Danny Avila fb0f9d1764 🔒 fix: Authorize permanent agent uploads without a posted tool resource ... Agent upload auth returned early whenever the request named no tool_resource, which was safe while such an upload was rejected later. Unified mode accepts it and promotes it to a context resource, and the resource write performs no ACL check, so an authenticated user could add persistent context, and the context tool, to any agent by id. Only message attachments, which belong to the conversation rather than the agent, now skip the check.		2026-08-31 10:58:28 -04:00
..
src	🔒 fix: Authorize permanent agent uploads without a posted tool resource	2026-08-31 10:58:28 -04:00
types
.gitignore
babel.config.cjs
jest.config.mjs	🔇 refactor: Quiet Framework Logging in Unit Tests (#15363)	2026-08-30 15:26:30 -04:00
jest.setup.cjs
package.json	📦 chore: bump @librechat/agents to v3.7.10 (#15378)	2026-08-30 19:28:22 -04:00
tsconfig-paths-bootstrap.mjs
tsconfig.build.json
tsconfig.json
tsconfig.spec.json
tsdown.config.mjs