@librechat/agents 3.0.66 → 3.0.67

package/dist/esm/tools/{ToolSearchRegex.mjs → ToolSearch.mjs}

@@ -7,7 +7,7 @@ import { tool } from '@langchain/core/tools';
 import { getCodeBaseURL } from './CodeExecutor.mjs';
 import { EnvVar, Constants } from '../common/enum.mjs';
 
-// src/tools/ToolSearchRegex.ts
+// src/tools/ToolSearch.ts
 config();
 /** Maximum allowed regex pattern length */
 const MAX_PATTERN_LENGTH = 200;
@@ -15,26 +15,32 @@ const MAX_PATTERN_LENGTH = 200;
 const MAX_REGEX_COMPLEXITY = 5;
 /** Default search timeout in milliseconds */
 const SEARCH_TIMEOUT = 5000;
-const ToolSearchRegexSchema = z.object({
-    query: z
-        .string()
-        .min(1)
-        .max(MAX_PATTERN_LENGTH)
-        .describe('Regex pattern to search tool names and descriptions. Special regex characters will be sanitized for safety.'),
-    fields: z
-        .array(z.enum(['name', 'description', 'parameters']))
-        .optional()
-        .default(['name', 'description'])
-        .describe('Which fields to search. Default: name and description'),
-    max_results: z
-        .number()
-        .int()
-        .min(1)
-        .max(50)
-        .optional()
-        .default(10)
-        .describe('Maximum number of matching tools to return'),
-});
+/**
+ * Creates the Zod schema with dynamic query description based on mode.
+ * @param mode - The search mode determining query interpretation
+ * @returns Zod schema for tool search parameters
+ */
+function createToolSearchSchema(mode) {
+    const queryDescription = mode === 'local'
+        ? 'Search term to find in tool names and descriptions. Case-insensitive substring matching.'
+        : 'Regex pattern to search tool names and descriptions. Special regex characters will be sanitized for safety.';
+    return z.object({
+        query: z.string().min(1).max(MAX_PATTERN_LENGTH).describe(queryDescription),
+        fields: z
+            .array(z.enum(['name', 'description', 'parameters']))
+            .optional()
+            .default(['name', 'description'])
+            .describe('Which fields to search. Default: name and description'),
+        max_results: z
+            .number()
+            .int()
+            .min(1)
+            .max(50)
+            .optional()
+            .default(10)
+            .describe('Maximum number of matching tools to return'),
+    });
+}
 /**
  * Escapes special regex characters in a string to use as a literal pattern.
  * @param pattern - The string to escape
@@ -145,6 +151,67 @@ function simplifyParametersForSearch(parameters) {
     }
     return { type: parameters.type };
 }
+/**
+ * Performs safe local substring search without regex.
+ * Uses case-insensitive String.includes() for complete safety against ReDoS.
+ * @param tools - Array of tool metadata to search
+ * @param query - The search term (treated as literal substring)
+ * @param fields - Which fields to search
+ * @param maxResults - Maximum results to return
+ * @returns Search response with matching tools
+ */
+function performLocalSearch(tools, query, fields, maxResults) {
+    const lowerQuery = query.toLowerCase();
+    const results = [];
+    for (const tool of tools) {
+        let bestScore = 0;
+        let matchedField = '';
+        let snippet = '';
+        if (fields.includes('name')) {
+            const lowerName = tool.name.toLowerCase();
+            if (lowerName.includes(lowerQuery)) {
+                const isExactMatch = lowerName === lowerQuery;
+                const startsWithQuery = lowerName.startsWith(lowerQuery);
+                bestScore = isExactMatch ? 1.0 : startsWithQuery ? 0.95 : 0.85;
+                matchedField = 'name';
+                snippet = tool.name;
+            }
+        }
+        if (fields.includes('description') && tool.description) {
+            const lowerDesc = tool.description.toLowerCase();
+            if (lowerDesc.includes(lowerQuery) && bestScore === 0) {
+                bestScore = 0.7;
+                matchedField = 'description';
+                snippet = tool.description.substring(0, 100);
+            }
+        }
+        if (fields.includes('parameters') && tool.parameters?.properties) {
+            const paramNames = Object.keys(tool.parameters.properties)
+                .join(' ')
+                .toLowerCase();
+            if (paramNames.includes(lowerQuery) && bestScore === 0) {
+                bestScore = 0.55;
+                matchedField = 'parameters';
+                snippet = Object.keys(tool.parameters.properties).join(' ');
+            }
+        }
+        if (bestScore > 0) {
+            results.push({
+                tool_name: tool.name,
+                match_score: bestScore,
+                matched_field: matchedField,
+                snippet,
+            });
+        }
+    }
+    results.sort((a, b) => b.match_score - a.match_score);
+    const topResults = results.slice(0, maxResults);
+    return {
+        tool_references: topResults,
+        total_tools_searched: tools.length,
+        pattern_used: query,
+    };
+}
 /**
  * Generates the JavaScript search script to be executed in the sandbox.
  * Uses plain JavaScript for maximum compatibility with the Code API.
@@ -268,11 +335,15 @@ function formatSearchResults(searchResponse) {
     return response;
 }
 /**
- * Creates a Tool Search Regex tool for discovering tools from a large registry.
+ * Creates a Tool Search tool for discovering tools from a large registry.
  *
  * This tool enables AI agents to dynamically discover tools from a large library
  * without loading all tool definitions into the LLM context window. The agent
- * can search for relevant tools on-demand using regex patterns.
+ * can search for relevant tools on-demand.
+ *
+ * **Modes:**
+ * - `code_interpreter` (default): Uses external sandbox for regex search. Safer for complex patterns.
+ * - `local`: Uses safe substring matching locally. No network call, faster, completely safe from ReDoS.
  *
  * The tool registry can be provided either:
  * 1. At initialization time via params.toolRegistry
@@ -282,30 +353,42 @@ function formatSearchResults(searchResponse) {
  * @returns A LangChain DynamicStructuredTool for tool searching
  *
  * @example
- * // Option 1: Registry at initialization
- * const tool = createToolSearchRegexTool({ apiKey, toolRegistry });
- * await tool.invoke({ query: 'expense' });
+ * // Option 1: Code interpreter mode (regex via sandbox)
+ * const tool = createToolSearch({ apiKey, toolRegistry });
+ * await tool.invoke({ query: 'expense.*report' });
  *
  * @example
- * // Option 2: Registry at runtime
- * const tool = createToolSearchRegexTool({ apiKey });
- * await tool.invoke(
- *   { query: 'expense' },
- *   { configurable: { toolRegistry, onlyDeferred: true } }
- * );
+ * // Option 2: Local mode (safe substring search, no API key needed)
+ * const tool = createToolSearch({ mode: 'local', toolRegistry });
+ * await tool.invoke({ query: 'expense' });
  */
-function createToolSearchRegexTool(initParams = {}) {
-    const apiKey = initParams[EnvVar.CODE_API_KEY] ??
-        initParams.apiKey ??
-        getEnvironmentVariable(EnvVar.CODE_API_KEY) ??
-        '';
-    if (!apiKey) {
-        throw new Error('No API key provided for tool search regex tool.');
+function createToolSearch(initParams = {}) {
+    const mode = initParams.mode ?? 'code_interpreter';
+    const defaultOnlyDeferred = initParams.onlyDeferred ?? true;
+    const schema = createToolSearchSchema(mode);
+    const apiKey = mode === 'code_interpreter'
+        ? (initParams[EnvVar.CODE_API_KEY] ??
+            initParams.apiKey ??
+            getEnvironmentVariable(EnvVar.CODE_API_KEY) ??
+            '')
+        : '';
+    if (mode === 'code_interpreter' && !apiKey) {
+        throw new Error('No API key provided for tool search in code_interpreter mode. Use mode: "local" to search without an API key.');
     }
     const baseEndpoint = initParams.baseUrl ?? getCodeBaseURL();
     const EXEC_ENDPOINT = `${baseEndpoint}/exec`;
-    const defaultOnlyDeferred = initParams.onlyDeferred ?? true;
-    const description = `
+    const description = mode === 'local'
+        ? `
+Searches through available tools to find ones matching your search term.
+
+Usage:
+- Provide a search term to find in tool names and descriptions.
+- Uses case-insensitive substring matching (fast and safe).
+- Use this when you need to discover tools for a specific task.
+- Results include tool names, match quality scores, and snippets showing where the match occurred.
+- Higher scores (0.95+) indicate name matches, medium scores (0.70+) indicate description matches.
+`.trim()
+        : `
 Searches through available tools to find ones matching your query pattern.
 
