@librechat/agents 3.7.19 → 3.7.21

package/dist/types/llm/openai/index.d.ts

@@ -19,6 +19,7 @@ type OpenAICoreRequestOptions = OpenAIClient.RequestOptions;
 type OpenAICompletionParam = OpenAIClient.Chat.Completions.ChatCompletionMessageParam;
 type LibreChatOpenAIFields = t.ChatOpenAIFields & {
     _lc_stream_delay?: number;
+    firstPartyEndpoint?: boolean;
     includeReasoningContent?: boolean;
     includeReasoningDetails?: boolean;
     convertReasoningDetailsToContent?: boolean;
@@ -30,6 +31,7 @@ type LibreChatOpenAIFields = t.ChatOpenAIFields & {
 };
 type LibreChatAzureOpenAIFields = t.AzureOpenAIInput & {
     _lc_stream_delay?: number;
+    firstPartyEndpoint?: boolean;
     promptCacheExplicit?: boolean;
     safety_identifier?: string;
 };
@@ -38,10 +40,12 @@ export declare function addChatCacheBreakpoints(messages: OpenAIClient.Chat.Comp
 /** @internal */
 export declare function addResponseCacheBreakpoints(input: OpenAIClient.Responses.ResponseCreateParams['input']): OpenAIClient.Responses.ResponseCreateParams['input'];
 /** @internal */
+export declare function isGpt6AstraModel(model?: string): boolean;
+/** @internal */
 export declare function shouldIncludeEncryptedReasoning(model: string, params: {
     store?: boolean | null;
     reasoning?: unknown;
-}): boolean;
+}, astraRulesApply?: boolean): boolean;
 export declare function getCacheWriteTokens(message: BaseMessage): number | undefined;
 export declare function attachCacheWriteUsage(message: BaseMessage): void;
 export declare function attachCacheWriteMetadata(response: OpenAIClient.Responses.Response): OpenAIClient.Responses.Response;
@@ -97,6 +101,9 @@ export declare class CustomAzureOpenAIClient extends AzureOpenAIClient {
     fetchWithTimeout(url: RequestInfo, init: RequestInit | undefined, ms: number, controller: AbortController): Promise<Response>;
 }
 export declare class ChatOpenAI extends OriginalChatOpenAI<t.ChatOpenAICallOptions> {
+    protected firstPartyEndpoint?: boolean;
+    /** @see {@link astraRulesApply} */
+    protected get astraRulesApply(): boolean;
     _lc_stream_delay: number;
     constructor(fields?: LibreChatOpenAIFields & t.OpenAIChatInput['modelKwargs']);
     get exposedClient(): CustomOpenAIClient;
@@ -117,6 +124,9 @@ export declare class ChatOpenAI extends OriginalChatOpenAI<t.ChatOpenAICallOptio
     protected _streamRawResponseChunks(messages: BaseMessage[], options: this['ParsedCallOptions'], runManager?: CallbackManagerForLLMRun): AsyncGenerator<ChatGenerationChunk>;
 }
 export declare class AzureChatOpenAI extends OriginalAzureChatOpenAI {
+    protected firstPartyEndpoint?: boolean;
+    /** @see {@link astraRulesApply} */
+    protected get astraRulesApply(): boolean;
     _lc_stream_delay: number;
     constructor(fields?: LibreChatAzureOpenAIFields);
     get exposedClient(): CustomOpenAIClient;

package/dist/types/tools/CodeExecutor.d.ts

@@ -1,4 +1,5 @@
 import { DynamicStructuredTool } from '@langchain/core/tools';
+import type { CodeApiMethod } from '@/tools/diagnostics';
 import type * as t from '@/types';
 import { Constants } from '@/common';
 export { appendCodeSessionFileSummary, stripCodeSessionFileSummary, } from '@/tools/CodeSessionFileSummary';
@@ -57,11 +58,21 @@ export declare function buildCodeApiExecutionErrorMessage(response: {
     error?: unknown;
     stderr?: unknown;
 }): string;
-export declare function resolveCodeApiAuthHeaders(authHeaders?: t.CodeApiAuthHeaders): Promise<t.CodeApiAuthHeaderMap>;
+export declare function resolveCodeApiAuthHeaders(authHeaders?: t.CodeApiAuthHeaders, options?: {
+    recoverable?: boolean;
+}): Promise<t.CodeApiAuthHeaderMap>;
 export declare function addCodeApiExecutionProfileHeader(headers: t.CodeApiAuthHeaderMap, executionProfile?: t.CodeApiExecutionProfile): t.CodeApiAuthHeaderMap;
-export declare function buildCodeApiHttpErrorMessage(_method: string, _endpoint: string, response: {
+type CodeApiErrorResponse = {
     status: number;
     text: () => Promise<string>;
+    /** node-fetch types this as `NodeJS.ReadableStream`, which does not declare
+     * `destroy`; every runtime instance is a `Readable`, and a test double may
+     * supply nothing at all. */
+    body?: NodeJS.ReadableStream | null;
+};
+export declare function buildCodeApiHttpErrorMessage(method: CodeApiMethod, _endpoint: string, response: CodeApiErrorResponse, options?: {
+    recoverable?: boolean;
+    profile?: t.CodeApiExecutionProfile;
 }): Promise<string>;
 export declare const CodeExecutionToolDescription: string;
 /**

