@librechat/agents 3.4.0 → 3.4.1

package/dist/cjs/tools/subagent/SubagentReplay.cjs

@@ -0,0 +1,175 @@
+//#region src/tools/subagent/SubagentReplay.ts
+const SUBAGENT_RESUME_MANIFEST_CONFIG_KEY = "__librechat_subagent_resume_manifest";
+const SUBAGENT_RESUME_ATTEMPT_CONFIG_KEY = "__librechat_subagent_resume_attempt";
+const SUBAGENT_PARENT_BATCH_CONFIG_KEY = "__librechat_subagent_parent_batch";
+const SUBAGENT_RESUME_MANIFEST_PAYLOAD_KEY = "__librechat_subagent_resume_manifest";
+const SUBAGENT_RESUME_WRAPPED_PAYLOAD_KEY = "__librechat_subagent_resume_payload";
+const SUBAGENT_RESUME_WRAPPER_VERSION_KEY = "__librechat_subagent_resume_wrapper";
+const SUBAGENT_RESUME_PRIVATE_PAYLOAD_KEYS = [
+	SUBAGENT_RESUME_MANIFEST_PAYLOAD_KEY,
+	SUBAGENT_RESUME_WRAPPED_PAYLOAD_KEY,
+	SUBAGENT_RESUME_WRAPPER_VERSION_KEY
+];
+const MAX_RESUME_MANIFEST_DEPTH = 32;
+function isString(value) {
+	return typeof value === "string" && value.length > 0;
+}
+function isNonnegativeInteger(value) {
+	return typeof value === "number" && Number.isSafeInteger(value) && value >= 0;
+}
+function isApprovalReplaySnapshot(value) {
+	if (value == null || typeof value !== "object") return false;
+	const snapshot = value;
+	const key = snapshot.key;
+	const result = snapshot.result;
+	return key != null && isString(key.executionScope) && typeof key.agentId === "string" && isString(key.toolUseId) && result != null && result.decision === "ask" && Array.isArray(result.additionalContexts) && Array.isArray(result.injectedMessages) && Array.isArray(result.errors);
+}
+function isCheckpointReference(value) {
+	if (value == null || typeof value !== "object") return false;
+	const checkpoint = value;
+	return isString(checkpoint.threadId) && isString(checkpoint.checkpointId) && typeof checkpoint.checkpointNs === "string";
+}
+function isToolCallStepReference(value) {
+	if (value == null || typeof value !== "object") return false;
+	const reference = value;
+	return isString(reference.toolCallId) && isString(reference.stepId);
+}
+function isToolSessionReference(value) {
+	if (value == null || typeof value !== "object") return false;
+	const reference = value;
+	const context = reference.context;
+	return isString(reference.toolName) && context != null && typeof context === "object" && isString(context.session_id) && Number.isFinite(context.lastUpdated) && (context.files == null || Array.isArray(context.files));
+}
+function isToolUsageCountReference(value) {
+	if (value == null || typeof value !== "object") return false;
+	const entry = value;
+	return isString(entry.toolName) && isNonnegativeInteger(entry.count);
+}
+function isDirectPathTurnReference(value) {
+	if (value == null || typeof value !== "object") return false;
+	const entry = value;
+	return isString(entry.toolCallId) && isNonnegativeInteger(entry.turn);
+}
+function isToolNodeResumeState(value) {
+	if (value == null || typeof value !== "object") return false;
+	const state = value;
+	if (!isString(state.stateKey) || !Array.isArray(state.toolUsageCounts) || !Array.isArray(state.directPathTurns)) return false;
+	const validUsageCounts = state.toolUsageCounts.every(isToolUsageCountReference);
+	const validDirectTurns = state.directPathTurns.every(isDirectPathTurnReference);
+	if (!validUsageCounts || !validDirectTurns) return false;
+	const usageToolNames = new Set(state.toolUsageCounts.map((entry) => entry.toolName));
+	const directToolCallIds = new Set(state.directPathTurns.map((entry) => entry.toolCallId));
+	return usageToolNames.size === state.toolUsageCounts.length && directToolCallIds.size === state.directPathTurns.length;
+}
+function isEagerToolUsageState(value) {
+	if (value == null || typeof value !== "object") return false;
+	const state = value;
+	if (typeof state.agentId !== "string" || !Array.isArray(state.toolUsageCounts) || !state.toolUsageCounts.every(isToolUsageCountReference)) return false;
+	return new Set(state.toolUsageCounts.map((entry) => entry.toolName)).size === state.toolUsageCounts.length;
+}
+function isToolOutputReferenceEntry(value) {
+	if (value == null || typeof value !== "object") return false;
+	const entry = value;
+	return isString(entry.key) && typeof entry.value === "string";
+}
+function isToolOutputReferenceState(value) {
+	if (value == null || typeof value !== "object") return false;
+	const state = value;
+	if (!Array.isArray(state.entries) || !state.entries.every(isToolOutputReferenceEntry) || !isNonnegativeInteger(state.turnCounter) || !Array.isArray(state.warnedNonStringTools) || !state.warnedNonStringTools.every(isString)) return false;
+	const entryKeys = new Set(state.entries.map((entry) => entry.key));
+	const warnedTools = new Set(state.warnedNonStringTools);
+	return entryKeys.size === state.entries.length && warnedTools.size === state.warnedNonStringTools.length;
+}
+function isGraphResumeState(value) {
+	if (value == null || typeof value !== "object") return false;
+	const state = value;
+	if (!Array.isArray(state.toolCallSteps) || !state.toolCallSteps.every(isToolCallStepReference) || !Array.isArray(state.toolSessions) || !state.toolSessions.every(isToolSessionReference) || !Array.isArray(state.toolNodes) || !state.toolNodes.every(isToolNodeResumeState) || !Array.isArray(state.eagerToolUsage) || !state.eagerToolUsage.every(isEagerToolUsageState) || !Array.isArray(state.eagerToolSuppressions) || !state.eagerToolSuppressions.every(isString) || state.toolOutputReferences != null && !isToolOutputReferenceState(state.toolOutputReferences)) return false;
+	const toolCallIds = new Set(state.toolCallSteps.map((reference) => reference.toolCallId));
+	const toolNames = new Set(state.toolSessions.map((reference) => reference.toolName));
+	const toolNodeKeys = new Set(state.toolNodes.map((node) => node.stateKey));
+	const eagerAgentIds = new Set(state.eagerToolUsage.map((usage) => usage.agentId));
+	const eagerSuppressions = new Set(state.eagerToolSuppressions);
+	return toolCallIds.size === state.toolCallSteps.length && toolNames.size === state.toolSessions.length && toolNodeKeys.size === state.toolNodes.length && eagerAgentIds.size === state.eagerToolUsage.length && eagerSuppressions.size === state.eagerToolSuppressions.length;
+}
+function isSubagentResumeExecution(value, seen, depth) {
+	if (value == null || typeof value !== "object") return false;
+	const execution = value;
+	const childRunId = execution.childRunId;
+	const approvalExecutionScope = execution.approvalExecutionScope;
+	const checkpoints = execution.checkpoints;
+	const graphState = execution.graphState;
+	const approvalReplays = execution.approvalReplays;
+	if (!isString(execution.parentToolCallId) || !isString(childRunId) || !isString(approvalExecutionScope) || !Array.isArray(checkpoints) || checkpoints.length === 0 || !checkpoints.every(isCheckpointReference) || !isGraphResumeState(graphState) || !Array.isArray(approvalReplays)) return false;
+	const checkpointThreadId = checkpoints[0].threadId;
+	const checkpointNamespaces = new Set(checkpoints.map((checkpoint) => checkpoint.checkpointNs));
+	if (!approvalReplays.every((snapshot) => isApprovalReplaySnapshot(snapshot) && snapshot.key.executionScope === approvalExecutionScope)) return false;
+	const approvalKeys = new Set(approvalReplays.map((snapshot) => JSON.stringify([
+		snapshot.key.executionScope,
+		snapshot.key.agentId,
+		snapshot.key.toolUseId
+	])));
+	return checkpoints.every((checkpoint) => checkpoint.threadId === checkpointThreadId) && checkpointNamespaces.size === checkpoints.length && approvalKeys.size === approvalReplays.length && (execution.descendant == null || isSubagentResumeManifest(execution.descendant, seen, depth + 1));
+}
+function isSubagentResumeManifest(value, seen = /* @__PURE__ */ new Set(), depth = 0) {
+	if (value == null || typeof value !== "object" || depth > MAX_RESUME_MANIFEST_DEPTH || seen.has(value)) return false;
+	seen.add(value);
+	const manifest = value;
+	if (manifest.version !== 1 || !Array.isArray(manifest.executions) || manifest.executions.length === 0 || !manifest.executions.every((execution) => isSubagentResumeExecution(execution, seen, depth))) return false;
+	return new Set(manifest.executions.map((execution) => execution.parentToolCallId)).size === manifest.executions.length;
+}
+function getSubagentResumeManifest(payload) {
+	if (payload == null || typeof payload !== "object") return;
+	if (!Object.prototype.hasOwnProperty.call(payload, SUBAGENT_RESUME_MANIFEST_PAYLOAD_KEY)) return;
+	const manifest = payload[SUBAGENT_RESUME_MANIFEST_PAYLOAD_KEY];
+	return isSubagentResumeManifest(manifest) ? manifest : void 0;
+}
+function requireValidSubagentResumeManifest(payload) {
+	if (payload == null || typeof payload !== "object" || !Object.prototype.hasOwnProperty.call(payload, SUBAGENT_RESUME_MANIFEST_PAYLOAD_KEY)) return;
+	const manifest = getSubagentResumeManifest(payload);
+	if (manifest == null) throw new Error("Invalid subagent resume manifest.");
+	return manifest;
+}
+function canAttachSubagentResumeManifestInline(payload) {
+	if (payload == null || typeof payload !== "object" || Array.isArray(payload) || Object.getPrototypeOf(payload) !== Object.prototype) return false;
+	return SUBAGENT_RESUME_PRIVATE_PAYLOAD_KEYS.every((key) => !Object.prototype.hasOwnProperty.call(payload, key));
+}
+function isInlineSubagentResumePayload(payload) {
+	return payload != null && typeof payload === "object" && !Array.isArray(payload) && Object.getPrototypeOf(payload) === Object.prototype && !Object.prototype.hasOwnProperty.call(payload, SUBAGENT_RESUME_WRAPPER_VERSION_KEY) && !Object.prototype.hasOwnProperty.call(payload, SUBAGENT_RESUME_WRAPPED_PAYLOAD_KEY) && getSubagentResumeManifest(payload) != null;
+}
+function attachSubagentResumeManifest(payload, manifest) {
+	if (isWrappedSubagentResumePayload(payload) || isInlineSubagentResumePayload(payload)) return {
+		...payload,
+		[SUBAGENT_RESUME_MANIFEST_PAYLOAD_KEY]: manifest
+	};
+	if (!canAttachSubagentResumeManifestInline(payload)) return {
+		[SUBAGENT_RESUME_WRAPPER_VERSION_KEY]: 1,
+		[SUBAGENT_RESUME_WRAPPED_PAYLOAD_KEY]: payload,
+		[SUBAGENT_RESUME_MANIFEST_PAYLOAD_KEY]: manifest
+	};
+	return {
+		...payload,
+		[SUBAGENT_RESUME_MANIFEST_PAYLOAD_KEY]: manifest
+	};
+}
+function stripSubagentResumeManifest(payload) {
+	if (isWrappedSubagentResumePayload(payload)) return payload[SUBAGENT_RESUME_WRAPPED_PAYLOAD_KEY];
+	if (payload == null || typeof payload !== "object" || getSubagentResumeManifest(payload) == null) return payload;
+	return Object.fromEntries(Object.entries(payload).filter(([key]) => key !== SUBAGENT_RESUME_MANIFEST_PAYLOAD_KEY));
+}
+function isWrappedSubagentResumePayload(payload) {
+	if (payload == null || typeof payload !== "object" || Array.isArray(payload) || Object.getPrototypeOf(payload) !== Object.prototype || Object.keys(payload).length !== SUBAGENT_RESUME_PRIVATE_PAYLOAD_KEYS.length) return false;
+	const wrapper = payload;
+	return wrapper[SUBAGENT_RESUME_WRAPPER_VERSION_KEY] === 1 && Object.prototype.hasOwnProperty.call(wrapper, SUBAGENT_RESUME_WRAPPED_PAYLOAD_KEY) && getSubagentResumeManifest(wrapper) != null;
+}
+const SUBAGENT_REPLAY_CONTROLLER = Symbol.for("@librechat/agents/subagent-replay-controller");
+//#endregion
+exports.SUBAGENT_PARENT_BATCH_CONFIG_KEY = SUBAGENT_PARENT_BATCH_CONFIG_KEY;
+exports.SUBAGENT_REPLAY_CONTROLLER = SUBAGENT_REPLAY_CONTROLLER;
+exports.SUBAGENT_RESUME_ATTEMPT_CONFIG_KEY = SUBAGENT_RESUME_ATTEMPT_CONFIG_KEY;
+exports.SUBAGENT_RESUME_MANIFEST_CONFIG_KEY = SUBAGENT_RESUME_MANIFEST_CONFIG_KEY;
+exports.attachSubagentResumeManifest = attachSubagentResumeManifest;
+exports.getSubagentResumeManifest = getSubagentResumeManifest;
+exports.requireValidSubagentResumeManifest = requireValidSubagentResumeManifest;
+exports.stripSubagentResumeManifest = stripSubagentResumeManifest;
+
+//# sourceMappingURL=SubagentReplay.cjs.map

package/dist/cjs/tools/subagent/SubagentReplay.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"SubagentReplay.cjs","names":[],"sources":["../../../../src/tools/subagent/SubagentReplay.ts"],"sourcesContent":["import type { ToolCall, ToolMessage } from '@langchain/core/messages/tool';\nimport type { RunnableConfig } from '@langchain/core/runnables';\nimport type { ToolOutputReferenceState } from '@/tools/toolOutputReferences';\nimport type { ToolApprovalReplaySnapshot } from '@/hooks';\nimport type { ToolSessionContext } from '@/types';\n\nexport const SUBAGENT_RESUME_MANIFEST_CONFIG_KEY =\n  '__librechat_subagent_resume_manifest';\nexport const SUBAGENT_RESUME_ATTEMPT_CONFIG_KEY =\n  '__librechat_subagent_resume_attempt';\nexport const SUBAGENT_PARENT_BATCH_CONFIG_KEY =\n  '__librechat_subagent_parent_batch';\n\nconst SUBAGENT_RESUME_MANIFEST_PAYLOAD_KEY =\n  '__librechat_subagent_resume_manifest';\nconst SUBAGENT_RESUME_WRAPPED_PAYLOAD_KEY =\n  '__librechat_subagent_resume_payload';\nconst SUBAGENT_RESUME_WRAPPER_VERSION_KEY =\n  '__librechat_subagent_resume_wrapper';\nconst SUBAGENT_RESUME_PRIVATE_PAYLOAD_KEYS = [\n  SUBAGENT_RESUME_MANIFEST_PAYLOAD_KEY,\n  SUBAGENT_RESUME_WRAPPED_PAYLOAD_KEY,\n  SUBAGENT_RESUME_WRAPPER_VERSION_KEY,\n] as const;\nconst MAX_RESUME_MANIFEST_DEPTH = 32;\n\nexport interface SubagentCheckpointReference {\n  threadId: string;\n  checkpointId: string;\n  checkpointNs: string;\n}\n\nexport interface SubagentToolCallStepReference {\n  toolCallId: string;\n  stepId: string;\n}\n\nexport interface SubagentToolSessionReference {\n  toolName: string;\n  context: ToolSessionContext;\n}\n\nexport interface SubagentToolNodeResumeState {\n  stateKey: string;\n  toolUsageCounts: Array<{ toolName: string; count: number }>;\n  directPathTurns: Array<{ toolCallId: string; turn: number }>;\n}\n\nexport interface SubagentEagerToolUsageState {\n  agentId: string;\n  toolUsageCounts: Array<{ toolName: string; count: number }>;\n}\n\nexport interface SubagentGraphResumeState {\n  toolCallSteps: SubagentToolCallStepReference[];\n  toolSessions: SubagentToolSessionReference[];\n  toolNodes: SubagentToolNodeResumeState[];\n  eagerToolUsage: SubagentEagerToolUsageState[];\n  eagerToolSuppressions: string[];\n  toolOutputReferences?: ToolOutputReferenceState;\n}\n\n/** Private checkpoint payload linking a parent pause to an exact child state. */\nexport interface SubagentResumeExecution {\n  parentToolCallId: string;\n  childRunId: string;\n  approvalExecutionScope: string;\n  checkpoints: SubagentCheckpointReference[];\n  graphState: SubagentGraphResumeState;\n  approvalReplays: ToolApprovalReplaySnapshot[];\n  descendant?: SubagentResumeManifest;\n}\n\n/** Private checkpoint payload linking a parent pause to every child state. */\nexport interface SubagentResumeManifest {\n  version: 1;\n  executions: SubagentResumeExecution[];\n}\n\ntype PayloadWithSubagentResumeManifest = {\n  [SUBAGENT_RESUME_MANIFEST_PAYLOAD_KEY]?: unknown;\n};\n\ntype WrappedSubagentResumePayload = PayloadWithSubagentResumeManifest & {\n  [SUBAGENT_RESUME_WRAPPER_VERSION_KEY]: 1;\n  [SUBAGENT_RESUME_WRAPPED_PAYLOAD_KEY]: unknown;\n};\n\nfunction isString(value: unknown): value is string {\n  return typeof value === 'string' && value.length > 0;\n}\n\nfunction isNonnegativeInteger(value: unknown): value is number {\n  return typeof value === 'number' && Number.isSafeInteger(value) && value >= 0;\n}\n\nfunction isApprovalReplaySnapshot(\n  value: unknown\n): value is ToolApprovalReplaySnapshot {\n  if (value == null || typeof value !