LibreChat/api/server/controllers
Danny Avila 228a45d5dc fix: Address Codex review — tenant context, spend/concurrency caps, run-now safety
- Run engine claim/reconcile in system tenant context (strict tenant isolation
  would otherwise throw on the cross-tenant claim query) [P1]
- Ignore user-supplied scheduleId on non-scheduled chats (scope-claim gate +
  recordRunOutcome no-match guard) to prevent cross-schedule state corruption [P2]
- Treat disabled schedules config (interface.schedules:false / use:false) as a
  hard stop for firing [P2]
- Route reconciled requires_action→complete through recordRunOutcome so resumed
  runs record lastRun/counter bookkeeping [P2]
- Serialize manual run-now via a per-schedule lease; manual runs no longer
  reschedule the next automatic occurrence [P2]
- Mark schedule attachments as used (clear upload TTL) on create/update [P2]
- Cap per-tick fire starts at configured fireConcurrency (was ×4) [P2]
- Start the engine only after server readiness [P2]
- Compensate the per-user limit check-then-insert race by rolling back overflow [P2]
- Gate card write controls on SCHEDULES.CREATE [P3]
- Extend role schema + fixtures for SCHEDULES; +6 method tests
2026-07-21 15:04:41 -04:00
..
__tests__ ⚙️ perf: reduce first-load MongoDB round trips (#14101) 2026-07-06 09:36:34 -04:00
agents fix: Address Codex review — tenant context, spend/concurrency caps, run-now safety 2026-07-21 15:04:41 -04:00
assistants 🙋 feat: ask_user_question - agent-initiated questions with durable pause/resume (#14139) 2026-07-08 15:31:05 -04:00
auth 🚪 fix: Support Admin Redirect Detection for Same-Origin Subpaths (#14040) 2026-07-01 11:40:02 -04:00
AuthController.js feat: Make OpenID Token Reuse Window Configurable (#13546) 2026-06-06 15:15:58 -04:00
AuthController.spec.js feat: Make OpenID Token Reuse Window Configurable (#13546) 2026-06-06 15:15:58 -04:00
Balance.js 🤫 chore: Quiet Repetitive Log Noise from Balance, CloudFront, and Capability Paths (#13461) 2026-06-01 20:40:16 -04:00
Balance.spec.js 🤫 chore: Quiet Repetitive Log Noise from Balance, CloudFront, and Capability Paths (#13461) 2026-06-01 20:40:16 -04:00
EndpointController.js
FavoritesController.js
FavoritesController.spec.js
mcp.js 📉 perf: Skip Redundant Permission Queries on MCP Servers List (#14077) 2026-07-02 11:45:23 -04:00
ModelController.js
PermissionsController.js 🪪 fix: Filter ACL Principal Details (#13524) 2026-06-05 19:06:41 -04:00
PluginController.js 🙋 feat: ask_user_question - agent-initiated questions with durable pause/resume (#14139) 2026-07-08 15:31:05 -04:00
PluginController.spec.js 🙋 feat: ask_user_question - agent-initiated questions with durable pause/resume (#14139) 2026-07-08 15:31:05 -04:00
SkillStatesController.js 🗂️ feat: Add Deployment Skill Directory (#13523) 2026-06-05 10:24:28 -04:00
TokenConfigController.js 🗂️ fix: Scope Token Config Cache (#13770) 2026-06-15 15:25:19 -04:00
tools.js 🧯 fix: Harden Data Retention Semantics (#13049) 2026-05-19 21:58:42 -04:00
TwoFactorController.js
UserController.js ⚙️ perf: reduce first-load MongoDB round trips (#14101) 2026-07-06 09:36:34 -04:00
UserController.spec.js 🕒 feat: Track Terms Acceptance Timestamp (#10810) 2026-06-24 16:26:42 -04:00