librechat-data-provider 0.8.523 → 0.8.524

package/dist/{data-service-Bx6IFaSa.mjs → data-service-B-WUVvTH.mjs}

@@ -336,6 +336,8 @@ const CODE_WORKSPACE_ID_PATTERN = /^[A-Za-z0-9][A-Za-z0-9._:-]{0,127}$/;
 const CODE_WORKSPACE_MAX_COUNT = 32;
 /** API/client protocol for immutable conversation-owned environment decisions. */
 const CODE_ENVIRONMENT_DECISION_VERSION = 1;
+/** API/client protocol for an owner's explicit move of a sealed environment decision. */
+const CODE_ENVIRONMENT_MOVE_VERSION = 1;
 const CODE_WORKSPACE_OPERATIONS = [
 	"read_file",
 	"search_text",
@@ -345,6 +347,7 @@ const CODE_WORKSPACE_OPERATIONS = [
 	"edit_file",
 	"execute_command"
 ];
+const CODE_WORKSPACE_INSTANCE_TYPES = ["git_worktree"];
 const CODE_WORKSPACE_SELECTION_ERROR_REASONS = [
 	"required",
 	"invalid",
@@ -354,6 +357,26 @@ const CODE_WORKSPACE_SELECTION_ERROR_REASONS = [
 	"locked"
 ];
 const CODE_ENVIRONMENT_MODES = ["attached", "without_attached"];
+function isRepositoryInstructionDescriptor(value) {
+	if (value == null || typeof value !== "object") return false;
+	const descriptor = value;
+	return Object.keys(descriptor).every((key) => [
+		"path",
+		"bytes",
+		"sha256",
+		"truncated"
+	].includes(key)) && (descriptor.path === "AGENTS.md" || descriptor.path === "CLAUDE.md") && Number.isSafeInteger(descriptor.bytes) && Number(descriptor.bytes) >= 0 && Number(descriptor.bytes) <= 32768 && typeof descriptor.sha256 === "string" && /^[a-f0-9]{64}$/.test(descriptor.sha256) && typeof descriptor.truncated === "boolean";
+}
+function isCodeWorkspaceEnvironment(value) {
+	if (value == null || typeof value !== "object" || Array.isArray(value)) return false;
+	const environment = value;
+	return Object.keys(environment).every((key) => [
+		"fingerprint",
+		"repo",
+		"ref",
+		"actions"
+	].includes(key)) && typeof environment.fingerprint === "string" && /^[a-f0-9]{64}$/.test(environment.fingerprint) && (environment.repo === void 0 || typeof environment.repo === "string" && environment.repo.length <= 256 && /^[A-Za-z0-9_.-]+\/[A-Za-z0-9_.-]+$/.test(environment.repo)) && (environment.ref === void 0 || typeof environment.ref === "string" && environment.ref.trim().length > 0 && environment.ref.length <= 256 && !/[\0\r\n]/.test(environment.ref)) && Array.isArray(environment.actions) && environment.actions.length <= 32 && environment.actions.every((name) => typeof name === "string" && /^[A-Za-z0-9][A-Za-z0-9_-]{0,63}$/.test(name)) && new Set(environment.actions).size === environment.actions.length;
+}
 function isCodeEnvironmentMode(value) {
 	return CODE_ENVIRONMENT_MODES.some((mode) => mode === value);
 }
@@ -542,26 +565,7 @@ function resolveCodePermissionDecision({ mode, category, decision }) {
 	return MODE_PERMISSIONS[mode][category];
 }
 //#endregion
-//#region src/stateful-code.ts
-const STATEFUL_CODE_ENVIRONMENTS = [
-	"user",
-	"agent-user",
-	"conversation"
-];
-/** Resolve a deployment allowlist in stable UI order. An omitted value preserves
-* the backward-compatible behavior where every environment is available. */
-function resolveAllowedStatefulCodeEnvironments(configured) {
-	if (configured == null) return [...STATEFUL_CODE_ENVIRONMENTS];
-	const configuredSet = new Set(configured);
-	return STATEFUL_CODE_ENVIRONMENTS.filter((environment) => configuredSet.has(environment));
-}
-/** Keep an allowed preference, otherwise select the first deployment-allowed scope. */
-function resolveStatefulCodeEnvironment(preferred, configured) {
-	const allowed = resolveAllowedStatefulCodeEnvironments(configured);
-	return preferred != null && allowed.includes(preferred) ? preferred : allowed[0];
-}
-//#endregion
-//#region src/types/assistants.ts
+//#region src/types/tools.ts
 let Tools = /* @__PURE__ */ function(Tools) {
 	Tools["execute_code"] = "execute_code";
 	Tools["code_interpreter"] = "code_interpreter";
@@ -585,39 +589,6 @@ let EToolResources = /* @__PURE__ */ function(EToolResources) {
 	EToolResources["ocr"] = "ocr";
 	return EToolResources;
 }({});
-const agentGitIdentitySchema = z.object({
-	name: z.string().trim().min(1).max(128).refine((value) => !/[\0\r\n]/.test(value)),
-	email: z.string().trim().email().max(254).refine((value) => !/[\0\r\n]/.test(value))
-}).optional();
-let AnnotationTypes = /* @__PURE__ */ function(AnnotationTypes) {
-	AnnotationTypes["FILE_CITATION"] = "file_citation";
-	AnnotationTypes["FILE_PATH"] = "file_path";
-	return AnnotationTypes;
-}({});
-let StepStatus = /* @__PURE__ */ function(StepStatus) {
-	StepStatus["IN_PROGRESS"] = "in_progress";
-	StepStatus["CANCELLED"] = "cancelled";
-	StepStatus["FAILED"] = "failed";
-	StepStatus["COMPLETED"] = "completed";
-	StepStatus["EXPIRED"] = "expired";
-	return StepStatus;
-}({});
-let MessageContentTypes = /* @__PURE__ */ function(MessageContentTypes) {
-	MessageContentTypes["TEXT"] = "text";
-	MessageContentTypes["IMAGE_FILE"] = "image_file";
-	return MessageContentTypes;
-}({});
-let RunStatus = /* @__PURE__ */ function(RunStatus) {
-	RunStatus["QUEUED"] = "queued";
-	RunStatus["IN_PROGRESS"] = "in_progress";
-	RunStatus["REQUIRES_ACTION"] = "requires_action";
-	RunStatus["CANCELLING"] = "cancelling";
-	RunStatus["CANCELLED"] = "cancelled";
-	RunStatus["FAILED"] = "failed";
-	RunStatus["COMPLETED"] = "completed";
-	RunStatus["EXPIRED"] = "expired";
-	return RunStatus;
-}({});
 const actionDelimiter = "_action_";
 const actionDomainSeparator = "---";
 /** Mirrors `Constants.mcp_delimiter`; duplicated here to avoid a circular import from `config.ts`. */
@@ -645,46 +616,6 @@ function isActionTool(toolName) {
 	const mcpIdx = toolName.indexOf(mcpDelimiter);
 	return mcpIdx < 0 || mcpIdx < actionIdx;
 }
-const hostImageIdSuffix = "_host_copy";
-const hostImageNamePrefix = "host_copy_";
-let FilePurpose = /* @__PURE__ */ function(FilePurpose) {
-	FilePurpose["Vision"] = "vision";
-	FilePurpose["FineTune"] = "fine-tune";
-	FilePurpose["FineTuneResults"] = "fine-tune-results";
-	FilePurpose["Assistants"] = "assistants";
-	FilePurpose["AssistantsOutput"] = "assistants_output";
-	return FilePurpose;
-}({});
-const defaultOrderQuery = {
-	order: "desc",
-	limit: 100
-};
-let AssistantStreamEvents = /* @__PURE__ */ function(AssistantStreamEvents) {
-	AssistantStreamEvents["ThreadCreated"] = "thread.created";
-	AssistantStreamEvents["ThreadRunCreated"] = "thread.run.created";
-	AssistantStreamEvents["ThreadRunQueued"] = "thread.run.queued";
-	AssistantStreamEvents["ThreadRunInProgress"] = "thread.run.in_progress";
-	AssistantStreamEvents["ThreadRunRequiresAction"] = "thread.run.requires_action";
-	AssistantStreamEvents["ThreadRunCompleted"] = "thread.run.completed";
-	AssistantStreamEvents["ThreadRunFailed"] = "thread.run.failed";
-	AssistantStreamEvents["ThreadRunCancelling"] = "thread.run.cancelling";
-	AssistantStreamEvents["ThreadRunCancelled"] = "thread.run.cancelled";
-	AssistantStreamEvents["ThreadRunExpired"] = "thread.run.expired";
-	AssistantStreamEvents["ThreadRunStepCreated"] = "thread.run.step.created";
-	AssistantStreamEvents["ThreadRunStepInProgress"] = "thread.run.step.in_progress";
-	AssistantStreamEvents["ThreadRunStepCompleted"] = "thread.run.step.completed";
-	AssistantStreamEvents["ThreadRunStepFailed"] = "thread.run.step.failed";
-	AssistantStreamEvents["ThreadRunStepCancelled"] = "thread.run.step.cancelled";
-	AssistantStreamEvents["ThreadRunStepExpired"] = "thread.run.step.expired";
-	AssistantStreamEvents["ThreadRunStepDelta"] = "thread.run.step.delta";
-	AssistantStreamEvents["ThreadMessageCreated"] = "thread.message.created";
-	AssistantStreamEvents["ThreadMessageInProgress"] = "thread.message.in_progress";
-	AssistantStreamEvents["ThreadMessageCompleted"] = "thread.message.completed";
-	AssistantStreamEvents["ThreadMessageIncomplete"] = "thread.message.incomplete";
-	AssistantStreamEvents["ThreadMessageDelta"] = "thread.message.delta";
-	AssistantStreamEvents["ErrorEvent"] = "error";
-	return AssistantStreamEvents;
-}({});
 //#endregion
 //#region src/schemas.ts
 const isUUID = z.string().uuid();
@@ -1012,6 +943,7 @@ const defaultAgentFormValues = {
 	stateful_code_environment: "user",
 	code_environment_id: void 0,
 	code_workspace_id: void 0,
+	repositoryInstructions: void 0,
 	category: "general",
 	support_contact: {
 		name: "",
@@ -1989,6 +1921,72 @@ const compactAgentsBaseSchema = tConversationSchema.pick({
 });
 const compactAgentsSchema = compactAgentsBaseSchema.transform((obj) => removeNullishValues(obj)).catch(() => ({}));
 //#endregion
+//#region src/balance.ts
+const REFILL_INTERVAL_UNITS = [
+	"seconds",
+	"minutes",
+	"hours",
+	"days",
+	"weeks",
+	"months"
+];
+/** How long an unreleased in-flight balance reservation keeps counting against the balance. */
+const DEFAULT_BALANCE_RESERVATION_TTL_MS = 1800 * 1e3;
+/** Shortest reservation TTL; a live reservation is renewed every half TTL. */
+const MIN_BALANCE_RESERVATION_TTL_MS = 10 * 1e3;
+function getRefillEligibilityDate(lastRefill, value, unit) {
+	const result = new Date(lastRefill);
+	switch (unit) {
+		case "seconds":
+			result.setSeconds(result.getSeconds() + value);
+			return result;
+		case "minutes":
+			result.setMinutes(result.getMinutes() + value);
+			return result;
+		case "hours":
+			result.setHours(result.getHours() + value);
+			return result;
+		case "days":
+			result.setDate(result.getDate() + value);
+			return result;
+		case "weeks":
+			result.setDate(result.getDate() + value * 7);
+			return result;
+		case "months":
+			result.setMonth(result.getMonth() + value);
+			return result;
+		default: return result;
+	}
+}
+//#endregion
+//#region src/limits.ts
+/** Maximum number of explicit subagents per parent agent. UI + Zod schema share this. */
+const MAX_SUBAGENTS = 10;
+/** Hard upper bound for `endpoints.agents.maxSubagents`, keeping the request-validation
+*  cap bounded no matter what the config file says. */
+const MAX_SUBAGENTS_CEILING = 50;
+let maxSubagents = 10;
+/** Effective subagents-per-agent cap; initialized from `endpoints.agents.maxSubagents` at startup. */
+const getMaxSubagents = () => maxSubagents;
+/** Applies a configured cap; any missing or out-of-range value resets to the default. */
+const setMaxSubagents = (value) => {
+	maxSubagents = typeof value === "number" && Number.isInteger(value) && value >= 1 && value <= 50 ? value : 10;
+};
+/** Chat project field limits. The dialogs and the persistence layer share these,
+*  so the inputs stop at the same point the server would otherwise truncate. */
+const MAX_CHAT_PROJECT_NAME_LENGTH = 100;
+const MAX_CHAT_PROJECT_DESCRIPTION_LENGTH = 1e3;
+/** Mirrors the bounded graph-child member limit in `@librechat/agents`. */
+const MAX_GRAPH_SUBAGENT_MEMBERS = 32;
+/** Characters of retained tool output one stopped turn may be tokenized for, so the
+*  context gauge can add an exact figure instead of an estimate. The schema default
+*  and the save path share it; tokenizing runs ~60 ms/MB, once per stopped turn. */
+const DEFAULT_MAX_RETAINED_TOOL_COUNT_CHARS = 8 * 1024 * 1024;
+/** Token ceiling for the block of Ask User answers carried verbatim in an agent's
+*  user context (`endpoints.agents.askUserQuestion.retainedAnswers.maxTokens`).
