LibreChat/api/server
Danny Avila 460a42f38d 🐛 fix: Provision through the resolved code route and fail loudly when search cannot
Four gaps, all in code this PR introduced.

The OpenAI-compatible controllers wired the provisioning callback but not the
query that fills its queue, so deferred discovery was skipped on those API paths
and later code or search calls ran without earlier attachments.

Provisioning also hard-coded the default Code API. An agent using a configured
stateful environment had its file uploaded to the wrong deployment and
re-uploaded by priming, and a deployment whose only healthy Code API is the
stateful one could not provision at all. The resolved route now flows through
the upload and is recorded in the reference key.

Deferred candidates skipped endpoint filtering: a file the endpoint refuses by
size, MIME type, or a files-disabled setting could still reach the Code API or
RAG through provisioning after being removed from delivery. The same filter now
governs both paths.

A missing RAG_API_URL reported a benign non-embed, so the queue cleared and
file_search ran as though its input were present. It is a provisioning failure
now, and vector failures abort the turn like code failures do. An earlier commit
argued search only narrows results; that was wrong, since a search silently
omitting the file the user asked about is a wrong answer rather than a smaller
one.
2026-08-31 16:07:51 -04:00
..
controllers 🐛 fix: Provision through the resolved code route and fail loudly when search cannot 2026-08-31 16:07:51 -04:00
middleware 🪢 feat: show Langfuse session link in shared chats (#15273) 2026-08-27 14:29:57 -04:00
routes 🧪 test: Assert denial for permanent agent uploads without permission 2026-08-31 11:06:12 -04:00
services 🏗️ refactor: Move provisioning into the TypeScript workspace 2026-08-31 15:20:54 -04:00
utils 🎟️ refactor: Require Credentials for Local Image Access by Default (#15252) 2026-08-27 09:55:27 -04:00
cleanup.js
csp.spec.js 🔣 fix: Escape SPA Language Attribute (#15248) 2026-08-26 07:37:36 -04:00
experimental.js 🧳 feat: Register Principal-Owned Code Environments (#15365) 2026-08-30 19:33:19 -04:00
experimental.spec.js 🧾 feat: Store Durable Event Actor Receipts (#15265) 2026-08-27 06:00:43 -04:00
index.js 🔧 feat: Unified file upload — per-mime-type routing with lazy provisioning 2026-08-30 20:12:09 -04:00
index.metrics.spec.js ⏱️ feat: Run Scheduled Chats Through Durable Agent Triggers (#14939) 2026-08-20 11:51:30 -04:00
index.spec.js 🦺 feat: Configurable Baseline HTTP Security Headers (#14445) 2026-08-25 08:21:39 -04:00
socialLogins.js feat: Make OpenID Token Reuse Window Configurable (#13546) 2026-06-06 15:15:58 -04:00
socialLogins.spec.js feat: Make OpenID Token Reuse Window Configurable (#13546) 2026-06-06 15:15:58 -04:00
telemetry.js
telemetry.spec.js