource_id=tools.id,
+            permission="write",
+            db=db,
+        )
         and user.role != "admin"
     ):
         raise HTTPException(
diff --git a/backend/open_webui/routers/users.py b/backend/open_webui/routers/users.py
index 20b69bcdf7..5d8a1057d9 100644
--- a/backend/open_webui/routers/users.py
+++ b/backend/open_webui/routers/users.py
@@ -19,7 +19,7 @@ from open_webui.models.users import (
     UserModel,
     UserGroupIdsModel,
     UserGroupIdsListResponse,
-    UserInfoListResponse,
+    UserInfoResponse,
     UserInfoListResponse,
     UserRoleUpdateForm,
     UserStatus,
@@ -446,7 +446,7 @@ class UserActiveResponse(UserStatus):
 
 @router.get("/{user_id}", response_model=UserActiveResponse)
 async def get_user_by_id(
-    user_id: str, user=Depends(get_verified_user), db: Session = Depends(get_session)
+    user_id: str, user=Depends(get_admin_user), db: Session = Depends(get_session)
 ):
     # Check if user_id is a shared chat
     # If it is, get the user_id from the chat
@@ -478,6 +478,20 @@ async def get_user_by_id(
         )
 
 
+@router.get("/{user_id}/info", response_model=UserInfoResponse)
+async def get_user_info_by_id(
+    user_id: str, user=Depends(get_verified_user), db: Session = Depends(get_session)
+):
+    user = Users.get_user_by_id(user_id, db=db)
+    if user:
+        return user
+    else:
+        raise HTTPException(
+            status_code=status.HTTP_400_BAD_REQUEST,
+            detail=ERROR_MESSAGES.USER_NOT_FOUND,
+        )
+
+
 @router.get("/{user_id}/oauth/sessions")
 async def get_user_oauth_sessions_by_id(
     user_id: str, user=Depends(get_admin_user), db: Session = Depends(get_session)
diff --git a/backend/open_webui/socket/main.py b/backend/open_webui/socket/main.py
index 67e04e69c3..e987f9c29d 100644
--- a/backend/open_webui/socket/main.py
+++ b/backend/open_webui/socket/main.py
@@ -42,7 +42,7 @@ from open_webui.utils.auth import decode_token
 from open_webui.socket.utils import RedisDict, RedisLock, YdocManager
 from open_webui.tasks import create_task, stop_item_tasks
 from open_webui.utils.redis import get_redis_connection
-from open_webui.utils.access_control import has_access, get_users_with_access
+from open_webui.models.access_grants import AccessGrants
 
 
 from open_webui.env import (
@@ -405,7 +405,12 @@ async def join_note(sid, data):
     if (
         user.role != "admin"
         and user.id != note.user_id
-        and not has_access(user.id, type="read", access_control=note.access_control)
+        and not AccessGrants.has_access(
+            user_id=user.id,
+            resource_type="note",
+            resource_id=note.id,
+            permission="read",
+        )
     ):
         log.error(f"User {user.id} does not have access to note {data['note_id']}")
         return
@@ -467,8 +472,11 @@ async def ydoc_document_join(sid, data):
             if (
                 user.get("role") != "admin"
                 and user.get("id") != note.user_id
-                and not has_access(
-                    user.get("id"), type="read", access_control=note.access_control
+                and not AccessGrants.has_access(
+                    user_id=user.get("id"),
+                    resource_type="note",
+                    resource_id=note.id,
+                    permission="read",
                 )
             ):
                 log.error(
@@ -537,8 +545,11 @@ async def document_save_handler(document_id, data, user):
         if (
             user.get("role") != "admin"
             and user.get("id") != note.user_id
-            and not has_access(
-                user.get("id"), type="read", access_control=note.access_control
+            and not AccessGrants.has_access(
+                user_id=user.get("id"),
+                resource_type="note",
+                resource_id=note.id,
+                permission="read",
             )
         ):
             log.error(f"User {user.get('id')} does not have access to note {note_id}")
diff --git a/backend/open_webui/tools/builtin.py b/backend/open_webui/tools/builtin.py
index 78d64faafc..f02fbf60a2 100644
--- a/backend/open_webui/tools/builtin.py
+++ b/backend/open_webui/tools/builtin.py
@@ -743,10 +743,14 @@ async def view_note(
         user_id = __user__.get("id")
         user_group_ids = [group.id for group in Groups.get_groups_by_member_id(user_id)]
 
-        from open_webui.utils.access_control import has_access
+        from open_webui.models.access_grants import AccessGrants
 
-        if note.user_id != user_id and not has_access(
-            user_id, "read", note.access_control, user_group_ids
+        if note.user_id != user_id and not AccessGrants.has_access(
+            user_id=user_id,
+            resource_type="note",
+            resource_id=note.id,
+            permission="read",
+            user_group_ids=set(user_group_ids),
         ):
             return json.dumps({"error": "Access denied"})
 
@@ -797,7 +801,7 @@ async def write_note(
         form = NoteForm(
             title=title,
             data={"content": {"md": content}},
-            access_control={},  # Private by default - only owner can access
+            access_grants=[],  # Private by default - only owner can access
         )
 
         new_note = Notes.insert_new_note(user_id, form)
@@ -852,10 +856,14 @@ async def replace_note_content(
         user_id = __user__.get("id")
         user_group_ids = [group.id for group in Groups.get_groups_by_member_id(user_id)]
 
-        from open_webui.utils.access_control import has_access
+        from open_webui.models.access_grants import AccessGrants
 
-        if note.user_id != user_id and not has_access(
-            user_id, "write", note.access_control, user_group_ids
+        if note.user_id != user_id and not AccessGrants.has_access(
+            user_id=user_id,
+            resource_type="note",
+            resource_id=note.id,
+            permission="write",
+            user_group_ids=set(user_group_ids),
         ):
             return json.dumps({"error": "Write access denied"})
 
@@ -1532,7 +1540,7 @@ async def view_knowledge_file(
     try:
         from open_webui.models.files import Files
         from open_webui.models.knowledge import Knowledges
-        from open_webui.utils.access_control import has_access
+        from open_webui.models.access_grants import AccessGrants
 
         user_id = __user__.get("id")
         user_role = __user__.get("role", "user")
@@ -1551,8 +1559,12 @@ async def view_knowledge_file(
             if (
                 user_role == "admin"
                 or knowledge_base.user_id == user_id
-                or has_access(
-                    user_id, "read", knowledge_base.access_control, user_group_ids
+                or AccessGrants.has_access(
+                    user_id=user_id,
+                    resource_type="knowledge",
+                    resource_id=knowledge_base.id,
+                    permission="read",
+                    user_group_ids=set(user_group_ids),
                 )
             ):
                 has_knowledge_access = True
@@ -1631,7 +1643,7 @@ async def query_knowledge_files(
         from open_webui.models.files import Files
         from open_webui.models.notes import Notes
         from open_webui.retrieval.utils import query_collection
-        from open_webui.utils.access_control import has_access
+        from open_webui.models.access_grants import AccessGrants
 
         user_id = __user__.get("id")
         user_role = __user__.get("role", "user")
@@ -1656,8 +1668,12 @@ async def query_knowledge_files(
                     if knowledge and (
                         user_role == "admin"
                         or knowledge.user_id == user_id
-                        or has_access(
-                            user_id, "read", knowledge.access_control, user_group_ids
+                        or AccessGrants.has_access(
+                            user_id=user_id,
+                            resource_type="knowledge",
+                            resource_id=knowledge.id,
+                            permission="read",
+                            user_group_ids=set(user_group_ids),
                         )
                     ):
                         collection_names.append(item_id)
@@ -1674,7 +1690,12 @@ async def query_knowledge_files(
                     if note and (
                         user_role == "admin"
                         or note.user_id == user_id
-                        or has_access(user_id, "read", note.access_control)
+                        or AccessGrants.has_access(
+                            user_id=user_id,
+                            resource_type="note",
+                            resource_id=note.id,
+                            permission="read",
+                        )
                     ):
                         content = note.data.get("content", {}).get("md", "")
                         note_results.append(
@@ -1693,8 +1714,12 @@ async def query_knowledge_files(
                 if knowledge and (
                     user_role == "admin"
                     or knowledge.user_id == user_id
-                    or has_access(
-                        user_id, "read", knowledge.access_control, user_group_ids
+                    or AccessGrants.has_access(
+                        user_id=user_id,
+                        resource_type="knowledge",
+                        resource_id=knowledge.id,
+                        permission="read",
+                        user_group_ids=set(user_group_ids),
                     )
                 ):
                     collection_names.append(knowledge_id)
diff --git a/backend/open_webui/utils/models.py b/backend/open_webui/utils/models.py
index b3a332adee..4224605f19 100644
--- a/backend/open_webui/utils/models.py
+++ b/backend/open_webui/utils/models.py
@@ -13,6 +13,7 @@ from open_webui.functions import get_function_models
 
 from open_webui.models.functions import Functions
 from open_webui.models.models import Models
+from open_webui.models.access_grants import AccessGrants
 from open_webui.models.groups import Groups
 
 
@@ -354,8 +355,12 @@ def check_model_access(user, model, db=None):
             raise Exception("Model not found")
         elif not (
             user.id == model_info.user_id
-            or has_access(
-                user.id, type="read", access_control=model_info.access_control, db=db
+            or AccessGrants.has_access(
+                user_id=user.id,
+                resource_type="model",
+                resource_id=model_info.id,
+                permission="read",
+                db=db,
             )
         ):
             raise Exception("Model not found")
@@ -395,11 +400,13 @@ def get_filtered_models(models, user, db=None):
                 if (
                     (user.role == "admin" and BYPASS_ADMIN_ACCESS_CONTROL)
                     or user.id == model_info.user_id
-                    or has_access(
-                        user.id,
-                        type="read",
-                        access_control=model_info.access_control,
+                    or AccessGrants.has_access(
+                        user_id=user.id,
+                        resource_type="model",
+                        resource_id=model_info.id,
+                        permission="read",
                         user_group_ids=user_group_ids,
+                        db=db,
                     )
                 ):
                     filtered_models.append(model)
diff --git a/backend/open_webui/utils/tools.py b/backend/open_webui/utils/tools.py
index b2f95a8297..645c7799ed 100644
--- a/backend/open_webui/utils/tools.py
+++ b/backend/open_webui/utils/tools.py
@@ -38,6 +38,7 @@ from open_webui.utils.misc import is_string_allowed
 from open_webui.models.tools import Tools
 from open_webui.models.users import UserModel
 from open_webui.models.groups import Groups
+from open_webui.models.access_grants import AccessGrants
 from open_webui.utils.plugin import load_tool_module_by_id
 from open_webui.utils.access_control import has_access
 from open_webui.config import BYPASS_ADMIN_ACCESS_CONTROL
@@ -165,7 +166,13 @@ async def get_tools(
             if (
                 not (user.role == "admin" and BYPASS_ADMIN_ACCESS_CONTROL)
                 and tool.user_id != user.id
-                and not has_access(user.id, "read", tool.access_control, user_group_ids)
+                and not AccessGrants.has_access(
+                    user_id=user.id,
+                    resource_type="tool",
+                    resource_id=tool.id,
+                    permission="read",
+                    user_group_ids=user_group_ids,
+                )
             ):
                 log.warning(f"Access denied to tool {tool_id} for user {user.id}")
                 continue

From 3c7f9aa6a4ca942ed52d86ac9c0752f578d817ca Mon Sep 17 00:00:00 2001
From: Timothy Jaeryang Baek <tim@openwebui.com>
Date: Mon, 9 Feb 2026 13:28:21 -0600
Subject: [PATCH 33/42] refac