+*  Older answers drop first once the block exceeds it; the newest set is always kept. */
+const DEFAULT_RETAINED_ANSWER_TOKENS = 4096;
+//#endregion
 //#region src/generate.ts
 let ComponentTypes = /* @__PURE__ */ function(ComponentTypes) {
 	ComponentTypes["Input"] = "input";
@@ -2387,25 +2385,24 @@ const generateGoogleSchema = (customGoogle) => {
 	}));
 };
 //#endregion
-//#region src/limits.ts
-/** Maximum number of explicit subagents per parent agent. UI + Zod schema share this. */
-const MAX_SUBAGENTS = 10;
-/** Hard upper bound for `endpoints.agents.maxSubagents`, keeping the request-validation
-*  cap bounded no matter what the config file says. */
-const MAX_SUBAGENTS_CEILING = 50;
-let maxSubagents = 10;
-/** Effective subagents-per-agent cap; initialized from `endpoints.agents.maxSubagents` at startup. */
-const getMaxSubagents = () => maxSubagents;
-/** Applies a configured cap; any missing or out-of-range value resets to the default. */
-const setMaxSubagents = (value) => {
-	maxSubagents = typeof value === "number" && Number.isInteger(value) && value >= 1 && value <= 50 ? value : 10;
-};
-/** Chat project field limits. The dialogs and the persistence layer share these,
-*  so the inputs stop at the same point the server would otherwise truncate. */
-const MAX_CHAT_PROJECT_NAME_LENGTH = 100;
-const MAX_CHAT_PROJECT_DESCRIPTION_LENGTH = 1e3;
-/** Mirrors the bounded graph-child member limit in `@librechat/agents`. */
-const MAX_GRAPH_SUBAGENT_MEMBERS = 32;
+//#region src/stateful-code.ts
+const STATEFUL_CODE_ENVIRONMENTS = [
+	"user",
+	"agent-user",
+	"conversation"
+];
+/** Resolve a deployment allowlist in stable UI order. An omitted value preserves
+* the backward-compatible behavior where every environment is available. */
+function resolveAllowedStatefulCodeEnvironments(configured) {
+	if (configured == null) return [...STATEFUL_CODE_ENVIRONMENTS];
+	const configuredSet = new Set(configured);
+	return STATEFUL_CODE_ENVIRONMENTS.filter((environment) => configuredSet.has(environment));
+}
+/** Keep an allowed preference, otherwise select the first deployment-allowed scope. */
+function resolveStatefulCodeEnvironment(preferred, configured) {
+	const allowed = resolveAllowedStatefulCodeEnvironments(configured);
+	return preferred != null && allowed.includes(preferred) ? preferred : allowed[0];
+}
 //#endregion
 //#region src/models.ts
 const modelSpecSubagentsSchema = z.object({
@@ -2505,41 +2502,9 @@ const specsConfigSchema = z.object({
 	addedEndpoints: z.array(z.union([z.string(), eModelEndpointSchema])).optional()
 });
 //#endregion
-//#region src/balance.ts
-const REFILL_INTERVAL_UNITS = [
-	"seconds",
-	"minutes",
-	"hours",
-	"days",
-	"weeks",
-	"months"
-];
-function getRefillEligibilityDate(lastRefill, value, unit) {
-	const result = new Date(lastRefill);
-	switch (unit) {
-		case "seconds":
-			result.setSeconds(result.getSeconds() + value);
-			return result;
-		case "minutes":
-			result.setMinutes(result.getMinutes() + value);
-			return result;
-		case "hours":
-			result.setHours(result.getHours() + value);
-			return result;
-		case "days":
-			result.setDate(result.getDate() + value);
-			return result;
-		case "weeks":
-			result.setDate(result.getDate() + value * 7);
-			return result;
-		case "months":
-			result.setMonth(result.getMonth() + value);
-			return result;
-		default: return result;
-	}
-}
-//#endregion
 //#region src/file-config.ts
+/** Parallel storage deletions during rollback of a failed skill archive import. */
+const DEFAULT_SKILL_IMPORT_CLEANUP_CONCURRENCY = 8;
 const supportsFiles = {
 	["openAI"]: true,
 	["google"]: true,
@@ -2736,6 +2701,25 @@ const resolveSandboxFilename = (filename, mimeType) => {
 * re-resolved to text it has no extraction for.
 */
 const resolveUseResponsesApi = (agentValue, conversationValue) => agentValue ?? conversationValue ?? void 0;
+/** Models whose native OpenAI and Azure execution defaults to Responses. Keep
+* this shared with client upload routing so documents follow the API that the
+* backend will actually invoke. Explicit false remains an opt-out. */
+const prefersResponsesApiByModel = (model) => typeof model === "string" && /^gpt-6-(?:astra|sol|luna)(?:-|$)/i.test(model);
+/** The server has transport and administrator settings the browser cannot see.
+* Missing policy never enables model-based uploads (including during upgrades). */
+const resolveEffectiveUseResponsesApi = ({ value, endpoint, model, routing, webSearch }) => {
+	if (endpoint !== "openAI" && endpoint !== "azureOpenAI") return value ?? void 0;
+	let policy = model ? routing?.[model] : void 0;
+	if (!policy && model && prefersResponsesApiByModel(model)) {
+		const family = /^gpt-6-(?:astra|sol|luna)(?=-|$)/i.exec(model)?.[0].toLowerCase();
+		policy = family ? routing?.[`${family}-*`] : void 0;
+	}
+	policy ??= routing?.["*"];
+	if (!policy) return value ?? void 0;
+	if (webSearch && policy.withWebSearch) policy = policy.withWebSearch;
+	if (value == null) return policy.default;
+	return value ? policy.on : policy.off;
+};
 const isBedrockDocumentType = (mimeType) => mimeType != null && mimeType in bedrockDocumentFormats;
 /** MIME types Bedrock's Converse document path can send to the model (mirrors `bedrockDocumentFormats`). */
 const bedrockDocumentMimeTypes = Object.keys(bedrockDocumentFormats);
@@ -2998,7 +2982,10 @@ const fileConfig = {
 			disabled: false
 		}
 	},
-	skills: { fileSizeLimit: defaultSkillImportSizeLimit },
+	skills: {
+		fileSizeLimit: defaultSkillImportSizeLimit,
+		importCleanupConcurrency: 8
+	},
 	serverFileSizeLimit: defaultSizeLimit,
 	avatarSizeLimit: mbToBytes(2),
 	fileTokenLimit: defaultTokenLimit,
@@ -3018,7 +3005,16 @@ const fileConfig = {
 		return supportedTypes.some((regex) => regex.test(fileType));
 	}
 };
-const supportedMimeTypesSchema = z.array(z.string()).optional();
+const supportedMimeTypesSchema = z.array(z.string().superRefine((pattern, context) => {
+	try {
+		compileMimeRegex(pattern);
+	} catch {
+		context.addIssue({
+			code: z.ZodIssueCode.custom,
+			message: "Invalid MIME type regex: not supported by the configured regex engine"
+		});
+	}
+})).optional();
 const DefaultLLMDeliveryPath = z.enum([
 	"provider",
 	"text",
@@ -3035,9 +3031,13 @@ const endpointFileConfigSchema = z.object({
 	totalSizeLimit: z.number().min(0).optional(),
 	supportedMimeTypes: supportedMimeTypesSchema.optional(),
 	defaultLLMDeliveryPath: defaultLLMDeliveryPathSchema.optional(),
-	legacyFileUploadUX: z.boolean().optional()
+	legacyFileUploadUX: z.boolean().optional(),
+	textFallbackWithoutTools: z.boolean().optional()
+});
+const skillFileConfigSchema = z.object({
+	fileSizeLimit: z.number().min(0).optional(),
+	importCleanupConcurrency: z.number().int().positive().optional()
 });
-const skillFileConfigSchema = z.object({ fileSizeLimit: z.number().min(0).optional() });
 const fileConfigSchema = z.object({
 	endpoints: z.record(endpointFileConfigSchema).optional(),
 	skills: skillFileConfigSchema.optional(),
@@ -3060,7 +3060,8 @@ const fileConfigSchema = z.object({
 	ocr: z.object({ supportedMimeTypes: supportedMimeTypesSchema.optional() }).optional(),
 	text: z.object({ supportedMimeTypes: supportedMimeTypesSchema.optional() }).optional(),
 	defaultLLMDeliveryPath: defaultLLMDeliveryPathSchema.optional(),
-	legacyFileUploadUX: z.boolean().optional()
+	legacyFileUploadUX: z.boolean().optional(),
+	textFallbackWithoutTools: z.boolean().optional()
 });
 /**
 * Compiler for admin-supplied MIME patterns. Defaults to native `RegExp`, which browser
@@ -3097,6 +3098,15 @@ const isPermissiveMimeConfig = (types) => {
 	if (!types || types.length === 0) return false;
 	return types.some((regex) => regex.test("x-librechat/x-probe"));
 };
+/**
+* Detects whether an endpoint's `supportedMimeTypes` were set by the admin rather than inherited
+* from the built-in default list. Inheritance is signaled by referential identity with
+* `supportedMimeTypes`, which `mergeWithDefault` preserves for unconfigured endpoints.
