# Open Webui Foundation

> Use when porting open-webui's runtime-mutable config store, typed event bus, socket emitter/caller pair, hybrid RAG retrieval ladder, DB-stored plugin loader, filter inlet/outlet/stream pipeline, chat-stream machinery (agentic tool loop, tag scanner, delta coalescing, cancellation), built-in-tool authz gates, access-grants ACL plane, outbound provider-proxy plane (timeout ladders, Ollama error ladder, multi-backend routing, OpenAI/Azure/Responses normalization), file-to-knowledge ingest plane (upload admission, process bridge with knowledge auto-link, hash-dedup chunking kernel, embed-first/bind-later binding, transitive file ACL), inbound trust boundary (three-transport auth-token ladder, dual-mechanism JWT revocation, API-key gates on raw ASGI paths, hash-prefix password dispatch), or SDK-constrained MCP client lifecycle (construction-time SSL, pop_all ownership transfer, no-shield same-task teardown). Source code and direct tests are ground truth; references carry decisive excerpts and graph retrieval.

- Skill: `ryan-brosas/open-webui-foundation` (Agent Skill, multi-file: 32 files)
- Install (CLI): `npx skillmds@latest add ryan-brosas/open-webui-foundation`
- Raw SKILL.md: https://api.skillmd.com/api/skills/ryan-brosas/open-webui-foundation/raw
- Safety review: pending
- Works with: Claude Code, Claude.ai, OpenAI Codex
- Category: DevOps & Infra
- Author: ryan-brosas (https://skillmd.com/u/ryan-brosas)
- Updated: 2026-09-17
- Page: https://skillmd.com/skills/ryan-brosas/open-webui-foundation

---

# open-webui: Extension Runtime & Realtime Services Foundation

## Foundation contract

This is a cold, source-specific foundation, not an operational procedure. It is
historical, revision-pinned evidence rather than timeless guidance. Current
project source, tests, requirements, and runtime behavior outrank this
projection and decide what ships.

## Provenance and revision

- Source record: `open-webui`; portable upstream identity, license, coverage caveats, and retrieval history are preserved in the index.
- Recorded revision: `main@01f4282f1ffe0d6212f58d3afbeae21fffd0c4be`.
- Full provenance, coverage caveats, boundaries, and preserved evidence:
  `references/index.md`.

## Topic map

- Representative topics: Config store; Event bus; Socket events; Hybrid
  retrieval; Plugin loader; Filter pipeline; Agentic tool loop; Stream tag
  scanner.
- Scope and retrieval questions: `references/index.md#use-this-for`.
- Complete capsule chooser: `references/index.md#load-the-matching-source-dump`.
- Detailed grouped map: `references/index.md#capsule-map`.
- Source limitations and portability boundaries: `references/index.md#boundaries`.

## Retrieval

Open the index, choose one capsule matching the active question, and load only
that capsule. Revalidate its cited source and revision before relying on it. Do
not bulk-load the inventory, treat historical claims as current truth, or apply
this foundation as a procedure.