== 'object') {\n    return false;\n  }\n  const snapshot = value as Partial<ToolApprovalReplaySnapshot>;\n  const key = snapshot.key;\n  const result = snapshot.result;\n  return (\n    key != null &&\n    isString(key.executionScope) &&\n    typeof key.agentId === 'string' &&\n    isString(key.toolUseId) &&\n    result != null &&\n    result.decision === 'ask' &&\n    Array.isArray(result.additionalContexts) &&\n    Array.isArray(result.injectedMessages) &&\n    Array.isArray(result.errors)\n  );\n}\n\nfunction isCheckpointReference(\n  value: unknown\n): value is SubagentCheckpointReference {\n  if (value == null || typeof value !== 'object') {\n    return false;\n  }\n  const checkpoint = value as Partial<SubagentCheckpointReference>;\n  return (\n    isString(checkpoint.threadId) &&\n    isString(checkpoint.checkpointId) &&\n    typeof checkpoint.checkpointNs === 'string'\n  );\n}\n\nfunction isToolCallStepReference(\n  value: unknown\n): value is SubagentToolCallStepReference {\n  if (value == null || typeof value !== 'object') {\n    return false;\n  }\n  const reference = value as Partial<SubagentToolCallStepReference>;\n  return isString(reference.toolCallId) && isString(reference.stepId);\n}\n\nfunction isToolSessionReference(\n  value: unknown\n): value is SubagentToolSessionReference {\n  if (value == null || typeof value !== 'object') {\n    return false;\n  }\n  const reference = value as Partial<SubagentToolSessionReference>;\n  const context = reference.context;\n  return (\n    isString(reference.toolName) &&\n    context != null &&\n    typeof context === 'object' &&\n    isString(context.session_id) &&\n    Number.isFinite(context.lastUpdated) &&\n    (context.files == null || Array.isArray(context.files))\n  );\n}\n\nfunction isToolUsageCountReference(\n  value: unknown\n): value is SubagentToolNodeResumeState['toolUsageCounts'][number] {\n  if (value == null || typeof value !== 'object') {\n    return false;\n  }\n  const entry = value as Partial<\n    SubagentToolNodeResumeState['toolUsageCounts'][number]\n  >;\n  return isString(entry.toolName) && isNonnegativeInteger(entry.count);\n}\n\nfunction isDirectPathTurnReference(\n  value: unknown\n): value is SubagentToolNodeResumeState['directPathTurns'][number] {\n  if (value == null || typeof value !== 'object') {\n    return false;\n  }\n  const entry = value as Partial<\n    SubagentToolNodeResumeState['directPathTurns'][number]\n  >;\n  return isString(entry.toolCallId) && isNonnegativeInteger(entry.turn);\n}\n\nfunction isToolNodeResumeState(\n  value: unknown\n): value is SubagentToolNodeResumeState {\n  if (value == null || typeof value !== 'object') {\n    return false;\n  }\n  const state = value as Partial<SubagentToolNodeResumeState>;\n  if (\n    !isString(state.stateKey) ||\n    !Array.isArray(state.toolUsageCounts) ||\n    !Array.isArray(state.directPathTurns)\n  ) {\n    return false;\n  }\n  const validUsageCounts = state.toolUsageCounts.every(\n    isToolUsageCountReference\n  );\n  const validDirectTurns = state.directPathTurns.every(\n    isDirectPathTurnReference\n  );\n  if (!validUsageCounts || !validDirectTurns) {\n    return false;\n  }\n  const usageToolNames = new Set(\n    state.toolUsageCounts.map((entry) => entry.toolName)\n  );\n  const directToolCallIds = new Set(\n    state.directPathTurns.map((entry) => entry.toolCallId)\n  );\n  return (\n    usageToolNames.size === state.toolUsageCounts.length &&\n    directToolCallIds.size === state.directPathTurns.length\n  );\n}\n\nfunction isEagerToolUsageState(\n  value: unknown\n): value is SubagentEagerToolUsageState {\n  if (value == null || typeof value !== 'object') {\n    return false;\n  }\n  const state = value as Partial<SubagentEagerToolUsageState>;\n  if (\n    typeof state.agentId !== 'string' ||\n    !Array.isArray(state.toolUsageCounts) ||\n    !state.toolUsageCounts.every(isToolUsageCountReference)\n  ) {\n    return false;\n  }\n  const toolNames = new Set(\n    state.toolUsageCounts.map((entry) => entry.toolName)\n  );\n  return toolNames.size === state.toolUsageCounts.length;\n}\n\nfunction isToolOutputReferenceEntry(\n  value: unknown\n): value is ToolOutputReferenceState['entries'][number] {\n  if (value == null || typeof value !== 'object') {\n    return false;\n  }\n  const entry = value as Partial<ToolOutputReferenceState['entries'][number]>;\n  return isString(entry.key) && typeof entry.value === 'string';\n}\n\nfunction isToolOutputReferenceState(\n  value: unknown\n): value is ToolOutputReferenceState {\n  if (value == null || typeof value !== 'object') {\n    return false;\n  }\n  const state = value as Partial<ToolOutputReferenceState>;\n  if (\n    !Array.isArray(state.entries) ||\n    !state.entries.every(isToolOutputReferenceEntry) ||\n    !isNonnegativeInteger(state.turnCounter) ||\n    !Array.isArray(state.warnedNonStringTools) ||\n    !state.warnedNonStringTools.every(isString)\n  ) {\n    return false;\n  }\n  const entryKeys = new Set(state.entries.map((entry) => entry.key));\n  const warnedTools = new Set(state.warnedNonStringTools);\n  return (\n    entryKeys.size === state.entries.length &&\n    warnedTools.size === state.warnedNonStringTools.length\n  );\n}\n\nfunction isGraphResumeState(value: unknown): value is SubagentGraphResumeState {\n  if (value == null || typeof value !== 'object') {\n    return false;\n  }\n  const state = value as Partial<SubagentGraphResumeState>;\n  if (\n    !Array.isArray(state.toolCallSteps) ||\n    !state.toolCallSteps.every(isToolCallStepReference) ||\n    !Array.isArray(state.toolSessions) ||\n    !state.toolSessions.every(isToolSessionReference) ||\n    !Array.isArray(state.toolNodes) ||\n    !state.toolNodes.every(isToolNodeResumeState) ||\n    !Array.isArray(state.eagerToolUsage) ||\n    !state.eagerToolUsage.every(isEagerToolUsageState) ||\n    !Array.isArray(state.eagerToolSuppressions) ||\n    !state.eagerToolSuppressions.every(isString) ||\n    (state.toolOutputReferences != null &&\n      !isToolOutputReferenceState(state.toolOutputReferences))\n  ) {\n    return false;\n  }\n  const toolCallIds = new Set(\n    state.toolCallSteps.map((reference) => reference.toolCallId)\n  );\n  const toolNames = new Set(\n    state.toolSessions.map((reference) => reference.toolName)\n  );\n  const toolNodeKeys = new Set(state.toolNodes.map((node) => node.stateKey));\n  const eagerAgentIds = new Set(\n    state.eagerToolUsage.map((usage) => usage.agentId)\n  );\n  const eagerSuppressions = new Set(state.eagerToolSuppressions);\n  return (\n    toolCallIds.size === state.toolCallSteps.length &&\n    toolNames.size === state.toolSessions.length &&\n    toolNodeKeys.size === state.toolNodes.length &&\n    eagerAgentIds.size === state.eagerToolUsage.length &&\n    eagerSuppressions.size === state.eagerToolSuppressions.length\n  );\n}\n\nfunction isSubagentResumeExecution(\n  value: unknown,\n  seen: Set<object>,\n  depth: number\n): value is SubagentResumeExecution {\n  if (value == null || typeof value !== 'object') {\n    return false;\n  }\n  const execution = value as Partial<SubagentResumeExecution>;\n  const childRunId = execution.childRunId;\n  const approvalExecutionScope = execution.approvalExecutionScope;\n  const checkpoints = execution.checkpoints;\n  const graphState = execution.graphState;\n  const approvalReplays = execution.approvalReplays;\n  if (\n    !isString(execution.parentToolCallId) ||\n    !isString(childRunId) ||\n    !isString(approvalExecutionScope) ||\n    !Array.isArray(checkpoints) ||\n    checkpoints.length === 0 ||\n    !checkpoints.every(isCheckpointReference) ||\n    !isGraphResumeState(graphState) ||\n    !Array.isArray(approvalReplays)\n  ) {\n    return false;\n  }\n  const checkpointThreadId = checkpoints[0].threadId;\n  const checkpointNamespaces = new Set(\n    checkpoints.map((checkpoint) => checkpoint.checkpointNs)\n  );\n  const validApprovalReplays = approvalReplays.every(\n    (snapshot) =>\n      isApprovalReplaySnapshot(snapshot) &&\n      snapshot.key.executionScope === approvalExecutionScope\n  );\n  if (!validApprovalReplays) {\n    return false;\n  }\n  const approvalKeys = new Set(\n    approvalReplays.map((snapshot) =>\n      JSON.stringify([\n        snapshot.key.executionScope,\n        snapshot.key.agentId,\n        snapshot.key.toolUseId,\n      ])\n    )\n  );\n  return (\n    checkpoints.every(\n      (checkpoint) => checkpoint.threadId === checkpointThreadId\n    ) &&\n    checkpointNamespaces.size === checkpoints.length &&\n    approvalKeys.size === approvalReplays.length &&\n    (execution.descendant == null ||\n      isSubagentResumeManifest(execution.descendant, seen, depth + 1))\n  );\n}\n\nfunction isSubagentResumeManifest(\n  value: unknown,\n  seen: Set<object> = new Set(),\n  depth = 0\n): value is SubagentResumeManifest {\n  if (\n    value == null ||\n    typeof value !== 'object' ||\n    depth > MAX_RESUME_MANIFEST_DEPTH ||\n    seen.has(value)\n  ) {\n    return false;\n  }\n  seen.add(value);\n  const manifest = value as Partial<SubagentResumeManifest>;\n  if (\n    manifest.version !== 1 ||\n    !Array.isArray(manifest.executions) ||\n    manifest.executions.length === 0 ||\n    !manifest.executions.every((execution) =>\n      isSubagentResumeExecution(execution, seen, depth)\n    )\n  ) {\n    return false;\n  }\n  const parentToolCallIds = new Set(\n    manifest.executions.map((execution) => execution.parentToolCallId)\n  );\n  return parentToolCallIds.size === manifest.executions.length;\n}\n\nexport function getSubagentResumeManifest(\n  payload: unknown\n): SubagentResumeManifest | undefined {\n  if (payload == null || typeof payload !== 'object') {\n    return undefined;\n  }\n  if (\n    !Object.prototype.hasOwnProperty.call(\n      payload,\n      SUBAGENT_RESUME_MANIFEST_PAYLOAD_KEY\n    )\n  ) {\n    return undefined;\n  }\n  const manifest = (payload as PayloadWithSubagentResumeManifest)[\n    SUBAGENT_RESUME_MANIFEST_PAYLOAD_KEY\n  ];\n  return isSubagentResumeManifest(manifest) ? manifest : undefined;\n}\n\nexport function requireValidSubagentResumeManifest(\n  payload: unknown\n): SubagentResumeManifest | undefined {\n  if (\n    payload == null ||\n    typeof payload !== 'object' ||\n    !Object.prototype.hasOwnProperty.call(\n      payload,\n      SUBAGENT_RESUME_MANIFEST_PAYLOAD_KEY\n    )\n  ) {\n    return undefined;\n  }\n  const manifest = getSubagentResumeManifest(payload);\n  if (manifest == null) {\n    throw new Error('Invalid subagent resume manifest.');\n  }\n  return manifest;\n}\n\nfunction canAttachSubagentResumeManifestInline(\n  payload: unknown\n): payload is Record<string, unknown> {\n  if (\n    payload == null ||\n    typeof payload !== 'object' ||\n    Array.isArray(payload) ||\n    Object.getPrototypeOf(payload) !== Object.prototype\n  ) {\n    return false;\n  }\n  return SUBAGENT_RESUME_PRIVATE_PAYLOAD_KEYS.every(\n    (key) => !Object.prototype.hasOwnProperty.call(payload, key)\n  );\n}\n\nfunction isInlineSubagentResumePayload(\n  payload: unknown\n): payload is PayloadWithSubagentResumeManifest & Record<string, unknown> {\n  return (\n    payload != null &&\n    typeof payload === 'object' &&\n    !Array.isArray(payload) &&\n    Object.getPrototypeOf(payload) === Object.prototype &&\n    !Object.prototype.hasOwnProperty.call(\n      payload,\n      SUBAGENT_RESUME_WRAPPER_VERSION_KEY\n    ) &&\n    !Object.prototype.hasOwnProperty.call(\n      payload,\n      SUBAGENT_RESUME_WRAPPED_PAYLOAD_KEY\n    ) &&\n    getSubagentResumeManifest(payload) != null\n  );\n}\n\nexport function attachSubagentResumeManifest(\n  payload: unknown,\n  manifest: SubagentResumeManifest\n): object {\n  if (\n    isWrappedSubagentResumePayload(payload) ||\n    isInlineSubagentResumePayload(payload)\n  ) {\n    return {\n      ...payload,\n      [SUBAGENT_RESUME_MANIFEST_PAYLOAD_KEY]: manifest,\n    };\n  }\n  if (!canAttachSubagentResumeManifestInline(payload)) {\n    return {\n      [SUBAGENT_RESUME_WRAPPER_VERSION_KEY]: 1,\n      [SUBAGENT_RESUME_WRAPPED_PAYLOAD_KEY]: payload,\n      [SUBAGENT_RESUME_MANIFEST_PAYLOAD_KEY]: manifest,\n    };\n  }\n  return {\n    ...payload,\n    [SUBAGENT_RESUME_MANIFEST_PAYLOAD_KEY]: manifest,\n  };\n}\n\nexport function stripSubagentResumeManifest(payload: unknown): unknown {\n  if (isWrappedSubagentResumePayload(payload)) {\n    return payload[SUBAGENT_RESUME_WRAPPED_PAYLOAD_KEY];\n  }\n  if (\n    payload == null ||\n    typeof payload !== 'object' ||\n    getSubagentResumeManifest(payload) == null\n  ) {\n    return payload;\n  }\n  return Object.fromEntries(\n    Object.entries(payload).filter(\n      ([key]) => key !== SUBAGENT_RESUME_MANIFEST_PAYLOAD_KEY\n    )\n  );\n}\n\nfunction isWrappedSubagentResumePayload(\n  payload: unknown\n): payload is WrappedSubagentResumePayload {\n  if (\n    payload == null ||\n    typeof payload !== 'object' ||\n    Array.isArray(payload) ||\n    Object.getPrototypeOf(payload) !== Object.prototype ||\n    Object.keys(payload).length !== SUBAGENT_RESUME_PRIVATE_PAYLOAD_KEYS.length\n  ) {\n    return false;\n  }\n  const wrapper = payload as Partial<WrappedSubagentResumePayload>;\n  return (\n    wrapper[SUBAGENT_RESUME_WRAPPER_VERSION_KEY] === 1 &&\n    Object.prototype.hasOwnProperty.call(\n      wrapper,\n      SUBAGENT_RESUME_WRAPPED_PAYLOAD_KEY\n    ) &&\n    getSubagentResumeManifest(wrapper) != null\n  );\n}\n\nexport const SUBAGENT_REPLAY_CONTROLLER = Symbol.for(\n  '@librechat/agents/subagent-replay-controller'\n);\n\nexport type SettledSubagentToolOutput = {\n  output: ToolMessage;\n  additionalContexts: string[];\n  resolvedArgs?: Record<string, unknown>;\n  referenceContent?: string;\n};\n\nexport interface SubagentReplayController {\n  getResumeManifest?