librechat-data-provider 0.8.522 → 0.8.523

package/dist/{data-service-CaB7saTP.mjs → data-service-Bx6IFaSa.mjs}

@@ -330,6 +330,52 @@ const filtersConfigSchema = z.object({
 	});
 });
 //#endregion
+//#region src/code/workspace.ts
+const CODE_WORKSPACE_ID_PATTERN = /^[A-Za-z0-9][A-Za-z0-9._:-]{0,127}$/;
+/** Protocol-v1 ceiling enforced by the worker and Code API. */
+const CODE_WORKSPACE_MAX_COUNT = 32;
+/** API/client protocol for immutable conversation-owned environment decisions. */
+const CODE_ENVIRONMENT_DECISION_VERSION = 1;
+const CODE_WORKSPACE_OPERATIONS = [
+	"read_file",
+	"search_text",
+	"list_files",
+	"write_file",
+	"preview_edit",
+	"edit_file",
+	"execute_command"
+];
+const CODE_WORKSPACE_SELECTION_ERROR_REASONS = [
+	"required",
+	"invalid",
+	"worker_unavailable",
+	"unsupported",
+	"missing",
+	"locked"
+];
+const CODE_ENVIRONMENT_MODES = ["attached", "without_attached"];
+function isCodeEnvironmentMode(value) {
+	return CODE_ENVIRONMENT_MODES.some((mode) => mode === value);
+}
+function isCodeWorkspaceSelectionErrorReason(value) {
+	return CODE_WORKSPACE_SELECTION_ERROR_REASONS.some((reason) => reason === value);
+}
+function isCodeWorkspaceSelection(value) {
+	if (value == null || typeof value !== "object" || Array.isArray(value)) return false;
+	const selection = value;
+	return Object.keys(selection).every((key) => key === "environmentId" || key === "workspaceId") && typeof selection.environmentId === "string" && CODE_WORKSPACE_ID_PATTERN.test(selection.environmentId) && typeof selection.workspaceId === "string" && CODE_WORKSPACE_ID_PATTERN.test(selection.workspaceId);
+}
+/** One exact workspace per attached environment used by a conversation. */
+function isCodeWorkspaceSelections(value) {
+	if (!Array.isArray(value)) return false;
+	const environmentIds = /* @__PURE__ */ new Set();
+	return value.every((selection) => {
+		if (!isCodeWorkspaceSelection(selection) || environmentIds.has(selection.environmentId)) return false;
+		environmentIds.add(selection.environmentId);
+		return true;
+	});
+}
+//#endregion
 //#region src/feedback.ts
 const FEEDBACK_RATINGS = ["thumbsUp", "thumbsDown"];
 const FEEDBACK_REASON_KEYS = [
@@ -439,6 +485,63 @@ function getTagByKey(key) {
 	return FEEDBACK_TAGS.find((tag) => tag.key === key);
 }
 //#endregion
+//#region src/code/approval.ts
+const CODE_APPROVAL_MODES = [
+	"ask",
+	"acceptEdits",
+	"fullAccess"
+];
+const MODE_PERMISSIONS = {
+	ask: {
+		fileWrite: "ask",
+		commandExecution: "ask"
+	},
+	acceptEdits: {
+		fileWrite: "allow",
+		commandExecution: "ask"
+	},
+	fullAccess: {
+		fileWrite: "allow",
+		commandExecution: "allow"
+	}
+};
+/** Omitted deployment configuration never grants unattended execution. */
+function getAllowedCodeApprovalModes({ enabled, allowedModes, configSchema, settings, environment }) {
+	if (enabled === false) return [];
+	const permitted = new Set(allowedModes ?? ["ask"]);
+	return CODE_APPROVAL_MODES.filter((mode) => {
+		if (!permitted.has(mode)) return false;
+		if (environment === "managed") return true;
+		for (const category of ["fileWrite", "commandExecution"]) {
+			if (MODE_PERMISSIONS[mode][category] !== "allow") continue;
+			const field = configSchema?.permissions?.[category];
+			const configured = settings?.permissions?.[category];
+			if ((configured != null && field?.allowed.includes(configured) === true ? configured : field?.default ?? "ask") === "deny" || field?.allowed.includes("allow") !== true) return false;
+		}
+		return true;
+	});
+}
+var CodeApprovalModeError = class extends Error {
+	constructor() {
+		super("The selected code approval mode is not permitted by the current policy.");
+		this.code = "CODE_APPROVAL_MODE_NOT_ALLOWED";
+		this.name = "CodeApprovalModeError";
+	}
+};
+/** Validate untrusted request state again at admission, including after policy changes. */
+function resolveCodeApprovalMode(requested, constraints) {
+	if (requested == null) return void 0;
+	const selected = getAllowedCodeApprovalModes(constraints).find((mode) => mode === requested);
+	if (selected == null) throw new CodeApprovalModeError();
+	return selected;
+}
+/** Apply a turn preference without modifying machine settings or overriding an existing deny. */
+function resolveCodePermissionDecision({ mode, category, decision }) {
+	if (mode == null || decision === "deny") return decision;
+	if (MODE_PERMISSIONS[mode] == null) throw new CodeApprovalModeError();
+	return MODE_PERMISSIONS[mode][category];
+}
+//#endregion
 //#region src/stateful-code.ts
 const STATEFUL_CODE_ENVIRONMENTS = [
 	"user",
@@ -482,6 +585,10 @@ let EToolResources = /* @__PURE__ */ function(EToolResources) {
 	EToolResources["ocr"] = "ocr";
 	return EToolResources;
 }({});
+const agentGitIdentitySchema = z.object({
+	name: z.string().trim().min(1).max(128).refine((value) => !/[\0\r\n]/.test(value)),
+	email: z.string().trim().email().max(254).refine((value) => !/[\0\r\n]/.test(value))
+}).optional();
 let AnnotationTypes = /* @__PURE__ */ function(AnnotationTypes) {
 	AnnotationTypes["FILE_CITATION"] = "file_citation";
 	AnnotationTypes["FILE_PATH"] = "file_path";
@@ -673,7 +780,35 @@ const inputTokensIncludesCache = (provider) => {
 	return cacheSubsetProviders.has(provider ?? "");
 };
 const isDocumentSupportedProvider = (provider) => {
-	return documentSupportedProviders.has(provider ?? "");
+	const normalized = provider?.toLowerCase() ?? "";
+	return Array.from(documentSupportedProviders).some((candidate) => candidate.toLowerCase() === normalized);
+};
+/**
+* Endpoints whose encoders actually build native audio/video payloads. Narrower than
+* `documentSupportedProviders`: a provider can accept PDFs and still emit nothing for
+* media, in which case the upload has to fall back to text/STT.
+*/
+const mediaSupportedProviders = new Set([
+	"google",
+	"vertexai",
+	"openrouter"
+]);
+const isMediaSupportedProvider = (provider) => {
+	return mediaSupportedProviders.has(provider?.toLowerCase() ?? "");
+};
+/**
+* Built-in endpoint and provider identifiers. A name outside this set is a custom
+* endpoint whose real provider is resolved at request time, so its capabilities
+* cannot be judged from the name alone.
+*/
+const knownProviderIdentifiers = new Set([
+	...Object.values(EModelEndpoint),
+	...Object.values(Providers),
+	...Object.values(EModelEndpoint).map((provider) => provider.toLowerCase()),
+	...Object.values(Providers).map((provider) => provider.toLowerCase())
+]);
+const isKnownProviderIdentifier = (provider) => {
+	return knownProviderIdentifiers.has(provider?.toLowerCase() ?? "");
 };
 const paramEndpoints = new Set([
 	"agents",
@@ -876,6 +1011,7 @@ const defaultAgentFormValues = {
 	["memory"]: false,
 	stateful_code_environment: "user",
 	code_environment_id: void 0,
+	code_workspace_id: void 0,
 	category: "general",
 	support_contact: {
 		name: "",
@@ -1366,6 +1502,12 @@ const tConversationSchema = z.object({
 	pinned: z.boolean().optional(),
 	/** Server-derived: an active shared link exists for this conversation. Not persisted. */
 	isShared: z.boolean().optional(),
+	codeApprovalMode: z.enum(CODE_APPROVAL_MODES).optional(),
+	codeEnvironmentMode: z.enum(CODE_ENVIRONMENT_MODES).optional(),
+	codeWorkspaces: z.array(z.object({
+		environmentId: z.string().regex(CODE_WORKSPACE_ID_PATTERN),
+		workspaceId: z.string().regex(CODE_WORKSPACE_ID_PATTERN)
+	}).strict()).optional(),
 	title: z.string().nullable().or(z.literal("New Chat")).default("New Chat"),
 	user: z.string().optional(),
 	messages: z.array(z.string()).optional(),
@@ -2269,6 +2411,7 @@ const MAX_GRAPH_SUBAGENT_MEMBERS = 32;
 const modelSpecSubagentsSchema = z.object({
 	enabled: z.boolean().optional(),
 	allowSelf: z.boolean().optional(),
+	shareFiles: z.boolean().optional(),
 	agent_ids: z.array(z.string()).optional()
 }).superRefine((subagents, ctx) => {
 	const maxSubagents = getMaxSubagents();
@@ -2550,6 +2693,49 @@ const bedrockDocumentFormats = {
 	"text/plain": "txt",
 	"text/markdown": "md"
 };
+/**
+* Whether an upload belongs to the conversation rather than to the agent. The value
+* arrives from multipart form data, so it can be the string "false", which is truthy.
+* Shared so the route, the authorization check and processing cannot disagree about it.
+*/
+const isMessageFileUpload = (value) => value === true || value === "true";
+/**
+* Whether the upload's conversation uses the Responses API, which decides whether Azure
+* can carry a document natively. Multipart form data has no booleans, so it arrives as
+* the string "true".
+*/
+const isResponsesApiUpload = (value) => value === true || value === "true";
+/**
+* The name a file carries inside the code sandbox.
+*
+* Image uploads are converted to the configured output type while the record keeps the
+* original filename, so the extension has to follow the stored bytes or the sandbox
+* decoder is handed a mismatch. Provisioning and priming both resolve the mount path
+* from here: deriving it twice under different rules leaves a later turn advertising a
+* path that does not exist in the sandbox.
+*/
+const resolveSandboxFilename = (filename, mimeType) => {
+	if (!mimeType?.startsWith("image/")) return filename;
+	const subtype = mimeType.slice(6);
+	if (![
+		"webp",
+		"png",
+		"jpeg",
+		"gif"
+	].includes(subtype)) return filename;
+	const accepted = subtype === "jpeg" ? [".jpg", ".jpeg"] : [`.${subtype}`];
+	const lastDot = filename.lastIndexOf(".");
+	const currentExt = lastDot > 0 ? filename.slice(lastDot).toLowerCase() : "";
+	if (accepted.includes(currentExt)) return filename;
+	return `${lastDot > 0 ? filename.slice(0, lastDot) : filename}${accepted[0]}`;
+};
+/**
+* The Responses setting a turn actually runs on. A saved agent's own record wins, since
+* execution reads its model parameters; a conversation only answers for itself. Upload
+* and delivery must agree here, or a document is stored as raw provider content and then
+* re-resolved to text it has no extraction for.
