@librechat/agents 3.2.38 → 3.2.41

package/dist/esm/hooks/createWorkspacePolicyHook.mjs

@@ -75,10 +75,11 @@ function extractCompileCheckPaths(input) {
 	for (const match of command.matchAll(ABSOLUTE_PATH_TOKEN)) out.push(expandHomeRelative(match[1]));
 	return out;
 }
+const extractPath = (i) => typeof i.path === "string" && i.path !== "" ? [i.path] : [];
 const DEFAULT_EXTRACTORS = {
-	["read_file"]: (i) => typeof i.file_path === "string" ? [i.file_path] : [],
-	["write_file"]: (i) => typeof i.file_path === "string" ? [i.file_path] : [],
-	["edit_file"]: (i) => typeof i.file_path === "string" ? [i.file_path] : [],
+	["read_file"]: extractPath,
+	["write_file"]: extractPath,
+	["edit_file"]: extractPath,
 	["grep_search"]: (i) => typeof i.path === "string" && i.path !== "" ? [i.path] : [],
 	["glob_search"]: (i) => typeof i.path === "string" && i.path !== "" ? [i.path] : [],
 	["list_directory"]: (i) => typeof i.path === "string" && i.path !== "" ? [i.path] : [],

package/dist/esm/hooks/createWorkspacePolicyHook.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"createWorkspacePolicyHook.mjs","names":[],"sources":["../../../src/hooks/createWorkspacePolicyHook.ts"],"sourcesContent":["/**\n * Workspace boundary policy as a `PreToolUse` hook.\n *\n * Local-engine file tools enforce a hard workspace boundary at the\n * tool implementation layer (`resolveWorkspacePathSafe`). This hook\n * adds a complementary, host-controlled layer on top that uses the\n * standard PreToolUse / HITL machinery to *negotiate* access to\n * paths outside the workspace — instead of just throwing.\n *\n * The host opts in by registering this hook on a `HookRegistry`; the\n * hook inspects each tool call's input, extracts the file paths it\n * mentions via per-tool extractors, and returns:\n *\n *   - `allow`               — every path is inside `workspace.root`\n *                              (or `additionalRoots`)\n *   - `deny`                — at least one path is outside, and the\n *                              configured outside-policy is `'deny'`\n *   - `ask`                 — at least one path is outside, and the\n *                              outside-policy is `'ask'` (default).\n *                              When `humanInTheLoop.enabled` is true,\n *                              the existing PreToolUse `'ask'` flow\n *                              raises a tool_approval interrupt the\n *                              host UI can render. When HITL is off,\n *                              `'ask'` collapses to `deny` (matches\n *                              the rest of the SDK's default).\n *\n * Default per-tool path extractors cover the local-engine coding\n * suite (`read_file`, `write_file`, `edit_file`, `grep_search`,\n * `glob_search`, `list_directory`, `compile_check`). The host can\n * override or extend via `pathExtractors`. Bash/code paths are not\n * extracted by default — bash command parsing is its own concern, and\n * the existing `bashAst` validator + sandbox-runtime fs allowlist are\n * the right gates for those.\n *\n * Important: this hook does NOT replace `resolveWorkspacePathSafe`.\n * Even if the hook returns `allow`, the file tool still enforces its\n * own clamp unless `workspace.allowReadOutside` /\n * `workspace.allowWriteOutside` (or the legacy\n * `allowOutsideWorkspace`) is set. The recommended composition for\n * \"ask the user\" semantics is:\n *\n *   workspace: {\n *     root,\n *     allowReadOutside: true,\n *     allowWriteOutside: true,\n *   },\n *   // …with the hook installed and humanInTheLoop.enabled = true.\n */\n\nimport { homedir } from 'os';\nimport { realpath } from 'fs/promises';\nimport { isAbsolute, relative, resolve } from 'path';\nimport type {\n  HookCallback,\n  PreToolUseHookInput,\n  PreToolUseHookOutput,\n  ToolDecision,\n} from './types';\nimport { Constants } from '@/common';\n\n/**\n * What to do when a tool call references a path outside the workspace.\n *\n *   - `'ask'`    : default. Raise a PreToolUse `ask` (host UI prompts\n *                  via the HITL interrupt path).\n *   - `'allow'`  : let the call through (use the existing tool clamp\n *                  to actually enforce — the hook is purely advisory).\n *   - `'deny'`   : block the call with an error ToolMessage.\n */\nexport type OutsideAccessPolicy = 'ask' | 'allow' | 'deny';\n\nexport interface WorkspacePolicyConfig {\n  /** Canonical workspace root. Required. */\n  root: string;\n  /** Sibling roots that count as inside-workspace. */\n  additionalRoots?: readonly string[];\n  /** Policy applied to read-only file tools. Defaults to `'ask'`. */\n  outsideRead?: OutsideAccessPolicy;\n  /** Policy applied to write-shaped file tools. Defaults to `'ask'`. */\n  outsideWrite?: OutsideAccessPolicy;\n  /**\n   * Optional reason template surfaced in the `ask`/`deny` decision.\n   * Supports `{tool}` and `{paths}` substitution.\n   */\n  reason?: string;\n  /**\n   * Per-tool path extractors. Defaults cover the local-engine coding\n   * suite. Returning an empty array opts that tool out of policy.\n   */\n  pathExtractors?: Record<string, PathExtractor>;\n}\n\nexport type PathExtractor = (\n  toolInput: Record<string, unknown>\n) => readonly string[];\n\nconst READ_TOOLS = new Set<string>([\n  Constants.READ_FILE,\n  Constants.GREP_SEARCH,\n  Constants.GLOB_SEARCH,\n  Constants.LIST_DIRECTORY,\n  Constants.COMPILE_CHECK,\n]);\n\nconst WRITE_TOOLS = new Set<string>([\n  Constants.WRITE_FILE,\n  Constants.EDIT_FILE,\n]);\n\n/**\n * Best-effort extractor for `compile_check` — pulls absolute and `~/`\n * path tokens out of the `command` string so the workspace boundary\n * sees them. Without this, a model could ship `command: 'cat\n * /etc/passwd'` and the policy hook would short-circuit to `allow`\n * (Codex P1 #26 — the prior `() => []` made the hook a no-op for\n * compile_check). Conservative by design:\n *\n *   - Matches `/foo`, `~/foo`, `$HOME/foo`, `${HOME}/foo` followed by\n *     non-shell-special chars. Stops at whitespace, quotes, redirect\n *     operators, pipes, semicolons.\n *   - Strips a leading `--flag=` so `--out=/etc/foo` extracts as\n *     `/etc/foo` (the path the agent's actually trying to write).\n *   - Misses relative paths (intended — those resolve under cwd\n *     anyway), and shell-substituted paths whose final form isn't\n *     visible at extract time. Hosts that need bulletproof gating\n *     should pair this with a `bash_tool`-level policy.\n */\n// `[\"']?` slots before AND after the captured path cover quoted\n// forms like `cat \"/etc/passwd\"` and `--out='/tmp/x'`. Codex P1 #31\n// — the previous regex only matched unquoted tokens, so a model\n// could trivially bypass the workspace policy by quoting any\n// destination path. The path content character class still excludes\n// quotes/whitespace/shell-specials so we don't over-extract; that's\n// the defensive trade we want for fallback-grep style matching.\n//\n// The `\\.\\.(?:\\/[^…]*)?` alternation covers parent-traversal forms\n// (`..`, `../secrets.txt`, `../foo/bar`). Without it, a model could\n// exfiltrate parent-directory files via `cat ../secrets` and the\n// hook would short-circuit to `allow` because the extractor saw no\n// \"absolute\" token. The boundary check at the call site resolves\n// non-absolute extracted tokens against `root`, so `../secrets`\n// becomes `<parent-of-workspace>/secrets` which the boundary then\n// correctly flags as outside. Codex P2 #35.\nconst PATH_TOKEN =\n  /(?:^|[\\s=])(?:--[^\\s=]+=)?[\"']?(\\/[^\\s'\"|;&<>()`]+|~\\/[^\\s'\"|;&<>()`]+|\\$\\{?HOME\\}?\\/[^\\s'\"|;&<>()`]+|\\.\\.(?:\\/[^\\s'\"|;&<>()`]*)?)[\"']?/g;\n// Back-compat alias kept for any downstream import.\nconst ABSOLUTE_PATH_TOKEN = PATH_TOKEN;\nfunction expandHomeRelative(token: string): string {\n  // Expand ~/foo and $HOME/foo and ${HOME}/foo to absolute. The\n  // workspace boundary check resolves non-absolute paths against the\n  // workspace root, which would silently treat `~/secret` as\n  // `<workspace>/~/secret` — exactly the bypass the codex flagged.\n  const home = homedir();\n  if (token.startsWith('~/')) return `${home}/${token.slice(2)}`;\n  if (token.startsWith('${HOME}/')) return `${home}/${token.slice(8)}`;\n  if (token.startsWith('$HOME/')) return `${home}/${token.slice(6)}`;\n  return token;\n}\nfunction extractCompileCheckPaths(input: Record<string, unknown>): string[] {\n  const command = typeof input.command === 'string' ? input.command : '';\n  if (command === '') return [];\n  const out: string[] = [];\n  for (const match of command.matchAll(ABSOLUTE_PATH_TOKEN)) {\n    out.push(expandHomeRelative(match[1]));\n  }\n  return out;\n}\n\nconst DEFAULT_EXTRACTORS: Record<string, PathExtractor> = {\n  [Constants.READ_FILE]: (i) =>\n    typeof i.file_path === 'string' ? [i.file_path] : [],\n  [Constants.WRITE_FILE]: (i) =>\n    typeof i.file_path === 'string' ? [i.file_path] : [],\n  [Constants.EDIT_FILE]: (i) =>\n    typeof i.file_path === 'string' ? [i.file_path] : [],\n  [Constants.GREP_SEARCH]: (i) =>\n    typeof i.path === 'string' && i.path !== '' ? [i.path] : [],\n  [Constants.GLOB_SEARCH]: (i) =>\n    typeof i.path === 'string' && i.path !== '' ? [i.path] : [],\n  [Constants.LIST_DIRECTORY]: (i) =>\n    typeof i.path === 'string' && i.path !== '' ? [i.path] : [],\n  [Constants.COMPILE_CHECK]: extractCompileCheckPaths,\n};\n\nfunction isInsideAnyRoot(absolutePath: string, roots: string[]): boolean {\n  for (const root of roots) {\n    if (absolutePath === root) return true;\n    const rel = relative(root, absolutePath);\n    if (!rel.startsWith('..') && !isAbsolute(rel)) return true;\n  }\n  return false;\n}\n\n/**\n * Symlink-aware variant: realpaths the candidate AND the roots before\n * comparing. Without this, a symlink inside the workspace pointing\n * outside (e.g. `workspace/link → /etc/passwd`) compares as\n * \"in-workspace\" lexically, but actually grants the agent reach\n * outside the boundary. Critical when this hook is the primary gate\n * (i.e. the host opted into `workspace.allowReadOutside: true` /\n * `allowWriteOutside: true` so the file tools' own clamp is off).\n *\n * Handles paths that don't yet exist (e.g. `write_file` to a brand\n * new path) by walking up to the nearest existing ancestor and\n * realpathing that, then re-attaching the unresolved suffix. Mirrors\n * `resolveWorkspacePathSafe`'s approach in LocalExecutionEngine.\n */\nasync function realpathOrSelf(absolutePath: string): Promise<string> {\n  try {\n    return await realpath(absolutePath);\n  } catch {\n    return absolutePath;\n  }\n}\n\nasync function realpathOfPathOrAncestor(absolutePath: string): Promise<string> {\n  let current = absolutePath;\n  let suffix = '';\n  // eslint-disable-next-line @typescript-eslint/no-unnecessary-condition\n  while (true) {\n    try {\n      const real = await realpath(current);\n      return suffix === '' ? real : resolve(real, suffix);\n    } catch {\n      const parent = resolve(current, '..');\n      if (parent === current) {\n        return absolutePath;\n      }\n      const base = current.slice(parent.length + 1);\n      suffix = suffix === '' ? base : `${base}/${suffix}`;\n      current = parent;\n    }\n  }\n}\n\nasync function isInsideAnyRootRealpath(\n  absolutePath: string,\n  realRoots: readonly string[]\n): Promise<boolean> {\n  const real = await realpathOfPathOrAncestor(absolutePath);\n  return isInsideAnyRoot(real, [...realRoots]);\n}\n\nfunction formatReason(\n  template: string | undefined,\n  toolName: string,\n  outsidePaths: readonly string[]\n): string {\n  const fallback = `Tool \"${toolName}\" wants to touch ${outsidePaths.length} path(s) outside the workspace: ${outsidePaths.join(', ')}`;\n  if (template == null) return fallback;\n  return template\n    .replace(/\\{tool\\}/g, toolName)\n    .replace(/\\{paths\\}/g, outsidePaths.join(', '));\n}\n\n/**\n * Build a `PreToolUse` callback that enforces the workspace policy.\n * Register it on a `HookRegistry`:\n *\n * ```ts\n * registry.register('PreToolUse', {\n *   hooks: [createWorkspacePolicyHook({ root, outsideWrite: 'ask' })],\n * });\n * ```\n *\n * The hook is composable with `createToolPolicyHook` — register both;\n * `executeHooks` precedence (`deny > ask > allow`) sorts out which\n * decision wins per call.\n */\nexport function createWorkspacePolicyHook(\n  config: WorkspacePolicyConfig\n): HookCallback<'PreToolUse'> {\n  const root = resolve(config.root);\n  // Relative `additionalRoots` entries are anchored to `root` so a\n  // monorepo config like `additionalRoots: ['../shared']` resolves\n  // to a sibling of `root`, not of process.cwd. Matches\n  // `getWorkspaceRoots` in LocalExecutionEngine.\n  const additionalRoots = (config.additionalRoots ?? []).map((p) =>\n    isAbsolute(p) ? resolve(p) : resolve(root, p)\n  );\n  const allRoots = [root, ...additionalRoots];\n\n  // Pre-realpath the roots once at construction — these are stable\n  // per Run. The candidate paths get realpath'd lazily inside the\n  // hook callback. Cached so the per-call cost is just one realpath.\n  let realRootsPromise: Promise<string[]> | undefined;\n  const getRealRoots = (): Promise<string[]> => {\n    if (realRootsPromise == null) {\n      realRootsPromise = Promise.all(allRoots.map(realpathOrSelf));\n    }\n    return realRootsPromise;\n  };\n\n  const readPolicy: OutsideAccessPolicy = config.outsideRead ?? 'ask';\n  const writePolicy: OutsideAccessPolicy = config.outsideWrite ?? 'ask';\n\n  const extractors: Record<string, PathExtractor | undefined> = {\n    ...DEFAULT_EXTRACTORS,\n    ...(config.pathExtractors ?? {}),\n  };\n\n  /** Unknown tools are treated as writes (the stricter policy). */\n  const resolvePolicy = (toolName: string): OutsideAccessPolicy => {\n    if (WRITE_TOOLS.has(toolName)) {\n      return writePolicy;\n    }\n    if (READ_TOOLS.has(toolName)) {\n      return readPolicy;\n    }\n    return writePolicy;\n  };\n\n  return async (input: PreToolUseHookInput): Promise<PreToolUseHookOutput> => {\n    const extractor = extractors[input.toolName];\n    if (extractor == null) return { decision: 'allow' };\n\n    const paths = extractor(input.toolInput);\n    if (paths.length === 0) return { decision: 'allow' };\n\n    // Two-stage check:\n    //   1. Lexical fast path — anything that's lexically inside the\n    //      workspace AND doesn't get redirected by realpath stays\n    //      allow-able without paying the realpath cost on every call.\n    //   2. For paths that look outside lexically OR look inside but\n    //      may have been routed through a symlink, realpath both the\n    //      candidate and the roots and compare. This catches the\n    //      `workspace/link → /etc/passwd` escape that lexical-only\n    //      checks miss.\n    const outside: string[] = [];\n    const realRoots = await getRealRoots();\n    for (const p of paths) {\n      const abs = isAbsolute(p) ? resolve(p) : resolve(root, p);\n      // Realpath is the source of truth — it catches both the\n      // symlink-escape case (lexically-inside path that resolves\n      // outside) and the alternate-mount case (lexically-outside\n      // path that resolves back inside the workspace). The lexical\n      // check alone gives the wrong answer for either, so we don't\n      // bother computing it.\n      const realInside = await isInsideAnyRootRealpath(abs, realRoots);\n      if (!realInside) {\n        outside.push(p);\n      }\n    }\n    if (outside.length === 0) return { decision: 'allow' };\n\n    const policy = resolvePolicy(input.toolName);\n    if (policy === 'allow') return { decision: 'allow' };\n\n    const decision: ToolDecision = policy === 'deny' ? 'deny' : 'ask';\n    return {\n      decision,\n      reason: formatReason(config.reason, input.toolName, outside),\n      ...(decision === 'ask'\n        ? { allowedDecisions: ['approve', 'reject'] as const }\n        : {}),\n    };\n  };\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAgGA,MAAM,aAAa,IAAI,IAAY;;;;;;AAMnC,CAAC;AAED,MAAM,cAAc,IAAI,IAAY,CAAA,cAAA,WAGpC,CAAC;AAuCD,MAAM,sBAAsB;AAC5B,SAAS,mBAAmB,OAAuB;CAKjD,MAAM,OAAO,QAAQ;CACrB,IAAI,MAAM,WAAW,IAAI,GAAG,OAAO,GAAG,KAAK,GAAG,MAAM,MAAM,CAAC;CAC3D,IAAI,MAAM,WAAW,UAAU,GAAG,OAAO,GAAG,KAAK,GAAG,MAAM,MAAM,CAAC;CACjE,IAAI,MAAM,WAAW,QAAQ,GAAG,OAAO,GAAG,KAAK,GAAG,MAAM,MAAM,CAAC;CAC/D,OAAO;AACT;AACA,SAAS,yBAAyB,OAA0C;CAC1E,MAAM,UAAU,OAAO,MAAM,YAAY,WAAW,MAAM,UAAU;CACpE,IAAI,YAAY,IAAI,OAAO,CAAC;CAC5B,MAAM,MAAgB,CAAC;CACvB,KAAK,MAAM,SAAS,QAAQ,SAAS,mBAAmB,GACtD,IAAI,KAAK,mBAAmB,MAAM,EAAE,CAAC;CAEvC,OAAO;AACT;AAEA,MAAM,qBAAoD;iBAChC,MACtB,OAAO,EAAE,cAAc,WAAW,CAAC,EAAE,SAAS,IAAI,CAAC;kBAC5B,MACvB,OAAO,EAAE,cAAc,WAAW,CAAC,EAAE,SAAS,IAAI,CAAC;iBAC7B,MACtB,OAAO,EAAE,cAAc,WAAW,CAAC,EAAE,SAAS,IAAI,CAAC;mBAC3B,MACxB,OAAO,EAAE,SAAS,YAAY,EAAE,SAAS,KAAK,CAAC,EAAE,IAAI,IAAI,CAAC;mBAClC,MACxB,OAAO,EAAE,SAAS,YAAY,EAAE,SAAS,KAAK,CAAC,EAAE,IAAI,IAAI,CAAC;sBAC/B,MAC3B,OAAO,EAAE,SAAS,YAAY,EAAE,SAAS,KAAK,CAAC,EAAE,IAAI,IAAI,CAAC;oBACjC;AAC7B;AAEA,SAAS,gBAAgB,cAAsB,OAA0B;CACvE,KAAK,MAAM,QAAQ,OAAO;EACxB,IAAI,iBAAiB,MAAM,OAAO;EAClC,MAAM,MAAM,SAAS,MAAM,YAAY;EACvC,IAAI,CAAC,IAAI,WAAW,IAAI,KAAK,CAAC,WAAW,GAAG,GAAG,OAAO;CACxD;CACA,OAAO;AACT;;;;;;;;;;;;;;;AAgBA,eAAe,eAAe,cAAuC;CACnE,IAAI;EACF,OAAO,MAAM,SAAS,YAAY;CACpC,QAAQ;EACN,OAAO;CACT;AACF;AAEA,eAAe,yBAAyB,cAAuC;CAC7E,IAAI,UAAU;CACd,IAAI,SAAS;CAEb,OAAO,MACL,IAAI;EACF,MAAM,OAAO,MAAM,SAAS,OAAO;EACnC,OAAO,WAAW,KAAK,OAAO,QAAQ,MAAM,MAAM;CACpD,QAAQ;EACN,MAAM,SAAS,QAAQ,SAAS,IAAI;EACpC,IAAI,WAAW,SACb,OAAO;EAET,MAAM,OAAO,QAAQ,MAAM,OAAO,SAAS,CAAC;EAC5C,SAAS,WAAW,KAAK,OAAO,GAAG,KAAK,GAAG;EAC3C,UAAU;CACZ;AAEJ;AAEA,eAAe,wBACb,cACA,WACkB;CAElB,OAAO,gBAAgB,MADJ,yBAAyB,YAAY,GAC3B,CAAC,GAAG,SAAS,CAAC;AAC7C;AAEA,SAAS,aACP,UACA,UACA,cACQ;CACR,MAAM,WAAW,SAAS,SAAS,mBAAmB,aAAa,OAAO,kCAAkC,aAAa,KAAK,IAAI;CAClI,IAAI,YAAY,MAAM,OAAO;CAC7B,OAAO,SACJ,QAAQ,aAAa,QAAQ,CAAC,CAC9B,QAAQ,cAAc,aAAa,KAAK,IAAI,CAAC;AAClD;;;;;;;;;;;;;;;AAgBA,SAAgB,0BACd,QAC4B;CAC5B,MAAM,OAAO,QAAQ,OAAO,IAAI;CAQhC,MAAM,WAAW,CAAC,MAAM,IAHC,OAAO,mBAAmB,CAAC,EAAA,CAAG,KAAK,MAC1D,WAAW,CAAC,IAAI,QAAQ,CAAC,IAAI,QAAQ,MAAM,CAAC,CAEL,CAAC;CAK1C,IAAI;CACJ,MAAM,qBAAwC;EAC5C,IAAI,oBAAoB,MACtB,mBAAmB,QAAQ,IAAI,SAAS,IAAI,cAAc,CAAC;EAE7D,OAAO;CACT;CAEA,MAAM,aAAkC,OAAO,eAAe;CAC9D,MAAM,cAAmC,OAAO,gBAAgB;CAEhE,MAAM,aAAwD;EAC5D,GAAG;EACH,GAAI,OAAO,kBAAkB,CAAC;CAChC;;CAGA,MAAM,iBAAiB,aAA0C;EAC/D,IAAI,YAAY,IAAI,QAAQ,GAC1B,OAAO;EAET,IAAI,WAAW,IAAI,QAAQ,GACzB,OAAO;EAET,OAAO;CACT;CAEA,OAAO,OAAO,UAA8D;EAC1E,MAAM,YAAY,WAAW,MAAM;EACnC,IAAI,aAAa,MAAM,OAAO,EAAE,UAAU,QAAQ;EAElD,MAAM,QAAQ,UAAU,MAAM,SAAS;EACvC,IAAI,MAAM,WAAW,GAAG,OAAO,EAAE,UAAU,QAAQ;EAWnD,MAAM,UAAoB,CAAC;EAC3B,MAAM,YAAY,MAAM,aAAa;EACrC,KAAK,MAAM,KAAK,OASd,IAAI,CAAC,MADoB,wBAPb,WAAW,CAAC,IAAI,QAAQ,CAAC,IAAI,QAAQ,MAAM,CAAC,GAOF,SAAS,GAE7D,QAAQ,KAAK,CAAC;EAGlB,IAAI,QAAQ,WAAW,GAAG,OAAO,EAAE,UAAU,QAAQ;EAErD,MAAM,SAAS,cAAc,MAAM,QAAQ;EAC3C,IAAI,WAAW,SAAS,OAAO,EAAE,UAAU,QAAQ;EAEnD,MAAM,WAAyB,WAAW,SAAS,SAAS;EAC5D,OAAO;GACL;GACA,QAAQ,aAAa,OAAO,QAAQ,MAAM,UAAU,OAAO;GAC3D,GAAI,aAAa,QACb,EAAE,kBAAkB,CAAC,WAAW,QAAQ,EAAW,IACnD,CAAC;EACP;CACF;AACF"}
+{"version":3,"file":"createWorkspacePolicyHook.mjs","names":[],"sources":["../../../src/hooks/createWorkspacePolicyHook.ts"],"sourcesContent":["/**\n * Workspace boundary policy as a `PreToolUse` hook.\n *\n * Local-engine file tools enforce a hard workspace boundary at the\n * tool implementation layer (`resolveWorkspacePathSafe`). This hook\n * adds a complementary, host-controlled layer on top that uses the\n * standard PreToolUse / HITL machinery to *negotiate* access to\n * paths outside the workspace — instead of just throwing.\n *\n * The host opts in by registering this hook on a `HookRegistry`; the\n * hook inspects each tool call's input, extracts the file paths it\n * mentions via per-tool extractors, and returns:\n *\n *   - `allow`               — every path is inside `workspace.root`\n *                              (or `additionalRoots`)\n *   - `deny`                — at least one path is outside, and the\n *                              configured outside-policy is `'deny'`\n *   - `ask`                 — at least one path is outside, and the\n *                              outside-policy is `'ask'` (default).\n *                              When `humanInTheLoop.enabled` is true,\n *                              the existing PreToolUse `'ask'` flow\n *                              raises a tool_approval interrupt the\n *                              host UI can render. When HITL is off,\n *                              `'ask'` collapses to `deny` (matches\n *                              the rest of the SDK's default).\n *\n * Default per-tool path extractors cover the local-engine coding\n * suite (`read_file`, `write_file`, `edit_file`, `grep_search`,\n * `glob_search`, `list_directory`, `compile_check`). The host can\n * override or extend via `pathExtractors`. Bash/code paths are not\n * extracted by default — bash command parsing is its own concern, and\n * the existing `bashAst` validator + sandbox-runtime fs allowlist are\n * the right gates for those.\n *\n * Important: this hook does NOT replace `resolveWorkspacePathSafe`.\n * Even if the hook returns `allow`, the file tool still enforces its\n * own clamp unless `workspace.allowReadOutside` /\n * `workspace.allowWriteOutside` (or the legacy\n * `allowOutsideWorkspace`) is set. The recommended composition for\n * \"ask the user\" semantics is:\n *\n *   workspace: {\n *     root,\n *     allowReadOutside: true,\n *     allowWriteOutside: true,\n *   },\n *   // …with the hook installed and humanInTheLoop.enabled = true.\n */\n\nimport { homedir } from 'os';\nimport { realpath } from 'fs/promises';\nimport { isAbsolute, relative, resolve } from 'path';\nimport type {\n  HookCallback,\n  PreToolUseHookInput,\n  PreToolUseHookOutput,\n  ToolDecision,\n} from './types';\nimport { Constants } from '@/common';\n\n/**\n * What to do when a tool call references a path outside the workspace.\n *\n *   - `'ask'`    : default. Raise a PreToolUse `ask` (host UI prompts\n *                  via the HITL interrupt path).\n *   - `'allow'`  : let the call through (use the existing tool clamp\n *                  to actually enforce — the hook is purely advisory).\n *   - `'deny'`   : block the call with an error ToolMessage.\n */\nexport type OutsideAccessPolicy = 'ask' | 'allow' | 'deny';\n\nexport interface WorkspacePolicyConfig {\n  /** Canonical workspace root. Required. */\n  root: string;\n  /** Sibling roots that count as inside-workspace. */\n  additionalRoots?: readonly string[];\n  /** Policy applied to read-only file tools. Defaults to `'ask'`. */\n  outsideRead?: OutsideAccessPolicy;\n  /** Policy applied to write-shaped file tools. Defaults to `'ask'`. */\n  outsideWrite?: OutsideAccessPolicy;\n  /**\n   * Optional reason template surfaced in the `ask`/`deny` decision.\n   * Supports `{tool}` and `{paths}` substitution.\n   */\n  reason?: string;\n  /**\n   * Per-tool path extractors. Defaults cover the local-engine coding\n   * suite. Returning an empty array opts that tool out of policy.