 Usage:
@@ -316,27 +399,19 @@ Usage:
 `.trim();
     return tool(async (params, config) => {
         const { query, fields = ['name', 'description'], max_results = 10, } = params;
-        // Extra params injected by ToolNode (follows web_search pattern)
         const { toolRegistry: paramToolRegistry, onlyDeferred: paramOnlyDeferred, } = config.toolCall ?? {};
-        const { safe: sanitizedPattern, wasEscaped } = sanitizeRegex(query);
-        let warningMessage = '';
-        if (wasEscaped) {
-            warningMessage =
-                'Note: The provided pattern was converted to a literal search for safety.\n\n';
-        }
-        // Priority: ToolNode injection (via config.toolCall) > initialization params
         const toolRegistry = paramToolRegistry ?? initParams.toolRegistry;
         const onlyDeferred = paramOnlyDeferred !== undefined
             ? paramOnlyDeferred
             : defaultOnlyDeferred;
         if (toolRegistry == null) {
             return [
-                `${warningMessage}Error: No tool registry provided. Configure toolRegistry at agent level or initialization.`,
+                'Error: No tool registry provided. Configure toolRegistry at agent level or initialization.',
                 {
                     tool_references: [],
                     metadata: {
                         total_searched: 0,
-                        pattern: sanitizedPattern,
+                        pattern: query,
                         error: 'No tool registry provided',
                     },
                 },
@@ -344,12 +419,7 @@ Usage:
         }
         const toolsArray = Array.from(toolRegistry.values());
         const deferredTools = toolsArray
-            .filter((lcTool) => {
-            if (onlyDeferred === true) {
-                return lcTool.defer_loading === true;
-            }
-            return true;
-        })
+            .filter((lcTool) => onlyDeferred === true ? lcTool.defer_loading === true : true)
             .map((lcTool) => ({
             name: lcTool.name,
             description: lcTool.description ?? '',
@@ -357,16 +427,33 @@ Usage:
         }));
         if (deferredTools.length === 0) {
             return [
-                `${warningMessage}No tools available to search. The tool registry is empty or no deferred tools are registered.`,
+                'No tools available to search. The tool registry is empty or no deferred tools are registered.',
                 {
                     tool_references: [],
+                    metadata: { total_searched: 0, pattern: query },
+                },
+            ];
+        }
+        if (mode === 'local') {
+            const searchResponse = performLocalSearch(deferredTools, query, fields, max_results);
+            const formattedOutput = formatSearchResults(searchResponse);
+            return [
+                formattedOutput,
+                {
+                    tool_references: searchResponse.tool_references,
                     metadata: {
-                        total_searched: 0,
-                        pattern: sanitizedPattern,
+                        total_searched: searchResponse.total_tools_searched,
+                        pattern: searchResponse.pattern_used,
                     },
                 },
             ];
         }
+        const { safe: sanitizedPattern, wasEscaped } = sanitizeRegex(query);
+        let warningMessage = '';
+        if (wasEscaped) {
+            warningMessage =
+                'Note: The provided pattern was converted to a literal search for safety.\n\n';
+        }
         const searchScript = generateSearchScript(deferredTools, fields, max_results, sanitizedPattern);
         const postData = {
             lang: 'js',
@@ -393,7 +480,7 @@ Usage:
             const result = await response.json();
             if (result.stderr && result.stderr.trim()) {
                 // eslint-disable-next-line no-console
-                console.warn('[ToolSearchRegex] stderr:', result.stderr);
+                console.warn('[ToolSearch] stderr:', result.stderr);
             }
             if (!result.stdout || !result.stdout.trim()) {
                 return [
@@ -422,7 +509,7 @@ Usage:
         }
         catch (error) {
             // eslint-disable-next-line no-console
-            console.error('[ToolSearchRegex] Error:', error);
+            console.error('[ToolSearch] Error:', error);
             const errorMessage = error instanceof Error ? error.message : String(error);
             return [
                 `Tool search failed: ${errorMessage}\n\nSuggestion: Try a simpler search pattern or search for specific tool names.`,
@@ -437,12 +524,12 @@ Usage:
             ];
         }
     }, {
-        name: Constants.TOOL_SEARCH_REGEX,
+        name: Constants.TOOL_SEARCH,
         description,
-        schema: ToolSearchRegexSchema,
+        schema,
         responseFormat: Constants.CONTENT_AND_ARTIFACT,
     });
 }
 
-export { countNestedGroups, createToolSearchRegexTool, escapeRegexSpecialChars, hasNestedQuantifiers, isDangerousPattern, sanitizeRegex };
-//# sourceMappingURL=ToolSearchRegex.mjs.map
+export { countNestedGroups, createToolSearch, escapeRegexSpecialChars, hasNestedQuantifiers, isDangerousPattern, performLocalSearch, sanitizeRegex };
+//# sourceMappingURL=ToolSearch.mjs.map