+*/
+const resolveUseResponsesApi = (agentValue, conversationValue) => agentValue ?? conversationValue ?? void 0;
 const isBedrockDocumentType = (mimeType) => mimeType != null && mimeType in bedrockDocumentFormats;
 /** MIME types Bedrock's Converse document path can send to the model (mirrors `bedrockDocumentFormats`). */
 const bedrockDocumentMimeTypes = Object.keys(bedrockDocumentFormats);
@@ -2783,6 +2969,8 @@ const mbToBytes = (mb) => mb * megabyte;
 const defaultSizeLimit = mbToBytes(512);
 const defaultSkillImportSizeLimit = mbToBytes(50);
 const defaultTokenLimit = 1e5;
+const defaultContextSizeLimit = mbToBytes(128);
+const defaultContextCharLimit = 1e6;
 const assistantsFileConfig = {
 	fileLimit: 10,
 	fileSizeLimit: defaultSizeLimit,
@@ -2814,6 +3002,8 @@ const fileConfig = {
 	serverFileSizeLimit: defaultSizeLimit,
 	avatarSizeLimit: mbToBytes(2),
 	fileTokenLimit: defaultTokenLimit,
+	fileContextSizeLimit: defaultContextSizeLimit,
+	fileContextCharLimit: defaultContextCharLimit,
 	clientImageResize: {
 		enabled: false,
 		maxWidth: 1900,
@@ -2829,12 +3019,23 @@ const fileConfig = {
 	}
 };
 const supportedMimeTypesSchema = z.array(z.string()).optional();
+const DefaultLLMDeliveryPath = z.enum([
+	"provider",
+	"text",
+	"none"
+]);
+const defaultLLMDeliveryPathSchema = z.object({
+	fallback: DefaultLLMDeliveryPath.optional(),
+	overrides: z.record(DefaultLLMDeliveryPath).optional()
+});
 const endpointFileConfigSchema = z.object({
 	disabled: z.boolean().optional(),
 	fileLimit: z.number().min(0).optional(),
 	fileSizeLimit: z.number().min(0).optional(),
 	totalSizeLimit: z.number().min(0).optional(),
-	supportedMimeTypes: supportedMimeTypesSchema.optional()
+	supportedMimeTypes: supportedMimeTypesSchema.optional(),
+	defaultLLMDeliveryPath: defaultLLMDeliveryPathSchema.optional(),
+	legacyFileUploadUX: z.boolean().optional()
 });
 const skillFileConfigSchema = z.object({ fileSizeLimit: z.number().min(0).optional() });
 const fileConfigSchema = z.object({
@@ -2843,6 +3044,9 @@ const fileConfigSchema = z.object({
 	serverFileSizeLimit: z.number().min(0).optional(),
 	avatarSizeLimit: z.number().min(0).optional(),
 	fileTokenLimit: z.number().min(0).optional(),
+	fileContextSizeLimit: z.number().min(0).optional(),
+	fileContextCharLimit: z.number().min(0).optional(),
+	codeEnvLivenessSafeWindowMs: z.number().min(0).optional(),
 	imageGeneration: z.object({
 		percentage: z.number().min(0).max(100).optional(),
 		px: z.number().min(0).optional()
@@ -2854,7 +3058,9 @@ const fileConfigSchema = z.object({
 		quality: z.number().min(0).max(1).optional()
 	}).optional(),
 	ocr: z.object({ supportedMimeTypes: supportedMimeTypesSchema.optional() }).optional(),
-	text: z.object({ supportedMimeTypes: supportedMimeTypesSchema.optional() }).optional()
+	text: z.object({ supportedMimeTypes: supportedMimeTypesSchema.optional() }).optional(),
+	defaultLLMDeliveryPath: defaultLLMDeliveryPathSchema.optional(),
+	legacyFileUploadUX: z.boolean().optional()
 });
 /**
 * Compiler for admin-supplied MIME patterns. Defaults to native `RegExp`, which browser
@@ -2990,6 +3196,12 @@ const documentMimeExtensions = [
 	["text/calendar", [".ics"]],
 	["message/rfc822", [".eml"]]
 ];
+/** Preferred extension for a known document MIME type, including its leading dot. */
+function getDocumentFileExtension(mimeType) {
+	const normalized = mimeType?.split(";", 1)[0].trim().toLowerCase();
+	const canonical = normalized === "text/comma-separated-values" ? "text/csv" : normalized;
+	return documentMimeExtensions.find(([type]) => type === canonical)?.[1][0];
+}
 const documentMimeSet = new Set(documentMimeExtensions.map(([mimeType]) => mimeType));
 /** Every MIME type LibreChat may accept, used to detect patterns that reach beyond the representable set. */
 const knownMimeUniverse = Array.from(new Set([
@@ -3083,7 +3295,45 @@ function mergeWithDefault(endpointConfig, defaultConfig, endpoint) {
 		fileLimit: endpointConfig.fileLimit ?? defaultConfig.fileLimit,
 		fileSizeLimit: endpointConfig.fileSizeLimit ?? defaultConfig.fileSizeLimit,
 		totalSizeLimit: endpointConfig.totalSizeLimit ?? defaultConfig.totalSizeLimit,
-		supportedMimeTypes: endpointConfig.supportedMimeTypes ?? defaultMimeTypes
+		supportedMimeTypes: endpointConfig.supportedMimeTypes ?? defaultMimeTypes,
+		defaultLLMDeliveryPath: mergeDeliveryPathConfig(endpointConfig.defaultLLMDeliveryPath, defaultConfig.defaultLLMDeliveryPath),
+		legacyFileUploadUX: endpointConfig.legacyFileUploadUX ?? defaultConfig.legacyFileUploadUX
+	};
+}
+/**
+* Deep-merges delivery-path config so an endpoint that supplies only one override
+* still inherits the default's fallback and shared overrides. Whole-object
+* replacement would silently drop the inherited routing.
+*/
+function mergeDeliveryPathConfig(endpointValue, defaultValue) {
+	if (!endpointValue) return defaultValue;
+	if (!defaultValue) return endpointValue;
+	if (endpointValue.fallback != null) return endpointValue;
+	const hasOverrides = endpointValue.overrides != null || defaultValue.overrides != null;
+	return {
+		...defaultValue.fallback != null ? { fallback: defaultValue.fallback } : {},
+		...hasOverrides ? { overrides: { ...shadowByWildcard(defaultValue.overrides, endpointValue.overrides) } } : {}
+	};
+}
+/**
+* Flattens two override layers into one map that still resolves like the layered chain.
+* Resolution reads exact keys before wildcards, so a plain spread would let a lower
+* layer's `image/png` outrank the upper layer's `image/*`. Dropping the entries an
+* upper wildcard covers restores precedence without changing how lookups work.
+*/
+function shadowByWildcard(lower, upper) {
+	if (!lower) return { ...upper };
+	const upperWildcards = /* @__PURE__ */ new Set();
+	for (const key in upper) if (key.endsWith("/*")) upperWildcards.add(key.slice(0, -1));
+	if (upperWildcards.size === 0) return {
+		...lower,
+		...upper
+	};
+	const retained = {};
+	for (const key in lower) if (!(!key.endsWith("/*") && upperWildcards.has(key.slice(0, key.indexOf("/") + 1)) && upper?.[key] == null)) retained[key] = lower[key];
+	return {
+		...retained,
+		...upper
 	};
 }
 function getEndpointFileConfig(params) {
@@ -3091,8 +3341,13 @@ function getEndpointFileConfig(params) {
 	if (!mergedFileConfig?.endpoints) return fileConfig.endpoints.default;
 	/** Compute an effective default by merging user-configured default over the base default */
 	const baseDefaultConfig = fileConfig.endpoints.default;
+	const globalDefaultConfig = {
+		...baseDefaultConfig,
+		defaultLLMDeliveryPath: mergeDeliveryPathConfig(mergedFileConfig.defaultLLMDeliveryPath, baseDefaultConfig.defaultLLMDeliveryPath),
+		legacyFileUploadUX: mergedFileConfig.legacyFileUploadUX ?? baseDefaultConfig.legacyFileUploadUX
+	};
 	const userDefaultConfig = mergedFileConfig.endpoints.default;
-	const defaultConfig = userDefaultConfig ? mergeWithDefault(userDefaultConfig, baseDefaultConfig, "default") : baseDefaultConfig;
+	const defaultConfig = userDefaultConfig ? mergeWithDefault(userDefaultConfig, globalDefaultConfig, "default") : globalDefaultConfig;
 	const normalizedEndpoint = normalizeEndpointName(endpoint ?? "");
 	const standardEndpoints = new Set([
 		"default",
@@ -3147,9 +3402,13 @@ function mergeFileConfig(dynamic) {
 		}
 	};
 	if (!dynamic) return mergedConfig;
+	if (dynamic.defaultLLMDeliveryPath !== void 0) mergedConfig.defaultLLMDeliveryPath = dynamic.defaultLLMDeliveryPath;
+	if (dynamic.legacyFileUploadUX !== void 0) mergedConfig.legacyFileUploadUX = dynamic.legacyFileUploadUX;
 	if (dynamic.serverFileSizeLimit !== void 0) mergedConfig.serverFileSizeLimit = mbToBytes(dynamic.serverFileSizeLimit);
 	if (dynamic.avatarSizeLimit !== void 0) mergedConfig.avatarSizeLimit = mbToBytes(dynamic.avatarSizeLimit);
 	if (dynamic.fileTokenLimit !== void 0) mergedConfig.fileTokenLimit = dynamic.fileTokenLimit;
+	if (dynamic.fileContextSizeLimit !== void 0) mergedConfig.fileContextSizeLimit = mbToBytes(dynamic.fileContextSizeLimit);
+	if (dynamic.fileContextCharLimit !== void 0) mergedConfig.fileContextCharLimit = dynamic.fileContextCharLimit;
 	if (dynamic.skills?.fileSizeLimit !== void 0) mergedConfig.skills = {
 		...mergedConfig.skills,
 		fileSizeLimit: mbToBytes(dynamic.skills.fileSizeLimit)
@@ -3197,6 +3456,8 @@ function mergeFileConfig(dynamic) {
 		});
 		if (dynamicEndpoint.disabled !== void 0) mergedEndpoint.disabled = dynamicEndpoint.disabled;
 		if (dynamicEndpoint.supportedMimeTypes) mergedEndpoint.supportedMimeTypes = convertStringsToRegex(dynamicEndpoint.supportedMimeTypes);
+		if (dynamicEndpoint.defaultLLMDeliveryPath !== void 0) mergedEndpoint.defaultLLMDeliveryPath = dynamicEndpoint.defaultLLMDeliveryPath;
+		if (dynamicEndpoint.legacyFileUploadUX !== void 0) mergedEndpoint.legacyFileUploadUX = dynamicEndpoint.legacyFileUploadUX;
 	}
 	return mergedConfig;
 }
@@ -3226,6 +3487,7 @@ const codeEnvironments = () => `${BASE_URL}/api/code-environments`;
 const codeEnvironmentPairings = () => `${codeEnvironments()}/pairings`;
 const codeEnvironmentById = (id) => `${codeEnvironments()}/${encodeURIComponent(id)}`;
 const codeEnvironmentSettings = (id) => `${codeEnvironmentById(id)}/settings`;
+const codeEnvironmentStatus = (id) => `${codeEnvironmentById(id)}/status`;
 const messagesRoot = `${BASE_URL}/api/messages`;
 const messages = (params) => {
 	const { conversationId, messageId, ...rest } = params;
@@ -3438,8 +3700,15 @@ const listSkillsWithFilters = (filter) => {
 };
 const skillFiles = (id) => `${getSkill$1(id)}/files`;
 const skillFile = (id, relativePath) => `${skillFiles(id)}/${encodeURIComponent(relativePath)}`;
-const insights = () => `${BASE_URL}/api/admin/insights`;
+const insights = () => `${BASE_URL}/api/insights`;
 const insightsAccess = () => `${insights()}/access`;
+const conversationTrace = (conversationId) => `${BASE_URL}/api/traces/${encodeURIComponent(conversationId)}`;
+const conversationTraceAvailability = (conversationId) => `${conversationTrace(conversationId)}/availability`;
+const conversationTraceRecords = (conversationId, cursor) => `${conversationTrace(conversationId)}/records${cursor ? `?${new URLSearchParams({ cursor }).toString()}` : ""}`;
+const conversationTraceRecord = (conversationId, recordId, messageId, sourceId) => `${conversationTrace(conversationId)}/records/${encodeURIComponent(recordId)}?${new URLSearchParams({
+	message: messageId,
+	...sourceId ? { source: sourceId } : {}
+}).toString()}`;
 const adminSkillsSync = () => `${BASE_URL}/api/admin/skills/sync`;
 const adminSkillsSyncStatus = () => `${adminSkillsSync()}/status`;
 const adminSkillsSyncRun = () => `${adminSkillsSync()}/run`;
@@ -3448,6 +3717,7 @@ const skillStates = () => `${BASE_URL}/api/user/settings/skills/active`;
 const adminLangfuseConnection = () => `${BASE_URL}/api/admin/langfuse/connection`;
 const adminLangfuseConnectionTest = () => `${adminLangfuseConnection()}/test`;
 const adminLangfuseSessionLink = (conversationId) => `${adminLangfuseConnection()}/session/${encodeURIComponent(conversationId)}`;
+const pinnedOrder = () => `${BASE_URL}/api/user/settings/pinned-order`;
 const toolFavorites = () => `${BASE_URL}/api/user/settings/favorites/tools`;
 const toolFavorite = (itemType, itemId) => `${toolFavorites()}/${itemType}/${encodeURIComponent(itemId)}`;
 const roles = () => `${BASE_URL}/api/roles`;
@@ -3519,6 +3789,7 @@ let FileContext = /* @__PURE__ */ function(FileContext) {
 	FileContext["image_generation"] = "image_generation";
 	FileContext["assistants_output"] = "assistants_output";
 	FileContext["message_attachment"] = "message_attachment";
+	FileContext["run_artifact"] = "run_artifact";
 	FileContext["skill_file"] = "skill_file";
 	FileContext["filename"] = "filename";
 	FileContext["updatedAt"] = "updatedAt";
@@ -3549,6 +3820,12 @@ let TokenExchangeMethodEnum = /* @__PURE__ */ function(TokenExchangeMethodEnum)
 }({});
 //#endregion
 //#region src/mcp.ts
+/**
+* Upper bound on a stored MCP `iconPath` (URL or data URI). Enforced by
+* `sanitizeMcpIconPath`, not a schema `.max()`, so re-submitting a server whose
+* stored icon predates the cap clears the icon instead of rejecting the update.