\n   */\n  pathExtractors?: Record<string, PathExtractor>;\n}\n\nexport type PathExtractor = (\n  toolInput: Record<string, unknown>\n) => readonly string[];\n\nconst READ_TOOLS = new Set<string>([\n  Constants.READ_FILE,\n  Constants.GREP_SEARCH,\n  Constants.GLOB_SEARCH,\n  Constants.LIST_DIRECTORY,\n  Constants.COMPILE_CHECK,\n]);\n\nconst WRITE_TOOLS = new Set<string>([\n  Constants.WRITE_FILE,\n  Constants.EDIT_FILE,\n]);\n\n/**\n * Best-effort extractor for `compile_check` — pulls absolute and `~/`\n * path tokens out of the `command` string so the workspace boundary\n * sees them. Without this, a model could ship `command: 'cat\n * /etc/passwd'` and the policy hook would short-circuit to `allow`\n * (Codex P1 #26 — the prior `() => []` made the hook a no-op for\n * compile_check). Conservative by design:\n *\n *   - Matches `/foo`, `~/foo`, `$HOME/foo`, `${HOME}/foo` followed by\n *     non-shell-special chars. Stops at whitespace, quotes, redirect\n *     operators, pipes, semicolons.\n *   - Strips a leading `--flag=` so `--out=/etc/foo` extracts as\n *     `/etc/foo` (the path the agent's actually trying to write).\n *   - Misses relative paths (intended — those resolve under cwd\n *     anyway), and shell-substituted paths whose final form isn't\n *     visible at extract time. Hosts that need bulletproof gating\n *     should pair this with a `bash_tool`-level policy.\n */\n// `[\"']?` slots before AND after the captured path cover quoted\n// forms like `cat \"/etc/passwd\"` and `--out='/tmp/x'`. Codex P1 #31\n// — the previous regex only matched unquoted tokens, so a model\n// could trivially bypass the workspace policy by quoting any\n// destination path. The path content character class still excludes\n// quotes/whitespace/shell-specials so we don't over-extract; that's\n// the defensive trade we want for fallback-grep style matching.\n//\n// The `\\.\\.(?:\\/[^…]*)?` alternation covers parent-traversal forms\n// (`..`, `../secrets.txt`, `../foo/bar`). Without it, a model could\n// exfiltrate parent-directory files via `cat ../secrets` and the\n// hook would short-circuit to `allow` because the extractor saw no\n// \"absolute\" token. The boundary check at the call site resolves\n// non-absolute extracted tokens against `root`, so `../secrets`\n// becomes `<parent-of-workspace>/secrets` which the boundary then\n// correctly flags as outside. Codex P2 #35.\nconst PATH_TOKEN =\n  /(?:^|[\\s=])(?:--[^\\s=]+=)?[\"']?(\\/[^\\s'\"|;&<>()`]+|~\\/[^\\s'\"|;&<>()`]+|\\$\\{?HOME\\}?\\/[^\\s'\"|;&<>()`]+|\\.\\.(?:\\/[^\\s'\"|;&<>()`]*)?)[\"']?/g;\n// Back-compat alias kept for any downstream import.\nconst ABSOLUTE_PATH_TOKEN = PATH_TOKEN;\nfunction expandHomeRelative(token: string): string {\n  // Expand ~/foo and $HOME/foo and ${HOME}/foo to absolute. The\n  // workspace boundary check resolves non-absolute paths against the\n  // workspace root, which would silently treat `~/secret` as\n  // `<workspace>/~/secret` — exactly the bypass the codex flagged.\n  const home = homedir();\n  if (token.startsWith('~/')) return `${home}/${token.slice(2)}`;\n  if (token.startsWith('${HOME}/')) return `${home}/${token.slice(8)}`;\n  if (token.startsWith('$HOME/')) return `${home}/${token.slice(6)}`;\n  return token;\n}\nfunction extractCompileCheckPaths(input: Record<string, unknown>): string[] {\n  const command = typeof input.command === 'string' ? input.command : '';\n  if (command === '') return [];\n  const out: string[] = [];\n  for (const match of command.matchAll(ABSOLUTE_PATH_TOKEN)) {\n    out.push(expandHomeRelative(match[1]));\n  }\n  return out;\n}\n\n// All built-in coding tools take their file/dir target in `path`.\nconst extractPath: PathExtractor = (i) =>\n  typeof i.path === 'string' && i.path !== '' ? [i.path] : [];\n\nconst DEFAULT_EXTRACTORS: Record<string, PathExtractor> = {\n  [Constants.READ_FILE]: extractPath,\n  [Constants.WRITE_FILE]: extractPath,\n  [Constants.EDIT_FILE]: extractPath,\n  [Constants.GREP_SEARCH]: (i) =>\n    typeof i.path === 'string' && i.path !== '' ? [i.path] : [],\n  [Constants.GLOB_SEARCH]: (i) =>\n    typeof i.path === 'string' && i.path !== '' ? [i.path] : [],\n  [Constants.LIST_DIRECTORY]: (i) =>\n    typeof i.path === 'string' && i.path !== '' ? [i.path] : [],\n  [Constants.COMPILE_CHECK]: extractCompileCheckPaths,\n};\n\nfunction isInsideAnyRoot(absolutePath: string, roots: string[]): boolean {\n  for (const root of roots) {\n    if (absolutePath === root) return true;\n    const rel = relative(root, absolutePath);\n    if (!rel.startsWith('..') && !isAbsolute(rel)) return true;\n  }\n  return false;\n}\n\n/**\n * Symlink-aware variant: realpaths the candidate AND the roots before\n * comparing. Without this, a symlink inside the workspace pointing\n * outside (e.g. `workspace/link → /etc/passwd`) compares as\n * \"in-workspace\" lexically, but actually grants the agent reach\n * outside the boundary. Critical when this hook is the primary gate\n * (i.e. the host opted into `workspace.allowReadOutside: true` /\n * `allowWriteOutside: true` so the file tools' own clamp is off).\n *\n * Handles paths that don't yet exist (e.g. `write_file` to a brand\n * new path) by walking up to the nearest existing ancestor and\n * realpathing that, then re-attaching the unresolved suffix. Mirrors\n * `resolveWorkspacePathSafe`'s approach in LocalExecutionEngine.\n */\nasync function realpathOrSelf(absolutePath: string): Promise<string> {\n  try {\n    return await realpath(absolutePath);\n  } catch {\n    return absolutePath;\n  }\n}\n\nasync function realpathOfPathOrAncestor(absolutePath: string): Promise<string> {\n  let current = absolutePath;\n  let suffix = '';\n  // eslint-disable-next-line @typescript-eslint/no-unnecessary-condition\n  while (true) {\n    try {\n      const real = await realpath(current);\n      return suffix === '' ? real : resolve(real, suffix);\n    } catch {\n      const parent = resolve(current, '..');\n      if (parent === current) {\n        return absolutePath;\n      }\n      const base = current.slice(parent.length + 1);\n      suffix = suffix === '' ? base : `${base}/${suffix}`;\n      current = parent;\n    }\n  }\n}\n\nasync function isInsideAnyRootRealpath(\n  absolutePath: string,\n  realRoots: readonly string[]\n): Promise<boolean> {\n  const real = await realpathOfPathOrAncestor(absolutePath);\n  return isInsideAnyRoot(real, [...realRoots]);\n}\n\nfunction formatReason(\n  template: string | undefined,\n  toolName: string,\n  outsidePaths: readonly string[]\n): string {\n  const fallback = `Tool \"${toolName}\" wants to touch ${outsidePaths.length} path(s) outside the workspace: ${outsidePaths.join(', ')}`;\n  if (template == null) return fallback;\n  return template\n    .replace(/\\{tool\\}/g, toolName)\n    .replace(/\\{paths\\}/g, outsidePaths.join(', '));\n}\n\n/**\n * Build a `PreToolUse` callback that enforces the workspace policy.\n * Register it on a `HookRegistry`:\n *\n * ```ts\n * registry.register('PreToolUse', {\n *   hooks: [createWorkspacePolicyHook({ root, outsideWrite: 'ask' })],\n * });\n * ```\n *\n * The hook is composable with `createToolPolicyHook` — register both;\n * `executeHooks` precedence (`deny > ask > allow`) sorts out which\n * decision wins per call.\n */\nexport function createWorkspacePolicyHook(\n  config: WorkspacePolicyConfig\n): HookCallback<'PreToolUse'> {\n  const root = resolve(config.root);\n  // Relative `additionalRoots` entries are anchored to `root` so a\n  // monorepo config like `additionalRoots: ['../shared']` resolves\n  // to a sibling of `root`, not of process.cwd. Matches\n  // `getWorkspaceRoots` in LocalExecutionEngine.\n  const additionalRoots = (config.additionalRoots ?? []).map((p) =>\n    isAbsolute(p) ? resolve(p) : resolve(root, p)\n  );\n  const allRoots = [root, ...additionalRoots];\n\n  // Pre-realpath the roots once at construction — these are stable\n  // per Run. The candidate paths get realpath'd lazily inside the\n  // hook callback. Cached so the per-call cost is just one realpath.\n  let realRootsPromise: Promise<string[]> | undefined;\n  const getRealRoots = (): Promise<string[]> => {\n    if (realRootsPromise == null) {\n      realRootsPromise = Promise.all(allRoots.map(realpathOrSelf));\n    }\n    return realRootsPromise;\n  };\n\n  const readPolicy: OutsideAccessPolicy = config.outsideRead ?? 'ask';\n  const writePolicy: OutsideAccessPolicy = config.outsideWrite ?? 'ask';\n\n  const extractors: Record<string, PathExtractor | undefined> = {\n    ...DEFAULT_EXTRACTORS,\n    ...(config.pathExtractors ?? {}),\n  };\n\n  /** Unknown tools are treated as writes (the stricter policy). */\n  const resolvePolicy = (toolName: string): OutsideAccessPolicy => {\n    if (WRITE_TOOLS.has(toolName)) {\n      return writePolicy;\n    }\n    if (READ_TOOLS.has(toolName)) {\n      return readPolicy;\n    }\n    return writePolicy;\n  };\n\n  return async (input: PreToolUseHookInput): Promise<PreToolUseHookOutput> => {\n    const extractor = extractors[input.toolName];\n    if (extractor == null) return { decision: 'allow' };\n\n    const paths = extractor(input.toolInput);\n    if (paths.length === 0) return { decision: 'allow' };\n\n    // Two-stage check:\n    //   1. Lexical fast path — anything that's lexically inside the\n    //      workspace AND doesn't get redirected by realpath stays\n    //      allow-able without paying the realpath cost on every call.\n    //   2. For paths that look outside lexically OR look inside but\n    //      may have been routed through a symlink, realpath both the\n    //      candidate and the roots and compare. This catches the\n    //      `workspace/link → /etc/passwd` escape that lexical-only\n    //      checks miss.\n    const outside: string[] = [];\n    const realRoots = await getRealRoots();\n    for (const p of paths) {\n      const abs = isAbsolute(p) ? resolve(p) : resolve(root, p);\n      // Realpath is the source of truth — it catches both the\n      // symlink-escape case (lexically-inside path that resolves\n      // outside) and the alternate-mount case (lexically-outside\n      // path that resolves back inside the workspace). The lexical\n      // check alone gives the wrong answer for either, so we don't\n      // bother computing it.\n      const realInside = await isInsideAnyRootRealpath(abs, realRoots);\n      if (!realInside) {\n        outside.push(p);\n      }\n    }\n    if (outside.length === 0) return { decision: 'allow' };\n\n    const policy = resolvePolicy(input.toolName);\n    if (policy === 'allow') return { decision: 'allow' };\n\n    const decision: ToolDecision = policy === 'deny' ? 'deny' : 'ask';\n    return {\n      decision,\n      reason: formatReason(config.reason, input.toolName, outside),\n      ...(decision === 'ask'\n        ? { allowedDecisions: ['approve', 'reject'] as const }\n        : {}),\n    };\n  };\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAgGA,MAAM,aAAa,IAAI,IAAY;;;;;;AAMnC,CAAC;AAED,MAAM,cAAc,IAAI,IAAY,CAAA,cAAA,WAGpC,CAAC;AAuCD,MAAM,sBAAsB;AAC5B,SAAS,mBAAmB,OAAuB;CAKjD,MAAM,OAAO,QAAQ;CACrB,IAAI,MAAM,WAAW,IAAI,GAAG,OAAO,GAAG,KAAK,GAAG,MAAM,MAAM,CAAC;CAC3D,IAAI,MAAM,WAAW,UAAU,GAAG,OAAO,GAAG,KAAK,GAAG,MAAM,MAAM,CAAC;CACjE,IAAI,MAAM,WAAW,QAAQ,GAAG,OAAO,GAAG,KAAK,GAAG,MAAM,MAAM,CAAC;CAC/D,OAAO;AACT;AACA,SAAS,yBAAyB,OAA0C;CAC1E,MAAM,UAAU,OAAO,MAAM,YAAY,WAAW,MAAM,UAAU;CACpE,IAAI,YAAY,IAAI,OAAO,CAAC;CAC5B,MAAM,MAAgB,CAAC;CACvB,KAAK,MAAM,SAAS,QAAQ,SAAS,mBAAmB,GACtD,IAAI,KAAK,mBAAmB,MAAM,EAAE,CAAC;CAEvC,OAAO;AACT;AAGA,MAAM,eAA8B,MAClC,OAAO,EAAE,SAAS,YAAY,EAAE,SAAS,KAAK,CAAC,EAAE,IAAI,IAAI,CAAC;AAE5D,MAAM,qBAAoD;gBACjC;iBACC;gBACD;mBACG,MACxB,OAAO,EAAE,SAAS,YAAY,EAAE,SAAS,KAAK,CAAC,EAAE,IAAI,IAAI,CAAC;mBAClC,MACxB,OAAO,EAAE,SAAS,YAAY,EAAE,SAAS,KAAK,CAAC,EAAE,IAAI,IAAI,CAAC;sBAC/B,MAC3B,OAAO,EAAE,SAAS,YAAY,EAAE,SAAS,KAAK,CAAC,EAAE,IAAI,IAAI,CAAC;oBACjC;AAC7B;AAEA,SAAS,gBAAgB,cAAsB,OAA0B;CACvE,KAAK,MAAM,QAAQ,OAAO;EACxB,IAAI,iBAAiB,MAAM,OAAO;EAClC,MAAM,MAAM,SAAS,MAAM,YAAY;EACvC,IAAI,CAAC,IAAI,WAAW,IAAI,KAAK,CAAC,WAAW,GAAG,GAAG,OAAO;CACxD;CACA,OAAO;AACT;;;;;;;;;;;;;;;AAgBA,eAAe,eAAe,cAAuC;CACnE,IAAI;EACF,OAAO,MAAM,SAAS,YAAY;CACpC,QAAQ;EACN,OAAO;CACT;AACF;AAEA,eAAe,yBAAyB,cAAuC;CAC7E,IAAI,UAAU;CACd,IAAI,SAAS;CAEb,OAAO,MACL,IAAI;EACF,MAAM,OAAO,MAAM,SAAS,OAAO;EACnC,OAAO,WAAW,KAAK,OAAO,QAAQ,MAAM,MAAM;CACpD,QAAQ;EACN,MAAM,SAAS,QAAQ,SAAS,IAAI;EACpC,IAAI,WAAW,SACb,OAAO;EAET,MAAM,OAAO,QAAQ,MAAM,OAAO,SAAS,CAAC;EAC5C,SAAS,WAAW,KAAK,OAAO,GAAG,KAAK,GAAG;EAC3C,UAAU;CACZ;AAEJ;AAEA,eAAe,wBACb,cACA,WACkB;CAElB,OAAO,gBAAgB,MADJ,yBAAyB,YAAY,GAC3B,CAAC,GAAG,SAAS,CAAC;AAC7C;AAEA,SAAS,aACP,UACA,UACA,cACQ;CACR,MAAM,WAAW,SAAS,SAAS,mBAAmB,aAAa,OAAO,kCAAkC,aAAa,KAAK,IAAI;CAClI,IAAI,YAAY,MAAM,OAAO;CAC7B,OAAO,SACJ,QAAQ,aAAa,QAAQ,CAAC,CAC9B,QAAQ,cAAc,aAAa,KAAK,IAAI,CAAC;AAClD;;;;;;;;;;;;;;;AAgBA,SAAgB,0BACd,QAC4B;CAC5B,MAAM,OAAO,QAAQ,OAAO,IAAI;CAQhC,MAAM,WAAW,CAAC,MAAM,IAHC,OAAO,mBAAmB,CAAC,EAAA,CAAG,KAAK,MAC1D,WAAW,CAAC,IAAI,QAAQ,CAAC,IAAI,QAAQ,MAAM,CAAC,CAEL,CAAC;CAK1C,IAAI;CACJ,MAAM,qBAAwC;EAC5C,IAAI,oBAAoB,MACtB,mBAAmB,QAAQ,IAAI,SAAS,IAAI,cAAc,CAAC;EAE7D,OAAO;CACT;CAEA,MAAM,aAAkC,OAAO,eAAe;CAC9D,MAAM,cAAmC,OAAO,gBAAgB;CAEhE,MAAM,aAAwD;EAC5D,GAAG;EACH,GAAI,OAAO,kBAAkB,CAAC;CAChC;;CAGA,MAAM,iBAAiB,aAA0C;EAC/D,IAAI,YAAY,IAAI,QAAQ,GAC1B,OAAO;EAET,IAAI,WAAW,IAAI,QAAQ,GACzB,OAAO;EAET,OAAO;CACT;CAEA,OAAO,OAAO,UAA8D;EAC1E,MAAM,YAAY,WAAW,MAAM;EACnC,IAAI,aAAa,MAAM,OAAO,EAAE,UAAU,QAAQ;EAElD,MAAM,QAAQ,UAAU,MAAM,SAAS;EACvC,IAAI,MAAM,WAAW,GAAG,OAAO,EAAE,UAAU,QAAQ;EAWnD,MAAM,UAAoB,CAAC;EAC3B,MAAM,YAAY,MAAM,aAAa;EACrC,KAAK,MAAM,KAAK,OASd,IAAI,CAAC,MADoB,wBAPb,WAAW,CAAC,IAAI,QAAQ,CAAC,IAAI,QAAQ,MAAM,CAAC,GAOF,SAAS,GAE7D,QAAQ,KAAK,CAAC;EAGlB,IAAI,QAAQ,WAAW,GAAG,OAAO,EAAE,UAAU,QAAQ;EAErD,MAAM,SAAS,cAAc,MAAM,QAAQ;EAC3C,IAAI,WAAW,SAAS,OAAO,EAAE,UAAU,QAAQ;EAEnD,MAAM,WAAyB,WAAW,SAAS,SAAS;EAC5D,OAAO;GACL;GACA,QAAQ,aAAa,OAAO,QAAQ,MAAM,UAAU,OAAO;GAC3D,GAAI,aAAa,QACb,EAAE,kBAAkB,CAAC,WAAW,QAAQ,EAAW,IACnD,CAAC;EACP;CACF;AACF"}

package/dist/esm/llm/anthropic/utils/message_inputs.mjs

@@ -487,8 +487,12 @@ const NON_CACHEABLE_PAYLOAD_BLOCK_TYPES = new Set(["thinking", "redacted_thinkin
 * input_json_delta) are already gone — only native thinking blocks must be
 * skipped. Returns a new array only when it actually places a marker.
 */
-function reanchorTailCacheControl(messages) {
+function reanchorTailCacheControl(messages, ttl) {
 	if (messages.length === 0) return messages;
+	const cacheControl = ttl === "1h" ? {
+		type: "ephemeral",
+		ttl: "1h"
+	} : { type: "ephemeral" };
 	const lastIndex = messages.length - 1;
 	const tail = messages[lastIndex];
 	const content = tail.content;
@@ -500,7 +504,7 @@ function reanchorTailCacheControl(messages) {
 			content: [{
 				type: "text",
 				text: content,
-				cache_control: { type: "ephemeral" }
+				cache_control: cacheControl
 			}]
 		};
 		return next;
@@ -519,11 +523,23 @@ function reanchorTailCacheControl(messages) {
 		...tail,
 		content: content.map((block, i) => i === anchor ? {
 			...block,
-			cache_control: { type: "ephemeral" }
+			cache_control: cacheControl
 		} : block)
 	};
 	return next;
 }
+/**
+* Find the extended-cache TTL (`'1h'`) carried by an existing `cache_control`
+* breakpoint, so {@link reanchorTailCacheControl} can re-apply the same TTL the
+* stripped prefill had. Returns `undefined` for the legacy 5-minute default
+* (no `ttl`), keeping that path byte-identical to before.
+*/
+function findCacheControlTtl(messages) {
+	for (const message of messages) {
+		if (!Array.isArray(message.content)) continue;
+		for (const block of message.content) if (block.cache_control?.ttl === "1h") return "1h";
+	}
+}
 function stripUnsupportedAssistantPrefill(request) {
 	if (!modelDisallowsAssistantPrefill(request.model)) return request;
 	const messages = request.messages;
@@ -536,7 +552,7 @@ function stripUnsupportedAssistantPrefill(request) {
 	* message caching for this request. Re-anchor the breakpoint on the new tail
 	* (only when one was actually lost, so caching-off requests stay untouched).
 	*/
-	const reanchored = messagesHaveCacheControl(messages) && !messagesHaveCacheControl(nextMessages) ? reanchorTailCacheControl(nextMessages) : nextMessages;
+	const reanchored = messagesHaveCacheControl(messages) && !messagesHaveCacheControl(nextMessages) ? reanchorTailCacheControl(nextMessages, findCacheControlTtl(messages)) : nextMessages;
 	return {
 		...request,
 		messages: reanchored

package/dist/esm/llm/anthropic/utils/message_inputs.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"message_inputs.mjs","names":["redactedPart","compactionPart"],"sources":["../../../../../src/llm/anthropic/utils/message_inputs.ts"],"sourcesContent":["/* eslint-disable @typescript-eslint/explicit-function-return-type */\n/* eslint-disable no-console */\n/**\n * This util file contains functions for converting LangChain messages to Anthropic messages.\n */\nimport { createHash } from 'node:crypto';\nimport { ToolCall } from '@langchain/core/messages/tool';\nimport {\n  type BaseMessage,\n  type SystemMessage,\n  HumanMessage,\n  type AIMessage,\n  type ToolMessage,\n  isAIMessage,\n  type Data,\n  type StandardContentBlockConverter,\n  MessageContentComplex,\n  isDataContentBlock,\n  convertToProviderContentBlock,\n  parseBase64DataUrl,\n} from '@langchain/core/messages';\nimport {\n  AnthropicImageBlockParam,\n  AnthropicMessageCreateParams,\n  AnthropicTextBlockParam,\n  AnthropicDocumentBlockParam,\n  AnthropicThinkingBlockParam,\n  AnthropicRedactedThinkingBlockParam,\n  AnthropicServerToolUseBlockParam,\n  AnthropicWebSearchToolResultBlockParam,\n  isAnthropicImageBlockParam,\n  AnthropicSearchResultBlockParam,\n  AnthropicCompactionBlockParam,\n  AnthropicToolResponse,\n} from '../types';\nimport { Constants } from '@/common';\n\ntype StandardTextBlock = Data.StandardTextBlock;\ntype StandardImageBlock = Data.StandardImageBlock;\ntype StandardFileBlock = Data.StandardFileBlock;\ntype ImageUrlContentBlock = MessageContentComplex & {\n  image_url: string | { url: string };\n};\ntype GoogleFunctionCallBlock = MessageContentComplex & {\n  functionCall: {\n    name: string;\n    args: Record<string, unknown>;\n  };\n};\n\nconst ANTHROPIC_EMPTY_TEXT_PLACEHOLDER = '_';\nconst CLAUDE_4_RELEASE_DATE_MODEL_PATTERN =\n  /claude-(?:opus|sonnet|haiku)-4-\\d{8}(?:[-.@]|$)/i;\nconst CLAUDE_4_MINOR_MODEL_PATTERN =\n  /claude-(?:opus|sonnet|haiku)-4[-.](\\d+)(?:[-.@]|$)/i;\n\nfunction _formatImage(imageUrl: string) {\n  const parsed = parseBase64DataUrl({ dataUrl: imageUrl });\n  if (parsed) {\n    return {\n      type: 'base64',\n      media_type: parsed.mime_type,\n      data: parsed.data,\n    };\n  }\n  let parsedUrl: URL;\n\n  try {\n    parsedUrl = new URL(imageUrl);\n  } catch {\n    throw new Error(\n      [\n        `Malformed image URL: ${JSON.stringify(\n          imageUrl\n        )}. Content blocks of type 'image_url' must be a valid http, https, or base64-encoded data URL.`,\n        'Example: data:image/png;base64,/9j/4AAQSk...',\n        'Example: https://example.com/image.jpg',\n      ].join('\\n\\n')\n    );\n  }\n\n  if (parsedUrl.protocol === 'http:' || parsedUrl.protocol === 'https:') {\n    return {\n      type: 'url',\n      url: imageUrl,\n    };\n  }\n\n  throw new Error(\n    [\n      `Invalid image URL protocol: ${JSON.stringify(\n        parsedUrl.protocol\n      )}. Anthropic only supports images as http, https, or base64-encoded data URLs on 'image_url' content blocks.`,\n      'Example: data:image/png;base64,/9j/4AAQSk...',\n      'Example: https://example.com/image.jpg',\n    ].join('\\n\\n')\n  );\n}\n\nconst ANTHROPIC_TOOL_USE_ID_PATTERN = /^[a-zA-Z0-9_-]+$/;\nconst ANTHROPIC_TOOL_USE_ID_MAX_LENGTH = 64;\nconst ANTHROPIC_TOOL_USE_ID_HASH_LENGTH = 10;\n\n/**\n * Normalize a tool-call ID to satisfy Anthropic's `^[a-zA-Z0-9_-]+$` and 64-char\n * constraints. Pure and deterministic — same input always yields the same output,\n * so paired `tool_use.id` and `tool_result.tool_use_id` stay matched without\n * needing a session map. IDs that already comply pass through unchanged.\n *\n * For non-compliant inputs we sanitize then append a short SHA-256 prefix of\n * the original ID to preserve uniqueness when truncation would otherwise\n * collapse distinct IDs to the same value (e.g. two long Responses-style IDs\n * sharing a 64-char prefix). The hash is computed against the raw input so\n * inputs that differ only after the truncation cutoff still produce distinct\n * outputs.\n */\nexport function normalizeAnthropicToolCallId(id: string): string;\nexport function normalizeAnthropicToolCallId(\n  id: string | undefined\n): string | undefined;\nexport function normalizeAnthropicToolCallId(\n  id: string | undefined\n): string | undefined {\n  if (id == null) {\n    return id;\n  }\n  if (\n    id.length <= ANTHROPIC_TOOL_USE_ID_MAX_LENGTH &&\n    ANTHROPIC_TOOL_USE_ID_PATTERN.test(id)\n  ) {\n    return id;\n  }\n  const sanitized = id.replace(/[^a-zA-Z0-9_-]/g, '_');\n  const hash = createHash('sha256')\n    .update(id)\n    .digest('hex')\n    .slice(0, ANTHROPIC_TOOL_USE_ID_HASH_LENGTH);\n  const prefixMaxLength =\n    ANTHROPIC_TOOL_USE_ID_MAX_LENGTH - ANTHROPIC_TOOL_USE_ID_HASH_LENGTH - 1;\n  return `${sanitized.slice(0, prefixMaxLength)}_${hash}`;\n}\n\n/**\n * Lift any `cache_control` off the inner blocks of a tool result onto the\n * `tool_result` block itself. Anthropic documents the top-level\n * `messages.content` block as the cacheable position and does not document\n * caching of sub-content blocks; the API currently honors a nested marker, but\n * anchoring on the documented position keeps the single tail breakpoint robust\n * (and mirrors the Bedrock cachePoint hoist). The first marker found wins; it is\n * stripped from every inner block so exactly one survives, on the outer block.\n */\nfunction hoistToolResultCacheControl(\n  content: string | MessageContentComplex[]\n): { content: string | MessageContentComplex[]; cacheControl: unknown } {\n  if (!Array.isArray(content)) {\n    return { content, cacheControl: undefined };\n  }\n  let cacheControl: unknown;\n  const stripped = content.map((block) => {\n    if ('cache_control' in block) {\n      cacheControl ??= (block as Record<string, unknown>).cache_control;\n      const clone = { ...(block as Record<string, unknown>) };\n      delete clone.cache_control;\n      return clone as MessageContentComplex;\n    }\n    return block;\n  });\n  // `stripped` is element-equal to `content` when no marker was present.\n  return { content: stripped, cacheControl };\n}\n\nfunction _ensureMessageContents(\n  messages: BaseMessage[]\n): (SystemMessage | HumanMessage | AIMessage)[] {\n  // Merge runs of human/tool messages into single human messages with content blocks.\n  const updatedMsgs: BaseMessage[] = [];\n  for (const message of messages) {\n    if (message._getType() === 'tool') {\n      if (typeof message.content === 'string') {\n        const previousMessage = updatedMsgs[updatedMsgs.length - 1];\n        if (\n          previousMessage._getType() === 'human' &&\n          Array.isArray(previousMessage.content) &&\n          'type' in previousMessage.content[0] &&\n          previousMessage.content[0].type === 'tool_result'\n        ) {\n          // If the previous message was a tool result, we merge this tool message into it.\n          (previousMessage.content as MessageContentComplex[]).push({\n            type: 'tool_result',\n            content: message.content,\n            tool_use_id: normalizeAnthropicToolCallId(\n              (message as ToolMessage).tool_call_id\n            ),\n          });\n        } else {\n          // If not, we create a new human message with the tool result.