---
 src/lib/apis/channels/index.ts                |   5 +-
 src/lib/apis/groups/index.ts                  |  32 +
 src/lib/apis/knowledge/index.ts               |   8 +-
 src/lib/apis/notes/index.ts                   |   2 +-
 src/lib/apis/prompts/index.ts                 |   7 +-
 src/lib/apis/users/index.ts                   |  27 +
 .../channel/ChannelInfoModal.svelte           |  23 +-
 .../channel/MessageInput/MentionList.svelte   |  21 +-
 src/lib/components/channel/Navbar.svelte      |  21 +-
 src/lib/components/chat/MessageInput.svelte   |   2 +-
 src/lib/components/layout/Sidebar.svelte      |   5 +-
 .../layout/Sidebar/ChannelItem.svelte         |  26 +-
 .../layout/Sidebar/ChannelModal.svelte        |  32 +-
 src/lib/components/notes/NoteEditor.svelte    |  28 +-
 src/lib/components/notes/Notes.svelte         |   2 +-
 src/lib/components/notes/utils.ts             |   2 +-
 .../Knowledge/CreateKnowledgeBase.svelte      |   6 +-
 .../workspace/Knowledge/KnowledgeBase.svelte  |  13 +-
 .../workspace/Models/ModelEditor.svelte       |  17 +-
 .../workspace/Prompts/PromptEditor.svelte     |  10 +-
 .../workspace/Tools/ToolkitEditor.svelte      |   8 +-
 .../workspace/common/AccessControl.svelte     | 703 +++++++++++++-----
 .../common/AccessControlModal.svelte          |  21 +-
 .../(app)/workspace/prompts/[id]/+page.svelte |   4 +-
 .../workspace/prompts/create/+page.svelte     |   9 +-
 .../(app)/workspace/tools/create/+page.svelte |   4 +-
 .../(app)/workspace/tools/edit/+page.svelte   |   4 +-
 27 files changed, 789 insertions(+), 253 deletions(-)

diff --git a/src/lib/apis/channels/index.ts b/src/lib/apis/channels/index.ts
index 225d8cd7cf..5715c64e89 100644
--- a/src/lib/apis/channels/index.ts
+++ b/src/lib/apis/channels/index.ts
@@ -3,10 +3,11 @@ import { WEBUI_API_BASE_URL } from '$lib/constants';
 type ChannelForm = {
 	type?: string;
 	name: string;
-	is_private?: boolean;
+	is_private?: boolean | null;
 	data?: object;
 	meta?: object;
-	access_control?: object;
+	access_grants?: object[];
+	group_ids?: string[];
 	user_ids?: string[];
 };
 
diff --git a/src/lib/apis/groups/index.ts b/src/lib/apis/groups/index.ts
index a74c61b83d..6089a6023f 100644
--- a/src/lib/apis/groups/index.ts
+++ b/src/lib/apis/groups/index.ts
@@ -99,6 +99,38 @@ export const getGroupById = async (token: string, id: string) => {
 	return res;
 };
 
+export const getGroupInfoById = async (token: string, id: string) => {
+	let error = null;
+
+	const res = await fetch(`${WEBUI_API_BASE_URL}/groups/id/${id}/info`, {
+		method: 'GET',
+		headers: {
+			Accept: 'application/json',
+			'Content-Type': 'application/json',
+			authorization: `Bearer ${token}`
+		}
+	})
+		.then(async (res) => {
+			if (!res.ok) throw await res.json();
+			return res.json();
+		})
+		.then((json) => {
+			return json;
+		})
+		.catch((err) => {
+			error = err.detail;
+
+			console.error(err);
+			return null;
+		});
+
+	if (error) {
+		throw error;
+	}
+
+	return res;
+};
+
 export const updateGroupById = async (token: string, id: string, group: object) => {
 	let error = null;
 
diff --git a/src/lib/apis/knowledge/index.ts b/src/lib/apis/knowledge/index.ts
index dc9dd8b88a..4c7c90484c 100644
--- a/src/lib/apis/knowledge/index.ts
+++ b/src/lib/apis/knowledge/index.ts
@@ -4,7 +4,7 @@ export const createNewKnowledge = async (
 	token: string,
 	name: string,
 	description: string,
-	accessControl: null | object
+	accessGrants: object[]
 ) => {
 	let error = null;
 
@@ -18,7 +18,7 @@ export const createNewKnowledge = async (
 		body: JSON.stringify({
 			name: name,
 			description: description,
-			access_control: accessControl
+			access_grants: accessGrants
 		})
 	})
 		.then(async (res) => {
@@ -248,7 +248,7 @@ type KnowledgeUpdateForm = {
 	name?: string;
 	description?: string;
 	data?: object;
-	access_control?: null | object;
+	access_grants?: object[];
 };
 
 export const updateKnowledgeById = async (token: string, id: string, form: KnowledgeUpdateForm) => {
@@ -265,7 +265,7 @@ export const updateKnowledgeById = async (token: string, id: string, form: Knowl
 			name: form?.name ? form.name : undefined,
 			description: form?.description ? form.description : undefined,
 			data: form?.data ? form.data : undefined,
-			access_control: form.access_control
+			access_grants: form.access_grants
 		})
 	})
 		.then(async (res) => {
diff --git a/src/lib/apis/notes/index.ts b/src/lib/apis/notes/index.ts
index 55f9427e0d..341ced57ec 100644
--- a/src/lib/apis/notes/index.ts
+++ b/src/lib/apis/notes/index.ts
@@ -5,7 +5,7 @@ type NoteItem = {
 	title: string;
 	data: object;
 	meta?: null | object;
-	access_control?: null | object;
+	access_grants?: object[];
 };
 
 export const createNewNote = async (token: string, note: NoteItem) => {
diff --git a/src/lib/apis/prompts/index.ts b/src/lib/apis/prompts/index.ts
index e9cd6e8481..c227c9f713 100644
--- a/src/lib/apis/prompts/index.ts
+++ b/src/lib/apis/prompts/index.ts
@@ -7,7 +7,7 @@ type PromptItem = {
 	content: string;
 	data?: object | null;
 	meta?: object | null;
-	access_control?: null | object;
+	access_grants?: object[];
 	version_id?: string | null;  // Active version
 	commit_message?: string | null;  // For history tracking
 	is_production?: boolean;  // Whether to set new version as production
@@ -23,7 +23,7 @@ type PromptHistoryItem = {
 		command: string;
 		data: object;
 		meta: object;
-		access_control: object | null;
+		access_grants: object[];
 	};
 	user_id: string;
 	commit_message: string | null;
@@ -42,7 +42,7 @@ type PromptDiff = {
 	to_snapshot: object;
 	content_diff: string[];
 	name_changed: boolean;
-	access_control_changed: boolean;
+	access_grants_changed: boolean;
 };
 
 export const createNewPrompt = async (token: string, prompt: PromptItem) => {
@@ -611,4 +611,3 @@ export const getPromptDiff = async (
 
 	return res;
 };
-
diff --git a/src/lib/apis/users/index.ts b/src/lib/apis/users/index.ts
index d6da54bbf9..cd3b40adcc 100644
--- a/src/lib/apis/users/index.ts
+++ b/src/lib/apis/users/index.ts
@@ -327,6 +327,33 @@ export const getUserById = async (token: string, userId: string) => {
 	return res;
 };
 
+export const getUserInfoById = async (token: string, userId: string) => {
+	let error = null;
+
+	const res = await fetch(`${WEBUI_API_BASE_URL}/users/${userId}/info`, {
+		method: 'GET',
+		headers: {
+			'Content-Type': 'application/json',
+			Authorization: `Bearer ${token}`
+		}
+	})
+		.then(async (res) => {
+			if (!res.ok) throw await res.json();
+			return res.json();
+		})
+		.catch((err) => {
+			console.error(err);
+			error = err.detail;
+			return null;
+		});
+
+	if (error) {
+		throw error;
+	}
+
+	return res;
+};
+
 export const updateUserStatus = async (token: string, formData: object) => {
 	let error = null;
 
diff --git a/src/lib/components/channel/ChannelInfoModal.svelte b/src/lib/components/channel/ChannelInfoModal.svelte
index 44094f7801..cd1ee35243 100644
--- a/src/lib/components/channel/ChannelInfoModal.svelte
+++ b/src/lib/components/channel/ChannelInfoModal.svelte
@@ -15,13 +15,32 @@
 	import AddMembersModal from './ChannelInfoModal/AddMembersModal.svelte';
 
 	export let show = false;
-	export let channel = null;
+	export let channel: any = null;
 
 	export let onUpdate = () => {};
 
 	let showAddMembersModal = false;
 	const submitHandler = async () => {};
 
+	const hasPublicReadGrant = (grants: any) =>
+		Array.isArray(grants) &&
+		grants.some(
+			(grant) =>
+				grant?.principal_type === 'user' &&
+				grant?.principal_id === '*' &&
+				grant?.permission === 'read'
+		);
+
+	const isPublicChannel = (channel: any): boolean => {
+		if (channel?.type === 'group') {
+			if (typeof channel?.is_private === 'boolean') {
+				return !channel.is_private;
+			}
+			return hasPublicReadGrant(channel?.access_grants);
+		}
+		return hasPublicReadGrant(channel?.access_grants);
+	};
+
 	const removeMemberHandler = async (userId) => {
 		const res = await removeMembersById(localStorage.token, channel.id, {
 			user_ids: [userId]
@@ -62,7 +81,7 @@
 							</div>
 						{:else}
 							<div class=" size-4 justify-center flex items-center">
-								{#if channel?.type === 'group' ? !channel?.is_private : channel?.access_control === null}
+								{#if isPublicChannel(channel)}
 									<Hashtag className="size-3.5" strokeWidth="2.5" />
 								{:else}
 									<Lock className="size-5.5" strokeWidth="2" />
diff --git a/src/lib/components/channel/MessageInput/MentionList.svelte b/src/lib/components/channel/MessageInput/MentionList.svelte
index 4272a5650d..7daf692042 100644
--- a/src/lib/components/channel/MessageInput/MentionList.svelte
+++ b/src/lib/components/channel/MessageInput/MentionList.svelte
@@ -129,6 +129,25 @@
 	onDestroy(() => {
 		window.removeEventListener('keydown', keydownListener);
 	});
+
+	const hasPublicReadGrant = (grants: any) =>
+		Array.isArray(grants) &&
+		grants.some(
+			(grant) =>
+				grant?.principal_type === 'user' &&
+				grant?.principal_id === '*' &&
+				grant?.permission === 'read'
+		);
+
+	const isPublicChannel = (channel: any): boolean => {
+		if (channel?.type === 'group') {
+			if (typeof channel?.is_private === 'boolean') {
+				return !channel.is_private;
+			}
+			return hasPublicReadGrant(channel?.access_grants);
+		}
+		return hasPublicReadGrant(channel?.access_grants);
+	};
 </script>
 
 {#if filteredItems.length}
@@ -165,7 +184,7 @@
 					>
 						{#if item.type === 'channel'}
 							<div class=" size-4 justify-center flex items-center mr-0.5">
-								{#if item?.data?.access_control === null}
+								{#if isPublicChannel(item?.data)}
 									<Hashtag className="size-3" strokeWidth="2.5" />
 								{:else}
 									<Lock className="size-[15px]" strokeWidth="2" />
diff --git a/src/lib/components/channel/Navbar.svelte b/src/lib/components/channel/Navbar.svelte
index 6b5d7c97c2..b02193b465 100644
--- a/src/lib/components/channel/Navbar.svelte
+++ b/src/lib/components/channel/Navbar.svelte
@@ -26,6 +26,25 @@
 	let showChannelPinnedMessagesModal = false;
 	let showChannelInfoModal = false;
 
+	const hasPublicReadGrant = (grants: any) =>
+		Array.isArray(grants) &&
+		grants.some(
+			(grant) =>
+				grant?.principal_type === 'user' &&
+				grant?.principal_id === '*' &&
+				grant?.permission === 'read'
+		);
+
+	const isPublicChannel = (channel: any): boolean => {
+		if (channel?.type === 'group') {
+			if (typeof channel?.is_private === 'boolean') {
+				return !channel.is_private;
+			}
+			return hasPublicReadGrant(channel?.access_grants);
+		}
+		return hasPublicReadGrant(channel?.access_grants);
+	};
+
 	export let channel;
 
 	export let onPin = (messageId, pinned) => {};
@@ -112,7 +131,7 @@
 							{/if}
 						{:else}
 							<div class=" size-4.5 justify-center flex items-center">
-								{#if channel?.type === 'group' ? !channel?.is_private : channel?.access_control === null}
+								{#if isPublicChannel(channel)}
 									<Hashtag className="size-3.5" strokeWidth="2.5" />
 								{:else}
 									<Lock className="size-5" strokeWidth="2" />
diff --git a/src/lib/components/chat/MessageInput.svelte b/src/lib/components/chat/MessageInput.svelte
index 5914e7afce..968f56c2f5 100644
--- a/src/lib/components/chat/MessageInput.svelte
+++ b/src/lib/components/chat/MessageInput.svelte
@@ -151,7 +151,7 @@
 				return {
 					...file,
 					user: undefined,
-					access_control: undefined
+					access_grants: undefined
 				};
 			}),
 		selectedToolIds,
diff --git a/src/lib/components/layout/Sidebar.svelte b/src/lib/components/layout/Sidebar.svelte
index 03591d2b71..2a1c551d4c 100644
--- a/src/lib/components/layout/Sidebar.svelte
+++ b/src/lib/components/layout/Sidebar.svelte
@@ -560,7 +560,8 @@
 
 <ChannelModal
 	bind:show={showCreateChannel}
-	onSubmit={async ({ type, name, is_private, access_control, group_ids, user_ids }) => {
+	onSubmit={async (payload: any) => {
+		let { type, name, is_private, access_grants, group_ids, user_ids } = payload ?? {};
 		name = name?.trim();
 
 		if (type === 'dm') {
@@ -579,7 +580,7 @@
 			type: type,
 			name: name,
 			is_private: is_private,
-			access_control: access_control,
+			access_grants: access_grants,
 			group_ids: group_ids,
 			user_ids: user_ids
 		}).catch((error) => {
diff --git a/src/lib/components/layout/Sidebar/ChannelItem.svelte b/src/lib/components/layout/Sidebar/ChannelItem.svelte
index 95be5abbf9..e8cf1ff751 100644
--- a/src/lib/components/layout/Sidebar/ChannelItem.svelte
+++ b/src/lib/components/layout/Sidebar/ChannelItem.svelte
@@ -25,6 +25,25 @@
 	let showEditChannelModal = false;
 
 	let itemElement;
+
+	const hasPublicReadGrant = (grants: any) =>
+		Array.isArray(grants) &&
+		grants.some(
+			(grant) =>
+				grant?.principal_type === 'user' &&
+				grant?.principal_id === '*' &&
+				grant?.permission === 'read'
+		);
+
+	const isPublicChannel = (channel: any): boolean => {
+		if (channel?.type === 'group') {
+			if (typeof channel?.is_private === 'boolean') {
+				return !channel.is_private;
+			}
+			return hasPublicReadGrant(channel?.access_grants);
+		}
+		return hasPublicReadGrant(channel?.access_grants);
+	};
 </script>
 