+*/
+const isExplicitMimeConfig = (types) => {
+	if (!types || types.length === 0) return false;
+	return types !== supportedMimeTypes;
+};
 /** Media categories that collapse to a wildcard `accept` token when any member type is allowed. */
 const mimeAcceptCategories = [
 	{
@@ -3297,7 +3307,8 @@ function mergeWithDefault(endpointConfig, defaultConfig, endpoint) {
 		totalSizeLimit: endpointConfig.totalSizeLimit ?? defaultConfig.totalSizeLimit,
 		supportedMimeTypes: endpointConfig.supportedMimeTypes ?? defaultMimeTypes,
 		defaultLLMDeliveryPath: mergeDeliveryPathConfig(endpointConfig.defaultLLMDeliveryPath, defaultConfig.defaultLLMDeliveryPath),
-		legacyFileUploadUX: endpointConfig.legacyFileUploadUX ?? defaultConfig.legacyFileUploadUX
+		legacyFileUploadUX: endpointConfig.legacyFileUploadUX ?? defaultConfig.legacyFileUploadUX,
+		textFallbackWithoutTools: endpointConfig.textFallbackWithoutTools ?? defaultConfig.textFallbackWithoutTools
 	};
 }
 /**
@@ -3344,7 +3355,8 @@ function getEndpointFileConfig(params) {
 	const globalDefaultConfig = {
 		...baseDefaultConfig,
 		defaultLLMDeliveryPath: mergeDeliveryPathConfig(mergedFileConfig.defaultLLMDeliveryPath, baseDefaultConfig.defaultLLMDeliveryPath),
-		legacyFileUploadUX: mergedFileConfig.legacyFileUploadUX ?? baseDefaultConfig.legacyFileUploadUX
+		legacyFileUploadUX: mergedFileConfig.legacyFileUploadUX ?? baseDefaultConfig.legacyFileUploadUX,
+		textFallbackWithoutTools: mergedFileConfig.textFallbackWithoutTools ?? baseDefaultConfig.textFallbackWithoutTools
 	};
 	const userDefaultConfig = mergedFileConfig.endpoints.default;
 	const defaultConfig = userDefaultConfig ? mergeWithDefault(userDefaultConfig, globalDefaultConfig, "default") : globalDefaultConfig;
@@ -3404,11 +3416,16 @@ function mergeFileConfig(dynamic) {
 	if (!dynamic) return mergedConfig;
 	if (dynamic.defaultLLMDeliveryPath !== void 0) mergedConfig.defaultLLMDeliveryPath = dynamic.defaultLLMDeliveryPath;
 	if (dynamic.legacyFileUploadUX !== void 0) mergedConfig.legacyFileUploadUX = dynamic.legacyFileUploadUX;
+	if (dynamic.textFallbackWithoutTools !== void 0) mergedConfig.textFallbackWithoutTools = dynamic.textFallbackWithoutTools;
 	if (dynamic.serverFileSizeLimit !== void 0) mergedConfig.serverFileSizeLimit = mbToBytes(dynamic.serverFileSizeLimit);
 	if (dynamic.avatarSizeLimit !== void 0) mergedConfig.avatarSizeLimit = mbToBytes(dynamic.avatarSizeLimit);
 	if (dynamic.fileTokenLimit !== void 0) mergedConfig.fileTokenLimit = dynamic.fileTokenLimit;
 	if (dynamic.fileContextSizeLimit !== void 0) mergedConfig.fileContextSizeLimit = mbToBytes(dynamic.fileContextSizeLimit);
 	if (dynamic.fileContextCharLimit !== void 0) mergedConfig.fileContextCharLimit = dynamic.fileContextCharLimit;
+	if (dynamic.skills?.importCleanupConcurrency !== void 0) mergedConfig.skills = {
+		...mergedConfig.skills,
+		importCleanupConcurrency: dynamic.skills.importCleanupConcurrency
+	};
 	if (dynamic.skills?.fileSizeLimit !== void 0) mergedConfig.skills = {
 		...mergedConfig.skills,
 		fileSizeLimit: mbToBytes(dynamic.skills.fileSizeLimit)
@@ -3458,6 +3475,7 @@ function mergeFileConfig(dynamic) {
 		if (dynamicEndpoint.supportedMimeTypes) mergedEndpoint.supportedMimeTypes = convertStringsToRegex(dynamicEndpoint.supportedMimeTypes);
 		if (dynamicEndpoint.defaultLLMDeliveryPath !== void 0) mergedEndpoint.defaultLLMDeliveryPath = dynamicEndpoint.defaultLLMDeliveryPath;
 		if (dynamicEndpoint.legacyFileUploadUX !== void 0) mergedEndpoint.legacyFileUploadUX = dynamicEndpoint.legacyFileUploadUX;
+		if (dynamicEndpoint.textFallbackWithoutTools !== void 0) mergedEndpoint.textFallbackWithoutTools = dynamicEndpoint.textFallbackWithoutTools;
 	}
 	return mergedConfig;
 }
@@ -3488,6 +3506,7 @@ const codeEnvironmentPairings = () => `${codeEnvironments()}/pairings`;
 const codeEnvironmentById = (id) => `${codeEnvironments()}/${encodeURIComponent(id)}`;
 const codeEnvironmentSettings = (id) => `${codeEnvironmentById(id)}/settings`;
 const codeEnvironmentStatus = (id) => `${codeEnvironmentById(id)}/status`;
+const codeEnvironmentConversationDecision = (conversationId) => `${codeEnvironments()}/conversations/${encodeURIComponent(conversationId)}/decision`;
 const messagesRoot = `${BASE_URL}/api/messages`;
 const messages = (params) => {
 	const { conversationId, messageId, ...rest } = params;
@@ -3818,6 +3837,10 @@ let TokenExchangeMethodEnum = /* @__PURE__ */ function(TokenExchangeMethodEnum)
 	TokenExchangeMethodEnum["BasicAuthHeader"] = "basic_auth_header";
 	return TokenExchangeMethodEnum;
 }({});
+const agentGitIdentitySchema = z.object({
+	name: z.string().trim().min(1).max(128).refine((value) => !/[\0\r\n]/.test(value)),
+	email: z.string().trim().email().max(254).refine((value) => !/[\0\r\n]/.test(value))
+}).optional();
 //#endregion
 //#region src/mcp.ts
 /**
@@ -3826,6 +3849,8 @@ let TokenExchangeMethodEnum = /* @__PURE__ */ function(TokenExchangeMethodEnum)
 * stored icon predates the cap clears the icon instead of rejecting the update.
 */
 const MAX_MCP_ICON_PATH_LENGTH = 256 * 1024;
+/** Keep persistence admission waits below the shared lease's 15-minute lifetime. */
+const MAX_MCP_OAUTH_PERSISTENCE_WAIT_MS = 14 * 6e4;
 const validateOAuthClientCredentials = (oauth, ctx) => {
 	if (oauth.client_secret && !oauth.client_id) ctx.addIssue({
 		code: z.ZodIssueCode.custom,
@@ -3900,6 +3925,27 @@ const OAuthOptionsBaseSchema = z.object({
 	* Ignored when `audience` itself is not configured.
 	*/
 	forward_audience_on_refresh: z.boolean().optional(),
+	/**
+	* Whether to send the RFC 8707 `resource` parameter on `/authorize`, the
+	* `authorization_code` exchange and the `refresh_token` grant. The value is the
+	* canonical resource identifier from the MCP server's Protected Resource Metadata
+	* (RFC 9728), never an operator-supplied string.
+	*
+	* Default: `true`. RFC 8707 makes `resource` OPTIONAL, and authorization servers
+	* that reject it cannot complete a flow that sends it: Microsoft Entra ID v2.0
+	* fails an `/authorize` request carrying both `resource` and `scope` with
+	* `AADSTS9010010`. Set to `false` for those providers, and rely on `scope` (or
+	* `audience` above) to obtain an API-scoped token.
+	*
+	* Opting out suppresses the parameter only. Protected Resource Metadata is still
+	* discovered, still validated against the MCP server URL (RFC 9728 §3.3), and
+	* still recorded on the stored client binding, so scope discovery, authorization
+	* server discovery and re-authentication checks are unaffected.
+	*
+	* This field is only accepted from trusted/admin MCP configuration and is rejected
+	* from user-managed servers.
+	*/
+	send_resource_parameter: z.boolean().optional(),
 	/** OAuth revocation endpoint (optional - can be auto-discovered) */
 	revocation_endpoint: z.string().transform((val) => extractEnvVariable(val)).pipe(z.string().url()).optional(),
 	/** OAuth revocation endpoint authentication methods supported (optional - can be auto-discovered) */
@@ -3918,14 +3964,16 @@ const userOAuthEndpointUrlSchema = z.string().refine((val) => !envVarPattern.tes
 }, { message: "OAuth endpoint URLs cannot include audience or resource query parameters" });
 const UserOAuthOptionsSchema = OAuthOptionsBaseSchema.omit({
 	audience: true,
-	forward_audience_on_refresh: true
+	forward_audience_on_refresh: true,
+	send_resource_parameter: true
 }).extend({
 	authorization_url: userOAuthEndpointUrlSchema.optional(),
 	token_url: userOAuthEndpointUrlSchema.optional(),
 	redirect_uri: userOAuthEndpointUrlSchema.optional(),
 	revocation_endpoint: userOAuthEndpointUrlSchema.optional(),
 	audience: z.never().optional(),
-	forward_audience_on_refresh: z.never().optional()
+	forward_audience_on_refresh: z.never().optional(),
+	send_resource_parameter: z.never().optional()
 }).superRefine(validateOAuthClientCredentials);
 const OboOptionsSchema = z.object({ 
 /** Scopes to request for the downstream MCP server (e.g., "api://<client-id>/Mcp.Tools.ReadWrite") */
@@ -3950,6 +3998,21 @@ const BaseOptionsSchema = z.object({
 	sseReadTimeout: z.number().int().positive().optional(),
 	initTimeout: z.number().int().nonnegative().optional(),
 	/**
+	* How long (ms) a replica waits for another replica's in-flight OAuth refresh-token redemption
+	* before failing the attempt as retryable. Raise it for a slow token endpoint; lower it to fail
+	* faster. Default when unset: 15_000. Clamped to 30_000, half the window after which a
+	* redemption aborts itself, because this wait runs inside the redemption that window governs.
+	*
+	* Positive rather than non-negative: zero would mean "never wait for a peer", which fails every
+	* contended refresh instead of adopting the rotation a peer is about to store, and that is the
+	* common case this wait exists to serve. Omit the field to take the default.
+	*/
+	oauthRefreshWaitTimeout: z.number().int().positive().optional(),
+	/** Enable only after every replica has upgraded to the coordinated OAuth writer protocol. Default: false. */
+	oauthRefreshCoordination: z.boolean().optional(),
+	/** Wait (ms) for callback/adoption persistence and publication. Default: 15_000; maximum: 840_000. */
+	oauthPersistenceWaitTimeout: z.number().int().positive().max(MAX_MCP_OAUTH_PERSISTENCE_WAIT_MS).optional(),
+	/**
 	* Whether the server is offered in chat.
 	*
 	* `false` hides it from the chat dropdown (MCPSelect) AND bars it from the
@@ -4083,6 +4146,13 @@ const SSEOptionsSchema = BaseOptionsSchema.extend({
 	type: z.literal("sse").default("sse"),
 	headers: z.record(z.string(), z.string()).optional(),
 	/**
+	* Headers resolved from the live chat request and merged over `headers`.
+	* Omitted during catalog discovery, which has no request context, so a
+	* `{{LIBRECHAT_BODY_*}}` placeholder here does not block tool listing.
+	* On a duplicate header name the resolved `requestHeaders` value wins.
+	*/
+	requestHeaders: z.record(z.string(), z.string()).optional(),
+	/**
 	* On-Behalf-Of (OBO) token exchange configuration.
 	* When configured, LibreChat exchanges the logged-in user's federated access token
 	* for a token scoped to this MCP server via the OAuth 2.0 OBO flow (jwt-bearer grant).
@@ -4101,6 +4171,13 @@ const StreamableHTTPOptionsSchema = BaseOptionsSchema.extend({
 	type: z.union([z.literal("streamable-http"), z.literal("http")]),
 	headers: z.record(z.string(), z.string()).optional(),
 	/**
+	* Headers resolved from the live chat request and merged over `headers`.
+	* Omitted during catalog discovery, which has no request context, so a
+	* `{{LIBRECHAT_BODY_*}}` placeholder here does not block tool listing.
+	* On a duplicate header name the resolved `requestHeaders` value wins.
+	*/
+	requestHeaders: z.record(z.string(), z.string()).optional(),
+	/**
 	* On-Behalf-Of (OBO) token exchange configuration.
 	* When configured, LibreChat exchanges the logged-in user's federated access token
 	* for a token scoped to this MCP server via the OAuth 2.0 OBO flow (jwt-bearer grant).
@@ -4130,6 +4207,9 @@ const omitServerManagedFields = (schema) => schema.omit({
 	timeout: true,
 	sseReadTimeout: true,
 	initTimeout: true,
+	oauthRefreshWaitTimeout: true,
+	oauthRefreshCoordination: true,
+	oauthPersistenceWaitTimeout: true,
 	chatMenu: true,
 	serverInstructions: true,
 	requiresOAuth: true,
@@ -4196,6 +4276,8 @@ const MCP_USER_INPUT_FIELDS = (() => {
 })();
 //#endregion
 //#region src/config.ts
+const AGENT_BACKGROUND_COMPLETION_RESULT_MAX_CHARS_DEFAULT = 24 * 1024;
+const AGENT_BACKGROUND_COMPLETION_RESULT_MAX_CHARS_HARD_MAX = 64 * 1024;
 const defaultSocialLogins = [
 	"google",
 	"facebook",
@@ -4204,6 +4286,8 @@ const defaultSocialLogins = [
 	"discord",
 	"saml"
 ];
+/** How long a started social login may take to return to its callback before its `state` expires. */
+const DEFAULT_OAUTH_STATE_TTL_MS = 600 * 1e3;
 const BASE_ONLY_CONFIG_SECTIONS = ["filters"];
 /** Sections that may be stored in the tenant's base config document but must
 * not be overridden or tombstoned by role, group, or user config documents. */
@@ -4775,7 +4859,21 @@ const managementClientBindingSchema = z.object({
 	tenantId: z.string().trim().min(1).max(128).regex(/^[a-zA-Z0-9][a-zA-Z0-9_.-]*$/, "must be a valid tenant id").refine((tenantId) => tenantId !== "__SYSTEM__", "system tenant is not allowed"),
 	enabled: z.boolean().default(true)
 }).strict();
-const managementApiOidcSchema = oidcAccessTokenSchema.strict().superRefine(validateEnabledOidc);
+const managementApiOidcSchema = oidcAccessTokenSchema.extend({
+	tokenUse: z.literal("access").optional(),
+	requiredScopes: z.array(z.string().trim().min(1).max(256).regex(/^\S+$/, "must be a single scope token")).min(1).max(20).optional()
+}).strict().superRefine((oidc, ctx) => {
+	if (oidc.enabled === true && !oidc.issuer) ctx.addIssue({
+		code: z.ZodIssueCode.custom,
+		path: ["issuer"],
+		message: "issuer is required when OIDC auth is enabled"
+	});
+	if (oidc.enabled === true && !oidc.audience && (oidc.tokenUse !== "access" || !oidc.requiredScopes?.length)) ctx.addIssue({
+		code: z.ZodIssueCode.custom,
+		path: ["requiredScopes"],
+		message: "audience or access-token validation with required scopes is required when OIDC auth is enabled"
+	});
+});
 const managementApiAuthSchema = z.object({
 	oidc: managementApiOidcSchema,
 	clients: z.array(managementClientBindingSchema).max(100).default([])
@@ -4874,6 +4972,24 @@ const toolApprovalPolicySchema = z.object({
 	*/
 	hooks: z.array(toolApprovalHookConfigSchema).optional()
 }).optional();
+const askUserQuestionRetainedAnswersSchema = z.object({
+	/** `false` stops carrying answers forward; they then live only in the messages. */
+	enabled: z.boolean().optional(),
+	/** Token ceiling for the carried block. Older answers drop first once it is
+	*  exceeded; the newest set is always kept. Defaults to
+	*  `DEFAULT_RETAINED_ANSWER_TOKENS` (4096). */
+	maxTokens: z.number().int().positive().optional()
+});
+/**
+* Behavior of the `ask_user_question` tool beyond the admin kill switch
+* (`filteredTools` / `includedTools`).