(\n    parentToolCallIds?: ReadonlySet<string>\n  ): Promise<SubagentResumeManifest | undefined>;\n  getSettledOutput(\n    call: ToolCall,\n    config: RunnableConfig\n  ): Promise<SettledSubagentToolOutput | undefined>;\n  persistSettledOutput(\n    call: ToolCall,\n    config: RunnableConfig,\n    settled: SettledSubagentToolOutput\n  ): Promise<void>;\n}\n\nexport type ReplayableSubagentTool = {\n  [SUBAGENT_REPLAY_CONTROLLER]?: SubagentReplayController;\n};\n"],"mappings":";AAMA,MAAa,sCACX;AACF,MAAa,qCACX;AACF,MAAa,mCACX;AAEF,MAAM,uCACJ;AACF,MAAM,sCACJ;AACF,MAAM,sCACJ;AACF,MAAM,uCAAuC;CAC3C;CACA;CACA;AACF;AACA,MAAM,4BAA4B;AAgElC,SAAS,SAAS,OAAiC;CACjD,OAAO,OAAO,UAAU,YAAY,MAAM,SAAS;AACrD;AAEA,SAAS,qBAAqB,OAAiC;CAC7D,OAAO,OAAO,UAAU,YAAY,OAAO,cAAc,KAAK,KAAK,SAAS;AAC9E;AAEA,SAAS,yBACP,OACqC;CACrC,IAAI,SAAS,QAAQ,OAAO,UAAU,UACpC,OAAO;CAET,MAAM,WAAW;CACjB,MAAM,MAAM,SAAS;CACrB,MAAM,SAAS,SAAS;CACxB,OACE,OAAO,QACP,SAAS,IAAI,cAAc,KAC3B,OAAO,IAAI,YAAY,YACvB,SAAS,IAAI,SAAS,KACtB,UAAU,QACV,OAAO,aAAa,SACpB,MAAM,QAAQ,OAAO,kBAAkB,KACvC,MAAM,QAAQ,OAAO,gBAAgB,KACrC,MAAM,QAAQ,OAAO,MAAM;AAE/B;AAEA,SAAS,sBACP,OACsC;CACtC,IAAI,SAAS,QAAQ,OAAO,UAAU,UACpC,OAAO;CAET,MAAM,aAAa;CACnB,OACE,SAAS,WAAW,QAAQ,KAC5B,SAAS,WAAW,YAAY,KAChC,OAAO,WAAW,iBAAiB;AAEvC;AAEA,SAAS,wBACP,OACwC;CACxC,IAAI,SAAS,QAAQ,OAAO,UAAU,UACpC,OAAO;CAET,MAAM,YAAY;CAClB,OAAO,SAAS,UAAU,UAAU,KAAK,SAAS,UAAU,MAAM;AACpE;AAEA,SAAS,uBACP,OACuC;CACvC,IAAI,SAAS,QAAQ,OAAO,UAAU,UACpC,OAAO;CAET,MAAM,YAAY;CAClB,MAAM,UAAU,UAAU;CAC1B,OACE,SAAS,UAAU,QAAQ,KAC3B,WAAW,QACX,OAAO,YAAY,YACnB,SAAS,QAAQ,UAAU,KAC3B,OAAO,SAAS,QAAQ,WAAW,MAClC,QAAQ,SAAS,QAAQ,MAAM,QAAQ,QAAQ,KAAK;AAEzD;AAEA,SAAS,0BACP,OACiE;CACjE,IAAI,SAAS,QAAQ,OAAO,UAAU,UACpC,OAAO;CAET,MAAM,QAAQ;CAGd,OAAO,SAAS,MAAM,QAAQ,KAAK,qBAAqB,MAAM,KAAK;AACrE;AAEA,SAAS,0BACP,OACiE;CACjE,IAAI,SAAS,QAAQ,OAAO,UAAU,UACpC,OAAO;CAET,MAAM,QAAQ;CAGd,OAAO,SAAS,MAAM,UAAU,KAAK,qBAAqB,MAAM,IAAI;AACtE;AAEA,SAAS,sBACP,OACsC;CACtC,IAAI,SAAS,QAAQ,OAAO,UAAU,UACpC,OAAO;CAET,MAAM,QAAQ;CACd,IACE,CAAC,SAAS,MAAM,QAAQ,KACxB,CAAC,MAAM,QAAQ,MAAM,eAAe,KACpC,CAAC,MAAM,QAAQ,MAAM,eAAe,GAEpC,OAAO;CAET,MAAM,mBAAmB,MAAM,gBAAgB,MAC7C,yBACF;CACA,MAAM,mBAAmB,MAAM,gBAAgB,MAC7C,yBACF;CACA,IAAI,CAAC,oBAAoB,CAAC,kBACxB,OAAO;CAET,MAAM,iBAAiB,IAAI,IACzB,MAAM,gBAAgB,KAAK,UAAU,MAAM,QAAQ,CACrD;CACA,MAAM,oBAAoB,IAAI,IAC5B,MAAM,gBAAgB,KAAK,UAAU,MAAM,UAAU,CACvD;CACA,OACE,eAAe,SAAS,MAAM,gBAAgB,UAC9C,kBAAkB,SAAS,MAAM,gBAAgB;AAErD;AAEA,SAAS,sBACP,OACsC;CACtC,IAAI,SAAS,QAAQ,OAAO,UAAU,UACpC,OAAO;CAET,MAAM,QAAQ;CACd,IACE,OAAO,MAAM,YAAY,YACzB,CAAC,MAAM,QAAQ,MAAM,eAAe,KACpC,CAAC,MAAM,gBAAgB,MAAM,yBAAyB,GAEtD,OAAO;CAKT,OAAO,IAHe,IACpB,MAAM,gBAAgB,KAAK,UAAU,MAAM,QAAQ,CAEtC,CAAC,CAAC,SAAS,MAAM,gBAAgB;AAClD;AAEA,SAAS,2BACP,OACsD;CACtD,IAAI,SAAS,QAAQ,OAAO,UAAU,UACpC,OAAO;CAET,MAAM,QAAQ;CACd,OAAO,SAAS,MAAM,GAAG,KAAK,OAAO,MAAM,UAAU;AACvD;AAEA,SAAS,2BACP,OACmC;CACnC,IAAI,SAAS,QAAQ,OAAO,UAAU,UACpC,OAAO;CAET,MAAM,QAAQ;CACd,IACE,CAAC,MAAM,QAAQ,MAAM,OAAO,KAC5B,CAAC,MAAM,QAAQ,MAAM,0BAA0B,KAC/C,CAAC,qBAAqB,MAAM,WAAW,KACvC,CAAC,MAAM,QAAQ,MAAM,oBAAoB,KACzC,CAAC,MAAM,qBAAqB,MAAM,QAAQ,GAE1C,OAAO;CAET,MAAM,YAAY,IAAI,IAAI,MAAM,QAAQ,KAAK,UAAU,MAAM,GAAG,CAAC;CACjE,MAAM,cAAc,IAAI,IAAI,MAAM,oBAAoB;CACtD,OACE,UAAU,SAAS,MAAM,QAAQ,UACjC,YAAY,SAAS,MAAM,qBAAqB;AAEpD;AAEA,SAAS,mBAAmB,OAAmD;CAC7E,IAAI,SAAS,QAAQ,OAAO,UAAU,UACpC,OAAO;CAET,MAAM,QAAQ;CACd,IACE,CAAC,MAAM,QAAQ,MAAM,aAAa,KAClC,CAAC,MAAM,cAAc,MAAM,uBAAuB,KAClD,CAAC,MAAM,QAAQ,MAAM,YAAY,KACjC,CAAC,MAAM,aAAa,MAAM,sBAAsB,KAChD,CAAC,MAAM,QAAQ,MAAM,SAAS,KAC9B,CAAC,MAAM,UAAU,MAAM,qBAAqB,KAC5C,CAAC,MAAM,QAAQ,MAAM,cAAc,KACnC,CAAC,MAAM,eAAe,MAAM,qBAAqB,KACjD,CAAC,MAAM,QAAQ,MAAM,qBAAqB,KAC1C,CAAC,MAAM,sBAAsB,MAAM,QAAQ,KAC1C,MAAM,wBAAwB,QAC7B,CAAC,2BAA2B,MAAM,oBAAoB,GAExD,OAAO;CAET,MAAM,cAAc,IAAI,IACtB,MAAM,cAAc,KAAK,cAAc,UAAU,UAAU,CAC7D;CACA,MAAM,YAAY,IAAI,IACpB,MAAM,aAAa,KAAK,cAAc,UAAU,QAAQ,CAC1D;CACA,MAAM,eAAe,IAAI,IAAI,MAAM,UAAU,KAAK,SAAS,KAAK,QAAQ,CAAC;CACzE,MAAM,gBAAgB,IAAI,IACxB,MAAM,eAAe,KAAK,UAAU,MAAM,OAAO,CACnD;CACA,MAAM,oBAAoB,IAAI,IAAI,MAAM,qBAAqB;CAC7D,OACE,YAAY,SAAS,MAAM,cAAc,UACzC,UAAU,SAAS,MAAM,aAAa,UACtC,aAAa,SAAS,MAAM,UAAU,UACtC,cAAc,SAAS,MAAM,eAAe,UAC5C,kBAAkB,SAAS,MAAM,sBAAsB;AAE3D;AAEA,SAAS,0BACP,OACA,MACA,OACkC;CAClC,IAAI,SAAS,QAAQ,OAAO,UAAU,UACpC,OAAO;CAET,MAAM,YAAY;CAClB,MAAM,aAAa,UAAU;CAC7B,MAAM,yBAAyB,UAAU;CACzC,MAAM,cAAc,UAAU;CAC9B,MAAM,aAAa,UAAU;CAC7B,MAAM,kBAAkB,UAAU;CAClC,IACE,CAAC,SAAS,UAAU,gBAAgB,KACpC,CAAC,SAAS,UAAU,KACpB,CAAC,SAAS,sBAAsB,KAChC,CAAC,MAAM,QAAQ,WAAW,KAC1B,YAAY,WAAW,KACvB,CAAC,YAAY,MAAM,qBAAqB,KACxC,CAAC,mBAAmB,UAAU,KAC9B,CAAC,MAAM,QAAQ,eAAe,GAE9B,OAAO;CAET,MAAM,qBAAqB,YAAY,EAAE,CAAC;CAC1C,MAAM,uBAAuB,IAAI,IAC/B,YAAY,KAAK,eAAe,WAAW,YAAY,CACzD;CAMA,IAAI,CALyB,gBAAgB,OAC1C,aACC,yBAAyB,QAAQ,KACjC,SAAS,IAAI,mBAAmB,sBAEZ,GACtB,OAAO;CAET,MAAM,eAAe,IAAI,IACvB,gBAAgB,KAAK,aACnB,KAAK,UAAU;EACb,SAAS,IAAI;EACb,SAAS,IAAI;EACb,SAAS,IAAI;CACf,CAAC,CACH,CACF;CACA,OACE,YAAY,OACT,eAAe,WAAW,aAAa,kBAC1C,KACA,qBAAqB,SAAS,YAAY,UAC1C,aAAa,SAAS,gBAAgB,WACrC,UAAU,cAAc,QACvB,yBAAyB,UAAU,YAAY,MAAM,QAAQ,CAAC;AAEpE;AAEA,SAAS,yBACP,OACA,uBAAoB,IAAI,IAAI,GAC5B,QAAQ,GACyB;CACjC,IACE,SAAS,QACT,OAAO,UAAU,YACjB,QAAQ,6BACR,KAAK,IAAI,KAAK,GAEd,OAAO;CAET,KAAK,IAAI,KAAK;CACd,MAAM,WAAW;CACjB,IACE,SAAS,YAAY,KACrB,CAAC,MAAM,QAAQ,SAAS,UAAU,KAClC,SAAS,WAAW,WAAW,KAC/B,CAAC,SAAS,WAAW,OAAO,cAC1B,0BAA0B,WAAW,MAAM,KAAK,CAClD,GAEA,OAAO;CAKT,OAAO,IAHuB,IAC5B,SAAS,WAAW,KAAK,cAAc,UAAU,gBAAgB,CAE5C,CAAC,CAAC,SAAS,SAAS,WAAW;AACxD;AAEA,SAAgB,0BACd,SACoC;CACpC,IAAI,WAAW,QAAQ,OAAO,YAAY,UACxC;CAEF,IACE,CAAC,OAAO,UAAU,eAAe,KAC/B,SACA,oCACF,GAEA;CAEF,MAAM,WAAY,QAChB;CAEF,OAAO,yBAAyB,QAAQ,IAAI,WAAW,KAAA;AACzD;AAEA,SAAgB,mCACd,SACoC;CACpC,IACE,WAAW,QACX,OAAO,YAAY,YACnB,CAAC,OAAO,UAAU,eAAe,KAC/B,SACA,oCACF,GAEA;CAEF,MAAM,WAAW,0BAA0B,OAAO;CAClD,IAAI,YAAY,MACd,MAAM,IAAI,MAAM,mCAAmC;CAErD,OAAO;AACT;AAEA,SAAS,sCACP,SACoC;CACpC,IACE,WAAW,QACX,OAAO,YAAY,YACnB,MAAM,QAAQ,OAAO,KACrB,OAAO,eAAe,OAAO,MAAM,OAAO,WAE1C,OAAO;CAET,OAAO,qCAAqC,OACzC,QAAQ,CAAC,OAAO,UAAU,eAAe,KAAK,SAAS,GAAG,CAC7D;AACF;AAEA,SAAS,8BACP,SACwE;CACxE,OACE,WAAW,QACX,OAAO,YAAY,YACnB,CAAC,MAAM,QAAQ,OAAO,KACtB,OAAO,eAAe,OAAO,MAAM,OAAO,aAC1C,CAAC,OAAO,UAAU,eAAe,KAC/B,SACA,mCACF,KACA,CAAC,OAAO,UAAU,eAAe,KAC/B,SACA,mCACF,KACA,0BAA0B,OAAO,KAAK;AAE1C;AAEA,SAAgB,6BACd,SACA,UACQ;CACR,IACE,+BAA+B,OAAO,KACtC,8BAA8B,OAAO,GAErC,OAAO;EACL,GAAG;GACF,uCAAuC;CAC1C;CAEF,IAAI,CAAC,sCAAsC,OAAO,GAChD,OAAO;GACJ,sCAAsC;GACtC,sCAAsC;GACtC,uCAAuC;CAC1C;CAEF,OAAO;EACL,GAAG;GACF,uCAAuC;CAC1C;AACF;AAEA,SAAgB,4BAA4B,SAA2B;CACrE,IAAI,+BAA+B,OAAO,GACxC,OAAO,QAAQ;CAEjB,IACE,WAAW,QACX,OAAO,YAAY,YACnB,0BAA0B,OAAO,KAAK,MAEtC,OAAO;CAET,OAAO,OAAO,YACZ,OAAO,QAAQ,OAAO,CAAC,CAAC,QACrB,CAAC,SAAS,QAAQ,oCACrB,CACF;AACF;AAEA,SAAS,+BACP,SACyC;CACzC,IACE,WAAW,QACX,OAAO,YAAY,YACnB,MAAM,QAAQ,OAAO,KACrB,OAAO,eAAe,OAAO,MAAM,OAAO,aAC1C,OAAO,KAAK,OAAO,CAAC,CAAC,WAAW,qCAAqC,QAErE,OAAO;CAET,MAAM,UAAU;CAChB,OACE,QAAQ,yCAAyC,KACjD,OAAO,UAAU,eAAe,KAC9B,SACA,mCACF,KACA,0BAA0B,OAAO,KAAK;AAE1C;AAEA,MAAa,6BAA6B,OAAO,IAC/C,8CACF"}

package/dist/cjs/tools/toolOutputReferences.cjs

@@ -269,6 +269,26 @@ var ToolOutputReferenceRegistry = class ToolOutputReferenceRegistry {
 		const entries = bucket ? new Map(bucket.entries) : EMPTY_ENTRIES;
 		return { resolve: (args, options) => this.resolveAgainst(entries, args, options) };
 	}
+	/** Captures the checkpoint-safe state needed to resume one run bucket. */
+	snapshotState(runId) {
+		const bucket = this.runStates.get(this.keyFor(runId));
+		return {
+			entries: [...bucket?.entries ?? EMPTY_ENTRIES].map(([key, value]) => ({
+				key,
+				value
+			})),
+			turnCounter: bucket?.turnCounter ?? 0,
+			warnedNonStringTools: [...bucket?.warnedNonStringTools ?? []]
+		};
+	}
+	/** Restores a checkpointed run bucket under the current resume scope. */
+	restoreState(runId, state) {
+		this.releaseRun(runId);
+		const bucket = this.getOrCreate(runId);
+		for (const { key, value } of state.entries) this.set(runId, key, value);
+		bucket.turnCounter = state.turnCounter;
+		for (const toolName of state.warnedNonStringTools) bucket.warnedNonStringTools.add(toolName);
+	}
 	resolveAgainst(entries, args, options) {
 		if (!hasAnyPlaceholder(args)) return {
 			resolved: args,

package/dist/cjs/tools/toolOutputReferences.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"toolOutputReferences.cjs","names":["HARD_MAX_TOOL_RESULT_CHARS","HARD_MAX_TOTAL_TOOL_OUTPUT_SIZE","calculateMaxTotalToolOutputSize","isComputerCallOutputMessage","ToolMessage"],"sources":["../../../src/tools/toolOutputReferences.ts"],"sourcesContent":["/**\n * Tool output reference registry.\n *\n * When enabled via `RunConfig.toolOutputReferences.enabled`, ToolNode\n * stores each successful tool output under a stable key\n * (`tool<idx>turn<turn>`) where `idx` is the tool's position within a\n * ToolNode batch and `turn` is the batch index within the run\n * (incremented once per ToolNode invocation).\n *\n * Subsequent tool calls can pipe a previous output into their args by\n * embedding `{{tool<idx>turn<turn>}}` inside any string argument;\n * {@link ToolOutputReferenceRegistry.resolve} walks the args and\n * substitutes the placeholders immediately before invocation.\n *\n * The registry stores the *raw, untruncated* tool output so a later\n * `{{…}}` substitution pipes the full payload into the next tool —\n * even when the LLM only saw a head+tail-truncated preview in\n * `ToolMessage.content`. Outputs are stored without any annotation\n * (the `_ref` key or the `[ref: ...]` prefix seen by the LLM is\n * strictly a UX signal attached to `ToolMessage.content`). Keeping the\n * registry pristine means downstream bash/jq piping receives the\n * complete, verbatim output with no injected fields.\n */\n\nimport { ToolMessage } from '@langchain/core/messages';\nimport type { BaseMessage } from '@langchain/core/messages';\nimport {\n  calculateMaxTotalToolOutputSize,\n  HARD_MAX_TOOL_RESULT_CHARS,\n  HARD_MAX_TOTAL_TOOL_OUTPUT_SIZE,\n} from '@/utils/truncation';\nimport { isComputerCallOutputMessage } from '@/utils/toolContent';\nimport { INTENT_ARG } from '@/tools/intentArg';\n\n/** Parses a stringified JSON object arg; undefined for anything else. */\nfunction parseStringifiedArgsObject(\n  value: string\n): Record<string, unknown> | undefined {\n  if (!value.trim().startsWith('{')) {\n    return undefined;\n  }\n  try {\n    const parsed = JSON.parse(value) as unknown;\n    if (parsed != null && typeof parsed === 'object' && !Array.isArray(parsed)) {\n      return parsed as Record<string, unknown>;\n    }\n  } catch {\n    return undefined;\n  }\n  return undefined;\n}\n\n/**\n * Non-global matcher for a single `{{tool<i>turn<n>}}` placeholder.\n * Exported for consumers that want to detect references (e.g., syntax\n * highlighting, docs). The stateful `g` variant lives inside the\n * registry so nobody trips on `lastIndex`.\n */\nexport const TOOL_OUTPUT_REF_PATTERN = /\\{\\{(tool\\d+turn\\d+)\\}\\}/;\n\n/** Object key used when a parsed-object output has `_ref` injected. */\nexport const TOOL_OUTPUT_REF_KEY = '_ref';\n\n/**\n * Object key used to carry unresolved reference warnings on a parsed-\n * object output. Using a dedicated field instead of a trailing text\n * line keeps the annotated `ToolMessage.content` parseable as JSON for\n * downstream consumers that rely on the object shape.\n */\nexport const TOOL_OUTPUT_UNRESOLVED_KEY = '_unresolved_refs';\n\n/** Single-line prefix prepended to non-object tool outputs so the LLM sees the reference key. */\nexport function buildReferencePrefix(key: string): string {\n  return `[ref: ${key}]`;\n}\n\n/** Stable registry key for a tool output. */\nexport function buildReferenceKey(toolIndex: number, turn: number): string {\n  return `tool${toolIndex}turn${turn}`;\n}\n\nexport type ToolOutputReferenceRegistryOptions = {\n  /** Maximum characters stored per registered output. */\n  maxOutputSize?: number;\n  /** Maximum total characters retained across all registered outputs. */\n  maxTotalSize?: number;\n  /**\n   * Upper bound on the number of concurrently-tracked runs. When\n   * exceeded, the oldest run bucket is evicted (FIFO). Defaults to 32.\n   */\n  maxActiveRuns?: number;\n};\n\n/**\n * Result of resolving placeholders in tool args.\n */\nexport type ResolveResult<T> = {\n  /** Arguments with placeholders replaced. Same shape as the input. */\n  resolved: T;\n  /** Reference keys that were referenced but had no stored value. */\n  unresolved: string[];\n};\n\n/**\n * Read-only view over a frozen registry snapshot. Returned by\n * {@link ToolOutputReferenceRegistry.snapshot} for callers that need\n * to resolve placeholders against the registry state at a specific\n * point in time, ignoring any subsequent registrations.\n */\nexport interface ToolOutputResolveView {\n  resolve<T>(args: T, options?: ResolveOptions): ResolveResult<T>;\n}\n\n/**\n * Per-call resolution options. `substituteIntentKey` opts the top-level\n * `intent` key back INTO placeholder substitution: the exemption protects\n * the injected display label, but a tool whose own schema declares a\n * business parameter named `intent` (the injectors skip such tools) still\n * needs references piped into it like any other argument.\n */\nexport type ResolveOptions = {\n  substituteIntentKey?: boolean;\n};\n\n/**\n * Pre-resolved arg map keyed by `toolCallId`. Used by the mixed\n * direct+event dispatch path to feed event calls' resolved args\n * (captured pre-batch) into the dispatcher without re-resolving\n * against the now-stale live registry.\n */\nexport type PreResolvedArgsMap = Map<\n  string,\n  { resolved: Record<string, unknown>; unresolved: string[] }\n>;\n\n/**\n * Per-call sink for resolved args, keyed by `toolCallId`. Threaded\n * as a per-batch local map so concurrent `ToolNode.run()` calls do\n * not race on shared sink state.\n */\nexport type ResolvedArgsByCallId = Map<string, Record<string, unknown>>;\n\nconst EMPTY_ENTRIES: ReadonlyMap<string, string> = new Map<string, string>();\n\n/**\n * Per-run state bucket held inside the registry. Each distinct\n * `run_id` gets its own bucket so overlapping concurrent runs on a\n * shared registry cannot leak outputs, turn counters, or warn-memos\n * into one another.\n */\nclass RunStateBucket {\n  entries: Map<string, string> = new Map();\n  totalSize: number = 0;\n  turnCounter: number = 0;\n  warnedNonStringTools: Set<string> = new Set();\n}\n\n/**\n * Anonymous (`run_id` absent) bucket key. Anonymous batches are\n * treated as fresh runs on every invocation — see `nextTurn`.\n */\nconst ANON_RUN_KEY = '\\0anon';\n\n/**\n * Default upper bound on the number of concurrently-tracked runs per\n * registry. When exceeded, the oldest run's bucket (by insertion\n * order) is evicted. Keeps memory bounded when a ToolNode is reused\n * across many runs without explicit `releaseRun` calls.\n */\nconst DEFAULT_MAX_ACTIVE_RUNS = 32;\n\n/**\n * Ordered map of reference-key → stored output, partitioned by run so\n * concurrent / interleaved runs sharing one registry cannot leak\n * outputs between each other.\n *\n * Each public method takes a `runId` which selects the run's bucket.\n * Hosts typically get one registry per run via `Graph`, in which\n * case only a single bucket is ever populated; the partitioning\n * exists so the registry also behaves correctly when a single\n * instance is reused directly.\n */\nexport class ToolOutputReferenceRegistry {\n  private runStates: Map<string, RunStateBucket> = new Map();\n  private readonly maxOutputSize: number;\n  private readonly maxTotalSize: number;\n  private readonly maxActiveRuns: number;\n  /**\n   * Local stateful matcher used only by `replaceInString`. Kept\n   * off-module so callers of the exported `TOOL_OUTPUT_REF_PATTERN`\n   * never see a stale `lastIndex`.\n   */\n  private static readonly PLACEHOLDER_MATCHER = /\\{\\{(tool\\d+turn\\d+)\\}\\}/g;\n\n  constructor(options: ToolOutputReferenceRegistryOptions = {}) {\n    /**\n     * Per-output default is the same ~400 KB budget as the standard\n     * tool-result truncation (`HARD_MAX_TOOL_RESULT_CHARS`). This\n     * keeps a single `{{…}}` substitution at a size that is safe to\n     * pass through typical shell `ARG_MAX` limits and matches what\n     * the LLM would otherwise have seen. Hosts that want larger per-\n     * output payloads (API consumers, long JSON streams) can raise\n     * the cap explicitly up to the 5 MB total budget.\n     */\n    const perOutput =\n      options.maxOutputSize != null && options.maxOutputSize > 0\n        ? options.maxOutputSize\n        : HARD_MAX_TOOL_RESULT_CHARS;\n    /**\n     * Clamp a caller-supplied `maxTotalSize` to\n     * `HARD_MAX_TOTAL_TOOL_OUTPUT_SIZE` (5 MB) so the documented\n     * absolute cap is enforced regardless of host config —\n     * `calculateMaxTotalToolOutputSize` already applies the same\n     * upper bound on its computed default, but the user-provided\n     * branch was bypassing it.