 <ChannelModal
@@ -32,11 +51,12 @@
 	{channel}
 	edit={true}
 	{onUpdate}
-	onSubmit={async ({ name, is_private, access_control, group_ids, user_ids }) => {
+	onSubmit={async (payload: any) => {
+		const { name, is_private, access_grants, group_ids, user_ids } = payload ?? {};
 		const res = await updateChannelById(localStorage.token, channel.id, {
 			name,
 			is_private,
-			access_control,
+			access_grants,
 			group_ids,
 			user_ids
 		}).catch((error) => {
@@ -123,7 +143,7 @@
 					{/if}
 				{:else}
 					<div class=" size-4 justify-center flex items-center ml-1">
-						{#if channel?.type === 'group' ? !channel?.is_private : channel?.access_control === null}
+						{#if isPublicChannel(channel)}
 							<Hashtag className="size-3.5" strokeWidth="2.5" />
 						{:else}
 							<Lock className="size-[15px]" strokeWidth="2" />
diff --git a/src/lib/components/layout/Sidebar/ChannelModal.svelte b/src/lib/components/layout/Sidebar/ChannelModal.svelte
index 65404c056c..efb62bd012 100644
--- a/src/lib/components/layout/Sidebar/ChannelModal.svelte
+++ b/src/lib/components/layout/Sidebar/ChannelModal.svelte
@@ -23,7 +23,7 @@
 	export let onSubmit: Function = () => {};
 	export let onUpdate: Function = () => {};
 
-	export let channel = null;
+	export let channel: any = null;
 	export let edit = false;
 
 	let channelTypes = ['group', 'dm'];
@@ -31,7 +31,7 @@
 	let name = '';
 
 	let isPrivate = null;
-	let accessControl = {};
+	let accessGrants = [];
 
 	let groupIds = [];
 	let userIds = [];
@@ -65,8 +65,8 @@
 		await onSubmit({
 			type: type,
 			name: name.replace(/\s/g, '-'),
-			is_private: type === 'group' ? isPrivate : null,
-			access_control: type === '' ? accessControl : {},
+			is_private: type === 'group' ? (isPrivate ?? true) : null,
+			access_grants: type === '' ? accessGrants : [],
 			group_ids: groupIds,
 			user_ids: userIds
 		});
@@ -85,8 +85,12 @@
 
 		if (channel) {
 			name = channel?.name ?? '';
-			isPrivate = channel?.is_private ?? null;
-			accessControl = channel.access_control;
+			if (type === 'group') {
+				isPrivate = typeof channel?.is_private === 'boolean' ? channel.is_private : true;
+			} else {
+				isPrivate = null;
+			}
+			accessGrants = channel?.access_grants ?? [];
 			userIds = channel?.user_ids ?? [];
 		}
 	};
@@ -102,8 +106,14 @@
 
 	const deleteHandler = async () => {
 		showDeleteConfirmDialog = false;
+		if (!channel?.id) {
+			show = false;
+			return;
+		}
 
-		const res = await deleteChannelById(localStorage.token, channel.id).catch((error) => {
+		const channelId = channel.id;
+
+		const res = await deleteChannelById(localStorage.token, channelId).catch((error) => {
 			toast.error(error.message);
 		});
 
@@ -111,7 +121,7 @@
 			toast.success($i18n.t('Channel deleted successfully'));
 			onUpdate();
 
-			if ($page.url.pathname === `/channels/${channel.id}`) {
+			if ($page.url.pathname === `/channels/${channelId}`) {
 				goto('/');
 			}
 		}
@@ -122,7 +132,7 @@
 	const resetHandler = () => {
 		type = '';
 		name = '';
-		accessControl = {};
+		accessGrants = [];
 		userIds = [];
 		loading = false;
 	};
@@ -226,11 +236,11 @@
 					{#if type !== 'dm'}
 						<div class="-mx-2 mb-1 mt-2.5 px-2">
 							{#if type === ''}
-								<AccessControl bind:accessControl accessRoles={['read', 'write']} />
+								<AccessControl bind:accessGrants accessRoles={['read', 'write']} />
 							{:else if type === 'group'}
 								<Visibility
 									state={isPrivate ? 'private' : 'public'}
-									onChange={(value) => {
+									onChange={(value: string) => {
 										if (value === 'private') {
 											isPrivate = true;
 										} else {
diff --git a/src/lib/components/notes/NoteEditor.svelte b/src/lib/components/notes/NoteEditor.svelte
index 977d00ef79..708e7e8521 100644
--- a/src/lib/components/notes/NoteEditor.svelte
+++ b/src/lib/components/notes/NoteEditor.svelte
@@ -108,9 +108,18 @@
 		},
 		// pages: [], // TODO: Implement pages for notes to allow users to create multiple pages in a note
 		meta: null,
-		access_control: {}
+		access_grants: []
 	};
 
+	const hasPublicReadGrant = (grants) =>
+		Array.isArray(grants) &&
+		grants.some(
+			(grant) =>
+				grant?.principal_type === 'user' &&
+				grant?.principal_id === '*' &&
+				grant?.permission === 'read'
+		);
+
 	let files = [];
 	let messages = [];
 
@@ -161,6 +170,9 @@
 
 		if (res) {
 			note = res;
+			if (!Array.isArray(note?.access_grants)) {
+				note.access_grants = [];
+			}
 			files = res.data.files || [];
 
 			if (note?.write_access) {
@@ -193,7 +205,7 @@
 				data: {
 					files: files
 				},
-				access_control: note?.access_control
+				access_grants: note?.access_grants ?? []
 			}).catch((e) => {
 				toast.error(`${e}`);
 			});
@@ -765,8 +777,8 @@ Provide the enhanced notes in markdown format. Use markdown syntax for headings,
 		console.log('noteEventHandler', _note);
 		if (_note.id !== id) return;
 
-		if (_note.access_control && _note.access_control !== note.access_control) {
-			note.access_control = _note.access_control;
+		if (_note.access_grants && _note.access_grants !== note.access_grants) {
+			note.access_grants = _note.access_grants;
 		}
 
 		if (_note.data && _note.data.files) {
@@ -851,7 +863,7 @@ Provide the enhanced notes in markdown format. Use markdown syntax for headings,
 {#if note}
 	<AccessControlModal
 		bind:show={showAccessControlModal}
-		bind:accessControl={note.access_control}
+		bind:accessGrants={note.access_grants}
 		accessRoles={['read', 'write']}
 		onChange={() => {
 			changeDebounceHandler();
@@ -1114,7 +1126,11 @@ Provide the enhanced notes in markdown format. Use markdown syntax for headings,
 										}}
 										disabled={note?.user_id !== $user?.id && $user?.role !== 'admin'}
 									>
-										<span> {note?.access_control ? $i18n.t('Private') : $i18n.t('Everyone')} </span>
+										<span>
+											{hasPublicReadGrant(note?.access_grants)
+												? $i18n.t('Everyone')
+												: $i18n.t('Private')}
+										</span>
 									</button>
 								{:else}
 									<div>
diff --git a/src/lib/components/notes/Notes.svelte b/src/lib/components/notes/Notes.svelte
index 3ca43e6ee1..504bd30214 100644
--- a/src/lib/components/notes/Notes.svelte
+++ b/src/lib/components/notes/Notes.svelte
@@ -129,7 +129,7 @@
 						}
 					},
 					meta: null,
-					access_control: {}
+					access_grants: []
 				}).catch((error) => {
 					toast.error(`${error}`);
 					return null;
diff --git a/src/lib/components/notes/utils.ts b/src/lib/components/notes/utils.ts
index 052c48a441..8c6bd35242 100644
--- a/src/lib/components/notes/utils.ts
+++ b/src/lib/components/notes/utils.ts
@@ -120,7 +120,7 @@ export const createNoteHandler = async (title: string, md?: string, html?: strin
 			}
 		},
 		meta: null,
-		access_control: {}
+		access_grants: []
 	}).catch((error) => {
 		toast.error(`${error}`);
 		return null;
diff --git a/src/lib/components/workspace/Knowledge/CreateKnowledgeBase.svelte b/src/lib/components/workspace/Knowledge/CreateKnowledgeBase.svelte
index 3373e5a660..14d70106ec 100644
--- a/src/lib/components/workspace/Knowledge/CreateKnowledgeBase.svelte
+++ b/src/lib/components/workspace/Knowledge/CreateKnowledgeBase.svelte
@@ -15,7 +15,7 @@
 
 	let name = '';
 	let description = '';
-	let accessControl = {};
+	let accessGrants = [];
 
 	const submitHandler = async () => {
 		loading = true;
@@ -32,7 +32,7 @@
 			localStorage.token,
 			name,
 			description,
-			accessControl
+			accessGrants
 		).catch((e) => {
 			toast.error(`${e}`);
 		});
@@ -114,7 +114,7 @@
 
 		<div class="mt-2">
 			<AccessControl
-				bind:accessControl
+				bind:accessGrants
 				accessRoles={['read', 'write']}
 				share={$user?.permissions?.sharing?.knowledge || $user?.role === 'admin'}
 				sharePublic={$user?.permissions?.sharing?.public_knowledge || $user?.role === 'admin'}
diff --git a/src/lib/components/workspace/Knowledge/KnowledgeBase.svelte b/src/lib/components/workspace/Knowledge/KnowledgeBase.svelte
index 889d69c478..6d8d364dce 100644
--- a/src/lib/components/workspace/Knowledge/KnowledgeBase.svelte
+++ b/src/lib/components/workspace/Knowledge/KnowledgeBase.svelte
@@ -75,6 +75,8 @@
 			file_ids: string[];
 		};
 		files: any[];
+		access_grants?: any[];
+		write_access?: boolean;
 	};
 
 	let id = null;
@@ -614,7 +616,7 @@
 				...knowledge,
 				name: knowledge.name,
 				description: knowledge.description,
-				access_control: knowledge.access_control
+				access_grants: knowledge.access_grants ?? []
 			}).catch((e) => {
 				toast.error(`${e}`);
 			});
@@ -745,6 +747,9 @@
 
 		if (res) {
 			knowledge = res;
+			if (!Array.isArray(knowledge?.access_grants)) {
+				knowledge.access_grants = [];
+			}
 			knowledgeId = knowledge?.id;
 		} else {
 			goto('/workspace/knowledge');
@@ -828,9 +833,11 @@
 	{#if id && knowledge}
 		<AccessControlModal
 			bind:show={showAccessControlModal}
-			bind:accessControl={knowledge.access_control}
+			bind:accessGrants={knowledge.access_grants}
 			share={$user?.permissions?.sharing?.knowledge || $user?.role === 'admin'}
-			sharePublic={$user?.permissions?.sharing?.public_knowledge || $user?.role === 'admin'}
+			sharePublic={$user?.permissions?.sharing?.public_knowledge ||
+				$user?.role === 'admin' ||
+				knowledge?.write_access}
 			onChange={() => {
 				changeDebounceHandler();
 			}}
diff --git a/src/lib/components/workspace/Models/ModelEditor.svelte b/src/lib/components/workspace/Models/ModelEditor.svelte
index 18e26963a4..9aee1a37cd 100644
--- a/src/lib/components/workspace/Models/ModelEditor.svelte
+++ b/src/lib/components/workspace/Models/ModelEditor.svelte
@@ -108,7 +108,7 @@
 	let builtinTools = {};
 
 	let actionIds = [];
-	let accessControl = {};
+	let accessGrants = [];
 	let tts = { voice: '' };
 
 	const submitHandler = async () => {
@@ -140,7 +140,7 @@
 
 		info.params = { ...info.params, ...params };
 
-		info.access_control = accessControl;
+		info.access_grants = accessGrants;
 		info.meta.capabilities = capabilities;
 
 		if (enableDescription) {
@@ -301,14 +301,7 @@
 			builtinTools = model?.meta?.builtinTools ?? {};
 			tts = { voice: model?.meta?.tts?.voice ?? '' };
 