package/dist/esm/tools/ToolSearch.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"ToolSearch.mjs","sources":["../../../src/tools/ToolSearch.ts"],"sourcesContent":["// src/tools/ToolSearch.ts\nimport { z } from 'zod';\nimport { config } from 'dotenv';\nimport fetch, { RequestInit } from 'node-fetch';\nimport { HttpsProxyAgent } from 'https-proxy-agent';\nimport { getEnvironmentVariable } from '@langchain/core/utils/env';\nimport { tool, DynamicStructuredTool } from '@langchain/core/tools';\nimport type * as t from '@/types';\nimport { getCodeBaseURL } from './CodeExecutor';\nimport { EnvVar, Constants } from '@/common';\n\nconfig();\n\n/** Maximum allowed regex pattern length */\nconst MAX_PATTERN_LENGTH = 200;\n\n/** Maximum allowed regex nesting depth */\nconst MAX_REGEX_COMPLEXITY = 5;\n\n/** Default search timeout in milliseconds */\nconst SEARCH_TIMEOUT = 5000;\n\n/** Zod schema type for tool search parameters */\ntype ToolSearchSchema = z.ZodObject<{\n  query: z.ZodString;\n  fields: z.ZodDefault<\n    z.ZodOptional<z.ZodArray<z.ZodEnum<['name', 'description', 'parameters']>>>\n  >;\n  max_results: z.ZodDefault<z.ZodOptional<z.ZodNumber>>;\n}>;\n\n/**\n * Creates the Zod schema with dynamic query description based on mode.\n * @param mode - The search mode determining query interpretation\n * @returns Zod schema for tool search parameters\n */\nfunction createToolSearchSchema(mode: t.ToolSearchMode): ToolSearchSchema {\n  const queryDescription =\n    mode === 'local'\n      ? 'Search term to find in tool names and descriptions. Case-insensitive substring matching.'\n      : 'Regex pattern to search tool names and descriptions. Special regex characters will be sanitized for safety.';\n\n  return z.object({\n    query: z.string().min(1).max(MAX_PATTERN_LENGTH).describe(queryDescription),\n    fields: z\n      .array(z.enum(['name', 'description', 'parameters']))\n      .optional()\n      .default(['name', 'description'])\n      .describe('Which fields to search. Default: name and description'),\n    max_results: z\n      .number()\n      .int()\n      .min(1)\n      .max(50)\n      .optional()\n      .default(10)\n      .describe('Maximum number of matching tools to return'),\n  });\n}\n\n/**\n * Escapes special regex characters in a string to use as a literal pattern.\n * @param pattern - The string to escape\n * @returns The escaped string safe for use in a RegExp\n */\nfunction escapeRegexSpecialChars(pattern: string): string {\n  return pattern.replace(/[.*+?^${}()|[\\]\\\\]/g, '\\\\$&');\n}\n\n/**\n * Counts the maximum nesting depth of groups in a regex pattern.\n * @param pattern - The regex pattern to analyze\n * @returns The maximum nesting depth\n */\nfunction countNestedGroups(pattern: string): number {\n  let maxDepth = 0;\n  let currentDepth = 0;\n\n  for (let i = 0; i < pattern.length; i++) {\n    if (pattern[i] === '(' && (i === 0 || pattern[i - 1] !== '\\\\')) {\n      currentDepth++;\n      maxDepth = Math.max(maxDepth, currentDepth);\n    } else if (pattern[i] === ')' && (i === 0 || pattern[i - 1] !== '\\\\')) {\n      currentDepth = Math.max(0, currentDepth - 1);\n    }\n  }\n\n  return maxDepth;\n}\n\n/**\n * Detects nested quantifiers that can cause catastrophic backtracking.\n * Patterns like (a+)+, (a*)*, (a+)*, etc.\n * @param pattern - The regex pattern to check\n * @returns True if nested quantifiers are detected\n */\nfunction hasNestedQuantifiers(pattern: string): boolean {\n  const nestedQuantifierPattern = /\\([^)]*[+*][^)]*\\)[+*?]/;\n  return nestedQuantifierPattern.test(pattern);\n}\n\n/**\n * Checks if a regex pattern contains potentially dangerous constructs.\n * @param pattern - The regex pattern to validate\n * @returns True if the pattern is dangerous\n */\nfunction isDangerousPattern(pattern: string): boolean {\n  if (hasNestedQuantifiers(pattern)) {\n    return true;\n  }\n\n  if (countNestedGroups(pattern) > MAX_REGEX_COMPLEXITY) {\n    return true;\n  }\n\n  const dangerousPatterns = [\n    /\\.\\{1000,\\}/, // Excessive wildcards\n    /\\(\\?=\\.\\{100,\\}\\)/, // Runaway lookaheads\n    /\\([^)]*\\|\\s*\\){20,}/, // Excessive alternation (rough check)\n    /\\(\\.\\*\\)\\+/, // (.*)+\n    /\\(\\.\\+\\)\\+/, // (.+)+\n    /\\(\\.\\*\\)\\*/, // (.*)*\n    /\\(\\.\\+\\)\\*/, // (.+)*\n  ];\n\n  for (const dangerous of dangerousPatterns) {\n    if (dangerous.test(pattern)) {\n      return true;\n    }\n  }\n\n  return false;\n}\n\n/**\n * Sanitizes a regex pattern for safe execution.\n * If the pattern is dangerous, it will be escaped to a literal string search.\n * @param pattern - The regex pattern to sanitize\n * @returns Object containing the safe pattern and whether it was escaped\n */\nfunction sanitizeRegex(pattern: string): { safe: string; wasEscaped: boolean } {\n  if (isDangerousPattern(pattern)) {\n    return {\n      safe: escapeRegexSpecialChars(pattern),\n      wasEscaped: true,\n    };\n  }\n\n  try {\n    new RegExp(pattern);\n    return { safe: pattern, wasEscaped: false };\n  } catch {\n    return {\n      safe: escapeRegexSpecialChars(pattern),\n      wasEscaped: true,\n    };\n  }\n}\n\n/**\n * Simplifies tool parameters for search purposes.\n * Extracts only the essential structure needed for parameter name searching.\n * @param parameters - The tool's JSON schema parameters\n * @returns Simplified parameters object\n */\nfunction simplifyParametersForSearch(\n  parameters?: t.JsonSchemaType\n): t.JsonSchemaType | undefined {\n  if (!parameters) {\n    return undefined;\n  }\n\n  if (parameters.properties) {\n    return {\n      type: parameters.type,\n      properties: Object.fromEntries(\n        Object.entries(parameters.properties).map(([key, value]) => [\n          key,\n          { type: (value as t.JsonSchemaType).type },\n        ])\n      ),\n    } as t.JsonSchemaType;\n  }\n\n  return { type: parameters.type };\n}\n\n/**\n * Performs safe local substring search without regex.\n * Uses case-insensitive String.includes() for complete safety against ReDoS.\n * @param tools - Array of tool metadata to search\n * @param query - The search term (treated as literal substring)\n * @param fields - Which fields to search\n * @param maxResults - Maximum results to return\n * @returns Search response with matching tools\n */\nfunction performLocalSearch(\n  tools: t.ToolMetadata[],\n  query: string,\n  fields: string[],\n  maxResults: number\n): t.ToolSearchResponse {\n  const lowerQuery = query.toLowerCase();\n  const results: t.ToolSearchResult[] = [];\n\n  for (const tool of tools) {\n    let bestScore = 0;\n    let matchedField = '';\n    let snippet = '';\n\n    if (fields.includes('name')) {\n      const lowerName = tool.name.toLowerCase();\n      if (lowerName.includes(lowerQuery)) {\n        const isExactMatch = lowerName === lowerQuery;\n        const startsWithQuery = lowerName.startsWith(lowerQuery);\n        bestScore = isExactMatch ? 