+*/
+const MAX_MCP_ICON_PATH_LENGTH = 256 * 1024;
 const validateOAuthClientCredentials = (oauth, ctx) => {
 	if (oauth.client_secret && !oauth.client_id) ctx.addIssue({
 		code: z.ZodIssueCode.custom,
@@ -3957,6 +4234,8 @@ const excludedKeys = new Set([
 	"conversationId",
 	"agentEventBinding",
 	"agentEventActor",
+	"agentEventActorCleanup",
+	"agentEventActorSuspension",
 	"agentEventActorReconciliations",
 	"agentEventActorEpoch",
 	"agentEventActorLegacyTurn",
@@ -4465,13 +4744,13 @@ function isRemoteOidcUrlAllowed(value) {
 }
 const remoteApiOidcUrlSchema = z.string().url().refine(isRemoteOidcUrlAllowed, { message: "must use https:// unless targeting localhost" });
 const remoteApiOidcScopeSchema = z.string().refine((scope) => !scope.includes(","), { message: "scopes must be space-separated" });
-const remoteApiOidcSchema = z.object({
+const oidcAccessTokenSchema = z.object({
 	enabled: z.boolean().default(false),
 	issuer: remoteApiOidcUrlSchema.optional(),
 	audience: z.string().min(1).optional(),
-	jwksUri: remoteApiOidcUrlSchema.optional(),
-	scope: remoteApiOidcScopeSchema.optional()
-}).superRefine((oidc, ctx) => {
+	jwksUri: remoteApiOidcUrlSchema.optional()
+});
+function validateEnabledOidc(oidc, ctx) {
 	if (oidc.enabled === true && !oidc.issuer) ctx.addIssue({
 		code: z.ZodIssueCode.custom,
 		path: ["issuer"],
@@ -4482,12 +4761,46 @@ const remoteApiOidcSchema = z.object({
 		path: ["audience"],
 		message: "audience is required when OIDC auth is enabled"
 	});
-});
+}
+const remoteApiOidcSchema = oidcAccessTokenSchema.extend({ scope: remoteApiOidcScopeSchema.optional() }).superRefine(validateEnabledOidc);
 const remoteApiAuthSchema = z.object({
 	apiKey: z.object({ enabled: z.boolean().default(true) }).optional(),
 	oidc: remoteApiOidcSchema.optional()
 });
 const remoteApiSchema = z.object({ auth: remoteApiAuthSchema.optional() });
+const managementClientBindingSchema = z.object({
+	clientId: z.string().trim().min(1).max(128),
+	subject: z.string().trim().min(1).max(512).optional(),
+	userId: z.string().trim().regex(/^[a-f\d]{24}$/i, "must be a MongoDB ObjectId").transform((userId) => userId.toLowerCase()),
+	tenantId: z.string().trim().min(1).max(128).regex(/^[a-zA-Z0-9][a-zA-Z0-9_.-]*$/, "must be a valid tenant id").refine((tenantId) => tenantId !== "__SYSTEM__", "system tenant is not allowed"),
+	enabled: z.boolean().default(true)
+}).strict();
+const managementApiOidcSchema = oidcAccessTokenSchema.strict().superRefine(validateEnabledOidc);
+const managementApiAuthSchema = z.object({
+	oidc: managementApiOidcSchema,
+	clients: z.array(managementClientBindingSchema).max(100).default([])
+}).strict().superRefine((auth, ctx) => {
+	if (auth.oidc.enabled === true && auth.clients.length === 0) ctx.addIssue({
+		code: z.ZodIssueCode.custom,
+		path: ["clients"],
+		message: "at least one client binding is required when management auth is enabled"
+	});
+	const clientIds = /* @__PURE__ */ new Set();
+	for (let index = 0; index < auth.clients.length; index++) {
+		const client = auth.clients[index];
+		if (clientIds.has(client.clientId)) ctx.addIssue({
+			code: z.ZodIssueCode.custom,
+			path: [
+				"clients",
+				index,
+				"clientId"
+			],
+			message: "client IDs must be unique"
+		});
+		clientIds.add(client.clientId);
+	}
+});
+const managementApiSchema = z.object({ auth: managementApiAuthSchema.optional() }).strict();
 /**
 * Permission mode applied to a tool call. Mirrors `@librechat/agents`'s
 * `ToolPolicyMode` 1:1.
@@ -4626,15 +4939,25 @@ const codeEnvironmentPermissionFieldSchema = z.object({
 		message: "Permission default must be included in allowed values"
 	});
 });
+/** Existing attached commands used a fixed 30-second execution budget. */
+const CODE_ENVIRONMENT_COMMAND_TIMEOUT_DEFAULT_MS = 3e4;
+/** Protocol-level ceiling; deployments may only lower this value. */
+const CODE_ENVIRONMENT_COMMAND_TIMEOUT_HARD_MAX_MS = 5 * 6e4;
 /**
 * Typed user-tunable surface for one attached code environment. Omitted fields
 * remain fixed at LibreChat's safe baseline. Isolation, networking, mounts,
 * privileged execution, and secrets are deliberately not representable here.
 */
-const codeEnvironmentUserConfigSchema = z.object({ permissions: z.object({
-	fileWrite: codeEnvironmentPermissionFieldSchema.optional(),
-	commandExecution: codeEnvironmentPermissionFieldSchema.optional()
-}).strict().optional() }).strict();
+const codeEnvironmentUserConfigSchema = z.object({
+	permissions: z.object({
+		fileWrite: codeEnvironmentPermissionFieldSchema.optional(),
+		commandExecution: codeEnvironmentPermissionFieldSchema.optional()
+	}).strict().optional(),
+	limits: z.object({ 
+	/** Maximum timeout a Bash invocation may request. Omission preserves
+	* the historical 30-second command budget. */
+maxCommandTimeoutMs: z.number().int().min(1).max(CODE_ENVIRONMENT_COMMAND_TIMEOUT_HARD_MAX_MS).optional() }).strict().optional()
+}).strict();
 const codeEnvironmentUserSettingsSchema = z.object({ permissions: z.object({
 	fileWrite: codeEnvironmentPermissionDecisionSchema.optional(),
 	commandExecution: codeEnvironmentPermissionDecisionSchema.optional()
@@ -4659,12 +4982,32 @@ const agentsEndpointSchema = baseEndpointSchema.omit({ baseURL: true }).merge(z.
 	* the shipped default of 10 for orchestration-heavy deployments, bounded by
 	* `MAX_SUBAGENTS_CEILING`. */
 	maxSubagents: z.number().int().min(1).max(50).optional().default(10),
+	/** Run-scoped file access for explicitly opted-in subagent delegations. */
+	fileSharing: z.object({
+		enabled: z.boolean().optional().default(false),
+		allowSiblingSharing: z.boolean().optional().default(false),
+		maxFiles: z.number().int().min(1).max(1e3).optional().default(100),
+		/** Aggregate disk budget for private output versions retained during a run. */
+		maxPrivateBytes: z.number().int().min(1).max(10737418240).optional().default(268435456),
+		ttlMs: z.number().int().min(1).max(864e5).optional().default(36e5)
+	}).optional(),
+	/** Maximum concurrent Code API uploads per route and authenticated principal. */
+	codeApiUploadConcurrency: z.number().int().min(1).max(100).optional().default(3),
+	/** Maximum wall-clock time spent waiting on Code API rate limits per operation. */
+	codeApiMaxRetryWaitMs: z.number().int().min(0).max(3e5).optional().default(2e4),
 	allowedProviders: z.array(z.union([z.string(), eModelEndpointSchema])).optional(),
 	capabilities: z.array(z.nativeEnum(AgentCapabilities)).optional().default(defaultAgentCapabilities),
 	/** Controls which workspace-sharing scopes users may select for stateful code sessions.
 	*  Omit this block to preserve the legacy behavior of allowing every scope. */
 	statefulCodeSessions: z.object({
 		allowedEnvironments: z.array(z.enum(STATEFUL_CODE_ENVIRONMENTS)).min(1),
+		/** Server-only personal worker enrollment policy. Effective principal
+		* policy may tighten, but never raise, the deployment ceiling. */
+		principalWorkers: z.object({
+			enabled: z.boolean().optional(),
+			/** Defaults to five. Zero disables enrollment; existing machines remain usable. */
+			maxPerUser: z.number().int().min(0).max(Number.MAX_SAFE_INTEGER).optional()
+		}).optional(),
 		/** Operator-managed execution environments. Attached entries route to a
 		* Code API deployment backed by an outbound librechat-code worker. */
 		environments: z.array(z.object({
@@ -4771,8 +5114,14 @@ const agentsEndpointSchema = baseEndpointSchema.omit({ baseURL: true }).merge(z.
 	eventDriven: z.object({ selfUrl: z.string().url().optional() }).optional(),
 	/** Conversational background-task delivery policy. Automatic completion wakeups are
 	* enabled unless an administrator explicitly restores poll-only behavior. */
-	backgroundTasks: z.object({ completionWakeups: z.boolean().optional().default(true) }).optional(),
+	backgroundTasks: z.object({
+		completionWakeups: z.boolean().optional().default(true),
+		/** Cooperative cancellation for process-local ordinary tools. Off
+		* by default so existing deployments opt into the new control. */
+		ordinaryToolCancellation: z.boolean().optional().default(false)
+	}).optional(),
 	skills: z.object({ maxCatalogSkills: z.number().int().min(1).max(100).optional() }).optional(),
+	managementApi: managementApiSchema.optional(),
 	remoteApi: remoteApiSchema.optional(),
 	/** Human-in-the-loop tool approval policy. Off by default. */
 	toolApproval: toolApprovalPolicySchema,
@@ -5030,6 +5379,21 @@ const sttSchema = z.object({
 	openai: sttOpenaiSchema.optional(),
 	azureOpenAI: sttAzureOpenAISchema.optional()
 });
+/**
+* The speech providers a schema actually configures. `allowedAddresses` is transport
+* policy rather than a provider, and a provider key present but empty configures
+* nothing. The speech services accept a schema only when exactly one survives here, so
+* the upload router reads availability from the same list and never routes audio to a
+* transcription that cannot run.