-			if ('access_control' in model) {
-				accessControl = model.access_control;
-			} else {
-				accessControl = {};
-			}
-
-			console.log(model?.access_control);
-			console.log(accessControl);
+			accessGrants = model?.access_grants ?? [];
 
 			info = {
 				...info,
@@ -334,10 +327,10 @@
 {#if loaded}
 	<AccessControlModal
 		bind:show={showAccessControlModal}
-		bind:accessControl
+		bind:accessGrants
 		accessRoles={['read', 'write']}
 		share={$user?.permissions?.sharing?.models || $user?.role === 'admin'}
-		sharePublic={$user?.permissions?.sharing?.public_models || $user?.role === 'admin'}
+		sharePublic={$user?.permissions?.sharing?.public_models || $user?.role === 'admin' || edit}
 	/>
 
 	{#if onBack}
diff --git a/src/lib/components/workspace/Prompts/PromptEditor.svelte b/src/lib/components/workspace/Prompts/PromptEditor.svelte
index 6f251f36c7..a9a97bd5cc 100644
--- a/src/lib/components/workspace/Prompts/PromptEditor.svelte
+++ b/src/lib/components/workspace/Prompts/PromptEditor.svelte
@@ -46,7 +46,7 @@
 	let commitMessage = '';
 	let isProduction = true;
 
-	let accessControl = {};
+	let accessGrants = [];
 	let showAccessControlModal = false;
 	let hasManualEdit = false;
 
@@ -87,7 +87,7 @@
 				command,
 				content,
 				tags: tags.map((tag) => tag.name),
-				access_control: accessControl,
+				access_grants: accessGrants,
 				commit_message: commitMessage || undefined,
 				is_production: isProduction
 			});
@@ -259,7 +259,7 @@
 			command = prompt.command.at(0) === '/' ? prompt.command.slice(1) : prompt.command;
 			content = prompt.content;
 			tags = (prompt.tags || []).map((tag) => ({ name: tag }));
-			accessControl = prompt?.access_control === undefined ? {} : prompt?.access_control;
+			accessGrants = prompt?.access_grants === undefined ? [] : prompt?.access_grants;
 
 			// Store originals for revert on collision
 			originalName = name;
@@ -286,10 +286,10 @@
 
 <AccessControlModal
 	bind:show={showAccessControlModal}
-	bind:accessControl
+	bind:accessGrants
 	accessRoles={['read', 'write']}
 	share={$user?.permissions?.sharing?.prompts || $user?.role === 'admin'}
-	sharePublic={$user?.permissions?.sharing?.public_prompts || $user?.role === 'admin'}
+	sharePublic={$user?.permissions?.sharing?.public_prompts || $user?.role === 'admin' || edit}
 />
 
 <!-- Edit Modal -->
diff --git a/src/lib/components/workspace/Tools/ToolkitEditor.svelte b/src/lib/components/workspace/Tools/ToolkitEditor.svelte
index dd0d4a4a11..70533099cf 100644
--- a/src/lib/components/workspace/Tools/ToolkitEditor.svelte
+++ b/src/lib/components/workspace/Tools/ToolkitEditor.svelte
@@ -30,7 +30,7 @@
 		description: ''
 	};
 	export let content = '';
-	export let accessControl = {};
+	export let accessGrants = [];
 
 	let _content = '';
 
@@ -161,7 +161,7 @@ class Tools:
 			name,
 			meta,
 			content,
-			access_control: accessControl
+			access_grants: accessGrants
 		});
 	};
 
@@ -187,10 +187,10 @@ class Tools:
 
 <AccessControlModal
 	bind:show={showAccessControlModal}
-	bind:accessControl
+	bind:accessGrants
 	accessRoles={['read', 'write']}
 	share={$user?.permissions?.sharing?.tools || $user?.role === 'admin'}
-	sharePublic={$user?.permissions?.sharing?.public_tools || $user?.role === 'admin'}
+	sharePublic={$user?.permissions?.sharing?.public_tools || $user?.role === 'admin' || edit}
 />
 
 <div class=" flex flex-col justify-between w-full overflow-y-auto h-full">
diff --git a/src/lib/components/workspace/common/AccessControl.svelte b/src/lib/components/workspace/common/AccessControl.svelte
index 1bf4bbc1f8..7e691d0e36 100644
--- a/src/lib/components/workspace/common/AccessControl.svelte
+++ b/src/lib/components/workspace/common/AccessControl.svelte
@@ -3,75 +3,430 @@
 
 	const i18n = getContext('i18n');
 
-	import { getGroups } from '$lib/apis/groups';
-	import Tooltip from '$lib/components/common/Tooltip.svelte';
-	import Plus from '$lib/components/icons/Plus.svelte';
-	import UserCircleSolid from '$lib/components/icons/UserCircleSolid.svelte';
+	import { getGroups, getGroupById, getGroupInfoById } from '$lib/apis/groups';
+	import { getUserById, getUserInfoById } from '$lib/apis/users';
+	import { WEBUI_API_BASE_URL } from '$lib/constants';
 	import XMark from '$lib/components/icons/XMark.svelte';
 	import Badge from '$lib/components/common/Badge.svelte';
+	import GlobeAlt from '$lib/components/icons/GlobeAlt.svelte';
+	import Plus from '$lib/components/icons/Plus.svelte';
+	import AddAccessModal from './AddAccessModal.svelte';
+	import Tooltip from '$lib/components/common/Tooltip.svelte';
+
+	type AccessGrant = {
+		id?: string;
+		principal_type: 'user' | 'group';
+		principal_id: string;
+		permission: 'read' | 'write';
+	};
+
+	type LegacyAccessControl = {
+		read: { group_ids: string[]; user_ids: string[] };
+		write: { group_ids: string[]; user_ids: string[] };
+	};
 
 	export let onChange: Function = () => {};
 
 	export let accessRoles = ['read'];
-	export let accessControl = {};
+	export let accessGrants: AccessGrant[] | any = [];
+	export let accessControl: any = undefined;
 
 	export let share = true;
 	export let sharePublic = true;
 
-	let selectedGroupId = '';
-	let groups = [];
+	let groups: any[] = [];
+	const resolvingGroupIds = new Set<string>();
+	let userById: Record<string, any> = {};
+	const resolvingUserIds = new Set<string>();
 
-	$: if (!sharePublic && accessControl === null) {
-		initPublicAccess();
-	}
+	let showAddAccessModal = false;
 
-	const initPublicAccess = () => {
-		if (!sharePublic && accessControl === null) {
-			accessControl = {
-				read: {
-					group_ids: [],
-					user_ids: []
-				},
-				write: {
-					group_ids: [],
-					user_ids: []
+	const dedupeAccessGrants = (grants: AccessGrant[] | null | undefined): AccessGrant[] => {
+		if (!Array.isArray(grants)) return [];
+		const map = new Map<string, AccessGrant>();
+		for (const grant of grants) {
+			if (!grant) continue;
+			const key = `${grant.principal_type}:${grant.principal_id}:${grant.permission}`;
+			if (!grant.principal_type || !grant.principal_id || !grant.permission) continue;
+			map.set(key, {
+				id: grant.id,
+				principal_type: grant.principal_type,
+				principal_id: grant.principal_id,
+				permission: grant.permission
+			});
+		}
+		return Array.from(map.values());
+	};
+
+	const legacyAccessControlToGrants = (accessControl: any): AccessGrant[] => {
+		if (accessControl === null) {
+			return [
+				{
+					principal_type: 'user',
+					principal_id: '*',
+					permission: 'read'
 				}
-			};
-			onChange(accessControl);
+			];
+		}
+
+		if (!accessControl || typeof accessControl !== 'object') {
+			return [];
+		}
+
+		const grants: AccessGrant[] = [];
+		for (const permission of ['read', 'write'] as const) {
+			const entry = accessControl?.[permission] ?? {};
+			for (const groupId of entry?.group_ids ?? []) {
+				grants.push({
+					principal_type: 'group',
+					principal_id: groupId,
+					permission
+				});
+			}
+			for (const userId of entry?.user_ids ?? []) {
+				grants.push({
+					principal_type: 'user',
+					principal_id: userId,
+					permission
+				});
+			}
+		}
+
+		return dedupeAccessGrants(grants);
+	};
+
+	const grantsToLegacyAccessControl = (grants: AccessGrant[]): null | LegacyAccessControl => {
+		const normalized = dedupeAccessGrants(grants);
+		if (hasPublicReadGrant(normalized)) {
+			return null;
+		}
+
+		const result: LegacyAccessControl = {
+			read: { group_ids: [], user_ids: [] },
+			write: { group_ids: [], user_ids: [] }
+		};
+
+		for (const grant of normalized) {
+			if (!['read', 'write'].includes(grant.permission)) {
+				continue;
+			}
+
+			if (grant.principal_type === 'group') {
+				if (!result[grant.permission].group_ids.includes(grant.principal_id)) {
+					result[grant.permission].group_ids = [
+						...result[grant.permission].group_ids,
+						grant.principal_id
+					];
+				}
+			} else if (grant.principal_type === 'user' && grant.principal_id !== '*') {
+				if (!result[grant.permission].user_ids.includes(grant.principal_id)) {
+					result[grant.permission].user_ids = [
+						...result[grant.permission].user_ids,
+						grant.principal_id
+					];
+				}
+			}
+		}
+
+		return result;
+	};
+
+	const normalizeInputToGrants = (value: any): AccessGrant[] => {
+		if (value === null) {
+			return legacyAccessControlToGrants(null);
+		}
+		if (Array.isArray(value)) {
+			return dedupeAccessGrants(value);
+		}
+		if (value && typeof value === 'object' && ('read' in value || 'write' in value)) {
+			return legacyAccessControlToGrants(value);
+		}
+		return [];
+	};
+
+	const stableStringify = (value: any): string => {
+		try {
+			return JSON.stringify(value ?? null);
+		} catch {
+			return '';
 		}
 	};
 