1.0 : startsWithQuery ? 0.95 : 0.85;\n        matchedField = 'name';\n        snippet = tool.name;\n      }\n    }\n\n    if (fields.includes('description') && tool.description) {\n      const lowerDesc = tool.description.toLowerCase();\n      if (lowerDesc.includes(lowerQuery) && bestScore === 0) {\n        bestScore = 0.7;\n        matchedField = 'description';\n        snippet = tool.description.substring(0, 100);\n      }\n    }\n\n    if (fields.includes('parameters') && tool.parameters?.properties) {\n      const paramNames = Object.keys(tool.parameters.properties)\n        .join(' ')\n        .toLowerCase();\n      if (paramNames.includes(lowerQuery) && bestScore === 0) {\n        bestScore = 0.55;\n        matchedField = 'parameters';\n        snippet = Object.keys(tool.parameters.properties).join(' ');\n      }\n    }\n\n    if (bestScore > 0) {\n      results.push({\n        tool_name: tool.name,\n        match_score: bestScore,\n        matched_field: matchedField,\n        snippet,\n      });\n    }\n  }\n\n  results.sort((a, b) => b.match_score - a.match_score);\n  const topResults = results.slice(0, maxResults);\n\n  return {\n    tool_references: topResults,\n    total_tools_searched: tools.length,\n    pattern_used: query,\n  };\n}\n\n/**\n * Generates the JavaScript search script to be executed in the sandbox.\n * Uses plain JavaScript for maximum compatibility with the Code API.\n * @param deferredTools - Array of tool metadata to search through\n * @param fields - Which fields to search\n * @param maxResults - Maximum number of results to return\n * @param sanitizedPattern - The sanitized regex pattern\n * @returns The JavaScript code string\n */\nfunction generateSearchScript(\n  deferredTools: t.ToolMetadata[],\n  fields: string[],\n  maxResults: number,\n  sanitizedPattern: string\n): string {\n  const lines = [\n    '// Tool definitions (injected)',\n    'var tools = ' + JSON.stringify(deferredTools) + ';',\n    'var searchFields = ' + JSON.stringify(fields) + ';',\n    'var maxResults = ' + maxResults + ';',\n    'var pattern = ' + JSON.stringify(sanitizedPattern) + ';',\n    '',\n    '// Compile regex (pattern is sanitized client-side)',\n    'var regex;',\n    'try {',\n    '  regex = new RegExp(pattern, \\'i\\');',\n    '} catch (e) {',\n    '  regex = new RegExp(pattern.replace(/[.*+?^${}()[\\\\]\\\\\\\\|]/g, \"\\\\\\\\$&\"), \"i\");',\n    '}',\n    '',\n    '// Search logic',\n    'var results = [];',\n    '',\n    'for (var j = 0; j < tools.length; j++) {',\n    '  var tool = tools[j];',\n    '  var bestScore = 0;',\n    '  var matchedField = \\'\\';',\n    '  var snippet = \\'\\';',\n    '',\n    '  // Search name (highest priority)',\n    '  if (searchFields.indexOf(\\'name\\') >= 0 && regex.test(tool.name)) {',\n    '    bestScore = 0.95;',\n    '    matchedField = \\'name\\';',\n    '    snippet = tool.name;',\n    '  }',\n    '',\n    '  // Search description (medium priority)',\n    '  if (searchFields.indexOf(\\'description\\') >= 0 && tool.description && regex.test(tool.description)) {',\n    '    if (bestScore === 0) {',\n    '      bestScore = 0.75;',\n    '      matchedField = \\'description\\';',\n    '      snippet = tool.description.substring(0, 100);',\n    '    }',\n    '  }',\n    '',\n    '  // Search parameter names (lower priority)',\n    '  if (searchFields.indexOf(\\'parameters\\') >= 0 && tool.parameters && tool.parameters.properties) {',\n    '    var paramNames = Object.keys(tool.parameters.properties).join(\\' \\');',\n    '    if (regex.test(paramNames)) {',\n    '      if (bestScore === 0) {',\n    '        bestScore = 0.60;',\n    '        matchedField = \\'parameters\\';',\n    '        snippet = paramNames;',\n    '      }',\n    '    }',\n    '  }',\n    '',\n    '  if (bestScore > 0) {',\n    '    results.push({',\n    '      tool_name: tool.name,',\n    '      match_score: bestScore,',\n    '      matched_field: matchedField,',\n    '      snippet: snippet',\n    '    });',\n    '  }',\n    '}',\n    '',\n    '// Sort by score (descending) and limit results',\n    'results.sort(function(a, b) { return b.match_score - a.match_score; });',\n    'var topResults = results.slice(0, maxResults);',\n    '',\n    '// Output as JSON',\n    'console.log(JSON.stringify({',\n    '  tool_references: topResults.map(function(r) {',\n    '    return {',\n    '      tool_name: r.tool_name,',\n    '      match_score: r.match_score,',\n    '      matched_field: r.matched_field,',\n    '      snippet: r.snippet',\n    '    };',\n    '  }),',\n    '  total_tools_searched: tools.length,',\n    '  pattern_used: pattern',\n    '}));',\n  ];\n  return lines.join('\\n');\n}\n\n/**\n * Parses the search results from stdout JSON.\n * @param stdout - The stdout string containing JSON results\n * @returns Parsed search response\n */\nfunction parseSearchResults(stdout: string): t.ToolSearchResponse {\n  const jsonMatch = stdout.trim();\n  const parsed = JSON.parse(jsonMatch) as t.ToolSearchResponse;\n  return parsed;\n}\n\n/**\n * Formats search results into a human-readable string.\n * @param searchResponse - The parsed search response\n * @returns Formatted string for LLM consumption\n */\nfunction formatSearchResults(searchResponse: t.ToolSearchResponse): string {\n  const { tool_references, total_tools_searched, pattern_used } =\n    searchResponse;\n\n  if (tool_references.length === 0) {\n    return `No tools matched the pattern \"${pattern_used}\".\\nTotal tools searched: ${total_tools_searched}`;\n  }\n\n  let response = `Found ${tool_references.length} matching tools:\\n\\n`;\n\n  for (const ref of tool_references) {\n    response += `- ${ref.tool_name} (score: ${ref.match_score.toFixed(2)})\\n`;\n    response += `  Matched in: ${ref.matched_field}\\n`;\n    response += `  Snippet: ${ref.snippet}\\n\\n`;\n  }\n\n  response += `Total tools searched: ${total_tools_searched}\\n`;\n  response += `Pattern used: ${pattern_used}`;\n\n  return response;\n}\n\n/**\n * Creates a Tool Search tool for discovering tools from a large registry.\n *\n * This tool enables AI agents to dynamically discover tools from a large library\n * without loading all tool definitions into the LLM context window. The agent\n * can search for relevant tools on-demand.\n *\n * **Modes:**\n * - `code_interpreter` (default): Uses external sandbox for regex search. Safer for complex patterns.