\n     */\n    const totalRaw =\n      options.maxTotalSize != null && options.maxTotalSize > 0\n        ? Math.min(options.maxTotalSize, HARD_MAX_TOTAL_TOOL_OUTPUT_SIZE)\n        : calculateMaxTotalToolOutputSize(perOutput);\n    this.maxTotalSize = totalRaw;\n    /**\n     * The per-output cap can never exceed the per-run aggregate cap:\n     * if a single entry were allowed to be larger than `maxTotalSize`,\n     * the eviction loop would either blow the cap (to keep the entry)\n     * or self-evict a just-stored value. Clamping here turns\n     * `maxTotalSize` into a hard upper bound on *any* state the\n     * registry retains per run.\n     */\n    this.maxOutputSize = Math.min(perOutput, totalRaw);\n    this.maxActiveRuns =\n      options.maxActiveRuns != null && options.maxActiveRuns > 0\n        ? options.maxActiveRuns\n        : DEFAULT_MAX_ACTIVE_RUNS;\n  }\n\n  private keyFor(runId: string | undefined): string {\n    return runId ?? ANON_RUN_KEY;\n  }\n\n  private getOrCreate(runId: string | undefined): RunStateBucket {\n    const key = this.keyFor(runId);\n    let state = this.runStates.get(key);\n    if (state == null) {\n      state = new RunStateBucket();\n      this.runStates.set(key, state);\n      if (this.runStates.size > this.maxActiveRuns) {\n        const oldest = this.runStates.keys().next().value;\n        if (oldest != null && oldest !== key) {\n          this.runStates.delete(oldest);\n        }\n      }\n    }\n    return state;\n  }\n\n  /** Registers (or replaces) the output stored under `key` for `runId`. */\n  set(runId: string | undefined, key: string, value: string): void {\n    const bucket = this.getOrCreate(runId);\n    const clipped =\n      value.length > this.maxOutputSize\n        ? value.slice(0, this.maxOutputSize)\n        : value;\n    const existing = bucket.entries.get(key);\n    if (existing != null) {\n      bucket.totalSize -= existing.length;\n      bucket.entries.delete(key);\n    }\n    bucket.entries.set(key, clipped);\n    bucket.totalSize += clipped.length;\n    this.evictWithinBucket(bucket);\n  }\n\n  /** Returns the stored value for `key` in `runId`'s bucket, or `undefined`. */\n  get(runId: string | undefined, key: string): string | undefined {\n    return this.runStates.get(this.keyFor(runId))?.entries.get(key);\n  }\n\n  /**\n   * Returns `true` when `key` is currently stored in `runId`'s bucket.\n   * Used by {@link annotateMessagesForLLM} to gate transient annotation\n   * on whether the registry still owns the referenced output (a stale\n   * `_refKey` from a prior run silently no-ops here).\n   */\n  has(runId: string | undefined, key: string): boolean {\n    return this.runStates.get(this.keyFor(runId))?.entries.has(key) ?? false;\n  }\n\n  /** Total number of registered outputs across every run bucket. */\n  get size(): number {\n    let n = 0;\n    for (const bucket of this.runStates.values()) {\n      n += bucket.entries.size;\n    }\n    return n;\n  }\n\n  /** Maximum characters retained per output (post-clip). */\n  get perOutputLimit(): number {\n    return this.maxOutputSize;\n  }\n\n  /** Maximum total characters retained *per run*. */\n  get totalLimit(): number {\n    return this.maxTotalSize;\n  }\n\n  /** Drops every run's state. */\n  clear(): void {\n    this.runStates.clear();\n  }\n\n  /**\n   * Explicitly release `runId`'s state. Safe to call when a run has\n   * finished. Hosts sharing one registry across runs should call this\n   * to reclaim memory deterministically; otherwise LRU eviction kicks\n   * in when `maxActiveRuns` runs accumulate.\n   */\n  releaseRun(runId: string | undefined): void {\n    this.runStates.delete(this.keyFor(runId));\n  }\n\n  /**\n   * Claims the next batch turn synchronously from `runId`'s bucket.\n   *\n   * Must be called once at the start of each ToolNode batch before\n   * any `await`, so concurrent invocations within the same run see\n   * distinct turn values (reads are effectively atomic by JS's\n   * single-threaded execution of the sync prefix).\n   *\n   * If `runId` is missing the anonymous bucket is dropped and a\n   * fresh one created so each anonymous call behaves as its own run.\n   */\n  nextTurn(runId: string | undefined): number {\n    if (runId == null) {\n      this.runStates.delete(ANON_RUN_KEY);\n    }\n    const bucket = this.getOrCreate(runId);\n    return bucket.turnCounter++;\n  }\n\n  /**\n   * Records that `toolName` has been warned about in `runId` (returns\n   * `true` on the first call per run, `false` after). Used by\n   * ToolNode to emit one log line per offending tool per run when a\n   * `ToolMessage.content` isn't a string.\n   */\n  claimWarnOnce(runId: string | undefined, toolName: string): boolean {\n    const bucket = this.getOrCreate(runId);\n    if (bucket.warnedNonStringTools.has(toolName)) {\n      return false;\n    }\n    bucket.warnedNonStringTools.add(toolName);\n    return true;\n  }\n\n  /**\n   * Walks `args` and replaces every `{{tool<i>turn<n>}}` placeholder in\n   * string values with the stored output *from `runId`'s bucket*. Non-\n   * string values and object keys are left untouched. Unresolved\n   * references are left in-place and reported so the caller can\n   * surface them to the LLM. When no placeholder appears anywhere in\n   * the serialized args, the original input is returned without\n   * walking the tree.\n   */\n  resolve<T>(\n    runId: string | undefined,\n    args: T,\n    options?: ResolveOptions\n  ): ResolveResult<T> {\n    if (!hasAnyPlaceholder(args)) {\n      return { resolved: args, unresolved: [] };\n    }\n    const bucket = this.runStates.get(this.keyFor(runId));\n    return this.resolveAgainst(bucket?.entries ?? EMPTY_ENTRIES, args, options);\n  }\n\n  /**\n   * Captures a frozen snapshot of `runId`'s current entries and\n   * returns a view that resolves placeholders against *only* that\n   * snapshot. The snapshot is decoupled from the live registry, so\n   * subsequent `set()` calls (for example, same-turn direct outputs\n   * registering while an event branch is still in flight) are\n   * invisible to the snapshot's `resolve`. Used by the mixed\n   * direct+event dispatch path to preserve same-turn isolation when\n   * a `PreToolUse` hook rewrites event args after directs have\n   * completed.\n   */\n  snapshot(runId: string | undefined): ToolOutputResolveView {\n    const bucket = this.runStates.get(this.keyFor(runId));\n    const entries: ReadonlyMap<string, string> = bucket\n      ? new Map(bucket.entries)\n      : EMPTY_ENTRIES;\n    return {\n      resolve: <T>(args: T, options?: ResolveOptions): ResolveResult<T> =>\n        this.resolveAgainst(entries, args, options),\n    };\n  }\n\n  private resolveAgainst<T>(\n    entries: ReadonlyMap<string, string>,\n    args: T,\n    options?: ResolveOptions\n  ): ResolveResult<T> {\n    if (!hasAnyPlaceholder(args)) {\n      return { resolved: args, unresolved: [] };\n    }\n    const exemptIntentKey = options?.substituteIntentKey !== true;\n    const unresolved = new Set<string>();\n    /**\n     * Providers may deliver the args OBJECT as a JSON string. A plain\n     * string-root transform would expand placeholders inside the `intent`\n     * label too, bypassing the top-level exclusion below — parse, transform\n     * key-aware, and re-serialize so the label stays verbatim while every\n     * other field still substitutes. Only taken when an `intent` key is\n     * actually present; other strings keep the fast raw-string path.\n     */\n    if (exemptIntentKey && typeof args === 'string') {\n      const parsedRoot = parseStringifiedArgsObject(args);\n      if (parsedRoot != null && INTENT_ARG in parsedRoot) {\n        const resolved = JSON.stringify(\n          this.transform(entries, parsedRoot, unresolved, true)\n        ) as T;\n        return { resolved, unresolved: Array.from(unresolved) };\n      }\n    }\n    const resolved = this.transform(\n      entries,\n      args,\n      unresolved,\n      exemptIntentKey\n    ) as T;\n    return { resolved, unresolved: Array.from(unresolved) };\n  }\n\n  private transform(\n    entries: ReadonlyMap<string, string>,\n    value: unknown,\n    unresolved: Set<string>,\n    exemptRootIntent = false\n  ): unknown {\n    if (typeof value === 'string') {\n      return this.replaceInString(entries, value, unresolved);\n    }\n    if (Array.isArray(value)) {\n      return value.map((item) => this.transform(entries, item, unresolved));\n    }\n    if (value !== null && typeof value === 'object') {\n      const source = value as Record<string, unknown>;\n      const next: Record<string, unknown> = {};\n      for (const [key, item] of Object.entries(source)) {\n        /**\n         * The top-level `intent` arg is a display label, never a data\n         * channel: expanding a `{{tool<i>turn<n>}}` placeholder there would\n         * dump a stored output (up to the registry cap) into a single-line\n         * UI label and persist it with the message. Left verbatim instead.\n         */\n        next[key] =\n          exemptRootIntent && key === INTENT_ARG\n            ? item\n            : this.transform(entries, item, unresolved);\n      }\n      return next;\n    }\n    return value;\n  }\n\n  private replaceInString(\n    entries: ReadonlyMap<string, string>,\n    input: string,\n    unresolved: Set<string>\n  ): string {\n    if (input.indexOf('{{tool') === -1) {\n      return input;\n    }\n    return input.replace(\n      ToolOutputReferenceRegistry.PLACEHOLDER_MATCHER,\n      (match, key: string) => {\n        const stored = entries.get(key);\n        if (stored == null) {\n          unresolved.add(key);\n          return match;\n        }\n        return stored;\n      }\n    );\n  }\n\n  private evictWithinBucket(bucket: RunStateBucket): void {\n    if (bucket.totalSize <= this.maxTotalSize) {\n      return;\n    }\n    for (const key of bucket.entries.keys()) {\n      if (bucket.totalSize <= this.maxTotalSize) {\n        return;\n      }\n      const entry = bucket.entries.get(key);\n      if (entry == null) {\n        continue;\n      }\n      bucket.totalSize -= entry.length;\n      bucket.entries.delete(key);\n    }\n  }\n}\n\n/**\n * Cheap pre-check: returns true if any string value in `args` contains\n * the `{{tool` substring. Lets `resolve()` skip the deep tree walk (and\n * its object allocations) for the common case of plain args.\n */\nfunction hasAnyPlaceholder(value: unknown): boolean {\n  if (typeof value === 'string') {\n    return value.indexOf('{{tool') !== -1;\n  }\n  if (Array.isArray(value)) {\n    for (const item of value) {\n      if (hasAnyPlaceholder(item)) {\n        return true;\n      }\n    }\n    return false;\n  }\n  if (value !== null && typeof value === 'object') {\n    for (const item of Object.values(value as Record<string, unknown>)) {\n      if (hasAnyPlaceholder(item)) {\n        return true;\n      }\n    }\n    return false;\n  }\n  return false;\n}\n\n/**\n * Annotates `content` with a reference key and/or unresolved-ref\n * warnings so the LLM sees both alongside the tool output.\n *\n * Behavior:\n *  - If `content` parses as a plain (non-array, non-null) JSON object\n *    and the object does not already have a conflicting `_ref` key,\n *    the reference key and (when present) `_unresolved_refs` array\n *    are injected as object fields, preserving JSON validity for\n *    downstream consumers that parse the output.\n *  - Otherwise (string output, JSON array/primitive, parse failure,\n *    or `_ref` collision), a `[ref: <key>]\\n` prefix line is\n *    prepended and unresolved refs are appended as a trailing\n *    `[unresolved refs: …]` line.\n *\n * The annotated string is what the LLM sees as `ToolMessage.content`.\n * The *original* (un-annotated) value is what gets stored in the\n * registry, so downstream piping remains pristine.\n *\n * @param content     Raw (post-truncation) tool output.\n * @param key         Reference key for this output, or undefined when\n *                    there is nothing to register (errors etc.).\n * @param unresolved  Reference keys that failed to resolve during\n *                    argument substitution. Surfaced so the LLM can\n *                    self-correct its next tool call.\n */\nexport function annotateToolOutputWithReference(\n  content: string,\n  key: string | undefined,\n  unresolved: string[] = []\n): string {\n  const hasRefKey = key != null;\n  const hasUnresolved = unresolved.length > 0;\n  if (!hasRefKey && !hasUnresolved) {\n    return content;\n  }\n  const trimmed = content.trimStart();\n  if (trimmed.startsWith('{')) {\n    const annotated = tryInjectRefIntoJsonObject(content, key, unresolved);\n    if (annotated != null) {\n      return annotated;\n    }\n  }\n  const prefix = hasRefKey ? `${buildReferencePrefix(key!)}\\n` : '';\n  const trailer = hasUnresolved\n    ? `\\n[unresolved refs: ${unresolved.join(', ')}]`\n    : '';\n  return `${prefix}${content}${trailer}`;\n}\n\nfunction tryInjectRefIntoJsonObject(\n  content: string,\n  key: string | undefined,\n  unresolved: string[]\n): string | null {\n  let parsed: unknown;\n  try {\n    parsed = JSON.parse(content);\n  } catch {\n    return null;\n  }\n\n  if (parsed === null || typeof parsed !== 'object' || Array.isArray(parsed)) {\n    return null;\n  }\n\n  const obj = parsed as Record<string, unknown>;\n  const injectingRef = key != null;\n  const injectingUnresolved = unresolved.length > 0;\n\n  /**\n   * Reject the JSON-injection path (fall back to prefix form) when\n   * either of our keys collides with real payload data:\n   *  - `_ref` collision: existing value is non-null and differs from\n   *    the key we're about to inject.\n   *  - `_unresolved_refs` collision: existing value is non-null and\n   *    is not a deep-equal match for the array we'd inject.\n   * This keeps us from silently overwriting legitimate tool output.\n   */\n  if (\n    injectingRef &&\n    TOOL_OUTPUT_REF_KEY in obj &&\n    obj[TOOL_OUTPUT_REF_KEY] !== key &&\n    obj[TOOL_OUTPUT_REF_KEY] != null\n  ) {\n    return null;\n  }\n  if (\n    injectingUnresolved &&\n    TOOL_OUTPUT_UNRESOLVED_KEY in obj &&\n    obj[TOOL_OUTPUT_UNRESOLVED_KEY] != null &&\n    !arraysShallowEqual(obj[TOOL_OUTPUT_UNRESOLVED_KEY], unresolved)\n  ) {\n    return null;\n  }\n\n  /**\n   * Only strip the framework-owned key we're actually injecting —\n   * leave everything else (including a pre-existing `_ref` on the\n   * unresolved-only path, or a pre-existing `_unresolved_refs` on a\n   * plain-annotation path) untouched so we annotate rather than\n   * mutate downstream payload data. Our injected keys land first in\n   * the serialized JSON so the LLM sees them before the body.\n   */\n  const omitKeys = new Set<string>();\n  if (injectingRef) omitKeys.add(TOOL_OUTPUT_REF_KEY);\n  if (injectingUnresolved) omitKeys.add(TOOL_OUTPUT_UNRESOLVED_KEY);\n  const rest: Record<string, unknown> = {};\n  for (const [k, v] of Object.entries(obj)) {\n    if (!omitKeys.has(k)) {\n      rest[k] = v;\n    }\n  }\n  const injected: Record<string, unknown> = {};\n  if (injectingRef) {\n    injected[TOOL_OUTPUT_REF_KEY] = key;\n  }\n  if (injectingUnresolved) {\n    injected[TOOL_OUTPUT_UNRESOLVED_KEY] = unresolved;\n  }\n  Object.assign(injected, rest);\n\n  const pretty = /^\\{\\s*\\n/.test(content);\n  return pretty ? JSON.stringify(injected, null, 2) : JSON.stringify(injected);\n}\n\nfunction arraysShallowEqual(a: unknown, b: readonly string[]): boolean {\n  if (!Array.isArray(a) || a.length !