@librechat/agents 4.0.1 → 4.0.3

package/dist/esm/tools/subagent/hostArgs.mjs

@@ -0,0 +1,207 @@
+import { createHash } from "crypto";
+//#region src/tools/subagent/hostArgs.ts
+const SUBAGENT_HOST_ARG_LIMITS = Object.freeze({
+	argsPerSubagent: 8,
+	distinctArgs: 16,
+	enumValues: 64,
+	mergedEnumValues: 256,
+	valueLength: 256,
+	descriptionLength: 1024
+});
+const HOST_ARG_NAME_PATTERN = /^[a-z][a-z0-9_]{0,63}$/;
+const FREE_FORM_SCHEMA_PATTERN = "^[^\\u0000-\\u001f\\u007f]*$";
+const RESERVED_HOST_ARG_NAMES = new Set([
+	"intent",
+	"description",
+	"subagent_type",
+	"run_in_background",
+	"subagent_thread_id"
+]);
+function isSubagentHostArgName(name) {
+	return HOST_ARG_NAME_PATTERN.test(name) && !RESERVED_HOST_ARG_NAMES.has(name);
+}
+function countCodePoints(value) {
+	let count = 0;
+	for (const _ of value) count += 1;
+	return count;
+}
+function hasControlCharacter(value) {
+	for (let i = 0; i < value.length; i++) {
+		const code = value.charCodeAt(i);
+		if (code < 32 || code === 127) return true;
+	}
+	return false;
+}
+function isBoundedText(value, maxLength) {
+	return typeof value === "string" && value.trim().length > 0 && countCodePoints(value) <= maxLength && !hasControlCharacter(value);
+}
+function getFreeFormMaxLength(spec) {
+	return spec.maxLength ?? SUBAGENT_HOST_ARG_LIMITS.valueLength;
+}
+function validateEnum(label, values) {
+	if (!Array.isArray(values) || values.length === 0 || values.length > SUBAGENT_HOST_ARG_LIMITS.enumValues) throw new Error(`${label} enum must list 1-${SUBAGENT_HOST_ARG_LIMITS.enumValues} values.`);
+	const seen = /* @__PURE__ */ new Set();
+	for (const value of values) {
+		if (!isBoundedText(value, SUBAGENT_HOST_ARG_LIMITS.valueLength)) throw new Error(`${label} enum values must be non-blank strings of at most ${SUBAGENT_HOST_ARG_LIMITS.valueLength} characters without control characters.`);
+		if (seen.has(value)) throw new Error(`${label} enum values must be unique.`);
+		seen.add(value);
+	}
+}
+function validateFreeForm(label, spec) {
+	const maxLength = getFreeFormMaxLength(spec);
+	if (!Number.isSafeInteger(maxLength) || maxLength < 1 || maxLength > SUBAGENT_HOST_ARG_LIMITS.valueLength) throw new Error(`${label} maxLength must be an integer from 1 to ${SUBAGENT_HOST_ARG_LIMITS.valueLength}.`);
+}
+function validateSpec(type, name, spec) {
+	const label = `Subagent "${type}" host argument "${name}"`;
+	if (!isSubagentHostArgName(name)) throw new Error(`${label} must match ${HOST_ARG_NAME_PATTERN.source} and must not reuse a built-in subagent argument name.`);
+	if (spec == null) throw new Error(`${label} must be an object.`);
+	if (spec.pattern !== void 0) throw new Error(`${label} cannot declare a pattern; validate the format in the resolver.`);
+	if (typeof spec.description !== "string" || spec.description.trim().length === 0 || spec.description.length > SUBAGENT_HOST_ARG_LIMITS.descriptionLength) throw new Error(`${label} needs a description of at most ${SUBAGENT_HOST_ARG_LIMITS.descriptionLength} characters.`);
+	if (spec.enum == null) {
+		validateFreeForm(label, spec);
+		return;
+	}
+	if (spec.maxLength != null) throw new Error(`${label} cannot combine enum with maxLength.`);
+	validateEnum(label, spec.enum);
+}
+function getSubagentHostArgSpecs(config) {
+	const { hostArgs } = config;
+	if (hostArgs == null) return [];
+	if (typeof hostArgs !== "object" || Array.isArray(hostArgs)) throw new Error(`Subagent "${config.type}" hostArgs must be an object.`);
+	const entries = Object.entries(hostArgs);
+	if (entries.length > SUBAGENT_HOST_ARG_LIMITS.argsPerSubagent) throw new Error(`Subagent "${config.type}" declares more than ${SUBAGENT_HOST_ARG_LIMITS.argsPerSubagent} host arguments.`);
+	for (const [name, spec] of entries) validateSpec(config.type, name, spec);
+	return entries;
+}
+function collectSubagentHostArgNames(configs) {
+	const names = /* @__PURE__ */ new Set();
+	for (const config of configs) for (const [name] of getSubagentHostArgSpecs(config)) names.add(name);
+	if (names.size > SUBAGENT_HOST_ARG_LIMITS.distinctArgs) throw new Error(`Subagents declare more than ${SUBAGENT_HOST_ARG_LIMITS.distinctArgs} distinct host arguments.`);
+	return names;
+}
+function mergeSpec(merged, name, spec) {
+	let entry = merged.get(name);
+	if (entry == null) {
+		entry = {
+			description: spec.description,
+			values: [],
+			seenValues: /* @__PURE__ */ new Set(),
+			freeForm: false,
+			maxLength: 0
+		};