\n * - `local`: Uses safe substring matching locally. No network call, faster, completely safe from ReDoS.\n *\n * The tool registry can be provided either:\n * 1. At initialization time via params.toolRegistry\n * 2. At runtime via config.configurable.toolRegistry when invoking\n *\n * @param params - Configuration parameters for the tool (toolRegistry is optional)\n * @returns A LangChain DynamicStructuredTool for tool searching\n *\n * @example\n * // Option 1: Code interpreter mode (regex via sandbox)\n * const tool = createToolSearch({ apiKey, toolRegistry });\n * await tool.invoke({ query: 'expense.*report' });\n *\n * @example\n * // Option 2: Local mode (safe substring search, no API key needed)\n * const tool = createToolSearch({ mode: 'local', toolRegistry });\n * await tool.invoke({ query: 'expense' });\n */\nfunction createToolSearch(\n  initParams: t.ToolSearchParams = {}\n): DynamicStructuredTool<ReturnType<typeof createToolSearchSchema>> {\n  const mode: t.ToolSearchMode = initParams.mode ?? 'code_interpreter';\n  const defaultOnlyDeferred = initParams.onlyDeferred ?? true;\n  const schema = createToolSearchSchema(mode);\n\n  const apiKey: string =\n    mode === 'code_interpreter'\n      ? ((initParams[EnvVar.CODE_API_KEY] as string | undefined) ??\n        initParams.apiKey ??\n        getEnvironmentVariable(EnvVar.CODE_API_KEY) ??\n        '')\n      : '';\n\n  if (mode === 'code_interpreter' && !apiKey) {\n    throw new Error(\n      'No API key provided for tool search in code_interpreter mode. Use mode: \"local\" to search without an API key.'\n    );\n  }\n\n  const baseEndpoint = initParams.baseUrl ?? getCodeBaseURL();\n  const EXEC_ENDPOINT = `${baseEndpoint}/exec`;\n\n  const description =\n    mode === 'local'\n      ? `\nSearches through available tools to find ones matching your search term.\n\nUsage:\n- Provide a search term to find in tool names and descriptions.\n- Uses case-insensitive substring matching (fast and safe).\n- Use this when you need to discover tools for a specific task.\n- Results include tool names, match quality scores, and snippets showing where the match occurred.\n- Higher scores (0.95+) indicate name matches, medium scores (0.70+) indicate description matches.\n`.trim()\n      : `\nSearches through available tools to find ones matching your query pattern.\n\nUsage:\n- Provide a regex pattern to search tool names and descriptions.\n- Use this when you need to discover tools for a specific task.\n- Results include tool names, match quality scores, and snippets showing where the match occurred.\n- Higher scores (0.9+) indicate name matches, medium scores (0.7+) indicate description matches.\n`.trim();\n\n  return tool<typeof schema>(\n    async (params, config) => {\n      const {\n        query,\n        fields = ['name', 'description'],\n        max_results = 10,\n      } = params;\n\n      const {\n        toolRegistry: paramToolRegistry,\n        onlyDeferred: paramOnlyDeferred,\n      } = config.toolCall ?? {};\n\n      const toolRegistry = paramToolRegistry ?? initParams.toolRegistry;\n      const onlyDeferred =\n        paramOnlyDeferred !== undefined\n          ? paramOnlyDeferred\n          : defaultOnlyDeferred;\n\n      if (toolRegistry == null) {\n        return [\n          'Error: No tool registry provided. Configure toolRegistry at agent level or initialization.',\n          {\n            tool_references: [],\n            metadata: {\n              total_searched: 0,\n              pattern: query,\n              error: 'No tool registry provided',\n            },\n          },\n        ];\n      }\n\n      const toolsArray: t.LCTool[] = Array.from(toolRegistry.values());\n      const deferredTools: t.ToolMetadata[] = toolsArray\n        .filter((lcTool) =>\n          onlyDeferred === true ? lcTool.defer_loading === true : true\n        )\n        .map((lcTool) => ({\n          name: lcTool.name,\n          description: lcTool.description ?? '',\n          parameters: simplifyParametersForSearch(lcTool.parameters),\n        }));\n\n      if (deferredTools.length === 0) {\n        return [\n          'No tools available to search. The tool registry is empty or no deferred tools are registered.',\n          {\n            tool_references: [],\n            metadata: { total_searched: 0, pattern: query },\n          },\n        ];\n      }\n\n      if (mode === 'local') {\n        const searchResponse = performLocalSearch(\n          deferredTools,\n          query,\n          fields,\n          max_results\n        );\n        const formattedOutput = formatSearchResults(searchResponse);\n\n        return [\n          formattedOutput,\n          {\n            tool_references: searchResponse.tool_references,\n            metadata: {\n              total_searched: searchResponse.total_tools_searched,\n              pattern: searchResponse.pattern_used,\n            },\n          },\n        ];\n      }\n\n      const { safe: sanitizedPattern, wasEscaped } = sanitizeRegex(query);\n      let warningMessage = '';\n      if (wasEscaped) {\n        warningMessage =\n          'Note: The provided pattern was converted to a literal search for safety.\\n\\n';\n      }\n\n      const searchScript = generateSearchScript(\n        deferredTools,\n        fields,\n        max_results,\n        sanitizedPattern\n      );\n\n      const postData = {\n        lang: 'js',\n        code: searchScript,\n        timeout: SEARCH_TIMEOUT,\n      };\n\n      try {\n        const fetchOptions: RequestInit = {\n          method: 'POST',\n          headers: {\n            'Content-Type': 'application/json',\n            'User-Agent': 'LibreChat/1.0',\n            'X-API-Key': apiKey,\n          },\n          body: JSON.stringify(postData),\n        };\n\n        if (process.env.PROXY != null && process.env.PROXY !== '') {\n          fetchOptions.agent = new HttpsProxyAgent(process.env.PROXY);\n        }\n\n        const response = await fetch(EXEC_ENDPOINT, fetchOptions);\n        if (!response.ok) {\n          throw new Error(`HTTP error! status: ${response.status}`);\n        }\n\n        const result: t.ExecuteResult = await response.json();\n\n        if (result.stderr && result.stderr.trim()) {\n          // eslint-disable-next-line no-console\n          console.warn('[ToolSearch] stderr:', result.stderr);\n        }\n\n        if (!result.stdout || !result.stdout.trim()) {\n          return [\n            `${warningMessage}No tools matched the pattern \"${sanitizedPattern}\".