@librechat/agents 3.1.77 → 3.1.78

package/dist/cjs/tools/local/LocalProgrammaticToolCalling.cjs

@@ -0,0 +1,453 @@
+'use strict';
+
+var crypto = require('crypto');
+var http = require('http');
+var tools = require('@langchain/core/tools');
+var executeHooks = require('../../hooks/executeHooks.cjs');
+require('../../hooks/createWorkspacePolicyHook.cjs');
+var ProgrammaticToolCalling = require('../ProgrammaticToolCalling.cjs');
+var BashProgrammaticToolCalling = require('../BashProgrammaticToolCalling.cjs');
+var LocalExecutionEngine = require('./LocalExecutionEngine.cjs');
+var _enum = require('../../common/enum.cjs');
+
+const DEFAULT_TIMEOUT = 60000;
+const LocalProgrammaticToolCallingSchema = {
+    ...ProgrammaticToolCalling.ProgrammaticToolCallingSchema,
+    properties: {
+        ...ProgrammaticToolCalling.ProgrammaticToolCallingSchema.properties,
+        lang: {
+            type: 'string',
+            enum: ['py', 'python', 'bash', 'sh'],
+            default: 'bash',
+            description: 'Local engine runtime for orchestration code. Defaults to bash; use py/python for Python orchestration.',
+        },
+    },
+};
+const BRIDGE_AUTH_HEADER = 'x-librechat-bridge-token';
+function constantTimeEquals(a, b) {
+    const aBuf = Buffer.from(a, 'utf8');
+    const bBuf = Buffer.from(b, 'utf8');
+    if (aBuf.length !== bBuf.length) {
+        return false;
+    }
+    return crypto.timingSafeEqual(aBuf, bBuf);
+}
+function resolveRuntime(params) {
+    const rawRuntime = params.lang ?? params.runtime ?? params.language ?? 'bash';
+    return rawRuntime === 'py' || rawRuntime === 'python' ? 'python' : 'bash';
+}
+function toSerializable(value) {
+    if (value === undefined) {
+        return null;
+    }
+    return value;
+}
+async function readRequestBody(req) {
+    const chunks = [];
+    for await (const chunk of req) {
+        chunks.push(Buffer.isBuffer(chunk) ? chunk : Buffer.from(chunk));
+    }
+    const raw = Buffer.concat(chunks).toString('utf8');
+    if (raw === '') {
+        return {};
+    }
+    return JSON.parse(raw);
+}
+function writeJson(res, status, value) {
+    res.writeHead(status, { 'Content-Type': 'application/json' });
+    res.end(JSON.stringify(value));
+}
+/**
+ * Run the host's `PreToolUse` hook chain for a single bridge call.
+ * Returns the (possibly rewritten) input and a `denyReason` if any
+ * matcher returned `decision: 'deny'` or `'ask'`. `'ask'` collapses
+ * to deny because the bridge can't raise a LangGraph interrupt from
+ * inside an HTTP handler — fail-closed matches the rest of the SDK
+ * when HITL is unavailable.
+ *
+ * @internal Exported for tests so the deny / allow / updatedInput /
+ *   ask branches can be exercised without standing up the full HTTP
+ *   bridge.
+ */
+async function applyPreToolUseHooksForBridge(hookContext, toolName, toolUseId, toolInput) {
+    if (hookContext.registry == null) {
+        return { input: toolInput };
+    }
+    const result = await executeHooks.executeHooks({
+        registry: hookContext.registry,
+        input: {
+            hook_event_name: 'PreToolUse',
+            runId: hookContext.runId,
+            threadId: hookContext.threadId,
+            agentId: hookContext.agentId,
+            toolName,
+            toolInput,
+            toolUseId,
+            stepId: '',
+            turn: 0,
+        },
+        sessionId: hookContext.runId,
+        matchQuery: toolName,
+    }).catch(() => undefined);
+    if (result == null) {
+        return { input: toolInput };
+    }
+    const nextInput = result.updatedInput != null
+        ? result.updatedInput
+        : toolInput;
+    if (result.decision === 'deny' || result.decision === 'ask') {
+        return {
+            input: nextInput,
+            denyReason: result.reason ??
+                (result.decision === 'ask'
+                    ? `Tool "${toolName}" requires human approval; bridge cannot raise an interrupt — denying.`
+                    : `Tool "${toolName}" denied by PreToolUse hook.`),
+        };
+    }
+    return { input: nextInput };
+}
+async function createToolBridge(toolMap, hookContext) {
+    const token = crypto.randomBytes(32).toString('hex');
+    const server = http.createServer((req, res) => {
+        // `?mode=text` returns the already-serialized result as the body
+        // (or the error message at non-2xx). Python/Node callers stay on
+        // JSON; bash callers using curl can avoid pulling in a JSON
+        // parser dependency (Codex P2 #19 — `python3` was a hard
+        // requirement for the bash bridge, breaking minimal containers).
+        const url = new URL(req.url ?? '/', 'http://127.0.0.1');
+        const isTextMode = url.searchParams.get('mode') === 'text';
+        if (req.method !== 'POST' || url.pathname !== '/tool') {
+            if (isTextMode) {
+                res.writeHead(404, { 'Content-Type': 'text/plain' });
+                res.end('Not found');
+            }
+            else {
+                writeJson(res, 404, { error: 'Not found' });
+            }
+            return;
+        }
+        const presented = req.headers[BRIDGE_AUTH_HEADER];
+        const presentedToken = Array.isArray(presented) ? presented[0] : presented;
+        if (typeof presentedToken !== 'string' ||
+            !constantTimeEquals(presentedToken, token)) {
+            if (isTextMode) {
+                res.writeHead(401, { 'Content-Type': 'text/plain' });
+                res.end('Unauthorized');
+            }
+            else {
+                writeJson(res, 401, { error: 'Unauthorized' });
+            }
+            return;
+        }
+        readRequestBody(req)
+            .then(async (body) => {
+            if (typeof body.name !== 'string' || body.name === '') {
+                const message = 'Tool request is missing a tool name.';
+                if (isTextMode) {
+                    res.writeHead(400, { 'Content-Type': 'text/plain' });
+                    res.end(message);
+                }
+                else {
+                    writeJson(res, 400, {
+                        call_id: body.id ?? 'invalid',
+                        result: null,
+                        is_error: true,
+                        error_message: message,