== b.length) {\n    return false;\n  }\n  for (let i = 0; i < a.length; i++) {\n    if (a[i] !== b[i]) {\n      return false;\n    }\n  }\n  return true;\n}\n\n/**\n * Lazy projection that, given a registry and a runId, returns a new\n * `messages` array where each `ToolMessage` carrying ref metadata is\n * projected into a transient copy with annotated content (when the ref\n * is live in the registry) and with the framework-owned `additional_\n * kwargs` keys (`_refKey`, `_refScope`, `_unresolvedRefs`) stripped\n * regardless of whether annotation applied. The original input array\n * and its messages are never mutated.\n *\n * Annotation is gated on registry presence: a stale `_refKey` from a\n * prior run (e.g. one that survived in persisted history) silently\n * no-ops on the *content* side. The strip-metadata side still runs so\n * stale framework keys never leak onto the wire under any custom or\n * future provider serializer that might transmit `additional_kwargs`.\n * `_unresolvedRefs` is always meaningful and is not gated.\n *\n * **Feature-disabled fast path:** when the host hasn't enabled the\n * tool-output-reference feature, the registry is `undefined` and this\n * function returns the input array reference-equal *without iterating\n * a single message*. The loop is exclusive to the feature-enabled\n * code path.\n */\nexport function annotateMessagesForLLM(\n  messages: BaseMessage[],\n  registry: ToolOutputReferenceRegistry | undefined,\n  runId: string | undefined\n): BaseMessage[] {\n  if (registry == null) return messages;\n\n  /**\n   * Lazy-allocate the output array so the common case (no ToolMessage\n   * carries framework metadata) returns the input reference-equal with\n   * zero allocations beyond the per-message predicate checks.\n   */\n  let out: BaseMessage[] | undefined;\n  for (let i = 0; i < messages.length; i++) {\n    const m = messages[i];\n    if (m._getType() !== 'tool') continue;\n    /**\n     * `additional_kwargs` is untyped at the LangChain layer\n     * (`Record<string, unknown>`), so persisted or client-supplied\n     * ToolMessages can carry arbitrary shapes — including primitives\n     * (a malformed serializer might write a string, or `null`).\n     * Guard with a runtime object check before the `in` probes\n     * because the `in` operator throws `TypeError` on primitives.\n     * A single malformed message must never crash the provider call\n     * path; skip its annotation/strip and continue.\n     */\n    const rawMeta = m.additional_kwargs as unknown;\n    if (rawMeta == null || typeof rawMeta !== 'object') continue;\n    const meta = rawMeta as Record<string, unknown>;\n    const hasRefKey = '_refKey' in meta;\n    const hasRefScope = '_refScope' in meta;\n    const hasUnresolvedField = '_unresolvedRefs' in meta;\n    if (!hasRefKey && !hasRefScope && !hasUnresolvedField) continue;\n    if (isComputerCallOutputMessage(m)) {\n      out ??= messages.slice();\n      out[i] = cloneToolMessageWithContent(m as ToolMessage, m.content);\n      continue;\n    }\n\n    const refKey = readRefKey(meta);\n    const unresolved = readUnresolvedRefs(meta);\n\n    /**\n     * Prefer the message-stamped `_refScope` for the registry lookup.\n     * For named runs it equals the current `runId`; for anonymous\n     * invocations it carries the per-batch synthetic scope minted by\n     * ToolNode (`\\0anon-<n>`), which `runId` from config cannot\n     * recover. Falling back to `runId` keeps backward compatibility\n     * with messages stamped before this field existed.\n     */\n    const lookupScope = readRefScope(meta) ?? runId;\n    const liveRef =\n      refKey != null && registry.has(lookupScope, refKey) ? refKey : undefined;\n    const annotates = liveRef != null || unresolved.length > 0;\n\n    const tm = m as ToolMessage;\n    let nextContent: ToolMessage['content'] = tm.content;\n\n    if (annotates && typeof tm.content === 'string') {\n      nextContent = annotateToolOutputWithReference(\n        tm.content,\n        liveRef,\n        unresolved\n      );\n    } else if (annotates && Array.isArray(tm.content)) {\n      /**\n       * Array tool content. The string annotator can't run — this notably\n       * includes a tail tool result that prompt caching rewrote from a string\n       * into a text-block array to host its `cache_control` / `cachePoint`\n       * marker (the `_refKey` survives on `additional_kwargs`). Project the\n       * same markers the string path would, as leading text blocks: the live\n       * `[ref: …]` prefix and/or the unresolved-refs warning. Without this the\n       * common tool-result tail loses its reference marker once cached.\n       *\n       * `as unknown as ToolMessage['content']` is unavoidable: LangChain's\n       * content union does not accept a freshly built mixed array literal even\n       * though the structural shape is valid at runtime. The double-cast is\n       * structurally safe — every original block is preserved and only\n       * `{ type: 'text', text }` blocks (which all providers accept) are\n       * prepended.\n       */\n      const prefixBlocks: Array<{ type: 'text'; text: string }> = [];\n      if (liveRef != null) {\n        prefixBlocks.push({\n          type: 'text',\n          text: buildReferencePrefix(liveRef),\n        });\n      }\n      if (unresolved.length > 0) {\n        prefixBlocks.push({\n          type: 'text',\n          text: `[unresolved refs: ${unresolved.join(', ')}]`,\n        });\n      }\n      if (prefixBlocks.length > 0) {\n        nextContent = [\n          ...prefixBlocks,\n          ...tm.content,\n        ] as unknown as ToolMessage['content'];\n      }\n    }\n\n    /**\n     * Project unconditionally: even when no annotation applies (stale\n     * `_refKey` or non-annotatable content), `cloneToolMessageWithContent`\n     * runs `stripFrameworkRefMetadata` on `additional_kwargs` so the\n     * framework-owned keys never reach the wire.\n     */\n    out ??= messages.slice();\n    out[i] = cloneToolMessageWithContent(tm, nextContent);\n  }\n\n  return out ?? messages;\n}\n\n/**\n * Reads `_refKey` defensively from untyped `additional_kwargs`. Returns\n * undefined for non-string values so a malformed field cannot poison\n * the registry lookup or downstream string operations.\n */\nfunction readRefKey(\n  meta: Record<string, unknown> | undefined\n): string | undefined {\n  const v = meta?._refKey;\n  return typeof v === 'string' ? v : undefined;\n}\n\n/**\n * Reads `_refScope` defensively from untyped `additional_kwargs`.\n * Mirrors {@link readRefKey} — non-string scopes are dropped (the\n * caller falls back to the run-derived scope) rather than passed into\n * the registry as a malformed key.\n */\nfunction readRefScope(\n  meta: Record<string, unknown> | undefined\n): string | undefined {\n  const v = meta?._refScope;\n  return typeof v === 'string' ? v : undefined;\n}\n\n/**\n * Reads `_unresolvedRefs` defensively from untyped `additional_kwargs`.\n * Returns an empty array for any non-array value, and filters out\n * non-string entries from a real array. Without this guard, a hydrated\n * ToolMessage carrying e.g. `_unresolvedRefs: 'tool0turn0'` would crash\n * `attemptInvoke` on the eventual `.length` / `.join(...)` call.\n */\nfunction readUnresolvedRefs(\n  meta: Record<string, unknown> | undefined\n): string[] {\n  const v = meta?._unresolvedRefs;\n  if (!Array.isArray(v)) return [];\n  const out: string[] = [];\n  for (const item of v) {\n    if (typeof item === 'string') out.push(item);\n  }\n  return out;\n}\n\n/**\n * Builds a fresh `ToolMessage` that mirrors `tm`'s identity fields with\n * the supplied `content`. Every `ToolMessage` field but `content` is\n * carried over so the projection is structurally identical to the\n * original from a LangChain serializer's perspective.\n *\n * `additional_kwargs` is rebuilt with the framework-owned ref keys\n * stripped. Defensive: LangChain's standard provider serializers do not\n * transmit `additional_kwargs` to provider HTTP APIs, but a custom\n * adapter or future LangChain change could. Stripping keeps the\n * implementation correct under any serializer behavior at the cost of a\n * shallow object spread per annotated message.\n */\nfunction cloneToolMessageWithContent(\n  tm: ToolMessage,\n  content: ToolMessage['content']\n): ToolMessage {\n  return new ToolMessage({\n    id: tm.id,\n    name: tm.name,\n    status: tm.status,\n    artifact: tm.artifact,\n    tool_call_id: tm.tool_call_id,\n    response_metadata: tm.response_metadata,\n    additional_kwargs: stripFrameworkRefMetadata(tm.additional_kwargs),\n    content,\n  });\n}\n\n/**\n * Returns a copy of `kwargs` with `_refKey`, `_refScope`, and\n * `_unresolvedRefs` removed. Returns the input reference-equal when\n * none of those keys are present so the no-strip path stays cheap;\n * returns `undefined` when stripping leaves the object empty so the\n * caller can drop the field entirely.\n */\nfunction stripFrameworkRefMetadata(\n  kwargs: Record<string, unknown> | undefined\n): Record<string, unknown> | undefined {\n  if (kwargs == null) return undefined;\n  if (\n    !('_refKey' in kwargs) &&\n    !('_refScope' in kwargs) &&\n    !('_unresolvedRefs' in kwargs)\n  ) {\n    return kwargs;\n  }\n  const { _refKey, _refScope, _unresolvedRefs, ...rest } = kwargs as Record<\n    string,\n    unknown\n  > & {\n    _refKey?: unknown;\n    _refScope?: unknown;\n    _unresolvedRefs?: unknown;\n  };\n  void _refKey;\n  void _refScope;\n  void _unresolvedRefs;\n  return Object.keys(rest).length === 0 ? undefined : rest;\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAmCA,SAAS,2BACP,OACqC;CACrC,IAAI,CAAC,MAAM,KAAK,CAAC,CAAC,WAAW,GAAG,GAC9B;CAEF,IAAI;EACF,MAAM,SAAS,KAAK,MAAM,KAAK;EAC/B,IAAI,UAAU,QAAQ,OAAO,WAAW,YAAY,CAAC,MAAM,QAAQ,MAAM,GACvE,OAAO;CAEX,QAAQ;EACN;CACF;AAEF;;;;;;;AAQA,MAAa,0BAA0B;;AAGvC,MAAa,sBAAsB;;;;;;;AAQnC,MAAa,6BAA6B;;AAG1C,SAAgB,qBAAqB,KAAqB;CACxD,OAAO,SAAS,IAAI;AACtB;;AAGA,SAAgB,kBAAkB,WAAmB,MAAsB;CACzE,OAAO,OAAO,UAAU,MAAM;AAChC;AA+DA,MAAM,gCAA6C,IAAI,IAAoB;;;;;;;AAQ3E,IAAM,iBAAN,MAAqB;CACnB,0BAA+B,IAAI,IAAI;CACvC,YAAoB;CACpB,cAAsB;CACtB,uCAAoC,IAAI,IAAI;AAC9C;;;;;AAMA,MAAM,eAAe;;;;;;;AAQrB,MAAM,0BAA0B;;;;;;;;;;;;AAahC,IAAa,8BAAb,MAAa,4BAA4B;CACvC,4BAAiD,IAAI,IAAI;CACzD;CACA;CACA;;;;;;CAMA,OAAwB,sBAAsB;CAE9C,YAAY,UAA8C,CAAC,GAAG;;;;;;;;;;EAU5D,MAAM,YACJ,QAAQ,iBAAiB,QAAQ,QAAQ,gBAAgB,IACrD,QAAQ,gBACRA,mBAAAA;;;;;;;;;EASN,MAAM,WACJ,QAAQ,gBAAgB,QAAQ,QAAQ,eAAe,IACnD,KAAK,IAAI,QAAQ,cAAcC,mBAAAA,+BAA+B,IAC9DC,mBAAAA,gCAAgC,SAAS;EAC/C,KAAK,eAAe;;;;;;;;;EASpB,KAAK,gBAAgB,KAAK,IAAI,WAAW,QAAQ;EACjD,KAAK,gBACH,QAAQ,iBAAiB,QAAQ,QAAQ,gBAAgB,IACrD,QAAQ,gBACR;CACR;CAEA,OAAe,OAAmC;EAChD,OAAO,SAAS;CAClB;CAEA,YAAoB,OAA2C;EAC7D,MAAM,MAAM,KAAK,OAAO,KAAK;EAC7B,IAAI,QAAQ,KAAK,UAAU,IAAI,GAAG;EAClC,IAAI,SAAS,MAAM;GACjB,QAAQ,IAAI,eAAe;GAC3B,KAAK,UAAU,IAAI,KAAK,KAAK;GAC7B,IAAI,KAAK,UAAU,OAAO,KAAK,eAAe;IAC5C,MAAM,SAAS,KAAK,UAAU,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC;IAC5C,IAAI,UAAU,QAAQ,WAAW,KAC/B,KAAK,UAAU,OAAO,MAAM;GAEhC;EACF;EACA,OAAO;CACT;;CAGA,IAAI,OAA2B,KAAa,OAAqB;EAC/D,MAAM,SAAS,KAAK,YAAY,KAAK;EACrC,MAAM,UACJ,MAAM,SAAS,KAAK,gBAChB,MAAM,MAAM,GAAG,KAAK,aAAa,IACjC;EACN,MAAM,WAAW,OAAO,QAAQ,IAAI,GAAG;EACvC,IAAI,YAAY,MAAM;GACpB,OAAO,aAAa,SAAS;GAC7B,OAAO,QAAQ,OAAO,GAAG;EAC3B;EACA,OAAO,QAAQ,IAAI,KAAK,OAAO;EAC/B,OAAO,aAAa,QAAQ;EAC5B,KAAK,kBAAkB,MAAM;CAC/B;;CAGA,IAAI,OAA2B,KAAiC;EAC9D,OAAO,KAAK,UAAU,IAAI,KAAK,OAAO,KAAK,CAAC,CAAC,EAAE,QAAQ,IAAI,GAAG;CAChE;;;;;;;CAQA,IAAI,OAA2B,KAAsB;EACnD,OAAO,KAAK,UAAU,IAAI,KAAK,OAAO,KAAK,CAAC,CAAC,EAAE,QAAQ,IAAI,GAAG,KAAK;CACrE;;CAGA,IAAI,OAAe;EACjB,IAAI,IAAI;EACR,KAAK,MAAM,UAAU,KAAK,UAAU,OAAO,GACzC,KAAK,OAAO,QAAQ;EAEtB,OAAO;CACT;;CAGA,IAAI,iBAAyB;EAC3B,OAAO,KAAK;CACd;;CAGA,IAAI,aAAqB;EACvB,OAAO,KAAK;CACd;;CAGA,QAAc;EACZ,KAAK,UAAU,MAAM;CACvB;;;;;;;CAQA,WAAW,OAAiC;EAC1C,KAAK,UAAU,OAAO,KAAK,OAAO,KAAK,CAAC;CAC1C;;;;;;;;;;;;CAaA,SAAS,OAAmC;EAC1C,IAAI,SAAS,MACX,KAAK,UAAU,OAAO,YAAY;EAEpC,MAAM,SAAS,KAAK,YAAY,KAAK;EACrC,OAAO,OAAO;CAChB;;;;;;;CAQA,cAAc,OAA2B,UAA2B;EAClE,MAAM,SAAS,KAAK,YAAY,KAAK;EACrC,IAAI,OAAO,qBAAqB,IAAI,QAAQ,GAC1C,OAAO;EAET,OAAO,qBAAqB,IAAI,QAAQ;EACxC,OAAO;CACT;;;;;;;;;;CAWA,QACE,OACA,MACA,SACkB;EAClB,IAAI,CAAC,kBAAkB,IAAI,GACzB,OAAO;GAAE,UAAU;GAAM,YAAY,CAAC;EAAE;EAE1C,MAAM,SAAS,KAAK,UAAU,IAAI,KAAK,OAAO,KAAK,CAAC;EACpD,OAAO,KAAK,eAAe,QAAQ,WAAW,eAAe,MAAM,OAAO;CAC5E;;;;;;;;;;;;CAaA,SAAS,OAAkD;EACzD,MAAM,SAAS,KAAK,UAAU,IAAI,KAAK,OAAO,KAAK,CAAC;EACpD,MAAM,UAAuC,SACzC,IAAI,IAAI,OAAO,OAAO,IACtB;EACJ,OAAO,EACL,UAAa,MAAS,YACpB,KAAK,eAAe,SAAS,MAAM,OAAO,EAC9C;CACF;CAEA,eACE,SACA,MACA,SACkB;EAClB,IAAI,CAAC,kBAAkB,IAAI,GACzB,OAAO;GAAE,UAAU;GAAM,YAAY,CAAC;EAAE;EAE1C,MAAM,kBAAkB,SAAS,wBAAwB;EACzD,MAAM,6BAAa,IAAI,IAAY;;;;;;;;;EASnC,IAAI,mBAAmB,OAAO,SAAS,UAAU;GAC/C,MAAM,aAAa,2BAA2B,IAAI;GAClD,IAAI,cAAc,QAAA,YAAsB,YAItC,OAAO;IAAE,UAHQ,KAAK,UACpB,KAAK,UAAU,SAAS,YAAY,YAAY,IAAI,CAEtC;IAAG,YAAY,MAAM,KAAK,UAAU;GAAE;EAE1D;EAOA,OAAO;GAAE,UANQ,KAAK,UACpB,SACA,MACA,YACA,eAEc;GAAG,YAAY,MAAM,KAAK,UAAU;EAAE;CACxD;CAEA,UACE,SACA,OACA,YACA,mBAAmB,OACV;EACT,IAAI,OAAO,UAAU,UACnB,OAAO,KAAK,gBAAgB,SAAS,OAAO,UAAU;EAExD,IAAI,MAAM,QAAQ,KAAK,GACrB,OAAO,MAAM,KAAK,SAAS,KAAK,UAAU,SAAS,MAAM,UAAU,CAAC;EAEtE,IAAI,UAAU,QAAQ,OAAO,UAAU,UAAU;GAC/C,MAAM,SAAS;GACf,MAAM,OAAgC,CAAC;GACvC,KAAK,MAAM,CAAC,KAAK,SAAS,OAAO,QAAQ,MAAM;;;;;;;GAO7C,KAAK,OACH,oBAAoB,QAAA,WAChB,OACA,KAAK,UAAU,SAAS,MAAM,UAAU;GAEhD,OAAO;EACT;EACA,OAAO;CACT;CAEA,gBACE,SACA,OACA,YACQ;EACR,IAAI,MAAM,QAAQ,QAAQ,MAAM,IAC9B,OAAO;EAET,OAAO,MAAM,QACX,4BAA4B,sBAC3B,OAAO,QAAgB;GACtB,MAAM,SAAS,QAAQ,IAAI,GAAG;GAC9B,IAAI,UAAU,MAAM;IAClB,WAAW,IAAI,GAAG;IAClB,OAAO;GACT;GACA,OAAO;EACT,CACF;CACF;CAEA,kBAA0B,QAA8B;EACtD,IAAI,OAAO,aAAa,KAAK,cAC3B;EAEF,KAAK,MAAM,OAAO,OAAO,QAAQ,KAAK,GAAG;GACvC,IAAI,OAAO,aAAa,KAAK,cAC3B;GAEF,MAAM,QAAQ,OAAO,QAAQ,IAAI,GAAG;GACpC,IAAI,SAAS,MACX;GAEF,OAAO,aAAa,MAAM;GAC1B,OAAO,QAAQ,OAAO,GAAG;EAC3B;CACF;AACF;;;;;;AAOA,SAAS,kBAAkB,OAAyB;CAClD,IAAI,OAAO,UAAU,UACnB,OAAO,MAAM,QAAQ,QAAQ,MAAM;CAErC,IAAI,MAAM,QAAQ,KAAK,GAAG;EACxB,KAAK,MAAM,QAAQ,OACjB,IAAI,kBAAkB,IAAI,GACxB,OAAO;EAGX,OAAO;CACT;CACA,IAAI,UAAU,QAAQ,OAAO,UAAU,UAAU;EAC/C,KAAK,MAAM,QAAQ,OAAO,OAAO,KAAgC,GAC/D,IAAI,kBAAkB,IAAI,GACxB,OAAO;EAGX,OAAO;CACT;CACA,OAAO;AACT;;;;;;;;;;;;;;;;;;;;;;;;;;;AA4BA,SAAgB,gCACd,SACA,KACA,aAAuB,CAAC,GAChB;CACR,MAAM,YAAY,OAAO;CACzB,MAAM,gBAAgB,WAAW,SAAS;CAC1C,IAAI,CAAC,aAAa,CAAC,eACjB,OAAO;CAGT,IADgB,QAAQ,UACd,CAAC,CAAC,WAAW,GAAG,GAAG;EAC3B,MAAM,YAAY,2BAA2B,SAAS,KAAK,UAAU;EACrE,IAAI,aAAa,MACf,OAAO;CAEX;CAKA,OAAO,GAJQ,YAAY,GAAG,qBAAqB,GAAI,EAAE,MAAM,KAI5C,UAHH,gBACZ,uBAAuB,WAAW,KAAK,IAAI,EAAE,KAC7C;AAEN;AAEA,SAAS,2BACP,SACA,KACA,YACe;CACf,IAAI;CACJ,IAAI;EACF,SAAS,KAAK,MAAM,OAAO;CAC7B,QAAQ;EACN,OAAO;CACT;CAEA,IAAI,WAAW,QAAQ,OAAO,WAAW,YAAY,MAAM,QAAQ,MAAM,GACvE,OAAO;CAGT,MAAM,MAAM;CACZ,MAAM,eAAe,OAAO;CAC5B,MAAM,sBAAsB,WAAW,SAAS;;;;;;;;;;CAWhD,IACE,gBAAA,UACuB,OACvB,IAAA,YAA6B,OAC7B,IAAA,WAA4B,MAE5B,OAAO;CAET,IACE,uBAAA,sBAC8B,OAC9B,IAAA,uBAAmC,QACnC,CAAC,mBAAmB,IAAA,qBAAiC,UAAU,GAE/D,OAAO;;;;;;;;;CAWT,MAAM,2BAAW,IAAI,IAAY;CACjC,IAAI,cAAc,SAAS,IAAI,mBAAmB;CAClD,IAAI,qBAAqB,SAAS,IAAI,0BAA0B;CAChE,MAAM,OAAgC,CAAC;CACvC,KAAK,MAAM,CAAC,GAAG,MAAM,OAAO,QAAQ,GAAG,GACrC,IAAI,CAAC,SAAS,IAAI,CAAC,GACjB,KAAK,KAAK;CAGd,MAAM,WAAoC,CAAC;CAC3C,IAAI,cACF,SAAS,uBAAuB;CAElC,IAAI,qBACF,SAAS,8BAA8B;CAEzC,OAAO,OAAO,UAAU,IAAI;CAG5B,OADe,WAAW,KAAK,OACnB,IAAI,KAAK,UAAU,UAAU,MAAM,CAAC,IAAI,KAAK,UAAU,QAAQ;AAC7E;AAEA,SAAS,mBAAmB,GAAY,GAA+B;CACrE,IAAI,CAAC,MAAM,QAAQ,CAAC,KAAK,EAAE,WAAW,EAAE,QACtC,OAAO;CAET,KAAK,IAAI,IAAI,GAAG,IAAI,EAAE,QAAQ,KAC5B,IAAI,EAAE,OAAO,EAAE,IACb,OAAO;CAGX,OAAO;AACT;;;;;;;;;;;;;;;;;;;;;;;AAwBA,SAAgB,uBACd,UACA,UACA,OACe;CACf,IAAI,YAAY,MAAM,OAAO;;;;;;CAO7B,IAAI;CACJ,KAAK,IAAI,IAAI,GAAG,IAAI,SAAS,QAAQ,KAAK;EACxC,MAAM,IAAI,SAAS;EACnB,IAAI,EAAE,SAAS,MAAM,QAAQ;;;;;;;;;;;EAW7B,MAAM,UAAU,EAAE;EAClB,IAAI,WAAW,QAAQ,OAAO,YAAY,UAAU;EACpD,MAAM,OAAO;EACb,MAAM,YAAY,aAAa;EAC/B,MAAM,cAAc,eAAe;EACnC,MAAM,qBAAqB,qBAAqB;EAChD,IAAI,CAAC,aAAa,CAAC,eAAe,CAAC,oBAAoB;EACvD,IAAIC,oBAAAA,4BAA4B,CAAC,GAAG;GAClC,QAAQ,SAAS,MAAM;GACvB,IAAI,KAAK,4BAA4B,GAAkB,EAAE,OAAO;GAChE;EACF;EAEA,MAAM,SAAS,WAAW,IAAI;EAC9B,MAAM,aAAa,mBAAmB,IAAI;;;;;;;;;EAU1C,MAAM,cAAc,aAAa,IAAI,KAAK;EAC1C,MAAM,UACJ,UAAU,QAAQ,SAAS,IAAI,aAAa,MAAM,IAAI,SAAS,KAAA;EACjE,MAAM,YAAY,WAAW,QAAQ,WAAW,SAAS;EAEzD,MAAM,KAAK;EACX,IAAI,cAAsC,GAAG;EAE7C,IAAI,aAAa,OAAO,GAAG,YAAY,UACrC,cAAc,gCACZ,GAAG,SACH,SACA,UACF;OACK,IAAI,aAAa,MAAM,QAAQ,GAAG,OAAO,GAAG;;;;;;;;;;;;;;;;;GAiBjD,MAAM,eAAsD,CAAC;GAC7D,IAAI,WAAW,MACb,aAAa,KAAK;IAChB,MAAM;IACN,MAAM,qBAAqB,OAAO;GACpC,CAAC;GAEH,IAAI,WAAW,SAAS,GACtB,aAAa,KAAK;IAChB,MAAM;IACN,MAAM,qBAAqB,WAAW,KAAK,IAAI,EAAE;GACnD,CAAC;GAEH,IAAI,aAAa,SAAS,GACxB,cAAc,CACZ,GAAG,cACH,GAAG,GAAG,OACR;EAEJ;;;;;;;EAQA,QAAQ,SAAS,MAAM;EACvB,IAAI,KAAK,4BAA4B,IAAI,WAAW;CACtD;CAEA,OAAO,OAAO;AAChB;;;;;;AAOA,SAAS,WACP,MACoB;CACpB,MAAM,IAAI,MAAM;CAChB,OAAO,OAAO,MAAM,WAAW,IAAI,KAAA;AACrC;;;;;;;AAQA,SAAS,aACP,MACoB;CACpB,MAAM,IAAI,MAAM;CAChB,OAAO,OAAO,MAAM,WAAW,IAAI,KAAA;AACrC;;;;;;;;AASA,SAAS,mBACP,MACU;CACV,MAAM,IAAI,MAAM;CAChB,IAAI,CAAC,MAAM,QAAQ,CAAC,GAAG,OAAO,CAAC;CAC/B,MAAM,MAAgB,CAAC;CACvB,KAAK,MAAM,QAAQ,GACjB,IAAI,OAAO,SAAS,UAAU,IAAI,KAAK,IAAI;CAE7C,OAAO;AACT;;;;;;;;;;;;;;AAeA,SAAS,4BACP,IACA,SACa;CACb,OAAO,IAAIC,yBAAAA,YAAY;EACrB,IAAI,GAAG;EACP,MAAM,GAAG;EACT,QAAQ,GAAG;EACX,UAAU,GAAG;EACb,cAAc,GAAG;EACjB,mBAAmB,GAAG;EACtB,mBAAmB,0BAA0B,GAAG,iBAAiB;EACjE;CACF,CAAC;AACH;;;;;;;;AASA,SAAS,0BACP,QACqC;CACrC,IAAI,UAAU,MAAM,OAAO,KAAA;CAC3B,IACE,EAAE,aAAa,WACf,EAAE,eAAe,WACjB,EAAE,qBAAqB,SAEvB,OAAO;CAET,MAAM,EAAE,SAAS,WAAW,iBAAiB,GAAG,SAAS;CAWzD,OAAO,OAAO,KAAK,IAAI,CAAC,CAAC,WAAW,IAAI,KAAA,IAAY;AACtD"}
+{"version":3,"file":"toolOutputReferences.cjs","names":["HARD_MAX_TOOL_RESULT_CHARS","HARD_MAX_TOTAL_TOOL_OUTPUT_SIZE","calculateMaxTotalToolOutputSize","isComputerCallOutputMessage","ToolMessage"],"sources":["../../../src/tools/toolOutputReferences.ts"],"sourcesContent":["/**\n * Tool output reference registry.\n *\n * When enabled via `RunConfig.toolOutputReferences.enabled`, ToolNode\n * stores each successful tool output under a stable key\n * (`tool<idx>turn<turn>`) where `idx` is the tool's position within a\n * ToolNode batch and `turn` is the batch index within the run\n * (incremented once per ToolNode invocation).\n *\n * Subsequent tool calls can pipe a previous output into their args by\n * embedding `{{tool<idx>turn<turn>}}` inside any string argument;\n * {@link ToolOutputReferenceRegistry.resolve} walks the args and\n * substitutes the placeholders immediately before invocation.\n *\n * The registry stores the *raw, untruncated* tool output so a later\n * `{{…}}` substitution pipes the full payload into the next tool —\n * even when the LLM only saw a head+tail-truncated preview in\n * `ToolMessage.content`. Outputs are stored without any annotation\n * (the `_ref` key or the `[ref: ...]` prefix seen by the LLM is\n * strictly a UX signal attached to `ToolMessage.content`). Keeping the\n * registry pristine means downstream bash/jq piping receives the\n * complete, verbatim output with no injected fields.\n */\n\nimport { ToolMessage } from '@langchain/core/messages';\nimport type { BaseMessage } from '@langchain/core/messages';\nimport {\n  calculateMaxTotalToolOutputSize,\n  HARD_MAX_TOOL_RESULT_CHARS,\n  HARD_MAX_TOTAL_TOOL_OUTPUT_SIZE,\n} from '@/utils/truncation';\nimport { isComputerCallOutputMessage } from '@/utils/toolContent';\nimport { INTENT_ARG } from '@/tools/intentArg';\n\n/** Parses a stringified JSON object arg; undefined for anything else. */\nfunction parseStringifiedArgsObject(\n  value: string\n): Record<string, unknown> | undefined {\n  if (!value.trim().startsWith('{')) {\n    return undefined;\n  }\n  try {\n    const parsed = JSON.parse(value) as unknown;\n    if (\n      parsed != null &&\n      typeof parsed === 'object' &&\n      !Array.isArray(parsed)\n    ) {\n      return parsed as Record<string, unknown>;\n    }\n  } catch {\n    return undefined;\n  }\n  return undefined;\n}\n\n/**\n * Non-global matcher for a single `{{tool<i>turn<n>}}` placeholder.\n * Exported for consumers that want to detect references (e.g., syntax\n * highlighting, docs). The stateful `g` variant lives inside the\n * registry so nobody trips on `lastIndex`.\n */\nexport const TOOL_OUTPUT_REF_PATTERN = /\\{\\{(tool\\d+turn\\d+)\\}\\}/;\n\n/** Object key used when a parsed-object output has `_ref` injected. */\nexport const TOOL_OUTPUT_REF_KEY = '_ref';\n\n/**\n * Object key used to carry unresolved reference warnings on a parsed-\n * object output. Using a dedicated field instead of a trailing text\n * line keeps the annotated `ToolMessage.content` parseable as JSON for\n * downstream consumers that rely on the object shape.\n */\nexport const TOOL_OUTPUT_UNRESOLVED_KEY = '_unresolved_refs';\n\n/** Single-line prefix prepended to non-object tool outputs so the LLM sees the reference key. */\nexport function buildReferencePrefix(key: string): string {\n  return `[ref: ${key}]`;\n}\n\n/** Stable registry key for a tool output. */\nexport function buildReferenceKey(toolIndex: number, turn: number): string {\n  return `tool${toolIndex}turn${turn}`;\n}\n\nexport type ToolOutputReferenceRegistryOptions = {\n  /** Maximum characters stored per registered output. */\n  maxOutputSize?: number;\n  /** Maximum total characters retained across all registered outputs. */\n  maxTotalSize?: number;\n  /**\n   * Upper bound on the number of concurrently-tracked runs. When\n   * exceeded, the oldest run bucket is evicted (FIFO). Defaults to 32.\n   */\n  maxActiveRuns?: number;\n};\n\nexport interface ToolOutputReferenceState {\n  entries: Array<{ key: string; value: string }>;\n  turnCounter: number;\n  warnedNonStringTools: string[];\n}\n\n/**\n * Result of resolving placeholders in tool args.\n */\nexport type ResolveResult<T> = {\n  /** Arguments with placeholders replaced. Same shape as the input. */\n  resolved: T;\n  /** Reference keys that were referenced but had no stored value. */\n  unresolved: string[];\n};\n\n/**\n * Read-only view over a frozen registry snapshot. Returned by\n * {@link ToolOutputReferenceRegistry.snapshot} for callers that need\n * to resolve placeholders against the registry state at a specific\n * point in time, ignoring any subsequent registrations.\n */\nexport interface ToolOutputResolveView {\n  resolve<T>(args: T, options?: ResolveOptions): ResolveResult<T>;\n}\n\n/**\n * Per-call resolution options. `substituteIntentKey` opts the top-level\n * `intent` key back INTO placeholder substitution: the exemption protects\n * the injected display label, but a tool whose own schema declares a\n * business parameter named `intent` (the injectors skip such tools) still\n * needs references piped into it like any other argument.\n */\nexport type ResolveOptions = {\n  substituteIntentKey?: boolean;\n};\n\n/**\n * Pre-resolved arg map keyed by `toolCallId`. Used by the mixed\n * direct+event dispatch path to feed event calls' resolved args\n * (captured pre-batch) into the dispatcher without re-resolving\n * against the now-stale live registry.\n */\nexport type PreResolvedArgsMap = Map<\n  string,\n  { resolved: Record<string, unknown>; unresolved: string[] }\n>;\n\n/**\n * Per-call sink for resolved args, keyed by `toolCallId`. Threaded\n * as a per-batch local map so concurrent `ToolNode.run()` calls do\n * not race on shared sink state.\n */\nexport type ResolvedArgsByCallId = Map<string, Record<string, unknown>>;\n\nconst EMPTY_ENTRIES: ReadonlyMap<string, string> = new Map<string, string>();\n\n/**\n * Per-run state bucket held inside the registry. Each distinct\n * `run_id` gets its own bucket so overlapping concurrent runs on a\n * shared registry cannot leak outputs, turn counters, or warn-memos\n * into one another.\n */\nclass RunStateBucket {\n  entries: Map<string, string> = new Map();\n  totalSize: number = 0;\n  turnCounter: number = 0;\n  warnedNonStringTools: Set<string> = new Set();\n}\n\n/**\n * Anonymous (`run_id` absent) bucket key. Anonymous batches are\n * treated as fresh runs on every invocation — see `nextTurn`.\n */\nconst ANON_RUN_KEY = '\\0anon';\n\n/**\n * Default upper bound on the number of concurrently-tracked runs per\n * registry. When exceeded, the oldest run's bucket (by insertion\n * order) is evicted. Keeps memory bounded when a ToolNode is reused\n * across many runs without explicit `releaseRun` calls.\n */\nconst DEFAULT_MAX_ACTIVE_RUNS = 32;\n\n/**\n * Ordered map of reference-key → stored output, partitioned by run so\n * concurrent / interleaved runs sharing one registry cannot leak\n * outputs between each other.\n *\n * Each public method takes a `runId` which selects the run's bucket.\n * Hosts typically get one registry per run via `Graph`, in which\n * case only a single bucket is ever populated; the partitioning\n * exists so the registry also behaves correctly when a single\n * instance is reused directly.\n */\nexport class ToolOutputReferenceRegistry {\n  private runStates: Map<string, RunStateBucket> = new Map();\n  private readonly maxOutputSize: number;\n  private readonly maxTotalSize: number;\n  private readonly maxActiveRuns: number;\n  /**\n   * Local stateful matcher used only by `replaceInString`. Kept\n   * off-module so callers of the exported `TOOL_OUTPUT_REF_PATTERN`\n   * never see a stale `lastIndex`.\n   */\n  private static readonly PLACEHOLDER_MATCHER = /\\{\\{(tool\\d+turn\\d+)\\}\\}/g;\n\n  constructor(options: ToolOutputReferenceRegistryOptions = {}) {\n    /**\n     * Per-output default is the same ~400 KB budget as the standard\n     * tool-result truncation (`HARD_MAX_TOOL_RESULT_CHARS`). This\n     * keeps a single `{{…}}` substitution at a size that is safe to\n     * pass through typical shell `ARG_MAX` limits and matches what\n     * the LLM would otherwise have seen. Hosts that want larger per-\n     * output payloads (API consumers, long JSON streams) can raise\n     * the cap explicitly up to the 5 MB total budget.\n     */\n    const perOutput =\n      options.maxOutputSize != null && options.maxOutputSize > 0\n        ? options.maxOutputSize\n        : HARD_MAX_TOOL_RESULT_CHARS;\n    /**\n     * Clamp a caller-supplied `maxTotalSize` to\n     * `HARD_MAX_TOTAL_TOOL_OUTPUT_SIZE` (5 MB) so the documented\n     * absolute cap is enforced regardless of host config —\n     * `calculateMaxTotalToolOutputSize` already applies the same\n     * upper bound on its computed default, but the user-provided\n     * branch was bypassing it.\n     */\n    const totalRaw =\n      options.maxTotalSize != null && options.maxTotalSize > 0\n        ? Math.min(options.maxTotalSize, HARD_MAX_TOTAL_TOOL_OUTPUT_SIZE)\n        : calculateMaxTotalToolOutputSize(perOutput);\n    this.maxTotalSize = totalRaw;\n    /**\n     * The per-output cap can never exceed the per-run aggregate cap:\n     * if a single entry were allowed to be larger than `maxTotalSize`,\n     * the eviction loop would either blow the cap (to keep the entry)\n     * or self-evict a just-stored value. Clamping here turns\n     * `maxTotalSize` into a hard upper bound on *any* state the\n     * registry retains per run.\n     */\n    this.maxOutputSize = Math.min(perOutput, totalRaw);\n    this.maxActiveRuns =\n      options.maxActiveRuns != null && options.maxActiveRuns > 0\n        ? options.maxActiveRuns\n        : DEFAULT_MAX_ACTIVE_RUNS;\n  }\n\n  private keyFor(runId: string | undefined): string {\n    return runId ?? ANON_RUN_KEY;\n  }\n\n  private getOrCreate(runId: string | undefined): RunStateBucket {\n    const key = this.keyFor(runId);\n    let state = this.runStates.get(key);\n    if (state == null) {\n      state = new RunStateBucket();\n      this.runStates.set(key, state);\n      if (this.runStates.size > this.maxActiveRuns) {\n        const oldest = this.runStates.keys().next().value;\n        if (oldest != null && oldest !== key) {\n          this.runStates.delete(oldest);\n        }\n      }\n    }\n    return state;\n  }\n\n  /** Registers (or replaces) the output stored under `key` for `runId`. */\n  set(runId: string | undefined, key: string, value: string): void {\n    const bucket = this.getOrCreate(runId);\n    const clipped =\n      value.length > this.maxOutputSize\n        ? value.slice(0, this.maxOutputSize)\n        : value;\n    const existing = bucket.entries.get(key);\n    if (existing != null) {\n      bucket.totalSize -= existing.length;\n      bucket.entries.delete(key);\n    }\n    bucket.entries.set(key, clipped);\n    bucket.totalSize += clipped.length;\n    this.evictWithinBucket(bucket);\n  }\n\n  /** Returns the stored value for `key` in `runId`'s bucket, or `undefined`. */\n  get(runId: string | undefined, key: string): string | undefined {\n    return this.runStates.get(this.keyFor(runId))?.entries.get(key);\n  }\n\n  /**\n   * Returns `true` when `key` is currently stored in `runId`'s bucket.\n   * Used by {@link annotateMessagesForLLM} to gate transient annotation\n   * on whether the registry still owns the referenced output (a stale\n   * `_refKey` from a prior run silently no-ops here).\n   */\n  has(runId: string | undefined, key: string): boolean {\n    return this.runStates.get(this.keyFor(runId))?.entries.has(key) ?? false;\n  }\n\n  /** Total number of registered outputs across every run bucket. */\n  get size(): number {\n    let n = 0;\n    for (const bucket of this.runStates.values()) {\n      n += bucket.entries.size;\n    }\n    return n;\n  }\n\n  /** Maximum characters retained per output (post-clip). */\n  get perOutputLimit(): number {\n    return this.maxOutputSize;\n  }\n\n  /** Maximum total characters retained *per run*. */\n  get totalLimit(): number {\n    return this.maxTotalSize;\n  }\n\n  /** Drops every run's state. */\n  clear(): void {\n    this.runStates.clear();\n  }\n\n  /**\n   * Explicitly release `runId`'s state. Safe to call when a run has\n   * finished. Hosts sharing one registry across runs should call this\n   * to reclaim memory deterministically; otherwise LRU eviction kicks\n   * in when `maxActiveRuns` runs accumulate.\n   */\n  releaseRun(runId: string | undefined): void {\n    this.runStates.delete(this.keyFor(runId));\n  }\n\n  /**\n   * Claims the next batch turn synchronously from `runId`'s bucket.\n   *\n   * Must be called once at the start of each ToolNode batch before\n   * any `await`, so concurrent invocations within the same run see\n   * distinct turn values (reads are effectively atomic by JS's\n   * single-threaded execution of the sync prefix).\n   *\n   * If `runId` is missing the anonymous bucket is dropped and a\n   * fresh one created so each anonymous call behaves as its own run.