\n          updatedMsgs.push(\n            new HumanMessage({\n              content: [\n                {\n                  type: 'tool_result',\n                  content: message.content,\n                  tool_use_id: normalizeAnthropicToolCallId(\n                    (message as ToolMessage).tool_call_id\n                  ),\n                },\n              ],\n            })\n          );\n        }\n      } else {\n        const toolMessageContent = (\n          message as { content?: BaseMessage['content'] | null }\n        ).content;\n        // Hoist a tail cache_control off the inner content onto the\n        // tool_result block itself (the documented cacheable position).\n        const { content: hoistedContent, cacheControl } =\n          toolMessageContent != null\n            ? hoistToolResultCacheControl(_formatContent(message))\n            : { content: undefined, cacheControl: undefined };\n        updatedMsgs.push(\n          new HumanMessage({\n            content: [\n              {\n                type: 'tool_result',\n                ...(hoistedContent != null ? { content: hoistedContent } : {}),\n                ...(cacheControl != null\n                  ? { cache_control: cacheControl as { type: 'ephemeral' } }\n                  : {}),\n                tool_use_id: normalizeAnthropicToolCallId(\n                  (message as ToolMessage).tool_call_id\n                ),\n              },\n            ],\n          })\n        );\n      }\n    } else {\n      updatedMsgs.push(message);\n    }\n  }\n  return updatedMsgs as (SystemMessage | HumanMessage | AIMessage)[];\n}\n\nexport function _convertLangChainToolCallToAnthropic(\n  toolCall: ToolCall\n): AnthropicToolResponse {\n  if (toolCall.id === undefined) {\n    throw new Error('Anthropic requires all tool calls to have an \"id\".');\n  }\n  const isServerTool = toolCall.id.startsWith(\n    Constants.ANTHROPIC_SERVER_TOOL_PREFIX\n  );\n  return {\n    type: isServerTool ? 'server_tool_use' : 'tool_use',\n    id: isServerTool ? toolCall.id : normalizeAnthropicToolCallId(toolCall.id),\n    name: toolCall.name,\n    input: toolCall.args,\n  };\n}\n\nconst standardContentBlockConverter: StandardContentBlockConverter<{\n  text: AnthropicTextBlockParam;\n  image: AnthropicImageBlockParam;\n  file: AnthropicDocumentBlockParam;\n}> = {\n  providerName: 'anthropic',\n\n  fromStandardTextBlock(block: StandardTextBlock): AnthropicTextBlockParam {\n    return {\n      type: 'text',\n      text: block.text,\n      ...('citations' in (block.metadata ?? {})\n        ? { citations: block.metadata!.citations }\n        : {}),\n      ...('cache_control' in (block.metadata ?? {})\n        ? { cache_control: block.metadata!.cache_control }\n        : {}),\n    } as AnthropicTextBlockParam;\n  },\n\n  fromStandardImageBlock(block: StandardImageBlock): AnthropicImageBlockParam {\n    if (block.source_type === 'url') {\n      const data = parseBase64DataUrl({\n        dataUrl: block.url,\n        asTypedArray: false,\n      });\n      if (data) {\n        return {\n          type: 'image',\n          source: {\n            type: 'base64',\n            data: data.data,\n            media_type: data.mime_type,\n          },\n          ...('cache_control' in (block.metadata ?? {})\n            ? { cache_control: block.metadata!.cache_control }\n            : {}),\n        } as AnthropicImageBlockParam;\n      } else {\n        return {\n          type: 'image',\n          source: {\n            type: 'url',\n            url: block.url,\n            media_type: block.mime_type ?? '',\n          },\n          ...('cache_control' in (block.metadata ?? {})\n            ? { cache_control: block.metadata!.cache_control }\n            : {}),\n        } as AnthropicImageBlockParam;\n      }\n    } else {\n      if (block.source_type === 'base64') {\n        return {\n          type: 'image',\n          source: {\n            type: 'base64',\n            data: block.data,\n            media_type: block.mime_type ?? '',\n          },\n          ...('cache_control' in (block.metadata ?? {})\n            ? { cache_control: block.metadata!.cache_control }\n            : {}),\n        } as AnthropicImageBlockParam;\n      } else {\n        throw new Error(`Unsupported image source type: ${block.source_type}`);\n      }\n    }\n  },\n\n  fromStandardFileBlock(block: StandardFileBlock): AnthropicDocumentBlockParam {\n    const mime_type = (block.mime_type ?? '').split(';')[0];\n\n    if (block.source_type === 'url') {\n      if (mime_type === 'application/pdf' || mime_type === '') {\n        return {\n          type: 'document',\n          source: {\n            type: 'url',\n            url: block.url,\n            media_type: block.mime_type ?? '',\n          },\n          ...('cache_control' in (block.metadata ?? {})\n            ? { cache_control: block.metadata!.cache_control }\n            : {}),\n          ...('citations' in (block.metadata ?? {})\n            ? { citations: block.metadata!.citations }\n            : {}),\n          ...('context' in (block.metadata ?? {})\n            ? { context: block.metadata!.context }\n            : {}),\n          ...('title' in (block.metadata ?? {})\n            ? { title: block.metadata!.title }\n            : {}),\n        } as AnthropicDocumentBlockParam;\n      }\n      throw new Error(\n        `Unsupported file mime type for file url source: ${block.mime_type}`\n      );\n    } else if (block.source_type === 'text') {\n      if (mime_type === 'text/plain' || mime_type === '') {\n        return {\n          type: 'document',\n          source: {\n            type: 'text',\n            data: block.text,\n            media_type: block.mime_type ?? '',\n          },\n          ...('cache_control' in (block.metadata ?? {})\n            ? { cache_control: block.metadata!.cache_control }\n            : {}),\n          ...('citations' in (block.metadata ?? {})\n            ? { citations: block.metadata!.citations }\n            : {}),\n          ...('context' in (block.metadata ?? {})\n            ? { context: block.metadata!.context }\n            : {}),\n          ...('title' in (block.metadata ?? {})\n            ? { title: block.metadata!.title }\n            : {}),\n        } as AnthropicDocumentBlockParam;\n      } else {\n        throw new Error(\n          `Unsupported file mime type for file text source: ${block.mime_type}`\n        );\n      }\n    } else if (block.source_type === 'base64') {\n      if (mime_type === 'application/pdf' || mime_type === '') {\n        return {\n          type: 'document',\n          source: {\n            type: 'base64',\n            data: block.data,\n            media_type: 'application/pdf',\n          },\n          ...('cache_control' in (block.metadata ?? {})\n            ? { cache_control: block.metadata!.cache_control }\n            : {}),\n          ...('citations' in (block.metadata ?? {})\n            ? { citations: block.metadata!.citations }\n            : {}),\n          ...('context' in (block.metadata ?? {})\n            ? { context: block.metadata!.context }\n            : {}),\n          ...('title' in (block.metadata ?? {})\n            ? { title: block.metadata!.title }\n            : {}),\n        } as AnthropicDocumentBlockParam;\n      } else if (\n        ['image/jpeg', 'image/png', 'image/gif', 'image/webp'].includes(\n          mime_type\n        )\n      ) {\n        return {\n          type: 'document',\n          source: {\n            type: 'content',\n            content: [\n              {\n                type: 'image',\n                source: {\n                  type: 'base64',\n                  data: block.data,\n                  media_type: mime_type as\n                    | 'image/jpeg'\n                    | 'image/png'\n                    | 'image/gif'\n                    | 'image/webp',\n                },\n              },\n            ],\n          },\n          ...('cache_control' in (block.metadata ?? {})\n            ? { cache_control: block.metadata!.cache_control }\n            : {}),\n          ...('citations' in (block.metadata ?? {})\n            ? { citations: block.metadata!.citations }\n            : {}),\n          ...('context' in (block.metadata ?? {})\n            ? { context: block.metadata!.context }\n            : {}),\n          ...('title' in (block.metadata ?? {})\n            ? { title: block.metadata!.title }\n            : {}),\n        } as AnthropicDocumentBlockParam;\n      } else {\n        throw new Error(\n          `Unsupported file mime type for file base64 source: ${block.mime_type}`\n        );\n      }\n    } else {\n      throw new Error(`Unsupported file source type: ${block.source_type}`);\n    }\n  },\n};\n\nfunction _formatContent(message: BaseMessage) {\n  const toolTypes = [\n    'tool_use',\n    'tool_result',\n    'input_json_delta',\n    'server_tool_use',\n    'web_search_tool_result',\n    'web_search_result',\n  ];\n  const textTypes = ['text', 'text_delta'];\n  /**\n   * Reasoning blocks emitted by other providers — Bedrock's `reasoning_content`,\n   * Google's `reasoning`, and LibreChat's `think`. Their signatures are\n   * provider-specific and cannot be validated by Anthropic, so on a\n   * cross-provider handoff (e.g. Bedrock → Anthropic) we drop them rather than\n   * forwarding an unusable block. The receiving model produces its own thinking.\n   */\n  const foreignReasoningTypes = ['reasoning_content', 'reasoning', 'think'];\n  const { content } = message;\n\n  if (typeof content === 'string') {\n    return content;\n  } else {\n    const contentParts = content as MessageContentComplex[];\n    const contentBlocks = contentParts.map((contentPart) => {\n      /**\n       * Normalize server_tool_use blocks into a clean shape the API accepts.\n       * These blocks may arrive with the correct type (server_tool_use) or mislabeled\n       * as text/tool_use after chunk concatenation or state serialization.\n       * Regardless of current type, if the id starts with 'srvtoolu_' we rebuild\n       * a clean block with only the properties the API expects.\n       */\n      if (\n        'id' in contentPart &&\n        typeof (contentPart as Record<string, unknown>).id === 'string' &&\n        ((contentPart as Record<string, unknown>).id as string).startsWith(\n          Constants.ANTHROPIC_SERVER_TOOL_PREFIX\n        ) &&\n        'name' in contentPart\n      ) {\n        const rawPart = contentPart as Record<string, unknown>;\n        let input = rawPart.input;\n        if (typeof input === 'string') {\n          try {\n            input = JSON.parse(input);\n          } catch {\n            input = {};\n          }\n        }\n        const corrected: AnthropicServerToolUseBlockParam = {\n          type: 'server_tool_use',\n          id: rawPart.id as string,\n          name: (rawPart.name ?? 'web_search') as 'web_search',\n          input: (input ?? {}) as Record<string, unknown>,\n        };\n        return corrected;\n      }\n\n      /**\n       * Normalize web_search_tool_result blocks into a clean shape.\n       * Same rationale as above — the block may carry extra properties from\n       * streaming (input, index, etc.) that the API rejects. Rebuild cleanly.\n       */\n      if (\n        'tool_use_id' in contentPart &&\n        typeof (contentPart as Record<string, unknown>).tool_use_id ===\n          'string' &&\n        (\n          (contentPart as Record<string, unknown>).tool_use_id as string\n        ).startsWith(Constants.ANTHROPIC_SERVER_TOOL_PREFIX) &&\n        'content' in contentPart\n      ) {\n        const rawPart = contentPart as Record<string, unknown>;\n        const content = rawPart.content;\n        const isValidContent =\n          Array.isArray(content) ||\n          (content != null &&\n            typeof content === 'object' &&\n            'type' in content &&\n            (content as Record<string, unknown>).type ===\n              'web_search_tool_result_error');\n\n        if (isValidContent) {\n          const corrected: AnthropicWebSearchToolResultBlockParam = {\n            type: 'web_search_tool_result',\n            tool_use_id: rawPart.tool_use_id as string,\n            content:\n              content as AnthropicWebSearchToolResultBlockParam['content'],\n          };\n          return corrected;\n        }\n        return null;\n      }\n\n      /**\n       * Skip non-server malformed blocks that have tool fields mixed with text type.\n       */\n      if (\n        'id' in contentPart &&\n        'name' in contentPart &&\n        'input' in contentPart &&\n        contentPart.type === 'text'\n      ) {\n        return null;\n      }\n      if (\n        'tool_use_id' in contentPart &&\n        'content' in contentPart &&\n        contentPart.type === 'text'\n      ) {\n        return null;\n      }\n\n      // Core's v1 streaming aggregation can leave a partial tool-input delta as a\n      // standalone block typed `text` carrying `input` but no `text`. The assembled\n      // input is restored on the tool_use block from `message.tool_calls`, so drop it.\n      if (\n        contentPart.type === 'text' &&\n        'input' in contentPart &&\n        !('text' in contentPart)\n      ) {\n        return null;\n      }\n\n      if (isDataContentBlock(contentPart)) {\n        return convertToProviderContentBlock(\n          contentPart,\n          standardContentBlockConverter\n        );\n      }\n\n      const cacheControl =\n        'cache_control' in contentPart ? contentPart.cache_control : undefined;\n\n      if (contentPart.type === 'image_url') {\n        let source;\n        const imageUrl = (contentPart as ImageUrlContentBlock).image_url;\n        if (typeof imageUrl === 'string') {\n          source = _formatImage(imageUrl);\n        } else {\n          source = _formatImage(imageUrl.url);\n        }\n        return {\n          type: 'image' as const, // Explicitly setting the type as \"image\"\n          source,\n          ...(cacheControl != null ? { cache_control: cacheControl } : {}),\n        };\n      } else if (isAnthropicImageBlockParam(contentPart)) {\n        return contentPart;\n      } else if (contentPart.type === 'document') {\n        // PDF\n        return {\n          ...contentPart,\n          ...(cacheControl != null ? { cache_control: cacheControl } : {}),\n        };\n      } else if (contentPart.type === 'thinking') {\n        const thinkingPart = contentPart as AnthropicThinkingBlockParam;\n        // Google thinking-enabled output reuses `type: 'thinking'` but carries\n        // no Anthropic signature. Anthropic rejects an unsigned thinking block,\n        // so on an assistant turn treat it as foreign reasoning and drop it\n        // rather than forward an unusable block. Signed (Anthropic-native)\n        // thinking is forwarded as before.\n        const signature = (thinkingPart as { signature?: string }).signature;\n        if (isAIMessage(message) && (signature == null || signature === '')) {\n          return null;\n        }\n        const block: AnthropicThinkingBlockParam = {\n          type: 'thinking' as const, // Explicitly setting the type as \"thinking\"\n          thinking: thinkingPart.thinking,\n          signature: thinkingPart.signature,\n          ...(cacheControl != null ? { cache_control: cacheControl } : {}),\n        };\n        return block;\n      } else if (contentPart.type === 'redacted_thinking') {\n        const redactedPart = contentPart as AnthropicRedactedThinkingBlockParam;\n        const block: AnthropicRedactedThinkingBlockParam = {\n          type: 'redacted_thinking' as const, // Explicitly setting the type as \"redacted_thinking\"\n          data: redactedPart.data,\n          ...(cacheControl != null ? { cache_control: cacheControl } : {}),\n        };\n        return block;\n      } else if (contentPart.type === 'search_result') {\n        const searchResultPart = contentPart as AnthropicSearchResultBlockParam;\n        const block: AnthropicSearchResultBlockParam = {\n          type: 'search_result' as const,\n          title: searchResultPart.title,\n          source: searchResultPart.source,\n          ...('cache_control' in contentPart &&\n          contentPart.cache_control != null\n            ? { cache_control: contentPart.cache_control }\n            : {}),\n          ...('citations' in contentPart && contentPart.citations != null\n            ? { citations: contentPart.citations }\n            : {}),\n          content: searchResultPart.content,\n        };\n        return block;\n      } else if (contentPart.type === 'compaction') {\n        const compactionPart = contentPart as AnthropicCompactionBlockParam;\n        const block: AnthropicCompactionBlockParam = {\n          type: 'compaction' as const,\n          content: compactionPart.content,\n          ...(cacheControl != null ? { cache_control: cacheControl } : {}),\n        };\n        return block;\n      } else if (\n        textTypes.some((t) => t === contentPart.type) &&\n        'text' in contentPart\n      ) {\n        // Assuming contentPart is of type MessageContentText here\n        return {\n          type: 'text' as const, // Explicitly setting the type as \"text\"\n          text: contentPart.text,\n          ...(cacheControl != null ? { cache_control: cacheControl } : {}),\n          ...('citations' in contentPart && contentPart.citations != null\n            ? { citations: contentPart.citations }\n            : {}),\n        };\n      } else if (toolTypes.some((t) => t === contentPart.type)) {\n        const contentPartCopy = { ...contentPart };\n        if ('index' in contentPartCopy) {\n          // Anthropic does not support passing the index field here, so we remove it.\n          delete contentPartCopy.index;\n        }\n\n        if (contentPartCopy.type === 'input_json_delta') {\n          // Orphaned partial tool-input delta with no id of its own. The assembled\n          // input is restored on the tool_use block from `message.tool_calls`; drop it.\n          return null;\n        }\n\n        if (\n          contentPartCopy.type === 'tool_use' &&\n          'id' in contentPartCopy &&\n          typeof contentPartCopy.id === 'string' &&\n          contentPartCopy.id.startsWith(Constants.ANTHROPIC_SERVER_TOOL_PREFIX)\n        ) {\n          contentPartCopy.type = 'server_tool_use';\n        }\n\n        // Core's streaming aggregation can leave the inline tool_use input empty\n        // (the assembled arguments live in `message.tool_calls` or, for persisted\n        // messages, in sibling input_json_delta blocks). Restore it when missing.\n        if (\n          contentPartCopy.type === 'tool_use' &&\n          typeof contentPartCopy.id === 'string' &&\n          (contentPartCopy.input === '' || contentPartCopy.input == null)\n        ) {\n          const matchingToolCall = isAIMessage(message)\n            ? message.tool_calls?.find(\n              (toolCall) => toolCall.id === contentPartCopy.id\n            )\n            : undefined;\n          if (matchingToolCall) {\n            contentPartCopy.input = matchingToolCall.args;\n          } else {\n            const blockIndex = (contentPart as Record<string, unknown>).index;\n            const merged = contentParts\n              .filter((part) => {\n                const p = part as Record<string, unknown>;\n                return (\n                  p.type === 'input_json_delta' &&\n                  p.index === blockIndex &&\n                  typeof p.input === 'string'\n                );\n              })\n              .reduce(\n                (acc, part) => acc + (part as Record<string, unknown>).input,\n                ''\n              );\n            if (merged !== '') {\n              contentPartCopy.input = merged;\n            }\n          }\n        }\n\n        if ('input' in contentPartCopy) {\n          // Anthropic tool use inputs should be valid objects, when applicable.\n          if (typeof contentPartCopy.input === 'string') {\n            try {\n              contentPartCopy.input = JSON.parse(contentPartCopy.input);\n            } catch {\n              contentPartCopy.input = {};\n            }\n          }\n        }\n\n        /**\n         * For multi-turn conversations with citations, we must preserve ALL blocks\n         * including server_tool_use, web_search_tool_result, and web_search_result.\n         * Citations reference search results by index, so filtering changes indices and breaks references.\n         *\n         * The ToolNode already handles skipping server tool invocations via the srvtoolu_ prefix check.\n         */\n\n        // TODO: Fix when SDK types are fixed\n        return {\n          ...contentPartCopy,\n          ...(cacheControl != null ? { cache_control: cacheControl } : {}),\n          // eslint-disable-next-line @typescript-eslint/no-explicit-any\n        } as any;\n      } else if (\n        'functionCall' in contentPart &&\n        contentPart.functionCall != null &&\n        typeof contentPart.functionCall === 'object' &&\n        isAIMessage(message)\n      ) {\n        const functionCallPart = contentPart as GoogleFunctionCallBlock;\n        const correspondingToolCall = message.tool_calls?.find(\n          (toolCall) => toolCall.name === functionCallPart.functionCall.name\n        );\n        if (!correspondingToolCall) {\n          throw new Error(\n            `Could not find tool call for function call ${functionCallPart.functionCall.name}`\n          );\n        }\n        // Google GenAI models include a `functionCall` object inside content. We should ignore it as Anthropic will not support it.\n        return {\n          id: correspondingToolCall.id,\n          type: 'tool_use',\n          name: correspondingToolCall.name,\n          input: functionCallPart.functionCall.args,\n        };\n      } else if (\n        isAIMessage(message) &&\n        foreignReasoningTypes.some((t) => t === contentPart.type)\n      ) {\n        // Foreign reasoning on an ASSISTANT turn (Bedrock `reasoning_content`,\n        // Google `reasoning`, LibreChat `think`) carries provider-specific\n        // signatures Anthropic cannot validate; drop it so a cross-provider\n        // handoff doesn't crash. The same types on a user/tool turn are real\n        // input and fall through to the throw below rather than being silently\n        // dropped — as does any other unknown block (user media, Google\n        // code-execution), which must be surfaced, not discarded.\n        return null;\n      } else {\n        console.error(\n          'Unsupported content part:',\n          JSON.stringify(contentPart, null, 2)\n        );\n        throw new Error('Unsupported message content format');\n      }\n    });\n    const filteredContentBlocks = contentBlocks.filter(\n      (block) =>\n        block !== null &&\n        !(\n          block.type === 'text' &&\n          'text' in block &&\n          typeof block.text === 'string' &&\n          block.text.trim() === ''\n        )\n    );\n    return filteredContentBlocks.length > 0\n      ? filteredContentBlocks\n      : [{ type: 'text' as const, text: ANTHROPIC_EMPTY_TEXT_PLACEHOLDER }];\n  }\n}\n\n/**\n * Formats messages as a prompt for the model.\n * Used in LangSmith, export is important here.\n * @param messages The base messages to format as a prompt.\n * @returns The formatted prompt.