+*/
+function listConfiguredSpeechProviders(schema) {
+	if (schema == null) return [];
+	return Object.entries(schema).filter(([key, value]) => key !== "allowedAddresses" && value != null && typeof value === "object" && Object.keys(value).length > 0);
+}
+/** Whether a speech schema names exactly one usable provider. */
+function isSpeechProviderConfigured(schema) {
+	return listConfiguredSpeechProviders(schema).length === 1;
+}
 const speechTab = z.object({
 	conversationMode: z.boolean().optional(),
 	advancedMode: z.boolean().optional(),
@@ -5114,7 +5478,14 @@ const termsOfServiceSchema = z.object({
 	modalContent: z.string().or(z.array(z.string())).optional()
 });
 const localizedStringSchema = z.union([z.string(), z.record(z.string())]);
+const mcpRefreshDefaults = {
+	toolsRefreshInterval: 300 * 1e3,
+	statusRefreshInterval: 30 * 1e3
+};
 const mcpServersSchema = z.object({
+	/** Foreground polling intervals in milliseconds; 0 disables polling. */
+	toolsRefreshInterval: z.number().int().nonnegative().max(2147483647).optional(),
+	statusRefreshInterval: z.number().int().nonnegative().max(2147483647).optional(),
 	placeholder: z.string().optional(),
 	use: z.boolean().optional(),
 	create: z.boolean().optional(),
@@ -5126,6 +5497,68 @@ const mcpServersSchema = z.object({
 		subLabel: localizedStringSchema.optional()
 	}).optional()
 }).optional();
+/** Values the trace viewer uses for any `interface.traceViewer` field left unset. */
+const traceViewerDefaults = {
+	enabled: false,
+	showInputOutput: false,
+	maxRecords: 1e3,
+	maxContentLength: 5e4,
+	requestsPerMinute: 30,
+	requestTimeoutMs: 1e4
+};
+/** Inclusive bounds for the numeric `interface.traceViewer` fields. */
+const traceViewerLimits = {
+	maxRecords: {
+		min: 1,
+		max: 1e4
+	},
+	maxContentLength: {
+		min: 1,
+		max: 1e6
+	},
+	requestsPerMinute: {
+		min: 1,
+		max: 1e3
+	},
+	requestTimeoutMs: {
+		min: 1e3,
+		max: 3e5
+	}
+};
+const boundedIntegerSchema = (field) => z.number().int().min(traceViewerLimits[field].min).max(traceViewerLimits[field].max).optional();
+const traceViewerSchema = z.object({
+	/** Shows the conversation trace control for traces this deployment exported. */
+	enabled: z.boolean().optional(),
+	/** Returns observation input, output and metadata in the record inspector. */
+	showInputOutput: z.boolean().optional(),
+	/** Observations read from the tracing backend per request. */
+	maxRecords: boundedIntegerSchema("maxRecords"),
+	/** Characters kept from each input, output and metadata value before truncation. */
+	maxContentLength: boundedIntegerSchema("maxContentLength"),
+	/** Trace reads one user may start per minute. */
+	requestsPerMinute: boundedIntegerSchema("requestsPerMinute"),
+	/** Budget for each round trip to the tracing backend, in milliseconds. */
+	requestTimeoutMs: boundedIntegerSchema("requestTimeoutMs")
+});
+function boundedInteger(value, field) {
+	const { min, max } = traceViewerLimits[field];
+	return typeof value === "number" && Number.isSafeInteger(value) && value >= min ? Math.min(value, max) : traceViewerDefaults[field];
+}
+/**
+* Fills unset or invalid `interface.traceViewer` fields from
+* {@link traceViewerDefaults}. Admin config overrides reach runtime without
+* schema validation, so every consumer reads the section through this.
+*/
+function resolveTraceViewerConfig(config) {
+	return {
+		enabled: config?.enabled === true,
+		showInputOutput: config?.showInputOutput === true,
+		maxRecords: boundedInteger(config?.maxRecords, "maxRecords"),
+		maxContentLength: boundedInteger(config?.maxContentLength, "maxContentLength"),
+		requestsPerMinute: boundedInteger(config?.requestsPerMinute, "requestsPerMinute"),
+		requestTimeoutMs: boundedInteger(config?.requestTimeoutMs, "requestTimeoutMs")
+	};
+}
 let RetentionMode = /* @__PURE__ */ function(RetentionMode) {
 	RetentionMode["ALL"] = "all";
 	RetentionMode["TEMPORARY"] = "temporary";
@@ -5159,6 +5592,7 @@ const interfaceSchema = z.object({
 	})]).optional(),
 	temporaryChat: z.boolean().optional(),
 	temporaryChatRetention: z.number().min(1).max(8760).optional(),
+	generalChatRetention: z.number().min(1).max(8760).optional(),
 	autoSubmitFromUrl: z.boolean().optional(),
 	retentionMode: z.nativeEnum(RetentionMode).default("temporary"),
 	retainAgentFiles: z.boolean().optional(),
@@ -5179,6 +5613,7 @@ const interfaceSchema = z.object({
 	marketplace: z.object({ use: z.boolean().optional() }).optional(),
 	fileSearch: z.boolean().optional(),
 	fileCitations: z.boolean().optional(),
+	traceViewer: traceViewerSchema.optional(),
 	/** Tool keys (and `'mcp'` or an MCP server name) pinned to the prompt bar by default */
 	defaultPinnedTools: z.array(z.string()).optional(),
 	buildInfo: z.boolean().optional(),
@@ -5207,7 +5642,10 @@ const interfaceSchema = z.object({
 		maxPerUser: z.number().int().min(0).optional(),
 		minIntervalMinutes: z.number().int().min(1).optional(),
 		autoDisableAfterFailures: z.number().int().min(1).optional(),
+		admissionConcurrency: z.number().int().min(1).max(100).optional(),
 		fireConcurrency: z.number().int().min(1).optional(),
+		mcpPreflightConcurrency: z.number().int().min(1).max(10).optional(),
+		mcpPreflightTimeoutMs: z.number().int().min(1e3).max(6e5).optional(),
 		/** Refuse schedules that are not filed under a chat project. Enforced on
 		*  create/update AND at every fire, so raising it later stops schedules
 		*  that predate the policy instead of grandfathering them. */
@@ -5600,6 +6038,57 @@ const messageFilterPiiSchema = z.object({
 	});
 });
 const messageFilterSchema = z.object({ pii: messageFilterPiiSchema.optional() });
+/** User fields a deployment may select as the Langfuse trace `userId`. */
+const LANGFUSE_TRACE_USER_ID_FIELDS = [
+	"id",
+	"email",
+	"username",
+	"name",
+	"openidId",
+	"samlId",
+	"ldapId",
+	"googleId",
+	"githubId",
+	"discordId",
+	"appleId",
+	"facebookId"
+];
+/** User fields a deployment may copy into Langfuse trace metadata. */
+const LANGFUSE_TRACE_USER_METADATA_FIELDS = [
+	...LANGFUSE_TRACE_USER_ID_FIELDS,
+	"role",
+	"provider"
+];
+/** Request fields a deployment may copy into Langfuse trace metadata. */
+const LANGFUSE_TRACE_CONVERSATION_METADATA_FIELDS = [
+	"conversationId",
+	"endpoint",
+	"endpointType",
+	"provider",
+	"model",
+	"modelLabel",
+	"spec"
+];
+/**
+* What a deployment attaches to every Langfuse trace beyond the defaults.
+* Nothing here is exported unless explicitly listed, so the default trace
+* carries only the internal user id and no user or request metadata.
+*/
+const langfuseTraceConfigSchema = z.object({
+	/**
+	* Which user field becomes the trace `userId`. Defaults to the internal user
+	* id; a user with no value for the chosen field keeps the internal id.
+	*/
+	userIdField: z.enum(LANGFUSE_TRACE_USER_ID_FIELDS).optional(),
+	/** User fields exported as `librechat.user.<field>` trace metadata. */
+	userMetadataFields: z.array(z.enum(LANGFUSE_TRACE_USER_METADATA_FIELDS)).optional(),
+	/**
+	* Request fields exported as trace metadata: `librechat.conversation.id`,
+	* `librechat.endpoint`, `librechat.endpoint.type`, `librechat.provider`,
+	* `librechat.model`, `librechat.model.label`, and `librechat.spec`.
+	*/
+	conversationMetadataFields: z.array(z.enum(LANGFUSE_TRACE_CONVERSATION_METADATA_FIELDS)).optional()
+});
 const langfuseConfigSchema = z.object({
 	enabled: z.boolean().optional(),
 	publicKey: z.string().optional(),
@@ -5631,7 +6120,9 @@ const langfuseConfigSchema = z.object({
 	* schema does not yet express — and note the fanout collector forwards only
 	* `Authorization` upstream regardless.
 	*/
-	headers: z.record(z.string()).optional()
+	headers: z.record(z.string()).optional(),
+	/** Trace user identity and allowlisted user/request metadata. */
+	trace: langfuseTraceConfigSchema.optional()
 });
 const configSchema = z.object({
 	version: z.string(),
@@ -5649,7 +6140,35 @@ const configSchema = z.object({
 	mcpServers: MCPServersSchema.optional(),
 	mcpSettings: z.object({
 		allowedDomains: z.array(z.string()).optional(),
-		allowedAddresses: allowedAddressesSchema
+		allowedAddresses: allowedAddressesSchema,
+		catalogRecovery: z.object({
+			discoveryBackoffMs: z.array(z.number().int().positive().max(1440 * 6e4)).min(1).max(8).default([
+				5 * 6e4,
+				10 * 6e4,
+				20 * 6e4,
+				30 * 6e4
+			]),
+			discoveryTimeoutMs: z.number().int().positive().max(5 * 6e4).default(3e3),
+			/** How long past `discoveryTimeoutMs` a stalled discovery may hold its catalog slot and
+			* coalesced requests. It is never cancelled, so OAuth tokens it redeemed still persist,
+			* and no other discovery for the same server state starts until it settles. */
+			discoverySettleGraceMs: z.number().int().nonnegative().max(5 * 6e4).default(1e4),
+			reauthRetryMs: z.number().int().positive().max(1440 * 6e4).default(30 * 6e4),
+			maxStateEntries: z.number().int().positive().max(1e6).default(1e4),
+			/** Process-wide: how many discoveries released past `discoverySettleGraceMs` may still be
+			* running before recovery starts no new discovery until one settles. The default matches
+			* the three catalog slots a stalled dependency could hold before discoveries were released. */
+			maxDetachedDiscoveries: z.number().int().positive().max(1e3).default(3),
+			generationReadTimeoutMs: z.number().int().positive().max(1e4).default(500),
+			authorizationFenceRetryMs: z.array(z.number().int().nonnegative().max(6e4)).min(1).max(8).default([
+				0,
+				50,
+				200
+			]),
+			authorizationFenceTimeoutMs: z.number().int().positive().max(3e4).default(1e3),
+			authorizationFenceRetryIntervalMs: z.number().int().positive().max(60 * 6e4).default(3e4),
+			authorizationFenceRetryBatchSize: z.number().int().positive().max(1e4).default(100)
+		}).default({})
 	}).optional(),
 	interface: interfaceSchema,
 	turnstile: turnstileSchema.optional(),
@@ -5708,6 +6227,7 @@ let KnownEndpoints = /* @__PURE__ */ function(KnownEndpoints) {
 	KnownEndpoints["groq"] = "groq";
 	KnownEndpoints["helicone"] = "helicone";
 	KnownEndpoints["huggingface"] = "huggingface";
+	KnownEndpoints["lemonade"] = "lemonade";
 	KnownEndpoints["mistral"] = "mistral";
 	KnownEndpoints["mlx"] = "mlx";
 	KnownEndpoints["ollama"] = "ollama";
@@ -5746,6 +6266,7 @@ const alternateName = {
 	["anthropic"]: "Anthropic",
 	["custom"]: "Custom",
 	["bedrock"]: "AWS Bedrock",
+	["lemonade"]: "AMD Lemonade",
 	["ollama"]: "Ollama",
 	["deepseek"]: "DeepSeek",
 	["moonshot"]: "Moonshot",
@@ -5753,6 +6274,14 @@ const alternateName = {
 	["vercel"]: "Vercel",
 	["helicone"]: "Helicone"
 };
+/**
+* Models the Assistants endpoints cannot run. GPT-6 Astra serves tool calls only
+* from the Responses API, and the Assistants surface does not route through
+* `getOpenAILLMConfig`, so listing it there would offer a configuration the
+* provider rejects. Kept out of `sharedOpenAIModels`, which both Assistants
+* catalogs consume.