+                    });
+                }
+                return;
+            }
+            const callId = body.id ?? `local_call_${crypto.randomUUID()}`;
+            let effectiveInput = body.input ?? {};
+            if (hookContext != null) {
+                const gate = await applyPreToolUseHooksForBridge(hookContext, body.name, callId, effectiveInput);
+                if (gate.denyReason != null) {
+                    const denyMsg = gate.denyReason;
+                    if (isTextMode) {
+                        res.writeHead(500, { 'Content-Type': 'text/plain' });
+                        res.end(denyMsg);
+                    }
+                    else {
+                        writeJson(res, 500, {
+                            call_id: callId,
+                            result: null,
+                            is_error: true,
+                            error_message: denyMsg,
+                        });
+                    }
+                    return;
+                }
+                effectiveInput = gate.input;
+            }
+            const [result] = await ProgrammaticToolCalling.executeTools([
+                {
+                    id: callId,
+                    name: body.name,
+                    input: effectiveInput,
+                },
+            ], toolMap);
+            if (isTextMode) {
+                if (result.is_error === true) {
+                    res.writeHead(500, { 'Content-Type': 'text/plain' });
+                    res.end(result.error_message ?? `Tool ${body.name} failed`);
+                }
+                else {
+                    const value = toSerializable(result.result);
+                    const text = typeof value === 'string' ? value : JSON.stringify(value);
+                    res.writeHead(200, { 'Content-Type': 'text/plain' });
+                    res.end(text);
+                }
+                return;
+            }
+            writeJson(res, 200, {
+                ...result,
+                result: toSerializable(result.result),
+            });
+        })
+            .catch((error) => {
+            if (isTextMode) {
+                res.writeHead(500, { 'Content-Type': 'text/plain' });
+                res.end(error.message);
+            }
+            else {
+                writeJson(res, 500, {
+                    call_id: 'error',
+                    result: null,
+                    is_error: true,
+                    error_message: error.message,
+                });
+            }
+        });
+    });
+    await new Promise((resolve, reject) => {
+        server.once('error', reject);
+        server.listen(0, '127.0.0.1', resolve);
+    });
+    const address = server.address();
+    return {
+        url: `http://127.0.0.1:${address.port}/tool`,
+        token,
+        close: () => new Promise((resolve, reject) => {
+            server.close((error) => (error ? reject(error) : resolve()));
+        }),
+    };
+}
+function indent(code) {
+    return code
+        .split('\n')
+        .map((line) => `  ${line}`)
+        .join('\n');
+}
+function createPythonProgram(code, toolDefs, bridgeUrl, bridgeToken) {
+    const functionDefs = toolDefs
+        .map((def) => {
+        const pythonName = ProgrammaticToolCalling.normalizeToPythonIdentifier(def.name);
+        return [
+            `async def ${pythonName}(**kwargs):`,
+            `  return await __librechat_call_tool(${JSON.stringify(def.name)}, kwargs)`,
+        ].join('\n');
+    })
+        .join('\n\n');
+    return `
+import asyncio
+import json
+import urllib.request
+
+__LIBRECHAT_TOOL_BRIDGE = ${JSON.stringify(bridgeUrl)}
+__LIBRECHAT_TOOL_TOKEN = ${JSON.stringify(bridgeToken)}
+
+async def __librechat_call_tool(name, payload):
+  body = json.dumps({"name": name, "input": payload}).encode("utf-8")
+  headers = {
+    "Content-Type": "application/json",
+    ${JSON.stringify(BRIDGE_AUTH_HEADER)}: __LIBRECHAT_TOOL_TOKEN,
+  }
+
+  def request():
+    req = urllib.request.Request(__LIBRECHAT_TOOL_BRIDGE, data=body, headers=headers, method="POST")
+    with urllib.request.urlopen(req, timeout=300) as response:
+      return response.read().decode("utf-8")
+
+  raw = await asyncio.to_thread(request)
+  result = json.loads(raw)
+  if result.get("is_error"):
+    raise RuntimeError(result.get("error_message") or f"Tool {name} failed")
+  return result.get("result")
+
+${functionDefs}
+
+async def __librechat_main():
+${indent(code)}
+
+asyncio.run(__librechat_main())
+`.trimStart();
+}
+function _createBashProgramForTests(code, toolDefs, bridgeUrl, bridgeToken) {
+    return createBashProgram(code, toolDefs, bridgeUrl, bridgeToken);
+}
+function createBashProgram(code, toolDefs, bridgeUrl, bridgeToken) {
+    const functions = toolDefs
+        .map((def) => {
+        const bashName = BashProgrammaticToolCalling.normalizeToBashIdentifier(def.name);
+        return [
+            `${bashName}() {`,
+            '  local payload="${1:-}"',
+            '  if [ -z "$payload" ]; then payload=\'{}\'; fi',
+            `  __librechat_call_tool ${LocalExecutionEngine.shellQuote(def.name)} "$payload"`,
+            '}',
+        ].join('\n');
+    })
+        .join('\n\n');
+    return `
+__LIBRECHAT_TOOL_BRIDGE=${LocalExecutionEngine.shellQuote(bridgeUrl)}
+__LIBRECHAT_TOOL_HEADER=${LocalExecutionEngine.shellQuote(BRIDGE_AUTH_HEADER)}
+__LIBRECHAT_TOOL_TOKEN=${LocalExecutionEngine.shellQuote(bridgeToken)}
+
+# Bridge call helper. Tries curl first (universally available, no
+# JSON parser needed thanks to the bridge's ?mode=text endpoint),
+# falls back to python3 for environments without curl. Codex P2 #19
+# flagged that the prior python3-only path broke minimal containers
+# (and Windows hosts without a python3 binary on PATH). Tool names
+# come from Constants.* and are always safe identifiers, so we can
+# splice them into JSON without an escape pass.
+__librechat_call_tool() {
+  local tool_name="$1"
+  local payload="$2"
+  if command -v curl >/dev/null 2>&1; then
+    local body="{\\"name\\":\\"$tool_name\\",\\"input\\":$payload}"
+    local response
+    local http_code
+    response=$(curl -sS -X POST \
+      -H "Content-Type: application/json" \
+      -H "$__LIBRECHAT_TOOL_HEADER: $__LIBRECHAT_TOOL_TOKEN" \