\n   */\n  nextTurn(runId: string | undefined): number {\n    if (runId == null) {\n      this.runStates.delete(ANON_RUN_KEY);\n    }\n    const bucket = this.getOrCreate(runId);\n    return bucket.turnCounter++;\n  }\n\n  /**\n   * Records that `toolName` has been warned about in `runId` (returns\n   * `true` on the first call per run, `false` after). Used by\n   * ToolNode to emit one log line per offending tool per run when a\n   * `ToolMessage.content` isn't a string.\n   */\n  claimWarnOnce(runId: string | undefined, toolName: string): boolean {\n    const bucket = this.getOrCreate(runId);\n    if (bucket.warnedNonStringTools.has(toolName)) {\n      return false;\n    }\n    bucket.warnedNonStringTools.add(toolName);\n    return true;\n  }\n\n  /**\n   * Walks `args` and replaces every `{{tool<i>turn<n>}}` placeholder in\n   * string values with the stored output *from `runId`'s bucket*. Non-\n   * string values and object keys are left untouched. Unresolved\n   * references are left in-place and reported so the caller can\n   * surface them to the LLM. When no placeholder appears anywhere in\n   * the serialized args, the original input is returned without\n   * walking the tree.\n   */\n  resolve<T>(\n    runId: string | undefined,\n    args: T,\n    options?: ResolveOptions\n  ): ResolveResult<T> {\n    if (!hasAnyPlaceholder(args)) {\n      return { resolved: args, unresolved: [] };\n    }\n    const bucket = this.runStates.get(this.keyFor(runId));\n    return this.resolveAgainst(bucket?.entries ?? EMPTY_ENTRIES, args, options);\n  }\n\n  /**\n   * Captures a frozen snapshot of `runId`'s current entries and\n   * returns a view that resolves placeholders against *only* that\n   * snapshot. The snapshot is decoupled from the live registry, so\n   * subsequent `set()` calls (for example, same-turn direct outputs\n   * registering while an event branch is still in flight) are\n   * invisible to the snapshot's `resolve`. Used by the mixed\n   * direct+event dispatch path to preserve same-turn isolation when\n   * a `PreToolUse` hook rewrites event args after directs have\n   * completed.\n   */\n  snapshot(runId: string | undefined): ToolOutputResolveView {\n    const bucket = this.runStates.get(this.keyFor(runId));\n    const entries: ReadonlyMap<string, string> = bucket\n      ? new Map(bucket.entries)\n      : EMPTY_ENTRIES;\n    return {\n      resolve: <T>(args: T, options?: ResolveOptions): ResolveResult<T> =>\n        this.resolveAgainst(entries, args, options),\n    };\n  }\n\n  /** Captures the checkpoint-safe state needed to resume one run bucket. */\n  snapshotState(runId: string | undefined): ToolOutputReferenceState {\n    const bucket = this.runStates.get(this.keyFor(runId));\n    return {\n      entries: [...(bucket?.entries ?? EMPTY_ENTRIES)].map(([key, value]) => ({\n        key,\n        value,\n      })),\n      turnCounter: bucket?.turnCounter ?? 0,\n      warnedNonStringTools: [...(bucket?.warnedNonStringTools ?? [])],\n    };\n  }\n\n  /** Restores a checkpointed run bucket under the current resume scope. */\n  restoreState(\n    runId: string | undefined,\n    state: ToolOutputReferenceState\n  ): void {\n    this.releaseRun(runId);\n    const bucket = this.getOrCreate(runId);\n    for (const { key, value } of state.entries) {\n      this.set(runId, key, value);\n    }\n    bucket.turnCounter = state.turnCounter;\n    for (const toolName of state.warnedNonStringTools) {\n      bucket.warnedNonStringTools.add(toolName);\n    }\n  }\n\n  private resolveAgainst<T>(\n    entries: ReadonlyMap<string, string>,\n    args: T,\n    options?: ResolveOptions\n  ): ResolveResult<T> {\n    if (!hasAnyPlaceholder(args)) {\n      return { resolved: args, unresolved: [] };\n    }\n    const exemptIntentKey = options?.substituteIntentKey !== true;\n    const unresolved = new Set<string>();\n    /**\n     * Providers may deliver the args OBJECT as a JSON string. A plain\n     * string-root transform would expand placeholders inside the `intent`\n     * label too, bypassing the top-level exclusion below — parse, transform\n     * key-aware, and re-serialize so the label stays verbatim while every\n     * other field still substitutes. Only taken when an `intent` key is\n     * actually present; other strings keep the fast raw-string path.\n     */\n    if (exemptIntentKey && typeof args === 'string') {\n      const parsedRoot = parseStringifiedArgsObject(args);\n      if (parsedRoot != null && INTENT_ARG in parsedRoot) {\n        const resolved = JSON.stringify(\n          this.transform(entries, parsedRoot, unresolved, true)\n        ) as T;\n        return { resolved, unresolved: Array.from(unresolved) };\n      }\n    }\n    const resolved = this.transform(\n      entries,\n      args,\n      unresolved,\n      exemptIntentKey\n    ) as T;\n    return { resolved, unresolved: Array.from(unresolved) };\n  }\n\n  private transform(\n    entries: ReadonlyMap<string, string>,\n    value: unknown,\n    unresolved: Set<string>,\n    exemptRootIntent = false\n  ): unknown {\n    if (typeof value === 'string') {\n      return this.replaceInString(entries, value, unresolved);\n    }\n    if (Array.isArray(value)) {\n      return value.map((item) => this.transform(entries, item, unresolved));\n    }\n    if (value !== null && typeof value === 'object') {\n      const source = value as Record<string, unknown>;\n      const next: Record<string, unknown> = {};\n      for (const [key, item] of Object.entries(source)) {\n        /**\n         * The top-level `intent` arg is a display label, never a data\n         * channel: expanding a `{{tool<i>turn<n>}}` placeholder there would\n         * dump a stored output (up to the registry cap) into a single-line\n         * UI label and persist it with the message. Left verbatim instead.\n         */\n        next[key] =\n          exemptRootIntent && key === INTENT_ARG\n            ? item\n            : this.transform(entries, item, unresolved);\n      }\n      return next;\n    }\n    return value;\n  }\n\n  private replaceInString(\n    entries: ReadonlyMap<string, string>,\n    input: string,\n    unresolved: Set<string>\n  ): string {\n    if (input.indexOf('{{tool') === -1) {\n      return input;\n    }\n    return input.replace(\n      ToolOutputReferenceRegistry.PLACEHOLDER_MATCHER,\n      (match, key: string) => {\n        const stored = entries.get(key);\n        if (stored == null) {\n          unresolved.add(key);\n          return match;\n        }\n        return stored;\n      }\n    );\n  }\n\n  private evictWithinBucket(bucket: RunStateBucket): void {\n    if (bucket.totalSize <= this.maxTotalSize) {\n      return;\n    }\n    for (const key of bucket.entries.keys()) {\n      if (bucket.totalSize <= this.maxTotalSize) {\n        return;\n      }\n      const entry = bucket.entries.get(key);\n      if (entry == null) {\n        continue;\n      }\n      bucket.totalSize -= entry.length;\n      bucket.entries.delete(key);\n    }\n  }\n}\n\n/**\n * Cheap pre-check: returns true if any string value in `args` contains\n * the `{{tool` substring. Lets `resolve()` skip the deep tree walk (and\n * its object allocations) for the common case of plain args.\n */\nfunction hasAnyPlaceholder(value: unknown): boolean {\n  if (typeof value === 'string') {\n    return value.indexOf('{{tool') !== -1;\n  }\n  if (Array.isArray(value)) {\n    for (const item of value) {\n      if (hasAnyPlaceholder(item)) {\n        return true;\n      }\n    }\n    return false;\n  }\n  if (value !== null && typeof value === 'object') {\n    for (const item of Object.values(value as Record<string, unknown>)) {\n      if (hasAnyPlaceholder(item)) {\n        return true;\n      }\n    }\n    return false;\n  }\n  return false;\n}\n\n/**\n * Annotates `content` with a reference key and/or unresolved-ref\n * warnings so the LLM sees both alongside the tool output.\n *\n * Behavior:\n *  - If `content` parses as a plain (non-array, non-null) JSON object\n *    and the object does not already have a conflicting `_ref` key,\n *    the reference key and (when present) `_unresolved_refs` array\n *    are injected as object fields, preserving JSON validity for\n *    downstream consumers that parse the output.\n *  - Otherwise (string output, JSON array/primitive, parse failure,\n *    or `_ref` collision), a `[ref: <key>]\\n` prefix line is\n *    prepended and unresolved refs are appended as a trailing\n *    `[unresolved refs: …]` line.\n *\n * The annotated string is what the LLM sees as `ToolMessage.content`.\n * The *original* (un-annotated) value is what gets stored in the\n * registry, so downstream piping remains pristine.\n *\n * @param content     Raw (post-truncation) tool output.\n * @param key         Reference key for this output, or undefined when\n *                    there is nothing to register (errors etc.).\n * @param unresolved  Reference keys that failed to resolve during\n *                    argument substitution. Surfaced so the LLM can\n *                    self-correct its next tool call.\n */\nexport function annotateToolOutputWithReference(\n  content: string,\n  key: string | undefined,\n  unresolved: string[] = []\n): string {\n  const hasRefKey = key != null;\n  const hasUnresolved = unresolved.length > 0;\n  if (!hasRefKey && !hasUnresolved) {\n    return content;\n  }\n  const trimmed = content.trimStart();\n  if (trimmed.startsWith('{')) {\n    const annotated = tryInjectRefIntoJsonObject(content, key, unresolved);\n    if (annotated != null) {\n      return annotated;\n    }\n  }\n  const prefix = hasRefKey ? `${buildReferencePrefix(key!)}\\n` : '';\n  const trailer = hasUnresolved\n    ? `\\n[unresolved refs: ${unresolved.join(', ')}]`\n    : '';\n  return `${prefix}${content}${trailer}`;\n}\n\nfunction tryInjectRefIntoJsonObject(\n  content: string,\n  key: string | undefined,\n  unresolved: string[]\n): string | null {\n  let parsed: unknown;\n  try {\n    parsed = JSON.parse(content);\n  } catch {\n    return null;\n  }\n\n  if (parsed === null || typeof parsed !== 'object' || Array.isArray(parsed)) {\n    return null;\n  }\n\n  const obj = parsed as Record<string, unknown>;\n  const injectingRef = key != null;\n  const injectingUnresolved = unresolved.length > 0;\n\n  /**\n   * Reject the JSON-injection path (fall back to prefix form) when\n   * either of our keys collides with real payload data:\n   *  - `_ref` collision: existing value is non-null and differs from\n   *    the key we're about to inject.\n   *  - `_unresolved_refs` collision: existing value is non-null and\n   *    is not a deep-equal match for the array we'd inject.\n   * This keeps us from silently overwriting legitimate tool output.\n   */\n  if (\n    injectingRef &&\n    TOOL_OUTPUT_REF_KEY in obj &&\n    obj[TOOL_OUTPUT_REF_KEY] !== key &&\n    obj[TOOL_OUTPUT_REF_KEY] != null\n  ) {\n    return null;\n  }\n  if (\n    injectingUnresolved &&\n    TOOL_OUTPUT_UNRESOLVED_KEY in obj &&\n    obj[TOOL_OUTPUT_UNRESOLVED_KEY] != null &&\n    !arraysShallowEqual(obj[TOOL_OUTPUT_UNRESOLVED_KEY], unresolved)\n  ) {\n    return null;\n  }\n\n  /**\n   * Only strip the framework-owned key we're actually injecting —\n   * leave everything else (including a pre-existing `_ref` on the\n   * unresolved-only path, or a pre-existing `_unresolved_refs` on a\n   * plain-annotation path) untouched so we annotate rather than\n   * mutate downstream payload data. Our injected keys land first in\n   * the serialized JSON so the LLM sees them before the body.\n   */\n  const omitKeys = new Set<string>();\n  if (injectingRef) omitKeys.add(TOOL_OUTPUT_REF_KEY);\n  if (injectingUnresolved) omitKeys.add(TOOL_OUTPUT_UNRESOLVED_KEY);\n  const rest: Record<string, unknown> = {};\n  for (const [k, v] of Object.entries(obj)) {\n    if (!omitKeys.has(k)) {\n      rest[k] = v;\n    }\n  }\n  const injected: Record<string, unknown> = {};\n  if (injectingRef) {\n    injected[TOOL_OUTPUT_REF_KEY] = key;\n  }\n  if (injectingUnresolved) {\n    injected[TOOL_OUTPUT_UNRESOLVED_KEY] = unresolved;\n  }\n  Object.assign(injected, rest);\n\n  const pretty = /^\\{\\s*\\n/.test(content);\n  return pretty ? JSON.stringify(injected, null, 2) : JSON.stringify(injected);\n}\n\nfunction arraysShallowEqual(a: unknown, b: readonly string[]): boolean {\n  if (!Array.isArray(a) || a.length !== b.length) {\n    return false;\n  }\n  for (let i = 0; i < a.length; i++) {\n    if (a[i] !== b[i]) {\n      return false;\n    }\n  }\n  return true;\n}\n\n/**\n * Lazy projection that, given a registry and a runId, returns a new\n * `messages` array where each `ToolMessage` carrying ref metadata is\n * projected into a transient copy with annotated content (when the ref\n * is live in the registry) and with the framework-owned `additional_\n * kwargs` keys (`_refKey`, `_refScope`, `_unresolvedRefs`) stripped\n * regardless of whether annotation applied. The original input array\n * and its messages are never mutated.\n *\n * Annotation is gated on registry presence: a stale `_refKey` from a\n * prior run (e.g. one that survived in persisted history) silently\n * no-ops on the *content* side. The strip-metadata side still runs so\n * stale framework keys never leak onto the wire under any custom or\n * future provider serializer that might transmit `additional_kwargs`.\n * `_unresolvedRefs` is always meaningful and is not gated.\n *\n * **Feature-disabled fast path:** when the host hasn't enabled the\n * tool-output-reference feature, the registry is `undefined` and this\n * function returns the input array reference-equal *without iterating\n * a single message*. The loop is exclusive to the feature-enabled\n * code path.\n */\nexport function annotateMessagesForLLM(\n  messages: BaseMessage[],\n  registry: ToolOutputReferenceRegistry | undefined,\n  runId: string | undefined\n): BaseMessage[] {\n  if (registry == null) return messages;\n\n  /**\n   * Lazy-allocate the output array so the common case (no ToolMessage\n   * carries framework metadata) returns the input reference-equal with\n   * zero allocations beyond the per-message predicate checks.\n   */\n  let out: BaseMessage[] | undefined;\n  for (let i = 0; i < messages.length; i++) {\n    const m = messages[i];\n    if (m._getType() !== 'tool') continue;\n    /**\n     * `additional_kwargs` is untyped at the LangChain layer\n     * (`Record<string, unknown>`), so persisted or client-supplied\n     * ToolMessages can carry arbitrary shapes — including primitives\n     * (a malformed serializer might write a string, or `null`).\n     * Guard with a runtime object check before the `in` probes\n     * because the `in` operator throws `TypeError` on primitives.\n     * A single malformed message must never crash the provider call\n     * path; skip its annotation/strip and continue.\n     */\n    const rawMeta = m.additional_kwargs as unknown;\n    if (rawMeta == null || typeof rawMeta !== 'object') continue;\n    const meta = rawMeta as Record<string, unknown>;\n    const hasRefKey = '_refKey' in meta;\n    const hasRefScope = '_refScope' in meta;\n    const hasUnresolvedField = '_unresolvedRefs' in meta;\n    if (!hasRefKey && !hasRefScope && !hasUnresolvedField) continue;\n    if (isComputerCallOutputMessage(m)) {\n      out ??