+*/
+const responsesOnlyOpenAIModels = ["gpt-6-astra"];
 const sharedOpenAIModels = [
 	"gpt-5.6",
 	"gpt-5.6-terra",
@@ -5848,7 +6377,7 @@ const bedrockModels = [
 const defaultModels = {
 	["azureAssistants"]: sharedOpenAIModels,
 	["assistants"]: [...sharedOpenAIModels, "chatgpt-4o-latest"],
-	["agents"]: sharedOpenAIModels,
+	["agents"]: [...responsesOnlyOpenAIModels, ...sharedOpenAIModels],
 	["google"]: [
 		"gemini-3.8-flash",
 		"gemini-3.7-flash",
@@ -5866,6 +6395,7 @@ const defaultModels = {
 	],
 	["anthropic"]: sharedAnthropicModels,
 	["openAI"]: [
+		...responsesOnlyOpenAIModels,
 		...sharedOpenAIModels,
 		"chatgpt-4o-latest",
 		"gpt-4-vision-preview",
@@ -5878,12 +6408,19 @@ const fitlerAssistantModels = (str) => {
 	return /gpt-4|gpt-3\\.5/i.test(str) && !/vision|instruct/i.test(str);
 };
 const openAIModels = defaultModels["openAI"];
+/**
+* The OpenAI catalog without the models only the first-party OpenAI endpoint
+* can run. Azure OpenAI shares this list, but Astra is neither routed to the
+* Responses API nor given its request constraints there, and listing it first
+* would let it become the default selection.
+*/
+const nonResponsesOnlyOpenAIModels = openAIModels.filter((model) => !responsesOnlyOpenAIModels.includes(model));
 const initialModelsConfig = {
 	initial: [],
 	["openAI"]: openAIModels,
 	["assistants"]: openAIModels.filter(fitlerAssistantModels),
 	["agents"]: openAIModels,
-	["azureOpenAI"]: openAIModels,
+	["azureOpenAI"]: nonResponsesOnlyOpenAIModels,
 	["google"]: defaultModels["google"],
 	["anthropic"]: defaultModels["anthropic"],
 	["bedrock"]: defaultModels["bedrock"]
@@ -6181,6 +6718,10 @@ let ViolationTypes = /* @__PURE__ */ function(ViolationTypes) {
 	* Registration violations.
 	*/
 	ViolationTypes["REGISTRATIONS"] = "registrations";
+	/**
+	* Shared link retrieval limit violations.
+	*/
+	ViolationTypes["SHARE_LIMIT"] = "share_limit";
 	return ViolationTypes;
 }({});
 /**
@@ -6248,6 +6789,10 @@ let ErrorTypes = /* @__PURE__ */ function(ErrorTypes) {
 	*/
 	ErrorTypes["STATEFUL_CODE_ENVIRONMENT_NOT_ALLOWED"] = "stateful_code_environment_not_allowed";
 	/**
+	* A conversation's selected attached workspace cannot be used as requested.
+	*/
+	ErrorTypes["CODE_WORKSPACE_UNAVAILABLE"] = "code_workspace_unavailable";
+	/**
 	* Invalid Agent Provider (excluded by Admin)
 	*/
 	ErrorTypes["INVALID_AGENT_PROVIDER"] = "invalid_agent_provider";
@@ -6291,6 +6836,26 @@ let ErrorTypes = /* @__PURE__ */ function(ErrorTypes) {
 	* Provider throttled or refused the request for exceeding a rate/spend allowance
 	*/
 	ErrorTypes["MODEL_RATE_LIMIT"] = "model_rate_limit";
+	/**
+	* An agent model provider failed and the run could not recover.
+	*/
+	ErrorTypes["UPSTREAM_MODEL_ERROR"] = "upstream_model_error";
+	/**
+	* Context pruning removed every message; nothing fits the configured context window
+	*/
+	ErrorTypes["EMPTY_MESSAGES"] = "empty_messages";
+	/**
+	* Formatted provider payload exceeded the context budget before invocation
+	*/
+	ErrorTypes["FINAL_CONTEXT_OVERFLOW"] = "final_context_overflow";
+	/**
+	* A manual compaction the graph could not attempt; `reason` says why
+	*/
+	ErrorTypes["COMPACTION_SKIPPED"] = "compaction_skipped";
+	/**
+	* A manual compaction whose summarizer produced nothing; history is untouched
+	*/
+	ErrorTypes["COMPACTION_FAILED"] = "compaction_failed";
 	return ErrorTypes;
 }({});
 /**
@@ -6422,7 +6987,7 @@ let TTSProviders = /* @__PURE__ */ function(TTSProviders) {
 /** Enum for app-wide constants */
 let Constants = /* @__PURE__ */ function(Constants) {
 	/**
-	* Key for the app's version. The placeholder `v0.8.8-rc2` is
+	* Key for the app's version. The placeholder `v0.8.8-rc3` is
 	* swapped in by `@rollup/plugin-replace` during `npm run build:data-provider`
 	* using the value of the root `package.json`'s `version` field. Consumers
 	* always import this via the built dist bundle (see `main` field in
@@ -6430,9 +6995,9 @@ let Constants = /* @__PURE__ */ function(Constants) {
 	* substituted value. Only tests that import the TypeScript source directly
 	* would observe the raw placeholder.
 	*/
-	Constants["VERSION"] = "v0.8.8-rc2";
+	Constants["VERSION"] = "v0.8.8-rc3";
 	/** Key for the Custom Config's version (librechat.yaml). */
-	Constants["CONFIG_VERSION"] = "1.3.15";
+	Constants["CONFIG_VERSION"] = "1.3.16";
 	/** Standard value for the first message's `parentMessageId` value, to indicate no parent exists. */
 	Constants["NO_PARENT"] = "00000000-0000-0000-0000-000000000000";
 	/** Standard value to use whatever the submission prelim. `responseMessageId` is */
@@ -6909,6 +7474,8 @@ let PermissionBits = /* @__PURE__ */ function(PermissionBits) {
 	PermissionBits[PermissionBits["DELETE"] = 4] = "DELETE";
 	/**  1000 - Can share agent with others (future) */
 	PermissionBits[PermissionBits["SHARE"] = 8] = "SHARE";
+	/** 10000 - Can view Insights data for an agent when VIEW is also present */
+	PermissionBits[PermissionBits["VIEW_INSIGHTS"] = 16] = "VIEW_INSIGHTS";
 	return PermissionBits;
 }({});
 /**
@@ -6950,6 +7517,8 @@ const principalSchema = z.object({
 	description: z.string().optional(),
 	idOnTheSource: z.string().optional(),
 	accessRoleId: z.nativeEnum(AccessRoleIds).optional(),
+	viewInsights: z.boolean().optional(),
+	isAdmin: z.boolean().optional(),
 	memberCount: z.number().optional()
 });
 /**
@@ -7083,6 +7652,9 @@ let QueryKeys = /* @__PURE__ */ function(QueryKeys) {
 	QueryKeys["searchEnabled"] = "searchEnabled";
 	QueryKeys["langfuseConnection"] = "langfuseConnection";
 	QueryKeys["langfuseSessionLink"] = "langfuseSessionLink";
+	QueryKeys["conversationTraceAvailability"] = "conversationTraceAvailability";
+	QueryKeys["conversationTraceRecords"] = "conversationTraceRecords";
+	QueryKeys["conversationTraceRecord"] = "conversationTraceRecord";
 	QueryKeys["user"] = "user";
 	QueryKeys["name"] = "name";
 	QueryKeys["models"] = "models";
@@ -7159,13 +7731,26 @@ let QueryKeys = /* @__PURE__ */ function(QueryKeys) {
 	QueryKeys["subagentThread"] = "subagentThread";
 	QueryKeys["codeEnvironments"] = "codeEnvironments";
 	QueryKeys["agentQueuedTurns"] = "agentQueuedTurns";
+	QueryKeys["pinnedOrder"] = "pinnedOrder";
 	return QueryKeys;
 }({});
-const DynamicQueryKeys = { agentFiles: (agentId) => ["agentFiles", agentId] };
+const DynamicQueryKeys = {
+	agentFiles: (agentId) => ["agentFiles", agentId],
+	codeEnvironmentStatus: (id) => [
+		"codeEnvironments",
+		id,
+		"status"
+	]
+};
 let MutationKeys = /* @__PURE__ */ function(MutationKeys) {
 	MutationKeys["subagentControl"] = "subagentControl";
 	MutationKeys["enqueueAgentQueuedTurn"] = "enqueueAgentQueuedTurn";
 	MutationKeys["cancelAgentQueuedTurn"] = "cancelAgentQueuedTurn";
+	/** Whole-array favorites write, keyed so every hook instance's write is
+	*  visible to the others through the query client. */
+	MutationKeys["updateFavorites"] = "updateFavorites";
+	/** Pinned-section display order write, keyed for the same reason. */
+	MutationKeys["updatePinnedOrder"] = "updatePinnedOrder";
 	MutationKeys["updateLangfuseConnection"] = "updateLangfuseConnection";
 	MutationKeys["testLangfuseConnection"] = "testLangfuseConnection";
 	MutationKeys["createAgentApiKey"] = "createAgentApiKey";
@@ -7687,10 +8272,14 @@ var data_service_exports = /* @__PURE__ */ __exportAll({
 	getAvailableTools: () => getAvailableTools,
 	getBanner: () => getBanner,
 	getCategories: () => getCategories,
+	getCodeEnvironmentStatus: () => getCodeEnvironmentStatus,
 	getCodeEnvironments: () => getCodeEnvironments,
 	getCodeOutputDownload: () => getCodeOutputDownload,
 	getConversationById: () => getConversationById,
 	getConversationTags: () => getConversationTags,
+	getConversationTraceAvailability: () => getConversationTraceAvailability,
+	getConversationTraceRecord: () => getConversationTraceRecord,
+	getConversationTraceRecords: () => getConversationTraceRecords,
 	getConversations: () => getConversations,
 	getCustomConfigSpeech: () => getCustomConfigSpeech,
 	getDomainServerBaseUrl: () => getDomainServerBaseUrl,
@@ -7722,6 +8311,7 @@ var data_service_exports = /* @__PURE__ */ __exportAll({
 	getMessagesByConvoId: () => getMessagesByConvoId,
 	getModels: () => getModels,
 	getParentSubagents: () => getParentSubagents,
+	getPinnedOrder: () => getPinnedOrder,
 	getPresets: () => getPresets,
 	getProjectById: () => getProjectById,
 	getPrompt: () => getPrompt,
@@ -7813,6 +8403,7 @@ var data_service_exports = /* @__PURE__ */ __exportAll({
 	updateMessage: () => updateMessage,
 	updateMessageContent: () => updateMessageContent,
 	updatePeoplePickerPermissions: () => updatePeoplePickerPermissions,
+	updatePinnedOrder: () => updatePinnedOrder,
 	updatePreset: () => updatePreset,
 	updateProject: () => updateProject,
 	updatePromptGroup: () => updatePromptGroup,
@@ -7844,13 +8435,23 @@ var data_service_exports = /* @__PURE__ */ __exportAll({
 });
 function getInsights(params = {}) {
 	const query = new URLSearchParams();