+      --data-binary "$body" \
+      -w '\\n__LIBRECHAT_HTTP_CODE_%{http_code}__' \
+      "$__LIBRECHAT_TOOL_BRIDGE?mode=text")
+    http_code=$(printf '%s' "$response" | sed -n 's/.*__LIBRECHAT_HTTP_CODE_\\([0-9][0-9]*\\)__$/\\1/p')
+    local body_only
+    body_only=$(printf '%s' "$response" | sed 's/__LIBRECHAT_HTTP_CODE_[0-9][0-9]*__$//')
+    if [ "$http_code" = "200" ]; then
+      printf '%s' "$body_only"
+      return 0
+    fi
+    printf '%s\\n' "$body_only" >&2
+    return 1
+  elif command -v python3 >/dev/null 2>&1; then
+    python3 - "$__LIBRECHAT_TOOL_BRIDGE" "$tool_name" "$payload" "$__LIBRECHAT_TOOL_HEADER" "$__LIBRECHAT_TOOL_TOKEN" <<'PY'
+import json
+import sys
+import urllib.request
+
+url, name, payload, header, token = sys.argv[1], sys.argv[2], sys.argv[3], sys.argv[4], sys.argv[5]
+body = json.dumps({"name": name, "input": json.loads(payload)}).encode("utf-8")
+req = urllib.request.Request(url, data=body, headers={"Content-Type": "application/json", header: token}, method="POST")
+with urllib.request.urlopen(req, timeout=300) as response:
+  result = json.loads(response.read().decode("utf-8"))
+if result.get("is_error"):
+  print(result.get("error_message") or f"Tool {name} failed", file=sys.stderr)
+  sys.exit(1)
+value = result.get("result")
+if isinstance(value, str):
+  print(value)
+else:
+  print(json.dumps(value))
+PY
+  else
+    printf 'librechat: tool bridge needs either curl or python3 on PATH\\n' >&2
+    return 1
+  fi
+}
+
+${functions}
+
+${code}
+`.trimStart();
+}
+function getProgrammaticContext(config) {
+    return (config?.toolCall ?? {});
+}
+function createEffectiveToolMap(toolMap, toolDefs, code, filterTools) {
+    const effectiveTools = filterTools(toolDefs, code);
+    const effectiveMap = new Map(effectiveTools
+        .map((def) => {
+        const executable = toolMap.get(def.name);
+        return executable == null
+            ? undefined
+            : [def.name, executable];
+    })
+        .filter((entry) => entry != null));
+    return { effectiveTools, effectiveMap };
+}
+async function runLocalProgrammaticTool(args) {
+    const { toolMap, toolDefs, hookContext } = getProgrammaticContext(args.config);
+    if (toolMap == null || toolMap.size === 0) {
+        throw new Error('No toolMap provided for local programmatic execution.');
+    }
+    if (toolDefs == null || toolDefs.length === 0) {
+        throw new Error('No tool definitions provided for local programmatic execution.');
+    }
+    const { effectiveTools, effectiveMap } = createEffectiveToolMap(toolMap, toolDefs, args.params.code, args.runtime === 'bash' ? BashProgrammaticToolCalling.filterBashToolsByUsage : ProgrammaticToolCalling.filterToolsByUsage);
+    const bridge = await createToolBridge(effectiveMap, hookContext);
+    try {
+        const timeoutMs = args.params.timeout ?? args.localConfig.timeoutMs ?? DEFAULT_TIMEOUT;
+        const result = args.runtime === 'bash'
+            ? await LocalExecutionEngine.executeLocalBash(createBashProgram(args.params.code, effectiveTools, bridge.url, bridge.token), { ...args.localConfig, timeoutMs })
+            : await LocalExecutionEngine.executeLocalCode({
+                lang: 'py',
+                code: createPythonProgram(args.params.code, effectiveTools, bridge.url, bridge.token),
+            }, { ...args.localConfig, timeoutMs });
+        if (result.exitCode !== 0 || result.timedOut) {
+            throw new Error(result.stderr !== ''
+                ? result.stderr
+                : `Local ${args.runtime} programmatic execution exited with code ${result.exitCode ?? 'unknown'}`);
+        }
+        return ProgrammaticToolCalling.formatCompletedResponse({
+            status: 'completed',
+            session_id: LocalExecutionEngine.getLocalSessionId(args.localConfig),
+            stdout: result.stdout,
+            stderr: result.stderr,
+            files: [],
+        });
+    }
+    finally {
+        await bridge.close();
+    }
+}
+function createLocalProgrammaticToolCallingTool(localConfig = {}) {
+    return tools.tool(async (rawParams, config) => {
+        const params = rawParams;
+        return runLocalProgrammaticTool({
+            params,
+            config,
+            localConfig,
+            runtime: resolveRuntime(params),
+        });
+    }, {
+        name: ProgrammaticToolCalling.ProgrammaticToolCallingName,
+        description: `${ProgrammaticToolCalling.ProgrammaticToolCallingDescription}\n\nLocal engine: runs bash by default, or Python when \`lang\` is \`py\` or \`python\`, on the host machine and calls tools through an in-process localhost bridge.`,
+        schema: LocalProgrammaticToolCallingSchema,
+        responseFormat: _enum.Constants.CONTENT_AND_ARTIFACT,
+    });
+}
+function createLocalBashProgrammaticToolCallingTool(localConfig = {}) {
+    return tools.tool(async (rawParams, config) => {
+        const params = rawParams;
+        return runLocalProgrammaticTool({
+            params,
+            config,
+            localConfig,
+            runtime: 'bash',
+        });
+    }, {
+        name: _enum.Constants.BASH_PROGRAMMATIC_TOOL_CALLING,
+        description: `${BashProgrammaticToolCalling.BashProgrammaticToolCallingDescription}\n\nLocal engine: runs this bash orchestration code on the host machine and calls tools through an in-process localhost bridge.`,
+        schema: BashProgrammaticToolCalling.BashProgrammaticToolCallingSchema,
+        responseFormat: _enum.Constants.CONTENT_AND_ARTIFACT,
+    });
+}
+
+exports._createBashProgramForTests = _createBashProgramForTests;
+exports.applyPreToolUseHooksForBridge = applyPreToolUseHooksForBridge;
+exports.createLocalBashProgrammaticToolCallingTool = createLocalBashProgrammaticToolCallingTool;
+exports.createLocalProgrammaticToolCallingTool = createLocalProgrammaticToolCallingTool;
+//# sourceMappingURL=LocalProgrammaticToolCalling.cjs.map