\n */\nexport function _convertMessagesToAnthropicPayload(\n  messages: BaseMessage[]\n): AnthropicMessageCreateParams {\n  const mergedMessages = _ensureMessageContents(messages);\n  let system;\n  if (mergedMessages.length > 0 && mergedMessages[0]._getType() === 'system') {\n    system = messages[0].content;\n  }\n  const conversationMessages =\n    system !== undefined ? mergedMessages.slice(1) : mergedMessages;\n  const formattedMessages = conversationMessages.map((message) => {\n    let role;\n    if (message._getType() === 'human') {\n      role = 'user' as const;\n    } else if (message._getType() === 'ai') {\n      role = 'assistant' as const;\n    } else if (message._getType() === 'tool') {\n      role = 'user' as const;\n    } else if (message._getType() === 'system') {\n      throw new Error(\n        'System messages are only permitted as the first passed message.'\n      );\n    } else {\n      throw new Error(`Message type \"${message._getType()}\" is not supported.`);\n    }\n    const isAI = isAIMessage(message);\n    const toolCalls = isAI ? (message.tool_calls ?? []) : [];\n    if (isAI && toolCalls.length > 0) {\n      if (typeof message.content === 'string') {\n        const clientToolCalls = toolCalls.filter(\n          (tc) =>\n            !(\n              tc.id?.startsWith(Constants.ANTHROPIC_SERVER_TOOL_PREFIX) ?? false\n            )\n        );\n        if (message.content === '') {\n          return {\n            role,\n            content:\n              clientToolCalls.length > 0\n                ? clientToolCalls.map(_convertLangChainToolCallToAnthropic)\n                : [\n                  {\n                    type: 'text' as const,\n                    text: ANTHROPIC_EMPTY_TEXT_PLACEHOLDER,\n                  },\n                ],\n          };\n        } else {\n          return {\n            role,\n            content: [\n              { type: 'text' as const, text: message.content },\n              ...clientToolCalls.map(_convertLangChainToolCallToAnthropic),\n            ],\n          };\n        }\n      } else {\n        const formattedContent = _formatContent(message);\n        const formattedBlocks = Array.isArray(formattedContent)\n          ? formattedContent\n          : [];\n        // Tool calls already materialized as content blocks by `_formatContent`.\n        // Derived from the FORMATTED output (not the raw content by type) so\n        // that Google `functionCall` parts — which `_formatContent` converts\n        // into `tool_use` — count as represented and are not appended twice.\n        const representedToolIds = new Set(\n          formattedBlocks\n            .filter(\n              (block) =>\n                block != null &&\n                (block.type === 'tool_use' || block.type === 'server_tool_use')\n            )\n            .map((block) => (block as { id?: string }).id)\n        );\n        // Client tool calls present in `tool_calls` but absent from the\n        // formatted content — e.g. a Bedrock extended-thinking turn records the\n        // tool only on `tool_calls` and leaves `content` as just the reasoning\n        // block. Without materializing them, dropping that reasoning block\n        // silently loses the (handoff) tool call instead of forwarding it.\n        const unrepresentedToolCalls = toolCalls.filter(\n          (toolCall) =>\n            !(\n              toolCall.id?.startsWith(Constants.ANTHROPIC_SERVER_TOOL_PREFIX) ??\n              false\n            ) && !representedToolIds.has(toolCall.id)\n        );\n        if (unrepresentedToolCalls.length === 0) {\n          return { role, content: formattedContent };\n        }\n        const existingBlocks = formattedBlocks.filter(\n          (block) =>\n            !(\n              block != null &&\n              block.type === 'text' &&\n              'text' in block &&\n              block.text === ANTHROPIC_EMPTY_TEXT_PLACEHOLDER\n            )\n        );\n        return {\n          role,\n          content: [\n            ...existingBlocks,\n            ...unrepresentedToolCalls.map(_convertLangChainToolCallToAnthropic),\n          ],\n        };\n      }\n    } else {\n      return {\n        role,\n        content: _formatContent(message),\n      };\n    }\n  });\n  return {\n    messages: mergeMessages(formattedMessages),\n    system,\n  } as AnthropicMessageCreateParams;\n}\n\nexport function modelDisallowsAssistantPrefill(model?: string): boolean {\n  const modelId = model ?? '';\n  if (CLAUDE_4_RELEASE_DATE_MODEL_PATTERN.test(modelId)) {\n    return false;\n  }\n\n  const match = CLAUDE_4_MINOR_MODEL_PATTERN.exec(modelId);\n  if (!match) {\n    return false;\n  }\n  return Number(match[1]) >= 6;\n}\n\nfunction messagesHaveCacheControl(\n  messages: AnthropicMessageCreateParams['messages']\n): boolean {\n  return messages.some(\n    (message) =>\n      Array.isArray(message.content) &&\n      message.content.some((block) => 'cache_control' in block)\n  );\n}\n\n/** Anthropic rejects cache_control on these reasoning blocks. */\nconst NON_CACHEABLE_PAYLOAD_BLOCK_TYPES = new Set([\n  'thinking',\n  'redacted_thinking',\n]);\n\n/**\n * Place one ephemeral `cache_control` on the last cacheable block of the final\n * message of an already-converted Anthropic payload. Used to re-anchor the tail\n * breakpoint after a trailing assistant prefill is stripped. Operates on the\n * post-conversion payload, where blocks the converter drops (foreign reasoning,\n * input_json_delta) are already gone — only native thinking blocks must be\n * skipped. Returns a new array only when it actually places a marker.\n */\nfunction reanchorTailCacheControl(\n  messages: AnthropicMessageCreateParams['messages']\n): AnthropicMessageCreateParams['messages'] {\n  if (messages.length === 0) {\n    return messages;\n  }\n  const lastIndex = messages.length - 1;\n  const tail = messages[lastIndex];\n  const content = tail.content;\n\n  if (typeof content === 'string') {\n    if (content.trim() === '') {\n      return messages;\n    }\n    const next = [...messages];\n    next[lastIndex] = {\n      ...tail,\n      content: [\n        { type: 'text', text: content, cache_control: { type: 'ephemeral' } },\n      ],\n    } as (typeof messages)[number];\n    return next;\n  }\n\n  if (!Array.isArray(content)) {\n    return messages;\n  }\n\n  let anchor = -1;\n  for (let i = 0; i < content.length; i++) {\n    const type = (content[i] as { type?: string }).type;\n    if (type == null || NON_CACHEABLE_PAYLOAD_BLOCK_TYPES.has(type)) {\n      continue;\n    }\n    if (\n      type === 'text' &&\n      ((content[i] as { text?: string }).text ?? '').trim() === ''\n    ) {\n      continue;\n    }\n    anchor = i;\n  }\n  if (anchor < 0) {\n    return messages;\n  }\n\n  const next = [...messages];\n  next[lastIndex] = {\n    ...tail,\n    content: content.map((block, i) =>\n      i === anchor ? { ...block, cache_control: { type: 'ephemeral' } } : block\n    ),\n  } as (typeof messages)[number];\n  return next;\n}\n\nexport function stripUnsupportedAssistantPrefill<\n  T extends Pick<AnthropicMessageCreateParams, 'messages'> & { model?: string },\n>(request: T): T {\n  if (!modelDisallowsAssistantPrefill(request.model)) {\n    return request;\n  }\n\n  const messages = request.messages;\n  if (\n    messages.length <= 1 ||\n    messages[messages.length - 1]?.role !== 'assistant'\n  ) {\n    return request;\n  }\n\n  const nextMessages = [...messages];\n  while (\n    nextMessages.length > 1 &&\n    nextMessages[nextMessages.length - 1]?.role === 'assistant'\n  ) {\n    nextMessages.pop();\n  }\n\n  /**\n   * If a single tail prompt-cache breakpoint rode the stripped assistant\n   * prefill, the survivors may now carry no `cache_control` at all, dropping\n   * message caching for this request. Re-anchor the breakpoint on the new tail\n   * (only when one was actually lost, so caching-off requests stay untouched).\n   */\n  const reanchored =\n    messagesHaveCacheControl(messages) &&\n    !messagesHaveCacheControl(nextMessages)\n      ? reanchorTailCacheControl(nextMessages)\n      : nextMessages;\n\n  return {\n    ...request,\n    messages: reanchored,\n  };\n}\n\nfunction mergeMessages(messages: AnthropicMessageCreateParams['messages']) {\n  if (messages.length <= 1) {\n    return messages;\n  }\n\n  const result: AnthropicMessageCreateParams['messages'] = [];\n  let currentMessage = messages[0];\n\n  type ContentBlocks = Exclude<\n    AnthropicMessageCreateParams['messages'][number]['content'],\n    string\n  >;\n  const normalizeContent = (\n    content: AnthropicMessageCreateParams['messages'][number]['content']\n  ): ContentBlocks => {\n    if (typeof content === 'string') {\n      return [{ type: 'text', text: content }];\n    }\n    return content;\n  };\n\n  const isToolResultMessage = (msg: (typeof messages)[0]) => {\n    if (msg.role !== 'user') return false;\n\n    if (typeof msg.content === 'string') {\n      return false;\n    }\n\n    return (\n      Array.isArray(msg.content) &&\n      msg.content.every((item) => item.type === 'tool_result')\n    );\n  };\n\n  for (let i = 1; i < messages.length; i += 1) {\n    const nextMessage = messages[i];\n\n    if (\n      isToolResultMessage(currentMessage) &&\n      isToolResultMessage(nextMessage)\n    ) {\n      // Merge the messages by combining their content arrays\n      currentMessage = {\n        ...currentMessage,\n        content: [\n          ...normalizeContent(currentMessage.content),\n          ...normalizeContent(nextMessage.content),\n        ],\n      };\n    } else {\n      result.push(currentMessage);\n      currentMessage = nextMessage;\n    }\n  }\n\n  result.push(currentMessage);\n  return result;\n}\n"],"mappings":";;;;;;;;;AAkDA,MAAM,mCAAmC;AACzC,MAAM,sCACJ;AACF,MAAM,+BACJ;AAEF,SAAS,aAAa,UAAkB;CACtC,MAAM,SAAS,mBAAmB,EAAE,SAAS,SAAS,CAAC;CACvD,IAAI,QACF,OAAO;EACL,MAAM;EACN,YAAY,OAAO;EACnB,MAAM,OAAO;CACf;CAEF,IAAI;CAEJ,IAAI;EACF,YAAY,IAAI,IAAI,QAAQ;CAC9B,QAAQ;EACN,MAAM,IAAI,MACR;GACE,wBAAwB,KAAK,UAC3B,QACF,EAAE;GACF;GACA;EACF,CAAC,CAAC,KAAK,MAAM,CACf;CACF;CAEA,IAAI,UAAU,aAAa,WAAW,UAAU,aAAa,UAC3D,OAAO;EACL,MAAM;EACN,KAAK;CACP;CAGF,MAAM,IAAI,MACR;EACE,+BAA+B,KAAK,UAClC,UAAU,QACZ,EAAE;EACF;EACA;CACF,CAAC,CAAC,KAAK,MAAM,CACf;AACF;AAEA,MAAM,gCAAgC;AACtC,MAAM,mCAAmC;AACzC,MAAM,oCAAoC;AAmB1C,SAAgB,6BACd,IACoB;CACpB,IAAI,MAAM,MACR,OAAO;CAET,IACE,GAAG,UAAU,oCACb,8BAA8B,KAAK,EAAE,GAErC,OAAO;CAET,MAAM,YAAY,GAAG,QAAQ,mBAAmB,GAAG;CACnD,MAAM,OAAO,WAAW,QAAQ,CAAC,CAC9B,OAAO,EAAE,CAAC,CACV,OAAO,KAAK,CAAC,CACb,MAAM,GAAG,iCAAiC;CAC7C,MAAM,kBACJ,mCAAmC,oCAAoC;CACzE,OAAO,GAAG,UAAU,MAAM,GAAG,eAAe,EAAE,GAAG;AACnD;;;;;;;;;;AAWA,SAAS,4BACP,SACsE;CACtE,IAAI,CAAC,MAAM,QAAQ,OAAO,GACxB,OAAO;EAAE;EAAS,cAAc,KAAA;CAAU;CAE5C,IAAI;CAWJ,OAAO;EAAE,SAVQ,QAAQ,KAAK,UAAU;GACtC,IAAI,mBAAmB,OAAO;IAC5B,iBAAkB,MAAkC;IACpD,MAAM,QAAQ,EAAE,GAAI,MAAkC;IACtD,OAAO,MAAM;IACb,OAAO;GACT;GACA,OAAO;EACT,CAEyB;EAAG;CAAa;AAC3C;AAEA,SAAS,uBACP,UAC8C;CAE9C,MAAM,cAA6B,CAAC;CACpC,KAAK,MAAM,WAAW,UACpB,IAAI,QAAQ,SAAS,MAAM,QACzB,IAAI,OAAO,QAAQ,YAAY,UAAU;EACvC,MAAM,kBAAkB,YAAY,YAAY,SAAS;EACzD,IACE,gBAAgB,SAAS,MAAM,WAC/B,MAAM,QAAQ,gBAAgB,OAAO,KACrC,UAAU,gBAAgB,QAAQ,MAClC,gBAAgB,QAAQ,EAAE,CAAC,SAAS,eAGpC,gBAAiB,QAAoC,KAAK;GACxD,MAAM;GACN,SAAS,QAAQ;GACjB,aAAa,6BACV,QAAwB,YAC3B;EACF,CAAC;OAGD,YAAY,KACV,IAAI,aAAa,EACf,SAAS,CACP;GACE,MAAM;GACN,SAAS,QAAQ;GACjB,aAAa,6BACV,QAAwB,YAC3B;EACF,CACF,EACF,CAAC,CACH;CAEJ,OAAO;EAML,MAAM,EAAE,SAAS,gBAAgB,iBAJ/B,QACA,WAIsB,OAClB,4BAA4B,eAAe,OAAO,CAAC,IACnD;GAAE,SAAS,KAAA;GAAW,cAAc,KAAA;EAAU;EACpD,YAAY,KACV,IAAI,aAAa,EACf,SAAS,CACP;GACE,MAAM;GACN,GAAI,kBAAkB,OAAO,EAAE,SAAS,eAAe,IAAI,CAAC;GAC5D,GAAI,gBAAgB,OAChB,EAAE,eAAe,aAAsC,IACvD,CAAC;GACL,aAAa,6BACV,QAAwB,YAC3B;EACF,CACF,EACF,CAAC,CACH;CACF;MAEA,YAAY,KAAK,OAAO;CAG5B,OAAO;AACT;AAEA,SAAgB,qCACd,UACuB;CACvB,IAAI,SAAS,OAAO,KAAA,GAClB,MAAM,IAAI,MAAM,sDAAoD;CAEtE,MAAM,eAAe,SAAS,GAAG,WAAA,WAEjC;CACA,OAAO;EACL,MAAM,eAAe,oBAAoB;EACzC,IAAI,eAAe,SAAS,KAAK,6BAA6B,SAAS,EAAE;EACzE,MAAM,SAAS;EACf,OAAO,SAAS;CAClB;AACF;AAEA,MAAM,gCAID;CACH,cAAc;CAEd,sBAAsB,OAAmD;EACvE,OAAO;GACL,MAAM;GACN,MAAM,MAAM;GACZ,GAAI,gBAAgB,MAAM,YAAY,CAAC,KACnC,EAAE,WAAW,MAAM,SAAU,UAAU,IACvC,CAAC;GACL,GAAI,oBAAoB,MAAM,YAAY,CAAC,KACvC,EAAE,eAAe,MAAM,SAAU,cAAc,IAC/C,CAAC;EACP;CACF;CAEA,uBAAuB,OAAqD;EAC1E,IAAI,MAAM,gBAAgB,OAAO;GAC/B,MAAM,OAAO,mBAAmB;IAC9B,SAAS,MAAM;IACf,cAAc;GAChB,CAAC;GACD,IAAI,MACF,OAAO;IACL,MAAM;IACN,QAAQ;KACN,MAAM;KACN,MAAM,KAAK;KACX,YAAY,KAAK;IACnB;IACA,GAAI,oBAAoB,MAAM,YAAY,CAAC,KACvC,EAAE,eAAe,MAAM,SAAU,cAAc,IAC/C,CAAC;GACP;QAEA,OAAO;IACL,MAAM;IACN,QAAQ;KACN,MAAM;KACN,KAAK,MAAM;KACX,YAAY,MAAM,aAAa;IACjC;IACA,GAAI,oBAAoB,MAAM,YAAY,CAAC,KACvC,EAAE,eAAe,MAAM,SAAU,cAAc,IAC/C,CAAC;GACP;EAEJ,OACE,IAAI,MAAM,gBAAgB,UACxB,OAAO;GACL,MAAM;GACN,QAAQ;IACN,MAAM;IACN,MAAM,MAAM;IACZ,YAAY,MAAM,aAAa;GACjC;GACA,GAAI,oBAAoB,MAAM,YAAY,CAAC,KACvC,EAAE,eAAe,MAAM,SAAU,cAAc,IAC/C,CAAC;EACP;OAEA,MAAM,IAAI,MAAM,kCAAkC,MAAM,aAAa;CAG3E;CAEA,sBAAsB,OAAuD;EAC3E,MAAM,aAAa,MAAM,aAAa,GAAA,CAAI,MAAM,GAAG,CAAC,CAAC;EAErD,IAAI,MAAM,gBAAgB,OAAO;GAC/B,IAAI,cAAc,qBAAqB,cAAc,IACnD,OAAO;IACL,MAAM;IACN,QAAQ;KACN,MAAM;KACN,KAAK,MAAM;KACX,YAAY,MAAM,aAAa;IACjC;IACA,GAAI,oBAAoB,MAAM,YAAY,CAAC,KACvC,EAAE,eAAe,MAAM,SAAU,cAAc,IAC/C,CAAC;IACL,GAAI,gBAAgB,MAAM,YAAY,CAAC,KACnC,EAAE,WAAW,MAAM,SAAU,UAAU,IACvC,CAAC;IACL,GAAI,cAAc,MAAM,YAAY,CAAC,KACjC,EAAE,SAAS,MAAM,SAAU,QAAQ,IACnC,CAAC;IACL,GAAI,YAAY,MAAM,YAAY,CAAC,KAC/B,EAAE,OAAO,MAAM,SAAU,MAAM,IAC/B,CAAC;GACP;GAEF,MAAM,IAAI,MACR,mDAAmD,MAAM,WAC3D;EACF,OAAO,IAAI,MAAM,gBAAgB,QAC/B,IAAI,cAAc,gBAAgB,cAAc,IAC9C,OAAO;GACL,MAAM;GACN,QAAQ;IACN,MAAM;IACN,MAAM,MAAM;IACZ,YAAY,MAAM,aAAa;GACjC;GACA,GAAI,oBAAoB,MAAM,YAAY,CAAC,KACvC,EAAE,eAAe,MAAM,SAAU,cAAc,IAC/C,CAAC;GACL,GAAI,gBAAgB,MAAM,YAAY,CAAC,KACnC,EAAE,WAAW,MAAM,SAAU,UAAU,IACvC,CAAC;GACL,GAAI,cAAc,MAAM,YAAY,CAAC,KACjC,EAAE,SAAS,MAAM,SAAU,QAAQ,IACnC,CAAC;GACL,GAAI,YAAY,MAAM,YAAY,CAAC,KAC/B,EAAE,OAAO,MAAM,SAAU,MAAM,IAC/B,CAAC;EACP;OAEA,MAAM,IAAI,MACR,oDAAoD,MAAM,WAC5D;OAEG,IAAI,MAAM,gBAAgB,UAC/B,IAAI,cAAc,qBAAqB,cAAc,IACnD,OAAO;GACL,MAAM;GACN,QAAQ;IACN,MAAM;IACN,MAAM,MAAM;IACZ,YAAY;GACd;GACA,GAAI,oBAAoB,MAAM,YAAY,CAAC,KACvC,EAAE,eAAe,MAAM,SAAU,cAAc,IAC/C,CAAC;GACL,GAAI,gBAAgB,MAAM,YAAY,CAAC,KACnC,EAAE,WAAW,MAAM,SAAU,UAAU,IACvC,CAAC;GACL,GAAI,cAAc,MAAM,YAAY,CAAC,KACjC,EAAE,SAAS,MAAM,SAAU,QAAQ,IACnC,CAAC;GACL,GAAI,YAAY,MAAM,YAAY,CAAC,KAC/B,EAAE,OAAO,MAAM,SAAU,MAAM,IAC/B,CAAC;EACP;OACK,IACL;GAAC;GAAc;GAAa;GAAa;EAAY,CAAC,CAAC,SACrD,SACF,GAEA,OAAO;GACL,MAAM;GACN,QAAQ;IACN,MAAM;IACN,SAAS,CACP;KACE,MAAM;KACN,QAAQ;MACN,MAAM;MACN,MAAM,MAAM;MACZ,YAAY;KAKd;IACF,CACF;GACF;GACA,GAAI,oBAAoB,MAAM,YAAY,CAAC,KACvC,EAAE,eAAe,MAAM,SAAU,cAAc,IAC/C,CAAC;GACL,GAAI,gBAAgB,MAAM,YAAY,CAAC,KACnC,EAAE,WAAW,MAAM,SAAU,UAAU,IACvC,CAAC;GACL,GAAI,cAAc,MAAM,YAAY,CAAC,KACjC,EAAE,SAAS,MAAM,SAAU,QAAQ,IACnC,CAAC;GACL,GAAI,YAAY,MAAM,YAAY,CAAC,KAC/B,EAAE,OAAO,MAAM,SAAU,MAAM,IAC/B,CAAC;EACP;OAEA,MAAM,IAAI,MACR,sDAAsD,MAAM,WAC9D;OAGF,MAAM,IAAI,MAAM,iCAAiC,MAAM,aAAa;CAExE;AACF;AAEA,SAAS,eAAe,SAAsB;CAC5C,MAAM,YAAY;EAChB;EACA;EACA;EACA;EACA;EACA;CACF;CACA,MAAM,YAAY,CAAC,QAAQ,YAAY;;;;;;;;CAQvC,MAAM,wBAAwB;EAAC;EAAqB;EAAa;CAAO;CACxE,MAAM,EAAE,YAAY;CAEpB,IAAI,OAAO,YAAY,UACrB,OAAO;MACF;EACL,MAAM,eAAe;EAgUrB,MAAM,wBA/TgB,aAAa,KAAK,gBAAgB;;;;;;;;GAQtD,IACE,QAAQ,eACR,OAAQ,YAAwC,OAAO,YACrD,YAAwC,GAAc,WAAA,WAExD,KACA,UAAU,aACV;IACA,MAAM,UAAU;IAChB,IAAI,QAAQ,QAAQ;IACpB,IAAI,OAAO,UAAU,UACnB,IAAI;KACF,QAAQ,KAAK,MAAM,KAAK;IAC1B,QAAQ;KACN,QAAQ,CAAC;IACX;IAQF,OAAO;KALL,MAAM;KACN,IAAI,QAAQ;KACZ,MAAO,QAAQ,QAAQ;KACvB,OAAQ,SAAS,CAAC;IAEL;GACjB;;;;;;GAOA,IACE,iBAAiB,eACjB,OAAQ,YAAwC,gBAC9C,YAEC,YAAwC,YACzC,WAAA,WAAiD,KACnD,aAAa,aACb;IACA,MAAM,UAAU;IAChB,MAAM,UAAU,QAAQ;IASxB,IAPE,MAAM,QAAQ,OAAO,KACpB,WAAW,QACV,OAAO,YAAY,YACnB,UAAU,WACT,QAAoC,SACnC,gCASJ,OAAO;KALL,MAAM;KACN,aAAa,QAAQ;KAEnB;IAEW;IAEjB,OAAO;GACT;;;;GAKA,IACE,QAAQ,eACR,UAAU,eACV,WAAW,eACX,YAAY,SAAS,QAErB,OAAO;GAET,IACE,iBAAiB,eACjB,aAAa,eACb,YAAY,SAAS,QAErB,OAAO;GAMT,IACE,YAAY,SAAS,UACrB,WAAW,eACX,EAAE,UAAU,cAEZ,OAAO;GAGT,IAAI,mBAAmB,WAAW,GAChC,OAAO,8BACL,aACA,6BACF;GAGF,MAAM,eACJ,mBAAmB,cAAc,YAAY,gBAAgB,KAAA;GAE/D,IAAI,YAAY,SAAS,aAAa;IACpC,IAAI;IACJ,MAAM,WAAY,YAAqC;IACvD,IAAI,OAAO,aAAa,UACtB,SAAS,aAAa,QAAQ;SAE9B,SAAS,aAAa,SAAS,GAAG;IAEpC,OAAO;KACL,MAAM;KACN;KACA,GAAI,gBAAgB,OAAO,EAAE,eAAe,aAAa,IAAI,CAAC;IAChE;GACF,OAAO,IAAI,2BAA2B,WAAW,GAC/C,OAAO;QACF,IAAI,YAAY,SAAS,YAE9B,OAAO;IACL,GAAG;IACH,GAAI,gBAAgB,OAAO,EAAE,eAAe,aAAa,IAAI,CAAC;GAChE;QACK,IAAI,YAAY,SAAS,YAAY;IAC1C,MAAM,eAAe;IAMrB,MAAM,YAAa,aAAwC;IAC3D,IAAI,YAAY,OAAO,MAAM,aAAa,QAAQ,cAAc,KAC9D,OAAO;IAQT,OAAO;KALL,MAAM;KACN,UAAU,aAAa;KACvB,WAAW,aAAa;KACxB,GAAI,gBAAgB,OAAO,EAAE,eAAe,aAAa,IAAI,CAAC;IAErD;GACb,OAAO,IAAI,YAAY,SAAS,qBAO9B,OAAO;IAJL,MAAM;IACN,MAAMA,YAAa;IACnB,GAAI,gBAAgB,OAAO,EAAE,eAAe,aAAa,IAAI,CAAC;GAErD;QACN,IAAI,YAAY,SAAS,iBAAiB;IAC/C,MAAM,mBAAmB;IAczB,OAAO;KAZL,MAAM;KACN,OAAO,iBAAiB;KACxB,QAAQ,iBAAiB;KACzB,GAAI,mBAAmB,eACvB,YAAY,iBAAiB,OACzB,EAAE,eAAe,YAAY,cAAc,IAC3C,CAAC;KACL,GAAI,eAAe,eAAe,YAAY,aAAa,OACvD,EAAE,WAAW,YAAY,UAAU,IACnC,CAAC;KACL,SAAS,iBAAiB;IAEjB;GACb,OAAO,IAAI,YAAY,SAAS,cAO9B,OAAO;IAJL,MAAM;IACN,SAASC,YAAe;IACxB,GAAI,gBAAgB,OAAO,EAAE,eAAe,aAAa,IAAI,CAAC;GAErD;QACN,IACL,UAAU,MAAM,MAAM,MAAM,YAAY,IAAI,KAC5C,UAAU,aAGV,OAAO;IACL,MAAM;IACN,MAAM,YAAY;IAClB,GAAI,gBAAgB,OAAO,EAAE,eAAe,aAAa,IAAI,CAAC;IAC9D,GAAI,eAAe,eAAe,YAAY,aAAa,OACvD,EAAE,WAAW,YAAY,UAAU,IACnC,CAAC;GACP;QACK,IAAI,UAAU,MAAM,MAAM,MAAM,YAAY,IAAI,GAAG;IACxD,MAAM,kBAAkB,EAAE,GAAG,YAAY;IACzC,IAAI,WAAW,iBAEb,OAAO,gBAAgB;IAGzB,IAAI,gBAAgB,SAAS,oBAG3B,OAAO;IAGT,IACE,gBAAgB,SAAS,cACzB,QAAQ,mBACR,OAAO,gBAAgB,OAAO,YAC9B,gBAAgB,GAAG,WAAA,WAAiD,GAEpE,gBAAgB,OAAO;IAMzB,IACE,gBAAgB,SAAS,cACzB,OAAO,gBAAgB,OAAO,aAC7B,gBAAgB,UAAU,MAAM,gBAAgB,SAAS,OAC1D;KACA,MAAM,mBAAmB,YAAY,OAAO,IACxC,QAAQ,YAAY,MACnB,aAAa,SAAS,OAAO,gBAAgB,EAChD,IACE,KAAA;KACJ,IAAI,kBACF,gBAAgB,QAAQ,iBAAiB;UACpC;MACL,MAAM,aAAc,YAAwC;MAC5D,MAAM,SAAS,aACZ,QAAQ,SAAS;OAChB,MAAM,IAAI;OACV,OACE,EAAE,SAAS,sBACX,EAAE,UAAU,cACZ,OAAO,EAAE,UAAU;MAEvB,CAAC,CAAC,CACD,QACE,KAAK,SAAS,MAAO,KAAiC,OACvD,EACF;MACF,IAAI,WAAW,IACb,gBAAgB,QAAQ;KAE5B;IACF;IAEA,IAAI,WAAW;SAET,OAAO,gBAAgB,UAAU,UACnC,IAAI;MACF,gBAAgB,QAAQ,KAAK,MAAM,gBAAgB,KAAK;KAC1D,QAAQ;MACN,gBAAgB,QAAQ,CAAC;KAC3B;;;;;;;;;IAaJ,OAAO;KACL,GAAG;KACH,GAAI,gBAAgB,OAAO,EAAE,eAAe,aAAa,IAAI,CAAC;IAEhE;GACF,OAAO,IACL,kBAAkB,eAClB,YAAY,gBAAgB,QAC5B,OAAO,YAAY,iBAAiB,YACpC,YAAY,OAAO,GACnB;IACA,MAAM,mBAAmB;IACzB,MAAM,wBAAwB,QAAQ,YAAY,MAC/C,aAAa,SAAS,SAAS,iBAAiB,aAAa,IAChE;IACA,IAAI,CAAC,uBACH,MAAM,IAAI,MACR,8CAA8C,iBAAiB,aAAa,MAC9E;IAGF,OAAO;KACL,IAAI,sBAAsB;KAC1B,MAAM;KACN,MAAM,sBAAsB;KAC5B,OAAO,iBAAiB,aAAa;IACvC;GACF,OAAO,IACL,YAAY,OAAO,KACnB,sBAAsB,MAAM,MAAM,MAAM,YAAY,IAAI,GASxD,OAAO;QACF;IACL,QAAQ,MACN,6BACA,KAAK,UAAU,aAAa,MAAM,CAAC,CACrC;IACA,MAAM,IAAI,MAAM,oCAAoC;GACtD;EACF,CAC0C,CAAC,CAAC,QACzC,UACC,UAAU,QACV,EACE,MAAM,SAAS,UACf,UAAU,SACV,OAAO,MAAM,SAAS,YACtB,MAAM,KAAK,KAAK,MAAM,GAE5B;EACA,OAAO,sBAAsB,SAAS,IAClC,wBACA,CAAC;GAAE,MAAM;GAAiB,MAAM;EAAiC,CAAC;CACxE;AACF;;;;;;;AAQA,SAAgB,mCACd,UAC8B;CAC9B,MAAM,iBAAiB,uBAAuB,QAAQ;CACtD,IAAI;CACJ,IAAI,eAAe,SAAS,KAAK,eAAe,EAAE,CAAC,SAAS,MAAM,UAChE,SAAS,SAAS,EAAE,CAAC;CA4GvB,OAAO;EACL,UAAU,eA1GV,WAAW,KAAA,IAAY,eAAe,MAAM,CAAC,IAAI,eAAA,CACJ,KAAK,YAAY;GAC9D,IAAI;GACJ,IAAI,QAAQ,SAAS,MAAM,SACzB,OAAO;QACF,IAAI,QAAQ,SAAS,MAAM,MAChC,OAAO;QACF,IAAI,QAAQ,SAAS,MAAM,QAChC,OAAO;QACF,IAAI,QAAQ,SAAS,MAAM,UAChC,MAAM,IAAI,MACR,iEACF;QAEA,MAAM,IAAI,MAAM,iBAAiB,QAAQ,SAAS,EAAE,oBAAoB;GAE1E,MAAM,OAAO,YAAY,OAAO;GAChC,MAAM,YAAY,OAAQ,QAAQ,cAAc,CAAC,IAAK,CAAC;GACvD,IAAI,QAAQ,UAAU,SAAS,GAC7B,IAAI,OAAO,QAAQ,YAAY,UAAU;IACvC,MAAM,kBAAkB,UAAU,QAC/B,OACC,EACE,GAAG,IAAI,WAAA,WAAiD,KAAK,MAEnE;IACA,IAAI,QAAQ,YAAY,IACtB,OAAO;KACL;KACA,SACE,gBAAgB,SAAS,IACrB,gBAAgB,IAAI,oCAAoC,IACxD,CACA;MACE,MAAM;MACN,MAAM;KACR,CACF;IACN;SAEA,OAAO;KACL;KACA,SAAS,CACP;MAAE,MAAM;MAAiB,MAAM,QAAQ;KAAQ,GAC/C,GAAG,gBAAgB,IAAI,oCAAoC,CAC7D;IACF;GAEJ,OAAO;IACL,MAAM,mBAAmB,eAAe,OAAO;IAC/C,MAAM,kBAAkB,MAAM,QAAQ,gBAAgB,IAClD,mBACA,CAAC;IAKL,MAAM,qBAAqB,IAAI,IAC7B,gBACG,QACE,UACC,SAAS,SACR,MAAM,SAAS,cAAc,MAAM,SAAS,kBACjD,CAAC,CACA,KAAK,UAAW,MAA0B,EAAE,CACjD;IAMA,MAAM,yBAAyB,UAAU,QACtC,aACC,EACE,SAAS,IAAI,WAAA,WAAiD,KAC9D,UACG,CAAC,mBAAmB,IAAI,SAAS,EAAE,CAC5C;IACA,IAAI,uBAAuB,WAAW,GACpC,OAAO;KAAE;KAAM,SAAS;IAAiB;IAE3C,MAAM,iBAAiB,gBAAgB,QACpC,UACC,EACE,SAAS,QACT,MAAM,SAAS,UACf,UAAU,SACV,MAAM,SAAS,iCAErB;IACA,OAAO;KACL;KACA,SAAS,CACP,GAAG,gBACH,GAAG,uBAAuB,IAAI,oCAAoC,CACpE;IACF;GACF;QAEA,OAAO;IACL;IACA,SAAS,eAAe,OAAO;GACjC;EAEJ,CAE0C,CAAC;EACzC;CACF;AACF;AAEA,SAAgB,+BAA+B,OAAyB;CACtE,MAAM,UAAU,SAAS;CACzB,IAAI,oCAAoC,KAAK,OAAO,GAClD,OAAO;CAGT,MAAM,QAAQ,6BAA6B,KAAK,OAAO;CACvD,IAAI,CAAC,OACH,OAAO;CAET,OAAO,OAAO,MAAM,EAAE,KAAK;AAC7B;AAEA,SAAS,yBACP,UACS;CACT,OAAO,SAAS,MACb,YACC,MAAM,QAAQ,QAAQ,OAAO,KAC7B,QAAQ,QAAQ,MAAM,UAAU,mBAAmB,KAAK,CAC5D;AACF;;AAGA,MAAM,oCAAoC,IAAI,IAAI,CAChD,YACA,mBACF,CAAC;;;;;;;;;AAUD,SAAS,yBACP,UAC0C;CAC1C,IAAI,SAAS,WAAW,GACtB,OAAO;CAET,MAAM,YAAY,SAAS,SAAS;CACpC,MAAM,OAAO,SAAS;CACtB,MAAM,UAAU,KAAK;CAErB,IAAI,OAAO,YAAY,UAAU;EAC/B,IAAI,QAAQ,KAAK,MAAM,IACrB,OAAO;EAET,MAAM,OAAO,CAAC,GAAG,QAAQ;EACzB,KAAK,aAAa;GAChB,GAAG;GACH,SAAS,CACP;IAAE,MAAM;IAAQ,MAAM;IAAS,eAAe,EAAE,MAAM,YAAY;GAAE,CACtE;EACF;EACA,OAAO;CACT;CAEA,IAAI,CAAC,MAAM,QAAQ,OAAO,GACxB,OAAO;CAGT,IAAI,SAAS;CACb,KAAK,IAAI,IAAI,GAAG,IAAI,QAAQ,QAAQ,KAAK;EACvC,MAAM,OAAQ,QAAQ,EAAE,CAAuB;EAC/C,IAAI,QAAQ,QAAQ,kCAAkC,IAAI,IAAI,GAC5D;EAEF,IACE,SAAS,WACP,QAAQ,EAAE,CAAuB,QAAQ,GAAA,CAAI,KAAK,MAAM,IAE1D;EAEF,SAAS;CACX;CACA,IAAI,SAAS,GACX,OAAO;CAGT,MAAM,OAAO,CAAC,GAAG,QAAQ;CACzB,KAAK,aAAa;EAChB,GAAG;EACH,SAAS,QAAQ,KAAK,OAAO,MAC3B,MAAM,SAAS;GAAE,GAAG;GAAO,eAAe,EAAE,MAAM,YAAY;EAAE,IAAI,KACtE;CACF;CACA,OAAO;AACT;AAEA,SAAgB,iCAEd,SAAe;CACf,IAAI,CAAC,+BAA+B,QAAQ,KAAK,GAC/C,OAAO;CAGT,MAAM,WAAW,QAAQ;CACzB,IACE,SAAS,UAAU,KACnB,SAAS,SAAS,SAAS,EAAE,EAAE,SAAS,aAExC,OAAO;CAGT,MAAM,eAAe,CAAC,GAAG,QAAQ;CACjC,OACE,aAAa,SAAS,KACtB,aAAa,aAAa,SAAS,EAAE,EAAE,SAAS,aAEhD,aAAa,IAAI;;;;;;;CASnB,MAAM,aACJ,yBAAyB,QAAQ,KACjC,CAAC,yBAAyB,YAAY,IAClC,yBAAyB,YAAY,IACrC;CAEN,OAAO;EACL,GAAG;EACH,UAAU;CACZ;AACF;AAEA,SAAS,cAAc,UAAoD;CACzE,IAAI,SAAS,UAAU,GACrB,OAAO;CAGT,MAAM,SAAmD,CAAC;CAC1D,IAAI,iBAAiB,SAAS;CAM9B,MAAM,oBACJ,YACkB;EAClB,IAAI,OAAO,YAAY,UACrB,OAAO,CAAC;GAAE,MAAM;GAAQ,MAAM;EAAQ,CAAC;EAEzC,OAAO;CACT;CAEA,MAAM,uBAAuB,QAA8B;EACzD,IAAI,IAAI,SAAS,QAAQ,OAAO;EAEhC,IAAI,OAAO,IAAI,YAAY,UACzB,OAAO;EAGT,OACE,MAAM,QAAQ,IAAI,OAAO,KACzB,IAAI,QAAQ,OAAO,SAAS,KAAK,SAAS,aAAa;CAE3D;CAEA,KAAK,IAAI,IAAI,GAAG,IAAI,SAAS,QAAQ,KAAK,GAAG;EAC3C,MAAM,cAAc,SAAS;EAE7B,IACE,oBAAoB,cAAc,KAClC,oBAAoB,WAAW,GAG/B,iBAAiB;GACf,GAAG;GACH,SAAS,CACP,GAAG,iBAAiB,eAAe,OAAO,GAC1C,GAAG,iBAAiB,YAAY,OAAO,CACzC;EACF;OACK;GACL,OAAO,KAAK,cAAc;GAC1B,iBAAiB;EACnB;CACF;CAEA,OAAO,KAAK,cAAc;CAC1B,OAAO;AACT"}