+		merged.set(name, entry);
+	}
+	if (spec.enum == null) {
+		entry.freeForm = true;
+		entry.maxLength = Math.max(entry.maxLength, getFreeFormMaxLength(spec));
+		return;
+	}
+	for (const value of spec.enum) {
+		entry.maxLength = Math.max(entry.maxLength, countCodePoints(value));
+		if (!entry.seenValues.has(value)) {
+			entry.seenValues.add(value);
+			entry.values.push(value);
+		}
+	}
+	if (entry.values.length > SUBAGENT_HOST_ARG_LIMITS.mergedEnumValues) throw new Error(`Subagent host argument "${name}" lists more than ${SUBAGENT_HOST_ARG_LIMITS.mergedEnumValues} distinct values across subagents.`);
+}
+function toPropertySchema(entry) {
+	if (!entry.freeForm) return {
+		type: "string",
+		description: entry.description,
+		enum: entry.values
+	};
+	return {
+		type: "string",
+		description: entry.description,
+		maxLength: entry.maxLength,
+		pattern: FREE_FORM_SCHEMA_PATTERN
+	};
+}
+function summarizeSpecs(entries) {
+	return entries.map(([name, spec]) => `${name}: ${spec.enum == null ? `any text up to ${getFreeFormMaxLength(spec)} characters` : spec.enum.join(" | ")}`).join("; ");
+}
+function buildSubagentHostArgProperties(configs) {
+	const merged = /* @__PURE__ */ new Map();
+	const summaries = /* @__PURE__ */ new Map();
+	for (const config of configs) {
+		const entries = getSubagentHostArgSpecs(config);
+		if (entries.length === 0) continue;
+		for (const [name, spec] of entries) mergeSpec(merged, name, spec);
+		summaries.set(config.type, summarizeSpecs(entries));
+	}
+	if (merged.size > SUBAGENT_HOST_ARG_LIMITS.distinctArgs) throw new Error(`Subagents declare more than ${SUBAGENT_HOST_ARG_LIMITS.distinctArgs} distinct host arguments.`);
+	const properties = {};
+	for (const [name, entry] of merged) properties[name] = toPropertySchema(entry);
+	return {
+		properties,
+		summaries
+	};
+}
+function pickSubagentHostArgInput(input, names) {
+	if (names.size === 0) return { ok: true };
+	const values = input;
+	const picked = {};
+	let count = 0;
+	for (const name of names) {
+		if (!Object.prototype.hasOwnProperty.call(values, name)) continue;
+		const value = values[name];
+		if (value == null) continue;
+		if (typeof value !== "string") return {
+			ok: false,
+			message: `Error: "${name}" must be a string.`
+		};
+		if (value.trim() === "") continue;
+		picked[name] = value;
+		count += 1;
+	}
+	return count === 0 ? { ok: true } : {
+		ok: true,
+		hostArgs: picked
+	};
+}
+function checkValue(type, name, spec, value) {
+	const omit = `Omit "${name}" to let the host choose.`;
+	if (spec.enum != null) return spec.enum.includes(value) ? void 0 : `Error: "${name}" for subagent "${type}" must be one of: ${spec.enum.join(", ")}. ${omit}`;
+	const maxLength = getFreeFormMaxLength(spec);
+	return isBoundedText(value, maxLength) ? void 0 : `Error: "${name}" for subagent "${type}" must be at most ${maxLength} characters without control characters. ${omit}`;
+}
+function resolveSubagentHostArgs(config, hostArgs) {
+	if (hostArgs == null) return { ok: true };
+	const names = Object.keys(hostArgs).sort();
+	if (names.length === 0) return { ok: true };
+	const specs = new Map(getSubagentHostArgSpecs(config));
+	const resolved = {};
+	for (const name of names) {
+		const spec = specs.get(name);
+		if (spec == null) return {
+			ok: false,
+			message: isSubagentHostArgName(name) ? `Error: Subagent "${config.type}" does not accept "${name}". Omit it for this subagent type.` : `Error: Subagent "${config.type}" received an unsupported argument.`
+		};
+		const value = hostArgs[name];
+		if (typeof value !== "string") return {
+			ok: false,
+			message: `Error: "${name}" must be a string.`
+		};
+		const error = checkValue(config.type, name, spec, value);
+		if (error != null) return {
+			ok: false,
+			message: error
+		};
+		resolved[name] = value;
+	}
+	return {
+		ok: true,
+		hostArgs: Object.freeze(resolved)
+	};
+}
+function getSubagentHostArgsDigest(hostArgs) {
+	if (hostArgs == null) return;
+	const entries = Object.entries(hostArgs).sort(([left], [right]) => left < right ? -1 : 1);
+	if (entries.length === 0) return;
+	return createHash("sha256").update(JSON.stringify(entries)).digest("hex");
+}
+//#endregion
+export { SUBAGENT_HOST_ARG_LIMITS, buildSubagentHostArgProperties, collectSubagentHostArgNames, getSubagentHostArgSpecs, getSubagentHostArgsDigest, isSubagentHostArgName, pickSubagentHostArgInput, resolveSubagentHostArgs };
+
+//# sourceMappingURL=hostArgs.mjs.map

