@librechat/agents 3.2.55 → 3.2.57

package/src/types/tools.ts

@@ -38,6 +38,16 @@ export type EagerEventToolExecutionConfig = {
    * ToolMessages so provider message ordering is preserved.
    */
   enabled?: boolean;
+  /**
+   * Tool names that must never be started eagerly. Eager execution
+   * speculates on tool args before the model turn commits, so
+   * side-effecting tools (e.g. file writes) should opt out: a
+   * speculative write can land even if the turn is superseded, and a
+   * later arg revision would otherwise trip the "changed after eager
+   * execution" guard. Excluded calls fall through to normal ToolNode
+   * execution with final args.
+   */
+  excludeToolNames?: string[];
 };
 
 export type EagerEventToolExecutionOutcome =
@@ -100,6 +110,12 @@ export type ToolNodeOptions = {
   directToolNames?: Set<string>;
   /** Opt-in eager execution for event-driven tool calls. */
   eagerEventToolExecution?: EagerEventToolExecutionConfig;
+  /**
+   * Host tool names that write to the code-execution sandbox but are not
+   * built-in `CODE_EXECUTION_TOOLS`. Their exec `session_id` is folded into the
+   * shared code session so later bash_tool/execute_code calls see written files.
+   */
+  codeSessionToolNames?: string[];
   /** Shared per-run eager execution registry populated by the stream handler. */
   eagerEventToolExecutions?: Map<string, EagerEventToolExecution>;
   /** Shared per-run per-tool turn counter used by eager and normal event dispatch. */