+{"version":3,"file":"message_inputs.mjs","names":["redactedPart","compactionPart"],"sources":["../../../../../src/llm/anthropic/utils/message_inputs.ts"],"sourcesContent":["/* eslint-disable @typescript-eslint/explicit-function-return-type */\n/* eslint-disable no-console */\n/**\n * This util file contains functions for converting LangChain messages to Anthropic messages.\n */\nimport { createHash } from 'node:crypto';\nimport { ToolCall } from '@langchain/core/messages/tool';\nimport {\n  type BaseMessage,\n  type SystemMessage,\n  HumanMessage,\n  type AIMessage,\n  type ToolMessage,\n  isAIMessage,\n  type Data,\n  type StandardContentBlockConverter,\n  MessageContentComplex,\n  isDataContentBlock,\n  convertToProviderContentBlock,\n  parseBase64DataUrl,\n} from '@langchain/core/messages';\nimport {\n  AnthropicImageBlockParam,\n  AnthropicMessageCreateParams,\n  AnthropicTextBlockParam,\n  AnthropicDocumentBlockParam,\n  AnthropicThinkingBlockParam,\n  AnthropicRedactedThinkingBlockParam,\n  AnthropicServerToolUseBlockParam,\n  AnthropicWebSearchToolResultBlockParam,\n  isAnthropicImageBlockParam,\n  AnthropicSearchResultBlockParam,\n  AnthropicCompactionBlockParam,\n  AnthropicToolResponse,\n} from '../types';\nimport { Constants } from '@/common';\n\ntype StandardTextBlock = Data.StandardTextBlock;\ntype StandardImageBlock = Data.StandardImageBlock;\ntype StandardFileBlock = Data.StandardFileBlock;\ntype ImageUrlContentBlock = MessageContentComplex & {\n  image_url: string | { url: string };\n};\ntype GoogleFunctionCallBlock = MessageContentComplex & {\n  functionCall: {\n    name: string;\n    args: Record<string, unknown>;\n  };\n};\n\nconst ANTHROPIC_EMPTY_TEXT_PLACEHOLDER = '_';\nconst CLAUDE_4_RELEASE_DATE_MODEL_PATTERN =\n  /claude-(?:opus|sonnet|haiku)-4-\\d{8}(?:[-.@]|$)/i;\nconst CLAUDE_4_MINOR_MODEL_PATTERN =\n  /claude-(?:opus|sonnet|haiku)-4[-.](\\d+)(?:[-.@]|$)/i;\n\nfunction _formatImage(imageUrl: string) {\n  const parsed = parseBase64DataUrl({ dataUrl: imageUrl });\n  if (parsed) {\n    return {\n      type: 'base64',\n      media_type: parsed.mime_type,\n      data: parsed.data,\n    };\n  }\n  let parsedUrl: URL;\n\n  try {\n    parsedUrl = new URL(imageUrl);\n  } catch {\n    throw new Error(\n      [\n        `Malformed image URL: ${JSON.stringify(\n          imageUrl\n        )}. Content blocks of type 'image_url' must be a valid http, https, or base64-encoded data URL.`,\n        'Example: data:image/png;base64,/9j/4AAQSk...',\n        'Example: https://example.com/image.jpg',\n      ].join('\\n\\n')\n    );\n  }\n\n  if (parsedUrl.protocol === 'http:' || parsedUrl.protocol === 'https:') {\n    return {\n      type: 'url',\n      url: imageUrl,\n    };\n  }\n\n  throw new Error(\n    [\n      `Invalid image URL protocol: ${JSON.stringify(\n        parsedUrl.protocol\n      )}. Anthropic only supports images as http, https, or base64-encoded data URLs on 'image_url' content blocks.`,\n      'Example: data:image/png;base64,/9j/4AAQSk...',\n      'Example: https://example.com/image.jpg',\n    ].join('\\n\\n')\n  );\n}\n\nconst ANTHROPIC_TOOL_USE_ID_PATTERN = /^[a-zA-Z0-9_-]+$/;\nconst ANTHROPIC_TOOL_USE_ID_MAX_LENGTH = 64;\nconst ANTHROPIC_TOOL_USE_ID_HASH_LENGTH = 10;\n\n/**\n * Normalize a tool-call ID to satisfy Anthropic's `^[a-zA-Z0-9_-]+$` and 64-char\n * constraints. Pure and deterministic — same input always yields the same output,\n * so paired `tool_use.id` and `tool_result.tool_use_id` stay matched without\n * needing a session map. IDs that already comply pass through unchanged.\n *\n * For non-compliant inputs we sanitize then append a short SHA-256 prefix of\n * the original ID to preserve uniqueness when truncation would otherwise\n * collapse distinct IDs to the same value (e.g. two long Responses-style IDs\n * sharing a 64-char prefix). The hash is computed against the raw input so\n * inputs that differ only after the truncation cutoff still produce distinct\n * outputs.\n */\nexport function normalizeAnthropicToolCallId(id: string): string;\nexport function normalizeAnthropicToolCallId(\n  id: string | undefined\n): string | undefined;\nexport function normalizeAnthropicToolCallId(\n  id: string | undefined\n): string | undefined {\n  if (id == null) {\n    return id;\n  }\n  if (\n    id.length <= ANTHROPIC_TOOL_USE_ID_MAX_LENGTH &&\n    ANTHROPIC_TOOL_USE_ID_PATTERN.test(id)\n  ) {\n    return id;\n  }\n  const sanitized = id.replace(/[^a-zA-Z0-9_-]/g, '_');\n  const hash = createHash('sha256')\n    .update(id)\n    .digest('hex')\n    .slice(0, ANTHROPIC_TOOL_USE_ID_HASH_LENGTH);\n  const prefixMaxLength =\n    ANTHROPIC_TOOL_USE_ID_MAX_LENGTH - ANTHROPIC_TOOL_USE_ID_HASH_LENGTH - 1;\n  return `${sanitized.slice(0, prefixMaxLength)}_${hash}`;\n}\n\n/**\n * Lift any `cache_control` off the inner blocks of a tool result onto the\n * `tool_result` block itself. Anthropic documents the top-level\n * `messages.content` block as the cacheable position and does not document\n * caching of sub-content blocks; the API currently honors a nested marker, but\n * anchoring on the documented position keeps the single tail breakpoint robust\n * (and mirrors the Bedrock cachePoint hoist). The first marker found wins; it is\n * stripped from every inner block so exactly one survives, on the outer block.\n */\nfunction hoistToolResultCacheControl(\n  content: string | MessageContentComplex[]\n): { content: string | MessageContentComplex[]; cacheControl: unknown } {\n  if (!Array.isArray(content)) {\n    return { content, cacheControl: undefined };\n  }\n  let cacheControl: unknown;\n  const stripped = content.map((block) => {\n    if ('cache_control' in block) {\n      cacheControl ??= (block as Record<string, unknown>).cache_control;\n      const clone = { ...(block as Record<string, unknown>) };\n      delete clone.cache_control;\n      return clone as MessageContentComplex;\n    }\n    return block;\n  });\n  // `stripped` is element-equal to `content` when no marker was present.\n  return { content: stripped, cacheControl };\n}\n\nfunction _ensureMessageContents(\n  messages: BaseMessage[]\n): (SystemMessage | HumanMessage | AIMessage)[] {\n  // Merge runs of human/tool messages into single human messages with content blocks.\n  const updatedMsgs: BaseMessage[] = [];\n  for (const message of messages) {\n    if (message._getType() === 'tool') {\n      if (typeof message.content === 'string') {\n        const previousMessage = updatedMsgs[updatedMsgs.length - 1];\n        if (\n          previousMessage._getType() === 'human' &&\n          Array.isArray(previousMessage.content) &&\n          'type' in previousMessage.content[0] &&\n          previousMessage.content[0].type === 'tool_result'\n        ) {\n          // If the previous message was a tool result, we merge this tool message into it.\n          (previousMessage.content as MessageContentComplex[]).push({\n            type: 'tool_result',\n            content: message.content,\n            tool_use_id: normalizeAnthropicToolCallId(\n              (message as ToolMessage).tool_call_id\n            ),\n          });\n        } else {\n          // If not, we create a new human message with the tool result.\n          updatedMsgs.push(\n            new HumanMessage({\n              content: [\n                {\n                  type: 'tool_result',\n                  content: message.content,\n                  tool_use_id: normalizeAnthropicToolCallId(\n                    (message as ToolMessage).tool_call_id\n                  ),\n                },\n              ],\n            })\n          );\n        }\n      } else {\n        const toolMessageContent = (\n          message as { content?: BaseMessage['content'] | null }\n        ).content;\n        // Hoist a tail cache_control off the inner content onto the\n        // tool_result block itself (the documented cacheable position).\n        const { content: hoistedContent, cacheControl } =\n          toolMessageContent != null\n            ? hoistToolResultCacheControl(_formatContent(message))\n            : { content: undefined, cacheControl: undefined };\n        updatedMsgs.push(\n          new HumanMessage({\n            content: [\n              {\n                type: 'tool_result',\n                ...(hoistedContent != null ? { content: hoistedContent } : {}),\n                ...(cacheControl != null\n                  ? { cache_control: cacheControl as { type: 'ephemeral' } }\n                  : {}),\n                tool_use_id: normalizeAnthropicToolCallId(\n                  (message as ToolMessage).tool_call_id\n                ),\n              },\n            ],\n          })\n        );\n      }\n    } else {\n      updatedMsgs.push(message);\n    }\n  }\n  return updatedMsgs as (SystemMessage | HumanMessage | AIMessage)[];\n}\n\nexport function _convertLangChainToolCallToAnthropic(\n  toolCall: ToolCall\n): AnthropicToolResponse {\n  if (toolCall.id === undefined) {\n    throw new Error('Anthropic requires all tool calls to have an \"id\".');\n  }\n  const isServerTool = toolCall.id.startsWith(\n    Constants.ANTHROPIC_SERVER_TOOL_PREFIX\n  );\n  return {\n    type: isServerTool ? 'server_tool_use' : 'tool_use',\n    id: isServerTool ? toolCall.id : normalizeAnthropicToolCallId(toolCall.id),\n    name: toolCall.name,\n    input: toolCall.args,\n  };\n}\n\nconst standardContentBlockConverter: StandardContentBlockConverter<{\n  text: AnthropicTextBlockParam;\n  image: AnthropicImageBlockParam;\n  file: AnthropicDocumentBlockParam;\n}> = {\n  providerName: 'anthropic',\n\n  fromStandardTextBlock(block: StandardTextBlock): AnthropicTextBlockParam {\n    return {\n      type: 'text',\n      text: block.text,\n      ...('citations' in (block.metadata ?? {})\n        ? { citations: block.metadata!.citations }\n        : {}),\n      ...('cache_control' in (block.metadata ?? {})\n        ? { cache_control: block.metadata!.cache_control }\n        : {}),\n    } as AnthropicTextBlockParam;\n  },\n\n  fromStandardImageBlock(block: StandardImageBlock): AnthropicImageBlockParam {\n    if (block.source_type === 'url') {\n      const data = parseBase64DataUrl({\n        dataUrl: block.url,\n        asTypedArray: false,\n      });\n      if (data) {\n        return {\n          type: 'image',\n          source: {\n            type: 'base64',\n            data: data.data,\n            media_type: data.mime_type,\n          },\n          ...('cache_control' in (block.metadata ?? {})\n            ? { cache_control: block.metadata!.cache_control }\n            : {}),\n        } as AnthropicImageBlockParam;\n      } else {\n        return {\n          type: 'image',\n          source: {\n            type: 'url',\n            url: block.url,\n            media_type: block.mime_type ?? '',\n          },\n          ...('cache_control' in (block.metadata ?? {})\n            ? { cache_control: block.metadata!.cache_control }\n            : {}),\n        } as AnthropicImageBlockParam;\n      }\n    } else {\n      if (block.source_type === 'base64') {\n        return {\n          type: 'image',\n          source: {\n            type: 'base64',\n            data: block.data,\n            media_type: block.mime_type ?? '',\n          },\n          ...('cache_control' in (block.metadata ?? {})\n            ? { cache_control: block.metadata!.cache_control }\n            : {}),\n        } as AnthropicImageBlockParam;\n      } else {\n        throw new Error(`Unsupported image source type: ${block.source_type}`);\n      }\n    }\n  },\n\n  fromStandardFileBlock(block: StandardFileBlock): AnthropicDocumentBlockParam {\n    const mime_type = (block.mime_type ?? '').split(';')[0];\n\n    if (block.source_type === 'url') {\n      if (mime_type === 'application/pdf' || mime_type === '') {\n        return {\n          type: 'document',\n          source: {\n            type: 'url',\n            url: block.url,\n            media_type: block.mime_type ?? '',\n          },\n          ...('cache_control' in (block.metadata ?? {})\n            ? { cache_control: block.metadata!.cache_control }\n            : {}),\n          ...('citations' in (block.metadata ?? {})\n            ? { citations: block.metadata!.citations }\n            : {}),\n          ...('context' in (block.metadata ?? {})\n            ? { context: block.metadata!.context }\n            : {}),\n          ...('title' in (block.metadata ?? {})\n            ? { title: block.metadata!.title }\n            : {}),\n        } as AnthropicDocumentBlockParam;\n      }\n      throw new Error(\n        `Unsupported file mime type for file url source: ${block.mime_type}`\n      );\n    } else if (block.source_type === 'text') {\n      if (mime_type === 'text/plain' || mime_type === '') {\n        return {\n          type: 'document',\n          source: {\n            type: 'text',\n            data: block.text,\n            media_type: block.mime_type ?? '',\n          },\n          ...('cache_control' in (block.metadata ?? {})\n            ? { cache_control: block.metadata!.cache_control }\n            : {}),\n          ...('citations' in (block.metadata ?? {})\n            ? { citations: block.metadata!.citations }\n            : {}),\n          ...('context' in (block.metadata ?? {})\n            ? { context: block.metadata!.context }\n            : {}),\n          ...('title' in (block.metadata ?? {})\n            ? { title: block.metadata!.title }\n            : {}),\n        } as AnthropicDocumentBlockParam;\n      } else {\n        throw new Error(\n          `Unsupported file mime type for file text source: ${block.mime_type}`\n        );\n      }\n    } else if (block.source_type === 'base64') {\n      if (mime_type === 'application/pdf' || mime_type === '') {\n        return {\n          type: 'document',\n          source: {\n            type: 'base64',\n            data: block.data,\n            media_type: 'application/pdf',\n          },\n          ...('cache_control' in (block.metadata ?? {})\n            ? { cache_control: block.metadata!.cache_control }\n            : {}),\n          ...('citations' in (block.metadata ?? {})\n            ? { citations: block.metadata!.citations }\n            : {}),\n          ...('context' in (block.metadata ?? {})\n            ? { context: block.metadata!.context }\n            : {}),\n          ...('title' in (block.metadata ?? {})\n            ? { title: block.metadata!.title }\n            : {}),\n        } as AnthropicDocumentBlockParam;\n      } else if (\n        ['image/jpeg', 'image/png', 'image/gif', 'image/webp'].includes(\n          mime_type\n        )\n      ) {\n        return {\n          type: 'document',\n          source: {\n            type: 'content',\n            content: [\n              {\n                type: 'image',\n                source: {\n                  type: 'base64',\n                  data: block.data,\n                  media_type: mime_type as\n                    | 'image/jpeg'\n                    | 'image/png'\n                    | 'image/gif'\n                    | 'image/webp',\n                },\n              },\n            ],\n          },\n          ...('cache_control' in (block.metadata ?? {})\n            ? { cache_control: block.metadata!.cache_control }\n            : {}),\n          ...('citations' in (block.metadata ?? {})\n            ? { citations: block.metadata!.citations }\n            : {}),\n          ...('context' in (block.metadata ?? {})\n            ? { context: block.metadata!.context }\n            : {}),\n          ...('title' in (block.metadata ?? {})\n            ? { title: block.metadata!.title }\n            : {}),\n        } as AnthropicDocumentBlockParam;\n      } else {\n        throw new Error(\n          `Unsupported file mime type for file base64 source: ${block.mime_type}`\n        );\n      }\n    } else {\n      throw new Error(`Unsupported file source type: ${block.source_type}`);\n    }\n  },\n};\n\nfunction _formatContent(message: BaseMessage) {\n  const toolTypes = [\n    'tool_use',\n    'tool_result',\n    'input_json_delta',\n    'server_tool_use',\n    'web_search_tool_result',\n    'web_search_result',\n  ];\n  const textTypes = ['text', 'text_delta'];\n  /**\n   * Reasoning blocks emitted by other providers — Bedrock's `reasoning_content`,\n   * Google's `reasoning`, and LibreChat's `think`. Their signatures are\n   * provider-specific and cannot be validated by Anthropic, so on a\n   * cross-provider handoff (e.g. Bedrock → Anthropic) we drop them rather than\n   * forwarding an unusable block. The receiving model produces its own thinking.\n   */\n  const foreignReasoningTypes = ['reasoning_content', 'reasoning', 'think'];\n  const { content } = message;\n\n  if (typeof content === 'string') {\n    return content;\n  } else {\n    const contentParts = content as MessageContentComplex[];\n    const contentBlocks = contentParts.map((contentPart) => {\n      /**\n       * Normalize server_tool_use blocks into a clean shape the API accepts.\n       * These blocks may arrive with the correct type (server_tool_use) or mislabeled\n       * as text/tool_use after chunk concatenation or state serialization.\n       * Regardless of current type, if the id starts with 'srvtoolu_' we rebuild\n       * a clean block with only the properties the API expects.\n       */\n      if (\n        'id' in contentPart &&\n        typeof (contentPart as Record<string, unknown>).id === 'string' &&\n        ((contentPart as Record<string, unknown>).id as string).startsWith(\n          Constants.ANTHROPIC_SERVER_TOOL_PREFIX\n        ) &&\n        'name' in contentPart\n      ) {\n        const rawPart = contentPart as Record<string, unknown>;\n        let input = rawPart.input;\n        if (typeof input === 'string') {\n          try {\n            input = JSON.parse(input);\n          } catch {\n            input = {};\n          }\n        }\n        const corrected: AnthropicServerToolUseBlockParam = {\n          type: 'server_tool_use',\n          id: rawPart.id as string,\n          name: (rawPart.name ?? 'web_search') as 'web_search',\n          input: (input ?? {}) as Record<string, unknown>,\n        };\n        return corrected;\n      }\n\n      /**\n       * Normalize web_search_tool_result blocks into a clean shape.\n       * Same rationale as above — the block may carry extra properties from\n       * streaming (input, index, etc.) that the API rejects. Rebuild cleanly.\n       */\n      if (\n        'tool_use_id' in contentPart &&\n        typeof (contentPart as Record<string, unknown>).tool_use_id ===\n          'string' &&\n        (\n          (contentPart as Record<string, unknown>).tool_use_id as string\n        ).startsWith(Constants.ANTHROPIC_SERVER_TOOL_PREFIX) &&\n        'content' in contentPart\n      ) {\n        const rawPart = contentPart as Record<string, unknown>;\n        const content = rawPart.content;\n        const isValidContent =\n          Array.isArray(content) ||\n          (content != null &&\n            typeof content === 'object' &&\n            'type' in content &&\n            (content as Record<string, unknown>).type ===\n              'web_search_tool_result_error');\n\n        if (isValidContent) {\n          const corrected: AnthropicWebSearchToolResultBlockParam = {\n            type: 'web_search_tool_result',\n            tool_use_id: rawPart.tool_use_id as string,\n            content:\n              content as AnthropicWebSearchToolResultBlockParam['content'],\n          };\n          return corrected;\n        }\n        return null;\n      }\n\n      /**\n       * Skip non-server malformed blocks that have tool fields mixed with text type.\n       */\n      if (\n        'id' in contentPart &&\n        'name' in contentPart &&\n        'input' in contentPart &&\n        contentPart.type === 'text'\n      ) {\n        return null;\n      }\n      if (\n        'tool_use_id' in contentPart &&\n        'content' in contentPart &&\n        contentPart.type === 'text'\n      ) {\n        return null;\n      }\n\n      // Core's v1 streaming aggregation can leave a partial tool-input delta as a\n      // standalone block typed `text` carrying `input` but no `text`. The assembled\n      // input is restored on the tool_use block from `message.tool_calls`, so drop it.\n      if (\n        contentPart.type === 'text' &&\n        'input' in contentPart &&\n        !('text' in contentPart)\n      ) {\n        return null;\n      }\n\n      if (isDataContentBlock(contentPart)) {\n        return convertToProviderContentBlock(\n          contentPart,\n          standardContentBlockConverter\n        );\n      }\n\n      const cacheControl =\n        'cache_control' in contentPart ? contentPart.cache_control : undefined;\n\n      if (contentPart.type === 'image_url') {\n        let source;\n        const imageUrl = (contentPart as ImageUrlContentBlock).image_url;\n        if (typeof imageUrl === 'string') {\n          source = _formatImage(imageUrl);\n        } else {\n          source = _formatImage(imageUrl.url);\n        }\n        return {\n          type: 'image' as const, // Explicitly setting the type as \"image\"\n          source,\n          ...(cacheControl != null ? { cache_control: cacheControl } : {}),\n        };\n      } else if (isAnthropicImageBlockParam(contentPart)) {\n        return contentPart;\n      } else if (contentPart.type === 'document') {\n        // PDF\n        return {\n          ...contentPart,\n          ...(cacheControl != null ? { cache_control: cacheControl } : {}),\n        };\n      } else if (contentPart.type === 'thinking') {\n        const thinkingPart = contentPart as AnthropicThinkingBlockParam;\n        // Google thinking-enabled output reuses `type: 'thinking'` but carries\n        // no Anthropic signature. Anthropic rejects an unsigned thinking block,\n        // so on an assistant turn treat it as foreign reasoning and drop it\n        // rather than forward an unusable block. Signed (Anthropic-native)\n        // thinking is forwarded as before.\n        const signature = (thinkingPart as { signature?: string }).signature;\n        if (isAIMessage(message) && (signature == null || signature === '')) {\n          return null;\n        }\n        const block: AnthropicThinkingBlockParam = {\n          type: 'thinking' as const, // Explicitly setting the type as \"thinking\"\n          thinking: thinkingPart.thinking,\n          signature: thinkingPart.signature,\n          ...(cacheControl != null ? { cache_control: cacheControl } : {}),\n        };\n        return block;\n      } else if (contentPart.type === 'redacted_thinking') {\n        const redactedPart = contentPart as AnthropicRedactedThinkingBlockParam;\n        const block: AnthropicRedactedThinkingBlockParam = {\n          type: 'redacted_thinking' as const, // Explicitly setting the type as \"redacted_thinking\"\n          data: redactedPart.data,\n          ...(cacheControl != null ? { cache_control: cacheControl } : {}),\n        };\n        return block;\n      } else if (contentPart.type === 'search_result') {\n        const searchResultPart = contentPart as AnthropicSearchResultBlockParam;\n        const block: AnthropicSearchResultBlockParam = {\n          type: 'search_result' as const,\n          title: searchResultPart.title,\n          source: searchResultPart.source,\n          ...('cache_control' in contentPart &&\n          contentPart.cache_control != null\n            ? { cache_control: contentPart.cache_control }\n            : {}),\n          ...('citations' in contentPart && contentPart.citations != null\n            ? { citations: contentPart.citations }\n            : {}),\n          content: searchResultPart.content,\n        };\n        return block;\n      } else if (contentPart.type === 'compaction') {\n        const compactionPart = contentPart as AnthropicCompactionBlockParam;\n        const block: AnthropicCompactionBlockParam = {\n          type: 'compaction' as const,\n          content: compactionPart.content,\n          ...(cacheControl != null ? { cache_control: cacheControl } : {}),\n        };\n        return block;\n      } else if (\n        textTypes.some((t) => t === contentPart.type) &&\n        'text' in contentPart\n      ) {\n        // Assuming contentPart is of type MessageContentText here\n        return {\n          type: 'text' as const, // Explicitly setting the type as \"text\"\n          text: contentPart.text,\n          ...(cacheControl != null ? { cache_control: cacheControl } : {}),\n          ...