@librechat/agents 3.2.32 → 3.2.33

package/dist/cjs/tools/local/LocalProgrammaticToolCalling.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"LocalProgrammaticToolCalling.cjs","sources":["../../../../src/tools/local/LocalProgrammaticToolCalling.ts"],"sourcesContent":["import { createServer } from 'http';\nimport { tool } from '@langchain/core/tools';\nimport { randomBytes, randomUUID, timingSafeEqual } from 'crypto';\nimport type { DynamicStructuredTool } from '@langchain/core/tools';\nimport type { IncomingMessage, ServerResponse } from 'http';\nimport type { AddressInfo } from 'net';\nimport type * as t from '@/types';\nimport {\n  executeTools,\n  filterToolsByUsage,\n  formatCompletedResponse,\n  normalizeToPythonIdentifier,\n  ProgrammaticToolCallingName,\n  ProgrammaticToolCallingSchema,\n  ProgrammaticToolCallingDescription,\n} from '@/tools/ProgrammaticToolCalling';\nimport {\n  BashProgrammaticToolCallingSchema,\n  BashProgrammaticToolCallingDescription,\n  filterBashToolsByUsage,\n  normalizeToBashIdentifier,\n} from '@/tools/BashProgrammaticToolCalling';\nimport {\n  executeLocalBash,\n  executeLocalCode,\n  getLocalSessionId,\n  shellQuote,\n} from './LocalExecutionEngine';\nimport { executeHooks } from '@/hooks';\nimport { Constants } from '@/common';\n\nconst DEFAULT_TIMEOUT = 60000;\nconst LOCAL_MIN_TIMEOUT = 1000;\nconst LOCAL_MAX_TIMEOUT = 300000;\n\ntype LocalTimeoutSchema = {\n  type: 'integer';\n  minimum: number;\n  maximum: number;\n  default: number;\n  description: string;\n};\n\ntype LocalProgrammaticToolCallingJsonSchema = {\n  type: 'object';\n  properties: typeof ProgrammaticToolCallingSchema.properties & {\n    timeout: LocalTimeoutSchema;\n    lang: {\n      type: 'string';\n      enum: readonly ['py', 'python', 'bash', 'sh'];\n      default: 'bash';\n      description: string;\n    };\n  };\n  required: readonly ['code'];\n};\n\ntype LocalBashProgrammaticToolCallingJsonSchema = {\n  type: 'object';\n  properties: typeof BashProgrammaticToolCallingSchema.properties & {\n    timeout: LocalTimeoutSchema;\n  };\n  required: readonly ['code'];\n};\n\nfunction normalizeLocalTimeout(timeoutMs: number | undefined): number {\n  if (timeoutMs == null || !Number.isFinite(timeoutMs)) {\n    return DEFAULT_TIMEOUT;\n  }\n\n  return Math.max(LOCAL_MIN_TIMEOUT, Math.floor(timeoutMs));\n}\n\nfunction formatLocalTimeout(timeoutMs: number): string {\n  return timeoutMs % 1000 === 0\n    ? `${timeoutMs / 1000} seconds`\n    : `${timeoutMs} milliseconds`;\n}\n\nfunction createLocalTimeoutSchema(timeoutMs?: number): LocalTimeoutSchema {\n  const defaultTimeout = normalizeLocalTimeout(timeoutMs);\n  const maxTimeout = Math.max(LOCAL_MAX_TIMEOUT, defaultTimeout);\n  const formattedDefault = formatLocalTimeout(defaultTimeout);\n  const formattedMax = formatLocalTimeout(maxTimeout);\n\n  return {\n    type: 'integer',\n    minimum: LOCAL_MIN_TIMEOUT,\n    maximum: maxTimeout,\n    default: defaultTimeout,\n    description:\n      'Maximum local execution time in milliseconds. ' +\n      `Default: ${formattedDefault}. Max: ${formattedMax}.`,\n  };\n}\n\nfunction createLocalProgrammaticToolCallingSchema(\n  localConfig: t.LocalExecutionConfig = {}\n): LocalProgrammaticToolCallingJsonSchema {\n  return {\n    ...ProgrammaticToolCallingSchema,\n    properties: {\n      ...ProgrammaticToolCallingSchema.properties,\n      timeout: createLocalTimeoutSchema(localConfig.timeoutMs),\n      lang: {\n        type: 'string',\n        enum: ['py', 'python', 'bash', 'sh'],\n        default: 'bash',\n        description:\n          'Local engine runtime for orchestration code. Defaults to bash; use py/python for Python orchestration.',\n      },\n    },\n  } as const;\n}\n\nfunction createLocalBashProgrammaticToolCallingSchema(\n  localConfig: t.LocalExecutionConfig = {}\n): LocalBashProgrammaticToolCallingJsonSchema {\n  return {\n    ...BashProgrammaticToolCallingSchema,\n    properties: {\n      ...BashProgrammaticToolCallingSchema.properties,\n      timeout: createLocalTimeoutSchema(localConfig.timeoutMs),\n    },\n  } as const;\n}\n\ntype ToolBridge = {\n  url: string;\n  token: string;\n  close: () => Promise<void>;\n};\n\ntype ToolRequest = {\n  id?: string;\n  name?: string;\n  input?: Record<string, unknown>;\n};\n\nconst BRIDGE_AUTH_HEADER = 'x-librechat-bridge-token';\n\nfunction constantTimeEquals(a: string, b: string): boolean {\n  const aBuf = Buffer.from(a, 'utf8');\n  const bBuf = Buffer.from(b, 'utf8');\n  if (aBuf.length !== bBuf.length) {\n    return false;\n  }\n  return timingSafeEqual(aBuf, bBuf);\n}\n\ntype LocalProgrammaticRuntime = 'python' | 'bash';\n\ntype LocalProgrammaticParams = {\n  code: string;\n  timeout?: number;\n  lang?: string;\n  runtime?: string;\n  language?: string;\n};\n\ntype ToolFilter = (toolDefs: t.LCTool[], code: string) => t.LCTool[];\n\nfunction resolveRuntime(\n  params: LocalProgrammaticParams\n): LocalProgrammaticRuntime {\n  const rawRuntime = params.lang ?? params.runtime ?? params.language ?? 'bash';\n  return rawRuntime === 'py' || rawRuntime === 'python' ? 'python' : 'bash';\n}\n\nfunction toSerializable(value: unknown): unknown {\n  if (value === undefined) {\n    return null;\n  }\n  return value;\n}\n\nasync function readRequestBody(req: IncomingMessage): Promise<ToolRequest> {\n  const chunks: Buffer[] = [];\n  for await (const chunk of req) {\n    chunks.push(Buffer.isBuffer(chunk) ? chunk : Buffer.from(chunk));\n  }\n  const raw = Buffer.concat(chunks).toString('utf8');\n  if (raw === '') {\n    return {};\n  }\n  return JSON.parse(raw) as ToolRequest;\n}\n\nfunction writeJson(res: ServerResponse, status: number, value: unknown): void {\n  res.writeHead(status, { 'Content-Type': 'application/json' });\n  res.end(JSON.stringify(value));\n}\n\n/**\n * Run the host's `PreToolUse` hook chain for a single bridge call.\n * Returns the (possibly rewritten) input and a `denyReason` if any\n * matcher returned `decision: 'deny'` or `'ask'`. `'ask'` collapses\n * to deny because the bridge can't raise a LangGraph interrupt from\n * inside an HTTP handler — fail-closed matches the rest of the SDK\n * when HITL is unavailable.\n *\n * @internal Exported for tests so the deny / allow / updatedInput /\n *   ask branches can be exercised without standing up the full HTTP\n *   bridge.\n */\nexport async function applyPreToolUseHooksForBridge(\n  hookContext: t.ProgrammaticHookContext,\n  toolName: string,\n  toolUseId: string,\n  toolInput: Record<string, unknown>\n): Promise<{ input: Record<string, unknown>; denyReason?: string }> {\n  if (hookContext.registry == null) {\n    return { input: toolInput };\n  }\n  const result = await executeHooks({\n    registry: hookContext.registry,\n    input: {\n      hook_event_name: 'PreToolUse',\n      runId: hookContext.runId,\n      threadId: hookContext.threadId,\n      agentId: hookContext.agentId,\n      executingAgentId: hookContext.executingAgentId,\n      toolName,\n      toolInput,\n      toolUseId,\n      stepId: '',\n      turn: 0,\n    },\n    sessionId: hookContext.runId,\n    matchQuery: toolName,\n  }).catch(() => undefined);\n  if (result == null) {\n    return { input: toolInput };\n  }\n  const nextInput =\n    result.updatedInput != null\n      ? (result.updatedInput as Record<string, unknown>)\n      : toolInput;\n  if (result.decision === 'deny' || result.decision === 'ask') {\n    return {\n      input: nextInput,\n      denyReason:\n        result.reason ??\n        (result.decision === 'ask'\n          ? `Tool \"${toolName}\" requires human approval; bridge cannot raise an interrupt — denying.`\n          : `Tool \"${toolName}\" denied by PreToolUse hook.`),\n    };\n  }\n  return { input: nextInput };\n}\n\nasync function createToolBridge(\n  toolMap: t.ToolMap,\n  hookContext?: t.ProgrammaticHookContext\n): Promise<ToolBridge> {\n  const token = randomBytes(32).toString('hex');\n  const server = createServer((req, res) => {\n    // `?mode=text` returns the already-serialized result as the body\n    // (or the error message at non-2xx). Python/Node callers stay on\n    // JSON; bash callers using curl can avoid pulling in a JSON\n    // parser dependency (Codex P2 #19 — `python3` was a hard\n    // requirement for the bash bridge, breaking minimal containers).\n    const url = new URL(req.url ?? '/', 'http://127.0.0.1');\n    const isTextMode = url.searchParams.get('mode') === 'text';\n    if (req.method !== 'POST' || url.pathname !== '/tool') {\n      if (isTextMode) {\n        res.writeHead(404, { 'Content-Type': 'text/plain' });\n        res.end('Not found');\n      } else {\n        writeJson(res, 404, { error: 'Not found' });\n      }\n      return;\n    }\n\n    const presented = req.headers[BRIDGE_AUTH_HEADER];\n    const presentedToken = Array.isArray(presented) ? presented[0] : presented;\n    if (\n      typeof presentedToken !== 'string' ||\n      !constantTimeEquals(presentedToken, token)\n    ) {\n      if (isTextMode) {\n        res.writeHead(401, { 'Content-Type': 'text/plain' });\n        res.end('Unauthorized');\n      } else {\n        writeJson(res, 401, { error: 'Unauthorized' });\n      }\n      return;\n    }\n\n    readRequestBody(req)\n      .then(async (body) => {\n        if (typeof body.name !== 'string' || body.name === '') {\n          const message = 'Tool request is missing a tool name.';\n          if (isTextMode) {\n            res.writeHead(400, { 'Content-Type': 'text/plain' });\n            res.end(message);\n          } else {\n            writeJson(res, 400, {\n              call_id: body.id ?? 'invalid',\n              result: null,\n              is_error: true,\n              error_message: message,\n            });\n          }\n          return;\n        }\n\n        const callId = body.id ?? `local_call_${randomUUID()}`;\n        let effectiveInput: Record<string, unknown> = body.input ?? {};\n        if (hookContext != null) {\n          const gate = await applyPreToolUseHooksForBridge(\n            hookContext,\n            body.name,\n            callId,\n            effectiveInput\n          );\n          if (gate.denyReason != null) {\n            const denyMsg = gate.denyReason;\n            if (isTextMode) {\n              res.writeHead(500, { 'Content-Type': 'text/plain' });\n              res.end(denyMsg);\n            } else {\n              writeJson(res, 500, {\n                call_id: callId,\n                result: null,\n                is_error: true,\n                error_message: denyMsg,\n              });\n            }\n            return;\n          }\n          effectiveInput = gate.input;\n        }\n\n        const [result] = await executeTools(\n          [\n            {\n              id: callId,\n              name: body.name,\n              input: effectiveInput,\n            },\n          ],\n          toolMap\n        );\n\n        if (isTextMode) {\n          if (result.is_error === true) {\n            res.writeHead(500, { 'Content-Type': 'text/plain' });\n            res.end(result.error_message ?? `Tool ${body.name} failed`);\n          } else {\n            const value = toSerializable(result.result);\n            const text =\n              typeof value === 'string' ? value : JSON.stringify(value);\n            res.writeHead(200, { 'Content-Type': 'text/plain' });\n            res.end(text);\n          }\n          return;\n        }\n\n        writeJson(res, 200, {\n          ...result,\n          result: toSerializable(result.result),\n        });\n      })\n      .catch((error: Error) => {\n        if (isTextMode) {\n          res.writeHead(500, { 'Content-Type': 'text/plain' });\n          res.end(error.message);\n        } else {\n          writeJson(res, 500, {\n            call_id: 'error',\n            result: null,\n            is_error: true,\n            error_message: error.message,\n          });\n        }\n      });\n  });\n\n  await new Promise<void>((resolve, reject) => {\n    server.once('error', reject);\n    server.listen(0, '127.0.0.1', resolve);\n  });\n\n  