package/dist/cjs/tools/local/LocalProgrammaticToolCalling.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"LocalProgrammaticToolCalling.cjs","sources":["../../../../src/tools/local/LocalProgrammaticToolCalling.ts"],"sourcesContent":["import { randomBytes, randomUUID, timingSafeEqual } from 'crypto';\nimport { createServer } from 'http';\nimport { tool } from '@langchain/core/tools';\nimport type { AddressInfo } from 'net';\nimport type { IncomingMessage, ServerResponse } from 'http';\nimport type { DynamicStructuredTool } from '@langchain/core/tools';\nimport type * as t from '@/types';\nimport { executeHooks } from '@/hooks';\nimport {\n  executeTools,\n  filterToolsByUsage,\n  formatCompletedResponse,\n  normalizeToPythonIdentifier,\n  ProgrammaticToolCallingName,\n  ProgrammaticToolCallingSchema,\n  ProgrammaticToolCallingDescription,\n} from '@/tools/ProgrammaticToolCalling';\nimport {\n  BashProgrammaticToolCallingSchema,\n  BashProgrammaticToolCallingDescription,\n  filterBashToolsByUsage,\n  normalizeToBashIdentifier,\n} from '@/tools/BashProgrammaticToolCalling';\nimport {\n  executeLocalBash,\n  executeLocalCode,\n  getLocalSessionId,\n  shellQuote,\n} from './LocalExecutionEngine';\nimport { Constants } from '@/common';\n\nconst DEFAULT_TIMEOUT = 60000;\nconst LocalProgrammaticToolCallingSchema = {\n  ...ProgrammaticToolCallingSchema,\n  properties: {\n    ...ProgrammaticToolCallingSchema.properties,\n    lang: {\n      type: 'string',\n      enum: ['py', 'python', 'bash', 'sh'],\n      default: 'bash',\n      description:\n        'Local engine runtime for orchestration code. Defaults to bash; use py/python for Python orchestration.',\n    },\n  },\n} as const;\n\ntype ToolBridge = {\n  url: string;\n  token: string;\n  close: () => Promise<void>;\n};\n\ntype ToolRequest = {\n  id?: string;\n  name?: string;\n  input?: Record<string, unknown>;\n};\n\nconst BRIDGE_AUTH_HEADER = 'x-librechat-bridge-token';\n\nfunction constantTimeEquals(a: string, b: string): boolean {\n  const aBuf = Buffer.from(a, 'utf8');\n  const bBuf = Buffer.from(b, 'utf8');\n  if (aBuf.length !== bBuf.length) {\n    return false;\n  }\n  return timingSafeEqual(aBuf, bBuf);\n}\n\ntype LocalProgrammaticRuntime = 'python' | 'bash';\n\ntype LocalProgrammaticParams = {\n  code: string;\n  timeout?: number;\n  lang?: string;\n  runtime?: string;\n  language?: string;\n};\n\ntype ToolFilter = (toolDefs: t.LCTool[], code: string) => t.LCTool[];\n\nfunction resolveRuntime(params: LocalProgrammaticParams): LocalProgrammaticRuntime {\n  const rawRuntime = params.lang ?? params.runtime ?? params.language ?? 'bash';\n  return rawRuntime === 'py' || rawRuntime === 'python' ? 'python' : 'bash';\n}\n\nfunction toSerializable(value: unknown): unknown {\n  if (value === undefined) {\n    return null;\n  }\n  return value;\n}\n\nasync function readRequestBody(req: IncomingMessage): Promise<ToolRequest> {\n  const chunks: Buffer[] = [];\n  for await (const chunk of req) {\n    chunks.push(Buffer.isBuffer(chunk) ? chunk : Buffer.from(chunk));\n  }\n  const raw = Buffer.concat(chunks).toString('utf8');\n  if (raw === '') {\n    return {};\n  }\n  return JSON.parse(raw) as ToolRequest;\n}\n\nfunction writeJson(res: ServerResponse, status: number, value: unknown): void {\n  res.writeHead(status, { 'Content-Type': 'application/json' });\n  res.end(JSON.stringify(value));\n}\n\n/**\n * Run the host's `PreToolUse` hook chain for a single bridge call.\n * Returns the (possibly rewritten) input and a `denyReason` if any\n * matcher returned `decision: 'deny'` or `'ask'`. `'ask'` collapses\n * to deny because the bridge can't raise a LangGraph interrupt from\n * inside an HTTP handler — fail-closed matches the rest of the SDK\n * when HITL is unavailable.\n *\n * @internal Exported for tests so the deny / allow / updatedInput /\n *   ask branches can be exercised without standing up the full HTTP\n *   bridge.\n */\nexport async function applyPreToolUseHooksForBridge(\n  hookContext: t.ProgrammaticHookContext,\n  toolName: string,\n  toolUseId: string,\n  toolInput: Record<string, unknown>\n): Promise<{ input: Record<string, unknown>; denyReason?: string }> {\n  if (hookContext.registry == null) {\n    return { input: toolInput };\n  }\n  const result = await executeHooks({\n    registry: hookContext.registry,\n    input: {\n      hook_event_name: 'PreToolUse',\n      runId: hookContext.runId,\n      threadId: hookContext.threadId,\n      agentId: hookContext.agentId,\n      toolName,\n      toolInput,\n      toolUseId,\n      stepId: '',\n      turn: 0,\n    },\n    sessionId: hookContext.runId,\n    matchQuery: toolName,\n  }).catch(() => undefined);\n  if (result == null) {\n    return { input: toolInput };\n  }\n  const nextInput =\n    result.updatedInput != null\n      ? (result.updatedInput as Record<string, unknown>)\n      : toolInput;\n  if (result.decision === 'deny' || result.decision === 'ask') {\n    return {\n      input: nextInput,\n      denyReason:\n        result.reason ??\n        (result.decision === 'ask'\n          ? `Tool \"${toolName}\" requires human approval; bridge cannot raise an interrupt — denying.`\n          : `Tool \"${toolName}\" denied by PreToolUse hook.`),\n    };\n  }\n  return { input: nextInput };\n}\n\nasync function createToolBridge(\n  toolMap: t.ToolMap,\n  hookContext?: t.ProgrammaticHookContext\n): Promise<ToolBridge> {\n  const token = randomBytes(32).toString('hex');\n  const server = createServer((req, res) => {\n    // `?mode=text` returns the already-serialized result as the body\n    // (or the error message at non-2xx). Python/Node callers stay on\n    // JSON; bash callers using curl can avoid pulling in a JSON\n    // parser dependency (Codex P2 #19 — `python3` was a hard\n    // requirement for the bash bridge, breaking minimal containers).\n    const url = new URL(req.url ?? '/', 'http://127.0.0.1');\n    const isTextMode = url.searchParams.get('mode') === 'text';\n    if (req.method !== 'POST' || url.pathname !== '/tool') {\n      if (isTextMode) {\n        res.writeHead(404, { 'Content-Type': 'text/plain' });\n        res.end('Not found');\n      } else {\n        writeJson(res, 404, { error: 'Not found' });\n      }\n      return;\n    }\n\n    const presented = req.headers[BRIDGE_AUTH_HEADER];\n    const presentedToken = Array.isArray(presented) ? presented[0] : presented;\n    if (\n      typeof presentedToken !