+	const hasPublicReadGrant = (grants: AccessGrant[]): boolean =>
+		grants.some(
+			(grant) =>
+				grant.principal_type === 'user' && grant.principal_id === '*' && grant.permission === 'read'
+		);
+
+	const currentGrants = (): AccessGrant[] =>
+		Array.isArray(accessGrants) ? (accessGrants as AccessGrant[]) : [];
+
+	const getPrincipalIdsByPermission = (
+		principalType: 'user' | 'group',
+		permission: 'read' | 'write'
+	): string[] =>
+		Array.from(
+			new Set(
+				currentGrants()
+					.filter(
+						(grant) => grant.principal_type === principalType && grant.permission === permission
+					)
+					.map((grant) => grant.principal_id)
+			)
+		);
+
+	const hasPrincipalGrant = (
+		principalType: 'user' | 'group',
+		principalId: string,
+		permission: 'read' | 'write'
+	): boolean =>
+		currentGrants().some(
+			(grant) =>
+				grant.principal_type === principalType &&
+				grant.principal_id === principalId &&
+				grant.permission === permission
+		);
+
+	const commitAccessGrants = (nextGrants: AccessGrant[]) => {
+		accessGrants = dedupeAccessGrants(nextGrants);
+		onChange(accessGrants);
+	};
+
+	const setPublic = (isPublic: boolean) => {
+		const filtered = currentGrants().filter(
+			(grant) =>
+				!(
+					grant.principal_type === 'user' &&
+					grant.principal_id === '*' &&
+					grant.permission === 'read'
+				)
+		);
+		if (isPublic) {
+			filtered.push({
+				principal_type: 'user',
+				principal_id: '*',
+				permission: 'read'
+			});
+		}
+		commitAccessGrants(filtered);
+	};
+
+	const upsertPrincipalGrant = (
+		principalType: 'user' | 'group',
+		principalId: string,
+		permission: 'read' | 'write',
+		grants: AccessGrant[]
+	): AccessGrant[] => {
+		if (
+			grants.some(
+				(grant) =>
+					grant.principal_type === principalType &&
+					grant.principal_id === principalId &&
+					grant.permission === permission
+			)
+		) {
+			return grants;
+		}
+		return [
+			...grants,
+			{
+				principal_type: principalType,
+				principal_id: principalId,
+				permission
+			}
+		];
+	};
+
+	const removePrincipalGrant = (
+		principalType: 'user' | 'group',
+		principalId: string,
+		permission: 'read' | 'write',
+		grants: AccessGrant[]
+	): AccessGrant[] =>
+		grants.filter(
+			(grant) =>
+				!(
+					grant.principal_type === principalType &&
+					grant.principal_id === principalId &&
+					grant.permission === permission
+				)
+		);
+
+	const removePrincipal = (principalType: 'user' | 'group', principalId: string) => {
+		let next = [...currentGrants()];
+		next = removePrincipalGrant(principalType, principalId, 'read', next);
+		next = removePrincipalGrant(principalType, principalId, 'write', next);
+		commitAccessGrants(next);
+	};
+
+	const togglePrincipalWrite = (principalType: 'user' | 'group', principalId: string) => {
+		let next = [...currentGrants()];
+		const hasWrite = hasPrincipalGrant(principalType, principalId, 'write');
+		if (hasWrite) {
+			next = removePrincipalGrant(principalType, principalId, 'write', next);
+		} else {
+			next = upsertPrincipalGrant(principalType, principalId, 'read', next);
+			next = upsertPrincipalGrant(principalType, principalId, 'write', next);
+		}
+		commitAccessGrants(next);
+	};
+
+	const ensureUsersByIds = async (userIds: string[]) => {
+		const pendingIds = userIds.filter((id) => !userById[id] && !resolvingUserIds.has(id));
+		if (!pendingIds.length) return;
+
+		for (const id of pendingIds) {
+			resolvingUserIds.add(id);
+		}
+
+		const fetched = await Promise.all(
+			pendingIds.map(async (id) => {
+				const user = await getUserInfoById(localStorage.token, id).catch((error) => {
+					console.error(error);
+					return null;
+				});
+				return { id, user };
+			})
+		);
+
+		const nextUserById = { ...userById };
+		for (const item of fetched) {
+			if (item.user?.id) {
+				nextUserById[item.id] = item.user;
+			}
+			resolvingUserIds.delete(item.id);
+		}
+		userById = nextUserById;
+	};
+
+	const handleAddAccess = ({ userIds, groupIds }: { userIds: string[]; groupIds: string[] }) => {
+		let next = [...currentGrants()];
+
+		for (const groupId of groupIds) {
+			next = upsertPrincipalGrant('group', groupId, 'read', next);
+		}
+		for (const userId of userIds) {
+			next = upsertPrincipalGrant('user', userId, 'read', next);
+		}
+		commitAccessGrants(next);
+	};
+
+	// NOTE: We must reference `accessGrants` directly in each reactive
+	// expression so Svelte tracks the dependency.
+	const ensureGroupsByIds = async (groupIds: string[]) => {
+		const pendingIds = groupIds.filter(
+			(id) => !groups.find((g) => g.id === id) && !resolvingGroupIds.has(id)
+		);
+		if (!pendingIds.length) return;
+
+		for (const id of pendingIds) {
+			resolvingGroupIds.add(id);
+		}
+
+		const fetched = await Promise.all(
+			pendingIds.map(async (id) => {
+				const group = await getGroupInfoById(localStorage.token, id).catch((error) => {
+					console.error(error);
+					return null;
+				});
+				return group;
+			})
+		);
+
+		const newGroups = fetched.filter((g) => g);
+		if (newGroups.length > 0) {
+			groups = [...groups, ...newGroups].filter(
+				(g, index, self) => index === self.findIndex((t) => t.id === g.id)
+			);
+		}
+
+		for (const id of pendingIds) {
+			resolvingGroupIds.delete(id);
+		}
+	};
+
+	$: if (readGroupIds.length > 0 || writeGroupIds.length > 0) {
+		void ensureGroupsByIds([...readGroupIds, ...writeGroupIds]);
+	}
+	$: readGroupIds = (accessGrants, getPrincipalIdsByPermission('group', 'read'));
+	$: writeGroupIds = (accessGrants, getPrincipalIdsByPermission('group', 'write'));
+	$: readUserIds =
+		(accessGrants, getPrincipalIdsByPermission('user', 'read').filter((id) => id !== '*'));
+	$: writeUserIds =
+		(accessGrants, getPrincipalIdsByPermission('user', 'write').filter((id) => id !== '*'));
+
+	$: selectedUserIds = Array.from(new Set([...readUserIds, ...writeUserIds]));
+
+	$: selectedUsers = selectedUserIds
+		.map((id) => {
+			return userById[id] ?? { id, name: id, email: '' };
+		})
+		.sort((a, b) => a.name.localeCompare(b.name));
+
+	$: accessGroups = groups
+		.filter((group) => readGroupIds.includes(group.id) || writeGroupIds.includes(group.id))
+		.sort((a, b) => a.name.localeCompare(b.name));
+
+	$: if (selectedUserIds.length > 0) {
+		void ensureUsersByIds(selectedUserIds);
+	}
+
+	$: {
+		if (accessControl !== undefined) {
+			const normalizedGrants = normalizeInputToGrants(accessControl);
+			if (stableStringify(normalizedGrants) !== stableStringify(accessGrants)) {
+				accessGrants = normalizedGrants;
+			}
+		}
+	}
+
+	$: {
+		const normalizedGrants = normalizeInputToGrants(accessGrants);
+		if (stableStringify(normalizedGrants) !== stableStringify(accessGrants)) {
+			accessGrants = normalizedGrants;
+		}
+
+		if (accessControl !== undefined) {
+			const nextAccessControl = grantsToLegacyAccessControl(normalizedGrants);
+			if (stableStringify(nextAccessControl) !== stableStringify(accessControl)) {
+				accessControl = nextAccessControl;
+			}
+		}
+	}
+
 	onMount(async () => {
-		groups = await getGroups(localStorage.token, true).catch((error) => {
+		console.log('AccessControl mounted', { accessGrants, accessControl });
+		const res = await getGroups(localStorage.token, true).catch((error) => {
 			console.error(error);
 			return [];
 		});
 
-		if (accessControl === null) {
-			initPublicAccess();
-		} else {
-			accessControl = {
-				read: {
-					group_ids: accessControl?.read?.group_ids ?? [],
-					user_ids: accessControl?.read?.user_ids ?? []
-				},
-				write: {
-					group_ids: accessControl?.write?.group_ids ?? [],
-					user_ids: accessControl?.write?.user_ids ?? []
-				}
-			};
-		}
+		console.log('getGroups res', res);
+
+		groups = [...groups, ...res].filter(
+			(g, index, self) => index === self.findIndex((t) => t.id === g.id)
+		);
+	});
+
+	$: console.log('AccessControl state', {
+		accessGrants,
+		readGroupIds,
+		writeGroupIds,
+		selectedUserIds,
+		groups,
+		accessGroups,
+		selectedUsers
 	});
 </script>
 
-<div class=" rounded-lg flex flex-col gap-2">
-	<div class="">
-		<div class=" text-xs font-medium mb-2.5 text-gray-500">{$i18n.t('Visibility')}</div>
+<AddAccessModal bind:show={showAddAccessModal} onAdd={handleAddAccess} />
 
-		<div class="flex gap-2.5 items-center mb-1">
+<div class=" rounded-lg flex flex-col gap-1">
+	<div class="py-2">
+		<div class="flex gap-2.5 items-center">
 			<div>
 				<div class=" p-2 bg-black/5 dark:bg-white/5 rounded-full">
-					{#if accessControl !== null}
+					{#if !hasPublicReadGrant(accessGrants ?? [])}
 						<svg
 							xmlns="http://www.w3.org/2000/svg"
 							fill="none"
@@ -106,36 +461,28 @@
 			</div>
 
 			<div>
-				<select
-					id="models"
-					class="dark:bg-gray-900 outline-hidden bg-transparent text-sm font-medium block w-fit pr-10 max-w-full placeholder-gray-400"
-					value={accessControl !== null ? 'private' : 'public'}
-					on:change={(e) => {
-						if (e.target.value === 'public') {
-							accessControl = null;
-						} else {
-							accessControl = {
-								read: {
-									group_ids: [],
-									user_ids: []
-								},
-								write: {
-									group_ids: [],
-									user_ids: []
-								}
-							};
-						}
-						onChange(accessControl);
-					}}
+				<Tooltip
+					content={!(share && sharePublic) && !hasPublicReadGrant(accessGrants ?? [])
+						? $i18n.t('You do not have permission to make this public')
+						: ''}
 				>
-					<option class=" text-gray-700" value="private" selected>{$i18n.t('Private')}</option>
-					{#if share && sharePublic}
-						<option class=" text-gray-700" value="public" selected>{$i18n.t('Public')}</option>
-					{/if}
-				</select>
+					<select
+						id="models"
+						class="dark:bg-gray-900 outline-none bg-transparent text-sm font-medium block w-fit pr-10 max-w-full placeholder-gray-400"
+						value={!hasPublicReadGrant(accessGrants ?? []) ? 'private' : 'public'}
+						on:change={(e) => {
+							setPublic((e.target as HTMLSelectElement).value === 'public');
+						}}
+					>
+						<option class=" text-gray-700" value="private">{$i18n.t('Private')}</option>
+						{#if (share && sharePublic) || hasPublicReadGrant(accessGrants ?? [])}
+							<option class=" text-gray-700" value="public">{$i18n.t('Public')}</option>
+						{/if}
+					</select>
+				</Tooltip>
 
 				<div class=" text-xs text-gray-400 font-medium">
-					{#if accessControl !== null}
+					{#if !hasPublicReadGrant(accessGrants ?? [])}
 						{$i18n.t('Only select users and groups with permission can access')}
 					{:else}
 						{$i18n.t('Accessible to all users')}
@@ -146,116 +493,126 @@
 	</div>
 
 	{#if share}
-		{#if accessControl !== null}
-			{@const accessGroups = groups.filter((group) =>
-				(accessControl?.read?.group_ids ?? []).includes(group.id)
-			)}
+		<div class="flex items-center justify-between text-xs font-medium text-gray-500 my-1">
 			<div>
-				<div class="">
-					<div class="flex justify-between mb-2.5">
-						<div class="text-xs font-medium text-gray-500">
-							{$i18n.t('Groups')}
+				{$i18n.t('Access List')}
+			</div>
+			<div class="flex gap-1">
+				<button
+					class="px-2 py-1 bg-transparent hover:bg-gray-100 dark:hover:bg-gray-800 rounded-lg transition text-xs font-medium flex items-center gap-1"
+					type="button"
+					on:click={() => {
+						showAddAccessModal = true;
+					}}
+				>
+					<Plus className="size-3" />
+					{$i18n.t('Add Access')}
+				</button>
+			</div>
+		</div>
+
+		<!-- List -->
+		<div class="flex flex-col gap-2">
+			<!-- Groups -->
+			{#each accessGroups as group}
+				<div class="flex items-center gap-3 justify-between text-sm w-full transition pb-1">
+					<div class="flex items-center gap-2 w-full flex-1">
+						<!-- Placeholder for group icon vs user icon -->
+						<div
+							class="size-5 rounded-full bg-gray-100 dark:bg-gray-850 flex items-center justify-center text-xs"
+						>
+							{group.name.charAt(0).toUpperCase()}
+						</div>
+
+						<div class="truncate text-sm flex items-center gap-2">
+							{group.name}
+							<span class="text-xs text-gray-400 font-normal"
+								>{group?.member_count} {$i18n.t('members')}</span
+							>
 						</div>
 					</div>
 
-					{#if accessGroups.length > 0}
-						<div class="flex flex-col gap-1.5 mb-2 px-0.5 mx-0.5">
-							{#each accessGroups as group}
-								<div class="flex items-center gap-3 justify-between text-sm w-full transition">
-									<div class="flex items-center gap-1.5 w-full">
-										<div>
-											{group.name} <span class="text-xs text-gray-500">{group?.member_count}</span>
-										</div>
-									</div>
+					<div class="w-full flex justify-end items-center gap-2">
+						<button
+							type="button"
+							on:click={() => {
+								if (accessRoles.includes('write')) {
+									togglePrincipalWrite('group', group.id);
+								}
+							}}
+						>
+							{#if writeGroupIds.includes(group.id)}
+								<Badge type={'success'} content={$i18n.t('Write')} />
+							{:else}
+								<Badge type={'info'} content={$i18n.t('Read')} />
+							{/if}
+						</button>
 