('citations' in contentPart && contentPart.citations != null\n            ? { citations: contentPart.citations }\n            : {}),\n        };\n      } else if (toolTypes.some((t) => t === contentPart.type)) {\n        const contentPartCopy = { ...contentPart };\n        if ('index' in contentPartCopy) {\n          // Anthropic does not support passing the index field here, so we remove it.\n          delete contentPartCopy.index;\n        }\n\n        if (contentPartCopy.type === 'input_json_delta') {\n          // Orphaned partial tool-input delta with no id of its own. The assembled\n          // input is restored on the tool_use block from `message.tool_calls`; drop it.\n          return null;\n        }\n\n        if (\n          contentPartCopy.type === 'tool_use' &&\n          'id' in contentPartCopy &&\n          typeof contentPartCopy.id === 'string' &&\n          contentPartCopy.id.startsWith(Constants.ANTHROPIC_SERVER_TOOL_PREFIX)\n        ) {\n          contentPartCopy.type = 'server_tool_use';\n        }\n\n        // Core's streaming aggregation can leave the inline tool_use input empty\n        // (the assembled arguments live in `message.tool_calls` or, for persisted\n        // messages, in sibling input_json_delta blocks). Restore it when missing.\n        if (\n          contentPartCopy.type === 'tool_use' &&\n          typeof contentPartCopy.id === 'string' &&\n          (contentPartCopy.input === '' || contentPartCopy.input == null)\n        ) {\n          const matchingToolCall = isAIMessage(message)\n            ? message.tool_calls?.find(\n              (toolCall) => toolCall.id === contentPartCopy.id\n            )\n            : undefined;\n          if (matchingToolCall) {\n            contentPartCopy.input = matchingToolCall.args;\n          } else {\n            const blockIndex = (contentPart as Record<string, unknown>).index;\n            const merged = contentParts\n              .filter((part) => {\n                const p = part as Record<string, unknown>;\n                return (\n                  p.type === 'input_json_delta' &&\n                  p.index === blockIndex &&\n                  typeof p.input === 'string'\n                );\n              })\n              .reduce(\n                (acc, part) => acc + (part as Record<string, unknown>).input,\n                ''\n              );\n            if (merged !== '') {\n              contentPartCopy.input = merged;\n            }\n          }\n        }\n\n        if ('input' in contentPartCopy) {\n          // Anthropic tool use inputs should be valid objects, when applicable.\n          if (typeof contentPartCopy.input === 'string') {\n            try {\n              contentPartCopy.input = JSON.parse(contentPartCopy.input);\n            } catch {\n              contentPartCopy.input = {};\n            }\n          }\n        }\n\n        /**\n         * For multi-turn conversations with citations, we must preserve ALL blocks\n         * including server_tool_use, web_search_tool_result, and web_search_result.\n         * Citations reference search results by index, so filtering changes indices and breaks references.\n         *\n         * The ToolNode already handles skipping server tool invocations via the srvtoolu_ prefix check.\n         */\n\n        // TODO: Fix when SDK types are fixed\n        return {\n          ...contentPartCopy,\n          ...(cacheControl != null ? { cache_control: cacheControl } : {}),\n          // eslint-disable-next-line @typescript-eslint/no-explicit-any\n        } as any;\n      } else if (\n        'functionCall' in contentPart &&\n        contentPart.functionCall != null &&\n        typeof contentPart.functionCall === 'object' &&\n        isAIMessage(message)\n      ) {\n        const functionCallPart = contentPart as GoogleFunctionCallBlock;\n        const correspondingToolCall = message.tool_calls?.find(\n          (toolCall) => toolCall.name === functionCallPart.functionCall.name\n        );\n        if (!correspondingToolCall) {\n          throw new Error(\n            `Could not find tool call for function call ${functionCallPart.functionCall.name}`\n          );\n        }\n        // Google GenAI models include a `functionCall` object inside content. We should ignore it as Anthropic will not support it.\n        return {\n          id: correspondingToolCall.id,\n          type: 'tool_use',\n          name: correspondingToolCall.name,\n          input: functionCallPart.functionCall.args,\n        };\n      } else if (\n        isAIMessage(message) &&\n        foreignReasoningTypes.some((t) => t === contentPart.type)\n      ) {\n        // Foreign reasoning on an ASSISTANT turn (Bedrock `reasoning_content`,\n        // Google `reasoning`, LibreChat `think`) carries provider-specific\n        // signatures Anthropic cannot validate; drop it so a cross-provider\n        // handoff doesn't crash. The same types on a user/tool turn are real\n        // input and fall through to the throw below rather than being silently\n        // dropped — as does any other unknown block (user media, Google\n        // code-execution), which must be surfaced, not discarded.\n        return null;\n      } else {\n        console.error(\n          'Unsupported content part:',\n          JSON.stringify(contentPart, null, 2)\n        );\n        throw new Error('Unsupported message content format');\n      }\n    });\n    const filteredContentBlocks = contentBlocks.filter(\n      (block) =>\n        block !== null &&\n        !(\n          block.type === 'text' &&\n          'text' in block &&\n          typeof block.text === 'string' &&\n          block.text.trim() === ''\n        )\n    );\n    return filteredContentBlocks.length > 0\n      ? filteredContentBlocks\n      : [{ type: 'text' as const, text: ANTHROPIC_EMPTY_TEXT_PLACEHOLDER }];\n  }\n}\n\n/**\n * Formats messages as a prompt for the model.\n * Used in LangSmith, export is important here.\n * @param messages The base messages to format as a prompt.\n * @returns The formatted prompt.\n */\nexport function _convertMessagesToAnthropicPayload(\n  messages: BaseMessage[]\n): AnthropicMessageCreateParams {\n  const mergedMessages = _ensureMessageContents(messages);\n  let system;\n  if (mergedMessages.length > 0 && mergedMessages[0]._getType() === 'system') {\n    system = messages[0].content;\n  }\n  const conversationMessages =\n    system !== undefined ? mergedMessages.slice(1) : mergedMessages;\n  const formattedMessages = conversationMessages.map((message) => {\n    let role;\n    if (message._getType() === 'human') {\n      role = 'user' as const;\n    } else if (message._getType() === 'ai') {\n      role = 'assistant' as const;\n    } else if (message._getType() === 'tool') {\n      role = 'user' as const;\n    } else if (message._getType() === 'system') {\n      throw new Error(\n        'System messages are only permitted as the first passed message.'\n      );\n    } else {\n      throw new Error(`Message type \"${message._getType()}\" is not supported.`);\n    }\n    const isAI = isAIMessage(message);\n    const toolCalls = isAI ? (message.tool_calls ?? []) : [];\n    if (isAI && toolCalls.length > 0) {\n      if (typeof message.content === 'string') {\n        const clientToolCalls = toolCalls.filter(\n          (tc) =>\n            !(\n              tc.id?.startsWith(Constants.ANTHROPIC_SERVER_TOOL_PREFIX) ?? false\n            )\n        );\n        if (message.content === '') {\n          return {\n            role,\n            content:\n              clientToolCalls.length > 0\n                ? clientToolCalls.map(_convertLangChainToolCallToAnthropic)\n                : [\n                  {\n                    type: 'text' as const,\n                    text: ANTHROPIC_EMPTY_TEXT_PLACEHOLDER,\n                  },\n                ],\n          };\n        } else {\n          return {\n            role,\n            content: [\n              { type: 'text' as const, text: message.content },\n              ...clientToolCalls.map(_convertLangChainToolCallToAnthropic),\n            ],\n          };\n        }\n      } else {\n        const formattedContent = _formatContent(message);\n        const formattedBlocks = Array.isArray(formattedContent)\n          ? formattedContent\n          : [];\n        // Tool calls already materialized as content blocks by `_formatContent`.\n        // Derived from the FORMATTED output (not the raw content by type) so\n        // that Google `functionCall` parts — which `_formatContent` converts\n        // into `tool_use` — count as represented and are not appended twice.\n        const representedToolIds = new Set(\n          formattedBlocks\n            .filter(\n              (block) =>\n                block != null &&\n                (block.type === 'tool_use' || block.type === 'server_tool_use')\n            )\n            .map((block) => (block as { id?: string }).id)\n        );\n        // Client tool calls present in `tool_calls` but absent from the\n        // formatted content — e.g. a Bedrock extended-thinking turn records the\n        // tool only on `tool_calls` and leaves `content` as just the reasoning\n        // block. Without materializing them, dropping that reasoning block\n        // silently loses the (handoff) tool call instead of forwarding it.\n        const unrepresentedToolCalls = toolCalls.filter(\n          (toolCall) =>\n            !(\n              toolCall.id?.startsWith(Constants.ANTHROPIC_SERVER_TOOL_PREFIX) ??\n              false\n            ) && !representedToolIds.has(toolCall.id)\n        );\n        if (unrepresentedToolCalls.length === 0) {\n          return { role, content: formattedContent };\n        }\n        const existingBlocks = formattedBlocks.filter(\n          (block) =>\n            !(\n              block != null &&\n              block.type === 'text' &&\n              'text' in block &&\n              block.text === ANTHROPIC_EMPTY_TEXT_PLACEHOLDER\n            )\n        );\n        return {\n          role,\n          content: [\n            ...existingBlocks,\n            ...unrepresentedToolCalls.map(_convertLangChainToolCallToAnthropic),\n          ],\n        };\n      }\n    } else {\n      return {\n        role,\n        content: _formatContent(message),\n      };\n    }\n  });\n  return {\n    messages: mergeMessages(formattedMessages),\n    system,\n  } as AnthropicMessageCreateParams;\n}\n\nexport function modelDisallowsAssistantPrefill(model?: string): boolean {\n  const modelId = model ?? '';\n  if (CLAUDE_4_RELEASE_DATE_MODEL_PATTERN.test(modelId)) {\n    return false;\n  }\n\n  const match = CLAUDE_4_MINOR_MODEL_PATTERN.exec(modelId);\n  if (!match) {\n    return false;\n  }\n  return Number(match[1]) >= 6;\n}\n\nfunction messagesHaveCacheControl(\n  messages: AnthropicMessageCreateParams['messages']\n): boolean {\n  return messages.some(\n    (message) =>\n      Array.isArray(message.content) &&\n      message.content.some((block) => 'cache_control' in block)\n  );\n}\n\n/** Anthropic rejects cache_control on these reasoning blocks. */\nconst NON_CACHEABLE_PAYLOAD_BLOCK_TYPES = new Set([\n  'thinking',\n  'redacted_thinking',\n]);\n\n/**\n * Place one ephemeral `cache_control` on the last cacheable block of the final\n * message of an already-converted Anthropic payload. Used to re-anchor the tail\n * breakpoint after a trailing assistant prefill is stripped. Operates on the\n * post-conversion payload, where blocks the converter drops (foreign reasoning,\n * input_json_delta) are already gone — only native thinking blocks must be\n * skipped. Returns a new array only when it actually places a marker.\n */\nfunction reanchorTailCacheControl(\n  messages: AnthropicMessageCreateParams['messages'],\n  ttl?: '1h'\n): AnthropicMessageCreateParams['messages'] {\n  if (messages.length === 0) {\n    return messages;\n  }\n  const cacheControl =\n    ttl === '1h'\n      ? ({ type: 'ephemeral', ttl: '1h' } as const)\n      : ({ type: 'ephemeral' } as const);\n  const lastIndex = messages.length - 1;\n  const tail = messages[lastIndex];\n  const content = tail.content;\n\n  if (typeof content === 'string') {\n    if (content.trim() === '') {\n      return messages;\n    }\n    const next = [...messages];\n    next[lastIndex] = {\n      ...tail,\n      content: [{ type: 'text', text: content, cache_control: cacheControl }],\n    } as (typeof messages)[number];\n    return next;\n  }\n\n  if (!Array.isArray(content)) {\n    return messages;\n  }\n\n  let anchor = -1;\n  for (let i = 0; i < content.length; i++) {\n    const type = (content[i] as { type?: string }).type;\n    if (type == null || NON_CACHEABLE_PAYLOAD_BLOCK_TYPES.has(type)) {\n      continue;\n    }\n    if (\n      type === 'text' &&\n      ((content[i] as { text?: string }).text ?? '').trim() === ''\n    ) {\n      continue;\n    }\n    anchor = i;\n  }\n  if (anchor < 0) {\n    return messages;\n  }\n\n  const next = [...messages];\n  next[lastIndex] = {\n    ...tail,\n    content: content.map((block, i) =>\n      i === anchor ? { ...block, cache_control: cacheControl } : block\n    ),\n  } as (typeof messages)[number];\n  return next;\n}\n\n/**\n * Find the extended-cache TTL (`'1h'`) carried by an existing `cache_control`\n * breakpoint, so {@link reanchorTailCacheControl} can re-apply the same TTL the\n * stripped prefill had. Returns `undefined` for the legacy 5-minute default\n * (no `ttl`), keeping that path byte-identical to before.\n */\nfunction findCacheControlTtl(\n  messages: AnthropicMessageCreateParams['messages']\n): '1h' | undefined {\n  for (const message of messages) {\n    if (!Array.isArray(message.content)) {\n      continue;\n    }\n    for (const block of message.content) {\n      const cacheControl = (block as { cache_control?: { ttl?: unknown } })\n        .cache_control;\n      if (cacheControl?.ttl === '1h') {\n        return '1h';\n      }\n    }\n  }\n  return undefined;\n}\n\nexport function stripUnsupportedAssistantPrefill<\n  T extends Pick<AnthropicMessageCreateParams, 'messages'> & { model?: string },\n>(request: T): T {\n  if (!modelDisallowsAssistantPrefill(request.model)) {\n    return request;\n  }\n\n  const messages = request.messages;\n  if (\n    messages.length <= 1 ||\n    messages[messages.length - 1]?.role !== 'assistant'\n  ) {\n    return request;\n  }\n\n  const nextMessages = [...messages];\n  while (\n    nextMessages.length > 1 &&\n    nextMessages[nextMessages.length - 1]?.role === 'assistant'\n  ) {\n    nextMessages.pop();\n  }\n\n  /**\n   * If a single tail prompt-cache breakpoint rode the stripped assistant\n   * prefill, the survivors may now carry no `cache_control` at all, dropping\n   * message caching for this request. Re-anchor the breakpoint on the new tail\n   * (only when one was actually lost, so caching-off requests stay untouched).\n   */\n  const reanchored =\n    messagesHaveCacheControl(messages) &&\n    !messagesHaveCacheControl(nextMessages)\n      ? reanchorTailCacheControl(nextMessages, findCacheControlTtl(messages))\n      : nextMessages;\n\n  return {\n    ...request,\n    messages: reanchored,\n  };\n}\n\nfunction mergeMessages(messages: AnthropicMessageCreateParams['messages']) {\n  if (messages.length <= 1) {\n    return messages;\n  }\n\n  const result: AnthropicMessageCreateParams['messages'] = [];\n  let currentMessage = messages[0];\n\n  type ContentBlocks = Exclude<\n    AnthropicMessageCreateParams['messages'][number]['content'],\n    string\n  >;\n  const normalizeContent = (\n    content: AnthropicMessageCreateParams['messages'][number]['content']\n  ): ContentBlocks => {\n    if (typeof content === 'string') {\n      return [{ type: 'text', text: content }];\n    }\n    return content;\n  };\n\n  const isToolResultMessage = (msg: (typeof messages)[0]) => {\n    if (msg.role !== 'user') return false;\n\n    if (typeof msg.content === 'string') {\n      return false;\n    }\n\n    return (\n      Array.isArray(msg.content) &&\n      msg.content.every((item) => item.type === 'tool_result')\n    );\n  };\n\n  for (let i = 1; i < messages.length; i += 1) {\n    const nextMessage = messages[i];\n\n    if (\n      isToolResultMessage(currentMessage) &&\n      isToolResultMessage(nextMessage)\n    ) {\n      // Merge the messages by combining their content arrays\n      currentMessage = {\n        ...currentMessage,\n        content: [\n          ...normalizeContent(currentMessage.content),\n          ...normalizeContent(nextMessage.content),\n        ],\n      };\n    } else {\n      result.push(currentMessage);\n      currentMessage = nextMessage;\n    }\n  }\n\n  result.push(currentMessage);\n  return result;\n}\n"],"mappings":";;;;;;;;;AAkDA,MAAM,mCAAmC;AACzC,MAAM,sCACJ;AACF,MAAM,+BACJ;AAEF,SAAS,aAAa,UAAkB;CACtC,MAAM,SAAS,mBAAmB,EAAE,SAAS,SAAS,CAAC;CACvD,IAAI,QACF,OAAO;EACL,MAAM;EACN,YAAY,OAAO;EACnB,MAAM,OAAO;CACf;CAEF,IAAI;CAEJ,IAAI;EACF,YAAY,IAAI,IAAI,QAAQ;CAC9B,QAAQ;EACN,MAAM,IAAI,MACR;GACE,wBAAwB,KAAK,UAC3B,QACF,EAAE;GACF;GACA;EACF,CAAC,CAAC,KAAK,MAAM,CACf;CACF;CAEA,IAAI,UAAU,aAAa,WAAW,UAAU,aAAa,UAC3D,OAAO;EACL,MAAM;EACN,KAAK;CACP;CAGF,MAAM,IAAI,MACR;EACE,+BAA+B,KAAK,UAClC,UAAU,QACZ,EAAE;EACF;EACA;CACF,CAAC,CAAC,KAAK,MAAM,CACf;AACF;AAEA,MAAM,gCAAgC;AACtC,MAAM,mCAAmC;AACzC,MAAM,oCAAoC;AAmB1C,SAAgB,6BACd,IACoB;CACpB,IAAI,MAAM,MACR,OAAO;CAET,IACE,GAAG,UAAU,oCACb,8BAA8B,KAAK,EAAE,GAErC,OAAO;CAET,MAAM,YAAY,GAAG,QAAQ,mBAAmB,GAAG;CACnD,MAAM,OAAO,WAAW,QAAQ,CAAC,CAC9B,OAAO,EAAE,CAAC,CACV,OAAO,KAAK,CAAC,CACb,MAAM,GAAG,iCAAiC;CAC7C,MAAM,kBACJ,mCAAmC,oCAAoC;CACzE,OAAO,GAAG,UAAU,MAAM,GAAG,eAAe,EAAE,GAAG;AACnD;;;;;;;;;;AAWA,SAAS,4BACP,SACsE;CACtE,IAAI,CAAC,MAAM,QAAQ,OAAO,GACxB,OAAO;EAAE;EAAS,cAAc,KAAA;CAAU;CAE5C,IAAI;CAWJ,OAAO;EAAE,SAVQ,QAAQ,KAAK,UAAU;GACtC,IAAI,mBAAmB,OAAO;IAC5B,iBAAkB,MAAkC;IACpD,MAAM,QAAQ,EAAE,GAAI,MAAkC;IACtD,OAAO,MAAM;IACb,OAAO;GACT;GACA,OAAO;EACT,CAEyB;EAAG;CAAa;AAC3C;AAEA,SAAS,uBACP,UAC8C;CAE9C,MAAM,cAA6B,CAAC;CACpC,KAAK,MAAM,WAAW,UACpB,IAAI,QAAQ,SAAS,MAAM,QACzB,IAAI,OAAO,QAAQ,YAAY,UAAU;EACvC,MAAM,kBAAkB,YAAY,YAAY,SAAS;EACzD,IACE,gBAAgB,SAAS,MAAM,WAC/B,MAAM,QAAQ,gBAAgB,OAAO,KACrC,UAAU,gBAAgB,QAAQ,MAClC,gBAAgB,QAAQ,EAAE,CAAC,SAAS,eAGpC,gBAAiB,QAAoC,KAAK;GACxD,MAAM;GACN,SAAS,QAAQ;GACjB,aAAa,6BACV,QAAwB,YAC3B;EACF,CAAC;OAGD,YAAY,KACV,IAAI,aAAa,EACf,SAAS,CACP;GACE,MAAM;GACN,SAAS,QAAQ;GACjB,aAAa,6BACV,QAAwB,YAC3B;EACF,CACF,EACF,CAAC,CACH;CAEJ,OAAO;EAML,MAAM,EAAE,SAAS,gBAAgB,iBAJ/B,QACA,WAIsB,OAClB,4BAA4B,eAAe,OAAO,CAAC,IACnD;GAAE,SAAS,KAAA;GAAW,cAAc,KAAA;EAAU;EACpD,YAAY,KACV,IAAI,aAAa,EACf,SAAS,CACP;GACE,MAAM;GACN,GAAI,kBAAkB,OAAO,EAAE,SAAS,eAAe,IAAI,CAAC;GAC5D,GAAI,gBAAgB,OAChB,EAAE,eAAe,aAAsC,IACvD,CAAC;GACL,aAAa,6BACV,QAAwB,YAC3B;EACF,CACF,EACF,CAAC,CACH;CACF;MAEA,YAAY,KAAK,OAAO;CAG5B,OAAO;AACT;AAEA,SAAgB,qCACd,UACuB;CACvB,IAAI,SAAS,OAAO,KAAA,GAClB,MAAM,IAAI,MAAM,sDAAoD;CAEtE,MAAM,eAAe,SAAS,GAAG,WAAA,WAEjC;CACA,OAAO;EACL,MAAM,eAAe,oBAAoB;EACzC,IAAI,eAAe,SAAS,KAAK,6BAA6B,SAAS,EAAE;EACzE,MAAM,SAAS;EACf,OAAO,SAAS;CAClB;AACF;AAEA,MAAM,gCAID;CACH,cAAc;CAEd,sBAAsB,OAAmD;EACvE,OAAO;GACL,MAAM;GACN,MAAM,MAAM;GACZ,GAAI,gBAAgB,MAAM,YAAY,CAAC,KACnC,EAAE,WAAW,MAAM,SAAU,UAAU,IACvC,CAAC;GACL,GAAI,oBAAoB,MAAM,YAAY,CAAC,KACvC,EAAE,eAAe,MAAM,SAAU,cAAc,IAC/C,CAAC;EACP;CACF;CAEA,uBAAuB,OAAqD;EAC1E,IAAI,MAAM,gBAAgB,OAAO;GAC/B,MAAM,OAAO,mBAAmB;IAC9B,SAAS,MAAM;IACf,cAAc;GAChB,CAAC;GACD,IAAI,MACF,OAAO;IACL,MAAM;IACN,QAAQ;KACN,MAAM;KACN,MAAM,KAAK;KACX,YAAY,KAAK;IACnB;IACA,GAAI,oBAAoB,MAAM,YAAY,CAAC,KACvC,EAAE,eAAe,MAAM,SAAU,cAAc,IAC/C,CAAC;GACP;QAEA,OAAO;IACL,MAAM;IACN,QAAQ;KACN,MAAM;KACN,KAAK,MAAM;KACX,YAAY,MAAM,aAAa;IACjC;IACA,GAAI,oBAAoB,MAAM,YAAY,CAAC,KACvC,EAAE,eAAe,MAAM,SAAU,cAAc,IAC/C,CAAC;GACP;EAEJ,OACE,IAAI,MAAM,gBAAgB,UACxB,OAAO;GACL,MAAM;GACN,QAAQ;IACN,MAAM;IACN,MAAM,MAAM;IACZ,YAAY,MAAM,aAAa;GACjC;GACA,GAAI,oBAAoB,MAAM,YAAY,CAAC,KACvC,EAAE,eAAe,MAAM,SAAU,cAAc,IAC/C,CAAC;EACP;OAEA,MAAM,IAAI,MAAM,kCAAkC,MAAM,aAAa;CAG3E;CAEA,sBAAsB,OAAuD;EAC3E,MAAM,aAAa,MAAM,aAAa,GAAA,CAAI,MAAM,GAAG,CAAC,CAAC;EAErD,IAAI,MAAM,gBAAgB,OAAO;GAC/B,IAAI,cAAc,qBAAqB,cAAc,IACnD,OAAO;IACL,MAAM;IACN,QAAQ;KACN,MAAM;KACN,KAAK,MAAM;KACX,YAAY,MAAM,aAAa;IACjC;IACA,GAAI,oBAAoB,MAAM,YAAY,CAAC,KACvC,EAAE,eAAe,MAAM,SAAU,cAAc,IAC/C,CAAC;IACL,GAAI,gBAAgB,MAAM,YAAY,CAAC,KACnC,EAAE,WAAW,MAAM,SAAU,UAAU,IACvC,CAAC;IACL,GAAI,cAAc,MAAM,YAAY,CAAC,KACjC,EAAE,SAAS,MAAM,SAAU,QAAQ,IACnC,CAAC;IACL,GAAI,YAAY,MAAM,YAAY,CAAC,KAC/B,EAAE,OAAO,MAAM,SAAU,MAAM,IAC/B,CAAC;GACP;GAEF,MAAM,IAAI,MACR,mDAAmD,MAAM,WAC3D;EACF,OAAO,IAAI,MAAM,gBAAgB,QAC/B,IAAI,cAAc,gBAAgB,cAAc,IAC9C,OAAO;GACL,MAAM;GACN,QAAQ;IACN,MAAM;IACN,MAAM,MAAM;IACZ,YAAY,MAAM,aAAa;GACjC;GACA,GAAI,oBAAoB,MAAM,YAAY,CAAC,KACvC,EAAE,eAAe,MAAM,SAAU,cAAc,IAC/C,CAAC;GACL,GAAI,gBAAgB,MAAM,YAAY,CAAC,KACnC,EAAE,WAAW,MAAM,SAAU,UAAU,IACvC,CAAC;GACL,GAAI,cAAc,MAAM,YAAY,CAAC,KACjC,EAAE,SAAS,MAAM,SAAU,QAAQ,IACnC,CAAC;GACL,GAAI,YAAY,MAAM,YAAY,CAAC,KAC/B,EAAE,OAAO,MAAM,SAAU,MAAM,IAC/B,CAAC;EACP;OAEA,MAAM,IAAI,MACR,oDAAoD,MAAM,WAC5D;OAEG,IAAI,MAAM,gBAAgB,UAC/B,IAAI,cAAc,qBAAqB,cAAc,IACnD,OAAO;GACL,MAAM;GACN,QAAQ;IACN,MAAM;IACN,MAAM,MAAM;IACZ,YAAY;GACd;GACA,GAAI,oBAAoB,MAAM,YAAY,CAAC,KACvC,EAAE,eAAe,MAAM,SAAU,cAAc,IAC/C,CAAC;GACL,GAAI,gBAAgB,MAAM,YAAY,CAAC,KACnC,EAAE,WAAW,MAAM,SAAU,UAAU,IACvC,CAAC;GACL,GAAI,cAAc,MAAM,YAAY,CAAC,KACjC,EAAE,SAAS,MAAM,SAAU,QAAQ,IACnC,CAAC;GACL,GAAI,YAAY,MAAM,YAAY,CAAC,KAC/B,EAAE,OAAO,MAAM,SAAU,MAAM,IAC/B,CAAC;EACP;OACK,IACL;GAAC;GAAc;GAAa;GAAa;EAAY,CAAC,CAAC,SACrD,SACF,GAEA,OAAO;GACL,MAAM;GACN,QAAQ;IACN,MAAM;IACN,SAAS,CACP;KACE,MAAM;KACN,QAAQ;MACN,MAAM;MACN,MAAM,MAAM;MACZ,YAAY;KAKd;IACF,CACF;GACF;GACA,GAAI,oBAAoB,MAAM,YAAY,CAAC,KACvC,EAAE,eAAe,MAAM,SAAU,cAAc,IAC/C,CAAC;GACL,GAAI,gBAAgB,MAAM,YAAY,CAAC,KACnC,EAAE,WAAW,MAAM,SAAU,UAAU,IACvC,CAAC;GACL,GAAI,cAAc,MAAM,YAAY,CAAC,KACjC,EAAE,SAAS,MAAM,SAAU,QAAQ,IACnC,CAAC;GACL,GAAI,YAAY,MAAM,YAAY,CAAC,KAC/B,EAAE,OAAO,MAAM,SAAU,MAAM,IAC/B,CAAC;EACP;OAEA,MAAM,IAAI,MACR,sDAAsD,MAAM,WAC9D;OAGF,MAAM,IAAI,MAAM,iCAAiC,MAAM,aAAa;CAExE;AACF;AAEA,SAAS,eAAe,SAAsB;CAC5C,MAAM,YAAY;EAChB;EACA;EACA;EACA;EACA;EACA;CACF;CACA,MAAM,YAAY,CAAC,QAAQ,YAAY;;;;;;;;CAQvC,MAAM,wBAAwB;EAAC;EAAqB;EAAa;CAAO;CACxE,MAAM,EAAE,YAAY;CAEpB,IAAI,OAAO,YAAY,UACrB,OAAO;MACF;EACL,MAAM,eAAe;EAgUrB,MAAM,wBA/TgB,aAAa,KAAK,gBAAgB;;;;;;;;GAQtD,IACE,QAAQ,eACR,OAAQ,YAAwC,OAAO,YACrD,YAAwC,GAAc,WAAA,WAExD,KACA,UAAU,aACV;IACA,MAAM,UAAU;IAChB,IAAI,QAAQ,QAAQ;IACpB,IAAI,OAAO,UAAU,UACnB,IAAI;KACF,QAAQ,KAAK,MAAM,KAAK;IAC1B,QAAQ;KACN,QAAQ,CAAC;IACX;IAQF,OAAO;KALL,MAAM;KACN,IAAI,QAAQ;KACZ,MAAO,QAAQ,QAAQ;KACvB,OAAQ,SAAS,CAAC;IAEL;GACjB;;;;;;GAOA,IACE,iBAAiB,eACjB,OAAQ,YAAwC,gBAC9C,YAEC,YAAwC,YACzC,WAAA,WAAiD,KACnD,aAAa,aACb;IACA,MAAM,UAAU;IAChB,MAAM,UAAU,QAAQ;IASxB,IAPE,MAAM,QAAQ,OAAO,KACpB,WAAW,QACV,OAAO,YAAY,YACnB,UAAU,WACT,QAAoC,SACnC,gCASJ,OAAO;KALL,MAAM;KACN,aAAa,QAAQ;KAEnB;IAEW;IAEjB,OAAO;GACT;;;;GAKA,IACE,QAAQ,eACR,UAAU,eACV,WAAW,eACX,YAAY,SAAS,QAErB,OAAO;GAET,IACE,iBAAiB,eACjB,aAAa,eACb,YAAY,SAAS,QAErB,OAAO;GAMT,IACE,YAAY,SAAS,UACrB,WAAW,eACX,EAAE,UAAU,cAEZ,OAAO;GAGT,IAAI,mBAAmB,WAAW,GAChC,OAAO,8BACL,aACA,6BACF;GAGF,MAAM,eACJ,mBAAmB,cAAc,YAAY,gBAAgB,KAAA;GAE/D,IAAI,YAAY,SAAS,aAAa;IACpC,IAAI;IACJ,MAAM,WAAY,YAAqC;IACvD,IAAI,OAAO,aAAa,UACtB,SAAS,aAAa,QAAQ;SAE9B,SAAS,aAAa,SAAS,GAAG;IAEpC,OAAO;KACL,MAAM;KACN;KACA,GAAI,gBAAgB,OAAO,EAAE,eAAe,aAAa,IAAI,CAAC;IAChE;GACF,OAAO,IAAI,2BAA2B,WAAW,GAC/C,OAAO;QACF,IAAI,YAAY,SAAS,YAE9B,OAAO;IACL,GAAG;IACH,GAAI,gBAAgB,OAAO,EAAE,eAAe,aAAa,IAAI,CAAC;GAChE;QACK,IAAI,YAAY,SAAS,YAAY;IAC1C,MAAM,eAAe;IAMrB,MAAM,YAAa,aAAwC;IAC3D,IAAI,YAAY,OAAO,MAAM,aAAa,QAAQ,cAAc,KAC9D,OAAO;IAQT,OAAO;KALL,MAAM;KACN,UAAU,aAAa;KACvB,WAAW,aAAa;KACxB,GAAI