-	for (const [key, value] of Object.entries(params)) if (value !== void 0 && value !== null && value !== "") query.set(key, String(value));
+	for (const [key, value] of Object.entries(params)) if (Array.isArray(value)) value.forEach((item) => query.append(key, String(item)));
+	else if (value !== void 0 && value !== null && value !== "") query.set(key, String(value));
 	const suffix = query.toString() ? `?${query.toString()}` : "";
 	return request_default.get(`${insights()}${suffix}`);
 }
 function getInsightsAccess() {
 	return request_default.get(insightsAccess());
 }
+function getConversationTraceAvailability(conversationId) {
+	return request_default.get(conversationTraceAvailability(conversationId));
+}
+function getConversationTraceRecords({ conversationId, cursor }, signal) {
+	return request_default.get(conversationTraceRecords(conversationId, cursor), signal ? { signal } : void 0);
+}
+function getConversationTraceRecord({ conversationId, recordId, messageId, sourceId }, signal) {
+	return request_default.get(conversationTraceRecord(conversationId, recordId, messageId, sourceId), signal ? { signal } : void 0);
+}
 function getLangfuseConnection() {
 	return request_default.get(adminLangfuseConnection());
 }
@@ -7875,6 +8476,9 @@ function deleteUser(payload) {
 function getCodeEnvironments() {
 	return request_default.get(codeEnvironments());
 }
+function getCodeEnvironmentStatus(id) {
+	return request_default.get(codeEnvironmentStatus(id));
+}
 function pairCodeEnvironment(payload) {
 	return request_default.post(codeEnvironmentPairings(), payload);
 }
@@ -7890,6 +8494,13 @@ function getFavorites() {
 function updateFavorites(favorites) {
 	return request_default.post(`${apiBaseUrl()}/api/user/settings/favorites`, { favorites });
 }
+/** Combined Pinned-section display order: favorite and pinned-chat entry keys interleaved. */
+function getPinnedOrder() {
+	return request_default.get(pinnedOrder());
+}
+function updatePinnedOrder(pinnedOrder$1) {
+	return request_default.post(pinnedOrder(), { pinnedOrder: pinnedOrder$1 });
+}
 /** Tool favorites — starred marketplace items (builtins, tools, MCP servers, skills). */
 function getToolFavorites() {
 	return request_default.get(toolFavorites());
@@ -8738,6 +9349,6 @@ const getActiveJobs = () => {
 	return request_default.get(activeJobs());
 };
 //#endregion
-export { permissionEntrySchema as $, googleSchema as $a, BedrockReasoningConfig as $i, specialVariables as $n, feedbackSchema as $o, defaultTextMimeTypes as $r, normalizeEndpointName as $s, azureGroupConfigsSchema as $t, updateResourcePermissions as A, defaultAgentFormValues as Aa, materializeModelSpecEndpoints as Ai, imageGenTools as An, tQueryParamsSchema as Ao, isProcessMCPServerField as Ar, feedbackFilterFieldSchema as As, SKILL_SYNC_DEFAULT_DISCOVERY_DEPTH as At, MutationKeys as B, eReasoningResponseKeySchema as Ba, getMaxSubagents as Bi, modularEndpoints as Bn, actionDelimiter as Bo, registerPage as Br, hasActivePiiPatterns as Bs, SettingsViews as Bt, resetPassword as C, authTypeSchema as Ca, setFileConfigRegexCompiler as Ci, fileSourceSchema as Cn, tConvoUpdateSchema as Co, MCP_USER_INPUT_FIELDS as Cr, SKILL_FILTER_FIELDS as Cs, MAX_SUBAGENT_DEPTH as Ct, updateFeedback as D, compactAgentsSchema as Da, videoMimeTypes as Di, getDefaultParamsEndpoint as Dn, tPluginAuthConfigSchema as Do, WebSocketOptionsSchema as Dr, agentInstructionFilterFieldSchema as Ds, RateLimitPrefix as Dt, searchPrincipals as E, compactAgentsBaseSchema as Ea, textMimeTypes as Ei, getConfigDefaults as En, tModelSpecPresetSchema as Eo, StreamableHTTPOptionsSchema as Er, actionMetadataFilterFieldSchema as Es, OCRStrategy as Et, request_default as F, eModelEndpointSchema as Fa, MAX_CHAT_PROJECT_DESCRIPTION_LENGTH as Fi, langfuseConfigSchema as Fn, FilePurpose as Fo, FileSources as Fr, filterPiiStarterPatternSchema as Fs, SafeSearchTypes as Ft, PrincipalType as G, endpointSettings as Ga, clampSettingRange as Gi, paramDefinitionSchema as Gn, isActionTool as Go, bedrockDocumentFormats as Gr, skillFilterFieldSchema as Gs, VisionModes as Gt, AccessRoleIds as H, eThinkingDisplaySchema as Ha, ComponentTypes as Hi, normalizeSearxngEngines as Hn, defaultOrderQuery as Ho, applicationMimeTypes as Hr, messageFilterFieldSchema as Hs, TTSProviders as Ht, getTokenHeader as I, eReasoningContextSchema as Ia, MAX_CHAT_PROJECT_NAME_LENGTH as Ii, memorySchema as In, MessageContentTypes as Io, checkOpenAIStorage as Ir, filtersConfigSchema as Is, ScraperProviders as It, accessRoleToPermBits as J, getGoogleThinkingBudgetMax as Ja, generateOpenAISchema as Ji, resolveEndpointType as Jn, resolveStatefulCodeEnvironment as Jo, codeInterpreterMimeTypesList as Jr, userSubmittedMessageFieldPathSchema as Js, alternateName as Jt, ResourceType as K, extendedModelEndpointSchema as Ka, generateDynamicSchema as Ki, providerEndpointMap as Kn, STATEFUL_CODE_ENVIRONMENTS as Ko, bedrockDocumentMimeTypes as Kr, toolArgumentFilterFieldSchema as Ks, agentsEndpointSchema as Kt, setAcceptLanguageHeader as L, eReasoningEffortSchema as La, MAX_GRAPH_SUBAGENT_MEMBERS as Li, messageFilterPiiSchema as Ln, RunStatus as Lo, apiBaseUrl as Lr, getPiiRegexProgramSize as Ls, SearchCategories as Lt, updateUserKey as M, documentSupportedProviders as Ma, resolveModelSpecEndpoint as Mi, interfaceSchema as Mn, AnnotationTypes as Mo, AuthorizationTypeEnum as Mr, filterPiiActionSchema as Ms, SKILL_SYNC_MAX_INTERVAL_MINUTES as Mt, updateUserPlugins as N, eAnthropicEffortSchema as Na, specsConfigSchema as Ni, isRemoteOidcUrlAllowed as Nn, AssistantStreamEvents as No, TokenExchangeMethodEnum as Nr, filterPiiCustomPatternSchema as Ns, SKILL_SYNC_MIN_INTERVAL_MINUTES as Nt, updateMessage as O, compactAssistantSchema as Oa, REFILL_INTERVAL_UNITS as Oi, getEndpointField as On, tPluginSchema as Oo, hasProcessMCPServerConfig as Or, conversationStarterFilterFieldSchema as Os, RerankerTypes as Ot, userKeyQuery as P, eImageDetailSchema as Pa, tModelSpecSchema as Pi, isSecureCodeEnvironmentControlURL as Pn, EToolResources as Po, FileContext as Pr, filterPiiRegexSchema as Ps, STTProviders as Pt, permBitsToAccessLevel as Q, googleGenConfigSchema as Qa, BedrockProviders as Qi, skillSyncGitHubSourceSchema as Qn, feedbackRatingSchema as Qo, defaultSTTMimeTypes as Qr, isSensitiveEnvVar as Qs, azureEndpointSchema as Qt, setTokenHeader as R, eReasoningModeSchema as Ra, MAX_SUBAGENTS as Ri, messageFilterSchema as Rn, StepStatus as Ro, buildLoginRedirectUrl as Rr, hasActiveFiltersConfig as Rs, SearchProviders as Rt, requestPasswordReset as S, assistantSchema as Sa, retrievalMimeTypesList as Si, excludedKeys as Sn, tConversationTagSchema as So, MCP_SERVER_TITLE_PATTERN as Sr, PROMPT_FILTER_FIELDS as Ss, LocalStorageKeys as St, revokeUserKey as T, coerceNumber as Ta, supportsFiles as Ti, fileStrategiesSchema as Tn, tMessageSchema as To, StdioOptionsSchema as Tr, TOOL_ARGUMENT_FILTER_FIELDS as Ts, MAX_SUBAGENT_RUN_CONFIGS as Tt, PermissionBits as U, eThinkingLevelSchema as Ua, OptionTypes as Ui, normalizeServerName as Un, hostImageIdSuffix as Uo, audioMimeTypes as Ur, modelParameterFilterFieldSchema as Us, Time as Ut, QueryKeys as V, eReasoningSummarySchema as Va, setMaxSubagents as Vi, normalizeMCPToolKey as Vn, actionDomainSeparator as Vo, sharedFileDownload as Vr, memoryFilterFieldSchema as Vs, SystemCategories as Vt, PrincipalModel as W, eVerbositySchema as Wa, SettingTypes as Wi, ocrSchema as Wn, hostImageNamePrefix as Wo, bedrockDocumentExtensions as Wr, promptFilterFieldSchema as Ws, ViolationTypes as Wt, getResourcePermissionsResponseSchema as X, getSettingsKeys as Xa, AnthropicEffort as Xi, setMessageFilterRegexValidator as Xn, FEEDBACK_REASON_KEYS as Xo, convertStringsToRegex as Xr, extractEnvVariable as Xs, assistantEndpointSchema as Xt, effectivePermissionsResponseSchema as Y, getModelKey as Ya, validateSettingDefinitions as Yi, retainRecentConfigSchema as Yn, FEEDBACK_RATINGS as Yo, codeTypeMapping as Yr, envVarRegex as Ys, anthropicEndpointSchema as Yt, hasPermissions as Z, googleBaseSchema as Za, AuthType as Zi, skillSyncConfigSchema as Zn, FEEDBACK_TAGS as Zo, defaultOCRMimeTypes as Zr, extractVariableName as Zs, azureBaseSchema as Zt, getResourcePermissions as _, agentsSchema as _a, mbToBytes as _i, defaultEndpoints as _n, removeNullishValues as _o, webSearchSchema as _r, MAX_PII_PATTERN_LABEL_LENGTH as _s, FetchTokenConfig as _t, data_service_exports as a, Providers as aa, fileConfigSchema as ai, bedrockModels as an, isAssistantsEndpoint as ao, summarizationTriggerSchema as ar, AGENT_INSTRUCTION_FILTER_FIELDS as as, AgentCapabilities as at, register as b, anthropicSchema as ba, mimeTypeAliases as bi, defaultSocialLogins as bn, tBannerSchema as bo, MCPServersSchema as br, MESSAGE_FILTER_FIELDS as bs, InfiniteCollections as bt, getAccessRoles as c, ReasoningMode as ca, getEndpointFileConfig as ci, checkpointerTypeSchema as cn, isMythosClassModel as co, toolApprovalModeSchema as cr, FEEDBACK_FILTER_FIELDS as cs, BASE_PRINCIPAL_CONFIG_SECTIONS as ct, getAvailablePlugins as d, ReasoningSummary