-									<div class="w-full flex justify-end items-center gap-0.5">
-										<button
-											class=""
-											type="button"
-											on:click={() => {
-												if (accessRoles.includes('write')) {
-													if ((accessControl?.write?.group_ids ?? []).includes(group.id)) {
-														accessControl.write.group_ids = (
-															accessControl?.write?.group_ids ?? []
-														).filter((group_id) => group_id !== group.id);
-													} else {
-														accessControl.write.group_ids = [
-															...(accessControl?.write?.group_ids ?? []),
-															group.id
-														];
-													}
-													onChange(accessControl);
-												}
-											}}
-										>
-											{#if (accessControl?.write?.group_ids ?? []).includes(group.id)}
-												<Badge type={'success'} content={$i18n.t('Write')} />
-											{:else}
-												<Badge type={'info'} content={$i18n.t('Read')} />
-											{/if}
-										</button>
-
-										<button
-											class=" rounded-full p-1 hover:bg-gray-100 dark:hover:bg-gray-850 transition"
-											type="button"
-											on:click={() => {
-												accessControl.read.group_ids = (
-													accessControl?.read?.group_ids ?? []
-												).filter((id) => id !== group.id);
-												accessControl.write.group_ids = (
-													accessControl?.write?.group_ids ?? []
-												).filter((id) => id !== group.id);
-												onChange(accessControl);
-											}}
-										>
-											<XMark />
-										</button>
-									</div>
-								</div>
-							{/each}
-						</div>
-					{/if}
-
-					<!-- <div class="flex items-center justify-center">
-						<div class="text-gray-500 text-xs text-center py-2 px-10">
-							{$i18n.t('No groups with access, add a group to grant access')}
-						</div>
-					</div> -->
-
-					<div class="mb-1">
-						<div class="flex w-full">
-							<div class="flex flex-1 items-center">
-								<div class="w-full px-0.5">
-									<select
-										class=" outline-hidden bg-transparent text-sm block w-full pr-10 max-w-full
-									{selectedGroupId ? '' : 'text-gray-500'}
-									dark:placeholder-gray-500"
-										bind:value={selectedGroupId}
-										on:change={() => {
-											if (selectedGroupId !== '') {
-												accessControl.read.group_ids = [
-													...(accessControl?.read?.group_ids ?? []),
-													selectedGroupId
-												];
-
-												selectedGroupId = '';
-												onChange(accessControl);
-											}
-										}}
-									>
-										<option class=" text-gray-700" value="" disabled selected
-											>{$i18n.t('Select a group')}</option
-										>
-										{#each groups.filter((group) => !(accessControl?.read?.group_ids ?? []).includes(group.id)) as group}
-											<option class=" text-gray-700" value={group.id}>{group.name}</option>
-										{/each}
-									</select>
-								</div>
-							</div>
-						</div>
+						<button
+							class=" rounded-full p-1 hover:bg-gray-100 dark:hover:bg-gray-850 transition"
+							type="button"
+							on:click={() => {
+								removePrincipal('group', group.id);
+							}}
+						>
+							<XMark className="size-4" />
+						</button>
 					</div>
 				</div>
-			</div>
-		{/if}
+			{/each}
+
+			<!-- Users -->
+			{#each selectedUsers as user}
+				<div
+					class="flex items-center gap-3 justify-between text-sm w-full transition border-b border-gray-50 dark:border-gray-850 pb-2 last:border-0"
+				>
+					<div class="flex items-center gap-2 w-full flex-1">
+						<img
+							class="rounded-full size-5 object-cover"
+							src={`${WEBUI_API_BASE_URL}/users/${user.id}/profile/image`}
+							alt={user.name ?? user.id}
+						/>
+						<div class="w-full">
+							<Tooltip content={user.email} placement="top-start">
+								<div class="truncate text-sm">{user.name ?? user.id}</div>
+							</Tooltip>
+						</div>
+					</div>
+
+					<div class="w-full flex justify-end items-center gap-2">
+						<button
+							type="button"
+							on:click={() => {
+								if (accessRoles.includes('write')) {
+									togglePrincipalWrite('user', user.id);
+								}
+							}}
+						>
+							{#if writeUserIds.includes(user.id)}
+								<Badge type={'success'} content={$i18n.t('Write')} />
+							{:else}
+								<Badge type={'info'} content={$i18n.t('Read')} />
+							{/if}
+						</button>
+
+						<button
+							class=" rounded-full p-1 hover:bg-gray-100 dark:hover:bg-gray-850 transition"
+							type="button"
+							on:click={() => {
+								removePrincipal('user', user.id);
+							}}
+						>
+							<XMark className="size-4" />
+						</button>
+					</div>
+				</div>
+			{/each}
+
+			{#if !hasPublicReadGrant(accessGrants ?? []) && accessGroups.length === 0 && selectedUsers.length === 0}
+				<div class="text-xs text-gray-500 text-center py-4">
+					{$i18n.t('No access grants. Private to you.')}
+				</div>
+			{/if}
+		</div>
 	{/if}
 </div>
diff --git a/src/lib/components/workspace/common/AccessControlModal.svelte b/src/lib/components/workspace/common/AccessControlModal.svelte
index 3e53c8bd04..1456952829 100644
--- a/src/lib/components/workspace/common/AccessControlModal.svelte
+++ b/src/lib/components/workspace/common/AccessControlModal.svelte
@@ -1,4 +1,4 @@
-<script>
+<script lang="ts">
 	import { getContext } from 'svelte';
 	const i18n = getContext('i18n');
 
@@ -6,8 +6,16 @@
 	import AccessControl from './AccessControl.svelte';
 	import XMark from '$lib/components/icons/XMark.svelte';
 
+	type AccessGrant = {
+		id?: string;
+		principal_type: 'user' | 'group';
+		principal_id: string;
+		permission: 'read' | 'write';
+	};
+
 	export let show = false;
-	export let accessControl = {};
+	export let accessGrants: AccessGrant[] = [];
+	export let accessControl: any = undefined;
 	export let accessRoles = ['read'];
 
 	export let share = true;
@@ -33,7 +41,14 @@
 		</div>
 
 		<div class="w-full px-5 pb-4 dark:text-white">
-			<AccessControl bind:accessControl {onChange} {accessRoles} {share} {sharePublic} />
+			<AccessControl
+				bind:accessGrants
+				bind:accessControl
+				{onChange}
+				{accessRoles}
+				{share}
+				{sharePublic}
+			/>
 		</div>
 	</div>
 </Modal>
diff --git a/src/routes/(app)/workspace/prompts/[id]/+page.svelte b/src/routes/(app)/workspace/prompts/[id]/+page.svelte
index 0cbf3d4e56..f93110e207 100644
--- a/src/routes/(app)/workspace/prompts/[id]/+page.svelte
+++ b/src/routes/(app)/workspace/prompts/[id]/+page.svelte
@@ -35,7 +35,7 @@
 				content: updatedPrompt.content,
 				version_id: updatedPrompt.version_id,
 				tags: updatedPrompt.tags,
-				access_control: updatedPrompt?.access_control === undefined ? {} : updatedPrompt?.access_control
+				access_grants: updatedPrompt?.access_grants === undefined ? [] : updatedPrompt?.access_grants
 			};
 		}
 	};
@@ -59,7 +59,7 @@
 					content: _prompt.content,
 					version_id: _prompt.version_id,
 					tags: _prompt.tags,
-					access_control: _prompt?.access_control === undefined ? {} : _prompt?.access_control
+					access_grants: _prompt?.access_grants === undefined ? [] : _prompt?.access_grants
 				};
 			} else {
 				goto('/workspace/prompts');
diff --git a/src/routes/(app)/workspace/prompts/create/+page.svelte b/src/routes/(app)/workspace/prompts/create/+page.svelte
index a80e1c28b9..1f24ddf8b0 100644
--- a/src/routes/(app)/workspace/prompts/create/+page.svelte
+++ b/src/routes/(app)/workspace/prompts/create/+page.svelte
@@ -10,10 +10,11 @@
 	import PromptEditor from '$lib/components/workspace/Prompts/PromptEditor.svelte';
 
 	let prompt: {
-		title: string;
+		name: string;
 		command: string;
 		content: string;
-		access_control: any | null;
+		tags: string[];
+		access_grants: any[];
 	} | null = null;
 
 	let clone = false;
@@ -50,7 +51,7 @@
 				command: _prompt.command,
 				content: _prompt.content,
 				tags: _prompt.tags || [],
-				access_control: _prompt.access_control !== undefined ? _prompt.access_control : {}
+				access_grants: _prompt.access_grants !== undefined ? _prompt.access_grants : []
 			};
 		});
 
@@ -70,7 +71,7 @@
 				command: _prompt.command,
 				content: _prompt.content,
 				tags: _prompt.tags || [],
-				access_control: _prompt.access_control !== undefined ? _prompt.access_control : {}
+				access_grants: _prompt.access_grants !== undefined ? _prompt.access_grants : []
 			};
 		}
 	});
diff --git a/src/routes/(app)/workspace/tools/create/+page.svelte b/src/routes/(app)/workspace/tools/create/+page.svelte
index 0b237cc685..e0baedcdde 100644
--- a/src/routes/(app)/workspace/tools/create/+page.svelte
+++ b/src/routes/(app)/workspace/tools/create/+page.svelte
@@ -37,7 +37,7 @@
 			name: data.name,
 			meta: data.meta,
 			content: data.content,
-			access_control: data.access_control
+			access_grants: data.access_grants
 		}).catch((error) => {
 			toast.error(`${error}`);
 			return null;
@@ -87,7 +87,7 @@
 			name={tool?.name ?? ''}
 			meta={tool?.meta ?? { description: '' }}
 			content={tool?.content ?? ''}
-			accessControl={tool?.access_control !== undefined ? tool.access_control : {}}
+			accessGrants={tool?.access_grants !== undefined ? tool.access_grants : []}
 			{clone}
 			onSave={(value) => {
 				saveHandler(value);
diff --git a/src/routes/(app)/workspace/tools/edit/+page.svelte b/src/routes/(app)/workspace/tools/edit/+page.svelte
index 3584ece2d5..14df72c1cf 100644
--- a/src/routes/(app)/workspace/tools/edit/+page.svelte
+++ b/src/routes/(app)/workspace/tools/edit/+page.svelte
@@ -37,7 +37,7 @@
 			name: data.name,
 			meta: data.meta,
 			content: data.content,
-			access_control: data.access_control
+			access_grants: data.access_grants
 		}).catch((error) => {
 			toast.error(`${error}`);
 			return null;
@@ -83,7 +83,7 @@
 		name={tool.name}
 		meta={tool.meta}
 		content={tool.content}
-		accessControl={tool.access_control}
+		accessGrants={tool.access_grants ?? []}
 		onSave={(value) => {
 			saveHandler(value);
 		}}

From 68c77295bd479ea6fd73cf72a790bcf96df781cf Mon Sep 17 00:00:00 2001
From: Timothy Jaeryang Baek <tim@openwebui.com>
Date: Mon, 9 Feb 2026 13:31:59 -0600
Subject: [PATCH 34/42] refac

---
 .../versions/f1e2d3c4b5a6_add_access_grant_table.py       | 8 ++++----
 1 file changed, 4 insertions(+), 4 deletions(-)

diff --git a/backend/open_webui/migrations/versions/f1e2d3c4b5a6_add_access_grant_table.py b/backend/open_webui/migrations/versions/f1e2d3c4b5a6_add_access_grant_table.py
index eabf1860a1..1b76e67c31 100644
--- a/backend/open_webui/migrations/versions/f1e2d3c4b5a6_add_access_grant_table.py
+++ b/backend/open_webui/migrations/versions/f1e2d3c4b5a6_add_access_grant_table.py
@@ -225,7 +225,8 @@ def upgrade() -> None:
         if table_name not in existing_tables:
             continue
         try:
-            op.drop_column(table_name, "access_control")
+            with op.batch_alter_table(table_name) as batch:
+                batch.drop_column("access_control")
         except Exception:
             pass
 
@@ -249,9 +250,8 @@ def downgrade() -> None:
     # Step 1: Re-add access_control columns to resource tables
     for table_name, _ in resource_tables:
         try:
-            op.add_column(
-                table_name, sa.Column("access_control", sa.JSON(), nullable=True)
-            )
+            with op.batch_alter_table(table_name) as batch:
+                batch.add_column(sa.Column("access_control", sa.JSON(), nullable=True))
         except Exception:
             pass
 

From 0a44d80252afae73de4098ab1c3eb6cf54157fd6 Mon Sep 17 00:00:00 2001
From: Timothy Jaeryang Baek <tim@openwebui.com>
Date: Mon, 9 Feb 2026 13:42:27 -0600
Subject: [PATCH 35/42] refac

---
 src/lib/components/chat/MessageInput.svelte                  | 2 +-
 src/lib/components/chat/MessageInput/IntegrationsMenu.svelte | 2 +-
 src/lib/components/chat/Messages/ResponseMessage.svelte      | 2 +-
 3 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/src/lib/components/chat/MessageInput.svelte b/src/lib/components/chat/MessageInput.svelte
index 91c40a2392..1f16526c4b 100644
--- a/src/lib/components/chat/MessageInput.svelte
+++ b/src/lib/components/chat/MessageInput.svelte
@@ -1634,7 +1634,7 @@
 															<div class="size-4 items-center flex justify-center">
 																<img
 																	src={filter.icon}
-																	class="size-3.5 {filter.icon.includes('svg')
+																	class="size-3.5 {filter.icon.includes('data:image/svg')
 																		? 'dark:invert-[80%]'
 																		: ''}"
 																	style="fill: currentColor;"
diff --git a/src/lib/components/chat/MessageInput/IntegrationsMenu.svelte b/src/lib/components/chat/MessageInput/IntegrationsMenu.svelte
index 38e3228c11..ab79796316 100644
--- a/src/lib/components/chat/MessageInput/IntegrationsMenu.svelte
+++ b/src/lib/components/chat/MessageInput/IntegrationsMenu.svelte
@@ -162,7 +162,7 @@
 													<div class="size-4 items-center flex justify-center">
 														<img
 															src={filter.icon}
-															class="size-3.5 {filter.icon.includes('svg')
+															class="size-3.5 {filter.icon.includes('data:image/svg')
 																? 'dark:invert-[80%]'
 																: ''}"
 															style="fill: currentColor;"
diff --git a/src/lib/components/chat/Messages/ResponseMessage.svelte b/src/lib/components/chat/Messages/ResponseMessage.svelte
index 78575ba9ce..47c1b51422 100644
--- a/src/lib/components/chat/Messages/ResponseMessage.svelte
+++ b/src/lib/components/chat/Messages/ResponseMessage.svelte
@@ -1397,7 +1397,7 @@
 													<div class="size-4">
 														<img
 															src={action.icon}
-															class="w-4 h-4 {action.icon.includes('svg')
+															class="w-4 h-4 {action.icon.includes('data:image/svg')
 																? 'dark:invert-[80%]'
 																: ''}"
 															style="fill: currentColor;"