,gBAAgB,OAAO,EAAE,eAAe,aAAa,IAAI,CAAC;IAErD;GACb,OAAO,IAAI,YAAY,SAAS,qBAO9B,OAAO;IAJL,MAAM;IACN,MAAMA,YAAa;IACnB,GAAI,gBAAgB,OAAO,EAAE,eAAe,aAAa,IAAI,CAAC;GAErD;QACN,IAAI,YAAY,SAAS,iBAAiB;IAC/C,MAAM,mBAAmB;IAczB,OAAO;KAZL,MAAM;KACN,OAAO,iBAAiB;KACxB,QAAQ,iBAAiB;KACzB,GAAI,mBAAmB,eACvB,YAAY,iBAAiB,OACzB,EAAE,eAAe,YAAY,cAAc,IAC3C,CAAC;KACL,GAAI,eAAe,eAAe,YAAY,aAAa,OACvD,EAAE,WAAW,YAAY,UAAU,IACnC,CAAC;KACL,SAAS,iBAAiB;IAEjB;GACb,OAAO,IAAI,YAAY,SAAS,cAO9B,OAAO;IAJL,MAAM;IACN,SAASC,YAAe;IACxB,GAAI,gBAAgB,OAAO,EAAE,eAAe,aAAa,IAAI,CAAC;GAErD;QACN,IACL,UAAU,MAAM,MAAM,MAAM,YAAY,IAAI,KAC5C,UAAU,aAGV,OAAO;IACL,MAAM;IACN,MAAM,YAAY;IAClB,GAAI,gBAAgB,OAAO,EAAE,eAAe,aAAa,IAAI,CAAC;IAC9D,GAAI,eAAe,eAAe,YAAY,aAAa,OACvD,EAAE,WAAW,YAAY,UAAU,IACnC,CAAC;GACP;QACK,IAAI,UAAU,MAAM,MAAM,MAAM,YAAY,IAAI,GAAG;IACxD,MAAM,kBAAkB,EAAE,GAAG,YAAY;IACzC,IAAI,WAAW,iBAEb,OAAO,gBAAgB;IAGzB,IAAI,gBAAgB,SAAS,oBAG3B,OAAO;IAGT,IACE,gBAAgB,SAAS,cACzB,QAAQ,mBACR,OAAO,gBAAgB,OAAO,YAC9B,gBAAgB,GAAG,WAAA,WAAiD,GAEpE,gBAAgB,OAAO;IAMzB,IACE,gBAAgB,SAAS,cACzB,OAAO,gBAAgB,OAAO,aAC7B,gBAAgB,UAAU,MAAM,gBAAgB,SAAS,OAC1D;KACA,MAAM,mBAAmB,YAAY,OAAO,IACxC,QAAQ,YAAY,MACnB,aAAa,SAAS,OAAO,gBAAgB,EAChD,IACE,KAAA;KACJ,IAAI,kBACF,gBAAgB,QAAQ,iBAAiB;UACpC;MACL,MAAM,aAAc,YAAwC;MAC5D,MAAM,SAAS,aACZ,QAAQ,SAAS;OAChB,MAAM,IAAI;OACV,OACE,EAAE,SAAS,sBACX,EAAE,UAAU,cACZ,OAAO,EAAE,UAAU;MAEvB,CAAC,CAAC,CACD,QACE,KAAK,SAAS,MAAO,KAAiC,OACvD,EACF;MACF,IAAI,WAAW,IACb,gBAAgB,QAAQ;KAE5B;IACF;IAEA,IAAI,WAAW;SAET,OAAO,gBAAgB,UAAU,UACnC,IAAI;MACF,gBAAgB,QAAQ,KAAK,MAAM,gBAAgB,KAAK;KAC1D,QAAQ;MACN,gBAAgB,QAAQ,CAAC;KAC3B;;;;;;;;;IAaJ,OAAO;KACL,GAAG;KACH,GAAI,gBAAgB,OAAO,EAAE,eAAe,aAAa,IAAI,CAAC;IAEhE;GACF,OAAO,IACL,kBAAkB,eAClB,YAAY,gBAAgB,QAC5B,OAAO,YAAY,iBAAiB,YACpC,YAAY,OAAO,GACnB;IACA,MAAM,mBAAmB;IACzB,MAAM,wBAAwB,QAAQ,YAAY,MAC/C,aAAa,SAAS,SAAS,iBAAiB,aAAa,IAChE;IACA,IAAI,CAAC,uBACH,MAAM,IAAI,MACR,8CAA8C,iBAAiB,aAAa,MAC9E;IAGF,OAAO;KACL,IAAI,sBAAsB;KAC1B,MAAM;KACN,MAAM,sBAAsB;KAC5B,OAAO,iBAAiB,aAAa;IACvC;GACF,OAAO,IACL,YAAY,OAAO,KACnB,sBAAsB,MAAM,MAAM,MAAM,YAAY,IAAI,GASxD,OAAO;QACF;IACL,QAAQ,MACN,6BACA,KAAK,UAAU,aAAa,MAAM,CAAC,CACrC;IACA,MAAM,IAAI,MAAM,oCAAoC;GACtD;EACF,CAC0C,CAAC,CAAC,QACzC,UACC,UAAU,QACV,EACE,MAAM,SAAS,UACf,UAAU,SACV,OAAO,MAAM,SAAS,YACtB,MAAM,KAAK,KAAK,MAAM,GAE5B;EACA,OAAO,sBAAsB,SAAS,IAClC,wBACA,CAAC;GAAE,MAAM;GAAiB,MAAM;EAAiC,CAAC;CACxE;AACF;;;;;;;AAQA,SAAgB,mCACd,UAC8B;CAC9B,MAAM,iBAAiB,uBAAuB,QAAQ;CACtD,IAAI;CACJ,IAAI,eAAe,SAAS,KAAK,eAAe,EAAE,CAAC,SAAS,MAAM,UAChE,SAAS,SAAS,EAAE,CAAC;CA4GvB,OAAO;EACL,UAAU,eA1GV,WAAW,KAAA,IAAY,eAAe,MAAM,CAAC,IAAI,eAAA,CACJ,KAAK,YAAY;GAC9D,IAAI;GACJ,IAAI,QAAQ,SAAS,MAAM,SACzB,OAAO;QACF,IAAI,QAAQ,SAAS,MAAM,MAChC,OAAO;QACF,IAAI,QAAQ,SAAS,MAAM,QAChC,OAAO;QACF,IAAI,QAAQ,SAAS,MAAM,UAChC,MAAM,IAAI,MACR,iEACF;QAEA,MAAM,IAAI,MAAM,iBAAiB,QAAQ,SAAS,EAAE,oBAAoB;GAE1E,MAAM,OAAO,YAAY,OAAO;GAChC,MAAM,YAAY,OAAQ,QAAQ,cAAc,CAAC,IAAK,CAAC;GACvD,IAAI,QAAQ,UAAU,SAAS,GAC7B,IAAI,OAAO,QAAQ,YAAY,UAAU;IACvC,MAAM,kBAAkB,UAAU,QAC/B,OACC,EACE,GAAG,IAAI,WAAA,WAAiD,KAAK,MAEnE;IACA,IAAI,QAAQ,YAAY,IACtB,OAAO;KACL;KACA,SACE,gBAAgB,SAAS,IACrB,gBAAgB,IAAI,oCAAoC,IACxD,CACA;MACE,MAAM;MACN,MAAM;KACR,CACF;IACN;SAEA,OAAO;KACL;KACA,SAAS,CACP;MAAE,MAAM;MAAiB,MAAM,QAAQ;KAAQ,GAC/C,GAAG,gBAAgB,IAAI,oCAAoC,CAC7D;IACF;GAEJ,OAAO;IACL,MAAM,mBAAmB,eAAe,OAAO;IAC/C,MAAM,kBAAkB,MAAM,QAAQ,gBAAgB,IAClD,mBACA,CAAC;IAKL,MAAM,qBAAqB,IAAI,IAC7B,gBACG,QACE,UACC,SAAS,SACR,MAAM,SAAS,cAAc,MAAM,SAAS,kBACjD,CAAC,CACA,KAAK,UAAW,MAA0B,EAAE,CACjD;IAMA,MAAM,yBAAyB,UAAU,QACtC,aACC,EACE,SAAS,IAAI,WAAA,WAAiD,KAC9D,UACG,CAAC,mBAAmB,IAAI,SAAS,EAAE,CAC5C;IACA,IAAI,uBAAuB,WAAW,GACpC,OAAO;KAAE;KAAM,SAAS;IAAiB;IAE3C,MAAM,iBAAiB,gBAAgB,QACpC,UACC,EACE,SAAS,QACT,MAAM,SAAS,UACf,UAAU,SACV,MAAM,SAAS,iCAErB;IACA,OAAO;KACL;KACA,SAAS,CACP,GAAG,gBACH,GAAG,uBAAuB,IAAI,oCAAoC,CACpE;IACF;GACF;QAEA,OAAO;IACL;IACA,SAAS,eAAe,OAAO;GACjC;EAEJ,CAE0C,CAAC;EACzC;CACF;AACF;AAEA,SAAgB,+BAA+B,OAAyB;CACtE,MAAM,UAAU,SAAS;CACzB,IAAI,oCAAoC,KAAK,OAAO,GAClD,OAAO;CAGT,MAAM,QAAQ,6BAA6B,KAAK,OAAO;CACvD,IAAI,CAAC,OACH,OAAO;CAET,OAAO,OAAO,MAAM,EAAE,KAAK;AAC7B;AAEA,SAAS,yBACP,UACS;CACT,OAAO,SAAS,MACb,YACC,MAAM,QAAQ,QAAQ,OAAO,KAC7B,QAAQ,QAAQ,MAAM,UAAU,mBAAmB,KAAK,CAC5D;AACF;;AAGA,MAAM,oCAAoC,IAAI,IAAI,CAChD,YACA,mBACF,CAAC;;;;;;;;;AAUD,SAAS,yBACP,UACA,KAC0C;CAC1C,IAAI,SAAS,WAAW,GACtB,OAAO;CAET,MAAM,eACJ,QAAQ,OACH;EAAE,MAAM;EAAa,KAAK;CAAK,IAC/B,EAAE,MAAM,YAAY;CAC3B,MAAM,YAAY,SAAS,SAAS;CACpC,MAAM,OAAO,SAAS;CACtB,MAAM,UAAU,KAAK;CAErB,IAAI,OAAO,YAAY,UAAU;EAC/B,IAAI,QAAQ,KAAK,MAAM,IACrB,OAAO;EAET,MAAM,OAAO,CAAC,GAAG,QAAQ;EACzB,KAAK,aAAa;GAChB,GAAG;GACH,SAAS,CAAC;IAAE,MAAM;IAAQ,MAAM;IAAS,eAAe;GAAa,CAAC;EACxE;EACA,OAAO;CACT;CAEA,IAAI,CAAC,MAAM,QAAQ,OAAO,GACxB,OAAO;CAGT,IAAI,SAAS;CACb,KAAK,IAAI,IAAI,GAAG,IAAI,QAAQ,QAAQ,KAAK;EACvC,MAAM,OAAQ,QAAQ,EAAE,CAAuB;EAC/C,IAAI,QAAQ,QAAQ,kCAAkC,IAAI,IAAI,GAC5D;EAEF,IACE,SAAS,WACP,QAAQ,EAAE,CAAuB,QAAQ,GAAA,CAAI,KAAK,MAAM,IAE1D;EAEF,SAAS;CACX;CACA,IAAI,SAAS,GACX,OAAO;CAGT,MAAM,OAAO,CAAC,GAAG,QAAQ;CACzB,KAAK,aAAa;EAChB,GAAG;EACH,SAAS,QAAQ,KAAK,OAAO,MAC3B,MAAM,SAAS;GAAE,GAAG;GAAO,eAAe;EAAa,IAAI,KAC7D;CACF;CACA,OAAO;AACT;;;;;;;AAQA,SAAS,oBACP,UACkB;CAClB,KAAK,MAAM,WAAW,UAAU;EAC9B,IAAI,CAAC,MAAM,QAAQ,QAAQ,OAAO,GAChC;EAEF,KAAK,MAAM,SAAS,QAAQ,SAG1B,IAFsB,MACnB,eACe,QAAQ,MACxB,OAAO;CAGb;AAEF;AAEA,SAAgB,iCAEd,SAAe;CACf,IAAI,CAAC,+BAA+B,QAAQ,KAAK,GAC/C,OAAO;CAGT,MAAM,WAAW,QAAQ;CACzB,IACE,SAAS,UAAU,KACnB,SAAS,SAAS,SAAS,EAAE,EAAE,SAAS,aAExC,OAAO;CAGT,MAAM,eAAe,CAAC,GAAG,QAAQ;CACjC,OACE,aAAa,SAAS,KACtB,aAAa,aAAa,SAAS,EAAE,EAAE,SAAS,aAEhD,aAAa,IAAI;;;;;;;CASnB,MAAM,aACJ,yBAAyB,QAAQ,KACjC,CAAC,yBAAyB,YAAY,IAClC,yBAAyB,cAAc,oBAAoB,QAAQ,CAAC,IACpE;CAEN,OAAO;EACL,GAAG;EACH,UAAU;CACZ;AACF;AAEA,SAAS,cAAc,UAAoD;CACzE,IAAI,SAAS,UAAU,GACrB,OAAO;CAGT,MAAM,SAAmD,CAAC;CAC1D,IAAI,iBAAiB,SAAS;CAM9B,MAAM,oBACJ,YACkB;EAClB,IAAI,OAAO,YAAY,UACrB,OAAO,CAAC;GAAE,MAAM;GAAQ,MAAM;EAAQ,CAAC;EAEzC,OAAO;CACT;CAEA,MAAM,uBAAuB,QAA8B;EACzD,IAAI,IAAI,SAAS,QAAQ,OAAO;EAEhC,IAAI,OAAO,IAAI,YAAY,UACzB,OAAO;EAGT,OACE,MAAM,QAAQ,IAAI,OAAO,KACzB,IAAI,QAAQ,OAAO,SAAS,KAAK,SAAS,aAAa;CAE3D;CAEA,KAAK,IAAI,IAAI,GAAG,IAAI,SAAS,QAAQ,KAAK,GAAG;EAC3C,MAAM,cAAc,SAAS;EAE7B,IACE,oBAAoB,cAAc,KAClC,oBAAoB,WAAW,GAG/B,iBAAiB;GACf,GAAG;GACH,SAAS,CACP,GAAG,iBAAiB,eAAe,OAAO,GAC1C,GAAG,iBAAiB,YAAY,OAAO,CACzC;EACF;OACK;GACL,OAAO,KAAK,cAAc;GAC1B,iBAAiB;EACnB;CACF;CAEA,OAAO,KAAK,cAAc;CAC1B,OAAO;AACT"}

package/dist/esm/llm/bedrock/index.mjs

@@ -1,3 +1,4 @@
+import { resolvePromptCacheTtl } from "../../messages/cache.mjs";
 import { insertBedrockToolCachePoint } from "./toolCache.mjs";
 import { convertToConverseMessages } from "./utils/message_inputs.mjs";
 import { createConverseToolUseStopChunk, handleConverseStreamContentBlockDelta, handleConverseStreamContentBlockStart, handleConverseStreamMetadata } from "./utils/message_outputs.mjs";
@@ -35,6 +36,10 @@ var CustomChatBedrockConverse = class extends ChatBedrockConverse {
 	*/
 	promptCache;
 	/**
+	* Prompt-cache checkpoint TTL (`'5m'` legacy or `'1h'` extended cache).
+	*/
+	promptCacheTtl;
+	/**
 	* Application Inference Profile ARN to use instead of model ID.
 	*/
 	applicationInferenceProfile;
@@ -45,6 +50,7 @@ var CustomChatBedrockConverse = class extends ChatBedrockConverse {
 	constructor(fields) {
 		super(fields);
 		this.promptCache = fields?.promptCache;
+		this.promptCacheTtl = fields?.promptCacheTtl;
 		this.applicationInferenceProfile = fields?.applicationInferenceProfile;
 		this.serviceTier = fields?.serviceTier;
 	}
@@ -63,7 +69,7 @@ var CustomChatBedrockConverse = class extends ChatBedrockConverse {
 	*/
 	invocationParams(options) {
 		const baseParams = super.invocationParams(options);
-		const toolConfig = this.promptCache === true ? insertBedrockToolCachePoint(baseParams.toolConfig, true) : baseParams.toolConfig;
+		const toolConfig = this.promptCache === true ? insertBedrockToolCachePoint(baseParams.toolConfig, true, resolvePromptCacheTtl(this.promptCacheTtl)) : baseParams.toolConfig;
 		/** Service tier from options or fall back to class-level setting */
 		const serviceTierType = options?.serviceTier ?? this.serviceTier;
 		return {

package/dist/esm/llm/bedrock/index.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"index.mjs","names":[],"sources":["../../../../src/llm/bedrock/index.ts"],"sourcesContent":["/**\n * Optimized ChatBedrockConverse wrapper that fixes content block merging for\n * streaming responses and adds support for latest @langchain/aws features:\n *\n * - Application Inference Profiles (PR #9129)\n * - Service Tiers (Priority/Standard/Flex) (PR #9785) - requires AWS SDK 3.966.0+\n *\n * Bedrock's `@langchain/aws` library does not include an `index` property on content\n * blocks (unlike Anthropic/OpenAI), which causes LangChain's `_mergeLists` to append\n * each streaming chunk as a separate array entry instead of merging by index.\n *\n * This wrapper takes full ownership of the stream by directly interfacing with the\n * AWS SDK client (`this.client`) and using custom handlers from `./utils/` that\n * include `contentBlockIndex` in response_metadata for every delta type. It then\n * promotes `contentBlockIndex` to an `index` property on each content block\n * (mirroring Anthropic's pattern) and strips it from metadata to avoid\n * `_mergeDicts` conflicts.\n *\n * When multiple content block types are present (e.g. reasoning + text), text deltas\n * are promoted from strings to array form with `index` so they merge correctly once\n * the accumulated content is already an array.\n */\n\nimport { ChatBedrockConverse } from '@langchain/aws';\nimport { AIMessageChunk } from '@langchain/core/messages';\nimport { ChatGenerationChunk, ChatResult } from '@langchain/core/outputs';\nimport {\n  ConverseStreamCommand,\n  type GuardrailConfiguration,\n  type GuardrailStreamConfiguration,\n} from '@aws-sdk/client-bedrock-runtime';\nimport type { CallbackManagerForLLMRun } from '@langchain/core/callbacks/manager';\nimport type { BaseMessage, ResponseMetadata } from '@langchain/core/messages';\nimport type { ChatBedrockConverseInput } from '@langchain/aws';\nimport {\n  convertToConverseMessages,\n  createConverseToolUseStopChunk,\n  handleConverseStreamContentBlockStart,\n  handleConverseStreamContentBlockDelta,\n  handleConverseStreamMetadata,\n} from './utils';\nimport { insertBedrockToolCachePoint } from './toolCache';\n\n/**\n * Service tier type for Bedrock invocations.\n * Requires AWS SDK >= 3.966.0 to actually work.\n * @see https://docs.aws.amazon.com/bedrock/latest/userguide/service-tiers-inference.html\n */\nexport type ServiceTierType = 'priority' | 'default' | 'flex' | 'reserved';\n\nexport type CustomGuardrailConfiguration = GuardrailConfiguration &\n  Pick<GuardrailStreamConfiguration, 'streamProcessingMode'>;\n\n/**\n * Extended input interface with additional features:\n * - applicationInferenceProfile: Use an inference profile ARN instead of model ID\n * - serviceTier: Specify service tier (Priority, Standard, Flex, Reserved)\n */\nexport interface CustomChatBedrockConverseInput\n  extends ChatBedrockConverseInput {\n  /**\n   * Enables Bedrock prompt cache checkpoints for message and tool prefixes.\n   */\n  promptCache?: boolean;\n\n  /**\n   * Guardrail configuration for Converse and ConverseStream invocations.\n   * `streamProcessingMode` is only used by ConverseStream.\n   */\n  guardrailConfig?: CustomGuardrailConfiguration;\n\n  /**\n   * Application Inference Profile ARN to use for the model.\n   * For example, \"arn:aws:bedrock:eu-west-1:123456789102:application-inference-profile/fm16bt65tzgx\"\n   * When provided, this ARN will be used for the actual inference calls instead of the model ID.\n   * Must still provide `model` as normal modelId to benefit from all the metadata.\n   * @see https://docs.aws.amazon.com/bedrock/latest/userguide/inference-profiles-create.html\n   */\n  applicationInferenceProfile?: string;\n\n  /**\n   * Service tier for model invocation.\n   * Specifies the processing tier type used for serving the request.\n   * Supported values are 'priority', 'default', 'flex', and 'reserved'.\n   *\n   * - 'priority': Prioritized processing for lower latency\n   * - 'default': Standard processing tier\n   * - 'flex': Flexible processing tier with lower cost\n   * - 'reserved': Reserved capacity for consistent performance\n   *\n   * If not provided, AWS uses the default tier.\n   * Note: Requires AWS SDK >= 3.966.0 to work.\n   * @see https://docs.aws.amazon.com/bedrock/latest/userguide/service-tiers-inference.html\n   */\n  serviceTier?: ServiceTierType;\n}\n\n/**\n * Extended call options with serviceTier override support.\n */\nexport interface CustomChatBedrockConverseCallOptions {\n  serviceTier?: ServiceTierType;\n  guardrailConfig?: CustomGuardrailConfiguration;\n}\n\nexport class CustomChatBedrockConverse extends ChatBedrockConverse {\n  /**\n   * Whether to insert Bedrock prompt cache checkpoints when available.\n   */\n  promptCache?: boolean;\n\n  /**\n   * Application Inference Profile ARN to use instead of model ID.\n   */\n  applicationInferenceProfile?: string;\n\n  /**\n   * Service tier for model invocation.\n   */\n  serviceTier?: ServiceTierType;\n\n  constructor(fields?: CustomChatBedrockConverseInput) {\n    super(fields);\n    this.promptCache = fields?.promptCache;\n    this.applicationInferenceProfile = fields?.applicationInferenceProfile;\n    this.serviceTier = fields?.serviceTier;\n  }\n\n  static lc_name(): string {\n    return 'LibreChatBedrockConverse';\n  }\n\n  /**\n   * Get the model ID to use for API calls.\n   * Returns applicationInferenceProfile if set, otherwise returns this.model.\n   */\n  protected getModelId(): string {\n    return this.applicationInferenceProfile ?? this.model;\n  }\n\n  /**\n   * Override invocationParams to add serviceTier support.\n   */\n  override invocationParams(\n    options?: this['ParsedCallOptions'] & CustomChatBedrockConverseCallOptions\n  ): ReturnType<ChatBedrockConverse['invocationParams']> & {\n    serviceTier?: { type: ServiceTierType };\n  } {\n    const baseParams = super.invocationParams(options);\n    const toolConfig =\n      this.promptCache === true\n        ? insertBedrockToolCachePoint(baseParams.toolConfig, true)\n        : baseParams.toolConfig;\n\n    /** Service tier from options or fall back to class-level setting */\n    const serviceTierType = options?.serviceTier ?? this.serviceTier;\n\n    return {\n      ...baseParams,\n      toolConfig,\n      serviceTier: serviceTierType ? { type: serviceTierType } : undefined,\n    };\n  }\n\n  /**\n   * Override _generateNonStreaming to use applicationInferenceProfile as modelId.\n   * Uses the same model-swapping pattern as streaming for consistency.\n   */\n  override async _generateNonStreaming(\n    messages: BaseMessage[],\n    options: this['ParsedCallOptions'] & CustomChatBedrockConverseCallOptions,\n    runManager?: CallbackManagerForLLMRun\n  ): Promise<ChatResult> {\n    const originalModel = this.model;\n    if (\n      this.applicationInferenceProfile != null &&\n      this.applicationInferenceProfile !== ''\n    ) {\n      this.model = this.applicationInferenceProfile;\n    }\n\n    try {\n      return await super._generateNonStreaming(messages, options, runManager);\n    } finally {\n      this.model = originalModel;\n    }\n  }\n\n  /**\n   * Own the stream end-to-end so we have direct access to every\n   * `contentBlockDelta.contentBlockIndex` from the AWS SDK.\n   *\n   * This replaces the parent's implementation which strips contentBlockIndex\n   * from text and reasoning deltas, making it impossible to merge correctly.\n   */\n  override async *_streamResponseChunks(\n    messages: BaseMessage[],\n    options: this['ParsedCallOptions'] & CustomChatBedrockConverseCallOptions,\n    runManager?: CallbackManagerForLLMRun\n  ): AsyncGenerator<ChatGenerationChunk> {\n    const { converseMessages, converseSystem } =\n      convertToConverseMessages(messages);\n    const params = this.invocationParams(options);\n\n    let { streamUsage } = this;\n    if ((options as Record<string, unknown>).streamUsage !== undefined) {\n      streamUsage = (options as Record<string, unknown>).streamUsage as boolean;\n    }\n\n    const modelId = this.getModelId();\n\n    const command = new ConverseStreamCommand({\n      modelId,\n      messages: converseMessages,\n      system: converseSystem,\n      ...(params as Record<string, unknown>),\n    });\n\n    const response = await this.client.send(command, {\n      abortSignal: options.signal,\n    });\n\n    if (!response.stream) {\n      return;\n    }\n\n    const seenBlockIndices = new Set<number>();\n    const toolUseBlockIndices = new Set<number>();\n    /**\n     * Guardrails can reject an already-streamed toolUse block at\n     * `messageStop` (`guardrail_intervened`), after `contentBlockStop` has\n     * passed. Only emit eager-execution seals when no guardrails are\n     * configured, so a later intervention can't race an eagerly started tool.\n     */\n    const sealToolUseOnStop =\n      options.guardrailConfig == null && this.guardrailConfig == null;\n\n    for await (const event of response.stream) {\n      if (event.contentBlockStart != null) {\n        const startChunk = handleConverseStreamContentBlockStart(\n          event.contentBlockStart\n        );\n        if (startChunk != null) {\n          const idx = event.contentBlockStart.contentBlockIndex;\n          if (idx != null) {\n            seenBlockIndices.add(idx);\n            if (event.contentBlockStart.start?.toolUse != null) {\n              toolUseBlockIndices.add(idx);\n            }\n          }\n          yield this.enrichChunk(startChunk, seenBlockIndices);\n\n          // Registered stream handlers receive chunks through callback\n          // events, not the yielded generator — dispatch the start chunk so\n          // they see the tool call's id/name (eager chunk state needs both).\n          await runManager?.handleLLMNewToken(\n            startChunk.text,\n            undefined,\n            undefined,\n            undefined,\n            undefined,\n            { chunk: startChunk }\n          );\n        }\n      } else if (event.contentBlockDelta != null) {\n        const deltaChunk = handleConverseStreamContentBlockDelta(\n          event.contentBlockDelta\n        );\n\n        const idx = event.contentBlockDelta.contentBlockIndex;\n        if (idx != null) {\n          seenBlockIndices.add(idx);\n        }\n\n        yield this.enrichChunk(deltaChunk, seenBlockIndices);\n\n        await runManager?.handleLLMNewToken(\n          deltaChunk.text,\n          undefined,\n          undefined,\n          undefined,\n          undefined,\n          { chunk: deltaChunk }\n        );\n      } else if (event.metadata != null) {\n        yield handleConverseStreamMetadata(event.metadata, { streamUsage });\n      } else if (event.contentBlockStop != null) {\n        const stopIdx = event.contentBlockStop.contentBlockIndex;\n        if (stopIdx != null) {\n          seenBlockIndices.add(stopIdx);\n          if (sealToolUseOnStop && toolUseBlockIndices.has(stopIdx)) {\n            // Converse guarantees the block's input is complete at stop, so\n            // emit an explicit seal chunk for eager tool execution — through\n            // the callback path too, for registered stream handlers.\n            const sealChunk = createConverseToolUseStopChunk(stopIdx);\n            yield sealChunk;\n            await runManager?.handleLLMNewToken(\n              sealChunk.text,\n              undefined,\n              undefined,\n              undefined,\n              undefined,\n              { chunk: sealChunk }\n            );\n          }\n        }\n      } else {\n        yield new ChatGenerationChunk({\n          text: '',\n          message: new AIMessageChunk({\n            content: '',\n            response_metadata: { ...event } as ResponseMetadata,\n          }),\n        });\n      }\n    }\n  }\n\n  /**\n   * Inject `index` on content blocks for proper merge behaviour, then strip\n   * `contentBlockIndex` from response_metadata to prevent `_mergeDicts` conflicts.\n   *\n   * Text string content is promoted to array form only when the stream contains\n   * multiple content block indices (e.g. reasoning at index 0, text at index 1),\n   * ensuring text merges correctly with the already-array accumulated content.\n   */\n  private enrichChunk(\n    chunk: ChatGenerationChunk,\n    seenBlockIndices: Set<number>\n  ): ChatGenerationChunk {\n    const message = chunk.message;\n    if (!(message instanceof AIMessageChunk)) {\n      return chunk;\n    }\n\n    const metadata = message.response_metadata as Record<string, unknown>;\n    const blockIndex = this.extractContentBlockIndex(metadata);\n    const hasMetadataIndex = blockIndex != null;\n\n    let content: AIMessageChunk['content'] = message.content;\n    let contentModified = false;\n\n    if (Array.isArray(content) && blockIndex != null) {\n      content = content.map((block) =>\n        typeof block === 'object' && !('index' in block)\n          ? { ...block, index: blockIndex }\n          : block\n      );\n      contentModified = true;\n    } else if (\n      typeof content === 'string' &&\n      content !== '' &&\n      blockIndex != null &&\n      seenBlockIndices.size > 1\n    ) {\n      content = [{ type: 'text', text: content, index: blockIndex }];\n      contentModified = true;\n    }\n\n    if (!contentModified && !hasMetadataIndex) {\n      return chunk;\n    }\n\n    const cleanedMetadata = hasMetadataIndex\n      ? (this.removeContentBlockIndex(metadata) as Record<string, unknown>)\n      : metadata;\n\n    return new ChatGenerationChunk({\n      text: chunk.text,\n      message: new AIMessageChunk({\n        ...message,\n        content,\n        response_metadata: cleanedMetadata,\n      }),\n      generationInfo: chunk.generationInfo,\n    });\n  }\n\n  /**\n   * Extract `contentBlockIndex` from the top level of response_metadata.\n   * Our custom handlers always place it at the top level.\n   */\n  private extractContentBlockIndex(\n    metadata: Record<string, unknown>\n  ): number | undefined {\n    if (\n      'contentBlockIndex' in metadata &&\n      typeof metadata.contentBlockIndex === 'number'\n    ) {\n      return metadata.contentBlockIndex;\n    }\n    return undefined;\n  }\n\n  private removeContentBlockIndex(obj: unknown): unknown {\n    if (obj === null || obj === undefined) {\n      return obj;\n    }\n\n    if (Array.isArray(obj)) {\n      return obj.map((item) => this.removeContentBlockIndex(item));\n    }\n\n    if (typeof obj === 'object') {\n      const cleaned: Record<string, unknown> = {};\n      for (const [key, value] of Object.entries(obj)) {\n        if (key !== 'contentBlockIndex') {\n          cleaned[key] = this.removeContentBlockIndex(value);\n        }\n      }\n      return cleaned;\n    }\n\n    return obj;\n  }\n}\n\nexport type { ChatBedrockConverseInput };\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAyGA,IAAa,4BAAb,cAA+C,oBAAoB;;;;CAIjE;;;;CAKA;;;;CAKA;CAEA,YAAY,QAAyC;EACnD,MAAM,MAAM;EACZ,KAAK,cAAc,QAAQ;EAC3B,KAAK,8BAA8B,QAAQ;EAC3C,KAAK,cAAc,QAAQ;CAC7B;CAEA,OAAO,UAAkB;EACvB,OAAO;CACT;;;;;CAMA,aAA+B;EAC7B,OAAO,KAAK,+BAA+B,KAAK;CAClD;;;;CAKA,iBACE,SAGA;EACA,MAAM,aAAa,MAAM,iBAAiB,OAAO;EACjD,MAAM,aACJ,KAAK,gBAAgB,OACjB,4BAA4B,WAAW,YAAY,IAAI,IACvD,WAAW;;EAGjB,MAAM,kBAAkB,SAAS,eAAe,KAAK;EAErD,OAAO;GACL,GAAG;GACH;GACA,aAAa,kBAAkB,EAAE,MAAM,gBAAgB,IAAI,KAAA;EAC7D;CACF;;;;;CAMA,MAAe,sBACb,UACA,SACA,YACqB;EACrB,MAAM,gBAAgB,KAAK;EAC3B,IACE,KAAK,+BAA+B,QACpC,KAAK,gCAAgC,IAErC,KAAK,QAAQ,KAAK;EAGpB,IAAI;GACF,OAAO,MAAM,MAAM,sBAAsB,UAAU,SAAS,UAAU;EACxE,UAAU;GACR,KAAK,QAAQ;EACf;CACF;;;;;;;;CASA,OAAgB,sBACd,UACA,SACA,YACqC;EACrC,MAAM,EAAE,kBAAkB,mBACxB,0BAA0B,QAAQ;EACpC,MAAM,SAAS,KAAK,iBAAiB,OAAO;EAE5C,IAAI,EAAE,gBAAgB;EACtB,IAAK,QAAoC,gBAAgB,KAAA,GACvD,cAAe,QAAoC;EAKrD,MAAM,UAAU,IAAI,sBAAsB;GACxC,SAHc,KAAK,WAGb;GACN,UAAU;GACV,QAAQ;GACR,GAAI;EACN,CAAC;EAED,MAAM,WAAW,MAAM,KAAK,OAAO,KAAK,SAAS,EAC/C,aAAa,QAAQ,OACvB,CAAC;EAED,IAAI,CAAC,SAAS,QACZ;EAGF,MAAM,mCAAmB,IAAI,IAAY;EACzC,MAAM,sCAAsB,IAAI,IAAY;;;;;;;EAO5C,MAAM,oBACJ,QAAQ,mBAAmB,QAAQ,KAAK,mBAAmB;EAE7D,WAAW,MAAM,SAAS,SAAS,QACjC,IAAI,MAAM,qBAAqB,MAAM;GACnC,MAAM,aAAa,sCACjB,MAAM,iBACR;GACA,IAAI,cAAc,MAAM;IACtB,MAAM,MAAM,MAAM,kBAAkB;IACpC,IAAI,OAAO,MAAM;KACf,iBAAiB,IAAI,GAAG;KACxB,IAAI,MAAM,kBAAkB,OAAO,WAAW,MAC5C,oBAAoB,IAAI,GAAG;IAE/B;IACA,MAAM,KAAK,YAAY,YAAY,gBAAgB;IAKnD,MAAM,YAAY,kBAChB,WAAW,MACX,KAAA,GACA,KAAA,GACA,KAAA,GACA,KAAA,GACA,EAAE,OAAO,WAAW,CACtB;GACF;EACF,OAAO,IAAI,MAAM,qBAAqB,MAAM;GAC1C,MAAM,aAAa,sCACjB,MAAM,iBACR;GAEA,MAAM,MAAM,MAAM,kBAAkB;GACpC,IAAI,OAAO,MACT,iBAAiB,IAAI,GAAG;GAG1B,MAAM,KAAK,YAAY,YAAY,gBAAgB;GAEnD,MAAM,YAAY,kBAChB,WAAW,MACX,KAAA,GACA,KAAA,GACA,KAAA,GACA,KAAA,GACA,EAAE,OAAO,WAAW,CACtB;EACF,OAAO,IAAI,MAAM,YAAY,MAC3B,MAAM,6BAA6B,MAAM,UAAU,EAAE,YAAY,CAAC;OAC7D,IAAI,MAAM,oBAAoB,MAAM;GACzC,MAAM,UAAU,MAAM,iBAAiB;GACvC,IAAI,WAAW,MAAM;IACnB,iBAAiB,IAAI,OAAO;IAC5B,IAAI,qBAAqB,oBAAoB,IAAI,OAAO,GAAG;KAIzD,MAAM,YAAY,+BAA+B,OAAO;KACxD,MAAM;KACN,MAAM,YAAY,kBAChB,UAAU,MACV,KAAA,GACA,KAAA,GACA,KAAA,GACA,KAAA,GACA,EAAE,OAAO,UAAU,CACrB;IACF;GACF;EACF,OACE,MAAM,IAAI,oBAAoB;GAC5B,MAAM;GACN,SAAS,IAAI,eAAe;IAC1B,SAAS;IACT,mBAAmB,EAAE,GAAG,MAAM;GAChC,CAAC;EACH,CAAC;CAGP;;;;;;;;;CAUA,YACE,OACA,kBACqB;EACrB,MAAM,UAAU,MAAM;EACtB,IAAI,EAAE,mBAAmB,iBACvB,OAAO;EAGT,MAAM,WAAW,QAAQ;EACzB,MAAM,aAAa,KAAK,yBAAyB,QAAQ;EACzD,MAAM,mBAAmB,cAAc;EAEvC,IAAI,UAAqC,QAAQ;EACjD,IAAI,kBAAkB;EAEtB,IAAI,MAAM,QAAQ,OAAO,KAAK,cAAc,MAAM;GAChD,UAAU,QAAQ,KAAK,UACrB,OAAO,UAAU,YAAY,EAAE,WAAW,SACtC;IAAE,GAAG;IAAO,OAAO;GAAW,IAC9B,KACN;GACA,kBAAkB;EACpB,OAAO,IACL,OAAO,YAAY,YACnB,YAAY,MACZ,cAAc,QACd,iBAAiB,OAAO,GACxB;GACA,UAAU,CAAC;IAAE,MAAM;IAAQ,MAAM;IAAS,OAAO;GAAW,CAAC;GAC7D,kBAAkB;EACpB;EAEA,IAAI,CAAC,mBAAmB,CAAC,kBACvB,OAAO;EAGT,MAAM,kBAAkB,mBACnB,KAAK,wBAAwB,QAAQ,IACtC;EAEJ,OAAO,IAAI,oBAAoB;GAC7B,MAAM,MAAM;GACZ,SAAS,IAAI,eAAe;IAC1B,GAAG;IACH;IACA,mBAAmB;GACrB,CAAC;GACD,gBAAgB,MAAM;EACxB,CAAC;CACH;;;;;CAMA,yBACE,UACoB;EACpB,IACE,uBAAuB,YACvB,OAAO,SAAS,sBAAsB,UAEtC,OAAO,SAAS;CAGpB;CAEA,wBAAgC,KAAuB;EACrD,IAAI,QAAQ,QAAQ,QAAQ,KAAA,GAC1B,OAAO;EAGT,IAAI,MAAM,QAAQ,GAAG,GACnB,OAAO,IAAI,KAAK,SAAS,KAAK,wBAAwB,IAAI,CAAC;EAG7D,IAAI,OAAO,QAAQ,UAAU;GAC3B,MAAM,UAAmC,CAAC;GAC1C,KAAK,MAAM,CAAC,KAAK,UAAU,OAAO,QAAQ,GAAG,GAC3C,IAAI,QAAQ,qBACV,QAAQ,OAAO,KAAK,wBAAwB,KAAK;GAGrD,OAAO;EACT;EAEA,OAAO;CACT;AACF"}