== 'string' ||\n      !constantTimeEquals(presentedToken, token)\n    ) {\n      if (isTextMode) {\n        res.writeHead(401, { 'Content-Type': 'text/plain' });\n        res.end('Unauthorized');\n      } else {\n        writeJson(res, 401, { error: 'Unauthorized' });\n      }\n      return;\n    }\n\n    readRequestBody(req)\n      .then(async (body) => {\n        if (typeof body.name !== 'string' || body.name === '') {\n          const message = 'Tool request is missing a tool name.';\n          if (isTextMode) {\n            res.writeHead(400, { 'Content-Type': 'text/plain' });\n            res.end(message);\n          } else {\n            writeJson(res, 400, {\n              call_id: body.id ?? 'invalid',\n              result: null,\n              is_error: true,\n              error_message: message,\n            });\n          }\n          return;\n        }\n\n        const callId = body.id ?? `local_call_${randomUUID()}`;\n        let effectiveInput: Record<string, unknown> = body.input ?? {};\n        if (hookContext != null) {\n          const gate = await applyPreToolUseHooksForBridge(\n            hookContext,\n            body.name,\n            callId,\n            effectiveInput\n          );\n          if (gate.denyReason != null) {\n            const denyMsg = gate.denyReason;\n            if (isTextMode) {\n              res.writeHead(500, { 'Content-Type': 'text/plain' });\n              res.end(denyMsg);\n            } else {\n              writeJson(res, 500, {\n                call_id: callId,\n                result: null,\n                is_error: true,\n                error_message: denyMsg,\n              });\n            }\n            return;\n          }\n          effectiveInput = gate.input;\n        }\n\n        const [result] = await executeTools(\n          [\n            {\n              id: callId,\n              name: body.name,\n              input: effectiveInput,\n            },\n          ],\n          toolMap\n        );\n\n        if (isTextMode) {\n          if (result.is_error === true) {\n            res.writeHead(500, { 'Content-Type': 'text/plain' });\n            res.end(result.error_message ?? `Tool ${body.name} failed`);\n          } else {\n            const value = toSerializable(result.result);\n            const text =\n              typeof value === 'string' ? value : JSON.stringify(value);\n            res.writeHead(200, { 'Content-Type': 'text/plain' });\n            res.end(text);\n          }\n          return;\n        }\n\n        writeJson(res, 200, {\n          ...result,\n          result: toSerializable(result.result),\n        });\n      })\n      .catch((error: Error) => {\n        if (isTextMode) {\n          res.writeHead(500, { 'Content-Type': 'text/plain' });\n          res.end(error.message);\n        } else {\n          writeJson(res, 500, {\n            call_id: 'error',\n            result: null,\n            is_error: true,\n            error_message: error.message,\n          });\n        }\n      });\n  });\n\n  await new Promise<void>((resolve, reject) => {\n    server.once('error', reject);\n    server.listen(0, '127.0.0.1', resolve);\n  });\n\n  const address = server.address() as AddressInfo;\n  return {\n    url: `http://127.0.0.1:${address.port}/tool`,\n    token,\n    close: () =>\n      new Promise((resolve, reject) => {\n        server.close((error) => (error ? reject(error) : resolve()));\n      }),\n  };\n}\n\nfunction indent(code: string): string {\n  return code\n    .split('\\n')\n    .map((line) => `  ${line}`)\n    .join('\\n');\n}\n\nfunction createPythonProgram(\n  code: string,\n  toolDefs: t.LCTool[],\n  bridgeUrl: string,\n  bridgeToken: string\n): string {\n  const functionDefs = toolDefs\n    .map((def) => {\n      const pythonName = normalizeToPythonIdentifier(def.name);\n      return [\n        `async def ${pythonName}(**kwargs):`,\n        `  return await __librechat_call_tool(${JSON.stringify(def.name)}, kwargs)`,\n      ].join('\\n');\n    })\n    .join('\\n\\n');\n\n  return `\nimport asyncio\nimport json\nimport urllib.request\n\n__LIBRECHAT_TOOL_BRIDGE = ${JSON.stringify(bridgeUrl)}\n__LIBRECHAT_TOOL_TOKEN = ${JSON.stringify(bridgeToken)}\n\nasync def __librechat_call_tool(name, payload):\n  body = json.dumps({\"name\": name, \"input\": payload}).encode(\"utf-8\")\n  headers = {\n    \"Content-Type\": \"application/json\",\n    ${JSON.stringify(BRIDGE_AUTH_HEADER)}: __LIBRECHAT_TOOL_TOKEN,\n  }\n\n  def request():\n    req = urllib.request.Request(__LIBRECHAT_TOOL_BRIDGE, data=body, headers=headers, method=\"POST\")\n    with urllib.request.urlopen(req, timeout=300) as response:\n      return response.read().decode(\"utf-8\")\n\n  raw = await asyncio.to_thread(request)\n  result = json.loads(raw)\n  if result.get(\"is_error\"):\n    raise RuntimeError(result.get(\"error_message\") or f\"Tool {name} failed\")\n  return result.get(\"result\")\n\n${functionDefs}\n\nasync def __librechat_main():\n${indent(code)}\n\nasyncio.run(__librechat_main())\n`.trimStart();\n}\n\nexport function _createBashProgramForTests(\n  code: string,\n  toolDefs: t.LCTool[],\n  bridgeUrl: string,\n  bridgeToken: string\n): string {\n  return createBashProgram(code, toolDefs, bridgeUrl, bridgeToken);\n}\n\nfunction createBashProgram(\n  code: string,\n  toolDefs: t.LCTool[],\n  bridgeUrl: string,\n  bridgeToken: string\n): string {\n  const functions = toolDefs\n    .map((def) => {\n      const bashName = normalizeToBashIdentifier(def.name);\n      return [\n        `${bashName}() {`,\n        '  local payload=\"${1:-}\"',\n        '  if [ -z \"$payload\" ]; then payload=\\'{}\\'; fi',\n        `  __librechat_call_tool ${shellQuote(def.name)} \"$payload\"`,\n        '}',\n      ].join('\\n');\n    })\n    .join('\\n\\n');\n\n  return `\n__LIBRECHAT_TOOL_BRIDGE=${shellQuote(bridgeUrl)}\n__LIBRECHAT_TOOL_HEADER=${shellQuote(BRIDGE_AUTH_HEADER)}\n__LIBRECHAT_TOOL_TOKEN=${shellQuote(bridgeToken)}\n\n# Bridge call helper. Tries curl first (universally available, no\n# JSON parser needed thanks to the bridge's ?mode=text endpoint),\n# falls back to python3 for environments without curl. Codex P2 #19\n# flagged that the prior python3-only path broke minimal containers\n# (and Windows hosts without a python3 binary on PATH). Tool names\n# come from Constants.* and are always safe identifiers, so we can\n# splice them into JSON without an escape pass.