as da, imageTypeMapping as di, codeEnvironmentUserConfigSchema as dn, isUUID as do, turnstileOptionsSchema as dr, HITL_MESSAGE_FILTER_FIELDS as ds, CohereConstants as dt, EModelEndpoint as ea, documentParserMimeTypes as ei, azureGroupSchema as en, googleSettings as eo, splitMCPToolKey as er, feedbackTagKeySchema as es, principalSchema as et, getConversationById as f, SkillsScope as fa, inferMimeType as fi, codeEnvironmentUserSettingsSchema as fn, openAIBaseSchema as fo, turnstileSchema as fr, MAX_PII_CUSTOM_PATTERNS_TOTAL as fs, Constants as ft, getModels as g, agentsBaseSchema as ga, isPermissiveMimeConfig as gi, defaultAssistantsVersion as gn, paramEndpoints as go, visionModels as gr, MAX_PII_PATTERN_ID_LENGTH as gs, ErrorTypes as gt, getMCPServerConnectionStatus as h, Verbosity as ha, isBedrockDocumentType as hi, defaultAgentCapabilities as hn, openRouterSchema as ho, vertexModelConfigSchema as hr, MAX_PII_PATTERNS_PER_SOURCE as hs, EndpointURLs as ht, createPreset as i, MemoryScope as ia, fileConfig as ii, bedrockGuardrailConfigSchema as in, isAgentsEndpoint as io, summarizationConfigSchema as ir, ACTION_METADATA_FILTER_FIELDS as is, AUTH_USER_DOC_BY_ID_PREFIX as it, updateTokenCount as j, defaultAssistantFormValues as ja, modelSpecSubagentsSchema as ji, initialModelsConfig as jn, tSharedLinkSchema as jo, AuthTypeEnum as jr, fileFilterFieldSchema as js, SKILL_SYNC_MAX_DISCOVERY_DEPTH as jt, updateMessageContent as k, compactGoogleSchema as ka, getRefillEligibilityDate as ki, getSchemaDefaults as kn, tPresetSchema as ko, isProcessMCPServerConfig as kr, conversationTitleFilterFieldSchema as ks, RetentionMode as kt, getAgentApiKeys as l, ReasoningParameterFormat as la, imageExtRegex as li, cloudfrontConfigSchema as ln, isOpenAILikeProvider as lo, toolApprovalPolicySchema as lr, FILE_FILTER_FIELDS as ls, CacheKeys as lt, getEffectivePermissions as m, ThinkingLevel as ma, isAnthropicTextDocumentType as mi, contextPruningSchema as mn, openAISettings as mo, vertexAISchema as mr, MAX_PII_CUSTOM_REGEX_INSTRUCTIONS as ms, EImageOutputType as mt, clearAllConversations as n, ImageVisionTool as na, excelFileTypes as ni, baseEndpointSchema as nn, imageDetailValue as no, stripServerNamePrefix as nr, getTagsForRating as ns, updateResourcePermissionsRequestSchema as nt, deleteAgentApiKey as o, ReasoningContext as oa, fullMimeTypesList as oi, buildServerNameAliases as on, isDocumentSupportedProvider as oo, supportsBalanceCheck as or, CONVERSATION_STARTER_FILTER_FIELDS as os, AuthKeys as ot, getCustomConfigSpeech as p, ThinkingDisplay as pa, isAnthropicDocumentType as pi, configSchema as pn, openAISchema as po, validateVisionModel as pr, MAX_PII_CUSTOM_REGEX_CHARACTERS as ps, DEFAULT_MEMORY_MAX_INPUT_TOKENS as pt, accessRoleSchema as q, getGoogleThinkingBudgetBounds as qa, generateGoogleSchema as qi, rateLimitSchema as qn, resolveAllowedStatefulCodeEnvironments as qo, codeInterpreterMimeTypes as qr, unattributedAssistantContentSchema as qs, allowedAddressesSchema as qt, createAgentApiKey as r, MYTHOS_CLASS_FAMILIES as ra, excelMimeTypes as ri, bedrockEndpointSchema as rn, inputTokensIncludesCache as ro, stripServerNamePrefixes as rr, toMinimalFeedback as rs, updateResourcePermissionsResponseSchema as rt, deletePreset as s, ReasoningEffort as sa, getConfiguredMimeAccept as si, checkpointerSchema as sn, isImageVisionTool as so, toolApprovalHookConfigSchema as sr, CONVERSATION_TITLE_FILTER_FIELDS as ss, BASE_ONLY_CONFIG_SECTIONS as st, cancelMCPOAuth as t, ImageDetail as ta, endpointFileConfigSchema as ti, balanceSchema as tn, imageDetailNumeric as to, splitToolCallName as tr, getTagByKey as ts, resourcePermissionsResponseSchema as tt, getAllEffectivePermissions as u, ReasoningResponseKey as ua, imageMimeTypes as ui, codeEnvironmentPermissionDecisionSchema as un, isParamEndpoint as uo, transactionsSchema as ur, FILTER_PII_STARTER_PATTERNS as us, Capabilities as ut, getSharedLink as v, agentsSettings as va, megabyte as vi, defaultModels as vn, resolveAgentSkillsScope as vo, MCPOptionsSchema as vr, MAX_PII_PATTERN_LENGTH as vs, ForkOptions as vt, revokeAllUserKeys as w, cacheSubsetProviders as wa, supportedMimeTypes as wi, fileStorageSchema as wn, tExampleSchema as wo, SSEOptionsSchema as wr, STORED_MESSAGE_FILTER_FIELDS as ws, MAX_SUBAGENT_GRAPH_NODES as wt, reinitializeMCPServer as x, anthropicSettings as xa, retrievalMimeTypes as xi, endpointSchema as xn, tConversationSchema as xo, MCP_SERVER_TITLE_ERROR as xr, MODEL_PARAMETER_FILTER_FIELDS as xs, KnownEndpoints as xt, getSharedMessages as y, anthropicBaseSchema as ya, mergeFileConfig as yi, defaultRetrievalModels as yn, subagentThreadLineageSchema as yo, MCPServerUserInputSchema as yr, MEMORY_FILTER_FIELDS as ys, ImageDetailCost as yt, DynamicQueryKeys as z, eReasoningParameterFormatSchema as za, MAX_SUBAGENTS_CEILING as zi, modelConfigSchema as zn, Tools as zo, loginPage as zr, hasActivePiiFields as zs, SettingsTabValues as zt };
+export { permissionEntrySchema as $, eAnthropicEffortSchema as $a, specsConfigSchema as $i, ocrSchema as $n, tQueryParamsSchema as $o, registerPage as $r, MAX_PII_CUSTOM_REGEX_INSTRUCTIONS as $s, alternateName as $t, updateResourcePermissions as A, ReasoningResponseKey as Aa, skillFilterFieldSchema as Ac, isAnthropicTextDocumentType as Ai, fileStrategiesSchema as An, isMythosClassModel as Ao, MAX_MCP_ICON_PATH_LENGTH as Ar, getTagByKey as As, MAX_SUBAGENT_RUN_CONFIGS as At, MutationKeys as B, anthropicSchema as Ba, resolveUseResponsesApi as Bi, isSpeechProviderConfigured as Bn, removeNullishValues as Bo, WebSocketOptionsSchema as Br, isCodeWorkspaceSelection as Bs, SafeSearchTypes as Bt, resetPassword as C, MYTHOS_CLASS_FAMILIES as Ca, hasActiveFiltersConfig as Cc, getDocumentFileExtension as Ci, defaultModels as Cn, inputTokensIncludesCache as Co, turnstileOptionsSchema as Cr, resolveCodePermissionDecision as Cs, KnownEndpoints as Ct, updateFeedback as D, ReasoningEffort as Da, messageFilterFieldSchema as Dc, imageTypeMapping as Di, excludedKeys as Dn, isImageVisionTool as Do, vertexModelConfigSchema as Dr, feedbackRatingSchema as Ds, LocalStorageKeys as Dt, searchPrincipals as E, ReasoningContext as Ea, memoryFilterFieldSchema as Ec, imageMimeTypes as Ei, endpointSchema as En, isDocumentSupportedProvider as Eo, vertexAISchema as Er, FEEDBACK_TAGS as Es, LANGFUSE_TRACE_USER_METADATA_FIELDS as Et, request_default as F, Verbosity as Fa, extractEnvVariable as Fc, mbToBytes as Fi, imageGenTools as Fn, openAIBaseSchema as Fo, MCP_SERVER_TITLE_PATTERN as Fr, CODE_WORKSPACE_ID_PATTERN as Fs, SKILL_SYNC_DEFAULT_DISCOVERY_DEPTH as Ft, PrincipalType as G, coerceNumber as Ga, supportsFiles as Gi, memorySchema as Gn, tConversationTagSchema as Go, AuthorizationTypeEnum as Gr, CONVERSATION_STARTER_FILTER_FIELDS as Gs, SettingsViews as Gt, AccessRoleIds as H, assistantSchema as Ha, retrievalMimeTypesList as Hi, langfuseTraceConfigSchema as Hn, subagentThreadLineageSchema as Ho, isProcessMCPServerConfig as Hr, isCodeWorkspaceSelections as Hs, SearchCategories as Ht, getTokenHeader as I, agentsBaseSchema as Ia, extractVariableName as Ic, megabyte as Ii, initialModelsConfig as In, openAISchema as Io, MCP_USER_INPUT_FIELDS as Ir, CODE_WORKSPACE_MAX_COUNT as Is, SKILL_SYNC_MAX_DISCOVERY_DEPTH as It, accessRoleToPermBits as J, compactAssistantSchema as Ja, REFILL_INTERVAL_UNITS as Ji, modelConfigSchema as Jn, tMessageSchema as Jo, FileSources as Jr, FILE_FILTER_FIELDS as Js, Time as Jt, ResourceType as K, compactAgentsBaseSchema as Ka, textMimeTypes as Ki, messageFilterPiiSchema as Kn, tConvoUpdateSchema as Ko, TokenExchangeMethodEnum as Kr, CONVERSATION_TITLE_FILTER_FIELDS as Ks, SystemCategories as Kt, setAcceptLanguageHeader as L, agentsSchema as La, isSensitiveEnvVar as Lc, mergeFileConfig as Li, interfaceSchema as Ln, openAISettings as Lo, SSEOptionsSchema as Lr, CODE_WORKSPACE_OPERATIONS as Ls, SKILL_SYNC_MAX_INTERVAL_MINUTES as Lt, updateUserKey as M, SkillsScope as Ma, unattributedAssistantContentSchema as Mc, isMessageFileUpload as Mi, getDefaultParamsEndpoint as Mn, isParamEndpoint as Mo, MCPServerUserInputSchema as Mr, toMinimalFeedback as Ms, RateLimitPrefix as Mt, updateUserPlugins as N, ThinkingDisplay as Na, userSubmittedMessageFieldPathSchema as Nc, isPermissiveMimeConfig as Ni, getEndpointField as Nn, isUUID as No, MCPServersSchema as Nr, CODE_ENVIRONMENT_DECISION_VERSION as Ns, RerankerTypes as Nt, updateMessage as O, ReasoningMode as Oa, modelParameterFilterFieldSchema as Oc, inferMimeType as Oi, fileSourceSchema as On, isKnownProviderIdentifier as Oo, visionModels as Or, feedbackSchema as Os, MAX_SUBAGENT_DEPTH as Ot, userKeyQuery as P, ThinkingLevel as Pa, envVarRegex as Pc, isResponsesApiUpload as Pi, getSchemaDefaults as Pn, mediaSupportedProviders as Po, MCP_SERVER_TITLE_ERROR as Pr, CODE_ENVIRONMENT_MODES as Ps, RetentionMode as Pt, permBitsToAccessLevel as Q, documentSupportedProviders as Qa, resolveModelSpecEndpoint as Qi, normalizeServerName as Qn, tPresetSchema as Qo, loginPage as