+*
+* `retainedAnswers`: every answer the user gave to an agent's question is
+* quoted verbatim in the run's user context, so it survives after the
+* messages that carried it were summarized, pruned or dropped from the context
+* window. On by default.
+*/
+const askUserQuestionConfigSchema = z.object({ retainedAnswers: askUserQuestionRetainedAnswersSchema.optional() }).optional();
 /**
 * Durable checkpointer backing human-in-the-loop resume.
 *
@@ -4944,6 +5060,12 @@ const CODE_ENVIRONMENT_COMMAND_TIMEOUT_DEFAULT_MS = 3e4;
 /** Protocol-level ceiling; deployments may only lower this value. */
 const CODE_ENVIRONMENT_COMMAND_TIMEOUT_HARD_MAX_MS = 5 * 6e4;
 /**
+* Client retry horizon across Code API admission windows. Also the hard cap:
+* deployments may only lower it. `0` disables client retries, not the server's
+* initial admission wait or an already-admitted operation's execution budget.
+*/
+const CODE_ENVIRONMENT_QUEUE_WAIT_DEFAULT_MS = 5 * 6e4;
+/**
 * Typed user-tunable surface for one attached code environment. Omitted fields
 * remain fixed at LibreChat's safe baseline. Isolation, networking, mounts,
 * privileged execution, and secrets are deliberately not representable here.
@@ -4953,18 +5075,35 @@ const codeEnvironmentUserConfigSchema = z.object({
 		fileWrite: codeEnvironmentPermissionFieldSchema.optional(),
 		commandExecution: codeEnvironmentPermissionFieldSchema.optional()
 	}).strict().optional(),
-	limits: z.object({ 
-	/** Maximum timeout a Bash invocation may request. Omission preserves
-	* the historical 30-second command budget. */
-maxCommandTimeoutMs: z.number().int().min(1).max(CODE_ENVIRONMENT_COMMAND_TIMEOUT_HARD_MAX_MS).optional() }).strict().optional()
+	limits: z.object({
+		/** Maximum timeout a Bash invocation may request. Omission preserves
+		* the historical 30-second command budget. */
+		maxCommandTimeoutMs: z.number().int().min(1).max(CODE_ENVIRONMENT_COMMAND_TIMEOUT_HARD_MAX_MS).optional(),
+		/** Client retry horizon for capacity expirations, shared by preview/edit.
+		* Omission keeps five minutes; `0` makes each required operation try once.
+		* An in-flight request retains Code API's admission/execution budgets and
+		* can finish after this horizon. This is not a server admission timeout. */
+		maxQueueWaitMs: z.number().int().min(0).max(CODE_ENVIRONMENT_QUEUE_WAIT_DEFAULT_MS).optional()
+	}).strict().optional()
 }).strict();
 const codeEnvironmentUserSettingsSchema = z.object({ permissions: z.object({
 	fileWrite: codeEnvironmentPermissionDecisionSchema.optional(),
 	commandExecution: codeEnvironmentPermissionDecisionSchema.optional()
 }).strict().optional() }).strict();
+const DEFAULT_MAX_PROVIDER_ERROR_CHARS = 2e3;
+const DEFAULT_AGENT_MODEL_RESPONSE_BODY_TIMEOUT_MS = 9e5;
+const DEFAULT_AGENT_MODEL_RESPONSE_HEADERS_TIMEOUT_MS = 3e5;
 const agentsEndpointSchema = baseEndpointSchema.omit({ baseURL: true }).merge(z.object({
+	/** Maximum provider error characters retained in unprotected terminal failures. */
+	maxProviderErrorChars: z.number().int().min(0).max(1e6).default(DEFAULT_MAX_PROVIDER_ERROR_CHARS),
+	/** Maximum inactivity between provider response body chunks; 0 disables the idle timeout. */
+	modelResponseBodyTimeoutMs: z.number().int().min(0).max(864e5).default(DEFAULT_AGENT_MODEL_RESPONSE_BODY_TIMEOUT_MS),
+	/** Maximum wait for provider response headers; 0 disables the header timeout. */
+	modelResponseHeadersTimeoutMs: z.number().int().min(0).max(864e5).default(DEFAULT_AGENT_MODEL_RESPONSE_HEADERS_TIMEOUT_MS),
 	recursionLimit: z.number().optional(),
 	disableBuilder: z.boolean().optional().default(false),
+	/** Optional workspace guidance acquisition budget, separate from command execution. */
+	repositoryInstructions: z.object({ timeoutMs: z.number().int().min(100).max(3e4).optional().default(2e3) }).optional(),
 	maxRecursionLimit: z.number().optional(),
 	/** Max cumulative bytes a single streamed tool call's arguments may reach before the run
 	* aborts. Defaults to 64 KiB in the agents SDK; `0` disables the guard. */
@@ -4975,6 +5114,13 @@ const agentsEndpointSchema = baseEndpointSchema.omit({ baseURL: true }).merge(z.
 	* disables the guard for that tool only. Merged over LibreChat's shipped default of
 	* `{ create_file: 131072 }`. */
 	maxToolCallArgBytesByTool: z.record(z.number()).optional(),
+	/** Characters of retained tool output the save path may tokenize exactly for the
+	* context gauge when a turn stops at the tool-call limit (see
+	* `retainedToolTokens`). Tokenizing costs ~60 ms/MB and runs once per stopped
+	* turn; past this ceiling the figure is withdrawn rather than estimated, so the
+	* gauge under-reports that turn instead of blocking the save. Raise it for
+	* deployments whose tools legitimately return more, lower it on slow hardware. */
+	maxRetainedToolCountChars: z.number().int().min(0).optional().default(DEFAULT_MAX_RETAINED_TOOL_COUNT_CHARS),
 	maxCitations: z.number().min(1).max(50).optional().default(30),
 	maxCitationsPerFile: z.number().min(1).max(10).optional().default(7),
 	minRelevanceScore: z.number().min(0).max(1).optional().default(.45),
@@ -5008,6 +5154,9 @@ const agentsEndpointSchema = baseEndpointSchema.omit({ baseURL: true }).merge(z.
 			/** Defaults to five. Zero disables enrollment; existing machines remain usable. */
 			maxPerUser: z.number().int().min(0).max(Number.MAX_SAFE_INTEGER).optional()
 		}).optional(),
+		/** Server-only policy letting a conversation's owner move its sealed attached decision
+		* onto the environments its agents now use. Omit to keep sealed decisions immovable. */
+		conversationMoves: z.object({ enabled: z.boolean().optional() }).optional(),
 		/** Operator-managed execution environments. Attached entries route to a
 		* Code API deployment backed by an outbound librechat-code worker. */
 		environments: z.array(z.object({
@@ -5116,6 +5265,12 @@ const agentsEndpointSchema = baseEndpointSchema.omit({ baseURL: true }).merge(z.
 	* enabled unless an administrator explicitly restores poll-only behavior. */
 	backgroundTasks: z.object({
 		completionWakeups: z.boolean().optional().default(true),
+		/** Maximum terminal output copied into the private completion receipt.
+		* Generated files remain governed by their separate attachment policy. */
+		completionResultMaxChars: z.number().int().min(1).max(AGENT_BACKGROUND_COMPLETION_RESULT_MAX_CHARS_HARD_MAX).optional().default(AGENT_BACKGROUND_COMPLETION_RESULT_MAX_CHARS_DEFAULT),
+		/** Maximum message-backed sibling results in one continuation.
+		* Independent receipts retain task-local delivery ownership. */
+		completionResultBatchSize: z.number().int().min(1).max(16).optional().default(8),
 		/** Cooperative cancellation for process-local ordinary tools. Off
 		* by default so existing deployments opt into the new control. */
 		ordinaryToolCancellation: z.boolean().optional().default(false)
@@ -5125,6 +5280,8 @@ const agentsEndpointSchema = baseEndpointSchema.omit({ baseURL: true }).merge(z.
 	remoteApi: remoteApiSchema.optional(),
 	/** Human-in-the-loop tool approval policy. Off by default. */
 	toolApproval: toolApprovalPolicySchema,
+	/** Ask User question behavior; see {@link askUserQuestionConfigSchema}. */
+	askUserQuestion: askUserQuestionConfigSchema,
 	/** Durable checkpointer backing tool-approval and Ask User resume.
 	*  Defaults to the app's MongoDB when either flow needs it. */
 	checkpointer: checkpointerSchema
@@ -5501,6 +5658,7 @@ const mcpServersSchema = z.object({
 const traceViewerDefaults = {
 	enabled: false,
 	showInputOutput: false,
+	showToolNames: false,
 	maxRecords: 1e3,
 	maxContentLength: 5e4,
 	requestsPerMinute: 30,
@@ -5531,6 +5689,12 @@ const traceViewerSchema = z.object({
 	enabled: z.boolean().optional(),
 	/** Returns observation input, output and metadata in the record inspector. */
 	showInputOutput: z.boolean().optional(),
+	/**
+	* Names the tools of each tool round from the tracing backend's own record of the round, at the
+	* cost of further backend reads per listed page, which carry each round's input and output.
+	* Off, a round is named only when the chat's messages can be matched to the trace.