\n__librechat_call_tool() {\n  local tool_name=\"$1\"\n  local payload=\"$2\"\n  if command -v curl >/dev/null 2>&1; then\n    local body=\"{\\\\\"name\\\\\":\\\\\"$tool_name\\\\\",\\\\\"input\\\\\":$payload}\"\n    local response\n    local http_code\n    response=$(curl -sS -X POST \\\n      -H \"Content-Type: application/json\" \\\n      -H \"$__LIBRECHAT_TOOL_HEADER: $__LIBRECHAT_TOOL_TOKEN\" \\\n      --data-binary \"$body\" \\\n      -w '\\\\n__LIBRECHAT_HTTP_CODE_%{http_code}__' \\\n      \"$__LIBRECHAT_TOOL_BRIDGE?mode=text\")\n    http_code=$(printf '%s' \"$response\" | sed -n 's/.*__LIBRECHAT_HTTP_CODE_\\\\([0-9][0-9]*\\\\)__$/\\\\1/p')\n    local body_only\n    body_only=$(printf '%s' \"$response\" | sed 's/__LIBRECHAT_HTTP_CODE_[0-9][0-9]*__$//')\n    if [ \"$http_code\" = \"200\" ]; then\n      printf '%s' \"$body_only\"\n      return 0\n    fi\n    printf '%s\\\\n' \"$body_only\" >&2\n    return 1\n  elif command -v python3 >/dev/null 2>&1; then\n    python3 - \"$__LIBRECHAT_TOOL_BRIDGE\" \"$tool_name\" \"$payload\" \"$__LIBRECHAT_TOOL_HEADER\" \"$__LIBRECHAT_TOOL_TOKEN\" <<'PY'\nimport json\nimport sys\nimport urllib.request\n\nurl, name, payload, header, token = sys.argv[1], sys.argv[2], sys.argv[3], sys.argv[4], sys.argv[5]\nbody = json.dumps({\"name\": name, \"input\": json.loads(payload)}).encode(\"utf-8\")\nreq = urllib.request.Request(url, data=body, headers={\"Content-Type\": \"application/json\", header: token}, method=\"POST\")\nwith urllib.request.urlopen(req, timeout=300) as response:\n  result = json.loads(response.read().decode(\"utf-8\"))\nif result.get(\"is_error\"):\n  print(result.get(\"error_message\") or f\"Tool {name} failed\", file=sys.stderr)\n  sys.exit(1)\nvalue = result.get(\"result\")\nif isinstance(value, str):\n  print(value)\nelse:\n  print(json.dumps(value))\nPY\n  else\n    printf 'librechat: tool bridge needs either curl or python3 on PATH\\\\n' >&2\n    return 1\n  fi\n}\n\n${functions}\n\n${code}\n`.trimStart();\n}\n\nfunction getProgrammaticContext(config?: {\n  toolCall?: unknown;\n}): Partial<t.ProgrammaticCache> {\n  return (config?.toolCall ?? {}) as Partial<t.ProgrammaticCache>;\n}\n\nfunction createEffectiveToolMap(\n  toolMap: t.ToolMap,\n  toolDefs: t.LCTool[],\n  code: string,\n  filterTools: ToolFilter\n): { effectiveTools: t.LCTool[]; effectiveMap: t.ToolMap } {\n  const effectiveTools = filterTools(toolDefs, code);\n  const effectiveMap = new Map<string, t.GenericTool>(\n    effectiveTools\n      .map((def) => {\n        const executable = toolMap.get(def.name);\n        return executable == null\n          ? undefined\n          : ([def.name, executable] as [string, t.GenericTool]);\n      })\n      .filter((entry): entry is [string, t.GenericTool] => entry != null)\n  );\n\n  return { effectiveTools, effectiveMap };\n}\n\nasync function runLocalProgrammaticTool(args: {\n  params: LocalProgrammaticParams;\n  config?: { toolCall?: unknown };\n  localConfig: t.LocalExecutionConfig;\n  runtime: LocalProgrammaticRuntime;\n}): Promise<[string, t.ProgrammaticExecutionArtifact]> {\n  const { toolMap, toolDefs, hookContext } = getProgrammaticContext(args.config);\n\n  if (toolMap == null || toolMap.size === 0) {\n    throw new Error('No toolMap provided for local programmatic execution.');\n  }\n  if (toolDefs == null || toolDefs.length === 0) {\n    throw new Error('No tool definitions provided for local programmatic execution.');\n  }\n\n  const { effectiveTools, effectiveMap } = createEffectiveToolMap(\n    toolMap,\n    toolDefs,\n    args.params.code,\n    args.runtime === 'bash' ? filterBashToolsByUsage : filterToolsByUsage\n  );\n  const bridge = await createToolBridge(effectiveMap, hookContext);\n\n  try {\n    const timeoutMs = args.params.timeout ?? args.localConfig.timeoutMs ?? DEFAULT_TIMEOUT;\n    const result =\n      args.runtime === 'bash'\n        ? await executeLocalBash(\n          createBashProgram(args.params.code, effectiveTools, bridge.url, bridge.token),\n          { ...args.localConfig, timeoutMs }\n        )\n        : await executeLocalCode(\n          {\n            lang: 'py',\n            code: createPythonProgram(args.params.code, effectiveTools, bridge.url, bridge.token),\n          },\n          { ...args.localConfig, timeoutMs }\n        );\n\n    if (result.exitCode !== 0 || result.timedOut) {\n      throw new Error(\n        result.stderr !== ''\n          ? result.stderr\n          : `Local ${args.runtime} programmatic execution exited with code ${\n            result.exitCode ?? 'unknown'\n          }`\n      );\n    }\n\n    return formatCompletedResponse({\n      status: 'completed',\n      session_id: getLocalSessionId(args.localConfig),\n      stdout: result.stdout,\n      stderr: result.stderr,\n      files: [],\n    });\n  } finally {\n    await bridge.close();\n  }\n}\n\nexport function createLocalProgrammaticToolCallingTool(\n  localConfig: t.LocalExecutionConfig = {}\n): DynamicStructuredTool {\n  return tool(\n    async (rawParams, config) => {\n      const params = rawParams as LocalProgrammaticParams;\n      return runLocalProgrammaticTool({\n        params,\n        config,\n        localConfig,\n        runtime: resolveRuntime(params),\n      });\n    },\n    {\n      name: ProgrammaticToolCallingName,\n      description: `${ProgrammaticToolCallingDescription}\\n\\nLocal engine: runs bash by default, or Python when \\`lang\\` is \\`py\\` or \\`python\\`, on the host machine and calls tools through an in-process localhost bridge.`,\n      schema: LocalProgrammaticToolCallingSchema,\n      responseFormat: Constants.CONTENT_AND_ARTIFACT,\n    }\n  );\n}\n\nexport function createLocalBashProgrammaticToolCallingTool(\n  localConfig: t.LocalExecutionConfig = {}\n): DynamicStructuredTool {\n  return tool(\n    async (rawParams, config) => {\n      const params = rawParams as LocalProgrammaticParams;\n      return runLocalProgrammaticTool({\n        params,\n        config,\n        localConfig,\n        runtime: 'bash',\n      });\n    },\n    {\n      name: Constants.BASH_PROGRAMMATIC_TOOL_CALLING,\n      description: `${BashProgrammaticToolCallingDescription}\\n\\nLocal engine: runs this bash orchestration code on the host machine and calls tools through an in-process localhost bridge.