const address = server.address() as AddressInfo;\n  return {\n    url: `http://127.0.0.1:${address.port}/tool`,\n    token,\n    close: () =>\n      new Promise((resolve, reject) => {\n        server.close((error) => (error ? reject(error) : resolve()));\n      }),\n  };\n}\n\nfunction indent(code: string): string {\n  return code\n    .split('\\n')\n    .map((line) => `  ${line}`)\n    .join('\\n');\n}\n\nfunction createPythonProgram(\n  code: string,\n  toolDefs: t.LCTool[],\n  bridgeUrl: string,\n  bridgeToken: string\n): string {\n  const functionDefs = toolDefs\n    .map((def) => {\n      const pythonName = normalizeToPythonIdentifier(def.name);\n      return [\n        `async def ${pythonName}(**kwargs):`,\n        `  return await __librechat_call_tool(${JSON.stringify(def.name)}, kwargs)`,\n      ].join('\\n');\n    })\n    .join('\\n\\n');\n\n  return `\nimport asyncio\nimport json\nimport urllib.request\n\n__LIBRECHAT_TOOL_BRIDGE = ${JSON.stringify(bridgeUrl)}\n__LIBRECHAT_TOOL_TOKEN = ${JSON.stringify(bridgeToken)}\n\nasync def __librechat_call_tool(name, payload):\n  body = json.dumps({\"name\": name, \"input\": payload}).encode(\"utf-8\")\n  headers = {\n    \"Content-Type\": \"application/json\",\n    ${JSON.stringify(BRIDGE_AUTH_HEADER)}: __LIBRECHAT_TOOL_TOKEN,\n  }\n\n  def request():\n    req = urllib.request.Request(__LIBRECHAT_TOOL_BRIDGE, data=body, headers=headers, method=\"POST\")\n    with urllib.request.urlopen(req, timeout=300) as response:\n      return response.read().decode(\"utf-8\")\n\n  raw = await asyncio.to_thread(request)\n  result = json.loads(raw)\n  if result.get(\"is_error\"):\n    raise RuntimeError(result.get(\"error_message\") or f\"Tool {name} failed\")\n  return result.get(\"result\")\n\n${functionDefs}\n\nasync def __librechat_main():\n${indent(code)}\n\nasyncio.run(__librechat_main())\n`.trimStart();\n}\n\nexport function _createBashProgramForTests(\n  code: string,\n  toolDefs: t.LCTool[],\n  bridgeUrl: string,\n  bridgeToken: string\n): string {\n  return createBashProgram(code, toolDefs, bridgeUrl, bridgeToken);\n}\n\nfunction createBashProgram(\n  code: string,\n  toolDefs: t.LCTool[],\n  bridgeUrl: string,\n  bridgeToken: string\n): string {\n  const functions = toolDefs\n    .map((def) => {\n      const bashName = normalizeToBashIdentifier(def.name);\n      return [\n        `${bashName}() {`,\n        '  local payload=\"${1:-}\"',\n        '  if [ -z \"$payload\" ]; then payload=\\'{}\\'; fi',\n        `  __librechat_call_tool ${shellQuote(def.name)} \"$payload\"`,\n        '}',\n      ].join('\\n');\n    })\n    .join('\\n\\n');\n\n  return `\n__LIBRECHAT_TOOL_BRIDGE=${shellQuote(bridgeUrl)}\n__LIBRECHAT_TOOL_HEADER=${shellQuote(BRIDGE_AUTH_HEADER)}\n__LIBRECHAT_TOOL_TOKEN=${shellQuote(bridgeToken)}\n\n# Bridge call helper. Tries curl first (universally available, no\n# JSON parser needed thanks to the bridge's ?mode=text endpoint),\n# falls back to python3 for environments without curl. Codex P2 #19\n# flagged that the prior python3-only path broke minimal containers\n# (and Windows hosts without a python3 binary on PATH). Tool names\n# come from Constants.* and are always safe identifiers, so we can\n# splice them into JSON without an escape pass.\n__librechat_call_tool() {\n  local tool_name=\"$1\"\n  local payload=\"$2\"\n  if command -v curl >/dev/null 2>&1; then\n    local body=\"{\\\\\"name\\\\\":\\\\\"$tool_name\\\\\",\\\\\"input\\\\\":$payload}\"\n    local response\n    local http_code\n    response=$(curl -sS -X POST \\\n      -H \"Content-Type: application/json\" \\\n      -H \"$__LIBRECHAT_TOOL_HEADER: $__LIBRECHAT_TOOL_TOKEN\" \\\n      --data-binary \"$body\" \\\n      -w '\\\\n__LIBRECHAT_HTTP_CODE_%{http_code}__' \\\n      \"$__LIBRECHAT_TOOL_BRIDGE?mode=text\")\n    http_code=$(printf '%s' \"$response\" | sed -n 's/.*__LIBRECHAT_HTTP_CODE_\\\\([0-9][0-9]*\\\\)__$/\\\\1/p')\n    local body_only\n    body_only=$(printf '%s' \"$response\" | sed 's/__LIBRECHAT_HTTP_CODE_[0-9][0-9]*__$//')\n    if [ \"$http_code\" = \"200\" ]; then\n      printf '%s' \"$body_only\"\n      return 0\n    fi\n    printf '%s\\\\n' \"$body_only\" >&2\n    return 1\n  elif command -v python3 >/dev/null 2>&1; then\n    python3 - \"$__LIBRECHAT_TOOL_BRIDGE\" \"$tool_name\" \"$payload\" \"$__LIBRECHAT_TOOL_HEADER\" \"$__LIBRECHAT_TOOL_TOKEN\" <<'PY'\nimport json\nimport sys\nimport urllib.request\n\nurl, name, payload, header, token = sys.argv[1], sys.argv[2], sys.argv[3], sys.argv[4], sys.argv[5]\nbody = json.dumps({\"name\": name, \"input\": json.loads(payload)}).encode(\"utf-8\")\nreq = urllib.request.Request(url, data=body, headers={\"Content-Type\": \"application/json\", header: token}, method=\"POST\")\nwith urllib.request.urlopen(req, timeout=300) as response:\n  result = json.loads(response.read().decode(\"utf-8\"))\nif result.get(\"is_error\"):\n  print(result.get(\"error_message\") or f\"Tool {name} failed\", file=sys.stderr)\n  sys.exit(1)\nvalue = result.get(\"result\")\nif isinstance(value, str):\n  print(value)\nelse:\n  print(json.dumps(value))\nPY\n  else\n    printf 'librechat: tool bridge needs either curl or python3 on PATH\\\\n' >&2\n    return 1\n  fi\n}\n\n${functions}\n\n${code}\n`.trimStart();\n}\n\nfunction getProgrammaticContext(config?: {\n  toolCall?: unknown;\n}): Partial<t.ProgrammaticCache> {\n  return (config?.toolCall ?? {}) as Partial<t.ProgrammaticCache>;\n}\n\nfunction createEffectiveToolMap(\n  toolMap: t.ToolMap,\n  toolDefs: t.LCTool[],\n  code: string,\n  filterTools: ToolFilter\n): { effectiveTools: t.LCTool[]; effectiveMap: t.ToolMap } {\n  const effectiveTools = filterTools(toolDefs, code);\n  const effectiveMap = new Map<string, t.GenericTool>(\n    effectiveTools\n      .map((def) => {\n        const executable = toolMap.get(def.name);\n        return executable == null\n          ? undefined\n          : ([def.name, executable] as [string, t.GenericTool]);\n      })\n      .filter((entry): entry is [string, t.GenericTool] => entry != null)\n  );\n\n  return { effectiveTools, effectiveMap };\n}\n\nasync function runLocalProgrammaticTool(args: {\n  params: LocalProgrammaticParams;\n  config?: { toolCall?: unknown };\n  localConfig: t.LocalExecutionConfig;\n  runtime: LocalProgrammaticRuntime;\n}): Promise<[string, t.ProgrammaticExecutionArtifact]> {\n  const { toolMap, toolDefs, hookContext } = getProgrammaticContext(\n    args.config\n  );\n\n  if (toolMap == null || toolMap.size === 0) {\n    throw new Error('No toolMap provided for local programmatic execution.');\n  }\n  if (toolDefs == null || toolDefs.length === 0) {\n    throw new Error(\n      'No tool definitions provided for local programmatic execution.'\n    );\n  }\n\n  const { effectiveTools, effectiveMap } = createEffectiveToolMap(\n    toolMap,\n    toolDefs,\n    args.params.code,\n    args.runtime === 'bash' ? filterBashToolsByUsage : filterToolsByUsage\n  );\n  const bridge = await createToolBridge(effectiveMap, hookContext);\n\n  try {\n    const timeoutMs =\n      args.params.timeout ?? args.localConfig.timeoutMs ?? DEFAULT_TIMEOUT;\n    const result =\n      args.runtime === 'bash'\n        ? await executeLocalBash(\n          createBashProgram(\n            args.params.code,\n            effectiveTools,\n            bridge.url,\n            bridge.token\n          ),\n          { ...args.localConfig, timeoutMs }\n        )\n        : await executeLocalCode(\n          {\n            lang: 'py',\n            code: createPythonProgram(\n              args.params.code,\n              effectiveTools,\n              bridge.url,\n              bridge.token\n            ),\n          },\n          { ...args.localConfig, timeoutMs }\n        );\n\n    if (result.exitCode !== 0 || result.timedOut) {\n      throw new Error(\n        result.stderr !== ''\n          ? result.stderr\n          : `Local ${args.runtime} programmatic execution exited with code ${\n            result.exitCode ?? 'unknown'\n          }`\n      );\n    }\n\n    return formatCompletedResponse({\n      status: 'completed',\n      session_id: getLocalSessionId(args.localConfig),\n      stdout: result.stdout,\n      stderr: result.stderr,\n      files: [],\n    });\n  } finally {\n    await bridge.close();\n  }\n}\n\nexport function createLocalProgrammaticToolCallingTool(\n  localConfig: t.LocalExecutionConfig = {}\n): DynamicStructuredTool {\n  return tool(\n    async (rawParams, config) => {\n      const params = rawParams as LocalProgrammaticParams;\n      return runLocalProgrammaticTool({\n        params,\n        config,\n        localConfig,\n        runtime: resolveRuntime(params),\n      });\n    },\n    {\n      name: ProgrammaticToolCallingName,\n      description: `${ProgrammaticToolCallingDescription}\\n\\nLocal engine: runs bash by default, or Python when \\`lang\\` is \\`py\\` or \\`python\\`, on the host machine and calls tools through an in-process localhost bridge.`,\n      schema: createLocalProgrammaticToolCallingSchema(localConfig),\n      responseFormat: Constants.CONTENT_AND_ARTIFACT,\n    }\n  );\n}\n\nexport function createLocalBashProgrammaticToolCallingTool(\n  localConfig: t.LocalExecutionConfig = {}\n): DynamicStructuredTool {\n  return tool(\n    async (rawParams, config) => {\n      const params = rawParams as LocalProgrammaticParams;\n      return runLocalProgrammaticTool({\n        params,\n        config,\n        localConfig,\n        runtime: 'bash',\n      });\n    },\n    {\n      name: Constants.BASH_PROGRAMMATIC_TOOL_CALLING,\n      description: `${BashProgrammaticToolCallingDescription}\\n\\nLocal engine: runs this bash orchestration code on the host machine and calls tools through an in-process localhost bridge.`,\n      schema: createLocalBashProgrammaticToolCallingSchema(localConfig),\n      responseFormat: Constants.CONTENT_AND_ARTIFACT,\n    }\n  );\n}\n"],"names":["ProgrammaticToolCallingSchema","BashProgrammaticToolCallingSchema","timingSafeEqual","executeHooks","randomBytes","createServer","randomUUID","executeTools","normalizeToPythonIdentifier","normalizeToBashIdentifier","shellQuote","filterBashToolsByUsage","filterToolsByUsage","executeLocalBash","executeLocalCode","formatCompletedResponse","getLocalSessionId","tool","ProgrammaticToolCallingName","ProgrammaticToolCallingDescription","Constants","BashProgrammaticToolCallingDescription"],"mappings":";;;;;;;;;;;;AA+BA,MAAM,eAAe,GAAG,KAAK;AAC7B,MAAM,iBAAiB,GAAG,IAAI;AAC9B,MAAM,iBAAiB,GAAG,MAAM;AAgChC,SAAS,qBAAqB,CAAC,SAA6B,EAAA;AAC1D,IAAA,IAAI,SAAS,IAAI,IAAI,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE;AACpD,QAAA,OAAO,eAAe;IACxB;AAEA,IAAA,OAAO,IAAI,CAAC,GAAG,CAAC,iBAAiB,EAAE,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;AAC3D;AAEA,SAAS,kBAAkB,CAAC,SAAiB,EAAA;AAC3C,IAAA,OAAO,SAAS,GAAG,IAAI,KAAK;AAC1B,UAAE,CAAA,EAAG,SAAS,GAAG,IAAI,CAAA,QAAA;AACrB,UAAE,CAAA,EAAG,SAAS,CAAA,aAAA,CAAe;AACjC;AAEA,SAAS,wBAAwB,CAAC,SAAkB,EAAA;AAClD,IAAA,MAAM,cAAc,GAAG,qBAAqB,CAAC,SAAS,CAAC;IACvD,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,CAAC,iBAAiB,EAAE,cAAc,CAAC;AAC9D,IAAA,MAAM,gBAAgB,GAAG,kBAAkB,CAAC,cAAc,CAAC;AAC3D,IAAA,MAAM,YAAY,GAAG,kBAAkB,CAAC,UAAU,CAAC;IAEnD,OAAO;AACL,QAAA,IAAI,EAAE,SAAS;AACf,QAAA,OAAO,EAAE,iBAAiB;AAC1B,QAAA,OAAO,EAAE,UAAU;AACnB,QAAA,OAAO,EAAE,cAAc;AACvB,QAAA,WAAW,EACT,gDAAgD;YAChD,CAAA,SAAA,EAAY,gBAAgB,CAAA,OAAA,EAAU,YAAY,CAAA,CAAA,CAAG;KACxD;AACH;AAEA,SAAS,wCAAwC,CAC/C,WAAA,GAAsC,EAAE,EAAA;IAExC,OAAO;AACL,QAAA,GAAGA,qDAA6B;AAChC,QAAA,UAAU,EAAE;YACV,GAAGA,qDAA6B,CAAC,UAAU;AAC3C,YAAA,OAAO,EAAE,wBAAwB,CAAC,WAAW,CAAC,SAAS,CAAC;AACxD,YAAA,IAAI,EAAE;AACJ,gBAAA,IAAI,EAAE,QAAQ;gBACd,IAAI,EAAE,CAAC,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,CAAC;AACpC,gBAAA,OAAO,EAAE,MAAM;AACf,gBAAA,WAAW,EACT,wGAAwG;AAC3G,aAAA;AACF,SAAA;KACO;AACZ;AAEA,SAAS,4CAA4C,CACnD,WAAA,GAAsC,EAAE,EAAA;IAExC,OAAO;AACL,QAAA,GAAGC,6DAAiC;AACpC,QAAA,UAAU,EAAE;YACV,GAAGA,6DAAiC,CAAC,UAAU;AAC/C,YAAA,OAAO,EAAE,wBAAwB,CAAC,WAAW,CAAC,SAAS,CAAC;AACzD,SAAA;KACO;AACZ;AAcA,MAAM,kBAAkB,GAAG,0BAA0B;AAErD,SAAS,kBAAkB,CAAC,CAAS,EAAE,CAAS,EAAA;IAC9C,