+	*/
+	showToolNames: z.boolean().optional(),
 	/** Observations read from the tracing backend per request. */
 	maxRecords: boundedIntegerSchema("maxRecords"),
 	/** Characters kept from each input, output and metadata value before truncation. */
@@ -5553,6 +5717,7 @@ function resolveTraceViewerConfig(config) {
 	return {
 		enabled: config?.enabled === true,
 		showInputOutput: config?.showInputOutput === true,
+		showToolNames: config?.showToolNames === true,
 		maxRecords: boundedInteger(config?.maxRecords, "maxRecords"),
 		maxContentLength: boundedInteger(config?.maxContentLength, "maxContentLength"),
 		requestsPerMinute: boundedInteger(config?.requestsPerMinute, "requestsPerMinute"),
@@ -5573,6 +5738,8 @@ const interfaceSchema = z.object({
 	customWelcome: z.string().optional(),
 	mcpServers: mcpServersSchema.optional(),
 	modelSelect: z.boolean().optional(),
+	/** Milliseconds between syntax highlights while a code block streams. */
+	codeHighlightThrottleMs: z.number().int().min(0).max(6e4).default(300),
 	parameters: z.boolean().optional(),
 	multiConvo: z.boolean().optional(),
 	bookmarks: z.boolean().optional(),
@@ -5658,6 +5825,7 @@ const interfaceSchema = z.object({
 	})]).optional()
 }).default({
 	modelSelect: true,
+	codeHighlightThrottleMs: 300,
 	parameters: true,
 	presets: true,
 	multiConvo: true,
@@ -5914,7 +6082,8 @@ const balanceSchema = z.object({
 	autoRefillEnabled: z.boolean().optional().default(false),
 	refillIntervalValue: z.number().optional().default(30),
 	refillIntervalUnit: z.enum(REFILL_INTERVAL_UNITS).optional().default("days"),
-	refillAmount: z.number().optional().default(1e4)
+	refillAmount: z.number().optional().default(1e4),
+	reservationTtlMs: z.number().int().min(MIN_BALANCE_RESERVATION_TTL_MS).optional().default(DEFAULT_BALANCE_RESERVATION_TTL_MS)
 });
 const transactionsSchema = z.object({ enabled: z.boolean().optional().default(true) });
 const DEFAULT_MEMORY_MAX_INPUT_TOKENS = 12e3;
@@ -6124,8 +6293,17 @@ const langfuseConfigSchema = z.object({
 	/** Trace user identity and allowlisted user/request metadata. */
 	trace: langfuseTraceConfigSchema.optional()
 });
+const openIdDiscoverySchema = z.object({
+	/** Discovery attempts made before startup continues; `0` retries only in the background. */
+	startupAttempts: z.number().int().min(0).max(100).default(1),
+	/** Milliseconds between startup and background discovery attempts. */
+	retryDelayMs: z.number().int().min(100).max(36e5).default(5e3)
+});
+/** Maximum CAS attempts per ACL document, including the initial attempt. */
+const permissionWriteAttemptsSchema = z.number().int().min(1).max(100).default(3);
 const configSchema = z.object({
 	version: z.string(),
+	permissions: z.object({ maxWriteAttempts: permissionWriteAttemptsSchema }).optional(),
 	cache: z.boolean().default(true),
 	ocr: ocrSchema.optional(),
 	webSearch: webSearchSchema.optional(),
@@ -6181,7 +6359,11 @@ const configSchema = z.object({
 	}).optional(),
 	registration: z.object({
 		socialLogins: z.array(z.string()).optional(),
-		allowedDomains: z.array(z.string()).optional()
+		allowedDomains: z.array(z.string()).optional(),
+		/** Milliseconds a started social login may take to reach its callback; defaults to `DEFAULT_OAUTH_STATE_TTL_MS`. */
+		oauthStateTtlMs: z.number().int().min(6e4).max(36e5).optional(),
+		/** OpenID discovery retries; an unset field falls back to its `OPENID_DISCOVERY_RETRY_*` env var, then the schema default. */
+		openidDiscovery: openIdDiscoverySchema.partial().optional()
 	}).default({ socialLogins: defaultSocialLogins }),
 	balance: balanceSchema.optional(),
 	transactions: transactionsSchema.optional(),
@@ -6214,7 +6396,9 @@ const configSchema = z.object({
 		["agents"]: agentsEndpointSchema.optional(),
 		["custom"]: customEndpointsSchema.optional(),
 		["bedrock"]: bedrockEndpointSchema.optional()
-	}).strict().refine((data) => Object.keys(data).length > 0, { message: "At least one `endpoints` field must be provided." }).optional()
+	}).strict().refine((data) => Object.keys(data).length > 0, { message: "At least one `endpoints` field must be provided." }).optional(),
+	/** Serve the OpenAPI spec and docs for the public Agents API. Off by default. */
+	openapi: z.object({ enabled: z.boolean().optional() }).optional()
 });
 const getConfigDefaults = () => getSchemaDefaults(configSchema);
 let KnownEndpoints = /* @__PURE__ */ function(KnownEndpoints) {
@@ -6282,6 +6466,9 @@ const alternateName = {
 * catalogs consume.
 */
 const responsesOnlyOpenAIModels = ["gpt-6-astra"];
+/** Tool calls with Sol/Luna's default reasoning require Responses. Do not offer
+* these on Assistants, which cannot use the native request-routing path. */
+const responsesReasoningOpenAIModels = ["gpt-6-sol", "gpt-6-luna"];
 const sharedOpenAIModels = [
 	"gpt-5.6",
 	"gpt-5.6-terra",
@@ -6311,6 +6498,7 @@ const sharedOpenAIModels = [
 const sharedAnthropicModels = [
 	"claude-fable-5-1",
 	"claude-fable-5",
+	"claude-opus-5-5",
 	"claude-opus-5",
 	"claude-opus-4-8",
 	"claude-opus-4-7",
@@ -6346,6 +6534,7 @@ const sharedAnthropicModels = [
 const bedrockModels = [
 	"global.anthropic.claude-fable-5-1",
 	"global.anthropic.claude-fable-5",
+	"global.anthropic.claude-opus-5-5",
 	"global.anthropic.claude-opus-5",
 	"global.anthropic.claude-opus-4-8",
 	"global.anthropic.claude-opus-4-7",
@@ -6377,7 +6566,11 @@ const bedrockModels = [
 const defaultModels = {
 	["azureAssistants"]: sharedOpenAIModels,
 	["assistants"]: [...sharedOpenAIModels, "chatgpt-4o-latest"],
-	["agents"]: [...responsesOnlyOpenAIModels, ...sharedOpenAIModels],
+	["agents"]: [
+		...responsesOnlyOpenAIModels,
+		...responsesReasoningOpenAIModels,
+		...sharedOpenAIModels
+	],
 	["google"]: [
 		"gemini-3.8-flash",
 		"gemini-3.7-flash",
@@ -6396,6 +6589,7 @@ const defaultModels = {
 	["anthropic"]: sharedAnthropicModels,
 	["openAI"]: [
 		...responsesOnlyOpenAIModels,
+		...responsesReasoningOpenAIModels,
 		...sharedOpenAIModels,
 		"chatgpt-4o-latest",
 		"gpt-4-vision-preview",
@@ -6409,12 +6603,11 @@ const fitlerAssistantModels = (str) => {
 };
 const openAIModels = defaultModels["openAI"];
 /**
-* The OpenAI catalog without the models only the first-party OpenAI endpoint
-* can run. Azure OpenAI shares this list, but Astra is neither routed to the
-* Responses API nor given its request constraints there, and listing it first
-* would let it become the default selection.
+* Preserve Azure's fallback default selection when the OpenAI catalog gains
+* Responses-preferred models. Configured Azure deployments supply their own
+* model list, including Astra when deployed.
 */
-const nonResponsesOnlyOpenAIModels = openAIModels.filter((model) => !responsesOnlyOpenAIModels.includes(model));
+const nonResponsesOnlyOpenAIModels = openAIModels.filter((model) => !responsesOnlyOpenAIModels.includes(model) && !responsesReasoningOpenAIModels.includes(model));
 const initialModelsConfig = {
 	initial: [],
 	["openAI"]: openAIModels,
@@ -6455,6 +6648,8 @@ const visionModels = [
 	"grok-vision",
 	"grok-2-vision",
 	"grok-3",
+	"grok-4.7",
+	"grok-4-7",
 	"gpt-4o-mini",
 	"gpt-4o",
 	"gpt-4-turbo",
@@ -6821,6 +7016,10 @@ let ErrorTypes = /* @__PURE__ */ function(ErrorTypes) {
 	*/
 	ErrorTypes["AUTH_BANNED"] = "auth_banned";
 	/**
+	* Authentication request was not sent from this application's origin
+	*/
+	ErrorTypes["AUTH_CROSS_ORIGIN"] = "auth_cross_origin";
+	/**
 	* Model refused to respond (content policy violation)
 	*/
 	ErrorTypes["REFUSAL"] = "refusal";
@@ -6987,7 +7186,7 @@ let TTSProviders = /* @__PURE__ */ function(TTSProviders) {
 /** Enum for app-wide constants */
 let Constants = /* @__PURE__ */ function(Constants) {
 	/**
-	* Key for the app's version. The placeholder `v0.8.8-rc3` is
+	* Key for the app's version. The placeholder `v0.8.8-rc4` is
 	* swapped in by `@rollup/plugin-replace` during `npm run build:data-provider`
 	* using the value of the root `package.json`'s `version` field. Consumers
 	* always import this via the built dist bundle (see `main` field in
@@ -6995,9 +7194,9 @@ let Constants = /* @__PURE__ */ function(Constants) {
 	* substituted value. Only tests that import the TypeScript source directly
 	* would observe the raw placeholder.
 	*/
-	Constants["VERSION"] = "v0.8.8-rc3";
+	Constants["VERSION"] = "v0.8.8-rc4";
 	/** Key for the Custom Config's version (librechat.yaml). */
-	Constants["CONFIG_VERSION"] = "1.3.16";
+	Constants["CONFIG_VERSION"] = "1.3.17";
 	/** Standard value for the first message's `parentMessageId` value, to indicate no parent exists. */
 	Constants["NO_PARENT"] = "00000000-0000-0000-0000-000000000000";
 	/** Standard value to use whatever the submission prelim. `responseMessageId` is */
@@ -7330,6 +7529,8 @@ let LocalStorageKeys = /* @__PURE__ */ function(LocalStorageKeys) {
 	LocalStorageKeys["PIN_WEB_SEARCH_"] = "PIN_WEB_SEARCH_";
 	/** Pin state for Code Interpreter per conversation ID */
 	LocalStorageKeys["PIN_CODE_INTERPRETER_"] = "PIN_CODE_INTERPRETER_";
+	/** Key for the last selected code approval mode */
+	LocalStorageKeys["LAST_CODE_APPROVAL_MODE"] = "lastCodeApprovalMode";
 	return LocalStorageKeys;
 }({});
 let ForkOptions = /* @__PURE__ */ function(ForkOptions) {
@@ -7422,6 +7623,57 @@ function getDefaultParamsEndpoint(endpointsConfig, endpoint) {
 	return endpointsConfig[endpoint]?.customParams?.defaultParamsEndpoint;
 }
 //#endregion
+//#region src/types/assistants.ts
+let RunStatus = /* @__PURE__ */ function(RunStatus) {
+	RunStatus["QUEUED"] = "queued";
+	RunStatus["IN_PROGRESS"] = "in_progress";
+	RunStatus["REQUIRES_ACTION"] = "requires_action";
+	RunStatus["CANCELLING"] = "cancelling";
+	RunStatus["CANCELLED"] = "cancelled";
+	RunStatus["FAILED"] = "failed";
+	RunStatus["COMPLETED"] = "completed";
+	RunStatus["EXPIRED"] = "expired";
+	return RunStatus;
+}({});
+let FilePurpose = /* @__PURE__ */ function(FilePurpose) {
+	FilePurpose["Vision"] = "vision";
+	FilePurpose["FineTune"] = "fine-tune";
+	FilePurpose["FineTuneResults"] = "fine-tune-results";
+	FilePurpose["Assistants"] = "assistants";
+	FilePurpose["AssistantsOutput"] = "assistants_output";