`,\n      schema: BashProgrammaticToolCallingSchema,\n      responseFormat: Constants.CONTENT_AND_ARTIFACT,\n    }\n  );\n}\n"],"names":["ProgrammaticToolCallingSchema","timingSafeEqual","executeHooks","randomBytes","createServer","randomUUID","executeTools","normalizeToPythonIdentifier","normalizeToBashIdentifier","shellQuote","filterBashToolsByUsage","filterToolsByUsage","executeLocalBash","executeLocalCode","formatCompletedResponse","getLocalSessionId","tool","ProgrammaticToolCallingName","ProgrammaticToolCallingDescription","Constants","BashProgrammaticToolCallingDescription","BashProgrammaticToolCallingSchema"],"mappings":";;;;;;;;;;;;AA+BA,MAAM,eAAe,GAAG,KAAK;AAC7B,MAAM,kCAAkC,GAAG;AACzC,IAAA,GAAGA,qDAA6B;AAChC,IAAA,UAAU,EAAE;QACV,GAAGA,qDAA6B,CAAC,UAAU;AAC3C,QAAA,IAAI,EAAE;AACJ,YAAA,IAAI,EAAE,QAAQ;YACd,IAAI,EAAE,CAAC,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,CAAC;AACpC,YAAA,OAAO,EAAE,MAAM;AACf,YAAA,WAAW,EACT,wGAAwG;AAC3G,SAAA;AACF,KAAA;CACO;AAcV,MAAM,kBAAkB,GAAG,0BAA0B;AAErD,SAAS,kBAAkB,CAAC,CAAS,EAAE,CAAS,EAAA;IAC9C,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,EAAE,MAAM,CAAC;IACnC,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,EAAE,MAAM,CAAC;IACnC,IAAI,IAAI,CAAC,MAAM,KAAK,IAAI,CAAC,MAAM,EAAE;AAC/B,QAAA,OAAO,KAAK;IACd;AACA,IAAA,OAAOC,sBAAe,CAAC,IAAI,EAAE,IAAI,CAAC;AACpC;AAcA,SAAS,cAAc,CAAC,MAA+B,EAAA;AACrD,IAAA,MAAM,UAAU,GAAG,MAAM,CAAC,IAAI,IAAI,MAAM,CAAC,OAAO,IAAI,MAAM,CAAC,QAAQ,IAAI,MAAM;AAC7E,IAAA,OAAO,UAAU,KAAK,IAAI,IAAI,UAAU,KAAK,QAAQ,GAAG,QAAQ,GAAG,MAAM;AAC3E;AAEA,SAAS,cAAc,CAAC,KAAc,EAAA;AACpC,IAAA,IAAI,KAAK,KAAK,SAAS,EAAE;AACvB,QAAA,OAAO,IAAI;IACb;AACA,IAAA,OAAO,KAAK;AACd;AAEA,eAAe,eAAe,CAAC,GAAoB,EAAA;IACjD,MAAM,MAAM,GAAa,EAAE;AAC3B,IAAA,WAAW,MAAM,KAAK,IAAI,GAAG,EAAE;QAC7B,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,GAAG,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAClE;AACA,IAAA,MAAM,GAAG,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC;AAClD,IAAA,IAAI,GAAG,KAAK,EAAE,EAAE;AACd,QAAA,OAAO,EAAE;IACX;AACA,IAAA,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAgB;AACvC;AAEA,SAAS,SAAS,CAAC,GAAmB,EAAE,MAAc,EAAE,KAAc,EAAA;IACpE,GAAG,CAAC,SAAS,CAAC,MAAM,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC;IAC7D,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;AAChC;AAEA;;;;;;;;;;;AAWG;AACI,eAAe,6BAA6B,CACjD,WAAsC,EACtC,QAAgB,EAChB,SAAiB,EACjB,SAAkC,EAAA;AAElC,IAAA,IAAI,WAAW,CAAC,QAAQ,IAAI,IAAI,EAAE;AAChC,QAAA,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE;IAC7B;AACA,IAAA,MAAM,MAAM,GAAG,MAAMC,yBAAY,CAAC;QAChC,QAAQ,EAAE,WAAW,CAAC,QAAQ;AAC9B,QAAA,KAAK,EAAE;AACL,YAAA,eAAe,EAAE,YAAY;YAC7B,KAAK,EAAE,WAAW,CAAC,KAAK;YACxB,QAAQ,EAAE,WAAW,CAAC,QAAQ;YAC9B,OAAO,EAAE,WAAW,CAAC,OAAO;YAC5B,QAAQ;YACR,SAAS;YACT,SAAS;AACT,YAAA,MAAM,EAAE,EAAE;AACV,YAAA,IAAI,EAAE,CAAC;AACR,SAAA;QACD,SAAS,EAAE,WAAW,CAAC,KAAK;AAC5B,QAAA,UAAU,EAAE,QAAQ;KACrB,CAAC,CAAC,KAAK,CAAC,MAAM,SAAS,CAAC;AACzB,IAAA,IAAI,MAAM,IAAI,IAAI,EAAE;AAClB,QAAA,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE;IAC7B;AACA,IAAA,MAAM,SAAS,GACb,MAAM,CAAC,YAAY,IAAI;UAClB,MAAM,CAAC;UACR,SAAS;AACf,IAAA,IAAI,MAAM,CAAC,QAAQ,KAAK,MAAM,IAAI,MAAM,CAAC,QAAQ,KAAK,KAAK,EAAE;QAC3D,OAAO;AACL,YAAA,KAAK,EAAE,SAAS;YAChB,UAAU,EACR,MAAM,CAAC,MAAM;AACb,iBAAC,MAAM,CAAC,QAAQ,KAAK;sBACjB,CAAA,MAAA,EAAS,QAAQ,CAAA,sEAAA;AACnB,sBAAE,CAAA,MAAA,EAAS,QAAQ,CAAA,4BAAA,CAA8B,CAAC;SACvD;IACH;AACA,IAAA,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE;AAC7B;AAEA,eAAe,gBAAgB,CAC7B,OAAkB,EAClB,WAAuC,EAAA;IAEvC,MAAM,KAAK,GAAGC,kBAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC;IAC7C,MAAM,MAAM,GAAGC,iBAAY,CAAC,CAAC,GAAG,EAAE,GAAG,KAAI;;;;;;AAMvC,QAAA,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,IAAI,GAAG,EAAE,kBAAkB,CAAC;AACvD,QAAA,MAAM,UAAU,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,MAAM;AAC1D,QAAA,IAAI,GAAG,CAAC,MAAM,KAAK,MAAM,IAAI,GAAG,CAAC,QAAQ,KAAK,OAAO,EAAE;YACrD,IAAI,UAAU,EAAE;gBACd,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,YAAY,EAAE,CAAC;AACpD,gBAAA,GAAG,CAAC,GAAG,CAAC,WAAW,CAAC;YACtB;iBAAO;gBACL,SAAS,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC;YAC7C;YACA;QACF;QAEA,MAAM,SAAS,GAAG,GAAG,CAAC,OAAO,CAAC,kBAAkB,CAAC;AACjD,QAAA,MAAM,cAAc,GAAG,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,GAAG,SAAS,CAAC,CAAC,CAAC,GAAG,SAAS;QAC1E,IACE,OAAO,cAAc,KAAK,QAAQ;AAClC,YAAA,CAAC,kBAAkB,CAAC,cAAc,EAAE,KAAK,CAAC,EAC1C;YACA,IAAI,UAAU,EAAE;gBACd,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,YAAY,EAAE,CAAC;AACpD,gBAAA,GAAG,CAAC,GAAG,CAAC,cAAc,CAAC;YACzB;iBAAO;gBACL,SAAS,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC;YAChD;YACA;QACF;QAEA,eAAe,CAAC,GAAG;AAChB,aAAA,IAAI,CAAC,OAAO,IAAI,KAAI;AACnB,YAAA,IAAI,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,IAAI,KAAK,EAAE,EAAE;gBACrD,MAAM,OAAO,GAAG,sCAAsC;gBACtD,IAAI,UAAU,EAAE;oBACd,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,YAAY,EAAE,CAAC;AACpD,oBAAA,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC;gBAClB;qBAAO;AACL,oBAAA,SAAS,CAAC,GAAG,EAAE,GAAG,EAAE;AAClB,wBAAA,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,SAAS;AAC7B,wBAAA,MAAM,EAAE,IAAI;AACZ,wBAAA,QAAQ,EAAE,IAAI;AACd,wBAAA,aAAa,EAAE,OAAO;AACvB,qBAAA,CAAC;gBACJ;gBACA;YACF;YAEA,MAAM,MAAM,GAAG,IAAI,CAAC,EAAE,IAAI,CAAA,WAAA,EAAcC,iBAAU,EAAE,CAAA,CAAE;AACtD,YAAA,IAAI,cAAc,GAA4B,IAAI,CAAC,KAAK,IAAI,EAAE;AAC9D,YAAA,IAAI,WAAW,IAAI,IAAI,EAAE;AACvB,gBAAA,MAAM,IAAI,GAAG,MAAM,6BAA6B,CAC9C,WAAW,EACX,IAAI,CAAC,IAAI,EACT,MAAM,EACN,cAAc,CACf;AACD,gBAAA,IAAI,IAAI,CAAC,UAAU,IAAI,IAAI,EAAE;AAC3B,oBAAA,MAAM,OAAO,GAAG,IAAI,CAAC,UAAU;oBAC/B,IAAI,UAAU,EAAE;wBACd,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,YAAY,EAAE,CAAC;AACpD,wBAAA,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC;oBAClB;yBAAO;AACL,wBAAA,SAAS,CAAC,GAAG,EAAE,GAAG,EAAE;AAClB,4BAAA,OAAO,EAAE,MAAM;AACf,4BAAA,MAAM,EAAE,IAAI;AACZ,4BAAA,QAAQ,EAAE,IAAI;AACd,4BAAA,aAAa,EAAE,OAAO;AACvB,yBAAA,CAAC;oBACJ;oBACA;gBACF;AACA,gBAAA,cAAc,GAAG,IAAI,CAAC,KAAK;YAC7B;AAEA,YAAA,MAAM,CAAC,MAAM,CAAC,GAAG,MAAMC,oCAAY,CACjC;AACE,gBAAA;AACE,oBAAA,EAAE,EAAE,MAAM;oBACV,IAAI,EAAE,IAAI,CAAC,IAAI;AACf,oBAAA,KAAK,EAAE,cAAc;AACtB,iBAAA;aACF,EACD,OAAO,CACR;YAED,IAAI,UAAU,EAAE;AACd,gBAAA,IAAI,MAAM,CAAC,QAAQ,KAAK,IAAI,EAAE;oBAC5B,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,YAAY,EAAE,CAAC;AACpD,oBAAA,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,aAAa,IAAI,CAAA,KAAA,