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,EAAE,MAAM,CAAC;IACnC,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,EAAE,MAAM,CAAC;IACnC,IAAI,IAAI,CAAC,MAAM,KAAK,IAAI,CAAC,MAAM,EAAE;AAC/B,QAAA,OAAO,KAAK;IACd;AACA,IAAA,OAAOC,sBAAe,CAAC,IAAI,EAAE,IAAI,CAAC;AACpC;AAcA,SAAS,cAAc,CACrB,MAA+B,EAAA;AAE/B,IAAA,MAAM,UAAU,GAAG,MAAM,CAAC,IAAI,IAAI,MAAM,CAAC,OAAO,IAAI,MAAM,CAAC,QAAQ,IAAI,MAAM;AAC7E,IAAA,OAAO,UAAU,KAAK,IAAI,IAAI,UAAU,KAAK,QAAQ,GAAG,QAAQ,GAAG,MAAM;AAC3E;AAEA,SAAS,cAAc,CAAC,KAAc,EAAA;AACpC,IAAA,IAAI,KAAK,KAAK,SAAS,EAAE;AACvB,QAAA,OAAO,IAAI;IACb;AACA,IAAA,OAAO,KAAK;AACd;AAEA,eAAe,eAAe,CAAC,GAAoB,EAAA;IACjD,MAAM,MAAM,GAAa,EAAE;AAC3B,IAAA,WAAW,MAAM,KAAK,IAAI,GAAG,EAAE;QAC7B,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,GAAG,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAClE;AACA,IAAA,MAAM,GAAG,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC;AAClD,IAAA,IAAI,GAAG,KAAK,EAAE,EAAE;AACd,QAAA,OAAO,EAAE;IACX;AACA,IAAA,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAgB;AACvC;AAEA,SAAS,SAAS,CAAC,GAAmB,EAAE,MAAc,EAAE,KAAc,EAAA;IACpE,GAAG,CAAC,SAAS,CAAC,MAAM,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC;IAC7D,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;AAChC;AAEA;;;;;;;;;;;AAWG;AACI,eAAe,6BAA6B,CACjD,WAAsC,EACtC,QAAgB,EAChB,SAAiB,EACjB,SAAkC,EAAA;AAElC,IAAA,IAAI,WAAW,CAAC,QAAQ,IAAI,IAAI,EAAE;AAChC,QAAA,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE;IAC7B;AACA,IAAA,MAAM,MAAM,GAAG,MAAMC,yBAAY,CAAC;QAChC,QAAQ,EAAE,WAAW,CAAC,QAAQ;AAC9B,QAAA,KAAK,EAAE;AACL,YAAA,eAAe,EAAE,YAAY;YAC7B,KAAK,EAAE,WAAW,CAAC,KAAK;YACxB,QAAQ,EAAE,WAAW,CAAC,QAAQ;YAC9B,OAAO,EAAE,WAAW,CAAC,OAAO;YAC5B,gBAAgB,EAAE,WAAW,CAAC,gBAAgB;YAC9C,QAAQ;YACR,SAAS;YACT,SAAS;AACT,YAAA,MAAM,EAAE,EAAE;AACV,YAAA,IAAI,EAAE,CAAC;AACR,SAAA;QACD,SAAS,EAAE,WAAW,CAAC,KAAK;AAC5B,QAAA,UAAU,EAAE,QAAQ;KACrB,CAAC,CAAC,KAAK,CAAC,MAAM,SAAS,CAAC;AACzB,IAAA,IAAI,MAAM,IAAI,IAAI,EAAE;AAClB,QAAA,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE;IAC7B;AACA,IAAA,MAAM,SAAS,GACb,MAAM,CAAC,YAAY,IAAI;UAClB,MAAM,CAAC;UACR,SAAS;AACf,IAAA,IAAI,MAAM,CAAC,QAAQ,KAAK,MAAM,IAAI,MAAM,CAAC,QAAQ,KAAK,KAAK,EAAE;QAC3D,OAAO;AACL,YAAA,KAAK,EAAE,SAAS;YAChB,UAAU,EACR,MAAM,CAAC,MAAM;AACb,iBAAC,MAAM,CAAC,QAAQ,KAAK;sBACjB,CAAA,MAAA,EAAS,QAAQ,CAAA,sEAAA;AACnB,sBAAE,CAAA,MAAA,EAAS,QAAQ,CAAA,4BAAA,CAA8B,CAAC;SACvD;IACH;AACA,IAAA,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE;AAC7B;AAEA,eAAe,gBAAgB,CAC7B,OAAkB,EAClB,WAAuC,EAAA;IAEvC,MAAM,KAAK,GAAGC,kBAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC;IAC7C,MAAM,MAAM,GAAGC,iBAAY,CAAC,CAAC,GAAG,EAAE,GAAG,KAAI;;;;;;AAMvC,QAAA,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,IAAI,GAAG,EAAE,kBAAkB,CAAC;AACvD,QAAA,MAAM,UAAU,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,MAAM;AAC1D,QAAA,IAAI,GAAG,CAAC,MAAM,KAAK,MAAM,IAAI,GAAG,CAAC,QAAQ,KAAK,OAAO,EAAE;YACrD,IAAI,UAAU,EAAE;gBACd,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,YAAY,EAAE,CAAC;AACpD,gBAAA,GAAG,CAAC,GAAG,CAAC,WAAW,CAAC;YACtB;iBAAO;gBACL,SAAS,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC;YAC7C;YACA;QACF;QAEA,MAAM,SAAS,GAAG,GAAG,CAAC,OAAO,CAAC,kBAAkB,CAAC;AACjD,QAAA,MAAM,cAAc,GAAG,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,GAAG,SAAS,CAAC,CAAC,CAAC,GAAG,SAAS;QAC1E,IACE,OAAO,cAAc,KAAK,QAAQ;AAClC,YAAA,CAAC,kBAAkB,CAAC,cAAc,EAAE,KAAK,CAAC,EAC1C;YACA,IAAI,UAAU,EAAE;gBACd,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,YAAY,EAAE,CAAC;AACpD,gBAAA,GAAG,CAAC,GAAG,CAAC,cAAc,CAAC;YACzB;iBAAO;gBACL,SAAS,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC;YAChD;YACA;QACF;QAEA,eAAe,CAAC,GAAG;AAChB,aAAA,IAAI,CAAC,OAAO,IAAI,KAAI;AACnB,YAAA,IAAI,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,IAAI,KAAK,EAAE,EAAE;gBACrD,MAAM,OAAO,GAAG,sCAAsC;gBACtD,IAAI,UAAU,EAAE;oBACd,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,YAAY,EAAE,CAAC;AACpD,oBAAA,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC;gBAClB;qBAAO;AACL,oBAAA,SAAS,CAAC,GAAG,EAAE,GAAG,EAAE;AAClB,wBAAA,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,SAAS;AAC7B,wBAAA,MAAM,EAAE,IAAI;AACZ,wBAAA,QAAQ,EAAE,IAAI;AACd,wBAAA,aAAa,EAAE,OAAO;AACvB,qBAAA,CAAC;gBACJ;gBACA;YACF;YAEA,MAAM,MAAM,GAAG,IAAI,CAAC,EAAE,IAAI,CAAA,WAAA,EAAcC,iBAAU,EAAE,CAAA,CAAE;AACtD,YAAA,IAAI,cAAc,GAA4B,IAAI,CAAC,KAAK,IAAI,EAAE;AAC9D,YAAA,IAAI,WAAW,IAAI,IAAI,EAAE;AACvB,gBAAA,MAAM,IAAI,GAAG,MAAM,6BAA6B,CAC9C,WAAW,EACX,IAAI,CAAC,IAAI,EACT,MAAM,EACN,cAAc,CACf;AACD,gBAAA,IAAI,IAAI,CAAC,UAAU,IAAI,IAAI,EAAE;AAC3B,oBAAA,MAAM,OAAO,GAAG,IAAI,CAAC,UAAU;oBAC/B,IAAI,UAAU,EAAE;wBACd,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,YAAY,EAAE,CAAC;AACpD,wBAAA,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC;oBAClB;yBAAO;AACL,wBAAA,SAAS,CAAC,GAAG,EAAE,GAAG,EAAE;AAClB,4BAAA,OAAO,EAAE,MAAM;AACf,4BAAA,MAAM,EAAE,IAAI;AACZ,4BAAA,QAAQ,EAAE,IAAI;AACd,4BAAA,aAAa,EAAE,OAAO;AACvB,yBAAA,CAAC;oBACJ;oBACA;gBACF;AACA,gBAAA,cAAc,GAAG,IAAI,CAAC,KAAK;YAC7B;AAEA,YAAA,MAAM,CAAC,MAAM,CAAC,GAAG,MAAMC,oCAAY,CACjC;AACE,gBAAA;AACE,oBAAA,EAAE,EAAE,MAAM;oBACV,IAAI,EAAE,IAAI,CAAC,IAAI;AACf,oBAAA,KAAK,EAAE,cAAc;AACtB,iBAAA;aACF,EACD,OAAO,CACR;YAED,IAAI,UAAU,EAAE;AACd,gBAAA,IAAI,MAAM,CAAC,QAAQ,KAAK,IAAI,EAAE;oBAC5B,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,YAAY,EAAE,CAAC;AACpD,oBAAA,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,aAAa,IAAI,CAAA,KAAA,EAAQ,IAAI,CAAC,IAAI,CAAA,OAAA,CAAS,CAAC;gBAC7D;qBAAO;oBACL,MAAM,KAAK,GAAG,cAAc,CAAC,MAAM,CAAC,MAAM,CAAC;AAC3C,oBAAA,MAAM,IAAI,GACR,OAAO,KAAK,KAAK,QAAQ,GAAG,KAAK,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC;oBAC3D,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,YAAY,EAAE,CAAC;AACpD,oBAAA,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC;gBACf;gBACA;YACF;AAEA,YAAA,SAAS,CAAC,GAAG,EAAE,GAAG,EAAE;AAClB,gBAAA,GAAG,MAAM;AACT,gBAAA,MAAM,EAAE,cAAc,CAAC,MAAM,CAAC,MAAM,CAAC;AACtC,aAAA,CAAC;AACJ,QAAA,CAAC;AACA,aAAA,KAAK,CAAC,CAAC,KAAY,KAAI;YACtB,IAAI,UAAU,EAAE;gBACd,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,YAAY,EAAE,CAAC;AACpD,gBAAA,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC;YACxB;iBAAO;AACL,gBAAA,SAAS,CAAC,GAAG,EAAE,GAAG,EAAE;AAClB,oBAAA,OAAO,EAAE,OAAO;AAChB,oBAAA,MAAM,EAAE,IAAI;AACZ,oBAAA,QAAQ,EAAE,IAAI;oBACd,aAAa,EAAE,KAAK,CAAC,OAAO;AAC7B,iBAAA,CAAC;YACJ;AACF,QAAA,CAAC,CAAC;AACN,IAAA,CAAC,CAAC;IAEF,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,KAAI;AAC1C,QAAA,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC;QAC5B,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,WAAW,EAAE,OAAO,CAAC;AACxC,IAAA,CAAC,CAAC;AAEF,IAAA,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,EAAiB;IAC/C,OAAO;AACL,QAAA,GAAG,EAAE,CAAA,iBAAA,EAAoB,OAAO,CAAC,IAAI,CAAA,KAAA,CAAO;QAC5C,KAAK;AACL,QAAA,KAAK,EAAE,MACL,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,KAAI;YAC9B,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,GAAG,OAAO,EAAE,CAAC,CAAC;AAC9D,QAAA,CAAC,CAAC;KACL;AACH;AAEA,SAAS,MAAM,CAAC,IAAY,EAAA;AAC1B,IAAA,OAAO;SACJ,KAAK,CAAC,IAAI;SACV,GAAG,CAAC,CAAC,IAAI,KAAK,CAAA,EAAA,EAAK,IAAI,CAAA,CAAE;SACzB,IAAI,CAAC,IAAI,CAAC;AACf;AAEA,SAAS,mBAAmB,CAC1B,IAAY,EACZ,QAAoB,EACpB,SAAiB,EACjB,WAAmB,EAAA;IAEnB,MAAM,YAAY,GAAG;AAClB,SAAA,GAAG,CAAC,CAAC,GAAG,KAAI;QACX,MAAM,UAAU,GAAGC,mDAA2B,CAAC,GAAG,CAAC,IAAI,CAAC;QACxD,OAAO;AACL,YAAA,CAAA,UAAA,EAAa,UAAU,CAAA,WAAA,CAAa;YACpC,CAAA,qCAAA,EAAwC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA,SAAA,CAAW;AAC5E,SAAA,CAAC,IAAI,CAAC,IAAI,CAAC;AACd,IAAA,CAAC;SACA,IAAI,CAAC,MAAM,CAAC;IAEf,OAAO;;;;;AAKmB,0BAAA,EAAA,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC;AAC1B,yBAAA,EAAA,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC;;;;;;AAMhD,IAAA,EAAA,IAAI,CAAC,SAAS,CAAC,kBAAkB,CAAC,CAAA;;;;;;;;;;;;;;EActC,YAAY;;;EAGZ,MAAM,CAAC,IAAI,CAAC;;;CAGb,CAAC,SAAS,EAAE;AACb;AAEM,SAAU,0BAA0B,CACxC,IAAY,EACZ,QAAoB,EACpB,SAAiB,EACjB,WAAmB,EAAA;IAEnB,OAAO,iBAAiB,CAAC,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,WAAW,CAAC;AAClE;AAEA,SAAS,iBAAiB,CACxB,IAAY,EACZ,QAAoB,EACpB,SAAiB,EACjB,WAAmB,EAAA;IAEnB,MAAM,SAAS,GAAG;AACf,SAAA,GAAG,CAAC,CAAC,GAAG,KAAI;QACX,MAAM,QAAQ,GAAGC,qDAAyB,CAAC,GAAG,CAAC,IAAI,CAAC;QACpD,OAAO;AACL,YAAA,CAAA,EAAG,QAAQ,CAAA,IAAA,CAAM;YACjB,0BAA0B;YAC1B,iDAAiD;AACjD,YAAA,CAAA,wBAAA,EAA2BC,+BAAU,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA,WAAA,CAAa;YAC5D,GAAG;AACJ,SAAA,CAAC,IAAI,CAAC,IAAI,CAAC;AACd,IAAA,CAAC;SACA,IAAI,CAAC,MAAM,CAAC;IAEf,OAAO;0BACiBA,+BAAU,CAAC,SAAS,CAAC;0BACrBA,+BAAU,CAAC,kBAAkB,CAAC;yBAC/BA,+BAAU,CAAC,WAAW,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAyD9C,SAAS;;EAET,IAAI;CACL,CAAC,SAAS,EAAE;AACb;AAEA,SAAS,sBAAsB,CAAC,MAE/B,EAAA;AACC,IAAA,QAAQ,MAAM,EAAE,QAAQ,IAAI,EAAE;AAChC;AAEA,SAAS,sBAAsB,CAC7B,OAAkB,EAClB,QAAoB,EACpB,IAAY,EACZ,WAAuB,EAAA;IAEvB,MAAM,cAAc,GAAG,WAAW,CAAC,QAAQ,EAAE,IAAI,CAAC;AAClD,IAAA,MAAM,YAAY,GAAG,IAAI,GAAG,CAC1B;AACG,SAAA,GAAG,CAAC,CAAC,GAAG,KAAI;QACX,MAAM,UAAU,GAAG,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC;QACxC,OAAO,UAAU,IAAI;AACnB,cAAE;cACC,CAAC,GAAG,CAAC,IAAI,EAAE,UAAU,CAA6B;AACzD,IAAA,CAAC;SACA,MAAM,CAAC,CAAC,KAAK,KAAuC,KAAK,IAAI,IAAI,CAAC,CACtE;AAED,IAAA,OAAO,EAAE,cAAc,EAAE,YAAY,EAAE;AACzC;AAEA,eAAe,wBAAwB,CAAC,IAKvC,EAAA;AACC,IAAA,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,GAAG,sBAAsB,CAC/D,IAAI,CAAC,MAAM,CACZ;IAED,IAAI,OAAO,IAAI,IAAI,IAAI,OAAO,CAAC,IAAI,KAAK,CAAC,EAAE;AACzC,QAAA,MAAM,IAAI,KAAK,CAAC,uDAAuD,CAAC;IAC1E;IACA,IAAI,QAAQ,IAAI,IAAI,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE;AAC7C,QAAA,MAAM,IAAI,KAAK,CACb,gEAAgE,CACjE;IACH;AAEA,IAAA,MAAM,EAAE,cAAc,EAAE,YAAY,EAAE,GAAG,sBAAsB,CAC7D,OAAO,EACP,QAAQ,EACR,IAAI,CAAC,MAAM,CAAC,IAAI,EAChB,IAAI,CAAC,OAAO,KAAK,MAAM,GAAGC,kDAAsB,GAAGC,0CAAkB,CACtE;IACD,MAAM,MAAM,GAAG,MAAM,gBAAgB,CAAC,YAAY,EAAE,WAAW,CAAC;AAEhE,IAAA,IAAI;AACF,QAAA,MAAM,SAAS,GACb,IAAI,CAAC,MAAM,CAAC,OAAO,IAAI,IAAI,CAAC,WAAW,CAAC,SAAS,IAAI,eAAe;AACtE,QAAA,MAAM,MAAM,GACV,IAAI,CAAC,OAAO,KAAK;AACf,cAAE,MAAMC,qCAAgB,CACtB,iBAAiB,CACf,IAAI,CAAC,MAAM,CAAC,IAAI,EAChB,cAAc,EACd,MAAM,CAAC,GAAG,EACV,MAAM,CAAC,KAAK,CACb,EACD,EAAE,GAAG,IAAI,CAAC,WAAW,EAAE,SAAS,EAAE;cAElC,MAAMC,qCAAgB,CACtB;AACE,gBAAA,IAAI,EAAE,IAAI;AACV,gBAAA,IAAI,EAAE,mBAAmB,CACvB,IAAI,CAAC,MAAM,CAAC,IAAI,EAChB,cAAc,EACd,MAAM,CAAC,GAAG,EACV,MAAM,CAAC,KAAK,CACb;aACF,EACD,EAAE,GAAG,IAAI,CAAC,WAAW,EAAE,SAAS,EAAE,CACnC;QAEL,IAAI,MAAM,CAAC,QAAQ,KAAK,CAAC,IAAI,MAAM,CAAC,QAAQ,EAAE;AAC5C,YAAA,MAAM,IAAI,KAAK,CACb,MAAM,CAAC,MAAM,KAAK;kBACd,MAAM,CAAC;AACT,kBAAE,CAAA,MAAA,EAAS,IAAI,CAAC,OAAO,CAAA,yCAAA,EACrB,MAAM,CAAC,QAAQ,IAAI,SACrB,CAAA,CAAE,CACL;QACH;AAEA,QAAA,OAAOC,+CAAuB,CAAC;AAC7B,YAAA,MAAM,EAAE,WAAW;AACnB,YAAA,UAAU,EAAEC,sCAAiB,CAAC,IAAI,CAAC,WAAW,CAAC;YAC/C,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,MAAM,EAAE,MAAM,CAAC,MAAM;AACrB,YAAA,KAAK,EAAE,EAAE;AACV,SAAA,CAAC;IACJ;YAAU;AACR,QAAA,MAAM,MAAM,CAAC,KAAK,EAAE;IACtB;AACF;AAEM,SAAU,sCAAsC,CACpD,WAAA,GAAsC,EAAE,EAAA;IAExC,OAAOC,UAAI,CACT,OAAO,SAAS,EAAE,MAAM,KAAI;QAC1B,MAAM,MAAM,GAAG,SAAoC;AACnD,QAAA,OAAO,wBAAwB,CAAC;YAC9B,MAAM;YACN,MAAM;YACN,WAAW;AACX,YAAA,OAAO,EAAE,cAAc,CAAC,MAAM,CAAC;AAChC,SAAA,CAAC;AACJ,IAAA,CAAC,EACD;AACE,QAAA,IAAI,EAAEC,mDAA2B;QACjC,WAAW,EAAE,CAAA,EAAGC,0DAAkC,CAAA,oKAAA,CAAsK;AACxN,QAAA,MAAM,EAAE,wCAAwC,CAAC,WAAW,CAAC;QAC7D,cAAc,EAAEC,eAAS,CAAC,oBAAoB;AAC/C,KAAA,CACF;AACH;AAEM,SAAU,0CAA0C,CACxD,WAAA,GAAsC,EAAE,EAAA;IAExC,OAAOH,UAAI,CACT,OAAO,SAAS,EAAE,MAAM,KAAI;QAC1B,MAAM,MAAM,GAAG,SAAoC;AACnD,QAAA,OAAO,wBAAwB,CAAC;YAC9B,MAAM;YACN,MAAM;YACN,WAAW;AACX,YAAA,OAAO,EAAE,MAAM;AAChB,SAAA,CAAC;AACJ,IAAA,CAAC,EACD;QACE,IAAI,EAAEG,eAAS,CAAC,8BAA8B;QAC9C,WAAW,EAAE,CAAA,EAAGC,kEAAsC,CAAA,+HAAA,CAAiI;AACvL,QAAA,MAAM,EAAE,4CAA4C,CAAC,WAAW,CAAC;QACjE,cAAc,EAAED,eAAS,CAAC,oBAAoB;AAC/C,KAAA,CACF;AACH;;;;;;;"}