package/dist/types/tools/diagnostics.d.ts

@@ -0,0 +1,52 @@
+import type * as t from '@/types';
+/**
+ * Operator diagnostics for the Code API tools.
+ *
+ * Every failure these tools surface to the model is reduced to a fixed
+ * sentence, so this log is the only surviving account of what went wrong —
+ * which also makes it the one place a credential can escape by accident. It
+ * escaped repeatedly while any field was quoted from something the tools did
+ * not produce: a response body echoing the header that was sent, an error
+ * message quoting an excerpt of a malformed signing key, a `stack` whose first
+ * line is that message, a writable `name`, a configured base URL carrying a
+ * capability in its path or its authority.
+ *
+ * Filtering those carriers case by case never converged, because the shape of
+ * a credential inside free text is not decidable. The rule here is structural
+ * instead: a diagnostic NAMES what happened using values this module owns, and
+ * QUOTES nothing it received. `CodeApiDiagnosticDetail` is a closed union of
+ * such values, so host-authored text cannot reach a log without failing to
+ * compile — and adding a field means widening that union in this file, which
+ * is the point at which the question gets asked.
+ */
+export type CodeApiMethod = 'GET' | 'POST';
+type CodeApiProfileLabel = t.CodeApiExecutionProfile | 'unset';
+/** Built-in error types, the `typeof` results for a non-Error rejection, and
+ * the two labels this module supplies when neither applies. */
+type CodeApiErrorLabel = 'SyntaxError' | 'TypeError' | 'RangeError' | 'ReferenceError' | 'URIError' | 'EvalError' | 'Error' | 'UndescribableError' | 'string' | 'number' | 'bigint' | 'boolean' | 'symbol' | 'undefined' | 'object' | 'function';
+export type CodeApiDiagnosticDetail = {
+    type: CodeApiErrorLabel;
+} | {
+    method: CodeApiMethod;
+    profile: CodeApiProfileLabel;
+    status: number;
+} | {
+    files: 'none';
+};
+/**
+ * Classifies a rejection without reading anything off it. `instanceof` walks
+ * the prototype chain, so an accessor trap is never reached; the guard covers
+ * a `getPrototypeOf` trap, which would otherwise cost both the log and the
+ * rejection.
+ */
+export declare function describeCodeApiError(error: unknown): {
+    type: CodeApiErrorLabel;
+};
+type CodeApiDiagnosticSource = 'CodeExecutor' | 'BashExecutor' | 'ProgrammaticToolCalling' | 'BashProgrammaticToolCalling';
+/**
+ * Console is the SDK's diagnostic channel; a winston logger is the host's
+ * concern. Hosts correlate these lines with their own request-scoped logs,
+ * which is where received identifiers such as a session id belong.
+ */
+export declare function logCodeApiDiagnostic(source: CodeApiDiagnosticSource, level: 'debug' | 'warn' | 'error', message: string, detail: CodeApiDiagnosticDetail): void;
+export {};

package/dist/types/tools/search/format.d.ts

@@ -1,8 +1,9 @@
 import type * as t from './types';
+export declare const MISSING_SEARCH_RESULT_DATA_ERROR = "Search provider returned no result data";
 /** Resolves the per-search highlight budget from config, the
  *  `SEARCH_MAX_LLM_OUTPUT_CHARS` env var, or the default (50,000 chars). */
 export declare function resolveMaxLLMOutputChars(maxOutputChars?: number): number;
-export declare function formatResultsForLLM(turn: number, results: t.SearchResultData, maxOutputChars?: number): {
+export declare function formatResultsForLLM(turn: number, results?: t.SearchResultData | null, maxOutputChars?: number): {
     output: string;
     references: t.ResultReference[];
 };