package/dist/esm/tools/subagent/hostArgs.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"hostArgs.mjs","names":[],"sources":["../../../../src/tools/subagent/hostArgs.ts"],"mappings":";;AASA,MAAa,2BAA2B,OAAO,OAAO;CACpD,iBAAiB;CACjB,cAAc;CACd,YAAY;CACZ,kBAAkB;CAClB,aAAa;CACb,mBAAmB;AACrB,CAAC;AAED,MAAM,wBAAwB;AAE9B,MAAM,2BAA2B;AACjC,MAAM,0BAA+C,IAAI,IAAI;CAC3D;CACA;CACA;CACA;CACA;AACF,CAAC;AAuBD,SAAgB,sBAAsB,MAAuB;CAC3D,OAAO,sBAAsB,KAAK,IAAI,KAAK,CAAC,wBAAwB,IAAI,IAAI;AAC9E;AAGA,SAAS,gBAAgB,OAAuB;CAC9C,IAAI,QAAQ;CACZ,KAAK,MAAM,KAAK,OACd,SAAS;CAEX,OAAO;AACT;AAEA,SAAS,oBAAoB,OAAwB;CACnD,KAAK,IAAI,IAAI,GAAG,IAAI,MAAM,QAAQ,KAAK;EACrC,MAAM,OAAO,MAAM,WAAW,CAAC;EAC/B,IAAI,OAAO,MAAQ,SAAS,KAC1B,OAAO;CAEX;CACA,OAAO;AACT;AAEA,SAAS,cAAc,OAAgB,WAAoC;CACzE,OACE,OAAO,UAAU,YACjB,MAAM,KAAK,CAAC,CAAC,SAAS,KACtB,gBAAgB,KAAK,KAAK,aAC1B,CAAC,oBAAoB,KAAK;AAE9B;AAEA,SAAS,qBAAqB,MAAmC;CAC/D,OAAO,KAAK,aAAa,yBAAyB;AACpD;AAEA,SAAS,aAAa,OAAe,QAAiC;CACpE,IACE,CAAC,MAAM,QAAQ,MAAM,KACrB,OAAO,WAAW,KAClB,OAAO,SAAS,yBAAyB,YAEzC,MAAM,IAAI,MACR,GAAG,MAAM,oBAAoB,yBAAyB,WAAW,SACnE;CAEF,MAAM,uBAAO,IAAI,IAAY;CAC7B,KAAK,MAAM,SAAS,QAAQ;EAC1B,IAAI,CAAC,cAAc,OAAO,yBAAyB,WAAW,GAC5D,MAAM,IAAI,MACR,GAAG,MAAM,oDAAoD,yBAAyB,YAAY,wCACpG;EAEF,IAAI,KAAK,IAAI,KAAK,GAChB,MAAM,IAAI,MAAM,GAAG,MAAM,6BAA6B;EAExD,KAAK,IAAI,KAAK;CAChB;AACF;AAEA,SAAS,iBAAiB,OAAe,MAAiC;CACxE,MAAM,YAAY,qBAAqB,IAAI;CAC3C,IACE,CAAC,OAAO,cAAc,SAAS,KAC/B,YAAY,KACZ,YAAY,yBAAyB,aAErC,MAAM,IAAI,MACR,GAAG,MAAM,0CAA0C,yBAAyB,YAAY,EAC1F;AAEJ;AAEA,SAAS,aACP,MACA,MACA,MACqC;CACrC,MAAM,QAAQ,aAAa,KAAK,mBAAmB,KAAK;CACxD,IAAI,CAAC,sBAAsB,IAAI,GAC7B,MAAM,IAAI,MACR,GAAG,MAAM,cAAc,sBAAsB,OAAO,uDACtD;CAEF,IAAI,QAAQ,MACV,MAAM,IAAI,MAAM,GAAG,MAAM,oBAAoB;CAE/C,IAAK,KAA+B,YAAY,KAAA,GAC9C,MAAM,IAAI,MACR,GAAG,MAAM,gEACX;CAEF,IACE,OAAO,KAAK,gBAAgB,YAC5B,KAAK,YAAY,KAAK,CAAC,CAAC,WAAW,KACnC,KAAK,YAAY,SAAS,yBAAyB,mBAEnD,MAAM,IAAI,MACR,GAAG,MAAM,kCAAkC,yBAAyB,kBAAkB,aACxF;CAEF,IAAI,KAAK,QAAQ,MAAM;EACrB,iBAAiB,OAAO,IAAI;EAC5B;CACF;CACA,IAAI,KAAK,aAAa,MACpB,MAAM,IAAI,MAAM,GAAG,MAAM,qCAAqC;CAEhE,aAAa,OAAO,KAAK,IAAI;AAC/B;AAMA,SAAgB,wBACd,QACyB;CACzB,MAAM,EAAE,aAAa;CACrB,IAAI,YAAY,MACd,OAAO,CAAC;CAEV,IAAI,OAAO,aAAa,YAAY,MAAM,QAAQ,QAAQ,GACxD,MAAM,IAAI,MAAM,aAAa,OAAO,KAAK,8BAA8B;CAEzE,MAAM,UAAU,OAAO,QAAQ,QAAQ;CACvC,IAAI,QAAQ,SAAS,yBAAyB,iBAC5C,MAAM,IAAI,MACR,aAAa,OAAO,KAAK,uBAAuB,yBAAyB,gBAAgB,iBAC3F;CAEF,KAAK,MAAM,CAAC,MAAM,SAAS,SACzB,aAAa,OAAO,MAAM,MAAM,IAAI;CAEtC,OAAO;AACT;AAGA,SAAgB,4BACd,SACqB;CACrB,MAAM,wBAAQ,IAAI,IAAY;CAC9B,KAAK,MAAM,UAAU,SACnB,KAAK,MAAM,CAAC,SAAS,wBAAwB,MAAM,GACjD,MAAM,IAAI,IAAI;CAGlB,IAAI,MAAM,OAAO,yBAAyB,cACxC,MAAM,IAAI,MACR,+BAA+B,yBAAyB,aAAa,0BACvE;CAEF,OAAO;AACT;AAEA,SAAS,UACP,QACA,MACA,MACM;CACN,IAAI,QAAQ,OAAO,IAAI,IAAI;CAC3B,IAAI,SAAS,MAAM;EACjB,QAAQ;GACN,aAAa,KAAK;GAClB,QAAQ,CAAC;GACT,4BAAY,IAAI,IAAI;GACpB,UAAU;GACV,WAAW;EACb;EACA,OAAO,IAAI,MAAM,KAAK;CACxB;CACA,IAAI,KAAK,QAAQ,MAAM;EACrB,MAAM,WAAW;EACjB,MAAM,YAAY,KAAK,IAAI,MAAM,WAAW,qBAAqB,IAAI,CAAC;EACtE;CACF;CACA,KAAK,MAAM,SAAS,KAAK,MAAM;EAC7B,MAAM,YAAY,KAAK,IAAI,MAAM,WAAW,gBAAgB,KAAK,CAAC;EAClE,IAAI,CAAC,MAAM,WAAW,IAAI,KAAK,GAAG;GAChC,MAAM,WAAW,IAAI,KAAK;GAC1B,MAAM,OAAO,KAAK,KAAK;EACzB;CACF;CACA,IAAI,MAAM,OAAO,SAAS,yBAAyB,kBACjD,MAAM,IAAI,MACR,2BAA2B,KAAK,oBAAoB,yBAAyB,iBAAiB,mCAChG;AAEJ;AAEA,SAAS,iBAAiB,OAAsC;CAC9D,IAAI,CAAC,MAAM,UACT,OAAO;EACL,MAAM;EACN,aAAa,MAAM;EACnB,MAAM,MAAM;CACd;CAEF,OAAO;EACL,MAAM;EACN,aAAa,MAAM;EACnB,WAAW,MAAM;EACjB,SAAS;CACX;AACF;AAEA,SAAS,eAAe,SAA0C;CAChE,OAAO,QACJ,KACE,CAAC,MAAM,UACN,GAAG,KAAK,IACN,KAAK,QAAQ,OACT,kBAAkB,qBAAqB,IAAI,EAAE,eAC7C,KAAK,KAAK,KAAK,KAAK,GAE9B,CAAC,CACA,KAAK,IAAI;AACd;AAOA,SAAgB,+BACd,SAIA;CACA,MAAM,yBAAS,IAAI,IAA2B;CAC9C,MAAM,4BAAY,IAAI,IAAoB;CAC1C,KAAK,MAAM,UAAU,SAAS;EAC5B,MAAM,UAAU,wBAAwB,MAAM;EAC9C,IAAI,QAAQ,WAAW,GACrB;EAEF,KAAK,MAAM,CAAC,MAAM,SAAS,SACzB,UAAU,QAAQ,MAAM,IAAI;EAE9B,UAAU,IAAI,OAAO,MAAM,eAAe,OAAO,CAAC;CACpD;CACA,IAAI,OAAO,OAAO,yBAAyB,cACzC,MAAM,IAAI,MACR,+BAA+B,yBAAyB,aAAa,0BACvE;CAEF,MAAM,aAA6C,CAAC;CACpD,KAAK,MAAM,CAAC,MAAM,UAAU,QAC1B,WAAW,QAAQ,iBAAiB,KAAK;CAE3C,OAAO;EAAE;EAAY;CAAU;AACjC;AAOA,SAAgB,yBACd,OACA,OACwB;CACxB,IAAI,MAAM,SAAS,GACjB,OAAO,EAAE,IAAI,KAAK;CAEpB,MAAM,SAAS;CACf,MAAM,SAAiC,CAAC;CACxC,IAAI,QAAQ;CACZ,KAAK,MAAM,QAAQ,OAAO;EACxB,IAAI,CAAC,OAAO,UAAU,eAAe,KAAK,QAAQ,IAAI,GACpD;EAEF,MAAM,QAAQ,OAAO;EACrB,IAAI,SAAS,MACX;EAEF,IAAI,OAAO,UAAU,UACnB,OAAO;GAAE,IAAI;GAAO,SAAS,WAAW,KAAK;EAAqB;EAEpE,IAAI,MAAM,KAAK,MAAM,IACnB;EAEF,OAAO,QAAQ;EACf,SAAS;CACX;CACA,OAAO,UAAU,IAAI,EAAE,IAAI,KAAK,IAAI;EAAE,IAAI;EAAM,UAAU;CAAO;AACnE;AAEA,SAAS,WACP,MACA,MACA,MACA,OACoB;CACpB,MAAM,OAAO,SAAS,KAAK;CAC3B,IAAI,KAAK,QAAQ,MACf,OAAO,KAAK,KAAK,SAAS,KAAK,IAC3B,KAAA,IACA,WAAW,KAAK,kBAAkB,KAAK,oBAAoB,KAAK,KAAK,KAAK,IAAI,EAAE,IAAI;CAE1F,MAAM,YAAY,qBAAqB,IAAI;CAC3C,OAAO,cAAc,OAAO,SAAS,IACjC,KAAA,IACA,WAAW,KAAK,kBAAkB,KAAK,oBAAoB,UAAU,0CAA0C;AACrH;AAOA,SAAgB,wBACd,QACA,UACwB;CACxB,IAAI,YAAY,MACd,OAAO,EAAE,IAAI,KAAK;CAEpB,MAAM,QAAQ,OAAO,KAAK,QAAQ,CAAC,CAAC,KAAK;CACzC,IAAI,MAAM,WAAW,GACnB,OAAO,EAAE,IAAI,KAAK;CAEpB,MAAM,QAAQ,IAAI,IAAI,wBAAwB,MAAM,CAAC;CACrD,MAAM,WAAmC,CAAC;CAC1C,KAAK,MAAM,QAAQ,OAAO;EACxB,MAAM,OAAO,MAAM,IAAI,IAAI;EAC3B,IAAI,QAAQ,MACV,OAAO;GACL,IAAI;GACJ,SAAS,sBAAsB,IAAI,IAC/B,oBAAoB,OAAO,KAAK,qBAAqB,KAAK,sCAC1D,oBAAoB,OAAO,KAAK;EACtC;EAEF,MAAM,QAAQ,SAAS;EACvB,IAAI,OAAO,UAAU,UACnB,OAAO;GAAE,IAAI;GAAO,SAAS,WAAW,KAAK;EAAqB;EAEpE,MAAM,QAAQ,WAAW,OAAO,MAAM,MAAM,MAAM,KAAK;EACvD,IAAI,SAAS,MACX,OAAO;GAAE,IAAI;GAAO,SAAS;EAAM;EAErC,SAAS,QAAQ;CACnB;CACA,OAAO;EAAE,IAAI;EAAM,UAAU,OAAO,OAAO,QAAQ;CAAE;AACvD;AAGA,SAAgB,0BACd,UACoB;CACpB,IAAI,YAAY,MACd;CAEF,MAAM,UAAU,OAAO,QAAQ,QAAQ,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,WACtD,OAAO,QAAQ,KAAK,CACtB;CACA,IAAI,QAAQ,WAAW,GACrB;CAEF,OAAO,WAAW,QAAQ,CAAC,CAAC,OAAO,KAAK,UAAU,OAAO,CAAC,CAAC,CAAC,OAAO,KAAK;AAC1E"}