EAAQ,IAAI,CAAC,IAAI,CAAA,OAAA,CAAS,CAAC;gBAC7D;qBAAO;oBACL,MAAM,KAAK,GAAG,cAAc,CAAC,MAAM,CAAC,MAAM,CAAC;AAC3C,oBAAA,MAAM,IAAI,GACR,OAAO,KAAK,KAAK,QAAQ,GAAG,KAAK,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC;oBAC3D,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,YAAY,EAAE,CAAC;AACpD,oBAAA,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC;gBACf;gBACA;YACF;AAEA,YAAA,SAAS,CAAC,GAAG,EAAE,GAAG,EAAE;AAClB,gBAAA,GAAG,MAAM;AACT,gBAAA,MAAM,EAAE,cAAc,CAAC,MAAM,CAAC,MAAM,CAAC;AACtC,aAAA,CAAC;AACJ,QAAA,CAAC;AACA,aAAA,KAAK,CAAC,CAAC,KAAY,KAAI;YACtB,IAAI,UAAU,EAAE;gBACd,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,YAAY,EAAE,CAAC;AACpD,gBAAA,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC;YACxB;iBAAO;AACL,gBAAA,SAAS,CAAC,GAAG,EAAE,GAAG,EAAE;AAClB,oBAAA,OAAO,EAAE,OAAO;AAChB,oBAAA,MAAM,EAAE,IAAI;AACZ,oBAAA,QAAQ,EAAE,IAAI;oBACd,aAAa,EAAE,KAAK,CAAC,OAAO;AAC7B,iBAAA,CAAC;YACJ;AACF,QAAA,CAAC,CAAC;AACN,IAAA,CAAC,CAAC;IAEF,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,KAAI;AAC1C,QAAA,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC;QAC5B,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,WAAW,EAAE,OAAO,CAAC;AACxC,IAAA,CAAC,CAAC;AAEF,IAAA,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,EAAiB;IAC/C,OAAO;AACL,QAAA,GAAG,EAAE,CAAA,iBAAA,EAAoB,OAAO,CAAC,IAAI,CAAA,KAAA,CAAO;QAC5C,KAAK;AACL,QAAA,KAAK,EAAE,MACL,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,KAAI;YAC9B,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,GAAG,OAAO,EAAE,CAAC,CAAC;AAC9D,QAAA,CAAC,CAAC;KACL;AACH;AAEA,SAAS,MAAM,CAAC,IAAY,EAAA;AAC1B,IAAA,OAAO;SACJ,KAAK,CAAC,IAAI;SACV,GAAG,CAAC,CAAC,IAAI,KAAK,CAAA,EAAA,EAAK,IAAI,CAAA,CAAE;SACzB,IAAI,CAAC,IAAI,CAAC;AACf;AAEA,SAAS,mBAAmB,CAC1B,IAAY,EACZ,QAAoB,EACpB,SAAiB,EACjB,WAAmB,EAAA;IAEnB,MAAM,YAAY,GAAG;AAClB,SAAA,GAAG,CAAC,CAAC,GAAG,KAAI;QACX,MAAM,UAAU,GAAGC,mDAA2B,CAAC,GAAG,CAAC,IAAI,CAAC;QACxD,OAAO;AACL,YAAA,CAAA,UAAA,EAAa,UAAU,CAAA,WAAA,CAAa;YACpC,CAAA,qCAAA,EAAwC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA,SAAA,CAAW;AAC5E,SAAA,CAAC,IAAI,CAAC,IAAI,CAAC;AACd,IAAA,CAAC;SACA,IAAI,CAAC,MAAM,CAAC;IAEf,OAAO;;;;;AAKmB,0BAAA,EAAA,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC;AAC1B,yBAAA,EAAA,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC;;;;;;AAMhD,IAAA,EAAA,IAAI,CAAC,SAAS,CAAC,kBAAkB,CAAC,CAAA;;;;;;;;;;;;;;EActC,YAAY;;;EAGZ,MAAM,CAAC,IAAI,CAAC;;;CAGb,CAAC,SAAS,EAAE;AACb;AAEM,SAAU,0BAA0B,CACxC,IAAY,EACZ,QAAoB,EACpB,SAAiB,EACjB,WAAmB,EAAA;IAEnB,OAAO,iBAAiB,CAAC,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,WAAW,CAAC;AAClE;AAEA,SAAS,iBAAiB,CACxB,IAAY,EACZ,QAAoB,EACpB,SAAiB,EACjB,WAAmB,EAAA;IAEnB,MAAM,SAAS,GAAG;AACf,SAAA,GAAG,CAAC,CAAC,GAAG,KAAI;QACX,MAAM,QAAQ,GAAGC,qDAAyB,CAAC,GAAG,CAAC,IAAI,CAAC;QACpD,OAAO;AACL,YAAA,CAAA,EAAG,QAAQ,CAAA,IAAA,CAAM;YACjB,0BAA0B;YAC1B,iDAAiD;AACjD,YAAA,CAAA,wBAAA,EAA2BC,+BAAU,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA,WAAA,CAAa;YAC5D,GAAG;AACJ,SAAA,CAAC,IAAI,CAAC,IAAI,CAAC;AACd,IAAA,CAAC;SACA,IAAI,CAAC,MAAM,CAAC;IAEf,OAAO;0BACiBA,+BAAU,CAAC,SAAS,CAAC;0BACrBA,+BAAU,CAAC,kBAAkB,CAAC;yBAC/BA,+BAAU,CAAC,WAAW,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAyD9C,SAAS;;EAET,IAAI;CACL,CAAC,SAAS,EAAE;AACb;AAEA,SAAS,sBAAsB,CAAC,MAE/B,EAAA;AACC,IAAA,QAAQ,MAAM,EAAE,QAAQ,IAAI,EAAE;AAChC;AAEA,SAAS,sBAAsB,CAC7B,OAAkB,EAClB,QAAoB,EACpB,IAAY,EACZ,WAAuB,EAAA;IAEvB,MAAM,cAAc,GAAG,WAAW,CAAC,QAAQ,EAAE,IAAI,CAAC;AAClD,IAAA,MAAM,YAAY,GAAG,IAAI,GAAG,CAC1B;AACG,SAAA,GAAG,CAAC,CAAC,GAAG,KAAI;QACX,MAAM,UAAU,GAAG,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC;QACxC,OAAO,UAAU,IAAI;AACnB,cAAE;cACC,CAAC,GAAG,CAAC,IAAI,EAAE,UAAU,CAA6B;AACzD,IAAA,CAAC;SACA,MAAM,CAAC,CAAC,KAAK,KAAuC,KAAK,IAAI,IAAI,CAAC,CACtE;AAED,IAAA,OAAO,EAAE,cAAc,EAAE,YAAY,EAAE;AACzC;AAEA,eAAe,wBAAwB,CAAC,IAKvC,EAAA;AACC,IAAA,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,GAAG,sBAAsB,CAAC,IAAI,CAAC,MAAM,CAAC;IAE9E,IAAI,OAAO,IAAI,IAAI,IAAI,OAAO,CAAC,IAAI,KAAK,CAAC,EAAE;AACzC,QAAA,MAAM,IAAI,KAAK,CAAC,uDAAuD,CAAC;IAC1E;IACA,IAAI,QAAQ,IAAI,IAAI,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE;AAC7C,QAAA,MAAM,IAAI,KAAK,CAAC,gEAAgE,CAAC;IACnF;AAEA,IAAA,MAAM,EAAE,cAAc,EAAE,YAAY,EAAE,GAAG,sBAAsB,CAC7D,OAAO,EACP,QAAQ,EACR,IAAI,CAAC,MAAM,CAAC,IAAI,EAChB,IAAI,CAAC,OAAO,KAAK,MAAM,GAAGC,kDAAsB,GAAGC,0CAAkB,CACtE;IACD,MAAM,MAAM,GAAG,MAAM,gBAAgB,CAAC,YAAY,EAAE,WAAW,CAAC;AAEhE,IAAA,IAAI;AACF,QAAA,MAAM,SAAS,GAAG,IAAI,CAAC,MAAM,CAAC,OAAO,IAAI,IAAI,CAAC,WAAW,CAAC,SAAS,IAAI,eAAe;AACtF,QAAA,MAAM,MAAM,GACV,IAAI,CAAC,OAAO,KAAK;AACf,cAAE,MAAMC,qCAAgB,CACtB,iBAAiB,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,cAAc,EAAE,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,KAAK,CAAC,EAC7E,EAAE,GAAG,IAAI,CAAC,WAAW,EAAE,SAAS,EAAE;cAElC,MAAMC,qCAAgB,CACtB;AACE,gBAAA,IAAI,EAAE,IAAI;AACV,gBAAA,IAAI,EAAE,mBAAmB,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,cAAc,EAAE,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,KAAK,CAAC;aACtF,EACD,EAAE,GAAG,IAAI,CAAC,WAAW,EAAE,SAAS,EAAE,CACnC;QAEL,IAAI,MAAM,CAAC,QAAQ,KAAK,CAAC,IAAI,MAAM,CAAC,QAAQ,EAAE;AAC5C,YAAA,MAAM,IAAI,KAAK,CACb,MAAM,CAAC,MAAM,KAAK;kBACd,MAAM,CAAC;AACT,kBAAE,CAAA,MAAA,EAAS,IAAI,CAAC,OAAO,CAAA,yCAAA,EACrB,MAAM,CAAC,QAAQ,IAAI,SACrB,CAAA,CAAE,CACL;QACH;AAEA,QAAA,OAAOC,+CAAuB,CAAC;AAC7B,YAAA,MAAM,EAAE,WAAW;AACnB,YAAA,UAAU,EAAEC,sCAAiB,CAAC,IAAI,CAAC,WAAW,CAAC;YAC/C,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,MAAM,EAAE,MAAM,CAAC,MAAM;AACrB,YAAA,KAAK,EAAE,EAAE;AACV,SAAA,CAAC;IACJ;YAAU;AACR,QAAA,MAAM,MAAM,CAAC,KAAK,EAAE;IACtB;AACF;AAEM,SAAU,sCAAsC,CACpD,WAAA,GAAsC,EAAE,EAAA;IAExC,OAAOC,UAAI,CACT,OAAO,SAAS,EAAE,MAAM,KAAI;QAC1B,MAAM,MAAM,GAAG,SAAoC;AACnD,QAAA,OAAO,wBAAwB,CAAC;YAC9B,MAAM;YACN,MAAM;YACN,WAAW;AACX,YAAA,OAAO,EAAE,cAAc,CAAC,MAAM,CAAC;AAChC,SAAA,CAAC;AACJ,IAAA,CAAC,EACD;AACE,QAAA,IAAI,EAAEC,mDAA2B;QACjC,WAAW,EAAE,CAAA,EAAGC,0DAAkC,CAAA,oKAAA,CAAsK;AACxN,QAAA,MAAM,EAAE,kCAAkC;QAC1C,cAAc,EAAEC,eAAS,CAAC,oBAAoB;AAC/C,KAAA,CACF;AACH;AAEM,SAAU,0CAA0C,CACxD,WAAA,GAAsC,EAAE,EAAA;IAExC,OAAOH,UAAI,CACT,OAAO,SAAS,EAAE,MAAM,KAAI;QAC1B,MAAM,MAAM,GAAG,SAAoC;AACnD,QAAA,OAAO,wBAAwB,CAAC;YAC9B,MAAM;YACN,MAAM;YACN,WAAW;AACX,YAAA,OAAO,EAAE,MAAM;AAChB,SAAA,CAAC;AACJ,IAAA,CAAC,EACD;QACE,IAAI,EAAEG,eAAS,CAAC,8BAA8B;QAC9C,WAAW,EAAE,CAAA,EAAGC,kEAAsC,CAAA,+HAAA,CAAiI;AACvL,QAAA,MAAM,EAAEC,6DAAiC;QACzC,cAAc,EAAEF,eAAS,CAAC,oBAAoB;AAC/C,KAAA,CACF;AACH;;;;;;;"}