package/dist/types/tools/search/rerankers.d.ts

@@ -1,4 +1,14 @@
 import type * as t from './types';
+/**
+ * Ranking used whenever no reranker scores the chunks: the candidates' own
+ * order, capped at `topK`, with a neutral score.
+ *
+ * Exported because it is not only a *fallback*. With `rerankerType: 'none'`
+ * there is no reranker to fall back from, and the search pipeline needs the
+ * same ranking to hand the scraped text downstream — see `getHighlights` in
+ * `./search`.
+ */
+export declare const getDefaultRanking: (documents: string[], topK: number) => t.Highlight[];
 export declare abstract class BaseReranker {
     protected apiKey: string | undefined;
     protected logger: t.Logger;

package/dist/types/tools/search/tool.d.ts

@@ -20,6 +20,7 @@ import { createSearchAPI } from './search';
  * model-authored intent to stand unchanged as the label.
  */
 export declare function resolveSearchOutcome(data: t.SearchResultData, query: string): string | undefined;
+export declare function normalizeSearchResultData(result: t.SearchResultData | null | undefined): t.SearchResultData;
 /**
  * Executes parallel searches and merges the results,
  * deduplicating top stories by link

package/dist/types/types/llm.d.ts

@@ -58,6 +58,29 @@ export type GoogleThinkingConfig = {
 export type ManagedRequestOptions = {
     promptCacheExplicit?: boolean;
     safety_identifier?: string;
+    /**
+     * Declares that this client talks to the first-party OpenAI or Azure surface.
+     * Gates the model-specific request *shaping* documented only for it —
+     * currently GPT-6 Astra's rejected sampling and logprob parameters, its
+     * unsupported reasoning efforts, and the encrypted reasoning it supports —
+     * and defaults to off.
+     *
+     * Shaping only. Which API serves the turn is not decided here: GPT-6 Astra
+     * serves tool calls only from the Responses API, and a caller wanting them
+     * must select it with `useResponsesApi`, alongside the rest of the request
+     * shaping that depends on which API is in use.
+     *
+     * The shaping runs inside this SDK's own request delegates. A caller that
+     * supplies its own `completions` or `responses` delegate replaces that
+     * construction and owns the request shaping for it — this flag cannot reach
+     * inside a delegate it did not build.
+     *
+     * Declared rather than inferred from a base URL: only the caller knows
+     * whether a URL is a faithful first-party route, a gateway, or a proxy with
+     * its own semantics, and every gate it controls removes capability, so
+     * guessing wrong silently degrades an endpoint the SDK cannot see.
+     */
+    firstPartyEndpoint?: boolean;
 };
 /**
  * Adaptive stream-smoothing configuration shared by every provider client.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@librechat/agents",
-  "version": "3.7.19",
+  "version": "3.7.21",
   "reova": {
     "enabled": true,
     "endpoint": "https://telemetry.reo.dev/data"
@@ -266,6 +266,7 @@
     "script5": "tsx -r dotenv/config ./src/scripts/cli5.ts --name 'Jo' --location 'New York, NY'",
     "test": "NODE_OPTIONS='--experimental-vm-modules' jest",
     "test:live:handoffs": "RUN_HANDOFF_LIVE_TESTS=1 NODE_OPTIONS='--experimental-vm-modules' jest src/specs/agent-handoffs.live.test.ts --runInBand",
+    "test:live:cross-provider-attachments": "RUN_CROSS_PROVIDER_ATTACHMENT_LIVE_TESTS=1 NODE_OPTIONS='--experimental-vm-modules' jest src/specs/cross-provider-attachments.live.test.ts --runInBand",
     "test:live:ask-user-questions": "RUN_ASK_USER_QUESTIONS_LIVE_TESTS=1 NODE_OPTIONS='--experimental-vm-modules' jest src/specs/ask-user-questions.live.test.ts --runInBand",
     "test:memory": "NODE_OPTIONS='--expose-gc' npx jest src/specs/title.memory-leak.test.ts",
     "test:all": "npm test -- --testPathIgnorePatterns=title.memory-leak.test.ts && npm run test:memory",
@@ -279,6 +280,7 @@
   },
   "overrides": {
     "@langchain/openai": "$@langchain/openai",
+    "@langchain/langgraph-checkpoint": "^1.1.5",
     "@browserbasehq/stagehand": {
       "openai": "$openai"
     },
@@ -338,7 +340,7 @@
     "@anthropic-ai/sandbox-runtime": "^0.0.67",
     "@anthropic-ai/vertex-sdk": "^0.12.0",
     "@eslint/js": "^10.0.1",
-    "@langchain/langgraph-checkpoint-mongodb": "^1.4.0",
+    "@langchain/langgraph-checkpoint-mongodb": "^1.4.1",
     "@swc/core": "^1.6.13",
     "@types/jest": "^30.0.0",
     "@types/node": "^24.13.1",