package/dist/esm/tools/subagent/index.mjs

@@ -1,3 +1,5 @@
+import "./hostArgs.mjs";
+import "./diagnostics.mjs";
 import "./childGraphConfig.mjs";
 import "./SubagentExecutor.mjs";
 import "./InMemorySubagentTaskStore.mjs";

package/dist/esm/tools/toolErrorContent.mjs

@@ -1,6 +1,6 @@
 import { truncateToolResultContent } from "../utils/truncation.mjs";
-import { StreamLimitExceededError } from "../llm/streamLimits.mjs";
 import { PreparedSubagentError } from "./preparedSubagents.mjs";
+import { StreamLimitExceededError } from "../llm/streamLimits.mjs";
 //#region src/tools/toolErrorContent.ts
 const STOPPED_RUN_TOOL_ERROR = "STOP. The user doesn't want to proceed with this tool use. The run was stopped; the tool may not have completed, and its effects should not be assumed. STOP what you are doing and wait for the user to tell you how to proceed.";
 function isStoppedRunToolError(message, signal, error) {

package/dist/types/decisions/deadline.d.ts

@@ -0,0 +1,3 @@
+export type AwaitWithinDeadline = <T>(task: Promise<T>) => Promise<T>;
+/** Bounds even non-cooperative credential minters, fetches, body reads, and model calls. */
+export declare function withDecisionDeadline<T>(provider: string, timeoutMs: number, callerSignal: AbortSignal | undefined, operation: (signal: AbortSignal, waitFor: AwaitWithinDeadline) => Promise<T>): Promise<T>;

package/dist/types/decisions/dialect.d.ts

@@ -0,0 +1,11 @@
+import type { DecisionAnswer, DecisionDialect, DecisionQuestion } from './types';
+interface WireQuestion {
+    type: string;
+    instructions: DecisionQuestion['instructions'];
+    criteria?: DecisionQuestion['criteria'];
+}
+/** System One calls a yes/no question a `noul`; both dialects use a `{true, false}` criterion. */
+export declare function toWireQuestion(question: DecisionQuestion, dialect: DecisionDialect): WireQuestion;
+/** A validated answer, or `null` for one that cannot safely be read. */
+export declare function readAnswer(answer: unknown, dialect: DecisionDialect, question?: DecisionQuestion): DecisionAnswer | null;
+export {};

package/dist/types/decisions/http.d.ts

@@ -0,0 +1,22 @@
+import type { DecisionModel, DecisionAnswer, DecisionResult, DecisionDialect, DecisionCredential, DecisionQuestion } from './types';
+import type { DecisionFetch } from './transport';
+export declare const HTTP_PROVIDER_ID = "http";
+export interface HttpDecisionModelOptions {
+    providerId?: string;
+    apiKey?: DecisionCredential;
+    requiresAuth?: boolean;
+    /** Full URL, not a base path. */
+    endpoint: string;
+    model?: string;
+    dialect?: DecisionDialect;
+    requestKey?: string;
+    responseKey?: string;
+    timeoutMs?: number;
+    maxRetries?: number;
+    fetch?: DecisionFetch;
+    sleep?: (ms: number, signal?: AbortSignal) => Promise<void>;
+    onAnswered?: (label: string, ms: number) => void;
+}
+export declare function parseEnvelope(body: string, providerId: string, readOne: (answer: unknown, question?: DecisionQuestion) => DecisionAnswer | null, responseKey?: string, expected?: Record<string, DecisionQuestion>): DecisionResult;
+/** Jev and Laya use the same System One HTTP dialect, but may report different confidence metrics. */
+export declare function createHttpDecisionModel(options: HttpDecisionModelOptions): DecisionModel;

package/dist/types/decisions/index.d.ts

@@ -0,0 +1,10 @@
+export * from './types';
+export * from './questions';
+export * from './presets';
+export { createHttpDecisionModel, parseEnvelope, HTTP_PROVIDER_ID, } from './http';
+export { createStructuredChatDecisionModel } from './structuredChat';
+export type { HttpDecisionModelOptions } from './http';
+export type { StructuredChatDecisionModelOptions } from './structuredChat';
+export { toWireQuestion, readAnswer } from './dialect';
+export { createTransport } from './transport';
+export type { DecisionFetch, Transport, TransportOptions } from './transport';

package/dist/types/decisions/presets.d.ts

@@ -0,0 +1,17 @@
+import type { DecisionModel, DecisionCredential, DecisionProviderSettings } from './types';
+import type { DecisionFetch } from './transport';
+export declare const DEFAULT_API_KEY_ENV = "DECISION_API_KEY";
+/**
+ * Known HTTP hosts as settings, not new decision model implementations. Jev and Laya speak the
+ * same wire protocol, but their confidence measures and checkpoint calibration differ.
+ */
+export declare const DECISION_PRESETS: Readonly<Record<string, Readonly<DecisionProviderSettings>>>;
+export declare function decisionPreset(name: string | undefined): DecisionProviderSettings | null;
+/** Caller settings win except that required preset authentication cannot be weakened. */
+export declare function mergeDecisionSettings(preset: DecisionProviderSettings | null, configured: DecisionProviderSettings | undefined): DecisionProviderSettings;
+export declare function decisionProviderNames(): string[];
+export declare function createDecisionModel(settings: DecisionProviderSettings, apiKey?: DecisionCredential, options?: {
+    fetch?: DecisionFetch;
+    providerId?: string;
+    onAnswered?: (label: string, ms: number) => void;
+}): DecisionModel;