\\nTotal tools searched: ${deferredTools.length}`,\n            {\n              tool_references: [],\n              metadata: {\n                total_searched: deferredTools.length,\n                pattern: sanitizedPattern,\n              },\n            },\n          ];\n        }\n\n        const searchResponse = parseSearchResults(result.stdout);\n        const formattedOutput = `${warningMessage}${formatSearchResults(searchResponse)}`;\n\n        return [\n          formattedOutput,\n          {\n            tool_references: searchResponse.tool_references,\n            metadata: {\n              total_searched: searchResponse.total_tools_searched,\n              pattern: searchResponse.pattern_used,\n            },\n          },\n        ];\n      } catch (error) {\n        // eslint-disable-next-line no-console\n        console.error('[ToolSearch] Error:', error);\n\n        const errorMessage =\n          error instanceof Error ? error.message : String(error);\n        return [\n          `Tool search failed: ${errorMessage}\\n\\nSuggestion: Try a simpler search pattern or search for specific tool names.`,\n          {\n            tool_references: [],\n            metadata: {\n              total_searched: 0,\n              pattern: sanitizedPattern,\n              error: errorMessage,\n            },\n          },\n        ];\n      }\n    },\n    {\n      name: Constants.TOOL_SEARCH,\n      description,\n      schema,\n      responseFormat: Constants.CONTENT_AND_ARTIFACT,\n    }\n  );\n}\n\nexport {\n  createToolSearch,\n  performLocalSearch,\n  sanitizeRegex,\n  escapeRegexSpecialChars,\n  isDangerousPattern,\n  countNestedGroups,\n  hasNestedQuantifiers,\n};\n"],"names":[],"mappings":";;;;;;;;;AAAA;AAWA,MAAM,EAAE;AAER;AACA,MAAM,kBAAkB,GAAG,GAAG;AAE9B;AACA,MAAM,oBAAoB,GAAG,CAAC;AAE9B;AACA,MAAM,cAAc,GAAG,IAAI;AAW3B;;;;AAIG;AACH,SAAS,sBAAsB,CAAC,IAAsB,EAAA;AACpD,IAAA,MAAM,gBAAgB,GACpB,IAAI,KAAK;AACP,UAAE;UACA,6GAA6G;IAEnH,OAAO,CAAC,CAAC,MAAM,CAAC;AACd,QAAA,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC,QAAQ,CAAC,gBAAgB,CAAC;AAC3E,QAAA,MAAM,EAAE;AACL,aAAA,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,aAAa,EAAE,YAAY,CAAC,CAAC;AACnD,aAAA,QAAQ;AACR,aAAA,OAAO,CAAC,CAAC,MAAM,EAAE,aAAa,CAAC;aAC/B,QAAQ,CAAC,uDAAuD,CAAC;AACpE,QAAA,WAAW,EAAE;AACV,aAAA,MAAM;AACN,aAAA,GAAG;aACH,GAAG,CAAC,CAAC;aACL,GAAG,CAAC,EAAE;AACN,aAAA,QAAQ;aACR,OAAO,CAAC,EAAE;aACV,QAAQ,CAAC,4CAA4C,CAAC;AAC1D,KAAA,CAAC;AACJ;AAEA;;;;AAIG;AACH,SAAS,uBAAuB,CAAC,OAAe,EAAA;IAC9C,OAAO,OAAO,CAAC,OAAO,CAAC,qBAAqB,EAAE,MAAM,CAAC;AACvD;AAEA;;;;AAIG;AACH,SAAS,iBAAiB,CAAC,OAAe,EAAA;IACxC,IAAI,QAAQ,GAAG,CAAC;IAChB,IAAI,YAAY,GAAG,CAAC;AAEpB,IAAA,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE;QACvC,IAAI,OAAO,CAAC,CAAC,CAAC,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,IAAI,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,IAAI,CAAC,EAAE;AAC9D,YAAA,YAAY,EAAE;YACd,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,QAAQ,EAAE,YAAY,CAAC;;aACtC,IAAI,OAAO,CAAC,CAAC,CAAC,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,IAAI,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,IAAI,CAAC,EAAE;YACrE,YAAY,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,YAAY,GAAG,CAAC,CAAC;;;AAIhD,IAAA,OAAO,QAAQ;AACjB;AAEA;;;;;AAKG;AACH,SAAS,oBAAoB,CAAC,OAAe,EAAA;IAC3C,MAAM,uBAAuB,GAAG,yBAAyB;AACzD,IAAA,OAAO,uBAAuB,CAAC,IAAI,CAAC,OAAO,CAAC;AAC9C;AAEA;;;;AAIG;AACH,SAAS,kBAAkB,CAAC,OAAe,EAAA;AACzC,IAAA,IAAI,oBAAoB,CAAC,OAAO,CAAC,EAAE;AACjC,QAAA,OAAO,IAAI;;AAGb,IAAA,IAAI,iBAAiB,CAAC,OAAO,CAAC,GAAG,oBAAoB,EAAE;AACrD,QAAA,OAAO,IAAI;;AAGb,IAAA,MAAM,iBAAiB,GAAG;AACxB,QAAA,aAAa;AACb,QAAA,mBAAmB;AACnB,QAAA,qBAAqB;AACrB,QAAA,YAAY;AACZ,QAAA,YAAY;AACZ,QAAA,YAAY;AACZ,QAAA,YAAY;KACb;AAED,IAAA,KAAK,MAAM,SAAS,IAAI,iBAAiB,EAAE;AACzC,QAAA,IAAI,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE;AAC3B,YAAA,OAAO,IAAI;;;AAIf,IAAA,OAAO,KAAK;AACd;AAEA;;;;;AAKG;AACH,SAAS,aAAa,CAAC,OAAe,EAAA;AACpC,IAAA,IAAI,kBAAkB,CAAC,OAAO,CAAC,EAAE;QAC/B,OAAO;AACL,YAAA,IAAI,EAAE,uBAAuB,CAAC,OAAO,CAAC;AACtC,YAAA,UAAU,EAAE,IAAI;SACjB;;AAGH,IAAA,IAAI;AACF,QAAA,IAAI,MAAM,CAAC,OAAO,CAAC;QACnB,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,UAAU,EAAE,KAAK,EAAE;;AAC3C,IAAA,MAAM;QACN,OAAO;AACL,YAAA,IAAI,EAAE,uBAAuB,CAAC,OAAO,CAAC;AACtC,YAAA,UAAU,EAAE,IAAI;SACjB;;AAEL;AAEA;;;;;AAKG;AACH,SAAS,2BAA2B,CAClC,UAA6B,EAAA;IAE7B,IAAI,CAAC,UAAU,EAAE;AACf,QAAA,OAAO,SAAS;;AAGlB,IAAA,IAAI,UAAU,CAAC,UAAU,EAAE;QACzB,OAAO;YACL,IAAI,EAAE,UAAU,CAAC,IAAI;YACrB,UAAU,EAAE,MAAM,CAAC,WAAW,CAC5B,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,KAAK;gBAC1D,GAAG;AACH,gBAAA,EAAE,IAAI,EAAG,KAA0B,CAAC,IAAI,EAAE;AAC3C,aAAA,CAAC,CACH;SACkB;;AAGvB,IAAA,OAAO,EAAE,IAAI,EAAE,UAAU,CAAC,IAAI,EAAE;AAClC;AAEA;;;;;;;;AAQG;AACH,SAAS,kBAAkB,CACzB,KAAuB,EACvB,KAAa,EACb,MAAgB,EAChB,UAAkB,EAAA;AAElB,IAAA,MAAM,UAAU,GAAG,KAAK,CAAC,WAAW,EAAE;IACtC,MAAM,OAAO,GAAyB,EAAE;AAExC,IAAA,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE;QACxB,IAAI,SAAS,GAAG,CAAC;QACjB,IAAI,YAAY,GAAG,EAAE;QACrB,IAAI,OAAO,GAAG,EAAE;AAEhB,QAAA,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE;YAC3B,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE;AACzC,YAAA,IAAI,SAAS,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE;AAClC,gBAAA,MAAM,YAAY,GAAG,SAAS,KAAK,UAAU;gBAC7C,MAAM,eAAe,GAAG,SAAS,CAAC,UAAU,CAAC,UAAU,CAAC;AACxD,gBAAA,SAAS,GAAG,YAAY,GAAG,GAAG,GAAG,eAAe,GAAG,IAAI,GAAG,IAAI;gBAC9D,YAAY,GAAG,MAAM;AACrB,gBAAA,OAAO,GAAG,IAAI,CAAC,IAAI;;;QAIvB,IAAI,MAAM,CAAC,QAAQ,CAAC,aAAa,CAAC,IAAI,IAAI,CAAC,WAAW,EAAE;YACtD,MAAM,SAAS,GAAG,IAAI,CAAC,WAAW,CAAC,WAAW,EAAE;YAChD,IAAI,SAAS,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,SAAS,KAAK,CAAC,EAAE;gBACrD,SAAS,GAAG,GAAG;gBACf,YAAY,GAAG,aAAa;gBAC5B,OAAO,GAAG,IAAI,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC,EAAE,GAAG,CAAC;;;AAIhD,QAAA,IAAI,MAAM,CAAC,QAAQ,CAAC,YAAY,CAAC,IAAI,IAAI,CAAC,UAAU,EAAE,UAAU,EAAE;YAChE,MAAM,UAAU,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,UAAU;iBACtD,IAAI,CAAC,GAAG;AACR,iBAAA,WAAW,EAAE;YAChB,IAAI,UAAU,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,SAAS,KAAK,CAAC,EAAE;gBACtD,SAAS,GAAG,IAAI;gBAChB,YAAY,GAAG,YAAY;AAC3B,gBAAA,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC;;;AAI/D,QAAA,IAAI,SAAS,GAAG,CAAC,EAAE;YACjB,OAAO,CAAC,IAAI,CAAC;gBACX,SAAS,EAAE,IAAI,CAAC,IAAI;AACpB,gBAAA,WAAW,EAAE,SAAS;AACtB,gBAAA,aAAa,EAAE,YAAY;gBAC3B,OAAO;AACR,aAAA,CAAC;;;AAIN,IAAA,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,WAAW,GAAG,CAAC,CAAC,WAAW,CAAC;IACrD,MAAM,UAAU,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,UAAU,CAAC;IAE/C,OAAO;AACL,QAAA,eAAe,EAAE,UAAU;QAC3B,oBAAoB,EAAE,KAAK,CAAC,MAAM;AAClC,QAAA,YAAY,EAAE,KAAK;KACpB;AACH;AAEA;;;;;;;;AAQG;AACH,SAAS,oBAAoB,CAC3B,aAA+B,EAC/B,MAAgB,EAChB,UAAkB,EAClB,gBAAwB,EAAA;AAExB,IAAA,MAAM,KAAK,GAAG;QACZ,gCAAgC;QAChC,cAAc,GAAG,IAAI,CAAC,SAAS,CAAC,aAAa,CAAC,GAAG,GAAG;QACpD,qBAAqB,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,GAAG,GAAG;QACpD,mBAAmB,GAAG,UAAU,GAAG,GAAG;QACtC,gBAAgB,GAAG,IAAI,CAAC,SAAS,CAAC,gBAAgB,CAAC,GAAG,GAAG;QACzD,EAAE;QACF,qDAAqD;QACrD,YAAY;QACZ,OAAO;QACP,uCAAuC;QACvC,eAAe;QACf,iFAAiF;QACjF,GAAG;QACH,EAAE;QACF,iBAAiB;QACjB,mBAAmB;QACnB,EAAE;QACF,0CAA0C;QAC1C,wBAAwB;QACxB,sBAAsB;QACtB,4BAA4B;QAC5B,uBAAuB;QACvB,EAAE;QACF,qCAAqC;QACrC,uEAAuE;QACvE,uBAAuB;QACvB,8BAA8B;QAC9B,0BAA0B;QAC1B,KAAK;QACL,EAAE;QACF,2CAA2C;QAC3C,yGAAyG;QACzG,4BAA4B;QAC5B,yBAAyB;QACzB,uCAAuC;QACvC,qDAAqD;QACrD,OAAO;QACP,KAAK;QACL,EAAE;QACF,8CAA8C;QAC9C,qGAAqG;QACrG,2EAA2E;QAC3E,mCAAmC;QACnC,8BAA8B;QAC9B,2BAA2B;QAC3B,wCAAwC;QACxC,+BAA+B;QAC/B,SAAS;QACT,OAAO;QACP,KAAK;QACL,EAAE;QACF,wBAAwB;QACxB,oBAAoB;QACpB,6BAA6B;QAC7B,+BAA+B;QAC/B,oCAAoC;QACpC,wBAAwB;QACxB,SAAS;QACT,KAAK;QACL,GAAG;QACH,EAAE;QACF,iDAAiD;QACjD,yEAAyE;QACzE,gDAAgD;QAChD,EAAE;QACF,mBAAmB;QACnB,8BAA8B;QAC9B,iDAAiD;QACjD,cAAc;QACd,+BAA+B;QAC/B,mCAAmC;QACnC,uCAAuC;QACvC,0BAA0B;QAC1B,QAAQ;QACR,OAAO;QACP,uCAAuC;QACvC,yBAAyB;QACzB,MAAM;KACP;AACD,IAAA,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC;AACzB;AAEA;;;;AAIG;AACH,SAAS,kBAAkB,CAAC,MAAc,EAAA;AACxC,IAAA,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,EAAE;IAC/B,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,CAAyB;AAC5D,IAAA,OAAO,MAAM;AACf;AAEA;;;;AAIG;AACH,SAAS,mBAAmB,CAAC,cAAoC,EAAA;IAC/D,MAAM,EAAE,eAAe,EAAE,oBAAoB,EAAE,YAAY,EAAE,GAC3D,cAAc;AAEhB,IAAA,IAAI,eAAe,CAAC,MAAM,KAAK,CAAC,EAAE;AAChC,QAAA,OAAO,CAAiC,8BAAA,EAAA,YAAY,CAA6B,0BAAA,EAAA,oBAAoB,EAAE;;AAGzG,IAAA,IAAI,QAAQ,GAAG,CAAA,MAAA,EAAS,eAAe,CAAC,MAAM,sBAAsB;AAEpE,IAAA,KAAK,MAAM,GAAG,IAAI,eAAe,EAAE;AACjC,QAAA,QAAQ,IAAI,CAAA,EAAA,EAAK,GAAG,CAAC,SAAS,CAAY,SAAA,EAAA,GAAG,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK;AACzE,QAAA,QAAQ,IAAI,CAAiB,cAAA,EAAA,GAAG,CAAC,aAAa,IAAI;AAClD,QAAA,QAAQ,IAAI,CAAc,WAAA,EAAA,GAAG,CAAC,OAAO,MAAM;;AAG7C,IAAA,QAAQ,IAAI,CAAA,sBAAA,EAAyB,oBAAoB,CAAA,EAAA,CAAI;AAC7D,IAAA,QAAQ,IAAI,CAAA,cAAA,EAAiB,YAAY,CAAA,CAAE;AAE3C,IAAA,OAAO,QAAQ;AACjB;AAEA;;;;;;;;;;;;;;;;;;;;;;;;;;;AA2BG;AACH,SAAS,gBAAgB,CACvB,UAAA,GAAiC,EAAE,EAAA;AAEnC,IAAA,MAAM,IAAI,GAAqB,UAAU,CAAC,IAAI,IAAI,kBAAkB;AACpE,IAAA,MAAM,mBAAmB,GAAG,UAAU,CAAC,YAAY,IAAI,IAAI;AAC3D,IAAA,MAAM,MAAM,GAAG,sBAAsB,CAAC,IAAI,CAAC;AAE3C,IAAA,MAAM,MAAM,GACV,IAAI,KAAK;AACP,WAAI,UAAU,CAAC,MAAM,CAAC,YAAY,CAAwB;AACxD,YAAA,UAAU,CAAC,MAAM;AACjB,YAAA,sBAAsB,CAAC,MAAM,CAAC,YAAY,CAAC;AAC3C,YAAA,EAAE;UACF,EAAE;AAER,IAAA,IAAI,IAAI,KAAK,kBAAkB,IAAI,CAAC,MAAM,EAAE;AAC1C,QAAA,MAAM,IAAI,KAAK,CACb,+GAA+G,CAChH;;IAGH,MAAM,YAAY,GAAG,UAAU,CAAC,OAAO,IAAI,cAAc,EAAE;AAC3D,IAAA,MAAM,aAAa,GAAG,CAAG,EAAA,YAAY,OAAO;AAE5C,IAAA,MAAM,WAAW,GACf,IAAI,KAAK;AACP,UAAE;;;;;;;;;AASP,CAAA,CAAC,IAAI;AACA,UAAE;;;;;;;;CAQP,CAAC,IAAI,EAAE;IAEN,OAAO,IAAI,CACT,OAAO,MAAM,EAAE,MAAM,KAAI;AACvB,QAAA,MAAM,EACJ,KAAK,EACL,MAAM,GAAG,CAAC,MAAM,EAAE,aAAa,CAAC,EAChC,WAAW,GAAG,EAAE,GACjB,GAAG,MAAM;AAEV,QAAA,MAAM,EACJ,YAAY,EAAE,iBAAiB,EAC/B,YAAY,EAAE,iBAAiB,GAChC,GAAG,MAAM,CAAC,QAAQ,IAAI,EAAE;AAEzB,QAAA,MAAM,YAAY,GAAG,iBAAiB,IAAI,UAAU,CAAC,YAAY;AACjE,QAAA,MAAM,YAAY,GAChB,iBAAiB,KAAK;AACpB,cAAE;cACA,mBAAmB;AAEzB,QAAA,IAAI,YAAY,IAAI,IAAI,EAAE;YACxB,OAAO;gBACL,4FAA4F;AAC5F,gBAAA;AACE,oBAAA,eAAe,EAAE,EAAE;AACnB,oBAAA,QAAQ,EAAE;AACR,wBAAA,cAAc,EAAE,CAAC;AACjB,wBAAA,OAAO,EAAE,KAAK;AACd,wBAAA,KAAK,EAAE,2BAA2B;AACnC,qBAAA;AACF,iBAAA;aACF;;QAGH,MAAM,UAAU,GAAe,KAAK,CAAC,IAAI,CAAC,YAAY,CAAC,MAAM,EAAE,CAAC;QAChE,MAAM,aAAa,GAAqB;aACrC,MAAM,CAAC,CAAC,MAAM,KACb,YAAY,KAAK,IAAI,GAAG,MAAM,CAAC,aAAa,KAAK,IAAI,GAAG,IAAI;AAE7D,aAAA,GAAG,CAAC,CAAC,MAAM,MAAM;YAChB,IAAI,EAAE,MAAM,CAAC,IAAI;AACjB,YAAA,WAAW,EAAE,MAAM,CAAC,WAAW,IAAI,EAAE;AACrC,YAAA,UAAU,EAAE,2BAA2B,CAAC,MAAM,CAAC,UAAU,CAAC;AAC3D,SAAA,CAAC,CAAC;AAEL,QAAA,IAAI,aAAa,CAAC,MAAM,KAAK,CAAC,EAAE;YAC9B,OAAO;gBACL,+FAA+F;AAC/F,gBAAA;AACE,oBAAA,eAAe,EAAE,EAAE;oBACnB,QAAQ,EAAE,EAAE,cAAc,EAAE,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE;AAChD,iBAAA;aACF;;AAGH,QAAA,IAAI,IAAI,KAAK,OAAO,EAAE;AACpB,YAAA,MAAM,cAAc,GAAG,kBAAkB,CACvC,aAAa,EACb,KAAK,EACL,MAAM,EACN,WAAW,CACZ;AACD,YAAA,MAAM,eAAe,GAAG,mBAAmB,CAAC,cAAc,CAAC;YAE3D,OAAO;gBACL,eAAe;AACf,gBAAA;oBACE,eAAe,EAAE,cAAc,CAAC,eAAe;AAC/C,oBAAA,QAAQ,EAAE;wBACR,cAAc,EAAE,cAAc,CAAC,oBAAoB;wBACnD,OAAO,EAAE,cAAc,CAAC,YAAY;AACrC,qBAAA;AACF,iBAAA;aACF;;AAGH,QAAA,MAAM,EAAE,IAAI,EAAE,gBAAgB,EAAE,UAAU,EAAE,GAAG,aAAa,CAAC,KAAK,CAAC;QACnE,IAAI,cAAc,GAAG,EAAE;QACvB,IAAI,UAAU,EAAE;YACd,cAAc;AACZ,gBAAA,8EAA8E;;AAGlF,QAAA,MAAM,YAAY,GAAG,oBAAoB,CACvC,aAAa,EACb,MAAM,EACN,WAAW,EACX,gBAAgB,CACjB;AAED,QAAA,MAAM,QAAQ,GAAG;AACf,YAAA,IAAI,EAAE,IAAI;AACV,YAAA,IAAI,EAAE,YAAY;AAClB,YAAA,OAAO,EAAE,cAAc;SACxB;AAED,QAAA,IAAI;AACF,YAAA,MAAM,YAAY,GAAgB;AAChC,gBAAA,MAAM,EAAE,MAAM;AACd,gBAAA,OAAO,EAAE;AACP,oBAAA,cAAc,EAAE,kBAAkB;AAClC,oBAAA,YAAY,EAAE,eAAe;AAC7B,oBAAA,WAAW,EAAE,MAAM;AACpB,iBAAA;AACD,gBAAA,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC;aAC/B;AAED,YAAA,IAAI,OAAO,CAAC,GAAG,CAAC,KAAK,IAAI,IAAI,IAAI,OAAO,CAAC,GAAG,CAAC,KAAK,KAAK,EAAE,EAAE;AACzD,gBAAA,YAAY,CAAC,KAAK,GAAG,IAAI,eAAe,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC;;YAG7D,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,aAAa,EAAE,YAAY,CAAC;AACzD,YAAA,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE;gBAChB,MAAM,IAAI,KAAK,CAAC,CAAA,oBAAA,EAAuB,QAAQ,CAAC,MAAM,CAAE,CAAA,CAAC;;AAG3D,YAAA,MAAM,MAAM,GAAoB,MAAM,QAAQ,CAAC,IAAI,EAAE;YAErD,IAAI,MAAM,CAAC,MAAM,IAAI,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE;;gBAEzC,OAAO,CAAC,IAAI,CAAC,sBAAsB,EAAE,MAAM,CAAC,MAAM,CAAC;;AAGrD,YAAA,IAAI,CAAC,MAAM,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE;gBAC3C,OAAO;AACL,oBAAA,CAAA,EAAG,cAAc,CAAiC,8BAAA,EAAA,gBAAgB,6BAA6B,aAAa,CAAC,MAAM,CAAE,CAAA;AACrH,oBAAA;AACE,wBAAA,eAAe,EAAE,EAAE;AACnB,wBAAA,QAAQ,EAAE;4BACR,cAAc,EAAE,aAAa,CAAC,MAAM;AACpC,4BAAA,OAAO,EAAE,gBAAgB;AAC1B,yBAAA;AACF,qBAAA;iBACF;;YAGH,MAAM,cAAc,GAAG,kBAAkB,CAAC,MAAM,CAAC,MAAM,CAAC;YACxD,MAAM,eAAe,GAAG,CAAA,EAAG,cAAc,CAAA,EAAG,mBAAmB,CAAC,cAAc,CAAC,CAAA,CAAE;YAEjF,OAAO;gBACL,eAAe;AACf,gBAAA;oBACE,eAAe,EAAE,cAAc,CAAC,eAAe;AAC/C,oBAAA,QAAQ,EAAE;wBACR,cAAc,EAAE,cAAc,CAAC,oBAAoB;wBACnD,OAAO,EAAE,cAAc,CAAC,YAAY;AACrC,qBAAA;AACF,iBAAA;aACF;;QACD,OAAO,KAAK,EAAE;;AAEd,YAAA,OAAO,CAAC,KAAK,CAAC,qBAAqB,EAAE,KAAK,CAAC;AAE3C,YAAA,MAAM,YAAY,GAChB,KAAK,YAAY,KAAK,GAAG,KAAK,CAAC,OAAO,GAAG,MAAM,CAAC,KAAK,CAAC;YACxD,OAAO;AACL,gBAAA,CAAA,oBAAA,EAAuB,YAAY,CAAiF,+EAAA,CAAA;AACpH,gBAAA;AACE,oBAAA,eAAe,EAAE,EAAE;AACnB,oBAAA,QAAQ,EAAE;AACR,wBAAA,cAAc,EAAE,CAAC;AACjB,wBAAA,OAAO,EAAE,gBAAgB;AACzB,wBAAA,KAAK,EAAE,YAAY;AACpB,qBAAA;AACF,iBAAA;aACF;;AAEL,KAAC,EACD;QACE,IAAI,EAAE,SAAS,CAAC,WAAW;QAC3B,WAAW;QACX,MAAM;QACN,cAAc,EAAE,SAAS,CAAC,oBAAoB;AAC/C,KAAA,CACF;AACH;;;;"}