From 1034b74abd99b3ed4cbcc7fbd393faf11a0448c7 Mon Sep 17 00:00:00 2001
From: Timothy Jaeryang Baek <tim@openwebui.com>
Date: Mon, 9 Feb 2026 13:48:48 -0600
Subject: [PATCH 36/42] refac

---
 src/lib/components/chat/Settings/Account.svelte          | 1 -
 src/lib/components/workspace/common/AccessControl.svelte | 2 +-
 2 files changed, 1 insertion(+), 2 deletions(-)

diff --git a/src/lib/components/chat/Settings/Account.svelte b/src/lib/components/chat/Settings/Account.svelte
index c47391a6ed..d51a49fdf5 100644
--- a/src/lib/components/chat/Settings/Account.svelte
+++ b/src/lib/components/chat/Settings/Account.svelte
@@ -14,7 +14,6 @@
 	import Tooltip from '$lib/components/common/Tooltip.svelte';
 	import SensitiveInput from '$lib/components/common/SensitiveInput.svelte';
 	import Textarea from '$lib/components/common/Textarea.svelte';
-	import { getUserById } from '$lib/apis/users';
 	import User from '$lib/components/icons/User.svelte';
 	import UserProfileImage from './Account/UserProfileImage.svelte';
 
diff --git a/src/lib/components/workspace/common/AccessControl.svelte b/src/lib/components/workspace/common/AccessControl.svelte
index 7e691d0e36..f602bf1869 100644
--- a/src/lib/components/workspace/common/AccessControl.svelte
+++ b/src/lib/components/workspace/common/AccessControl.svelte
@@ -4,7 +4,7 @@
 	const i18n = getContext('i18n');
 
 	import { getGroups, getGroupById, getGroupInfoById } from '$lib/apis/groups';
-	import { getUserById, getUserInfoById } from '$lib/apis/users';
+	import { getUserInfoById } from '$lib/apis/users';
 	import { WEBUI_API_BASE_URL } from '$lib/constants';
 	import XMark from '$lib/components/icons/XMark.svelte';
 	import Badge from '$lib/components/common/Badge.svelte';

From c2f5cb542eefaf5e7445907361621aafd4b1f167 Mon Sep 17 00:00:00 2001
From: Timothy Jaeryang Baek <tim@openwebui.com>
Date: Mon, 9 Feb 2026 14:03:35 -0600
Subject: [PATCH 37/42] refac

---
 backend/open_webui/models/users.py            |  3 +++
 backend/open_webui/routers/users.py           |  9 ++++++-
 src/lib/apis/users/index.ts                   | 26 -------------------
 .../Message/UserStatusLinkPreview.svelte      |  4 +--
 .../workspace/common/MemberSelector.svelte    |  4 +--
 src/routes/s/[id]/+page.svelte                |  4 +--
 6 files changed, 17 insertions(+), 33 deletions(-)

diff --git a/backend/open_webui/models/users.py b/backend/open_webui/models/users.py
index 43c5a94f81..4a526d03f3 100644
--- a/backend/open_webui/models/users.py
+++ b/backend/open_webui/models/users.py
@@ -184,6 +184,9 @@ class UserInfoResponse(UserStatus):
     name: str
     email: str
     role: str
+    bio: Optional[str] = None
+    groups: Optional[list] = []
+    is_active: bool = False
 
 
 class UserIdNameResponse(BaseModel):
diff --git a/backend/open_webui/routers/users.py b/backend/open_webui/routers/users.py
index 5d8a1057d9..6eca1fcac2 100644
--- a/backend/open_webui/routers/users.py
+++ b/backend/open_webui/routers/users.py
@@ -484,7 +484,14 @@ async def get_user_info_by_id(
 ):
     user = Users.get_user_by_id(user_id, db=db)
     if user:
-        return user
+        groups = Groups.get_groups_by_member_id(user_id, db=db)
+        return UserInfoResponse(
+            **{
+                **user.model_dump(),
+                "groups": [{"id": group.id, "name": group.name} for group in groups],
+                "is_active": Users.is_user_active(user_id, db=db),
+            }
+        )
     else:
         raise HTTPException(
             status_code=status.HTTP_400_BAD_REQUEST,
diff --git a/src/lib/apis/users/index.ts b/src/lib/apis/users/index.ts
index cd3b40adcc..ad669c3eb9 100644
--- a/src/lib/apis/users/index.ts
+++ b/src/lib/apis/users/index.ts
@@ -300,32 +300,6 @@ export const updateUserSettings = async (token: string, settings: object) => {
 	return res;
 };
 
-export const getUserById = async (token: string, userId: string) => {
-	let error = null;
-
-	const res = await fetch(`${WEBUI_API_BASE_URL}/users/${userId}`, {
-		method: 'GET',
-		headers: {
-			'Content-Type': 'application/json',
-			Authorization: `Bearer ${token}`
-		}
-	})
-		.then(async (res) => {
-			if (!res.ok) throw await res.json();
-			return res.json();
-		})
-		.catch((err) => {
-			console.error(err);
-			error = err.detail;
-			return null;
-		});
-
-	if (error) {
-		throw error;
-	}
-
-	return res;
-};
 
 export const getUserInfoById = async (token: string, userId: string) => {
 	let error = null;
diff --git a/src/lib/components/channel/Messages/Message/UserStatusLinkPreview.svelte b/src/lib/components/channel/Messages/Message/UserStatusLinkPreview.svelte
index 74b2029266..749ca8df10 100644
--- a/src/lib/components/channel/Messages/Message/UserStatusLinkPreview.svelte
+++ b/src/lib/components/channel/Messages/Message/UserStatusLinkPreview.svelte
@@ -3,7 +3,7 @@
 	import { LinkPreview } from 'bits-ui';
 
 	const i18n = getContext('i18n');
-	import { getUserById } from '$lib/apis/users';
+	import { getUserInfoById } from '$lib/apis/users';
 
 	import UserStatus from './UserStatus.svelte';
 
@@ -16,7 +16,7 @@
 	let user = null;
 	onMount(async () => {
 		if (id) {
-			user = await getUserById(localStorage.token, id).catch((error) => {
+			user = await getUserInfoById(localStorage.token, id).catch((error) => {
 				console.error('Error fetching user by ID:', error);
 				return null;
 			});
diff --git a/src/lib/components/workspace/common/MemberSelector.svelte b/src/lib/components/workspace/common/MemberSelector.svelte
index 84c700d8f9..d3a49c73f4 100644
--- a/src/lib/components/workspace/common/MemberSelector.svelte
+++ b/src/lib/components/workspace/common/MemberSelector.svelte
@@ -5,7 +5,7 @@
 	const i18n = getContext('i18n');
 
 	import { user as _user } from '$lib/stores';
-	import { getUserById, searchUsers } from '$lib/apis/users';
+	import { getUserInfoById, searchUsers } from '$lib/apis/users';
 	import { WEBUI_API_BASE_URL } from '$lib/constants';
 
 	import XMark from '$lib/components/icons/XMark.svelte';
@@ -84,7 +84,7 @@
 
 		if (userIds.length > 0) {
 			userIds.forEach(async (id) => {
-				const res = await getUserById(localStorage.token, id).catch((error) => {
+				const res = await getUserInfoById(localStorage.token, id).catch((error) => {
 					console.error(error);
 					return null;
 				});
diff --git a/src/routes/s/[id]/+page.svelte b/src/routes/s/[id]/+page.svelte
index 39ad1d6ecf..d509798fac 100644
--- a/src/routes/s/[id]/+page.svelte
+++ b/src/routes/s/[id]/+page.svelte
@@ -12,7 +12,7 @@
 
 	import Messages from '$lib/components/chat/Messages.svelte';
 
-	import { getUserById, getUserSettings } from '$lib/apis/users';
+	import { getUserInfoById, getUserSettings } from '$lib/apis/users';
 	import { getModels } from '$lib/apis';
 	import { toast } from 'svelte-sonner';
 	import localizedFormat from 'dayjs/plugin/localizedFormat';
@@ -92,7 +92,7 @@
 		});
 
 		if (chat) {
-			user = await getUserById(localStorage.token, chat.user_id).catch((error) => {
+			user = await getUserInfoById(localStorage.token, chat.user_id).catch((error) => {
 				console.error(error);
 				return null;
 			});

From e3e4e1d9d350b8a34b6392d69f10c4489c95627e Mon Sep 17 00:00:00 2001
From: Algorithm5838 <108630393+Algorithm5838@users.noreply.github.com>
Date: Tue, 10 Feb 2026 01:15:08 +0300
Subject: [PATCH 38/42] fix: handle Gboard clipboard strip multi-line paste via
 beforeinput (#21265)

Gboard's clipboard suggestion strip sends multi-line pastes as
'insertText' in beforeinput rather than a standard paste event,
causing ProseMirror to drop the text content and insert only a
newline. Add a beforeinput handler that intercepts multi-line
insertText events on Android and manually inserts with hard breaks
to preserve the formatting.
---
 .../components/common/RichTextInput.svelte    | 28 +++++++++++++++++++
 1 file changed, 28 insertions(+)

diff --git a/src/lib/components/common/RichTextInput.svelte b/src/lib/components/common/RichTextInput.svelte
index f7447551f8..28221cd39d 100644
--- a/src/lib/components/common/RichTextInput.svelte
+++ b/src/lib/components/common/RichTextInput.svelte
@@ -897,6 +897,34 @@
 						oncompositionend(event);
 						return false;
 					},
+					beforeinput: (view, event) => {
+						// Workaround for Gboard's clipboard suggestion strip which sends
+						// multi-line pastes as 'insertText' rather than a standard paste event.
+						// Manually insert with hard breaks to preserve multi-line formatting.
+						const isAndroid = /Android/i.test(navigator.userAgent);
+						if (isAndroid && event.inputType === 'insertText' && event.data?.includes('\n')) {
+							event.preventDefault();
+
+							const { state, dispatch } = view;
+							const { from, to } = state.selection;
+							const lines = event.data.split('\n');
+							const nodes = [];
+
+							lines.forEach((line, index) => {
+								if (index > 0) {
+									nodes.push(state.schema.nodes.hardBreak.create());
+								}
+								if (line.length > 0) {
+									nodes.push(state.schema.text(line));
+								}
+							});
+
+							const fragment = Fragment.fromArray(nodes);
+							dispatch(state.tr.replaceWith(from, to, fragment).scrollIntoView());
+							return true;
+						}
+						return false;
+					},
 					focus: (view, event) => {
 						eventDispatch('focus', { event });
 						return false;

From 55169e69c0df9ceff2714ce2283d5d77c93b58cc Mon Sep 17 00:00:00 2001
From: Classic298 <27028174+Classic298@users.noreply.github.com>
Date: Mon, 9 Feb 2026 23:15:39 +0100
Subject: [PATCH 39/42] chore: Dep bump (#21261)

* Update pyproject.toml

* Update requirements-min.txt

* Update package versions in requirements.txt

Updated various package versions in requirements.txt to latest releases.
---
 backend/requirements-min.txt | 14 +++++++-------
 backend/requirements.txt     | 34 +++++++++++++++++-----------------
 pyproject.toml               | 34 +++++++++++++++++-----------------
 3 files changed, 41 insertions(+), 41 deletions(-)

diff --git a/backend/requirements-min.txt b/backend/requirements-min.txt
index c4daedc446..b5cf822c5d 100644
--- a/backend/requirements-min.txt
+++ b/backend/requirements-min.txt
@@ -1,19 +1,19 @@
 # Minimal requirements for backend to run
 # WIP: use this as a reference to build a minimal docker image
 
-fastapi==0.128.0
+fastapi==0.128.5
 uvicorn[standard]==0.40.0
 pydantic==2.12.5
 python-multipart==0.0.22
 itsdangerous==2.2.0
 
-python-socketio==5.16.0
+python-socketio==5.16.1
 python-jose==3.5.0
 cryptography
 bcrypt==5.0.0
 argon2-cffi==25.1.0
-PyJWT[crypto]==2.10.1
-authlib==1.6.6
+PyJWT[crypto]==2.11.0
+authlib==1.6.7
 
 requests==2.32.5
 aiohttp==3.13.2 # do not update to 3.13.3 - broken
@@ -29,19 +29,19 @@ alembic==1.18.3
 peewee==3.19.0
 peewee-migrate==1.14.3
 
-pycrdt==0.12.45
+pycrdt==0.12.46
 redis
 
 APScheduler==3.11.2
 RestrictedPython==8.1
 
 loguru==0.7.3
-asgiref==3.11.0
+asgiref==3.11.1
 
 mcp==1.26.0
 openai
 
-langchain==1.2.7
+langchain==1.2.9
 langchain-community==0.4.1
 langchain-classic==1.0.1
 langchain-text-splitters==1.1.0
diff --git a/backend/requirements.txt b/backend/requirements.txt
index c9fdd5d0d7..5b4cf6a3ed 100644
--- a/backend/requirements.txt
+++ b/backend/requirements.txt
@@ -1,16 +1,16 @@
-fastapi==0.128.0
+fastapi==0.128.5
 uvicorn[standard]==0.40.0
 pydantic==2.12.5
 python-multipart==0.0.22
 itsdangerous==2.2.0
 