package/dist/types/decisions/questions.d.ts

@@ -0,0 +1,8 @@
+import type { BooleanCriteria, BooleanQuestion, ChoiceQuestion, ScoreQuestion, DecisionText, DecisionQuestion } from './types';
+export declare function validateDecisionQuestions(questions: Record<string, DecisionQuestion>, provider: string): Array<[string, DecisionQuestion]>;
+/** A yes/no question; `criteria` describes what counts as yes (a string) or both sides. */
+export declare function booleanQuestion(instructions: DecisionText, criteria?: BooleanCriteria | string): BooleanQuestion;
+/** Pick one of the named options; a `null` description means the name speaks for itself. */
+export declare function choiceQuestion(instructions: DecisionText, criteria: Record<string, DecisionText | null>): ChoiceQuestion;
+/** Rate against an ordered rubric, level 0 first. */
+export declare function scoreQuestion(instructions: DecisionText, levels: DecisionText[]): ScoreQuestion;

package/dist/types/decisions/structuredChat.d.ts

@@ -0,0 +1,17 @@
+import type { BaseChatModel } from '@langchain/core/language_models/chat_models';
+import type { DecisionModel, DecisionResult } from './types';
+import type { DecisionOutputMethod } from './structuredOutput';
+export declare function readChatUsage(raw: unknown): DecisionResult['usage'];
+export interface StructuredChatDecisionModelOptions {
+    /** An already configured chat model whose chosen method enforces strict schemas. */
+    model: BaseChatModel;
+    modelId: string;
+    providerId?: string;
+    /** Verified OpenAI/Azure strict modes or Anthropic strict tools; other paths fail closed. */
+    method: DecisionOutputMethod;
+    timeoutMs?: number;
+    maxQuestions?: number;
+    onAnswered?: (label: string, ms: number) => void;
+}
+/** Strict provider schema or strict tool calling, without an agent loop or fabricated probabilities. */
+export declare function createStructuredChatDecisionModel(options: StructuredChatDecisionModelOptions): DecisionModel;

package/dist/types/decisions/structuredOutput.d.ts

@@ -0,0 +1,4 @@
+import type { BaseChatModel } from '@langchain/core/language_models/chat_models';
+export type DecisionOutputMethod = 'jsonSchema' | 'functionCalling';
+/** Binds only verified enforcement paths; a model profile alone is not a strict-output guarantee. */
+export declare function withDecisionStructuredOutput(model: BaseChatModel, schema: Record<string, unknown>, method: DecisionOutputMethod): ReturnType<BaseChatModel['withStructuredOutput']>;

package/dist/types/decisions/traceMarker.d.ts

@@ -0,0 +1,2 @@
+/** Marks a JSON decision prompt so trace redaction can safely inspect its nested state. */
+export declare const DECISION_PROMPT_PREFIX = "librechat-decision-state:";

package/dist/types/decisions/transport.d.ts

@@ -0,0 +1,29 @@
+import type { DecisionCredential } from './types';
+export type DecisionFetch = (input: string, init: {
+    method: string;
+    headers: Record<string, string>;
+    body: string;
+    signal: AbortSignal;
+    redirect: 'error';
+}) => Promise<Pick<Response, 'ok' | 'status' | 'headers' | 'body'>>;
+export interface TransportOptions {
+    providerId: string;
+    apiKey?: DecisionCredential;
+    requiresAuth?: boolean;
+    /** Full URL, not a base path. */
+    endpoint: string;
+    timeoutMs?: number;
+    maxRetries?: number;
+    fetch?: DecisionFetch;
+    sleep?: (ms: number, signal?: AbortSignal) => Promise<void>;
+    /** Called only after the response parses, with no state, answers, or credentials. */
+    onAnswered?: (label: string, ms: number) => void;
+}
+export type Transport = <T>(prepare: () => {
+    payload: string;
+    parse: (body: string) => T;
+}, signal: AbortSignal | undefined, label: string, timeoutOverrideMs?: number) => Promise<T>;
+export declare function failureForStatus(status: number): 'unauthorized' | 'rate_limited' | 'server_error' | 'bad_request';
+export declare function retryAfterMs(header: string | null): number | undefined;
+/** One immutable transport; every call owns its signal, deadline, and credentials. */
+export declare function createTransport(options: TransportOptions): Transport;