package/dist/types/common/enum.d.ts

@@ -114,7 +114,7 @@ export declare enum Callback {
 export declare enum Constants {
     OFFICIAL_CODE_BASEURL = "https://api.librechat.ai/v1",
     EXECUTE_CODE = "execute_code",
-    TOOL_SEARCH_REGEX = "tool_search_regex",
+    TOOL_SEARCH = "tool_search",
     PROGRAMMATIC_TOOL_CALLING = "run_tools_with_code",
     WEB_SEARCH = "web_search",
     CONTENT_AND_ARTIFACT = "content_and_artifact",

package/dist/types/index.d.ts

@@ -7,7 +7,7 @@ export * from './graphs';
 export * from './tools/Calculator';
 export * from './tools/CodeExecutor';
 export * from './tools/ProgrammaticToolCalling';
-export * from './tools/ToolSearchRegex';
+export * from './tools/ToolSearch';
 export * from './tools/handlers';
 export * from './tools/search';
 export * from './common';

package/dist/types/tools/{ToolSearchRegex.d.ts → ToolSearch.d.ts}

@@ -1,19 +1,18 @@
 import { z } from 'zod';
 import { DynamicStructuredTool } from '@langchain/core/tools';
 import type * as t from '@/types';
-declare const ToolSearchRegexSchema: z.ZodObject<{
+/** Zod schema type for tool search parameters */
+type ToolSearchSchema = z.ZodObject<{
     query: z.ZodString;
-    fields: z.ZodDefault<z.ZodOptional<z.ZodArray<z.ZodEnum<["name", "description", "parameters"]>, "many">>>;
+    fields: z.ZodDefault<z.ZodOptional<z.ZodArray<z.ZodEnum<['name', 'description', 'parameters']>>>>;
     max_results: z.ZodDefault<z.ZodOptional<z.ZodNumber>>;
-}, "strip", z.ZodTypeAny, {
-    query: string;
-    fields: ("name" | "description" | "parameters")[];
-    max_results: number;
-}, {
-    query: string;
-    fields?: ("name" | "description" | "parameters")[] | undefined;
-    max_results?: number | undefined;
 }>;
+/**
+ * Creates the Zod schema with dynamic query description based on mode.
+ * @param mode - The search mode determining query interpretation
+ * @returns Zod schema for tool search parameters
+ */
+declare function createToolSearchSchema(mode: t.ToolSearchMode): ToolSearchSchema;
 /**
  * Escapes special regex characters in a string to use as a literal pattern.
  * @param pattern - The string to escape
@@ -50,11 +49,25 @@ declare function sanitizeRegex(pattern: string): {
     wasEscaped: boolean;
 };
 /**
- * Creates a Tool Search Regex tool for discovering tools from a large registry.
+ * Performs safe local substring search without regex.
+ * Uses case-insensitive String.includes() for complete safety against ReDoS.
+ * @param tools - Array of tool metadata to search
+ * @param query - The search term (treated as literal substring)
+ * @param fields - Which fields to search
+ * @param maxResults - Maximum results to return
+ * @returns Search response with matching tools
+ */
+declare function performLocalSearch(tools: t.ToolMetadata[], query: string, fields: string[], maxResults: number): t.ToolSearchResponse;
+/**
+ * Creates a Tool Search tool for discovering tools from a large registry.
  *
  * This tool enables AI agents to dynamically discover tools from a large library
  * without loading all tool definitions into the LLM context window. The agent
- * can search for relevant tools on-demand using regex patterns.
+ * can search for relevant tools on-demand.
+ *
+ * **Modes:**
+ * - `code_interpreter` (default): Uses external sandbox for regex search. Safer for complex patterns.
+ * - `local`: Uses safe substring matching locally. No network call, faster, completely safe from ReDoS.
  *
  * The tool registry can be provided either:
  * 1. At initialization time via params.toolRegistry
@@ -64,17 +77,14 @@ declare function sanitizeRegex(pattern: string): {
  * @returns A LangChain DynamicStructuredTool for tool searching
  *
  * @example
- * // Option 1: Registry at initialization
- * const tool = createToolSearchRegexTool({ apiKey, toolRegistry });
- * await tool.invoke({ query: 'expense' });
+ * // Option 1: Code interpreter mode (regex via sandbox)
+ * const tool = createToolSearch({ apiKey, toolRegistry });
+ * await tool.invoke({ query: 'expense.*report' });
  *
  * @example
- * // Option 2: Registry at runtime
- * const tool = createToolSearchRegexTool({ apiKey });
- * await tool.invoke(
- *   { query: 'expense' },
- *   { configurable: { toolRegistry, onlyDeferred: true } }
- * );
+ * // Option 2: Local mode (safe substring search, no API key needed)
+ * const tool = createToolSearch({ mode: 'local', toolRegistry });
+ * await tool.invoke({ query: 'expense' });
  */
-declare function createToolSearchRegexTool(initParams?: t.ToolSearchRegexParams): DynamicStructuredTool<typeof ToolSearchRegexSchema>;
-export { createToolSearchRegexTool, sanitizeRegex, escapeRegexSpecialChars, isDangerousPattern, countNestedGroups, hasNestedQuantifiers, };
+declare function createToolSearch(initParams?: t.ToolSearchParams): DynamicStructuredTool<ReturnType<typeof createToolSearchSchema>>;
+export { createToolSearch, performLocalSearch, sanitizeRegex, escapeRegexSpecialChars, isDangerousPattern, countNestedGroups, hasNestedQuantifiers, };

package/dist/types/types/tools.d.ts

@@ -99,12 +99,16 @@ export type ProgrammaticCache = {
     toolMap: ToolMap;
     toolDefs: LCTool[];
 };
+/** Search mode: code_interpreter uses external sandbox, local uses safe substring matching */
+export type ToolSearchMode = 'code_interpreter' | 'local';
 /** Parameters for creating a Tool Search Regex tool */
-export type ToolSearchRegexParams = {
+export type ToolSearchParams = {
     apiKey?: string;
     toolRegistry?: LCToolRegistry;
     onlyDeferred?: boolean;
     baseUrl?: string;
+    /** Search mode: 'code_interpreter' (default) uses sandbox for regex, 'local' uses safe substring matching */
+    mode?: ToolSearchMode;
     [key: string]: unknown;
 };
 /** Simplified tool metadata for search purposes */

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@librechat/agents",
-  "version": "3.0.66",
+  "version": "3.0.67",
   "main": "./dist/cjs/main.cjs",
   "module": "./dist/esm/main.mjs",
   "types": "./dist/types/index.d.ts",
@@ -57,7 +57,7 @@
     "memory": "node -r dotenv/config --loader ./tsconfig-paths-bootstrap.mjs --experimental-specifier-resolution=node ./src/scripts/memory.ts --provider 'openAI' --name 'Jo' --location 'New York, NY'",
     "tool": "node --trace-warnings -r dotenv/config --loader ./tsconfig-paths-bootstrap.mjs --experimental-specifier-resolution=node ./src/scripts/tools.ts --provider 'openrouter' --name 'Jo' --location 'New York, NY'",
     "search": "node -r dotenv/config --loader ./tsconfig-paths-bootstrap.mjs --experimental-specifier-resolution=node ./src/scripts/search.ts --provider 'bedrock' --name 'Jo' --location 'New York, NY'",
-    "tool_search_regex": "node -r dotenv/config --loader ./tsconfig-paths-bootstrap.mjs --experimental-specifier-resolution=node ./src/scripts/tool_search_regex.ts",
+    "tool_search": "node -r dotenv/config --loader ./tsconfig-paths-bootstrap.mjs --experimental-specifier-resolution=node ./src/scripts/tool_search.ts",
     "programmatic_exec": "node -r dotenv/config --loader ./tsconfig-paths-bootstrap.mjs --experimental-specifier-resolution=node ./src/scripts/programmatic_exec.ts",
     "code_exec_ptc": "node -r dotenv/config --loader ./tsconfig-paths-bootstrap.mjs --experimental-specifier-resolution=node ./src/scripts/code_exec_ptc.ts --provider 'openAI' --name 'Jo' --location 'New York, NY'",
     "programmatic_exec_agent": "node -r dotenv/config --loader ./tsconfig-paths-bootstrap.mjs --experimental-specifier-resolution=node ./src/scripts/programmatic_exec_agent.ts --provider 'openAI' --name 'Jo' --location 'New York, NY'",

package/src/common/enum.ts

@@ -159,7 +159,7 @@ export enum Callback {
 export enum Constants {
   OFFICIAL_CODE_BASEURL = 'https://api.librechat.ai/v1',
   EXECUTE_CODE = 'execute_code',
-  TOOL_SEARCH_REGEX = 'tool_search_regex',
+  TOOL_SEARCH = 'tool_search',
   PROGRAMMATIC_TOOL_CALLING = 'run_tools_with_code',
   WEB_SEARCH = 'web_search',
   CONTENT_AND_ARTIFACT = 'content_and_artifact',

package/src/index.ts

@@ -12,7 +12,7 @@ export * from './graphs';
 export * from './tools/Calculator';
 export * from './tools/CodeExecutor';
 export * from './tools/ProgrammaticToolCalling';
-export * from './tools/ToolSearchRegex';
+export * from './tools/ToolSearch';
 export * from './tools/handlers';
 export * from './tools/search';