-python-socketio==5.16.0
+python-socketio==5.16.1
 python-jose==3.5.0
 cryptography
 bcrypt==5.0.0
 argon2-cffi==25.1.0
-PyJWT[crypto]==2.10.1
-authlib==1.6.6
+PyJWT[crypto]==2.11.0
+authlib==1.6.7
 
 requests==2.32.5
 aiohttp==3.13.2 # do not update to 3.13.3 - broken
@@ -27,14 +27,14 @@ alembic==1.18.3
 peewee==3.19.0
 peewee-migrate==1.14.3
 
-pycrdt==0.12.45
+pycrdt==0.12.46
 redis
 
 APScheduler==3.11.2
 RestrictedPython==8.1
 
 loguru==0.7.3
-asgiref==3.11.0
+asgiref==3.11.1
 
 # AI libraries
 tiktoken
@@ -42,9 +42,9 @@ mcp==1.26.0
 
 openai
 anthropic
-google-genai==1.60.0
+google-genai==1.62.0
 
-langchain==1.2.7
+langchain==1.2.9
 langchain-community==0.4.1
 langchain-classic==1.0.1
 langchain-text-splitters==1.1.0
@@ -54,7 +54,7 @@ chromadb==1.4.1
 weaviate-client==4.19.2
 opensearch-py==3.1.0
 
-transformers==4.57.6
+transformers==5.1.0
 sentence-transformers==5.2.2
 accelerate
 pyarrow==20.0.0 # fix: pin pyarrow version to 20 for rpi compatibility #15897
@@ -62,17 +62,17 @@ einops==0.8.2
 
 ftfy==6.3.1
 chardet==5.2.0
-pypdf==6.6.2
+pypdf==6.7.0
 fpdf2==2.8.5
 pymdown-extensions==10.20.1
 docx2txt==0.9
 python-pptx==1.0.2
 unstructured==0.18.31
-msoffcrypto-tool==5.4.2
+msoffcrypto-tool==6.0.0
 nltk==3.9.2
 Markdown==3.10.1
 pypandoc==1.16.2
-pandas==2.3.3
+pandas==3.0.0
 openpyxl==3.1.5
 pyxlsb==1.0.10
 xlrd==2.0.2
@@ -82,11 +82,11 @@ sentencepiece
 soundfile==0.13.1
 
 pillow==12.1.0
-opencv-python-headless==4.13.0.90
+opencv-python-headless==4.13.0.92
 rapidocr-onnxruntime==1.4.4
 rank-bm25==0.2.2
 
-onnxruntime==1.23.2
+onnxruntime==1.24.1
 faster-whisper==1.2.1
 
 black==26.1.0
@@ -107,7 +107,7 @@ google-auth-httplib2
 google-auth-oauthlib
 
 googleapis-common-protos==1.72.0
-google-cloud-storage==3.8.0
+google-cloud-storage==3.9.0
 
 ## Databases
 pymongo
@@ -115,12 +115,12 @@ psycopg2-binary==2.9.11
 pgvector==0.4.2
 
 PyMySQL==1.1.2
-boto3==1.42.38
+boto3==1.42.44
 
 pymilvus==2.6.8
 qdrant-client==1.16.2
 playwright==1.58.0 # Caution: version must match docker-compose.playwright.yaml - Update the docker-compose.yaml if necessary
-elasticsearch==9.2.1
+elasticsearch==9.3.0
 pinecone==6.0.2
 oracledb==3.4.2
 
diff --git a/pyproject.toml b/pyproject.toml
index 3f07770850..2d70f23dc9 100644
--- a/pyproject.toml
+++ b/pyproject.toml
@@ -6,19 +6,19 @@ authors = [
 ]
 license = { file = "LICENSE" }
 dependencies = [
-    "fastapi==0.128.0",
+    "fastapi==0.128.5",
     "uvicorn[standard]==0.40.0",
     "pydantic==2.12.5",
     "python-multipart==0.0.22",
     "itsdangerous==2.2.0",
 
-    "python-socketio==5.16.0",
+    "python-socketio==5.16.1",
     "python-jose==3.5.0",
     "cryptography",
     "bcrypt==5.0.0",
     "argon2-cffi==25.1.0",
-    "PyJWT[crypto]==2.10.1",
-    "authlib==1.6.6",
+    "PyJWT[crypto]==2.11.0",
+    "authlib==1.6.7",
 
     "requests==2.32.5",
     "aiohttp==3.13.2", # do not update to 3.13.3 - broken
@@ -35,23 +35,23 @@ dependencies = [
     "peewee==3.19.0",
     "peewee-migrate==1.14.3",
 
-    "pycrdt==0.12.45",
+    "pycrdt==0.12.46",
     "redis",
 
     "APScheduler==3.11.2",
     "RestrictedPython==8.1",
 
     "loguru==0.7.3",
-    "asgiref==3.11.0",
+    "asgiref==3.11.1",
 
     "tiktoken",
     "mcp==1.26.0",
 
     "openai",
     "anthropic",
-    "google-genai==1.60.0",
+    "google-genai==1.62.0",
 
-    "langchain==1.2.7",
+    "langchain==1.2.9",
     "langchain-community==0.4.1",
     "langchain-classic==1.0.1",
     "langchain-text-splitters==1.1.0",
@@ -60,9 +60,9 @@ dependencies = [
     "chromadb==1.4.1",
     "opensearch-py==3.1.0",
     "PyMySQL==1.1.2",
-    "boto3==1.42.38",
+    "boto3==1.42.44",
     
-    "transformers==4.57.6",
+    "transformers==5.1.0",
     "sentence-transformers==5.2.2",
     "accelerate",
     "pyarrow==20.0.0", # fix: pin pyarrow version to 20 for rpi compatibility #15897
@@ -70,17 +70,17 @@ dependencies = [
 
     "ftfy==6.3.1",
     "chardet==5.2.0",
-    "pypdf==6.6.2",
+    "pypdf==6.7.0",
     "fpdf2==2.8.5",
     "pymdown-extensions==10.20.1",
     "docx2txt==0.9",
     "python-pptx==1.0.2",
     "unstructured==0.18.31",
-    "msoffcrypto-tool==5.4.2",
+    "msoffcrypto-tool==6.0.0",
     "nltk==3.9.2",
     "Markdown==3.10.1",
     "pypandoc==1.16.2",
-    "pandas==2.3.3",
+    "pandas==3.0.0",
     "openpyxl==3.1.5",
     "pyxlsb==1.0.10",
     "xlrd==2.0.2",
@@ -91,11 +91,11 @@ dependencies = [
     "azure-ai-documentintelligence==1.0.2",
 
     "pillow==12.1.0",
-    "opencv-python-headless==4.13.0.90",
+    "opencv-python-headless==4.13.0.92",
     "rapidocr-onnxruntime==1.4.4",
     "rank-bm25==0.2.2",
 
-    "onnxruntime==1.23.2",
+    "onnxruntime==1.24.1",
     "faster-whisper==1.2.1",
 
     "black==26.1.0",
@@ -110,7 +110,7 @@ dependencies = [
     "google-auth-oauthlib",
 
     "googleapis-common-protos==1.72.0",
-    "google-cloud-storage==3.8.0",
+    "google-cloud-storage==3.9.0",
 
     "azure-identity==1.25.1",
     "azure-storage-blob==12.28.0",
@@ -146,7 +146,7 @@ all = [
     "pytest~=8.3.2",
     "pytest-docker~=3.2.5",
     "playwright==1.58.0", # Caution: version must match docker-compose.playwright.yaml - Update the docker-compose.yaml if necessary
-    "elasticsearch==9.2.1",
+    "elasticsearch==9.3.0",
 
     "qdrant-client==1.16.2",
     

From 9b1fd86aa7f27b565b2c8fa28b99bead0ff1038a Mon Sep 17 00:00:00 2001
From: Varun Chawla <34209028+veeceey@users.noreply.github.com>
Date: Mon, 9 Feb 2026 14:16:44 -0800
Subject: [PATCH 40/42] fix: use keyword argument for IndicesClient.refresh()
 for opensearch-py 3.x (#21248)

In opensearch-py >= 3.0.0, IndicesClient.refresh() no longer accepts the
index name as a positional argument. This causes a TypeError when
uploading documents to knowledge bases with OpenSearch backend.

Changes positional arguments to keyword arguments (index=...) in all
three refresh() calls in the OpenSearch vector DB client.

Fixes #20649
---
 backend/open_webui/retrieval/vector/dbs/opensearch.py | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/backend/open_webui/retrieval/vector/dbs/opensearch.py b/backend/open_webui/retrieval/vector/dbs/opensearch.py
index dc9c35805e..ed5a931c68 100644
--- a/backend/open_webui/retrieval/vector/dbs/opensearch.py
+++ b/backend/open_webui/retrieval/vector/dbs/opensearch.py
@@ -211,7 +211,7 @@ class OpenSearchClient(VectorDBBase):
                 for item in batch
             ]
             bulk(self.client, actions)
-        self.client.indices.refresh(self._get_index_name(collection_name))
+        self.client.indices.refresh(index=self._get_index_name(collection_name))
 
     def upsert(self, collection_name: str, items: list[VectorItem]):
         self._create_index_if_not_exists(
@@ -234,7 +234,7 @@ class OpenSearchClient(VectorDBBase):
                 for item in batch
             ]
             bulk(self.client, actions)
-        self.client.indices.refresh(self._get_index_name(collection_name))
+        self.client.indices.refresh(index=self._get_index_name(collection_name))
 
     def delete(
         self,
@@ -263,7 +263,7 @@ class OpenSearchClient(VectorDBBase):
             self.client.delete_by_query(
                 index=self._get_index_name(collection_name), body=query_body
             )
-        self.client.indices.refresh(self._get_index_name(collection_name))
+        self.client.indices.refresh(index=self._get_index_name(collection_name))
 
     def reset(self):
         indices = self.client.indices.get(index=f"{self.index_prefix}_*")

From f236192fe1d7314f63e66fee76ee15fd2fe2bbcd Mon Sep 17 00:00:00 2001
From: Classic298 <27028174+Classic298@users.noreply.github.com>
Date: Mon, 9 Feb 2026 23:17:30 +0100
Subject: [PATCH 41/42] fix: resolve N+1 query in knowledge batch file add
 (#21006)

---
 backend/open_webui/routers/knowledge.py | 22 ++++++++++++----------
 1 file changed, 12 insertions(+), 10 deletions(-)

diff --git a/backend/open_webui/routers/knowledge.py b/backend/open_webui/routers/knowledge.py
index 8350fda03d..7fff5e5f2a 100644
--- a/backend/open_webui/routers/knowledge.py
+++ b/backend/open_webui/routers/knowledge.py
@@ -958,17 +958,19 @@ async def add_files_to_knowledge_batch(
             detail=ERROR_MESSAGES.ACCESS_PROHIBITED,
         )
 
-    # Get files content
+    # Batch-fetch all files to avoid N+1 queries
     log.info(f"files/batch/add - {len(form_data)} files")
-    files: List[FileModel] = []
-    for form in form_data:
-        file = Files.get_file_by_id(form.file_id, db=db)
-        if not file:
-            raise HTTPException(
-                status_code=status.HTTP_400_BAD_REQUEST,
-                detail=f"File {form.file_id} not found",
-            )
-        files.append(file)
+    file_ids = [form.file_id for form in form_data]
+    files = Files.get_files_by_ids(file_ids, db=db)
+
+    # Verify all requested files were found
+    found_ids = {file.id for file in files}
+    missing_ids = [fid for fid in file_ids if fid not in found_ids]
+    if missing_ids:
+        raise HTTPException(
+            status_code=status.HTTP_400_BAD_REQUEST,
+            detail=f"File {missing_ids[0]} not found",
+        )
 
     # Process files
     try:

From 3567054325d71d81eb9c1df922c0ebd39b630042 Mon Sep 17 00:00:00 2001
From: Timothy Jaeryang Baek <tim@openwebui.com>
Date: Mon, 9 Feb 2026 18:22:28 -0600
Subject: [PATCH 42/42] refac

---
 backend/requirements.txt | 1 +
 pyproject.toml           | 1 +
 2 files changed, 2 insertions(+)

diff --git a/backend/requirements.txt b/backend/requirements.txt
index 5b4cf6a3ed..957fb6ae27 100644
--- a/backend/requirements.txt
+++ b/backend/requirements.txt
@@ -32,6 +32,7 @@ redis
 
 APScheduler==3.11.2
 RestrictedPython==8.1
+pytz==2025.2
 
 loguru==0.7.3
 asgiref==3.11.1
diff --git a/pyproject.toml b/pyproject.toml
index 2d70f23dc9..eeda46681f 100644
--- a/pyproject.toml
+++ b/pyproject.toml
@@ -38,6 +38,7 @@ dependencies = [
     "pycrdt==0.12.46",
     "redis",
 
+    "pytz==2025.2",
     "APScheduler==3.11.2",
     "RestrictedPython==8.1",