Qr, MAX_PII_CUSTOM_REGEX_CHARACTERS as Qs, allowedAddressesSchema as Qt, setTokenHeader as R, agentsSettings as Ra, normalizeEndpointName as Rc, mimeTypeAliases as Ri, isRemoteOidcUrlAllowed as Rn, openRouterSchema as Ro, StdioOptionsSchema as Rr, CODE_WORKSPACE_SELECTION_ERROR_REASONS as Rs, SKILL_SYNC_MIN_INTERVAL_MINUTES as Rt, requestPasswordReset as S, ImageVisionTool as Sa, getPiiRegexProgramSize as Sc, getConfiguredMimeAccept as Si, defaultEndpoints as Sn, imageDetailValue as So, transactionsSchema as Sr, resolveCodeApprovalMode as Ss, InfiniteCollections as St, revokeUserKey as T, Providers as Ta, hasActivePiiPatterns as Tc, imageExtRegex as Ti, defaultSocialLogins as Tn, isAssistantsEndpoint as To, validateVisionModel as Tr, FEEDBACK_REASON_KEYS as Ts, LANGFUSE_TRACE_USER_ID_FIELDS as Tt, PermissionBits as U, authTypeSchema as Ua, setFileConfigRegexCompiler as Ui, listConfiguredSpeechProviders as Un, tBannerSchema as Uo, isProcessMCPServerField as Ur, ACTION_METADATA_FILTER_FIELDS as Us, SearchProviders as Ut, QueryKeys as V, anthropicSettings as Va, retrievalMimeTypes as Vi, langfuseConfigSchema as Vn, resolveAgentSkillsScope as Vo, hasProcessMCPServerConfig as Vr, isCodeWorkspaceSelectionErrorReason as Vs, ScraperProviders as Vt, PrincipalModel as W, cacheSubsetProviders as Wa, supportedMimeTypes as Wi, mcpRefreshDefaults as Wn, tConversationSchema as Wo, AuthTypeEnum as Wr, AGENT_INSTRUCTION_FILTER_FIELDS as Ws, SettingsTabValues as Wt, getResourcePermissionsResponseSchema as X, defaultAgentFormValues as Xa, materializeModelSpecEndpoints as Xi, normalizeMCPToolKey as Xn, tPluginAuthConfigSchema as Xo, apiBaseUrl as Xr, HITL_MESSAGE_FILTER_FIELDS as Xs, VisionModes as Xt, effectivePermissionsResponseSchema as Y, compactGoogleSchema as Ya, getRefillEligibilityDate as Yi, modularEndpoints as Yn, tModelSpecPresetSchema as Yo, checkOpenAIStorage as Yr, FILTER_PII_STARTER_PATTERNS as Ys, ViolationTypes as Yt, hasPermissions as Z, defaultAssistantFormValues as Za, modelSpecSubagentsSchema as Zi, normalizeSearxngEngines as Zn, tPluginSchema as Zo, buildLoginRedirectUrl as Zr, MAX_PII_CUSTOM_PATTERNS_TOTAL as Zs, agentsEndpointSchema as Zt, getResourcePermissions as _, AuthType as _a, filterPiiActionSchema as _c, excelFileTypes as _i, codeEnvironmentUserSettingsSchema as _n, googleBaseSchema as _o, toolApprovalHookConfigSchema as _r, resolveAllowedStatefulCodeEnvironments as _s, EndpointURLs as _t, data_service_exports as a, MAX_SUBAGENTS_CEILING as aa, MESSAGE_FILTER_FIELDS as ac, bedrockDocumentFormats as ai, azureGroupSchema as an, eReasoningParameterFormatSchema as ao, retainRecentConfigSchema as ar, MessageContentTypes as as, AgentCapabilities as at, register as b, EModelEndpoint as ba, filterPiiStarterPatternSchema as bc, fileConfigSchema as bi, defaultAgentCapabilities as bn, googleSettings as bo, traceViewerDefaults as br, CodeApprovalModeError as bs, ForkOptions as bt, getAccessRoles as c, ComponentTypes as ca, SKILL_FILTER_FIELDS as cc, codeInterpreterMimeTypesList as ci, bedrockEndpointSchema as cn, eThinkingDisplaySchema as co, skillSyncGitHubSourceSchema as cr, Tools as cs, BASE_PRINCIPAL_CONFIG_SECTIONS as ct, getAvailablePlugins as d, clampSettingRange as da, actionMetadataFilterFieldSchema as dc, defaultLLMDeliveryPathSchema as di, buildServerNameAliases as dn, endpointSettings as do, splitToolCallName as dr, agentGitIdentitySchema as ds, CacheKeys as dt, tModelSpecSchema as ea, MAX_PII_PATTERNS_PER_SOURCE as ec, sharedFileDownload as ei, anthropicEndpointSchema as en, eImageDetailSchema as eo, paramDefinitionSchema as er, tSharedLinkSchema as es, principalSchema as et, getConversationById as f, generateDynamicSchema as fa, agentInstructionFilterFieldSchema as fc, defaultOCRMimeTypes as fi, checkpointerSchema as fn, extendedModelEndpointSchema as fo, stripServerNamePrefix as fr, defaultOrderQuery as fs, Capabilities as ft, getModels as g, AnthropicEffort as ga, fileFilterFieldSchema as gc, endpointFileConfigSchema as gi, codeEnvironmentUserConfigSchema as gn, getSettingsKeys as go, supportsBalanceCheck as gr, STATEFUL_CODE_ENVIRONMENTS as gs, EImageOutputType as gt, getMCPServerConnectionStatus as h, validateSettingDefinitions as ha, feedbackFilterFieldSchema as hc, documentParserMimeTypes as hi, codeEnvironmentPermissionDecisionSchema as hn, getModelKey as ho, summarizationTriggerSchema as hr, isActionTool as hs, DEFAULT_MEMORY_MAX_INPUT_TOKENS as ht, createPreset as i, MAX_SUBAGENTS as ia, MEMORY_FILTER_FIELDS as ic, bedrockDocumentExtensions as ii, azureGroupConfigsSchema as in, eReasoningModeSchema as io, resolveTraceViewerConfig as ir, FilePurpose as is, AUTH_USER_DOC_BY_ID_PREFIX as it, updateTokenCount as j, ReasoningSummary as ja, toolArgumentFilterFieldSchema as jc, isBedrockDocumentType as ji, getConfigDefaults as jn, isOpenAILikeProvider as jo, MCPOptionsSchema as jr, getTagsForRating as js, OCRStrategy as jt, updateMessageContent as k, ReasoningParameterFormat as ka, promptFilterFieldSchema as kc, isAnthropicDocumentType as ki, fileStorageSchema as kn, isMediaSupportedProvider as ko, webSearchSchema as kr, feedbackTagKeySchema as ks, MAX_SUBAGENT_GRAPH_NODES as kt, getAgentApiKeys as l, OptionTypes as la, STORED_MESSAGE_FILTER_FIELDS as lc, codeTypeMapping as li, bedrockGuardrailConfigSchema as ln, eThinkingLevelSchema as lo, specialVariables as lr, actionDelimiter as ls, CODE_ENVIRONMENT_COMMAND_TIMEOUT_DEFAULT_MS as lt, getEffectivePermissions as m, generateOpenAISchema as ma, conversationTitleFilterFieldSchema as mc, defaultTextMimeTypes as mi, cloudfrontConfigSchema as mn, getGoogleThinkingBudgetMax as mo, summarizationConfigSchema as mr, hostImageNamePrefix as ms, Constants as mt, clearAllConversations as n, MAX_CHAT_PROJECT_NAME_LENGTH as na, MAX_PII_PATTERN_LABEL_LENGTH as nc, applicationMimeTypes as ni, azureBaseSchema as nn, eReasoningContextSchema as no, rateLimitSchema as nr, AssistantStreamEvents as ns, updateResourcePermissionsRequestSchema as nt, deleteAgentApiKey as o, getMaxSubagents as oa, MODEL_PARAMETER_FILTER_FIELDS as oc, bedrockDocumentMimeTypes as oi, balanceSchema as on, eReasoningResponseKeySchema as oo, setMessageFilterRegexValidator as or, RunStatus as os, AuthKeys as ot, getCustomConfigSpeech as p, generateGoogleSchema as pa, conversationStarterFilterFieldSchema as pc, defaultSTTMimeTypes as pi, checkpointerTypeSchema as pn, getGoogleThinkingBudgetBounds as po, stripServerNamePrefixes as pr, hostImageIdSuffix as ps, CohereConstants as pt, accessRoleSchema as q, compactAgentsSchema as qa, videoMimeTypes as qi, messageFilterSchema as qn, tExampleSchema as qo, FileContext as qr, FEEDBACK_FILTER_FIELDS as qs, TTSProviders as qt, createAgentApiKey as r, MAX_GRAPH_SUBAGENT_MEMBERS as ra, MAX_PII_PATTERN_LENGTH as rc, audioMimeTypes as ri, azureEndpointSchema as rn, eReasoningEffortSchema as ro, resolveEndpointType as rr, EToolResources as rs, updateResourcePermissionsResponseSchema as rt, deletePreset as s, setMaxSubagents as sa, PROMPT_FILTER_FIELDS as sc, codeInterpreterMimeTypes as si, baseEndpointSchema as sn, eReasoningSummarySchema as so, skillSyncConfigSchema as sr, StepStatus as ss, BASE_ONLY_CONFIG_SECTIONS as st, cancelMCPOAuth as t, MAX_CHAT_PROJECT_DESCRIPTION_LENGTH as ta, MAX_PII_PATTERN_ID_LENGTH as tc, DefaultLLMDeliveryPath as ti, assistantEndpointSchema as tn, eModelEndpointSchema as to, providerEndpointMap as tr, AnnotationTypes as ts, resourcePermissionsResponseSchema as tt, getAllEffectivePermissions as u, SettingTypes as ua, TOOL_ARGUMENT_FILTER_FIELDS as uc, convertStringsToRegex as ui, bedrockModels as un, eVerbositySchema as uo, splitMCPToolKey as ur, actionDomainSeparator as us, CODE_ENVIRONMENT_COMMAND_TIMEOUT_HARD_MAX_MS as ut, getSharedLink as v, BedrockProviders as va, filterPiiCustomPatternSchema as vc, excelMimeTypes as vi, configSchema as vn, googleGenConfigSchema as vo, toolApprovalModeSchema as vr, resolveStatefulCodeEnvironment as vs, ErrorTypes as vt, revokeAllUserKeys as w, MemoryScope as wa, hasActivePiiFields as wc, getEndpointFileConfig as wi, defaultRetrievalModels as wn, isAgentsEndpoint as wo, turnstileSchema as wr, FEEDBACK_RATINGS as ws, LANGFUSE_TRACE_CONVERSATION_METADATA_FIELDS as wt, reinitializeMCPServer as x, ImageDetail as xa, filtersConfigSchema as xc, fullMimeTypesList as xi, defaultAssistantsVersion as xn, imageDetailNumeric as xo, traceViewerLimits as xr, getAllowedCodeApprovalModes as xs, ImageDetailCost as xt, getSharedMessages as y, BedrockReasoningConfig as ya, filterPiiRegexSchema as yc, fileConfig as yi, contextPruningSchema as yn, googleSchema as yo, toolApprovalPolicySchema as yr, CODE_APPROVAL_MODES as ys, FetchTokenConfig as yt, DynamicQueryKeys as z, anthropicBaseSchema as za, resolveSandboxFilename as zi, isSecureCodeEnvironmentControlURL as zn, paramEndpoints as zo, StreamableHTTPOptionsSchema as zr, isCodeEnvironmentMode as zs, STTProviders as zt };
 
-//# sourceMappingURL=data-service-CaB7saTP.mjs.map
+//# sourceMappingURL=data-service-Bx6IFaSa.mjs.map