+{"version":3,"file":"LocalProgrammaticToolCalling.cjs","names":["ProgrammaticToolCallingSchema","BashProgrammaticToolCallingSchema","executeHooks","executeTools","normalizeToPythonIdentifier","normalizeToBashIdentifier","shellQuote","filterBashToolsByUsage","filterToolsByUsage","executeLocalBash","executeLocalCode","formatCompletedResponse","getLocalSessionId","ProgrammaticToolCallingName","ProgrammaticToolCallingDescription","BashProgrammaticToolCallingDescription"],"sources":["../../../../src/tools/local/LocalProgrammaticToolCalling.ts"],"sourcesContent":["import { createServer } from 'http';\nimport { tool } from '@langchain/core/tools';\nimport { randomBytes, randomUUID, timingSafeEqual } from 'crypto';\nimport type { DynamicStructuredTool } from '@langchain/core/tools';\nimport type { IncomingMessage, ServerResponse } from 'http';\nimport type { AddressInfo } from 'net';\nimport type * as t from '@/types';\nimport {\n  executeTools,\n  filterToolsByUsage,\n  formatCompletedResponse,\n  normalizeToPythonIdentifier,\n  ProgrammaticToolCallingName,\n  ProgrammaticToolCallingSchema,\n  ProgrammaticToolCallingDescription,\n} from '@/tools/ProgrammaticToolCalling';\nimport {\n  BashProgrammaticToolCallingSchema,\n  BashProgrammaticToolCallingDescription,\n  filterBashToolsByUsage,\n  normalizeToBashIdentifier,\n} from '@/tools/BashProgrammaticToolCalling';\nimport {\n  executeLocalBash,\n  executeLocalCode,\n  getLocalSessionId,\n  shellQuote,\n} from './LocalExecutionEngine';\nimport { executeHooks } from '@/hooks';\nimport { Constants } from '@/common';\n\nconst DEFAULT_TIMEOUT = 60000;\nconst LOCAL_MIN_TIMEOUT = 1000;\nconst LOCAL_MAX_TIMEOUT = 300000;\n\ntype LocalTimeoutSchema = {\n  type: 'integer';\n  minimum: number;\n  maximum: number;\n  default: number;\n  description: string;\n};\n\ntype LocalProgrammaticToolCallingJsonSchema = {\n  type: 'object';\n  properties: typeof ProgrammaticToolCallingSchema.properties & {\n    timeout: LocalTimeoutSchema;\n    lang: {\n      type: 'string';\n      enum: readonly ['py', 'python', 'bash', 'sh'];\n      default: 'bash';\n      description: string;\n    };\n  };\n  required: readonly ['code'];\n};\n\ntype LocalBashProgrammaticToolCallingJsonSchema = {\n  type: 'object';\n  properties: typeof BashProgrammaticToolCallingSchema.properties & {\n    timeout: LocalTimeoutSchema;\n  };\n  required: readonly ['code'];\n};\n\nfunction normalizeLocalTimeout(timeoutMs: number | undefined): number {\n  if (timeoutMs == null || !Number.isFinite(timeoutMs)) {\n    return DEFAULT_TIMEOUT;\n  }\n\n  return Math.max(LOCAL_MIN_TIMEOUT, Math.floor(timeoutMs));\n}\n\nfunction formatLocalTimeout(timeoutMs: number): string {\n  return timeoutMs % 1000 === 0\n    ? `${timeoutMs / 1000} seconds`\n    : `${timeoutMs} milliseconds`;\n}\n\nfunction createLocalTimeoutSchema(timeoutMs?: number): LocalTimeoutSchema {\n  const defaultTimeout = normalizeLocalTimeout(timeoutMs);\n  const maxTimeout = Math.max(LOCAL_MAX_TIMEOUT, defaultTimeout);\n  const formattedDefault = formatLocalTimeout(defaultTimeout);\n  const formattedMax = formatLocalTimeout(maxTimeout);\n\n  return {\n    type: 'integer',\n    minimum: LOCAL_MIN_TIMEOUT,\n    maximum: maxTimeout,\n    default: defaultTimeout,\n    description:\n      'Maximum local execution time in milliseconds. ' +\n      `Default: ${formattedDefault}. Max: ${formattedMax}.`,\n  };\n}\n\nfunction createLocalProgrammaticToolCallingSchema(\n  localConfig: t.LocalExecutionConfig = {}\n): LocalProgrammaticToolCallingJsonSchema {\n  return {\n    ...ProgrammaticToolCallingSchema,\n    properties: {\n      ...ProgrammaticToolCallingSchema.properties,\n      timeout: createLocalTimeoutSchema(localConfig.timeoutMs),\n      lang: {\n        type: 'string',\n        enum: ['py', 'python', 'bash', 'sh'],\n        default: 'bash',\n        description:\n          'Local engine runtime for orchestration code. Defaults to bash; use py/python for Python orchestration.',\n      },\n    },\n  } as const;\n}\n\nfunction createLocalBashProgrammaticToolCallingSchema(\n  localConfig: t.LocalExecutionConfig = {}\n): LocalBashProgrammaticToolCallingJsonSchema {\n  return {\n    ...BashProgrammaticToolCallingSchema,\n    properties: {\n      ...BashProgrammaticToolCallingSchema.properties,\n      timeout: createLocalTimeoutSchema(localConfig.timeoutMs),\n    },\n  } as const;\n}\n\ntype ToolBridge = {\n  url: string;\n  token: string;\n  close: () => Promise<void>;\n};\n\ntype ToolRequest = {\n  id?: string;\n  name?: string;\n  input?: Record<string, unknown>;\n};\n\nconst BRIDGE_AUTH_HEADER = 'x-librechat-bridge-token';\n\nfunction constantTimeEquals(a: string, b: string): boolean {\n  const aBuf = Buffer.from(a, 'utf8');\n  const bBuf = Buffer.from(b, 'utf8');\n  if (aBuf.length !== bBuf.length) {\n    return false;\n  }\n  return timingSafeEqual(aBuf, bBuf);\n}\n\ntype LocalProgrammaticRuntime = 'python' | 'bash';\n\ntype LocalProgrammaticParams = {\n  code: string;\n  timeout?: number;\n  lang?: string;\n  runtime?: string;\n  language?: string;\n};\n\ntype ToolFilter = (toolDefs: t.LCTool[], code: string) => t.LCTool[];\n\nfunction resolveRuntime(\n  params: LocalProgrammaticParams\n): LocalProgrammaticRuntime {\n  const rawRuntime = params.lang ?? params.runtime ?? params.language ?? 'bash';\n  return rawRuntime === 'py' || rawRuntime === 'python' ? 'python' : 'bash';\n}\n\nfunction toSerializable(value: unknown): unknown {\n  if (value === undefined) {\n    return null;\n  }\n  return value;\n}\n\nasync function readRequestBody(req: IncomingMessage): Promise<ToolRequest> {\n  const chunks: Buffer[] = [];\n  for await (const chunk of req) {\n    chunks.push(Buffer.isBuffer(chunk) ? chunk : Buffer.from(chunk));\n  }\n  const raw = Buffer.concat(chunks).toString('utf8');\n  if (raw === '') {\n    return {};\n  }\n  return JSON.parse(raw) as ToolRequest;\n}\n\nfunction writeJson(res: ServerResponse, status: number, value: unknown): void {\n  res.writeHead(status, { 'Content-Type': 'application/json' });\n  res.end(JSON.stringify(value));\n}\n\n/**\n * Run the host's `PreToolUse` hook chain for a single bridge call.\n * Returns the (possibly rewritten) input and a `denyReason` if any\n * matcher returned `decision: 'deny'` or `'ask'`. `'ask'` collapses\n * to deny because the bridge can't raise a LangGraph interrupt from\n * inside an HTTP handler — fail-closed matches the rest of the SDK\n * when HITL is unavailable.\n *\n * @internal Exported for tests so the deny / allow / updatedInput /\n *   ask branches can be exercised without standing up the full HTTP\n *   bridge.\n */\nexport async function applyPreToolUseHooksForBridge(\n  hookContext: t.ProgrammaticHookContext,\n  toolName: string,\n  toolUseId: string,\n  toolInput: Record<string, unknown>\n): Promise<{ input: Record<string, unknown>; denyReason?: string }> {\n  if (hookContext.registry == null) {\n    return { input: toolInput };\n  }\n  const result = await executeHooks({\n    registry: hookContext.registry,\n    input: {\n      hook_event_name: 'PreToolUse',\n      runId: hookContext.runId,\n      threadId: hookContext.threadId,\n      agentId: hookContext.agentId,\n      executingAgentId: hookContext.executingAgentId,\n      toolName,\n      toolInput,\n      toolUseId,\n      stepId: '',\n      turn: 0,\n    },\n    sessionId: hookContext.runId,\n    matchQuery: toolName,\n  }).catch(() => undefined);\n  if (result == null) {\n    return { input: toolInput };\n  }\n  const nextInput =\n    result.updatedInput != null\n      ? (result.updatedInput as Record<string, unknown>)\n      : toolInput;\n  if (result.decision === 'deny' || result.decision === 'ask') {\n    return {\n      input: nextInput,\n      denyReason:\n        result.reason ??\n        (result.decision === 'ask'\n          ? `Tool \"${toolName}\" requires human approval; bridge cannot raise an interrupt — denying.`\n          : `Tool \"${toolName}\" denied by PreToolUse hook.`),\n    };\n  }\n  return { input: nextInput };\n}\n\nasync function createToolBridge(\n  toolMap: t.ToolMap,\n  hookContext?: t.ProgrammaticHookContext\n): Promise<ToolBridge> {\n  const token = randomBytes(32).toString('hex');\n  const server = createServer((req, res) => {\n    // `?mode=text` returns the already-serialized result as the body\n    // (or the error message at non-2xx). Python/Node callers stay on\n    // JSON; bash callers using curl can avoid pulling in a JSON\n    // parser dependency (Codex P2 #19 — `python3` was a hard\n    // requirement for the bash bridge, breaking minimal containers).\n    const url = new URL(req.url ?? '/', 'http://127.0.0.1');\n    const isTextMode = url.searchParams.get('mode') === 'text';\n    if (req.method !== 'POST' || url.pathname !== '/tool') {\n      if (isTextMode) {\n        res.writeHead(404, { 'Content-Type': 'text/plain' });\n        res.end('Not found');\n      } else {\n        writeJson(res, 404, { error: 'Not found' });\n      }\n      return;\n    }\n\n    const presented = req.headers[BRIDGE_AUTH_HEADER];\n    const presentedToken = Array.isArray(presented) ? presented[0] : presented;\n    if (\n      typeof presentedToken !== 'string' ||\n      !constantTimeEquals(presentedToken, token)\n    ) {\n      if (isTextMode) {\n        res.writeHead(401, { 'Content-Type': 'text/plain' });\n        res.end('Unauthorized');\n      } else {\n        writeJson(res, 401, { error: 'Unauthorized' });\n      }\n      return;\n    }\n\n    readRequestBody(req)\n      .then(async (body) => {\n        if (typeof body.name !== 'string' || body.name === '') {\n          const message = 'Tool request is missing a tool name.';\n          if (isTextMode) {\n            res.writeHead(400, { 'Content-Type': 'text/plain' });\n            res.end(message);\n          } else {\n            writeJson(res, 400, {\n              call_id: body.id ?? 'invalid',\n              result: null,\n              is_error: true,\n              error_message: message,\n            });\n          }\n          return;\n        }\n\n        const callId = body.id ?? `local_call_${randomUUID()}`;\n        let effectiveInput: Record<string, unknown> = body.input ?? {};\n        if (hookContext != null) {\n          const gate = await applyPreToolUseHooksForBridge(\n            hookContext,\n            body.name,\n            callId,\n            effectiveInput\n          );\n          if (gate.denyReason != null) {\n            const denyMsg = gate.denyReason;\n            if (isTextMode) {\n              res.writeHead(500, { 'Content-Type': 'text/plain' });\n              res.end(denyMsg);\n            } else {\n              writeJson(res, 500, {\n                call_id: callId,\n                result: null,\n                is_error: true,\n                error_message: denyMsg,\n              });\n            }\n            return;\n          }\n          effectiveInput = gate.input;\n        }\n\n        const [result] = await executeTools(\n          [\n            {\n              id: callId,\n              name: body.name,\n              input: effectiveInput,\n            },\n          ],\n          toolMap\n        );\n\n        if (isTextMode) {\n          if (result.is_error === true) {\n            res.writeHead(500, { 'Content-Type': 'text/plain' });\n            res.end(result.error_message ?? `Tool ${body.name} failed`);\n          } else {\n            const value = toSerializable(result.result);\n            const text =\n              typeof value === 'string' ? value : JSON.stringify(value);\n            res.writeHead(200, { 'Content-Type': 'text/plain' });\n            res.end(text);\n          }\n          return;\n        }\n\n        writeJson(res, 200, {\n          ...result,\n          result: toSerializable(result.result),\n        });\n      })\n      .catch((error: Error) => {\n        if (isTextMode) {\n          res.writeHead(500, { 'Content-Type': 'text/plain' });\n          res.end(error.message);\n        } else {\n          writeJson(res, 500, {\n            call_id: 'error',\n            result: null,\n            is_error: true,\n            error_message: error.message,\n          });\n        }\n      });\n  });\n\n  await new Promise<void>((resolve, reject) => {\n    server.once('error', reject);\n    server.listen(0, '127.0.0.1', resolve);\n  });\n\n  const address = server.address() as AddressInfo;\n  return {\n    url: `http://127.0.0.1:${address.port}/tool`,\n    token,\n    close: () =>\n      new Promise((resolve, reject) => {\n        server.close((error) => (error ? reject(error) : resolve()));\n      }),\n  };\n}\n\nfunction indent(code: string): string {\n  return code\n    .split('\\n')\n    .map((line) => `  ${line}`)\n    .join('\\n');\n}\n\nfunction createPythonProgram(\n  code: string,\n  toolDefs: t.LCTool[],\n  bridgeUrl: string,\n  bridgeToken: string\n): string {\n  const functionDefs = toolDefs\n    .map((def) => {\n      const pythonName = normalizeToPythonIdentifier(def.name);\n      return [\n        `async def ${pythonName}(**kwargs):`,\n        `  return await __librechat_call_tool(${JSON.stringify(def.name)}, kwargs)`,\n      ].join('\\n');\n    })\n    .join('\\n\\n');\n\n  return `\nimport asyncio\nimport json\nimport urllib.request\n\n__LIBRECHAT_TOOL_BRIDGE = ${JSON.stringify(bridgeUrl)}\n__LIBRECHAT_TOOL_TOKEN = ${JSON.stringify(bridgeToken)}\n\nasync def __librechat_call_tool(name, payload):\n  body = json.dumps({\"name\": name, \"input\": payload}).encode(\"utf-8\")\n  headers = {\n    \"Content-Type\": \"application/json\",\n    ${JSON.stringify(BRIDGE_AUTH_HEADER)}: __LIBRECHAT_TOOL_TOKEN,\n  }\n\n  def request():\n    req = urllib.request.Request(__LIBRECHAT_TOOL_BRIDGE, data=body, headers=headers, method=\"POST\")\n    with urllib.request.urlopen(req, timeout=300) as response:\n      return response.read().decode(\"utf-8\")\n\n  raw = await asyncio.to_thread(request)\n  result = json.loads(raw)\n  if result.get(\"is_error\"):\n    raise RuntimeError(result.get(\"error_message\") or f\"Tool {name} failed\")\n  return result.get(\"result\")\n\n${functionDefs}\n\nasync def __librechat_main():\n${indent(code)}\n\nasyncio.run(__librechat_main())\n`.trimStart();\n}\n\nexport function _createBashProgramForTests(\n  code: string,\n  toolDefs: t.LCTool[],\n  bridgeUrl: string,\n  bridgeToken: string\n): string {\n  return createBashProgram(code, toolDefs, bridgeUrl, bridgeToken);\n}\n\nfunction createBashProgram(\n  code: string,\n  toolDefs: t.LCTool[],\n  bridgeUrl: string,\n  bridgeToken: string\n): string {\n  const functions = toolDefs\n    .map((def) => {\n      const bashName = normalizeToBashIdentifier(def.name);\n      return [\n        `${bashName}() {`,\n        '  local payload=\"${1:-}\"',\n        '  if [ -z \"$payload\" ]; then payload=\\'{}\\'; fi',\n        `  __librechat_call_tool ${shellQuote(def.name)} \"$payload\"`,\n        '}',\n      ].join('\\n');\n    })\n    .join('\\n\\n');\n\n  return `\n__LIBRECHAT_TOOL_BRIDGE=${shellQuote(bridgeUrl)}\n__LIBRECHAT_TOOL_HEADER=${shellQuote(BRIDGE_AUTH_HEADER)}\n__LIBRECHAT_TOOL_TOKEN=${shellQuote(bridgeToken)}\n\n# Bridge call helper. Tries curl first (universally available, no\n# JSON parser needed thanks to the bridge's ?mode=text endpoint),\n# falls back to python3 for environments without curl. Codex P2 #19\n# flagged that the prior python3-only path broke minimal containers\n# (and Windows hosts without a python3 binary on PATH). Tool names\n# come from Constants.* and are always safe identifiers, so we can\n# splice them into JSON without an escape pass.\n__librechat_call_tool() {\n  local tool_name=\"$1\"\n  local payload=\"$2\"\n  if command -v curl >/dev/null 2>&1; then\n    local body=\"{\\\\\"name\\\\\":\\\\\"$tool_name\\\\\",\\\\\"input\\\\\":$payload}\"\n    local response\n    local http_code\n    response=$(curl -sS -X POST \\\n      -H \"Content-Type: application/json\" \\\n      -H \"$__LIBRECHAT_TOOL_HEADER: $__LIBRECHAT_TOOL_TOKEN\" \\\n      --data-binary \"$body\" \\\n      -w '\\\\n__LIBRECHAT_HTTP_CODE_%{http_code}__' \\\n      \"$__LIBRECHAT_TOOL_BRIDGE?mode=text\")\n    http_code=$(printf '%s' \"$response\" | sed -n 's/.*__LIBRECHAT_HTTP_CODE_\\\\([0-9][0-9]*\\\\)__$/\\\\1/p')\n    local body_only\n    body_only=$(printf '%s' \"$response\" | sed 's/__LIBRECHAT_HTTP_CODE_[0-9][0-9]*__$//')\n    if [ \"$http_code\" = \"200\" ]; then\n      printf '%s' \"$body_only\"\n      return 0\n    fi\n    printf '%s\\\\n' \"$body_only\" >&2\n    return 1\n  elif command -v python3 >/dev/null 2>&1; then\n    python3 - \"$__LIBRECHAT_TOOL_BRIDGE\" \"$tool_name\" \"$payload\" \"$__LIBRECHAT_TOOL_HEADER\" \"$__LIBRECHAT_TOOL_TOKEN\" <<'PY'\nimport json\nimport sys\nimport urllib.request\n\nurl, name, payload, header, token = sys.argv[1], sys.argv[2], sys.argv[3], sys.argv[4], sys.argv[5]\nbody = json.dumps({\"name\": name, \"input\": json.loads(payload)}).encode(\"utf-8\")\nreq = urllib.request.Request(url, data=body, headers={\"Content-Type\": \"application/json\", header: token}, method=\"POST\")\nwith urllib.request.urlopen(req, timeout=300) as response:\n  result = json.loads(response.read().decode(\"utf-8\"))\nif result.get(\"is_error\"):\n  print(result.get(\"error_message\") or f\"Tool {name} failed\", file=sys.stderr)\n  sys.exit(1)\nvalue = result.get(\"result\")\nif isinstance(value, str):\n  print(value)\nelse:\n  print(json.dumps(value))\nPY\n  else\n    printf 'librechat: tool bridge needs either curl or python3 on PATH\\\\n' >&2\n    return 1\n  fi\n}\n\n${functions}\n\n${code}\n`.trimStart();\n}\n\nfunction getProgrammaticContext(config?: {\n  toolCall?: unknown;\n}): Partial<t.ProgrammaticCache> {\n  return (config?.toolCall ?? {}) as Partial<t.ProgrammaticCache>;\n}\n\nfunction createEffectiveToolMap(\n  toolMap: t.ToolMap,\n  toolDefs: t.LCTool[],\n  code: string,\n  filterTools: ToolFilter\n): { effectiveTools: t.LCTool[]; effectiveMap: t.ToolMap } {\n  const effectiveTools = filterTools(toolDefs, code);\n  const effectiveMap = new Map<string, t.GenericTool>(\n    effectiveTools\n      .map((def) => {\n        const executable = toolMap.get(def.name);\n        return executable == null\n          ? undefined\n          : ([def.name, executable] as [string, t.GenericTool]);\n      })\n      .filter((entry): entry is [string, t.GenericTool] => entry != null)\n  );\n\n  return { effectiveTools, effectiveMap };\n}\n\nasync function runLocalProgrammaticTool(args: {\n  params: LocalProgrammaticParams;\n  config?: { toolCall?: unknown };\n  localConfig: t.LocalExecutionConfig;\n  runtime: LocalProgrammaticRuntime;\n}): Promise<[string, t.ProgrammaticExecutionArtifact]> {\n  const { toolMap, toolDefs, hookContext } = getProgrammaticContext(\n    args.config\n  );\n\n  if (toolMap == null || toolMap.size === 0) {\n    throw new Error('No toolMap provided for local programmatic execution.');\n  }\n  if (toolDefs == null || toolDefs.length === 0) {\n    throw new Error(\n      'No tool definitions provided for local programmatic execution.'\n    );\n  }\n\n  const { effectiveTools, effectiveMap } = createEffectiveToolMap(\n    toolMap,\n    toolDefs,\n    args.params.code,\n    args.runtime === 'bash' ? filterBashToolsByUsage : filterToolsByUsage\n  );\n  const bridge = await createToolBridge(effectiveMap, hookContext);\n\n  try {\n    const timeoutMs =\n      args.params.timeout ?? args.localConfig.timeoutMs ?? DEFAULT_TIMEOUT;\n    const result =\n      args.runtime === 'bash'\n        ? await executeLocalBash(\n          createBashProgram(\n            args.params.code,\n            effectiveTools,\n            bridge.url,\n            bridge.token\n          ),\n          { ...args.localConfig, timeoutMs }\n        )\n        : await executeLocalCode(\n          {\n            lang: 'py',\n            code: createPythonProgram(\n              args.params.code,\n              effectiveTools,\n              bridge.url,\n              bridge.token\n            ),\n          },\n          { ...args.localConfig, timeoutMs }\n        );\n\n    if (result.exitCode !== 0 || result.timedOut) {\n      throw new Error(\n        result.stderr !== ''\n          ? result.stderr\n          : `Local ${args.runtime} programmatic execution exited with code ${\n            result.exitCode ?? 'unknown'\n          }`\n      );\n    }\n\n    return formatCompletedResponse({\n      status: 'completed',\n      session_id: getLocalSessionId(args.localConfig),\n      stdout: result.stdout,\n      stderr: result.stderr,\n      files: [],\n    });\n  } finally {\n    await bridge.close();\n  }\n}\n\nexport function createLocalProgrammaticToolCallingTool(\n  localConfig: t.LocalExecutionConfig = {}\n): DynamicStructuredTool {\n  return tool(\n    async (rawParams, config) => {\n      const params = rawParams as LocalProgrammaticParams;\n      return runLocalProgrammaticTool({\n        params,\n        config,\n        localConfig,\n        runtime: resolveRuntime(params),\n      });\n    },\n    {\n      name: ProgrammaticToolCallingName,\n      description: `${ProgrammaticToolCallingDescription}\\n\\nLocal engine: runs bash by default, or Python when \\`lang\\` is \\`py\\` or \\`python\\`, on the host machine and calls tools through an in-process localhost bridge.`,\n      schema: createLocalProgrammaticToolCallingSchema(localConfig),\n      responseFormat: Constants.CONTENT_AND_ARTIFACT,\n    }\n  );\n}\n\nexport function createLocalBashProgrammaticToolCallingTool(\n  localConfig: t.LocalExecutionConfig = {}\n): DynamicStructuredTool {\n  return tool(\n    async (rawParams, config) => {\n      const params = rawParams as LocalProgrammaticParams;\n      return runLocalProgrammaticTool({\n        params,\n        config,\n        localConfig,\n        runtime: 'bash',\n      });\n    },\n    {\n      name: Constants.BASH_PROGRAMMATIC_TOOL_CALLING,\n      description: `${BashProgrammaticToolCallingDescription}\\n\\nLocal engine: runs this bash orchestration code on the host machine and calls tools through an in-process localhost bridge.`,\n      schema: createLocalBashProgrammaticToolCallingSchema(localConfig),\n      responseFormat: Constants.CONTENT_AND_ARTIFACT,\n    }\n  );\n}\n"],"mappings":";;;;;;;;;;;AA+BA,MAAM,kBAAkB;AACxB,MAAM,oBAAoB;AAC1B,MAAM,oBAAoB;AAgC1B,SAAS,sBAAsB,WAAuC;CACpE,IAAI,aAAa,QAAQ,CAAC,OAAO,SAAS,SAAS,GACjD,OAAO;CAGT,OAAO,KAAK,IAAI,mBAAmB,KAAK,MAAM,SAAS,CAAC;AAC1D;AAEA,SAAS,mBAAmB,WAA2B;CACrD,OAAO,YAAY,QAAS,IACxB,GAAG,YAAY,IAAK,YACpB,GAAG,UAAU;AACnB;AAEA,SAAS,yBAAyB,WAAwC;CACxE,MAAM,iBAAiB,sBAAsB,SAAS;CACtD,MAAM,aAAa,KAAK,IAAI,mBAAmB,cAAc;CAI7D,OAAO;EACL,MAAM;EACN,SAAS;EACT,SAAS;EACT,SAAS;EACT,aACE,0DATqB,mBAAmB,cAUb,EAAE,SATZ,mBAAmB,UASa,EAAE;CACvD;AACF;AAEA,SAAS,yCACP,cAAsC,CAAC,GACC;CACxC,OAAO;EACL,GAAGA,gCAAAA;EACH,YAAY;GACV,GAAGA,gCAAAA,8BAA8B;GACjC,SAAS,yBAAyB,YAAY,SAAS;GACvD,MAAM;IACJ,MAAM;IACN,MAAM;KAAC;KAAM;KAAU;KAAQ;IAAI;IACnC,SAAS;IACT,aACE;GACJ;EACF;CACF;AACF;AAEA,SAAS,6CACP,cAAsC,CAAC,GACK;CAC5C,OAAO;EACL,GAAGC,oCAAAA;EACH,YAAY;GACV,GAAGA,oCAAAA,kCAAkC;GACrC,SAAS,yBAAyB,YAAY,SAAS;EACzD;CACF;AACF;AAcA,MAAM,qBAAqB;AAE3B,SAAS,mBAAmB,GAAW,GAAoB;CACzD,MAAM,OAAO,OAAO,KAAK,GAAG,MAAM;CAClC,MAAM,OAAO,OAAO,KAAK,GAAG,MAAM;CAClC,IAAI,KAAK,WAAW,KAAK,QACvB,OAAO;CAET,QAAA,GAAA,OAAA,gBAAA,CAAuB,MAAM,IAAI;AACnC;AAcA,SAAS,eACP,QAC0B;CAC1B,MAAM,aAAa,OAAO,QAAQ,OAAO,WAAW,OAAO,YAAY;CACvE,OAAO,eAAe,QAAQ,eAAe,WAAW,WAAW;AACrE;AAEA,SAAS,eAAe,OAAyB;CAC/C,IAAI,UAAU,KAAA,GACZ,OAAO;CAET,OAAO;AACT;AAEA,eAAe,gBAAgB,KAA4C;CACzE,MAAM,SAAmB,CAAC;CAC1B,WAAW,MAAM,SAAS,KACxB,OAAO,KAAK,OAAO,SAAS,KAAK,IAAI,QAAQ,OAAO,KAAK,KAAK,CAAC;CAEjE,MAAM,MAAM,OAAO,OAAO,MAAM,CAAC,CAAC,SAAS,MAAM;CACjD,IAAI,QAAQ,IACV,OAAO,CAAC;CAEV,OAAO,KAAK,MAAM,GAAG;AACvB;AAEA,SAAS,UAAU,KAAqB,QAAgB,OAAsB;CAC5E,IAAI,UAAU,QAAQ,EAAE,gBAAgB,mBAAmB,CAAC;CAC5D,IAAI,IAAI,KAAK,UAAU,KAAK,CAAC;AAC/B;;;;;;;;;;;;;AAcA,eAAsB,8BACpB,aACA,UACA,WACA,WACkE;CAClE,IAAI,YAAY,YAAY,MAC1B,OAAO,EAAE,OAAO,UAAU;CAE5B,MAAM,SAAS,MAAMC,qBAAAA,aAAa;EAChC,UAAU,YAAY;EACtB,OAAO;GACL,iBAAiB;GACjB,OAAO,YAAY;GACnB,UAAU,YAAY;GACtB,SAAS,YAAY;GACrB,kBAAkB,YAAY;GAC9B;GACA;GACA;GACA,QAAQ;GACR,MAAM;EACR;EACA,WAAW,YAAY;EACvB,YAAY;CACd,CAAC,CAAC,CAAC,YAAY,KAAA,CAAS;CACxB,IAAI,UAAU,MACZ,OAAO,EAAE,OAAO,UAAU;CAE5B,MAAM,YACJ,OAAO,gBAAgB,OAClB,OAAO,eACR;CACN,IAAI,OAAO,aAAa,UAAU,OAAO,aAAa,OACpD,OAAO;EACL,OAAO;EACP,YACE,OAAO,WACN,OAAO,aAAa,QACjB,SAAS,SAAS,0EAClB,SAAS,SAAS;CAC1B;CAEF,OAAO,EAAE,OAAO,UAAU;AAC5B;AAEA,eAAe,iBACb,SACA,aACqB;CACrB,MAAM,SAAA,GAAA,OAAA,YAAA,CAAoB,EAAE,CAAC,CAAC,SAAS,KAAK;CAC5C,MAAM,UAAA,GAAA,KAAA,aAAA,EAAuB,KAAK,QAAQ;EAMxC,MAAM,MAAM,IAAI,IAAI,IAAI,OAAO,KAAK,kBAAkB;EACtD,MAAM,aAAa,IAAI,aAAa,IAAI,MAAM,MAAM;EACpD,IAAI,IAAI,WAAW,UAAU,IAAI,aAAa,SAAS;GACrD,IAAI,YAAY;IACd,IAAI,UAAU,KAAK,EAAE,gBAAgB,