+	return FilePurpose;
+}({});
+const defaultOrderQuery = {
+	order: "desc",
+	limit: 100
+};
+let AssistantStreamEvents = /* @__PURE__ */ function(AssistantStreamEvents) {
+	AssistantStreamEvents["ThreadCreated"] = "thread.created";
+	AssistantStreamEvents["ThreadRunCreated"] = "thread.run.created";
+	AssistantStreamEvents["ThreadRunQueued"] = "thread.run.queued";
+	AssistantStreamEvents["ThreadRunInProgress"] = "thread.run.in_progress";
+	AssistantStreamEvents["ThreadRunRequiresAction"] = "thread.run.requires_action";
+	AssistantStreamEvents["ThreadRunCompleted"] = "thread.run.completed";
+	AssistantStreamEvents["ThreadRunFailed"] = "thread.run.failed";
+	AssistantStreamEvents["ThreadRunCancelling"] = "thread.run.cancelling";
+	AssistantStreamEvents["ThreadRunCancelled"] = "thread.run.cancelled";
+	AssistantStreamEvents["ThreadRunExpired"] = "thread.run.expired";
+	AssistantStreamEvents["ThreadRunStepCreated"] = "thread.run.step.created";
+	AssistantStreamEvents["ThreadRunStepInProgress"] = "thread.run.step.in_progress";
+	AssistantStreamEvents["ThreadRunStepCompleted"] = "thread.run.step.completed";
+	AssistantStreamEvents["ThreadRunStepFailed"] = "thread.run.step.failed";
+	AssistantStreamEvents["ThreadRunStepCancelled"] = "thread.run.step.cancelled";
+	AssistantStreamEvents["ThreadRunStepExpired"] = "thread.run.step.expired";
+	AssistantStreamEvents["ThreadRunStepDelta"] = "thread.run.step.delta";
+	AssistantStreamEvents["ThreadMessageCreated"] = "thread.message.created";
+	AssistantStreamEvents["ThreadMessageInProgress"] = "thread.message.in_progress";
+	AssistantStreamEvents["ThreadMessageCompleted"] = "thread.message.completed";
+	AssistantStreamEvents["ThreadMessageIncomplete"] = "thread.message.incomplete";
+	AssistantStreamEvents["ThreadMessageDelta"] = "thread.message.delta";
+	AssistantStreamEvents["ErrorEvent"] = "error";
+	return AssistantStreamEvents;
+}({});
+//#endregion
 //#region src/accessPermissions.ts
 /**
 * Granular Permission System Types for Agent Sharing
@@ -7796,6 +8048,7 @@ let MutationKeys = /* @__PURE__ */ function(MutationKeys) {
 	MutationKeys["pairCodeEnvironment"] = "pairCodeEnvironment";
 	MutationKeys["updateCodeEnvironmentSettings"] = "updateCodeEnvironmentSettings";
 	MutationKeys["deleteCodeEnvironment"] = "deleteCodeEnvironment";
+	MutationKeys["moveConversationCodeEnvironment"] = "moveConversationCodeEnvironment";
 	return MutationKeys;
 }({});
 //#endregion
@@ -8361,6 +8614,7 @@ var data_service_exports = /* @__PURE__ */ __exportAll({
 	logout: () => logout,
 	makePromptProduction: () => makePromptProduction,
 	markFilesUsage: () => markFilesUsage,
+	moveConversationCodeEnvironment: () => moveConversationCodeEnvironment,
 	pairCodeEnvironment: () => pairCodeEnvironment,
 	pinConversation: () => pinConversation,
 	rebuildConversationTags: () => rebuildConversationTags,
@@ -8479,6 +8733,12 @@ function getCodeEnvironments() {
 function getCodeEnvironmentStatus(id) {
 	return request_default.get(codeEnvironmentStatus(id));
 }
+function moveConversationCodeEnvironment({ conversationId, from, to }) {
+	return request_default.patch(codeEnvironmentConversationDecision(conversationId), {
+		from,
+		to
+	});
+}
 function pairCodeEnvironment(payload) {
 	return request_default.post(codeEnvironmentPairings(), payload);
 }
@@ -9349,6 +9609,6 @@ const getActiveJobs = () => {
 	return request_default.get(activeJobs());
 };
 //#endregion
-export { permissionEntrySchema as $, eAnthropicEffortSchema as $a, specsConfigSchema as $i, ocrSchema as $n, tQueryParamsSchema as $o, registerPage as $r, MAX_PII_CUSTOM_REGEX_INSTRUCTIONS as $s, alternateName as $t, updateResourcePermissions as A, ReasoningResponseKey as Aa, skillFilterFieldSchema as Ac, isAnthropicTextDocumentType as Ai, fileStrategiesSchema as An, isMythosClassModel as Ao, MAX_MCP_ICON_PATH_LENGTH as Ar, getTagByKey as As, MAX_SUBAGENT_RUN_CONFIGS as At, MutationKeys as B, anthropicSchema as Ba, resolveUseResponsesApi as Bi, isSpeechProviderConfigured as Bn, removeNullishValues as Bo, WebSocketOptionsSchema as Br, isCodeWorkspaceSelection as Bs, SafeSearchTypes as Bt, resetPassword as C, MYTHOS_CLASS_FAMILIES as Ca, hasActiveFiltersConfig as Cc, getDocumentFileExtension as Ci, defaultModels as Cn, inputTokensIncludesCache as Co, turnstileOptionsSchema as Cr, resolveCodePermissionDecision as Cs, KnownEndpoints as Ct, updateFeedback as D, ReasoningEffort as Da, messageFilterFieldSchema as Dc, imageTypeMapping as Di, excludedKeys as Dn, isImageVisionTool as Do, vertexModelConfigSchema as Dr, feedbackRatingSchema as Ds, LocalStorageKeys as Dt, searchPrincipals as E, ReasoningContext as Ea, memoryFilterFieldSchema as Ec, imageMimeTypes as Ei, endpointSchema as En, isDocumentSupportedProvider as Eo, vertexAISchema as Er, FEEDBACK_TAGS as Es, LANGFUSE_TRACE_USER_METADATA_FIELDS as Et, request_default as F, Verbosity as Fa, extractEnvVariable as Fc, mbToBytes as Fi, imageGenTools as Fn, openAIBaseSchema as Fo, MCP_SERVER_TITLE_PATTERN as Fr, CODE_WORKSPACE_ID_PATTERN as Fs, SKILL_SYNC_DEFAULT_DISCOVERY_DEPTH as Ft, PrincipalType as G, coerceNumber as Ga, supportsFiles as Gi, memorySchema as Gn, tConversationTagSchema as Go, AuthorizationTypeEnum as Gr, CONVERSATION_STARTER_FILTER_FIELDS as Gs, SettingsViews as Gt, AccessRoleIds as H, assistantSchema as Ha, retrievalMimeTypesList as Hi, langfuseTraceConfigSchema as Hn, subagentThreadLineageSchema as Ho, isProcessMCPServerConfig as Hr, isCodeWorkspaceSelections as Hs, SearchCategories as Ht, getTokenHeader as I, agentsBaseSchema as Ia, extractVariableName as Ic, megabyte as Ii, initialModelsConfig as In, openAISchema as Io, MCP_USER_INPUT_FIELDS as Ir, CODE_WORKSPACE_MAX_COUNT as Is, SKILL_SYNC_MAX_DISCOVERY_DEPTH as It, accessRoleToPermBits as J, compactAssistantSchema as Ja, REFILL_INTERVAL_UNITS as Ji, modelConfigSchema as Jn, tMessageSchema as Jo, FileSources as Jr, FILE_FILTER_FIELDS as Js, Time as Jt, ResourceType as K, compactAgentsBaseSchema as Ka, textMimeTypes as Ki, messageFilterPiiSchema as Kn, tConvoUpdateSchema as Ko, TokenExchangeMethodEnum as Kr, CONVERSATION_TITLE_FILTER_FIELDS as Ks, SystemCategories as Kt, setAcceptLanguageHeader as L, agentsSchema as La, isSensitiveEnvVar as Lc, mergeFileConfig as Li, interfaceSchema as Ln, openAISettings as Lo, SSEOptionsSchema as Lr, CODE_WORKSPACE_OPERATIONS as Ls, SKILL_SYNC_MAX_INTERVAL_MINUTES as Lt, updateUserKey as M, SkillsScope as Ma, unattributedAssistantContentSchema as Mc, isMessageFileUpload as Mi, getDefaultParamsEndpoint as Mn, isParamEndpoint as Mo, MCPServerUserInputSchema as Mr, toMinimalFeedback as Ms, RateLimitPrefix as Mt, updateUserPlugins as N, ThinkingDisplay as Na, userSubmittedMessageFieldPathSchema as Nc, isPermissiveMimeConfig as Ni, getEndpointField as Nn, isUUID as No, MCPServersSchema as Nr, CODE_ENVIRONMENT_DECISION_VERSION as Ns, RerankerTypes as Nt, updateMessage as O, ReasoningMode as Oa, modelParameterFilterFieldSchema as Oc, inferMimeType as Oi, fileSourceSchema as On, isKnownProviderIdentifier as Oo, visionModels as Or, feedbackSchema as Os, MAX_SUBAGENT_DEPTH as Ot, userKeyQuery as P, ThinkingLevel as Pa, envVarRegex as Pc, isResponsesApiUpload as Pi, getSchemaDefaults as Pn, mediaSupportedProviders as Po, MCP_SERVER_TITLE_ERROR as Pr, CODE_ENVIRONMENT_MODES as Ps, RetentionMode as Pt, permBitsToAccessLevel as Q, documentSupportedProviders as Qa, resolveModelSpecEndpoint as Qi, normalizeServerName as Qn, tPresetSchema as Qo, loginPage as Qr, MAX_PII_CUSTOM_REGEX_CHARACTERS as Qs, allowedAddressesSchema as Qt, setTokenHeader as R, agentsSettings as Ra, normalizeEndpointName as Rc, mimeTypeAliases as Ri, isRemoteOidcUrlAllowed as Rn, openRouterSchema as Ro, StdioOptionsSchema as Rr, CODE_WORKSPACE_SELECTION_ERROR_REASONS as Rs, SKILL_SYNC_MIN_INTERVAL_MINUTES as Rt, requestPasswordReset as S, ImageVisionTool as Sa, getPiiRegexProgramSize as Sc, getConfiguredMimeAccept as Si, defaultEndpoints as Sn, imageDetailValue as So, transactionsSchema as Sr, resolveCodeApprovalMode as Ss, InfiniteCollections as St, revokeUserKey as T, Providers as Ta, hasActivePiiPatterns as Tc, imageExtRegex as Ti, defaultSocialLogins as Tn, isAssistantsEndpoint as To, validateVisionModel as Tr, FEEDBACK_REASON_KEYS as Ts, LANGFUSE_TRACE_USER_ID_FIELDS as Tt, PermissionBits as U, authTypeSchema as Ua, setFileConfigRegexCompiler as Ui, listConfiguredSpeechProviders as Un, tBannerSchema as Uo, isProcessMCPServerField as Ur, ACTION_METADATA_FILTER_FIELDS as Us, SearchProviders as Ut, QueryKeys as V, anthropicSettings as Va, retrievalMimeTypes as Vi, langfuseConfigSchema as Vn, resolveAgentSkillsScope as Vo, hasProcessMCPServerConfig as Vr, isCodeWorkspaceSelectionErrorReason as Vs, ScraperProviders as Vt, PrincipalModel as W, cacheSubsetProviders as Wa, supportedMimeTypes as Wi, mcpRefreshDefaults as Wn, tConversationSchema as Wo, AuthTypeEnum as Wr, AGENT_INSTRUCTION_FILTER_FIELDS as Ws, SettingsTabValues as Wt, getResourcePermissionsResponseSchema as X, defaultAgentFormValues as Xa, materializeModelSpecEndpoints as Xi, normalizeMCPToolKey as Xn, tPluginAuthConfigSchema as Xo, apiBaseUrl as Xr, HITL_MESSAGE_FILTER_FIELDS as Xs, VisionModes as Xt, effectivePermissionsResponseSchema as Y, compactGoogleSchema as Ya, getRefillEligibilityDate as Yi, modularEndpoints as Yn, tModelSpecPresetSchema as Yo, checkOpenAIStorage as Yr, FILTER_PII_STARTER_PATTERNS as Ys, ViolationTypes as Yt, hasPermissions as Z, defaultAssistantFormValues as Za, modelSpecSubagentsSchema as Zi, normalizeSearxngEngines as Zn, tPluginSchema as Zo, buildLoginRedirectUrl as Zr, MAX_PII_CUSTOM_PATTERNS_TOTAL as Zs, agentsEndpointSchema as Zt, getResourcePermissions as _, AuthType as _a, filterPiiActionSchema as _c, excelFileTypes as _i, codeEnvironmentUserSettingsSchema as _n, googleBaseSchema as _o, toolApprovalHookConfigSchema as _r, resolveAllowedStatefulCodeEnvironments as _s, EndpointURLs as _t, data_service_exports as a, MAX_SUBAGENTS_CEILING as aa, MESSAGE_FILTER_FIELDS as ac, bedrockDocumentFormats as ai, azureGroupSchema as an, eReasoningParameterFormatSchema as ao, retainRecentConfigSchema