= messages.slice();\n      out[i] = cloneToolMessageWithContent(m as ToolMessage, m.content);\n      continue;\n    }\n\n    const refKey = readRefKey(meta);\n    const unresolved = readUnresolvedRefs(meta);\n\n    /**\n     * Prefer the message-stamped `_refScope` for the registry lookup.\n     * For named runs it equals the current `runId`; for anonymous\n     * invocations it carries the per-batch synthetic scope minted by\n     * ToolNode (`\\0anon-<n>`), which `runId` from config cannot\n     * recover. Falling back to `runId` keeps backward compatibility\n     * with messages stamped before this field existed.\n     */\n    const lookupScope = readRefScope(meta) ?? runId;\n    const liveRef =\n      refKey != null && registry.has(lookupScope, refKey) ? refKey : undefined;\n    const annotates = liveRef != null || unresolved.length > 0;\n\n    const tm = m as ToolMessage;\n    let nextContent: ToolMessage['content'] = tm.content;\n\n    if (annotates && typeof tm.content === 'string') {\n      nextContent = annotateToolOutputWithReference(\n        tm.content,\n        liveRef,\n        unresolved\n      );\n    } else if (annotates && Array.isArray(tm.content)) {\n      /**\n       * Array tool content. The string annotator can't run — this notably\n       * includes a tail tool result that prompt caching rewrote from a string\n       * into a text-block array to host its `cache_control` / `cachePoint`\n       * marker (the `_refKey` survives on `additional_kwargs`). Project the\n       * same markers the string path would, as leading text blocks: the live\n       * `[ref: …]` prefix and/or the unresolved-refs warning. Without this the\n       * common tool-result tail loses its reference marker once cached.\n       *\n       * `as unknown as ToolMessage['content']` is unavoidable: LangChain's\n       * content union does not accept a freshly built mixed array literal even\n       * though the structural shape is valid at runtime. The double-cast is\n       * structurally safe — every original block is preserved and only\n       * `{ type: 'text', text }` blocks (which all providers accept) are\n       * prepended.\n       */\n      const prefixBlocks: Array<{ type: 'text'; text: string }> = [];\n      if (liveRef != null) {\n        prefixBlocks.push({\n          type: 'text',\n          text: buildReferencePrefix(liveRef),\n        });\n      }\n      if (unresolved.length > 0) {\n        prefixBlocks.push({\n          type: 'text',\n          text: `[unresolved refs: ${unresolved.join(', ')}]`,\n        });\n      }\n      if (prefixBlocks.length > 0) {\n        nextContent = [\n          ...prefixBlocks,\n          ...tm.content,\n        ] as unknown as ToolMessage['content'];\n      }\n    }\n\n    /**\n     * Project unconditionally: even when no annotation applies (stale\n     * `_refKey` or non-annotatable content), `cloneToolMessageWithContent`\n     * runs `stripFrameworkRefMetadata` on `additional_kwargs` so the\n     * framework-owned keys never reach the wire.\n     */\n    out ??= messages.slice();\n    out[i] = cloneToolMessageWithContent(tm, nextContent);\n  }\n\n  return out ?? messages;\n}\n\n/**\n * Reads `_refKey` defensively from untyped `additional_kwargs`. Returns\n * undefined for non-string values so a malformed field cannot poison\n * the registry lookup or downstream string operations.\n */\nfunction readRefKey(\n  meta: Record<string, unknown> | undefined\n): string | undefined {\n  const v = meta?._refKey;\n  return typeof v === 'string' ? v : undefined;\n}\n\n/**\n * Reads `_refScope` defensively from untyped `additional_kwargs`.\n * Mirrors {@link readRefKey} — non-string scopes are dropped (the\n * caller falls back to the run-derived scope) rather than passed into\n * the registry as a malformed key.\n */\nfunction readRefScope(\n  meta: Record<string, unknown> | undefined\n): string | undefined {\n  const v = meta?._refScope;\n  return typeof v === 'string' ? v : undefined;\n}\n\n/**\n * Reads `_unresolvedRefs` defensively from untyped `additional_kwargs`.\n * Returns an empty array for any non-array value, and filters out\n * non-string entries from a real array. Without this guard, a hydrated\n * ToolMessage carrying e.g. `_unresolvedRefs: 'tool0turn0'` would crash\n * `attemptInvoke` on the eventual `.length` / `.join(...)` call.\n */\nfunction readUnresolvedRefs(\n  meta: Record<string, unknown> | undefined\n): string[] {\n  const v = meta?._unresolvedRefs;\n  if (!Array.isArray(v)) return [];\n  const out: string[] = [];\n  for (const item of v) {\n    if (typeof item === 'string') out.push(item);\n  }\n  return out;\n}\n\n/**\n * Builds a fresh `ToolMessage` that mirrors `tm`'s identity fields with\n * the supplied `content`. Every `ToolMessage` field but `content` is\n * carried over so the projection is structurally identical to the\n * original from a LangChain serializer's perspective.\n *\n * `additional_kwargs` is rebuilt with the framework-owned ref keys\n * stripped. Defensive: LangChain's standard provider serializers do not\n * transmit `additional_kwargs` to provider HTTP APIs, but a custom\n * adapter or future LangChain change could. Stripping keeps the\n * implementation correct under any serializer behavior at the cost of a\n * shallow object spread per annotated message.\n */\nfunction cloneToolMessageWithContent(\n  tm: ToolMessage,\n  content: ToolMessage['content']\n): ToolMessage {\n  return new ToolMessage({\n    id: tm.id,\n    name: tm.name,\n    status: tm.status,\n    artifact: tm.artifact,\n    tool_call_id: tm.tool_call_id,\n    response_metadata: tm.response_metadata,\n    additional_kwargs: stripFrameworkRefMetadata(tm.additional_kwargs),\n    content,\n  });\n}\n\n/**\n * Returns a copy of `kwargs` with `_refKey`, `_refScope`, and\n * `_unresolvedRefs` removed. Returns the input reference-equal when\n * none of those keys are present so the no-strip path stays cheap;\n * returns `undefined` when stripping leaves the object empty so the\n * caller can drop the field entirely.\n */\nfunction stripFrameworkRefMetadata(\n  kwargs: Record<string, unknown> | undefined\n): Record<string, unknown> | undefined {\n  if (kwargs == null) return undefined;\n  if (\n    !('_refKey' in kwargs) &&\n    !('_refScope' in kwargs) &&\n    !('_unresolvedRefs' in kwargs)\n  ) {\n    return kwargs;\n  }\n  const { _refKey, _refScope, _unresolvedRefs, ...rest } = kwargs as Record<\n    string,\n    unknown\n  > & {\n    _refKey?: unknown;\n    _refScope?: unknown;\n    _unresolvedRefs?: unknown;\n  };\n  void _refKey;\n  void _refScope;\n  void _unresolvedRefs;\n  return Object.keys(rest).length === 0 ? undefined : rest;\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAmCA,SAAS,2BACP,OACqC;CACrC,IAAI,CAAC,MAAM,KAAK,CAAC,CAAC,WAAW,GAAG,GAC9B;CAEF,IAAI;EACF,MAAM,SAAS,KAAK,MAAM,KAAK;EAC/B,IACE,UAAU,QACV,OAAO,WAAW,YAClB,CAAC,MAAM,QAAQ,MAAM,GAErB,OAAO;CAEX,QAAQ;EACN;CACF;AAEF;;;;;;;AAQA,MAAa,0BAA0B;;AAGvC,MAAa,sBAAsB;;;;;;;AAQnC,MAAa,6BAA6B;;AAG1C,SAAgB,qBAAqB,KAAqB;CACxD,OAAO,SAAS,IAAI;AACtB;;AAGA,SAAgB,kBAAkB,WAAmB,MAAsB;CACzE,OAAO,OAAO,UAAU,MAAM;AAChC;AAqEA,MAAM,gCAA6C,IAAI,IAAoB;;;;;;;AAQ3E,IAAM,iBAAN,MAAqB;CACnB,0BAA+B,IAAI,IAAI;CACvC,YAAoB;CACpB,cAAsB;CACtB,uCAAoC,IAAI,IAAI;AAC9C;;;;;AAMA,MAAM,eAAe;;;;;;;AAQrB,MAAM,0BAA0B;;;;;;;;;;;;AAahC,IAAa,8BAAb,MAAa,4BAA4B;CACvC,4BAAiD,IAAI,IAAI;CACzD;CACA;CACA;;;;;;CAMA,OAAwB,sBAAsB;CAE9C,YAAY,UAA8C,CAAC,GAAG;;;;;;;;;;EAU5D,MAAM,YACJ,QAAQ,iBAAiB,QAAQ,QAAQ,gBAAgB,IACrD,QAAQ,gBACRA,mBAAAA;;;;;;;;;EASN,MAAM,WACJ,QAAQ,gBAAgB,QAAQ,QAAQ,eAAe,IACnD,KAAK,IAAI,QAAQ,cAAcC,mBAAAA,+BAA+B,IAC9DC,mBAAAA,gCAAgC,SAAS;EAC/C,KAAK,eAAe;;;;;;;;;EASpB,KAAK,gBAAgB,KAAK,IAAI,WAAW,QAAQ;EACjD,KAAK,gBACH,QAAQ,iBAAiB,QAAQ,QAAQ,gBAAgB,IACrD,QAAQ,gBACR;CACR;CAEA,OAAe,OAAmC;EAChD,OAAO,SAAS;CAClB;CAEA,YAAoB,OAA2C;EAC7D,MAAM,MAAM,KAAK,OAAO,KAAK;EAC7B,IAAI,QAAQ,KAAK,UAAU,IAAI,GAAG;EAClC,IAAI,SAAS,MAAM;GACjB,QAAQ,IAAI,eAAe;GAC3B,KAAK,UAAU,IAAI,KAAK,KAAK;GAC7B,IAAI,KAAK,UAAU,OAAO,KAAK,eAAe;IAC5C,MAAM,SAAS,KAAK,UAAU,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC;IAC5C,IAAI,UAAU,QAAQ,WAAW,KAC/B,KAAK,UAAU,OAAO,MAAM;GAEhC;EACF;EACA,OAAO;CACT;;CAGA,IAAI,OAA2B,KAAa,OAAqB;EAC/D,MAAM,SAAS,KAAK,YAAY,KAAK;EACrC,MAAM,UACJ,MAAM,SAAS,KAAK,gBAChB,MAAM,MAAM,GAAG,KAAK,aAAa,IACjC;EACN,MAAM,WAAW,OAAO,QAAQ,IAAI,GAAG;EACvC,IAAI,YAAY,MAAM;GACpB,OAAO,aAAa,SAAS;GAC7B,OAAO,QAAQ,OAAO,GAAG;EAC3B;EACA,OAAO,QAAQ,IAAI,KAAK,OAAO;EAC/B,OAAO,aAAa,QAAQ;EAC5B,KAAK,kBAAkB,MAAM;CAC/B;;CAGA,IAAI,OAA2B,KAAiC;EAC9D,OAAO,KAAK,UAAU,IAAI,KAAK,OAAO,KAAK,CAAC,CAAC,EAAE,QAAQ,IAAI,GAAG;CAChE;;;;;;;CAQA,IAAI,OAA2B,KAAsB;EACnD,OAAO,KAAK,UAAU,IAAI,KAAK,OAAO,KAAK,CAAC,CAAC,EAAE,QAAQ,IAAI,GAAG,KAAK;CACrE;;CAGA,IAAI,OAAe;EACjB,IAAI,IAAI;EACR,KAAK,MAAM,UAAU,KAAK,UAAU,OAAO,GACzC,KAAK,OAAO,QAAQ;EAEtB,OAAO;CACT;;CAGA,IAAI,iBAAyB;EAC3B,OAAO,KAAK;CACd;;CAGA,IAAI,aAAqB;EACvB,OAAO,KAAK;CACd;;CAGA,QAAc;EACZ,KAAK,UAAU,MAAM;CACvB;;;;;;;CAQA,WAAW,OAAiC;EAC1C,KAAK,UAAU,OAAO,KAAK,OAAO,KAAK,CAAC;CAC1C;;;;;;;;;;;;CAaA,SAAS,OAAmC;EAC1C,IAAI,SAAS,MACX,KAAK,UAAU,OAAO,YAAY;EAEpC,MAAM,SAAS,KAAK,YAAY,KAAK;EACrC,OAAO,OAAO;CAChB;;;;;;;CAQA,cAAc,OAA2B,UAA2B;EAClE,MAAM,SAAS,KAAK,YAAY,KAAK;EACrC,IAAI,OAAO,qBAAqB,IAAI,QAAQ,GAC1C,OAAO;EAET,OAAO,qBAAqB,IAAI,QAAQ;EACxC,OAAO;CACT;;;;;;;;;;CAWA,QACE,OACA,MACA,SACkB;EAClB,IAAI,CAAC,kBAAkB,IAAI,GACzB,OAAO;GAAE,UAAU;GAAM,YAAY,CAAC;EAAE;EAE1C,MAAM,SAAS,KAAK,UAAU,IAAI,KAAK,OAAO,KAAK,CAAC;EACpD,OAAO,KAAK,eAAe,QAAQ,WAAW,eAAe,MAAM,OAAO;CAC5E;;;;;;;;;;;;CAaA,SAAS,OAAkD;EACzD,MAAM,SAAS,KAAK,UAAU,IAAI,KAAK,OAAO,KAAK,CAAC;EACpD,MAAM,UAAuC,SACzC,IAAI,IAAI,OAAO,OAAO,IACtB;EACJ,OAAO,EACL,UAAa,MAAS,YACpB,KAAK,eAAe,SAAS,MAAM,OAAO,EAC9C;CACF;;CAGA,cAAc,OAAqD;EACjE,MAAM,SAAS,KAAK,UAAU,IAAI,KAAK,OAAO,KAAK,CAAC;EACpD,OAAO;GACL,SAAS,CAAC,GAAI,QAAQ,WAAW,aAAc,CAAC,CAAC,KAAK,CAAC,KAAK,YAAY;IACtE;IACA;GACF,EAAE;GACF,aAAa,QAAQ,eAAe;GACpC,sBAAsB,CAAC,GAAI,QAAQ,wBAAwB,CAAC,CAAE;EAChE;CACF;;CAGA,aACE,OACA,OACM;EACN,KAAK,WAAW,KAAK;EACrB,MAAM,SAAS,KAAK,YAAY,KAAK;EACrC,KAAK,MAAM,EAAE,KAAK,WAAW,MAAM,SACjC,KAAK,IAAI,OAAO,KAAK,KAAK;EAE5B,OAAO,cAAc,MAAM;EAC3B,KAAK,MAAM,YAAY,MAAM,sBAC3B,OAAO,qBAAqB,IAAI,QAAQ;CAE5C;CAEA,eACE,SACA,MACA,SACkB;EAClB,IAAI,CAAC,kBAAkB,IAAI,GACzB,OAAO;GAAE,UAAU;GAAM,YAAY,CAAC;EAAE;EAE1C,MAAM,kBAAkB,SAAS,wBAAwB;EACzD,MAAM,6BAAa,IAAI,IAAY;;;;;;;;;EASnC,IAAI,mBAAmB,OAAO,SAAS,UAAU;GAC/C,MAAM,aAAa,2BAA2B,IAAI;GAClD,IAAI,cAAc,QAAA,YAAsB,YAItC,OAAO;IAAE,UAHQ,KAAK,UACpB,KAAK,UAAU,SAAS,YAAY,YAAY,IAAI,CAEtC;IAAG,YAAY,MAAM,KAAK,UAAU;GAAE;EAE1D;EAOA,OAAO;GAAE,UANQ,KAAK,UACpB,SACA,MACA,YACA,eAEc;GAAG,YAAY,MAAM,KAAK,UAAU;EAAE;CACxD;CAEA,UACE,SACA,OACA,YACA,mBAAmB,OACV;EACT,IAAI,OAAO,UAAU,UACnB,OAAO,KAAK,gBAAgB,SAAS,OAAO,UAAU;EAExD,IAAI,MAAM,QAAQ,KAAK,GACrB,OAAO,MAAM,KAAK,SAAS,KAAK,UAAU,SAAS,MAAM,UAAU,CAAC;EAEtE,IAAI,UAAU,QAAQ,OAAO,UAAU,UAAU;GAC/C,MAAM,SAAS;GACf,MAAM,OAAgC,CAAC;GACvC,KAAK,MAAM,CAAC,KAAK,SAAS,OAAO,QAAQ,MAAM;;;;;;;GAO7C,KAAK,OACH,oBAAoB,QAAA,WAChB,OACA,KAAK,UAAU,SAAS,MAAM,UAAU;GAEhD,OAAO;EACT;EACA,OAAO;CACT;CAEA,gBACE,SACA,OACA,YACQ;EACR,IAAI,MAAM,QAAQ,QAAQ,MAAM,IAC9B,OAAO;EAET,OAAO,MAAM,QACX,4BAA4B,sBAC3B,OAAO,QAAgB;GACtB,MAAM,SAAS,QAAQ,IAAI,GAAG;GAC9B,IAAI,UAAU,MAAM;IAClB,WAAW,IAAI,GAAG;IAClB,OAAO;GACT;GACA,OAAO;EACT,CACF;CACF;CAEA,kBAA0B,QAA8B;EACtD,IAAI,OAAO,aAAa,KAAK,cAC3B;EAEF,KAAK,MAAM,OAAO,OAAO,QAAQ,KAAK,GAAG;GACvC,IAAI,OAAO,aAAa,KAAK,cAC3B;GAEF,MAAM,QAAQ,OAAO,QAAQ,IAAI,GAAG;GACpC,IAAI,SAAS,MACX;GAEF,OAAO,aAAa,MAAM;GAC1B,OAAO,QAAQ,OAAO,GAAG;EAC3B;CACF;AACF;;;;;;AAOA,SAAS,kBAAkB,OAAyB;CAClD,IAAI,OAAO,UAAU,UACnB,OAAO,MAAM,QAAQ,QAAQ,MAAM;CAErC,IAAI,MAAM,QAAQ,KAAK,GAAG;EACxB,KAAK,MAAM,QAAQ,OACjB,IAAI,kBAAkB,IAAI,GACxB,OAAO;EAGX,OAAO;CACT;CACA,IAAI,UAAU,QAAQ,OAAO,UAAU,UAAU;EAC/C,KAAK,MAAM,QAAQ,OAAO,OAAO,KAAgC,GAC/D,IAAI,kBAAkB,IAAI,GACxB,OAAO;EAGX,OAAO;CACT;CACA,OAAO;AACT;;;;;;;;;;;;;;;;;;;;;;;;;;;AA4BA,SAAgB,gCACd,SACA,KACA,aAAuB,CAAC,GAChB;CACR,MAAM,YAAY,OAAO;CACzB,MAAM,gBAAgB,WAAW,SAAS;CAC1C,IAAI,CAAC,aAAa,CAAC,eACjB,OAAO;CAGT,IADgB,QAAQ,UACd,CAAC,CAAC,WAAW,GAAG,GAAG;EAC3B,MAAM,YAAY,2BAA2B,SAAS,KAAK,UAAU;EACrE,IAAI,aAAa,MACf,OAAO;CAEX;CAKA,OAAO,GAJQ,YAAY,GAAG,qBAAqB,GAAI,EAAE,MAAM,KAI5C,UAHH,gBACZ,uBAAuB,WAAW,KAAK,IAAI,EAAE,KAC7C;AAEN;AAEA,SAAS,2BACP,SACA,KACA,YACe;CACf,IAAI;CACJ,IAAI;EACF,SAAS,KAAK,MAAM,OAAO;CAC7B,QAAQ;EACN,OAAO;CACT;CAEA,IAAI,WAAW,QAAQ,OAAO,WAAW,YAAY,MAAM,QAAQ,MAAM,GACvE,OAAO;CAGT,MAAM,MAAM;CACZ,MAAM,eAAe,OAAO;CAC5B,MAAM,sBAAsB,WAAW,SAAS;;;;;;;;;;CAWhD,IACE,gBAAA,UACuB,OACvB,IAAA,YAA6B,OAC7B,IAAA,WAA4B,MAE5B,OAAO;CAET,IACE,uBAAA,sBAC8B,OAC9B,IAAA,uBAAmC,QACnC,CAAC,mBAAmB,IAAA,qBAAiC,UAAU,GAE/D,OAAO;;;;;;;;;CAWT,MAAM,2BAAW,IAAI,IAAY;CACjC,IAAI,cAAc,SAAS,IAAI,mBAAmB;CAClD,IAAI,qBAAqB,SAAS,IAAI,0BAA0B;CAChE,MAAM,OAAgC,CAAC;CACvC,KAAK,MAAM,CAAC,GAAG,MAAM,OAAO,QAAQ,GAAG,GACrC,IAAI,CAAC,SAAS,IAAI,CAAC,GACjB,KAAK,KAAK;CAGd,MAAM,WAAoC,CAAC;CAC3C,IAAI,cACF,SAAS,uBAAuB;CAElC,IAAI,qBACF,SAAS,8BAA8B;CAEzC,OAAO,OAAO,UAAU,IAAI;CAG5B,OADe,WAAW,KAAK,OACnB,IAAI,KAAK,UAAU,UAAU,MAAM,CAAC,IAAI,KAAK,UAAU,QAAQ;AAC7E;AAEA,SAAS,mBAAmB,GAAY,GAA+B;CACrE,IAAI,CAAC,MAAM,QAAQ,CAAC,KAAK,EAAE,WAAW,EAAE,QACtC,OAAO;CAET,KAAK,IAAI,IAAI,GAAG,IAAI,EAAE,QAAQ,KAC5B,IAAI,EAAE,OAAO,EAAE,IACb,OAAO;CAGX,OAAO;AACT;;;;;;;;;;;;;;;;;;;;;;;AAwBA,SAAgB,uBACd,UACA,UACA,OACe;CACf,IAAI,YAAY,MAAM,OAAO;;;;;;CAO7B,IAAI;CACJ,KAAK,IAAI,IAAI,GAAG,IAAI,SAAS,QAAQ,KAAK;EACxC,MAAM,IAAI,SAAS;EACnB,IAAI,EAAE,SAAS,MAAM,QAAQ;;;;;;;;;;;EAW7B,MAAM,UAAU,EAAE;EAClB,IAAI,WAAW,QAAQ,OAAO,YAAY,UAAU;EACpD,MAAM,OAAO;EACb,MAAM,YAAY,aAAa;EAC/B,MAAM,cAAc,eAAe;EACnC,MAAM,qBAAqB,qBAAqB;EAChD,IAAI,CAAC,aAAa,CAAC,eAAe,CAAC,oBAAoB;EACvD,IAAIC,oBAAAA,4BAA4B,CAAC,GAAG;GAClC,QAAQ,SAAS,MAAM;GACvB,IAAI,KAAK,4BAA4B,GAAkB,EAAE,OAAO;GAChE;EACF;EAEA,MAAM,SAAS,WAAW,IAAI;EAC9B,MAAM,aAAa,mBAAmB,IAAI;;;;;;;;;EAU1C,MAAM,cAAc,aAAa,IAAI,KAAK;EAC1C,MAAM,UACJ,UAAU,QAAQ,SAAS,IAAI,aAAa,MAAM,IAAI,SAAS,KAAA;EACjE,MAAM,YAAY,WAAW,QAAQ,WAAW,SAAS;EAEzD,MAAM,KAAK;EACX,IAAI,cAAsC,GAAG;EAE7C,IAAI,aAAa,OAAO,GAAG,YAAY,UACrC,cAAc,gCACZ,GAAG,SACH,SACA,UACF;OACK,IAAI,aAAa,MAAM,QAAQ,GAAG,OAAO,GAAG;;;;;;;;;;;;;;;;;GAiBjD,MAAM,eAAsD,CAAC;GAC7D,IAAI,WAAW,MACb,aAAa,KAAK;IAChB,MAAM;IACN,MAAM,qBAAqB,OAAO;GACpC,CAAC;GAEH,IAAI,WAAW,SAAS,GACtB,aAAa,KAAK;IAChB,MAAM;IACN,MAAM,qBAAqB,WAAW,KAAK,IAAI,EAAE;GACnD,CAAC;GAEH,IAAI,aAAa,SAAS,GACxB,cAAc,CACZ,GAAG,cACH,GAAG,GAAG,OACR;EAEJ;;;;;;;EAQA,QAAQ,SAAS,MAAM;EACvB,IAAI,KAAK,4BAA4B,IAAI,WAAW;CACtD;CAEA,OAAO,OAAO;AAChB;;;;;;AAOA,SAAS,WACP,MACoB;CACpB,MAAM,IAAI,MAAM;CAChB,OAAO,OAAO,MAAM,WAAW,IAAI,KAAA;AACrC;;;;;;;AAQA,SAAS,aACP,MACoB;CACpB,MAAM,IAAI,MAAM;CAChB,OAAO,OAAO,MAAM,WAAW,IAAI,KAAA;AACrC;;;;;;;;AASA,SAAS,mBACP,MACU;CACV,MAAM,IAAI,MAAM;CAChB,IAAI,CAAC,MAAM,QAAQ,CAAC,GAAG,OAAO,CAAC;CAC/B,MAAM,MAAgB,CAAC;CACvB,KAAK,MAAM,QAAQ,GACjB,IAAI,OAAO,SAAS,UAAU,IAAI,KAAK,IAAI;CAE7C,OAAO;AACT;;;;;;;;;;;;;;AAeA,SAAS,4BACP,IACA,SACa;CACb,OAAO,IAAIC,yBAAAA,YAAY;EACrB,IAAI,GAAG;EACP,MAAM,GAAG;EACT,QAAQ,GAAG;EACX,UAAU,GAAG;EACb,cAAc,GAAG;EACjB,mBAAmB,GAAG;EACtB,mBAAmB,0BAA0B,GAAG,iBAAiB;EACjE;CACF,CAAC;AACH;;;;;;;;AASA,SAAS,0BACP,QACqC;CACrC,IAAI,UAAU,MAAM,OAAO,KAAA;CAC3B,IACE,EAAE,aAAa,WACf,EAAE,eAAe,WACjB,EAAE,qBAAqB,SAEvB,OAAO;CAET,MAAM,EAAE,SAAS,WAAW,iBAAiB,GAAG,SAAS;CAWzD,OAAO,OAAO,KAAK,IAAI,CAAC,CAAC,WAAW,IAAI,KAAA,IAAY;AACtD"}

package/dist/cjs/utils/index.cjs

@@ -1,10 +1,10 @@
 require("./misc.cjs");
 require("./truncation.cjs");
 require("./tokens.cjs");
-require("./llm.cjs");
-require("./errors.cjs");
 require("./graph.cjs");
+require("./llm.cjs");
 require("./proxy.cjs");
 require("./handlers.cjs");
 require("./run.cjs");
 require("./schema.cjs");
+require("./errors.cjs");