aAAa,CAAC;IACnD,IAAI,IAAI,WAAW;GACrB,OACE,UAAU,KAAK,KAAK,EAAE,OAAO,YAAY,CAAC;GAE5C;EACF;EAEA,MAAM,YAAY,IAAI,QAAQ;EAC9B,MAAM,iBAAiB,MAAM,QAAQ,SAAS,IAAI,UAAU,KAAK;EACjE,IACE,OAAO,mBAAmB,YAC1B,CAAC,mBAAmB,gBAAgB,KAAK,GACzC;GACA,IAAI,YAAY;IACd,IAAI,UAAU,KAAK,EAAE,gBAAgB,aAAa,CAAC;IACnD,IAAI,IAAI,cAAc;GACxB,OACE,UAAU,KAAK,KAAK,EAAE,OAAO,eAAe,CAAC;GAE/C;EACF;EAEA,gBAAgB,GAAG,CAAC,CACjB,KAAK,OAAO,SAAS;GACpB,IAAI,OAAO,KAAK,SAAS,YAAY,KAAK,SAAS,IAAI;IACrD,MAAM,UAAU;IAChB,IAAI,YAAY;KACd,IAAI,UAAU,KAAK,EAAE,gBAAgB,aAAa,CAAC;KACnD,IAAI,IAAI,OAAO;IACjB,OACE,UAAU,KAAK,KAAK;KAClB,SAAS,KAAK,MAAM;KACpB,QAAQ;KACR,UAAU;KACV,eAAe;IACjB,CAAC;IAEH;GACF;GAEA,MAAM,SAAS,KAAK,MAAM,eAAA,GAAA,OAAA,WAAA,CAAyB;GACnD,IAAI,iBAA0C,KAAK,SAAS,CAAC;GAC7D,IAAI,eAAe,MAAM;IACvB,MAAM,OAAO,MAAM,8BACjB,aACA,KAAK,MACL,QACA,cACF;IACA,IAAI,KAAK,cAAc,MAAM;KAC3B,MAAM,UAAU,KAAK;KACrB,IAAI,YAAY;MACd,IAAI,UAAU,KAAK,EAAE,gBAAgB,aAAa,CAAC;MACnD,IAAI,IAAI,OAAO;KACjB,OACE,UAAU,KAAK,KAAK;MAClB,SAAS;MACT,QAAQ;MACR,UAAU;MACV,eAAe;KACjB,CAAC;KAEH;IACF;IACA,iBAAiB,KAAK;GACxB;GAEA,MAAM,CAAC,UAAU,MAAMC,gCAAAA,aACrB,CACE;IACE,IAAI;IACJ,MAAM,KAAK;IACX,OAAO;GACT,CACF,GACA,OACF;GAEA,IAAI,YAAY;IACd,IAAI,OAAO,aAAa,MAAM;KAC5B,IAAI,UAAU,KAAK,EAAE,gBAAgB,aAAa,CAAC;KACnD,IAAI,IAAI,OAAO,iBAAiB,QAAQ,KAAK,KAAK,QAAQ;IAC5D,OAAO;KACL,MAAM,QAAQ,eAAe,OAAO,MAAM;KAC1C,MAAM,OACJ,OAAO,UAAU,WAAW,QAAQ,KAAK,UAAU,KAAK;KAC1D,IAAI,UAAU,KAAK,EAAE,gBAAgB,aAAa,CAAC;KACnD,IAAI,IAAI,IAAI;IACd;IACA;GACF;GAEA,UAAU,KAAK,KAAK;IAClB,GAAG;IACH,QAAQ,eAAe,OAAO,MAAM;GACtC,CAAC;EACH,CAAC,CAAC,CACD,OAAO,UAAiB;GACvB,IAAI,YAAY;IACd,IAAI,UAAU,KAAK,EAAE,gBAAgB,aAAa,CAAC;IACnD,IAAI,IAAI,MAAM,OAAO;GACvB,OACE,UAAU,KAAK,KAAK;IAClB,SAAS;IACT,QAAQ;IACR,UAAU;IACV,eAAe,MAAM;GACvB,CAAC;EAEL,CAAC;CACL,CAAC;CAED,MAAM,IAAI,SAAe,SAAS,WAAW;EAC3C,OAAO,KAAK,SAAS,MAAM;EAC3B,OAAO,OAAO,GAAG,aAAa,OAAO;CACvC,CAAC;CAGD,OAAO;EACL,KAAK,oBAFS,OAAO,QAEU,CAAC,CAAC,KAAK;EACtC;EACA,aACE,IAAI,SAAS,SAAS,WAAW;GAC/B,OAAO,OAAO,UAAW,QAAQ,OAAO,KAAK,IAAI,QAAQ,CAAE;EAC7D,CAAC;CACL;AACF;AAEA,SAAS,OAAO,MAAsB;CACpC,OAAO,KACJ,MAAM,IAAI,CAAC,CACX,KAAK,SAAS,KAAK,MAAM,CAAC,CAC1B,KAAK,IAAI;AACd;AAEA,SAAS,oBACP,MACA,UACA,WACA,aACQ;CACR,MAAM,eAAe,SAClB,KAAK,QAAQ;EAEZ,OAAO,CACL,aAFiBC,gCAAAA,4BAA4B,IAAI,IAE3B,EAAE,cACxB,wCAAwC,KAAK,UAAU,IAAI,IAAI,EAAE,UACnE,CAAC,CAAC,KAAK,IAAI;CACb,CAAC,CAAC,CACD,KAAK,MAAM;CAEd,OAAO;;;;;4BAKmB,KAAK,UAAU,SAAS,EAAE;2BAC3B,KAAK,UAAU,WAAW,EAAE;;;;;;MAMjD,KAAK,UAAU,kBAAkB,EAAE;;;;;;;;;;;;;;EAcvC,aAAa;;;EAGb,OAAO,IAAI,EAAE;;;EAGb,UAAU;AACZ;AAEA,SAAgB,2BACd,MACA,UACA,WACA,aACQ;CACR,OAAO,kBAAkB,MAAM,UAAU,WAAW,WAAW;AACjE;AAEA,SAAS,kBACP,MACA,UACA,WACA,aACQ;CACR,MAAM,YAAY,SACf,KAAK,QAAQ;EAEZ,OAAO;GACL,GAFeC,oCAAAA,0BAA0B,IAAI,IAEnC,EAAE;GACZ;GACA;GACA,2BAA2BC,6BAAAA,WAAW,IAAI,IAAI,EAAE;GAChD;EACF,CAAC,CAAC,KAAK,IAAI;CACb,CAAC,CAAC,CACD,KAAK,MAAM;CAEd,OAAO;0BACiBA,6BAAAA,WAAW,SAAS,EAAE;0BACtBA,6BAAAA,WAAW,kBAAkB,EAAE;yBAChCA,6BAAAA,WAAW,WAAW,EAAE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAyD/C,UAAU;;EAEV,KAAK;EACL,UAAU;AACZ;AAEA,SAAS,uBAAuB,QAEC;CAC/B,OAAQ,QAAQ,YAAY,CAAC;AAC/B;AAEA,SAAS,uBACP,SACA,UACA,MACA,aACyD;CACzD,MAAM,iBAAiB,YAAY,UAAU,IAAI;CAYjD,OAAO;EAAE;EAAgB,cAAA,IAXA,IACvB,eACG,KAAK,QAAQ;GACZ,MAAM,aAAa,QAAQ,IAAI,IAAI,IAAI;GACvC,OAAO,cAAc,OACjB,KAAA,IACC,CAAC,IAAI,MAAM,UAAU;EAC5B,CAAC,CAAC,CACD,QAAQ,UAA4C,SAAS,IAAI,CAGlC;CAAE;AACxC;AAEA,eAAe,yBAAyB,MAKe;CACrD,MAAM,EAAE,SAAS,UAAU,gBAAgB,uBACzC,KAAK,MACP;CAEA,IAAI,WAAW,QAAQ,QAAQ,SAAS,GACtC,MAAM,IAAI,MAAM,uDAAuD;CAEzE,IAAI,YAAY,QAAQ,SAAS,WAAW,GAC1C,MAAM,IAAI,MACR,gEACF;CAGF,MAAM,EAAE,gBAAgB,iBAAiB,uBACvC,SACA,UACA,KAAK,OAAO,MACZ,KAAK,YAAY,SAASC,oCAAAA,yBAAyBC,gCAAAA,kBACrD;CACA,MAAM,SAAS,MAAM,iBAAiB,cAAc,WAAW;CAE/D,IAAI;EACF,MAAM,YACJ,KAAK,OAAO,WAAW,KAAK,YAAY,aAAa;EACvD,MAAM,SACJ,KAAK,YAAY,SACb,MAAMC,6BAAAA,iBACN,kBACE,KAAK,OAAO,MACZ,gBACA,OAAO,KACP,OAAO,KACT,GACA;GAAE,GAAG,KAAK;GAAa;EAAU,CACnC,IACE,MAAMC,6BAAAA,iBACN;GACE,MAAM;GACN,MAAM,oBACJ,KAAK,OAAO,MACZ,gBACA,OAAO,KACP,OAAO,KACT;EACF,GACA;GAAE,GAAG,KAAK;GAAa;EAAU,CACnC;EAEJ,IAAI,OAAO,aAAa,KAAK,OAAO,UAClC,MAAM,IAAI,MACR,OAAO,WAAW,KACd,OAAO,SACP,SAAS,KAAK,QAAQ,2CACtB,OAAO,YAAY,WAEzB;EAGF,OAAOC,gCAAAA,wBAAwB;GAC7B,QAAQ;GACR,YAAYC,6BAAAA,kBAAkB,KAAK,WAAW;GAC9C,QAAQ,OAAO;GACf,QAAQ,OAAO;GACf,OAAO,CAAC;EACV,CAAC;CACH,UAAU;EACR,MAAM,OAAO,MAAM;CACrB;AACF;AAEA,SAAgB,uCACd,cAAsC,CAAC,GAChB;CACvB,QAAA,GAAA,sBAAA,KAAA,CACE,OAAO,WAAW,WAAW;EAC3B,MAAM,SAAS;EACf,OAAO,yBAAyB;GAC9B;GACA;GACA;GACA,SAAS,eAAe,MAAM;EAChC,CAAC;CACH,GACA;EACE,MAAMC,gCAAAA;EACN,aAAa,GAAGC,gCAAAA,mCAAmC;EACnD,QAAQ,yCAAyC,WAAW;EAC5D,gBAAA;CACF,CACF;AACF;AAEA,SAAgB,2CACd,cAAsC,CAAC,GAChB;CACvB,QAAA,GAAA,sBAAA,KAAA,CACE,OAAO,WAAW,WAAW;EAE3B,OAAO,yBAAyB;GAC9B,QAAA;GACA;GACA;GACA,SAAS;EACX,CAAC;CACH,GACA;EACE,MAAA;EACA,aAAa,GAAGC,oCAAAA,uCAAuC;EACvD,QAAQ,6CAA6C,WAAW;EAChE,gBAAA;CACF,CACF;AACF"}

package/dist/cjs/tools/local/attachments.cjs

@@ -1,178 +1,121 @@
-'use strict';
-
-var promises = require('fs/promises');
-
+let fs_promises = require("fs/promises");
+//#region src/tools/local/attachments.ts
 /**
- * Detects whether a file on disk is an LLM-renderable attachment
- * (image / PDF) and produces the LangChain `MessageContentComplex[]`
- * payload a `ToolMessage` needs to actually surface those bytes to
- * the vision-capable model.
- *
- * Same approach as LibreChat's `api/server/utils/files.js`: sniff the
- * magic bytes (NOT the extension) so a mislabelled `.png` that's
- * really a binary blob doesn't get embedded as an image. Inlined for
- * the five formats we actually care about (PNG / JPEG / GIF / WebP /
- * PDF) instead of pulling the ESM-only `file-type` package — keeps
- * the test setup CJS-clean.
- *
- * Provider compatibility:
- *   - Anthropic: tool_result content arrays accept `image` / `image_url`
- *     blocks; LangChain's anthropic adapter at
- *     `node_modules/@langchain/anthropic/dist/utils/message_inputs.js`
- *     converts them to native `image` source blocks.
- *   - OpenAI Chat Completions: image_url blocks in tool messages are
- *     accepted on vision-capable models.
- *   - OpenAI Responses API: tool messages are flattened to plain text;
- *     image_url blocks degrade to a JSON description (still useful as
- *     a textual hint to the model).
- *   - Google: image blocks in tool responses are accepted on Gemini
- *     vision models.
- *
- * Configuration:
- *   - `local.attachReadAttachments` (default `'images-only'`) controls
- *     which file kinds are returned as inline attachments. Other kinds
- *     fall through to the existing binary-stub path.
- *   - `local.maxAttachmentBytes` (default 5 MB) caps the pre-encoding
- *     size; oversize attachments degrade to a stub describing the
- *     refusal so the model isn't surprised.
- */
+* Detects whether a file on disk is an LLM-renderable attachment
+* (image / PDF) and produces the LangChain `MessageContentComplex[]`
+* payload a `ToolMessage` needs to actually surface those bytes to
+* the vision-capable model.
+*
+* Same approach as LibreChat's `api/server/utils/files.js`: sniff the
+* magic bytes (NOT the extension) so a mislabelled `.png` that's
+* really a binary blob doesn't get embedded as an image. Inlined for
+* the five formats we actually care about (PNG / JPEG / GIF / WebP /
+* PDF) instead of pulling the ESM-only `file-type` package — keeps
+* the test setup CJS-clean.
+*
+* Provider compatibility:
+*   - Anthropic: tool_result content arrays accept `image` / `image_url`
+*     blocks; LangChain's anthropic adapter at
+*     `node_modules/@langchain/anthropic/dist/utils/message_inputs.js`
+*     converts them to native `image` source blocks.
+*   - OpenAI Chat Completions: image_url blocks in tool messages are
+*     accepted on vision-capable models.
+*   - OpenAI Responses API: tool messages are flattened to plain text;
+*     image_url blocks degrade to a JSON description (still useful as
+*     a textual hint to the model).
+*   - Google: image blocks in tool responses are accepted on Gemini
+*     vision models.
+*
+* Configuration:
+*   - `local.attachReadAttachments` (default `'images-only'`) controls
+*     which file kinds are returned as inline attachments. Other kinds
+*     fall through to the existing binary-stub path.
+*   - `local.maxAttachmentBytes` (default 5 MB) caps the pre-encoding
+*     size; oversize attachments degrade to a stub describing the
+*     refusal so the model isn't surprised.
+*/
 /**
- * Magic-byte sniff for the small set of image/PDF formats we care
- * about. We avoided pulling in `file-type` (ESM-only, awkward under
- * ts-jest) since the universe of attachments we want to embed is
- * tiny: PNG, JPEG, GIF, WebP, PDF. All have well-known signatures in
- * the first 12 bytes.
- *
- * Returns `undefined` on no match — caller treats as text/unknown.
- */
+* Magic-byte sniff for the small set of image/PDF formats we care
+* about. We avoided pulling in `file-type` (ESM-only, awkward under
+* ts-jest) since the universe of attachments we want to embed is
+* tiny: PNG, JPEG, GIF, WebP, PDF. All have well-known signatures in
+* the first 12 bytes.
+*
+* Returns `undefined` on no match — caller treats as text/unknown.
+*/
 function sniffMime(buffer) {
-    if (buffer.length < 4)
-        return undefined;
-    // PNG: 89 50 4E 47 0D 0A 1A 0A
-    if (buffer.length >= 8 &&
-        buffer[0] === 0x89 &&
-        buffer[1] === 0x50 &&
-        buffer[2] === 0x4e &&
-        buffer[3] === 0x47 &&
-        buffer[4] === 0x0d &&
-        buffer[5] === 0x0a &&
-        buffer[6] === 0x1a &&
-        buffer[7] === 0x0a) {
-        return 'image/png';
-    }
-    // JPEG: FF D8 FF
-    if (buffer[0] === 0xff && buffer[1] === 0xd8 && buffer[2] === 0xff) {
-        return 'image/jpeg';
-    }
-    // GIF: "GIF87a" or "GIF89a"
-    if (buffer.length >= 6 &&
-        buffer[0] === 0x47 &&
-        buffer[1] === 0x49 &&
-        buffer[2] === 0x46 &&
-        buffer[3] === 0x38 &&
-        (buffer[4] === 0x37 || buffer[4] === 0x39) &&
-        buffer[5] === 0x61) {
-        return 'image/gif';
-    }
-    // WebP: "RIFF" .... "WEBP"
-    if (buffer.length >= 12 &&
-        buffer[0] === 0x52 &&
-        buffer[1] === 0x49 &&
-        buffer[2] === 0x46 &&
-        buffer[3] === 0x46 &&
-        buffer[8] === 0x57 &&
-        buffer[9] === 0x45 &&
-        buffer[10] === 0x42 &&
-        buffer[11] === 0x50) {
-        return 'image/webp';
-    }
-    // PDF: "%PDF-"
-    if (buffer.length >= 5 &&
-        buffer[0] === 0x25 &&
-        buffer[1] === 0x50 &&
-        buffer[2] === 0x44 &&
-        buffer[3] === 0x46 &&
-        buffer[4] === 0x2d) {
-        return 'application/pdf';
-    }
-    return undefined;
+	if (buffer.length < 4) return void 0;
+	if (buffer.length >= 8 && buffer[0] === 137 && buffer[1] === 80 && buffer[2] === 78 && buffer[3] === 71 && buffer[4] === 13 && buffer[5] === 10 && buffer[6] === 26 && buffer[7] === 10) return "image/png";
+	if (buffer[0] === 255 && buffer[1] === 216 && buffer[2] === 255) return "image/jpeg";
+	if (buffer.length >= 6 && buffer[0] === 71 && buffer[1] === 73 && buffer[2] === 70 && buffer[3] === 56 && (buffer[4] === 55 || buffer[4] === 57) && buffer[5] === 97) return "image/gif";
+	if (buffer.length >= 12 && buffer[0] === 82 && buffer[1] === 73 && buffer[2] === 70 && buffer[3] === 70 && buffer[8] === 87 && buffer[9] === 69 && buffer[10] === 66 && buffer[11] === 80) return "image/webp";
+	if (buffer.length >= 5 && buffer[0] === 37 && buffer[1] === 80 && buffer[2] === 68 && buffer[3] === 70 && buffer[4] === 45) return "application/pdf";
 }
 const SUPPORTED_IMAGE_MIMES = new Set([
-    'image/png',
-    'image/jpeg',
-    'image/gif',
-    'image/webp',
+	"image/png",
+	"image/jpeg",
+	"image/gif",
+	"image/webp"
 ]);
 async function classifyAttachment(args) {
-    if (args.bytes === 0) {
-        return { kind: 'text-or-unknown', bytes: 0 };
-    }
-    // MIME sniffing only needs the first 12 bytes — read just the
-    // header so a 9 MB PNG (under the 10 MB read cap, over the 5 MB
-    // attachment cap) doesn't pull the whole buffer into memory before
-    // we discover it's oversize. Full read happens only when we're
-    // about to base64-embed.