as ar, MessageContentTypes as as, AgentCapabilities as at, register as b, EModelEndpoint as ba, filterPiiStarterPatternSchema as bc, fileConfigSchema as bi, defaultAgentCapabilities as bn, googleSettings as bo, traceViewerDefaults as br, CodeApprovalModeError as bs, ForkOptions as bt, getAccessRoles as c, ComponentTypes as ca, SKILL_FILTER_FIELDS as cc, codeInterpreterMimeTypesList as ci, bedrockEndpointSchema as cn, eThinkingDisplaySchema as co, skillSyncGitHubSourceSchema as cr, Tools as cs, BASE_PRINCIPAL_CONFIG_SECTIONS as ct, getAvailablePlugins as d, clampSettingRange as da, actionMetadataFilterFieldSchema as dc, defaultLLMDeliveryPathSchema as di, buildServerNameAliases as dn, endpointSettings as do, splitToolCallName as dr, agentGitIdentitySchema as ds, CacheKeys as dt, tModelSpecSchema as ea, MAX_PII_PATTERNS_PER_SOURCE as ec, sharedFileDownload as ei, anthropicEndpointSchema as en, eImageDetailSchema as eo, paramDefinitionSchema as er, tSharedLinkSchema as es, principalSchema as et, getConversationById as f, generateDynamicSchema as fa, agentInstructionFilterFieldSchema as fc, defaultOCRMimeTypes as fi, checkpointerSchema as fn, extendedModelEndpointSchema as fo, stripServerNamePrefix as fr, defaultOrderQuery as fs, Capabilities as ft, getModels as g, AnthropicEffort as ga, fileFilterFieldSchema as gc, endpointFileConfigSchema as gi, codeEnvironmentUserConfigSchema as gn, getSettingsKeys as go, supportsBalanceCheck as gr, STATEFUL_CODE_ENVIRONMENTS as gs, EImageOutputType as gt, getMCPServerConnectionStatus as h, validateSettingDefinitions as ha, feedbackFilterFieldSchema as hc, documentParserMimeTypes as hi, codeEnvironmentPermissionDecisionSchema as hn, getModelKey as ho, summarizationTriggerSchema as hr, isActionTool as hs, DEFAULT_MEMORY_MAX_INPUT_TOKENS as ht, createPreset as i, MAX_SUBAGENTS as ia, MEMORY_FILTER_FIELDS as ic, bedrockDocumentExtensions as ii, azureGroupConfigsSchema as in, eReasoningModeSchema as io, resolveTraceViewerConfig as ir, FilePurpose as is, AUTH_USER_DOC_BY_ID_PREFIX as it, updateTokenCount as j, ReasoningSummary as ja, toolArgumentFilterFieldSchema as jc, isBedrockDocumentType as ji, getConfigDefaults as jn, isOpenAILikeProvider as jo, MCPOptionsSchema as jr, getTagsForRating as js, OCRStrategy as jt, updateMessageContent as k, ReasoningParameterFormat as ka, promptFilterFieldSchema as kc, isAnthropicDocumentType as ki, fileStorageSchema as kn, isMediaSupportedProvider as ko, webSearchSchema as kr, feedbackTagKeySchema as ks, MAX_SUBAGENT_GRAPH_NODES as kt, getAgentApiKeys as l, OptionTypes as la, STORED_MESSAGE_FILTER_FIELDS as lc, codeTypeMapping as li, bedrockGuardrailConfigSchema as ln, eThinkingLevelSchema as lo, specialVariables as lr, actionDelimiter as ls, CODE_ENVIRONMENT_COMMAND_TIMEOUT_DEFAULT_MS as lt, getEffectivePermissions as m, generateOpenAISchema as ma, conversationTitleFilterFieldSchema as mc, defaultTextMimeTypes as mi, cloudfrontConfigSchema as mn, getGoogleThinkingBudgetMax as mo, summarizationConfigSchema as mr, hostImageNamePrefix as ms, Constants as mt, clearAllConversations as n, MAX_CHAT_PROJECT_NAME_LENGTH as na, MAX_PII_PATTERN_LABEL_LENGTH as nc, applicationMimeTypes as ni, azureBaseSchema as nn, eReasoningContextSchema as no, rateLimitSchema as nr, AssistantStreamEvents as ns, updateResourcePermissionsRequestSchema as nt, deleteAgentApiKey as o, getMaxSubagents as oa, MODEL_PARAMETER_FILTER_FIELDS as oc, bedrockDocumentMimeTypes as oi, balanceSchema as on, eReasoningResponseKeySchema as oo, setMessageFilterRegexValidator as or, RunStatus as os, AuthKeys as ot, getCustomConfigSpeech as p, generateGoogleSchema as pa, conversationStarterFilterFieldSchema as pc, defaultSTTMimeTypes as pi, checkpointerTypeSchema as pn, getGoogleThinkingBudgetBounds as po, stripServerNamePrefixes as pr, hostImageIdSuffix as ps, CohereConstants as pt, accessRoleSchema as q, compactAgentsSchema as qa, videoMimeTypes as qi, messageFilterSchema as qn, tExampleSchema as qo, FileContext as qr, FEEDBACK_FILTER_FIELDS as qs, TTSProviders as qt, createAgentApiKey as r, MAX_GRAPH_SUBAGENT_MEMBERS as ra, MAX_PII_PATTERN_LENGTH as rc, audioMimeTypes as ri, azureEndpointSchema as rn, eReasoningEffortSchema as ro, resolveEndpointType as rr, EToolResources as rs, updateResourcePermissionsResponseSchema as rt, deletePreset as s, setMaxSubagents as sa, PROMPT_FILTER_FIELDS as sc, codeInterpreterMimeTypes as si, baseEndpointSchema as sn, eReasoningSummarySchema as so, skillSyncConfigSchema as sr, StepStatus as ss, BASE_ONLY_CONFIG_SECTIONS as st, cancelMCPOAuth as t, MAX_CHAT_PROJECT_DESCRIPTION_LENGTH as ta, MAX_PII_PATTERN_ID_LENGTH as tc, DefaultLLMDeliveryPath as ti, assistantEndpointSchema as tn, eModelEndpointSchema as to, providerEndpointMap as tr, AnnotationTypes as ts, resourcePermissionsResponseSchema as tt, getAllEffectivePermissions as u, SettingTypes as ua, TOOL_ARGUMENT_FILTER_FIELDS as uc, convertStringsToRegex as ui, bedrockModels as un, eVerbositySchema as uo, splitMCPToolKey as ur, actionDomainSeparator as us, CODE_ENVIRONMENT_COMMAND_TIMEOUT_HARD_MAX_MS as ut, getSharedLink as v, BedrockProviders as va, filterPiiCustomPatternSchema as vc, excelMimeTypes as vi, configSchema as vn, googleGenConfigSchema as vo, toolApprovalModeSchema as vr, resolveStatefulCodeEnvironment as vs, ErrorTypes as vt, revokeAllUserKeys as w, MemoryScope as wa, hasActivePiiFields as wc, getEndpointFileConfig as wi, defaultRetrievalModels as wn, isAgentsEndpoint as wo, turnstileSchema as wr, FEEDBACK_RATINGS as ws, LANGFUSE_TRACE_CONVERSATION_METADATA_FIELDS as wt, reinitializeMCPServer as x, ImageDetail as xa, filtersConfigSchema as xc, fullMimeTypesList as xi, defaultAssistantsVersion as xn, imageDetailNumeric as xo, traceViewerLimits as xr, getAllowedCodeApprovalModes as xs, ImageDetailCost as xt, getSharedMessages as y, BedrockReasoningConfig as ya, filterPiiRegexSchema as yc, fileConfig as yi, contextPruningSchema as yn, googleSchema as yo, toolApprovalPolicySchema as yr, CODE_APPROVAL_MODES as ys, FetchTokenConfig as yt, DynamicQueryKeys as z, anthropicBaseSchema as za, resolveSandboxFilename as zi, isSecureCodeEnvironmentControlURL as zn, paramEndpoints as zo, StreamableHTTPOptionsSchema as zr, isCodeEnvironmentMode as zs, STTProviders as zt };
+export { permissionEntrySchema as $, Providers as $a, envVarRegex as $c, isResponsesApiUpload as $i, isSpeechProviderConfigured as $n, isAssistantsEndpoint as $o, SSEOptionsSchema as $r, CODE_WORKSPACE_MAX_COUNT as $s, SearchCategories as $t, updateResourcePermissions as A, validateSettingDefinitions as Aa, actionMetadataFilterFieldSchema as Ac, defaultOCRMimeTypes as Ai, codeEnvironmentUserSettingsSchema as An, eReasoningContextSchema as Ao, summarizationTriggerSchema as Ar, Tools as As, FetchTokenConfig as At, MutationKeys as B, DEFAULT_BALANCE_RESERVATION_TTL_MS as Ba, filtersConfigSchema as Bc, getConfiguredMimeAccept as Bi, excludedKeys as Bn, extendedModelEndpointSchema as Bo, validateVisionModel as Br, FEEDBACK_REASON_KEYS as Bs, MAX_SUBAGENT_GRAPH_NODES as Bt, resetPassword as C, ComponentTypes as Ca, MEMORY_FILTER_FIELDS as Cc, bedrockDocumentFormats as Ci, bedrockModels as Cn, compactGoogleSchema as Co, skillSyncGitHubSourceSchema as Cr, tModelSpecPresetSchema as Cs, DEFAULT_AGENT_MODEL_RESPONSE_HEADERS_TIMEOUT_MS as Ct, updateFeedback as D, generateDynamicSchema as Da, SKILL_FILTER_FIELDS as Dc, codeTypeMapping as Di, cloudfrontConfigSchema as Dn, eAnthropicEffortSchema as Do, stripServerNamePrefix as Dr, tQueryParamsSchema as Ds, EImageOutputType as Dt, searchPrincipals as E, clampSettingRange as Ea, PROMPT_FILTER_FIELDS as Ec, codeInterpreterMimeTypesList as Ei, checkpointerTypeSchema as En, documentSupportedProviders as Eo, splitToolCallName as Er, tPresetSchema as Es, DEFAULT_OAUTH_STATE_TTL_MS as Et, request_default as F, MAX_GRAPH_SUBAGENT_MEMBERS as Fa, fileFilterFieldSchema as Fc, excelFileTypes as Fi, defaultEndpoints as Fn, eReasoningSummarySchema as Fo, traceViewerDefaults as Fr, CodeApprovalModeError as Fs, LANGFUSE_TRACE_CONVERSATION_METADATA_FIELDS as Ft, PrincipalType as G, AuthType as Ga, memoryFilterFieldSchema as Gc, imageTypeMapping as Gi, getDefaultParamsEndpoint as Gn, googleBaseSchema as Go, MAX_MCP_ICON_PATH_LENGTH as Gr, getTagByKey as Gs, RetentionMode as Gt, AccessRoleIds as H, REFILL_INTERVAL_UNITS as Ha, hasActiveFiltersConfig as Hc, getEndpointFileConfig as Hi, fileStorageSchema as Hn, getGoogleThinkingBudgetMax as Ho, vertexModelConfigSchema as Hr, feedbackRatingSchema as Hs, OCRStrategy as Ht, getTokenHeader as I, MAX_SUBAGENTS as Ia, filterPiiActionSchema as Ic, excelMimeTypes as Ii, defaultModels as In, eThinkingDisplaySchema as Io, traceViewerLimits as Ir, getAllowedCodeApprovalModes as Is, LANGFUSE_TRACE_USER_ID_FIELDS as It, accessRoleToPermBits as J, EModelEndpoint as Ja, promptFilterFieldSchema as Jc, isAnthropicTextDocumentType as Ji, imageGenTools as Jn, googleSettings as Jo, MCPServerUserInputSchema as Jr, CODE_ENVIRONMENT_DECISION_VERSION as Js, SKILL_SYNC_MAX_INTERVAL_MINUTES as Jt, ResourceType as K, BedrockProviders as Ka, messageFilterFieldSchema as Kc, inferMimeType as Ki, getEndpointField as Kn, googleGenConfigSchema as Ko, MAX_MCP_OAUTH_PERSISTENCE_WAIT_MS as Kr, getTagsForRating as Ks, SKILL_SYNC_DEFAULT_DISCOVERY_DEPTH as Kt, setAcceptLanguageHeader as L, MAX_SUBAGENTS_CEILING as La, filterPiiCustomPatternSchema as Lc, fileConfig as Li, defaultRetrievalModels as Ln, eThinkingLevelSchema as Lo, transactionsSchema as Lr, resolveCodeApprovalMode as Ls, LANGFUSE_TRACE_USER_METADATA_FIELDS as Lt, updateUserKey as M, DEFAULT_RETAINED_ANSWER_TOKENS as Ma, conversationStarterFilterFieldSchema as Mc, defaultTextMimeTypes as Mi, contextPruningSchema as Mn, eReasoningModeSchema as Mo, toolApprovalHookConfigSchema as Mr, actionDomainSeparator as Ms, ImageDetailCost as Mt, updateUserPlugins as N, MAX_CHAT_PROJECT_DESCRIPTION_LENGTH as Na, conversationTitleFilterFieldSchema as Nc, documentParserMimeTypes as Ni, defaultAgentCapabilities as Nn, eReasoningParameterFormatSchema as No, toolApprovalModeSchema as Nr, isActionTool