package/dist/types/decisions/types.d.ts

@@ -0,0 +1,119 @@
+/** Typed decisions over content, independent of the model that makes them. */
+export type DecisionJson = string | number | boolean | null | DecisionJson[] | {
+    [key: string]: DecisionJson;
+};
+export type DecisionText = string | DecisionJson[] | {
+    [key: string]: DecisionJson;
+};
+export type DecisionState = DecisionText;
+export interface BooleanCriteria {
+    true?: DecisionText;
+    false?: DecisionText;
+}
+/** A string criterion describes the yes side of a yes/no question. */
+export interface BooleanQuestion {
+    type: 'boolean';
+    instructions: DecisionText;
+    criteria?: BooleanCriteria | string;
+}
+export interface ChoiceQuestion {
+    type: 'choice';
+    instructions: DecisionText;
+    criteria: Record<string, DecisionText | null>;
+}
+/** The measured answer is an expected level, which may fall between two rubric levels. */
+export interface ScoreQuestion {
+    type: 'score';
+    instructions: DecisionText;
+    criteria: DecisionText[];
+}
+export type DecisionQuestion = BooleanQuestion | ChoiceQuestion | ScoreQuestion;
+/** `null` is an unmeasured decision, not a probability of zero. */
+export type BooleanAnswer = {
+    type: 'boolean';
+    probability: number;
+    decision?: never;
+} | {
+    type: 'boolean';
+    probability: null;
+    decision: boolean;
+};
+export interface ChoiceAnswer {
+    type: 'choice';
+    choice: string;
+    /** Backend-specific concentration measure; Jev and Laya use different definitions. */
+    confidence: number | null;
+    /** `null` when no distribution was measured; never substitute an empty distribution. */
+    probabilities: Record<string, number> | null;
+}
+export interface ScoreAnswer {
+    type: 'score';
+    /** Expected value over rubric levels, not an LLM's selection of one level. */
+    score: number;
+    /** Backend-specific concentration measure; do not transfer thresholds between checkpoints. */
+    confidence: number | null;
+    probabilities: Record<string, number> | null;
+}
+export type DecisionAnswer = BooleanAnswer | ChoiceAnswer | ScoreAnswer;
+/** Unknown counts are omitted, never inferred from an answer or replaced by zero. */
+export interface DecisionUsage {
+    inputTokens?: number;
+    outputTokens?: number;
+}
+export interface DecisionRequest {
+    state: DecisionState;
+    questions: Record<string, DecisionQuestion>;
+    signal?: AbortSignal;
+    label?: string;
+    /** Overrides the provider's timeout for this request alone. */
+    timeoutMs?: number;
+}
+export interface DecisionResult {
+    model: string;
+    /** A requested answer can be omitted; callers must handle `undefined` explicitly. */
+    answers: Record<string, DecisionAnswer | undefined>;
+    usage: DecisionUsage | null;
+}
+export interface DecisionModel {
+    readonly id: string;
+    readonly model: string;
+    decide(request: DecisionRequest): Promise<DecisionResult>;
+}
+export type DecisionDialect = 'port' | 'systemone';
+/** A bearer key, or a per-request token minter; a 401 requests one fresh token for that call. */
+export type DecisionCredential = string | ((options: {
+    refresh: boolean;
+    signal?: AbortSignal;
+}) => Promise<string>);
+export interface DecisionProviderSettings {
+    /** Full URL of the decision endpoint, not a base path. */
+    baseURL?: string;
+    model?: string;
+    dialect?: DecisionDialect;
+    requestKey?: string;
+    responseKey?: string;
+    timeoutMs?: number;
+    maxRetries?: number;
+    /** Auth is required by default; self-hosted Laya can be unauthenticated. */
+    requiresAuth?: boolean;
+    apiKeyEnv?: string;
+}
+export type DecisionFailure = 'timeout' | 'aborted' | 'rate_limited' | 'unauthorized' | 'bad_request' | 'server_error' | 'network' | 'unsupported_question' | 'unsupported_mode' | 'malformed_response';
+export declare class DecisionError extends Error {
+    readonly failure: DecisionFailure;
+    readonly provider: string;
+    readonly status?: number;
+    retryAfterMs?: number;
+    constructor(failure: DecisionFailure, message: string, options?: {
+        provider?: string;
+        status?: number;
+    });
+}
+/** A JSON boundary guard; never trust a parsed response's declared TypeScript type. */
+export declare function isDecisionObject(value: unknown): value is {
+    [key: string]: unknown;
+};
+export declare function readDecisionUsage(raw: unknown): DecisionUsage | null;
+export declare function isBooleanAnswer(answer: DecisionAnswer | undefined): answer is BooleanAnswer;
+export declare function isChoiceAnswer(answer: DecisionAnswer | undefined): answer is ChoiceAnswer;
+export declare function isScoreAnswer(answer: DecisionAnswer | undefined): answer is ScoreAnswer;

package/dist/types/graphs/Graph.d.ts

@@ -11,6 +11,7 @@ import type { HookRegistry } from '@/hooks';
 import type * as t from '@/types';
 import { StreamLimitExceededError } from '@/llm/streamLimits';
 import { SubagentExecutor } from '@/tools/subagent';
+import { ProviderTextProtectionError } from '@/protection/providerText';
 import { ToolOutputReferenceRegistry } from '@/tools/toolOutputReferences';
 import { PreparedSubagents, PreparedSubagentError } from '@/tools/preparedSubagents';
 import { ToolNode as CustomToolNode } from '@/tools/ToolNode';
@@ -305,6 +306,7 @@ export declare class StandardGraph extends Graph<t.BaseGraphState, t.GraphNode>
     /** See {@link t.StandardGraphInput.subagentExecutionContext}. */
     readonly subagentExecutionContext?: t.SubagentExecutionContext;
     private readonly subagentContext?;
+    private readonly onSubagentResolutionFailure?;
     /** See {@link t.StandardGraphInput.preemption}. */
     preemption?: t.StreamPreemption;
     /**
@@ -313,6 +315,8 @@ export declare class StandardGraph extends Graph<t.BaseGraphState, t.GraphNode>
      * these on every streamed chunk event.
      */
     streamLimits: ResolvedStreamLimits;
+    /** Default-off mandatory provider prose release. */
+    providerTextProtection?: t.StandardGraphInput['providerTextProtection'];
     /**
      * Cumulative streamed argument bytes per in-flight tool call, keyed by
      * generation key + chunk index (see `resolveGenerationKey`). Per-run
@@ -351,12 +355,12 @@ export declare class StandardGraph extends Graph<t.BaseGraphState, t.GraphNode>
      * `StreamLimitState.activeStreamLimitGenerations`). Lazily created by the
      * attempt lease; spans resets on purpose. */
     activeStreamLimitGenerations?: Set<string>;
-    /** The stream-limit error behind an already-fired breaker, whether this
+    /** The safety error behind an already-fired breaker, whether this
      * graph's own controller tripped or a parent run's breaker arrived through
      * the composed constructor signal (child graphs own separate controllers).
      * Providers can translate either abort into a generic error, and recovery
      * paths must not run in that state. */
-    protected resolveTrippedBreakerReason(breakerSignal?: AbortSignal): StreamLimitExceededError | PreparedSubagentError | undefined;
+    protected resolveTrippedBreakerReason(breakerSignal?: AbortSignal): StreamLimitExceededError | PreparedSubagentError | ProviderTextProtectionError | undefined;
     /**
      * Seals charged against `preemption.maxSeals`. Per-turn: cleared by both
      * reset paths so a fresh turn gets a fresh budget, while a HITL resume —
@@ -441,7 +445,7 @@ export declare class StandardGraph extends Graph<t.BaseGraphState, t.GraphNode>
      * from a discard.
      */
     private preemptRestartPending;
-    constructor({ runId, signal, agents, langfuse, tokenCounter, indexTokenCountMap, calibrationRatio, fadingTier, fadingTiers, subagentUsageSink, subagentTasks, subagentScope, subagentExecutionContext, subagentContext, preemption, streamLimits, toolExecution, clientDelegatedToolNames, }: t.StandardGraphInput, dependencies?: GraphFactoryDependencies);
+    constructor({ runId, signal, agents, langfuse, tokenCounter, indexTokenCountMap, calibrationRatio, fadingTier, fadingTiers, subagentUsageSink, subagentTasks, subagentScope, subagentExecutionContext, subagentContext, onSubagentResolutionFailure, preemption, streamLimits, providerTextProtection, toolExecution, clientDelegatedToolNames, }: t.StandardGraphInput, dependencies?: GraphFactoryDependencies);
     /**
      * A compaction applies its remove-all inside the agent subgraph, so the
      * subgraph's result carries only the retained tail, and an outer reducer