+{"version":3,"file":"index.mjs","names":[],"sources":["../../../../src/llm/bedrock/index.ts"],"sourcesContent":["/**\n * Optimized ChatBedrockConverse wrapper that fixes content block merging for\n * streaming responses and adds support for latest @langchain/aws features:\n *\n * - Application Inference Profiles (PR #9129)\n * - Service Tiers (Priority/Standard/Flex) (PR #9785) - requires AWS SDK 3.966.0+\n *\n * Bedrock's `@langchain/aws` library does not include an `index` property on content\n * blocks (unlike Anthropic/OpenAI), which causes LangChain's `_mergeLists` to append\n * each streaming chunk as a separate array entry instead of merging by index.\n *\n * This wrapper takes full ownership of the stream by directly interfacing with the\n * AWS SDK client (`this.client`) and using custom handlers from `./utils/` that\n * include `contentBlockIndex` in response_metadata for every delta type. It then\n * promotes `contentBlockIndex` to an `index` property on each content block\n * (mirroring Anthropic's pattern) and strips it from metadata to avoid\n * `_mergeDicts` conflicts.\n *\n * When multiple content block types are present (e.g. reasoning + text), text deltas\n * are promoted from strings to array form with `index` so they merge correctly once\n * the accumulated content is already an array.\n */\n\nimport { ChatBedrockConverse } from '@langchain/aws';\nimport { AIMessageChunk } from '@langchain/core/messages';\nimport { ChatGenerationChunk, ChatResult } from '@langchain/core/outputs';\nimport {\n  ConverseStreamCommand,\n  type GuardrailConfiguration,\n  type GuardrailStreamConfiguration,\n} from '@aws-sdk/client-bedrock-runtime';\nimport type { CallbackManagerForLLMRun } from '@langchain/core/callbacks/manager';\nimport type { BaseMessage, ResponseMetadata } from '@langchain/core/messages';\nimport type { ChatBedrockConverseInput } from '@langchain/aws';\nimport {\n  convertToConverseMessages,\n  createConverseToolUseStopChunk,\n  handleConverseStreamContentBlockStart,\n  handleConverseStreamContentBlockDelta,\n  handleConverseStreamMetadata,\n} from './utils';\nimport { resolvePromptCacheTtl, type PromptCacheTtl } from '@/messages/cache';\nimport { insertBedrockToolCachePoint } from './toolCache';\n\n/**\n * Service tier type for Bedrock invocations.\n * Requires AWS SDK >= 3.966.0 to actually work.\n * @see https://docs.aws.amazon.com/bedrock/latest/userguide/service-tiers-inference.html\n */\nexport type ServiceTierType = 'priority' | 'default' | 'flex' | 'reserved';\n\nexport type CustomGuardrailConfiguration = GuardrailConfiguration &\n  Pick<GuardrailStreamConfiguration, 'streamProcessingMode'>;\n\n/**\n * Extended input interface with additional features:\n * - applicationInferenceProfile: Use an inference profile ARN instead of model ID\n * - serviceTier: Specify service tier (Priority, Standard, Flex, Reserved)\n */\nexport interface CustomChatBedrockConverseInput\n  extends ChatBedrockConverseInput {\n  /**\n   * Enables Bedrock prompt cache checkpoints for message and tool prefixes.\n   */\n  promptCache?: boolean;\n\n  /**\n   * Prompt-cache checkpoint TTL. Defaults to `'1h'` (extended cache) when\n   * `promptCache` is enabled; set `'5m'` for the legacy 5-minute behavior.\n   * Bedrock models that don't support the 1-hour TTL downgrade to 5m\n   * server-side (verified on Sonnet/Opus 4.6), so the default is safe to leave\n   * on; use `'5m'` for any model that rejects it.\n   */\n  promptCacheTtl?: PromptCacheTtl;\n\n  /**\n   * Guardrail configuration for Converse and ConverseStream invocations.\n   * `streamProcessingMode` is only used by ConverseStream.\n   */\n  guardrailConfig?: CustomGuardrailConfiguration;\n\n  /**\n   * Application Inference Profile ARN to use for the model.\n   * For example, \"arn:aws:bedrock:eu-west-1:123456789102:application-inference-profile/fm16bt65tzgx\"\n   * When provided, this ARN will be used for the actual inference calls instead of the model ID.\n   * Must still provide `model` as normal modelId to benefit from all the metadata.\n   * @see https://docs.aws.amazon.com/bedrock/latest/userguide/inference-profiles-create.html\n   */\n  applicationInferenceProfile?: string;\n\n  /**\n   * Service tier for model invocation.\n   * Specifies the processing tier type used for serving the request.\n   * Supported values are 'priority', 'default', 'flex', and 'reserved'.\n   *\n   * - 'priority': Prioritized processing for lower latency\n   * - 'default': Standard processing tier\n   * - 'flex': Flexible processing tier with lower cost\n   * - 'reserved': Reserved capacity for consistent performance\n   *\n   * If not provided, AWS uses the default tier.\n   * Note: Requires AWS SDK >= 3.966.0 to work.\n   * @see https://docs.aws.amazon.com/bedrock/latest/userguide/service-tiers-inference.html\n   */\n  serviceTier?: ServiceTierType;\n}\n\n/**\n * Extended call options with serviceTier override support.\n */\nexport interface CustomChatBedrockConverseCallOptions {\n  serviceTier?: ServiceTierType;\n  guardrailConfig?: CustomGuardrailConfiguration;\n}\n\nexport class CustomChatBedrockConverse extends ChatBedrockConverse {\n  /**\n   * Whether to insert Bedrock prompt cache checkpoints when available.\n   */\n  promptCache?: boolean;\n\n  /**\n   * Prompt-cache checkpoint TTL (`'5m'` legacy or `'1h'` extended cache).\n   */\n  promptCacheTtl?: PromptCacheTtl;\n\n  /**\n   * Application Inference Profile ARN to use instead of model ID.\n   */\n  applicationInferenceProfile?: string;\n\n  /**\n   * Service tier for model invocation.\n   */\n  serviceTier?: ServiceTierType;\n\n  constructor(fields?: CustomChatBedrockConverseInput) {\n    super(fields);\n    this.promptCache = fields?.promptCache;\n    this.promptCacheTtl = fields?.promptCacheTtl;\n    this.applicationInferenceProfile = fields?.applicationInferenceProfile;\n    this.serviceTier = fields?.serviceTier;\n  }\n\n  static lc_name(): string {\n    return 'LibreChatBedrockConverse';\n  }\n\n  /**\n   * Get the model ID to use for API calls.\n   * Returns applicationInferenceProfile if set, otherwise returns this.model.\n   */\n  protected getModelId(): string {\n    return this.applicationInferenceProfile ?? this.model;\n  }\n\n  /**\n   * Override invocationParams to add serviceTier support.\n   */\n  override invocationParams(\n    options?: this['ParsedCallOptions'] & CustomChatBedrockConverseCallOptions\n  ): ReturnType<ChatBedrockConverse['invocationParams']> & {\n    serviceTier?: { type: ServiceTierType };\n  } {\n    const baseParams = super.invocationParams(options);\n    const toolConfig =\n      this.promptCache === true\n        ? insertBedrockToolCachePoint(\n          baseParams.toolConfig,\n          true,\n          resolvePromptCacheTtl(this.promptCacheTtl)\n        )\n        : baseParams.toolConfig;\n\n    /** Service tier from options or fall back to class-level setting */\n    const serviceTierType = options?.serviceTier ?? this.serviceTier;\n\n    return {\n      ...baseParams,\n      toolConfig,\n      serviceTier: serviceTierType ? { type: serviceTierType } : undefined,\n    };\n  }\n\n  /**\n   * Override _generateNonStreaming to use applicationInferenceProfile as modelId.\n   * Uses the same model-swapping pattern as streaming for consistency.\n   */\n  override async _generateNonStreaming(\n    messages: BaseMessage[],\n    options: this['ParsedCallOptions'] & CustomChatBedrockConverseCallOptions,\n    runManager?: CallbackManagerForLLMRun\n  ): Promise<ChatResult> {\n    const originalModel = this.model;\n    if (\n      this.applicationInferenceProfile != null &&\n      this.applicationInferenceProfile !== ''\n    ) {\n      this.model = this.applicationInferenceProfile;\n    }\n\n    try {\n      return await super._generateNonStreaming(messages, options, runManager);\n    } finally {\n      this.model = originalModel;\n    }\n  }\n\n  /**\n   * Own the stream end-to-end so we have direct access to every\n   * `contentBlockDelta.contentBlockIndex` from the AWS SDK.\n   *\n   * This replaces the parent's implementation which strips contentBlockIndex\n   * from text and reasoning deltas, making it impossible to merge correctly.\n   */\n  override async *_streamResponseChunks(\n    messages: BaseMessage[],\n    options: this['ParsedCallOptions'] & CustomChatBedrockConverseCallOptions,\n    runManager?: CallbackManagerForLLMRun\n  ): AsyncGenerator<ChatGenerationChunk> {\n    const { converseMessages, converseSystem } =\n      convertToConverseMessages(messages);\n    const params = this.invocationParams(options);\n\n    let { streamUsage } = this;\n    if ((options as Record<string, unknown>).streamUsage !== undefined) {\n      streamUsage = (options as Record<string, unknown>).streamUsage as boolean;\n    }\n\n    const modelId = this.getModelId();\n\n    const command = new ConverseStreamCommand({\n      modelId,\n      messages: converseMessages,\n      system: converseSystem,\n      ...(params as Record<string, unknown>),\n    });\n\n    const response = await this.client.send(command, {\n      abortSignal: options.signal,\n    });\n\n    if (!response.stream) {\n      return;\n    }\n\n    const seenBlockIndices = new Set<number>();\n    const toolUseBlockIndices = new Set<number>();\n    /**\n     * Guardrails can reject an already-streamed toolUse block at\n     * `messageStop` (`guardrail_intervened`), after `contentBlockStop` has\n     * passed. Only emit eager-execution seals when no guardrails are\n     * configured, so a later intervention can't race an eagerly started tool.\n     */\n    const sealToolUseOnStop =\n      options.guardrailConfig == null && this.guardrailConfig == null;\n\n    for await (const event of response.stream) {\n      if (event.contentBlockStart != null) {\n        const startChunk = handleConverseStreamContentBlockStart(\n          event.contentBlockStart\n        );\n        if (startChunk != null) {\n          const idx = event.contentBlockStart.contentBlockIndex;\n          if (idx != null) {\n            seenBlockIndices.add(idx);\n            if (event.contentBlockStart.start?.toolUse != null) {\n              toolUseBlockIndices.add(idx);\n            }\n          }\n          yield this.enrichChunk(startChunk, seenBlockIndices);\n\n          // Registered stream handlers receive chunks through callback\n          // events, not the yielded generator — dispatch the start chunk so\n          // they see the tool call's id/name (eager chunk state needs both).\n          await runManager?.handleLLMNewToken(\n            startChunk.text,\n            undefined,\n            undefined,\n            undefined,\n            undefined,\n            { chunk: startChunk }\n          );\n        }\n      } else if (event.contentBlockDelta != null) {\n        const deltaChunk = handleConverseStreamContentBlockDelta(\n          event.contentBlockDelta\n        );\n\n        const idx = event.contentBlockDelta.contentBlockIndex;\n        if (idx != null) {\n          seenBlockIndices.add(idx);\n        }\n\n        yield this.enrichChunk(deltaChunk, seenBlockIndices);\n\n        await runManager?.handleLLMNewToken(\n          deltaChunk.text,\n          undefined,\n          undefined,\n          undefined,\n          undefined,\n          { chunk: deltaChunk }\n        );\n      } else if (event.metadata != null) {\n        yield handleConverseStreamMetadata(event.metadata, { streamUsage });\n      } else if (event.contentBlockStop != null) {\n        const stopIdx = event.contentBlockStop.contentBlockIndex;\n        if (stopIdx != null) {\n          seenBlockIndices.add(stopIdx);\n          if (sealToolUseOnStop && toolUseBlockIndices.has(stopIdx)) {\n            // Converse guarantees the block's input is complete at stop, so\n            // emit an explicit seal chunk for eager tool execution — through\n            // the callback path too, for registered stream handlers.\n            const sealChunk = createConverseToolUseStopChunk(stopIdx);\n            yield sealChunk;\n            await runManager?.handleLLMNewToken(\n              sealChunk.text,\n              undefined,\n              undefined,\n              undefined,\n              undefined,\n              { chunk: sealChunk }\n            );\n          }\n        }\n      } else {\n        yield new ChatGenerationChunk({\n          text: '',\n          message: new AIMessageChunk({\n            content: '',\n            response_metadata: { ...event } as ResponseMetadata,\n          }),\n        });\n      }\n    }\n  }\n\n  /**\n   * Inject `index` on content blocks for proper merge behaviour, then strip\n   * `contentBlockIndex` from response_metadata to prevent `_mergeDicts` conflicts.\n   *\n   * Text string content is promoted to array form only when the stream contains\n   * multiple content block indices (e.g. reasoning at index 0, text at index 1),\n   * ensuring text merges correctly with the already-array accumulated content.\n   */\n  private enrichChunk(\n    chunk: ChatGenerationChunk,\n    seenBlockIndices: Set<number>\n  ): ChatGenerationChunk {\n    const message = chunk.message;\n    if (!(message instanceof AIMessageChunk)) {\n      return chunk;\n    }\n\n    const metadata = message.response_metadata as Record<string, unknown>;\n    const blockIndex = this.extractContentBlockIndex(metadata);\n    const hasMetadataIndex = blockIndex != null;\n\n    let content: AIMessageChunk['content'] = message.content;\n    let contentModified = false;\n\n    if (Array.isArray(content) && blockIndex != null) {\n      content = content.map((block) =>\n        typeof block === 'object' && !('index' in block)\n          ? { ...block, index: blockIndex }\n          : block\n      );\n      contentModified = true;\n    } else if (\n      typeof content === 'string' &&\n      content !== '' &&\n      blockIndex != null &&\n      seenBlockIndices.size > 1\n    ) {\n      content = [{ type: 'text', text: content, index: blockIndex }];\n      contentModified = true;\n    }\n\n    if (!contentModified && !hasMetadataIndex) {\n      return chunk;\n    }\n\n    const cleanedMetadata = hasMetadataIndex\n      ? (this.removeContentBlockIndex(metadata) as Record<string, unknown>)\n      : metadata;\n\n    return new ChatGenerationChunk({\n      text: chunk.text,\n      message: new AIMessageChunk({\n        ...message,\n        content,\n        response_metadata: cleanedMetadata,\n      }),\n      generationInfo: chunk.generationInfo,\n    });\n  }\n\n  /**\n   * Extract `contentBlockIndex` from the top level of response_metadata.\n   * Our custom handlers always place it at the top level.\n   */\n  private extractContentBlockIndex(\n    metadata: Record<string, unknown>\n  ): number | undefined {\n    if (\n      'contentBlockIndex' in metadata &&\n      typeof metadata.contentBlockIndex === 'number'\n    ) {\n      return metadata.contentBlockIndex;\n    }\n    return undefined;\n  }\n\n  private removeContentBlockIndex(obj: unknown): unknown {\n    if (obj === null || obj === undefined) {\n      return obj;\n    }\n\n    if (Array.isArray(obj)) {\n      return obj.map((item) => this.removeContentBlockIndex(item));\n    }\n\n    if (typeof obj === 'object') {\n      const cleaned: Record<string, unknown> = {};\n      for (const [key, value] of Object.entries(obj)) {\n        if (key !== 'contentBlockIndex') {\n          cleaned[key] = this.removeContentBlockIndex(value);\n        }\n      }\n      return cleaned;\n    }\n\n    return obj;\n  }\n}\n\nexport type { ChatBedrockConverseInput };\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAmHA,IAAa,4BAAb,cAA+C,oBAAoB;;;;CAIjE;;;;CAKA;;;;CAKA;;;;CAKA;CAEA,YAAY,QAAyC;EACnD,MAAM,MAAM;EACZ,KAAK,cAAc,QAAQ;EAC3B,KAAK,iBAAiB,QAAQ;EAC9B,KAAK,8BAA8B,QAAQ;EAC3C,KAAK,cAAc,QAAQ;CAC7B;CAEA,OAAO,UAAkB;EACvB,OAAO;CACT;;;;;CAMA,aAA+B;EAC7B,OAAO,KAAK,+BAA+B,KAAK;CAClD;;;;CAKA,iBACE,SAGA;EACA,MAAM,aAAa,MAAM,iBAAiB,OAAO;EACjD,MAAM,aACJ,KAAK,gBAAgB,OACjB,4BACA,WAAW,YACX,MACA,sBAAsB,KAAK,cAAc,CAC3C,IACE,WAAW;;EAGjB,MAAM,kBAAkB,SAAS,eAAe,KAAK;EAErD,OAAO;GACL,GAAG;GACH;GACA,aAAa,kBAAkB,EAAE,MAAM,gBAAgB,IAAI,KAAA;EAC7D;CACF;;;;;CAMA,MAAe,sBACb,UACA,SACA,YACqB;EACrB,MAAM,gBAAgB,KAAK;EAC3B,IACE,KAAK,+BAA+B,QACpC,KAAK,gCAAgC,IAErC,KAAK,QAAQ,KAAK;EAGpB,IAAI;GACF,OAAO,MAAM,MAAM,sBAAsB,UAAU,SAAS,UAAU;EACxE,UAAU;GACR,KAAK,QAAQ;EACf;CACF;;;;;;;;CASA,OAAgB,sBACd,UACA,SACA,YACqC;EACrC,MAAM,EAAE,kBAAkB,mBACxB,0BAA0B,QAAQ;EACpC,MAAM,SAAS,KAAK,iBAAiB,OAAO;EAE5C,IAAI,EAAE,gBAAgB;EACtB,IAAK,QAAoC,gBAAgB,KAAA,GACvD,cAAe,QAAoC;EAKrD,MAAM,UAAU,IAAI,sBAAsB;GACxC,SAHc,KAAK,WAGb;GACN,UAAU;GACV,QAAQ;GACR,GAAI;EACN,CAAC;EAED,MAAM,WAAW,MAAM,KAAK,OAAO,KAAK,SAAS,EAC/C,aAAa,QAAQ,OACvB,CAAC;EAED,IAAI,CAAC,SAAS,QACZ;EAGF,MAAM,mCAAmB,IAAI,IAAY;EACzC,MAAM,sCAAsB,IAAI,IAAY;;;;;;;EAO5C,MAAM,oBACJ,QAAQ,mBAAmB,QAAQ,KAAK,mBAAmB;EAE7D,WAAW,MAAM,SAAS,SAAS,QACjC,IAAI,MAAM,qBAAqB,MAAM;GACnC,MAAM,aAAa,sCACjB,MAAM,iBACR;GACA,IAAI,cAAc,MAAM;IACtB,MAAM,MAAM,MAAM,kBAAkB;IACpC,IAAI,OAAO,MAAM;KACf,iBAAiB,IAAI,GAAG;KACxB,IAAI,MAAM,kBAAkB,OAAO,WAAW,MAC5C,oBAAoB,IAAI,GAAG;IAE/B;IACA,MAAM,KAAK,YAAY,YAAY,gBAAgB;IAKnD,MAAM,YAAY,kBAChB,WAAW,MACX,KAAA,GACA,KAAA,GACA,KAAA,GACA,KAAA,GACA,EAAE,OAAO,WAAW,CACtB;GACF;EACF,OAAO,IAAI,MAAM,qBAAqB,MAAM;GAC1C,MAAM,aAAa,sCACjB,MAAM,iBACR;GAEA,MAAM,MAAM,MAAM,kBAAkB;GACpC,IAAI,OAAO,MACT,iBAAiB,IAAI,GAAG;GAG1B,MAAM,KAAK,YAAY,YAAY,gBAAgB;GAEnD,MAAM,YAAY,kBAChB,WAAW,MACX,KAAA,GACA,KAAA,GACA,KAAA,GACA,KAAA,GACA,EAAE,OAAO,WAAW,CACtB;EACF,OAAO,IAAI,MAAM,YAAY,MAC3B,MAAM,6BAA6B,MAAM,UAAU,EAAE,YAAY,CAAC;OAC7D,IAAI,MAAM,oBAAoB,MAAM;GACzC,MAAM,UAAU,MAAM,iBAAiB;GACvC,IAAI,WAAW,MAAM;IACnB,iBAAiB,IAAI,OAAO;IAC5B,IAAI,qBAAqB,oBAAoB,IAAI,OAAO,GAAG;KAIzD,MAAM,YAAY,+BAA+B,OAAO;KACxD,MAAM;KACN,MAAM,YAAY,kBAChB,UAAU,MACV,KAAA,GACA,KAAA,GACA,KAAA,GACA,KAAA,GACA,EAAE,OAAO,UAAU,CACrB;IACF;GACF;EACF,OACE,MAAM,IAAI,oBAAoB;GAC5B,MAAM;GACN,SAAS,IAAI,eAAe;IAC1B,SAAS;IACT,mBAAmB,EAAE,GAAG,MAAM;GAChC,CAAC;EACH,CAAC;CAGP;;;;;;;;;CAUA,YACE,OACA,kBACqB;EACrB,MAAM,UAAU,MAAM;EACtB,IAAI,EAAE,mBAAmB,iBACvB,OAAO;EAGT,MAAM,WAAW,QAAQ;EACzB,MAAM,aAAa,KAAK,yBAAyB,QAAQ;EACzD,MAAM,mBAAmB,cAAc;EAEvC,IAAI,UAAqC,QAAQ;EACjD,IAAI,kBAAkB;EAEtB,IAAI,MAAM,QAAQ,OAAO,KAAK,cAAc,MAAM;GAChD,UAAU,QAAQ,KAAK,UACrB,OAAO,UAAU,YAAY,EAAE,WAAW,SACtC;IAAE,GAAG;IAAO,OAAO;GAAW,IAC9B,KACN;GACA,kBAAkB;EACpB,OAAO,IACL,OAAO,YAAY,YACnB,YAAY,MACZ,cAAc,QACd,iBAAiB,OAAO,GACxB;GACA,UAAU,CAAC;IAAE,MAAM;IAAQ,MAAM;IAAS,OAAO;GAAW,CAAC;GAC7D,kBAAkB;EACpB;EAEA,IAAI,CAAC,mBAAmB,CAAC,kBACvB,OAAO;EAGT,MAAM,kBAAkB,mBACnB,KAAK,wBAAwB,QAAQ,IACtC;EAEJ,OAAO,IAAI,oBAAoB;GAC7B,MAAM,MAAM;GACZ,SAAS,IAAI,eAAe;IAC1B,GAAG;IACH;IACA,mBAAmB;GACrB,CAAC;GACD,gBAAgB,MAAM;EACxB,CAAC;CACH;;;;;CAMA,yBACE,UACoB;EACpB,IACE,uBAAuB,YACvB,OAAO,SAAS,sBAAsB,UAEtC,OAAO,SAAS;CAGpB;CAEA,wBAAgC,KAAuB;EACrD,IAAI,QAAQ,QAAQ,QAAQ,KAAA,GAC1B,OAAO;EAGT,IAAI,MAAM,QAAQ,GAAG,GACnB,OAAO,IAAI,KAAK,SAAS,KAAK,wBAAwB,IAAI,CAAC;EAG7D,IAAI,OAAO,QAAQ,UAAU;GAC3B,MAAM,UAAmC,CAAC;GAC1C,KAAK,MAAM,CAAC,KAAK,UAAU,OAAO,QAAQ,GAAG,GAC3C,IAAI,QAAQ,qBACV,QAAQ,OAAO,KAAK,wBAAwB,KAAK;GAGrD,OAAO;EACT;EAEA,OAAO;CACT;AACF"}

package/dist/esm/llm/bedrock/toolCache.mjs

@@ -1,6 +1,6 @@
+import { buildBedrockCachePoint } from "../../messages/cache.mjs";
 import { _convertToOpenAITool } from "../openai/index.mjs";
 //#region src/llm/bedrock/toolCache.ts
-const CACHE_POINT = { cachePoint: { type: "default" } };
 const BEDROCK_TOOL_CACHE_MARKER = "__lc_bedrock_cache_point_after";
 const BEDROCK_TOOL_CACHE_DISABLED_MARKER = "__lc_bedrock_skip_tool_cache";
 function isBedrockToolSpec(tool) {
@@ -63,9 +63,10 @@ function partitionAndMarkBedrockToolCache(tools, isDeferred) {
 	staticTools[staticTools.length - 1] = markCachePointAfter(staticTools[staticTools.length - 1]);
 	return [...staticTools, ...deferredTools];
 }
-function insertBedrockToolCachePoint(toolConfig, fallbackToEnd) {
+function insertBedrockToolCachePoint(toolConfig, fallbackToEnd, ttl) {
 	const tools = toolConfig?.tools;
 	if (tools == null || tools.length === 0) return toolConfig;
+	const cachePoint = { cachePoint: buildBedrockCachePoint(ttl) };
 	let markerIndex = -1;
 	let hasCachePoint = false;
 	let hasDisabledMarker = false;
@@ -74,7 +75,7 @@ function insertBedrockToolCachePoint(toolConfig, fallbackToEnd) {
 		const tool = tools[i];
 		if (isBedrockCachePoint(tool)) {
 			hasCachePoint = true;
-			cleanedTools.push(tool);
+			cleanedTools.push(cachePoint);
 			continue;
 		}
 		if (tool[BEDROCK_TOOL_CACHE_MARKER] === true) markerIndex = cleanedTools.length;
@@ -94,7 +95,7 @@ function insertBedrockToolCachePoint(toolConfig, fallbackToEnd) {
 		...toolConfig,
 		tools: [
 			...cleanedTools.slice(0, insertionIndex + 1),
-			CACHE_POINT,
+			cachePoint,
 			...cleanedTools.slice(insertionIndex + 1)
 		]
 	};