as Ns, InfiniteCollections as Nt, updateMessage as O, generateGoogleSchema as Oa, STORED_MESSAGE_FILTER_FIELDS as Oc, convertStringsToRegex as Oi, codeEnvironmentPermissionDecisionSchema as On, eImageDetailSchema as Oo, stripServerNamePrefixes as Or, tSharedLinkSchema as Os, EndpointURLs as Ot, userKeyQuery as P, MAX_CHAT_PROJECT_NAME_LENGTH as Pa, feedbackFilterFieldSchema as Pc, endpointFileConfigSchema as Pi, defaultAssistantsVersion as Pn, eReasoningResponseKeySchema as Po, toolApprovalPolicySchema as Pr, CODE_APPROVAL_MODES as Ps, KnownEndpoints as Pt, permBitsToAccessLevel as Q, MemoryScope as Qa, userSubmittedMessageFieldPathSchema as Qc, isPermissiveMimeConfig as Qi, isSecureCodeEnvironmentControlURL as Qn, isAgentsEndpoint as Qo, MCP_USER_INPUT_FIELDS as Qr, CODE_WORKSPACE_INSTANCE_TYPES as Qs, ScraperProviders as Qt, setTokenHeader as R, getMaxSubagents as Ra, filterPiiRegexSchema as Rc, fileConfigSchema as Ri, defaultSocialLogins as Rn, eVerbositySchema as Ro, turnstileOptionsSchema as Rr, resolveCodePermissionDecision as Rs, LocalStorageKeys as Rt, requestPasswordReset as S, resolveStatefulCodeEnvironment as Sa, MAX_PII_PATTERN_LENGTH as Sc, bedrockDocumentExtensions as Si, bedrockGuardrailConfigSchema as Sn, compactAssistantSchema as So, skillSyncConfigSchema as Sr, tMessageSchema as Ss, DEFAULT_AGENT_MODEL_RESPONSE_BODY_TIMEOUT_MS as St, revokeUserKey as T, SettingTypes as Ta, MODEL_PARAMETER_FILTER_FIELDS as Tc, codeInterpreterMimeTypes as Ti, checkpointerSchema as Tn, defaultAssistantFormValues as To, splitMCPToolKey as Tr, tPluginSchema as Ts, DEFAULT_MEMORY_MAX_INPUT_TOKENS as Tt, PermissionBits as U, getRefillEligibilityDate as Ua, hasActivePiiFields as Uc, imageExtRegex as Ui, fileStrategiesSchema as Un, getModelKey as Uo, visionModels as Ur, feedbackSchema as Us, RateLimitPrefix as Ut, QueryKeys as V, MIN_BALANCE_RESERVATION_TTL_MS as Va, getPiiRegexProgramSize as Vc, getDocumentFileExtension as Vi, fileSourceSchema as Vn, getGoogleThinkingBudgetBounds as Vo, vertexAISchema as Vr, FEEDBACK_TAGS as Vs, MAX_SUBAGENT_RUN_CONFIGS as Vt, PrincipalModel as W, AnthropicEffort as Wa, hasActivePiiPatterns as Wc, imageMimeTypes as Wi, getConfigDefaults as Wn, getSettingsKeys as Wo, webSearchSchema as Wr, feedbackTagKeySchema as Ws, RerankerTypes as Wt, getResourcePermissionsResponseSchema as X, ImageVisionTool as Xa, toolArgumentFilterFieldSchema as Xc, isExplicitMimeConfig as Xi, interfaceSchema as Xn, imageDetailValue as Xo, MCP_SERVER_TITLE_ERROR as Xr, CODE_ENVIRONMENT_MOVE_VERSION as Xs, STTProviders as Xt, effectivePermissionsResponseSchema as Y, ImageDetail as Ya, skillFilterFieldSchema as Yc, isBedrockDocumentType as Yi, initialModelsConfig as Yn, imageDetailNumeric as Yo, MCPServersSchema as Yr, CODE_ENVIRONMENT_MODES as Ys, SKILL_SYNC_MIN_INTERVAL_MINUTES as Yt, hasPermissions as Z, MYTHOS_CLASS_FAMILIES as Za, unattributedAssistantContentSchema as Zc, isMessageFileUpload as Zi, isRemoteOidcUrlAllowed as Zn, inputTokensIncludesCache as Zo, MCP_SERVER_TITLE_PATTERN as Zr, CODE_WORKSPACE_ID_PATTERN as Zs, SafeSearchTypes as Zt, getResourcePermissions as _, resolveModelSpecEndpoint as _a, MAX_PII_CUSTOM_REGEX_CHARACTERS as _c, sharedFileDownload as _i, azureGroupConfigsSchema as _n, authTypeSchema as _o, rateLimitSchema as _r, tBannerSchema as _s, CODE_ENVIRONMENT_QUEUE_WAIT_DEFAULT_MS as _t, data_service_exports as a, resolveEffectiveUseResponsesApi as aa, isCodeWorkspaceSelectionErrorReason as ac, isProcessMCPServerField as ai, Time as an, ReasoningSummary as ao, messageFilterPiiSchema as ar, isOpenAILikeProvider as as, FilePurpose as at, register as b, STATEFUL_CODE_ENVIRONMENTS as ba, MAX_PII_PATTERN_ID_LENGTH as bc, applicationMimeTypes as bi, baseEndpointSchema as bn, compactAgentsBaseSchema as bo, retainRecentConfigSchema as br, tConvoUpdateSchema as bs, CohereConstants as bt, getAccessRoles as c, retrievalMimeTypes as ca, ACTION_METADATA_FILTER_FIELDS as cc, TokenExchangeMethodEnum as ci, agentsEndpointSchema as cn, ThinkingLevel as co, modularEndpoints as cr, mediaSupportedProviders as cs, AGENT_BACKGROUND_COMPLETION_RESULT_MAX_CHARS_DEFAULT as ct, getAvailablePlugins as d, supportedMimeTypes as da, CONVERSATION_TITLE_FILTER_FIELDS as dc, FileSources as di, anthropicEndpointSchema as dn, agentsSchema as do, normalizeServerName as dr, openAISettings as ds, AgentCapabilities as dt, mbToBytes as ea, CODE_WORKSPACE_OPERATIONS as ec, StdioOptionsSchema as ei, extractEnvVariable as el, SearchProviders as en, ReasoningContext as eo, langfuseConfigSchema as er, isDocumentSupportedProvider as es, principalSchema as et, getConversationById as f, supportsFiles as fa, FEEDBACK_FILTER_FIELDS as fc, checkOpenAIStorage as fi, askUserQuestionConfigSchema as fn, agentsSettings as fo, ocrSchema as fr, openRouterSchema as fs, AuthKeys as ft, getModels as g, modelSpecSubagentsSchema as ga, MAX_PII_CUSTOM_PATTERNS_TOTAL as gc, registerPage as gi, azureEndpointSchema as gn, assistantSchema as go, providerEndpointMap as gr, subagentThreadLineageSchema as gs, CODE_ENVIRONMENT_COMMAND_TIMEOUT_HARD_MAX_MS as gt, getMCPServerConnectionStatus as h, materializeModelSpecEndpoints as ha, HITL_MESSAGE_FILTER_FIELDS as hc, loginPage as hi, azureBaseSchema as hn, anthropicSettings as ho, permissionWriteAttemptsSchema as hr, resolveAgentSkillsScope as hs, CODE_ENVIRONMENT_COMMAND_TIMEOUT_DEFAULT_MS as ht, createPreset as i, prefersResponsesApiByModel as ia, isCodeWorkspaceSelection as ic, isProcessMCPServerConfig as ii, TTSProviders as in, ReasoningResponseKey as io, memorySchema as ir, isMythosClassModel as is, AssistantStreamEvents as it, updateTokenCount as j, DEFAULT_MAX_RETAINED_TOOL_COUNT_CHARS as ja, agentInstructionFilterFieldSchema as jc, defaultSTTMimeTypes as ji, configSchema as jn, eReasoningEffortSchema as jo, supportsBalanceCheck as jr, actionDelimiter as js, ForkOptions as jt, updateMessageContent as k, generateOpenAISchema as ka, TOOL_ARGUMENT_FILTER_FIELDS as kc, defaultLLMDeliveryPathSchema as ki, codeEnvironmentUserConfigSchema as kn, eModelEndpointSchema as ko, summarizationConfigSchema as kr, EToolResources as ks, ErrorTypes as kt, getAgentApiKeys as l, retrievalMimeTypesList as la, AGENT_INSTRUCTION_FILTER_FIELDS as lc, agentGitIdentitySchema as li, allowedAddressesSchema as ln, Verbosity as lo, normalizeMCPToolKey as lr, openAIBaseSchema as ls, AGENT_BACKGROUND_COMPLETION_RESULT_MAX_CHARS_HARD_MAX as lt, getEffectivePermissions as m, videoMimeTypes as ma, FILTER_PII_STARTER_PATTERNS as mc, buildLoginRedirectUrl as mi, assistantEndpointSchema as mn, anthropicSchema as mo, paramDefinitionSchema as mr, removeNullishValues as ms, BASE_PRINCIPAL_CONFIG_SECTIONS as mt, clearAllConversations as n, mergeFileConfig as na, isCodeEnvironmentMode as nc, WebSocketOptionsSchema as ni, isSensitiveEnvVar as nl, SettingsViews as nn, ReasoningMode as no, listConfiguredSpeechProviders as nr, isKnownProviderIdentifier as ns, updateResourcePermissionsRequestSchema as nt, deleteAgentApiKey as o, resolveSandboxFilename as oa, isCodeWorkspaceSelections as oc, AuthTypeEnum as oi, ViolationTypes as on, SkillsScope as oo, messageFilterSchema as or, isParamEndpoint as os, RunStatus as ot, getCustomConfigSpeech as p, textMimeTypes as pa, FILE_FILTER_FIELDS as pc, apiBaseUrl as pi, askUserQuestionRetainedAnswersSchema as pn, anthropicBaseSchema as po, openIdDiscoverySchema as pr, paramEndpoints as ps, BASE_ONLY_CONFIG_SECTIONS as pt, accessRoleSchema as q, BedrockReasoningConfig as qa, modelParameterFilterFieldSchema as qc, isAnthropicDocumentType as qi, getSchemaDefaults as qn, googleSchema as qo, MCPOptionsSchema as qr, toMinimalFeedback as qs, SKILL_SYNC_MAX_DISCOVERY_DEPTH as qt, createAgentApiKey as r, mimeTypeAliases as ra, isCodeWorkspaceEnvironment as rc, hasProcessMCPServerConfig as ri, normalizeEndpointName as rl, SystemCategories as rn, ReasoningParameterFormat as ro, mcpRefreshDefaults as rr, isMediaSupportedProvider as rs, updateResourcePermissionsResponseSchema as rt, deletePreset as s, resolveUseResponsesApi as sa, isRepositoryInstructionDescriptor as sc, AuthorizationTypeEnum as si, VisionModes as sn, ThinkingDisplay as so, modelConfigSchema as sr, isUUID as ss, defaultOrderQuery as st, cancelMCPOAuth as t, megabyte as ta, CODE_WORKSPACE_SELECTION_ERROR_REASONS as tc, StreamableHTTPOptionsSchema as ti, extractVariableName as tl, SettingsTabValues as tn, ReasoningEffort as to, langfuseTraceConfigSchema as tr, isImageVisionTool as ts, resourcePermissionsResponseSchema as tt, getAllEffectivePermissions as u, setFileConfigRegexCompiler as ua, CONVERSATION_STARTER_FILTER_FIELDS as uc, FileContext as ui, alternateName as un, agentsBaseSchema as uo, normalizeSearxngEngines as ur, openAISchema as us, AUTH_USER_DOC_BY_ID_PREFIX as ut, getSharedLink as v, specsConfigSchema as va, MAX_PII_CUSTOM_REGEX_INSTRUCTIONS as vc, DEFAULT_SKILL_IMPORT_CLEANUP_CONCURRENCY as vi, azureGroupSchema as vn, cacheSubsetProviders as vo, resolveEndpointType as vr, tConversationSchema as vs, CacheKeys as vt, revokeAllUserKeys as w, OptionTypes as wa, MESSAGE_FILTER_FIELDS as wc, bedrockDocumentMimeTypes as wi, buildServerNameAliases as wn, defaultAgentFormValues as wo, specialVariables as wr, tPluginAuthConfigSchema as ws, DEFAULT_MAX_PROVIDER_ERROR_CHARS as wt, reinitializeMCPServer as x, resolveAllowedStatefulCodeEnvironments as xa, MAX_PII_PATTERN_LABEL_LENGTH as xc, audioMimeTypes as xi, bedrockEndpointSchema as xn, compactAgentsSchema as xo, setMessageFilterRegexValidator as xr, tExampleSchema as xs, Constants as xt, getSharedMessages as y, tModelSpecSchema as ya, MAX_PII_PATTERNS_PER_SOURCE as yc, DefaultLLMDeliveryPath as yi, balanceSchema as yn, coerceNumber as yo, resolveTraceViewerConfig as yr, tConversationTagSchema as ys, Capabilities as yt, DynamicQueryKeys as z, setMaxSubagents as za, filterPiiStarterPatternSchema as zc, fullMimeTypesList as zi, endpointSchema as zn, endpointSettings as zo, turnstileSchema as zr, FEEDBACK_RATINGS as zs, MAX_SUBAGENT_DEPTH as zt };
 
-//# sourceMappingURL=data-service-Bx6IFaSa.mjs.map
+//# sourceMappingURL=data-service-B-WUVvTH.mjs.map