package/dist/types/index.d.ts

@@ -59,3 +59,7 @@ export { canSealPreempt } from './llm/preempt';
 export { isThinkingEnabled, getMaxOutputTokensKey } from './llm/request';
 export { DEFAULT_MAX_TOOL_CALL_ARG_BYTES, StreamLimitExceededError, resolveStreamLimits, } from './llm/streamLimits';
 export type { StreamedToolCallArgTally, ResolvedStreamLimits, StreamLimitState, StreamLimitKind, } from './llm/streamLimits';
+export * from './decisions';
+export * from './rerank';
+export { PROVIDER_TEXT_PROTECTION_VERSION, ProviderTextProtectionError } from './protection/providerText';
+export type { ProviderTextProtection, ProviderTextProtectionResult, ProviderTextProtectionErrorCode, } from './protection/providerText';

package/dist/types/llm/invoke.d.ts

@@ -3,6 +3,7 @@ import type { RunnableConfig } from '@langchain/core/runnables';
 import type { BaseMessage } from '@langchain/core/messages';
 import type { ToolOutputReferenceRegistry } from '@/tools/toolOutputReferences';
 import type { PreparedProviderRequest } from '@/llm/prepareProviderRequest';
+import type { ProviderTextProtection } from '@/protection/providerText';
 import type { ContextOverflowContext } from '@/utils/errors';
 import type { StreamLimitState } from '@/llm/streamLimits';
 import type * as t from '@/types';
@@ -59,6 +60,7 @@ export type OnChunk = (chunk: AIMessageChunk, metadata?: Record<string, unknown>
  */
 interface AttemptInvokeCommonParams {
     context?: InvokeContext;
+    providerTextProtection?: ProviderTextProtection;
     onChunk?: OnChunk;
     /**
      * The agent lane this attempt belongs to, as the model node names it. Only
@@ -123,7 +125,7 @@ export declare function getFallbackOverflowCandidates(error: unknown): FallbackO
  * behind a later unrelated error would surface a dead end instead. Ordinary
  * failures still throw last-error-wins.
  */
-export declare function tryFallbackProviders({ fallbacks, tools, messages, config, primaryError, context, onChunk, streamLimitState, preemptAgentId, overflowContext, prepareProviderRequest: prepareFallbackRequest, prepareProviderMessages, }: {
+export declare function tryFallbackProviders({ fallbacks, tools, messages, config, primaryError, context, onChunk, streamLimitState, providerTextProtection, preemptAgentId, overflowContext, prepareProviderRequest: prepareFallbackRequest, prepareProviderMessages, }: {
     fallbacks: t.FallbackConfig[];
     tools?: t.GraphTools;
     messages: BaseMessage[];
@@ -134,6 +136,7 @@ export declare function tryFallbackProviders({ fallbacks, tools, messages, confi
     /** Accounting-lease owner forwarded to each fallback attempt (see
      * `AttemptInvokeParams.streamLimitState`). */
     streamLimitState?: StreamLimitState;
+    providerTextProtection?: ProviderTextProtection;
     /** Forwarded so a fallback-served attempt records a discarded turn in the
      * SAME lane the primary would have (see
      * `AttemptInvokeParams.preemptAgentId`). Dropping it here would leave the

package/dist/types/llm/providerTextBoundary.d.ts

@@ -0,0 +1,4 @@
+import type { ProviderTextProtection } from '@/protection/providerText';
+import type { ChatModel, ProviderName } from '@/types';
+/** Clone only known runnable shells. Never mutate a shared provider or its callback configuration. */
+export declare function withProviderTextBoundary(model: ChatModel, policy: ProviderTextProtection, provider?: ProviderName): ChatModel;

package/dist/types/llm/providerTextChunk.d.ts

@@ -0,0 +1,7 @@
+import { AIMessageChunk } from '@langchain/core/messages';
+import type { AIMessageChunkFields } from '@langchain/core/messages';
+type ChunkConstructor = new (fields: AIMessageChunkFields) => AIMessageChunk;
+/** Internal certification for SDK-owned aggregation semantics, not arbitrary provider subclasses. */
+export declare function registerProviderTextChunkConstructor(constructor: ChunkConstructor): void;
+export declare function createProviderTextChunk(source: object, fields: AIMessageChunkFields): AIMessageChunk;
+export {};

package/dist/types/llm/providerTextControls.d.ts

@@ -0,0 +1,18 @@
+import type { AIMessageChunk } from '@langchain/core/messages';
+import type { ProviderTextAttempt } from '@/protection/providerText';
+export declare const GEMINI_SIGNATURES = "__gemini_function_call_thought_signatures__";
+export declare const RESPONSES_POSITIONS = "__openai_responses_replay_positions__";
+export declare function keys(value: unknown, allowed: readonly string[]): value is Record<string, unknown>;
+export declare function stringMap(value: unknown): boolean;
+export declare function safetyRatings(value: unknown): boolean;
+export declare function replayPositions(value: unknown): boolean;
+/** One certified prose output. Unknown structured outputs and alternate aliases stay gated. */
+export declare class ResponsesTextProjection {
+    private readonly attempt;
+    private metadata?;
+    private hasOutputAlias;
+    private output?;
+    constructor(attempt: ProviderTextAttempt);
+    strip(metadata: AIMessageChunk['response_metadata']): AIMessageChunk['response_metadata'];
+    canonical(content: string): AIMessageChunk['response_metadata'] | undefined;
+}