-    const open = args.fs?.open ?? promises.open;
-    const handle = await open(args.path, 'r');
-    const header = Buffer.alloc(12);
-    let mime;
-    try {
-        await handle.read(header, 0, 12, 0);
-        mime = sniffMime(header);
-    }
-    finally {
-        await handle.close();
-    }
-    if (mime == null) {
-        return { kind: 'text-or-unknown', bytes: args.bytes };
-    }
-    const wantsImage = args.mode === 'images-only' || args.mode === 'images-and-pdf';
-    const wantsPdf = args.mode === 'images-and-pdf';
-    const isImage = wantsImage && SUPPORTED_IMAGE_MIMES.has(mime);
-    const isPdf = wantsPdf && mime === 'application/pdf';
-    if (!isImage && !isPdf) {
-        // Both branches returned identical values pre-fix (audit-of-audit
-        // finding #3). The SUPPORTED_ATTACHMENT_MIMES check was dead code —
-        // collapsing to a single return.
-        return { kind: 'binary', mime, bytes: args.bytes };
-    }
-    if (args.bytes > args.maxBytes) {
-        return {
-            kind: 'oversize',
-            mime,
-            bytes: args.bytes,
-            maxBytes: args.maxBytes,
-        };
-    }
-    const readFile = args.fs?.readFile ?? promises.readFile;
-    const buffer = (await readFile(args.path));
-    const base64 = buffer.toString('base64');
-    const dataUrl = `data:${mime};base64,${base64}`;
-    if (isImage) {
-        return { kind: 'image', mime, bytes: args.bytes, dataUrl };
-    }
-    return {
-        kind: 'pdf',
-        mime: 'application/pdf',
-        bytes: args.bytes,
-        dataUrl,
-    };
+	if (args.bytes === 0) return {
+		kind: "text-or-unknown",
+		bytes: 0
+	};
+	const handle = await (args.fs?.open ?? fs_promises.open)(args.path, "r");
+	const header = Buffer.alloc(12);
+	let mime;
+	try {
+		await handle.read(header, 0, 12, 0);
+		mime = sniffMime(header);
+	} finally {
+		await handle.close();
+	}
+	if (mime == null) return {
+		kind: "text-or-unknown",
+		bytes: args.bytes
+	};
+	const wantsImage = args.mode === "images-only" || args.mode === "images-and-pdf";
+	const wantsPdf = args.mode === "images-and-pdf";
+	const isImage = wantsImage && SUPPORTED_IMAGE_MIMES.has(mime);
+	if (!isImage && !(wantsPdf && mime === "application/pdf")) return {
+		kind: "binary",
+		mime,
+		bytes: args.bytes
+	};
+	if (args.bytes > args.maxBytes) return {
+		kind: "oversize",
+		mime,
+		bytes: args.bytes,
+		maxBytes: args.maxBytes
+	};
+	const base64 = (await (args.fs?.readFile ?? fs_promises.readFile)(args.path)).toString("base64");
+	const dataUrl = `data:${mime};base64,${base64}`;
+	if (isImage) return {
+		kind: "image",
+		mime,
+		bytes: args.bytes,
+		dataUrl
+	};
+	return {
+		kind: "pdf",
+		mime: "application/pdf",
+		bytes: args.bytes,
+		dataUrl
+	};
 }
 /** Build the LangChain content array for an image attachment. */
 function imageAttachmentContent(path, attachment) {
-    return [
-        {
-            type: 'text',
-            text: `Read ${path} (${attachment.mime}, ${attachment.bytes} bytes). ` +
-                'The image is attached below for vision-capable models.',
-        },
-        {
-            type: 'image_url',
-            image_url: { url: attachment.dataUrl },
-        },
-    ];
+	return [{
+		type: "text",
+		text: `Read ${path} (${attachment.mime}, ${attachment.bytes} bytes). The image is attached below for vision-capable models.`
+	}, {
+		type: "image_url",
+		image_url: { url: attachment.dataUrl }
+	}];
 }
-
+//#endregion
 exports.classifyAttachment = classifyAttachment;
 exports.imageAttachmentContent = imageAttachmentContent;
-//# sourceMappingURL=attachments.cjs.map
+
+//# sourceMappingURL=attachments.cjs.map

package/dist/cjs/tools/local/attachments.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"attachments.cjs","sources":["../../../../src/tools/local/attachments.ts"],"sourcesContent":["/**\n * Detects whether a file on disk is an LLM-renderable attachment\n * (image / PDF) and produces the LangChain `MessageContentComplex[]`\n * payload a `ToolMessage` needs to actually surface those bytes to\n * the vision-capable model.\n *\n * Same approach as LibreChat's `api/server/utils/files.js`: sniff the\n * magic bytes (NOT the extension) so a mislabelled `.png` that's\n * really a binary blob doesn't get embedded as an image. Inlined for\n * the five formats we actually care about (PNG / JPEG / GIF / WebP /\n * PDF) instead of pulling the ESM-only `file-type` package — keeps\n * the test setup CJS-clean.\n *\n * Provider compatibility:\n *   - Anthropic: tool_result content arrays accept `image` / `image_url`\n *     blocks; LangChain's anthropic adapter at\n *     `node_modules/@langchain/anthropic/dist/utils/message_inputs.js`\n *     converts them to native `image` source blocks.\n *   - OpenAI Chat Completions: image_url blocks in tool messages are\n *     accepted on vision-capable models.\n *   - OpenAI Responses API: tool messages are flattened to plain text;\n *     image_url blocks degrade to a JSON description (still useful as\n *     a textual hint to the model).\n *   - Google: image blocks in tool responses are accepted on Gemini\n *     vision models.\n *\n * Configuration:\n *   - `local.attachReadAttachments` (default `'images-only'`) controls\n *     which file kinds are returned as inline attachments. Other kinds\n *     fall through to the existing binary-stub path.\n *   - `local.maxAttachmentBytes` (default 5 MB) caps the pre-encoding\n *     size; oversize attachments degrade to a stub describing the\n *     refusal so the model isn't surprised.\n */\n\nimport { open as fsOpen, readFile as fsReadFile } from 'fs/promises';\nimport type { WorkspaceFS } from './workspaceFS';\n\n/**\n * Magic-byte sniff for the small set of image/PDF formats we care\n * about. We avoided pulling in `file-type` (ESM-only, awkward under\n * ts-jest) since the universe of attachments we want to embed is\n * tiny: PNG, JPEG, GIF, WebP, PDF. All have well-known signatures in\n * the first 12 bytes.\n *\n * Returns `undefined` on no match — caller treats as text/unknown.\n */\nfunction sniffMime(buffer: Buffer): string | undefined {\n  if (buffer.length < 4) return undefined;\n  // PNG: 89 50 4E 47 0D 0A 1A 0A\n  if (\n    buffer.length >= 8 &&\n    buffer[0] === 0x89 &&\n    buffer[1] === 0x50 &&\n    buffer[2] === 0x4e &&\n    buffer[3] === 0x47 &&\n    buffer[4] === 0x0d &&\n    buffer[5] === 0x0a &&\n    buffer[6] === 0x1a &&\n    buffer[7] === 0x0a\n  ) {\n    return 'image/png';\n  }\n  // JPEG: FF D8 FF\n  if (buffer[0] === 0xff && buffer[1] === 0xd8 && buffer[2] === 0xff) {\n    return 'image/jpeg';\n  }\n  // GIF: \"GIF87a\" or \"GIF89a\"\n  if (\n    buffer.length >= 6 &&\n    buffer[0] === 0x47 &&\n    buffer[1] === 0x49 &&\n    buffer[2] === 0x46 &&\n    buffer[3] === 0x38 &&\n    (buffer[4] === 0x37 || buffer[4] === 0x39) &&\n    buffer[5] === 0x61\n  ) {\n    return 'image/gif';\n  }\n  // WebP: \"RIFF\" .... \"WEBP\"\n  if (\n    buffer.length >= 12 &&\n    buffer[0] === 0x52 &&\n    buffer[1] === 0x49 &&\n    buffer[2] === 0x46 &&\n    buffer[3] === 0x46 &&\n    buffer[8] === 0x57 &&\n    buffer[9] === 0x45 &&\n    buffer[10] === 0x42 &&\n    buffer[11] === 0x50\n  ) {\n    return 'image/webp';\n  }\n  // PDF: \"%PDF-\"\n  if (\n    buffer.length >= 5 &&\n    buffer[0] === 0x25 &&\n    buffer[1] === 0x50 &&\n    buffer[2] === 0x44 &&\n    buffer[3] === 0x46 &&\n    buffer[4] === 0x2d\n  ) {\n    return 'application/pdf';\n  }\n  return undefined;\n}\n\nconst SUPPORTED_IMAGE_MIMES = new Set<string>([\n  'image/png',\n  'image/jpeg',\n  'image/gif',\n  'image/webp',\n]);\n\nexport type AttachmentMode = 'images-only' | 'images-and-pdf' | 'off';\n\nexport type Attachment =\n  | {\n      kind: 'image';\n      mime: string;\n      bytes: number;\n      dataUrl: string;\n    }\n  | {\n      kind: 'pdf';\n      mime: 'application/pdf';\n      bytes: number;\n      dataUrl: string;\n    }\n  | {\n      kind: 'binary';\n      mime: string;\n      bytes: number;\n    }\n  | {\n      kind: 'oversize';\n      mime: string;\n      bytes: number;\n      maxBytes: number;\n    }\n  | {\n      kind: 'text-or-unknown';\n      bytes: number;\n    };\n\nexport async function classifyAttachment(args: {\n  path: string;\n  bytes: number;\n  mode: AttachmentMode;\n  maxBytes: number;\n  /**\n   * WorkspaceFS to route I/O through — defaults to host fs/promises\n   * for backward compat. Manual review (finding F): without this\n   * routing, custom/remote FS implementations could either fail to\n   * embed valid attachments or accidentally read a host path with\n   * the same absolute name (since `read_file` itself does go through\n   * the configured WorkspaceFS).\n   */\n  fs?: WorkspaceFS;\n}): Promise<Attachment> {\n  if (args.bytes === 0) {\n    return { kind: 'text-or-unknown', bytes: 0 };\n  }\n\n  // MIME sniffing only needs the first 12 bytes — read just the\n  // header so a 9 MB PNG (under the 10 MB read cap, over the 5 MB\n  // attachment cap) doesn't pull the whole buffer into memory before\n  // we discover it's oversize. Full read happens only when we're\n  // about to base64-embed.\n  const open = args.fs?.open ?? fsOpen;\n  const handle = await open(args.path, 'r');\n  const header = Buffer.alloc(12);\n  let mime: string | undefined;\n  try {\n    await handle.read(header, 0, 12, 0);\n    mime = sniffMime(header);\n  } finally {\n    await handle.close();\n  }\n\n  if (mime == null) {\n    return { kind: 'text-or-unknown', bytes: args.bytes };\n  }\n\n  const wantsImage =\n    args.mode === 'images-only' || args.mode === 'images-and-pdf';\n  const wantsPdf = args.mode === 'images-and-pdf';\n\n  const isImage = wantsImage && SUPPORTED_IMAGE_MIMES.has(mime);\n  const isPdf = wantsPdf && mime === 'application/pdf';\n\n  if (!isImage && !isPdf) {\n    // Both branches returned identical values pre-fix (audit-of-audit\n    // finding #3). The SUPPORTED_ATTACHMENT_MIMES check was dead code —\n    // collapsing to a single return.\n    return { kind: 'binary', mime, bytes: args.bytes };\n  }\n\n  if (args.bytes > args.maxBytes) {\n    return {\n      kind: 'oversize',\n      mime,\n      bytes: args.bytes,\n      maxBytes: args.maxBytes,\n    };\n  }\n\n  const readFile = args.fs?.readFile ?? fsReadFile;\n  const buffer = (await readFile(args.path)) as Buffer;\n  const base64 = buffer.toString('base64');\n  const dataUrl = `data:${mime};base64,${base64}`;\n\n  if (isImage) {\n    return { kind: 'image', mime, bytes: args.bytes, dataUrl };\n  }\n  return {\n    kind: 'pdf',\n    mime: 'application/pdf' as const,\n    bytes: args.bytes,\n    dataUrl,\n  };\n}\n\n/** Build the LangChain content array for an image attachment. */\nexport function imageAttachmentContent(\n  path: string,\n  attachment: Extract<Attachment, { kind: 'image' }>\n): Array<{\n  type: 'text' | 'image_url';\n  text?: string;\n  image_url?: { url: string };\n}> {\n  return [\n    {\n      type: 'text',\n      text:\n        `Read ${path} (${attachment.mime}, ${attachment.bytes} bytes). ` +\n        'The image is attached below for vision-capable models.',\n    },\n    {\n      type: 'image_url',\n      image_url: { url: attachment.dataUrl },\n    },\n  ];\n}\n"],"names":["fsOpen","fsReadFile"],"mappings":";;;;AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAiCG;AAKH;;;;;;;;AAQG;AACH,SAAS,SAAS,CAAC,MAAc,EAAA;AAC/B,IAAA,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC;AAAE,QAAA,OAAO,SAAS;;AAEvC,IAAA,IACE,MAAM,CAAC,MAAM,IAAI,CAAC;AAClB,QAAA,MAAM,CAAC,CAAC,CAAC,KAAK,IAAI;AAClB,QAAA,MAAM,CAAC,CAAC,CAAC,KAAK,IAAI;AAClB,QAAA,MAAM,CAAC,CAAC,CAAC,KAAK,IAAI;AAClB,QAAA,MAAM,CAAC,CAAC,CAAC,KAAK,IAAI;AAClB,QAAA,MAAM,CAAC,CAAC,CAAC,KAAK,IAAI;AAClB,QAAA,MAAM,CAAC,CAAC,CAAC,KAAK,IAAI;AAClB,QAAA,MAAM,CAAC,CAAC,CAAC,KAAK,IAAI;AAClB,QAAA,MAAM,CAAC,CAAC,CAAC,KAAK,IAAI,EAClB;AACA,QAAA,OAAO,WAAW;IACpB;;IAEA,IAAI,MAAM,CAAC,CAAC,CAAC,KAAK,IAAI,IAAI,MAAM,CAAC,CAAC,CAAC,KAAK,IAAI,IAAI,MAAM,CAAC,CAAC,CAAC,KAAK,IAAI,EAAE;AAClE,QAAA,OAAO,YAAY;IACrB;;AAEA,IAAA,IACE,MAAM,CAAC,MAAM,IAAI,CAAC;AAClB,QAAA,MAAM,CAAC,CAAC,CAAC,KAAK,IAAI;AAClB,QAAA,MAAM,CAAC,CAAC,CAAC,KAAK,IAAI;AAClB,QAAA,MAAM,CAAC,CAAC,CAAC,KAAK,IAAI;AAClB,QAAA,MAAM,CAAC,CAAC,CAAC,KAAK,IAAI;AAClB,SAAC,MAAM,CAAC,CAAC,CAAC,KAAK,IAAI,IAAI,MAAM,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC;AAC1C,QAAA,MAAM,CAAC,CAAC,CAAC,KAAK,IAAI,EAClB;AACA,QAAA,OAAO,WAAW;IACpB;;AAEA,IAAA,IACE,MAAM,CAAC,MAAM,IAAI,EAAE;AACnB,QAAA,MAAM,CAAC,CAAC,CAAC,KAAK,IAAI;AAClB,QAAA,MAAM,CAAC,CAAC,CAAC,KAAK,IAAI;AAClB,QAAA,MAAM,CAAC,CAAC,CAAC,KAAK,IAAI;AAClB,QAAA,MAAM,CAAC,CAAC,CAAC,KAAK,IAAI;AAClB,QAAA,MAAM,CAAC,CAAC,CAAC,KAAK,IAAI;AAClB,QAAA,MAAM,CAAC,CAAC,CAAC,KAAK,IAAI;AAClB,QAAA,MAAM,CAAC,EAAE,CAAC,KAAK,IAAI;AACnB,QAAA,MAAM,CAAC,EAAE,CAAC,KAAK,IAAI,EACnB;AACA,QAAA,OAAO,YAAY;IACrB;;AAEA,IAAA,IACE,MAAM,CAAC,MAAM,IAAI,CAAC;AAClB,QAAA,MAAM,CAAC,CAAC,CAAC,KAAK,IAAI;AAClB,QAAA,MAAM,CAAC,CAAC,CAAC,KAAK,IAAI;AAClB,QAAA,MAAM,CAAC,CAAC,CAAC,KAAK,IAAI;AAClB,QAAA,MAAM,CAAC,CAAC,CAAC,KAAK,IAAI;AAClB,QAAA,MAAM,CAAC,CAAC,CAAC,KAAK,IAAI,EAClB;AACA,QAAA,OAAO,iBAAiB;IAC1B;AACA,IAAA,OAAO,SAAS;AAClB;AAEA,MAAM,qBAAqB,GAAG,IAAI,GAAG,CAAS;IAC5C,WAAW;IACX,YAAY;IACZ,WAAW;IACX,YAAY;AACb,CAAA,CAAC;AAiCK,eAAe,kBAAkB,CAAC,IAcxC,EAAA;AACC,IAAA,IAAI,IAAI,CAAC,KAAK,KAAK,CAAC,EAAE;QACpB,OAAO,EAAE,IAAI,EAAE,iBAAiB,EAAE,KAAK,EAAE,CAAC,EAAE;IAC9C;;;;;;IAOA,MAAM,IAAI,GAAG,IAAI,CAAC,EAAE,EAAE,IAAI,IAAIA,aAAM;IACpC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC;IACzC,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;AAC/B,IAAA,IAAI,IAAwB;AAC5B,IAAA,IAAI;AACF,QAAA,MAAM,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;AACnC,QAAA,IAAI,GAAG,SAAS,CAAC,MAAM,CAAC;IAC1B;YAAU;AACR,QAAA,MAAM,MAAM,CAAC,KAAK,EAAE;IACtB;AAEA,IAAA,IAAI,IAAI,IAAI,IAAI,EAAE;QAChB,OAAO,EAAE,IAAI,EAAE,iBAAiB,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE;IACvD;AAEA,IAAA,MAAM,UAAU,GACd,IAAI,CAAC,IAAI,KAAK,aAAa,IAAI,IAAI,CAAC,IAAI,KAAK,gBAAgB;AAC/D,IAAA,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,KAAK,gBAAgB;IAE/C,MAAM,OAAO,GAAG,UAAU,IAAI,qBAAqB,CAAC,GAAG,CAAC,IAAI,CAAC;AAC7D,IAAA,MAAM,KAAK,GAAG,QAAQ,IAAI,IAAI,KAAK,iBAAiB;AAEpD,IAAA,IAAI,CAAC,OAAO,IAAI,CAAC,KAAK,EAAE;;;;AAItB,QAAA,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE;IACpD;IAEA,IAAI,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,QAAQ,EAAE;QAC9B,OAAO;AACL,YAAA,IAAI,EAAE,UAAU;YAChB,IAAI;YACJ,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,QAAQ,EAAE,IAAI,CAAC,QAAQ;SACxB;IACH;IAEA,MAAM,QAAQ,GAAG,IAAI,CAAC,EAAE,EAAE,QAAQ,IAAIC,iBAAU;IAChD,MAAM,MAAM,IAAI,MAAM,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAW;IACpD,MAAM,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC;AACxC,IAAA,MAAM,OAAO,GAAG,CAAA,KAAA,EAAQ,IAAI,CAAA,QAAA,EAAW,MAAM,EAAE;IAE/C,IAAI,OAAO,EAAE;AACX,QAAA,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,OAAO,EAAE;IAC5D;IACA,OAAO;AACL,QAAA,IAAI,EAAE,KAAK;AACX,QAAA,IAAI,EAAE,iBAA0B;QAChC,KAAK,EAAE,IAAI,CAAC,KAAK;QACjB,OAAO;KACR;AACH;AAEA;AACM,SAAU,sBAAsB,CACpC,IAAY,EACZ,UAAkD,EAAA;IAMlD,OAAO;AACL,QAAA;AACE,YAAA,IAAI,EAAE,MAAM;YACZ,IAAI,EACF,CAAA,KAAA,EAAQ,IAAI,CAAA,EAAA,EAAK,UAAU,CAAC,IAAI,CAAA,EAAA,EAAK,UAAU,CAAC,KAAK,CAAA,SAAA,CAAW;gBAChE,wDAAwD;AAC3D,SAAA;AACD,QAAA;AACE,YAAA,IAAI,EAAE,WAAW;AACjB,YAAA,SAAS,EAAE,EAAE,GAAG,EAAE,UAAU,CAAC,OAAO,EAAE;AACvC,SAAA;KACF;AACH;;;;;"}
+{"version":3,"file":"attachments.cjs","names":["fsOpen","fsReadFile"],"sources":["../../../../src/tools/local/attachments.ts"],"sourcesContent":["/**\n * Detects whether a file on disk is an LLM-renderable attachment\n * (image / PDF) and produces the LangChain `MessageContentComplex[]`\n * payload a `ToolMessage` needs to actually surface those bytes to\n * the vision-capable model.\n *\n * Same approach as LibreChat's `api/server/utils/files.js`: sniff the\n * magic bytes (NOT the extension) so a mislabelled `.png` that's\n * really a binary blob doesn't get embedded as an image. Inlined for\n * the five formats we actually care about (PNG / JPEG / GIF / WebP /\n * PDF) instead of pulling the ESM-only `file-type` package — keeps\n * the test setup CJS-clean.\n *\n * Provider compatibility:\n *   - Anthropic: tool_result content arrays accept `image` / `image_url`\n *     blocks; LangChain's anthropic adapter at\n *     `node_modules/@langchain/anthropic/dist/utils/message_inputs.js`\n *     converts them to native `image` source blocks.\n *   - OpenAI Chat Completions: image_url blocks in tool messages are\n *     accepted on vision-capable models.\n *   - OpenAI Responses API: tool messages are flattened to plain text;\n *     image_url blocks degrade to a JSON description (still useful as\n *     a textual hint to the model).\n *   - Google: image blocks in tool responses are accepted on Gemini\n *     vision models.\n *\n * Configuration:\n *   - `local.attachReadAttachments` (default `'images-only'`) controls\n *     which file kinds are returned as inline attachments. Other kinds\n *     fall through to the existing binary-stub path.\n *   - `local.maxAttachmentBytes` (default 5 MB) caps the pre-encoding\n *     size; oversize attachments degrade to a stub describing the\n *     refusal so the model isn't surprised.\n */\n\nimport { open as fsOpen, readFile as fsReadFile } from 'fs/promises';\nimport type { WorkspaceFS } from './workspaceFS';\n\n/**\n * Magic-byte sniff for the small set of image/PDF formats we care\n * about. We avoided pulling in `file-type` (ESM-only, awkward under\n * ts-jest) since the universe of attachments we want to embed is\n * tiny: PNG, JPEG, GIF, WebP, PDF. All have well-known signatures in\n * the first 12 bytes.\n *\n * Returns `undefined` on no match — caller treats as text/unknown.\n */\nfunction sniffMime(buffer: Buffer): string | undefined {\n  if (buffer.length < 4) return undefined;\n  // PNG: 89 50 4E 47 0D 0A 1A 0A\n  if (\n    buffer.length >= 8 &&\n    buffer[0] === 0x89 &&\n    buffer[1] === 0x50 &&\n    buffer[2] === 0x4e &&\n    buffer[3] === 0x47 &&\n    buffer[4] === 0x0d &&\n    buffer[5] === 0x0a &&\n    buffer[6] === 0x1a &&\n    buffer[7] === 0x0a\n  ) {\n    return 'image/png';\n  }\n  // JPEG: FF D8 FF\n  if (buffer[0] === 0xff && buffer[1] === 0xd8 && buffer[2] === 0xff) {\n    return 'image/jpeg';\n  }\n  // GIF: \"GIF87a\" or \"GIF89a\"\n  if (\n    buffer.length >= 6 &&\n    buffer[0] === 0x47 &&\n    buffer[1] === 0x49 &&\n    buffer[2] === 0x46 &&\n    buffer[3] === 0x38 &&\n    (buffer[4] === 0x37 || buffer[4] === 0x39) &&\n    buffer[5] === 0x61\n  ) {\n    return 'image/gif';\n  }\n  // WebP: \"RIFF\" .... \"WEBP\"\n  if (\n    buffer.length >= 12 &&\n    buffer[0] === 0x52 &&\n    buffer[1] === 0x49 &&\n    buffer[2] === 0x46 &&\n    buffer[3] === 0x46 &&\n    buffer[8] === 0x57 &&\n    buffer[9] === 0x45 &&\n    buffer[10] === 0x42 &&\n    buffer[11] === 0x50\n  ) {\n    return 'image/webp';\n  }\n  // PDF: \"%PDF-\"\n  if (\n    buffer.length >= 5 &&\n    buffer[0] === 0x25 &&\n    buffer[1] === 0x50 &&\n    buffer[2] === 0x44 &&\n    buffer[3] === 0x46 &&\n    buffer[4] === 0x2d\n  ) {\n    return 'application/pdf';\n  }\n  return undefined;\n}\n\nconst SUPPORTED_IMAGE_MIMES = new Set<string>([\n  'image/png',\n  'image/jpeg',\n  'image/gif',\n  'image/webp',\n]);\n\nexport type AttachmentMode = 'images-only' | 'images-and-pdf' | 'off';\n\nexport type Attachment =\n  | {\n      kind: 'image';\n      mime: string;\n      bytes: number;\n      dataUrl: string;\n    }\n  | {\n      kind: 'pdf';\n      mime: 'application/pdf';\n      bytes: number;\n      dataUrl: string;\n    }\n  | {\n      kind: 'binary';\n      mime: string;\n      bytes: number;\n    }\n  | {\n      kind: 'oversize';\n      mime: string;\n      bytes: number;\n      maxBytes: number;\n    }\n  | {\n      kind: 'text-or-unknown';\n      bytes: number;\n    };\n\nexport async function classifyAttachment(args: {\n  path: string;\n  bytes: number;\n  mode: AttachmentMode;\n  maxBytes: number;\n  /**\n   * WorkspaceFS to route I/O through — defaults to host fs/promises\n   * for backward compat. Manual review (finding F): without this\n   * routing, custom/remote FS implementations could either fail to\n   * embed valid attachments or accidentally read a host path with\n   * the same absolute name (since `read_file` itself does go through\n   * the configured WorkspaceFS).\n   */\n  fs?: WorkspaceFS;\n}): Promise<Attachment> {\n  if (args.bytes === 0) {\n    return { kind: 'text-or-unknown', bytes: 0 };\n  }\n\n  // MIME sniffing only needs the first 12 bytes — read just the\n  // header so a 9 MB PNG (under the 10 MB read cap, over the 5 MB\n  // attachment cap) doesn't pull the whole buffer into memory before\n  // we discover it's oversize. Full read happens only when we're\n  // about to base64-embed.\n  const open = args.fs?.open ?? fsOpen;\n  const handle = await open(args.path, 'r');\n  const header = Buffer.alloc(12);\n  let mime: string | undefined;\n  try {\n    await handle.read(header, 0, 12, 0);\n    mime = sniffMime(header);\n  } finally {\n    await handle.close();\n  }\n\n  if (mime == null) {\n    return { kind: 'text-or-unknown', bytes: args.bytes };\n  }\n\n  const wantsImage =\n    args.mode === 'images-only' || args.mode === 'images-and-pdf';\n  const wantsPdf = args.mode === 'images-and-pdf';\n\n  const isImage = wantsImage && SUPPORTED_IMAGE_MIMES.has(mime);\n  const isPdf = wantsPdf && mime === 'application/pdf';\n\n  if (!isImage && !isPdf) {\n    // Both branches returned identical values pre-fix (audit-of-audit\n    // finding #3). The SUPPORTED_ATTACHMENT_MIMES check was dead code —\n    // collapsing to a single return.\n    return { kind: 'binary', mime, bytes: args.bytes };\n  }\n\n  if (args.bytes > args.maxBytes) {\n    return {\n      kind: 'oversize',\n      mime,\n      bytes: args.bytes,\n      maxBytes: args.maxBytes,\n    };\n  }\n\n  const readFile = args.fs?.readFile ?? fsReadFile;\n  const buffer = (await readFile(args.path)) as Buffer;\n  const base64 = buffer.toString('base64');\n  const dataUrl = `data:${mime};base64,${base64}`;\n\n  if (isImage) {\n    return { kind: 'image', mime, bytes: args.bytes, dataUrl };\n  }\n  return {\n    kind: 'pdf',\n    mime: 'application/pdf' as const,\n    bytes: args.bytes,\n    dataUrl,\n  };\n}\n\n/** Build the LangChain content array for an image attachment. */\nexport function imageAttachmentContent(\n  path: string,\n  attachment: Extract<Attachment, { kind: 'image' }>\n): Array<{\n  type: 'text' | 'image_url';\n  text?: string;\n  image_url?: { url: string };\n}> {\n  return [\n    {\n      type: 'text',\n      text:\n        `Read ${path} (${attachment.mime}, ${attachment.bytes} bytes). ` +\n        'The image is attached below for vision-capable models.',\n    },\n    {\n      type: 'image_url',\n      image_url: { url: attachment.dataUrl },\n    },\n  ];\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA+CA,SAAS,UAAU,QAAoC;CACrD,IAAI,OAAO,SAAS,GAAG,OAAO,KAAA;CAE9B,IACE,OAAO,UAAU,KACjB,OAAO,OAAO,OACd,OAAO,OAAO,MACd,OAAO,OAAO,MACd,OAAO,OAAO,MACd,OAAO,OAAO,MACd,OAAO,OAAO,MACd,OAAO,OAAO,MACd,OAAO,OAAO,IAEd,OAAO;CAGT,IAAI,OAAO,OAAO,OAAQ,OAAO,OAAO,OAAQ,OAAO,OAAO,KAC5D,OAAO;CAGT,IACE,OAAO,UAAU,KACjB,OAAO,OAAO,MACd,OAAO,OAAO,MACd,OAAO,OAAO,MACd,OAAO,OAAO,OACb,OAAO,OAAO,MAAQ,OAAO,OAAO,OACrC,OAAO,OAAO,IAEd,OAAO;CAGT,IACE,OAAO,UAAU,MACjB,OAAO,OAAO,MACd,OAAO,OAAO,MACd,OAAO,OAAO,MACd,OAAO,OAAO,MACd,OAAO,OAAO,MACd,OAAO,OAAO,MACd,OAAO,QAAQ,MACf,OAAO,QAAQ,IAEf,OAAO;CAGT,IACE,OAAO,UAAU,KACjB,OAAO,OAAO,MACd,OAAO,OAAO,MACd,OAAO,OAAO,MACd,OAAO,OAAO,MACd,OAAO,OAAO,IAEd,OAAO;AAGX;AAEA,MAAM,wBAAwB,IAAI,IAAY;CAC5C;CACA;CACA;CACA;AACF,CAAC;AAiCD,eAAsB,mBAAmB,MAcjB;CACtB,IAAI,KAAK,UAAU,GACjB,OAAO;EAAE,MAAM;EAAmB,OAAO;CAAE;CAS7C,MAAM,SAAS,OADF,KAAK,IAAI,QAAQA,YAAAA,KAAAA,CACJ,KAAK,MAAM,GAAG;CACxC,MAAM,SAAS,OAAO,MAAM,EAAE;CAC9B,IAAI;CACJ,IAAI;EACF,MAAM,OAAO,KAAK,QAAQ,GAAG,IAAI,CAAC;EAClC,OAAO,UAAU,MAAM;CACzB,UAAU;EACR,MAAM,OAAO,MAAM;CACrB;CAEA,IAAI,QAAQ,MACV,OAAO;EAAE,MAAM;EAAmB,OAAO,KAAK;CAAM;CAGtD,MAAM,aACJ,KAAK,SAAS,iBAAiB,KAAK,SAAS;CAC/C,MAAM,WAAW,KAAK,SAAS;CAE/B,MAAM,UAAU,cAAc,sBAAsB,IAAI,IAAI;CAG5D,IAAI,CAAC,WAAW,EAFF,YAAY,SAAS,oBAMjC,OAAO;EAAE,MAAM;EAAU;EAAM,OAAO,KAAK;CAAM;CAGnD,IAAI,KAAK,QAAQ,KAAK,UACpB,OAAO;EACL,MAAM;EACN;EACA,OAAO,KAAK;EACZ,UAAU,KAAK;CACjB;CAKF,MAAM,UAAS,OAFE,KAAK,IAAI,YAAYC,YAAAA,SAAAA,CACP,KAAK,IAAI,EAAA,CAClB,SAAS,QAAQ;CACvC,MAAM,UAAU,QAAQ,KAAK,UAAU;CAEvC,IAAI,SACF,OAAO;EAAE,MAAM;EAAS;EAAM,OAAO,KAAK;EAAO;CAAQ;CAE3D,OAAO;EACL,MAAM;EACN,MAAM;EACN,OAAO,KAAK;EACZ;CACF;AACF;;AAGA,SAAgB,uBACd,MACA,YAKC;CACD,OAAO,CACL;EACE,MAAM;EACN,MACE,QAAQ,KAAK,IAAI,WAAW,KAAK,IAAI,WAAW,MAAM;CAE1D,GACA;EACE,MAAM;EACN,WAAW,EAAE,KAAK,WAAW,QAAQ;CACvC,CACF;AACF"}