Danny Avila 6a1a67242b 🐛 fix: Provision under JWT code auth + repair stale codeEnvRef re-check ... Lazy code-env provisioning was gated on a loaded LIBRECHAT_CODE_API_KEY, so JWT-auth deployments (which mint bearer tokens via getCodeApiAuthHeaders and need no legacy key) silently never provisioned attachments. The gate now accepts either auth mode and checkSessionsAlive composes X-API-Key with the minted bearer headers. Separately, pre-categorization added every codeEnvRef file to processedResourceFiles before the provisioning loop ran, so the staleness branch was unreachable and expired sandbox refs were never cleared or re-provisioned. Staleness is now repaired ahead of the processed guard, clearing both the legacy ref and its route entry so getCodeEnvRefs cannot resolve the dead session.		2026-08-30 21:37:12 -04:00
..
__tests__	🔒 fix: Refresh MCP OBO Tokens From the Live OpenID Session (#15334)	2026-08-29 23:55:58 -04:00
Agents	🛎️ feat: Wake Agents on Background Tool Completion (#15350)	2026-08-30 08:56:41 -04:00
Artifacts
Config	🧳 feat: Register Principal-Owned Code Environments (#15365)	2026-08-30 19:33:19 -04:00
Endpoints	🐛 fix: Provision under JWT code auth + repair stale codeEnvRef re-check	2026-08-30 21:37:12 -04:00
Files	🐛 fix: Provision under JWT code auth + repair stale codeEnvRef re-check	2026-08-30 21:37:12 -04:00
Runs	🛂 feat: Filter Model-Bound Content by Source (#14425)	2026-08-21 22:43:32 -04:00
Schedules	🗂️ feat: Scope Scheduled Chats to Chat Projects (#15056)	2026-08-21 11:09:04 -04:00
Skills
start
Threads	🧾 fix: Honor Disabled Transactions on the Assistants Usage Path (#15100)	2026-08-25 08:30:12 -04:00
Tools	🔄 fix: Recover Missing MCP Marketplace Catalogs (#15323)	2026-08-30 06:55:30 -04:00
ActionService.js	🕰️ fix: Guard expires_in So a Token Response Cannot Outlive Its Credential (#15321)	2026-08-28 10:47:09 -04:00
ActionService.spec.js	🛂 test: Cover Tool Approval Workflows End to End (#14427)	2026-07-26 21:58:25 -04:00
AssistantService.js	🛂 feat: Filter Model-Bound Content by Source (#14425)	2026-08-21 22:43:32 -04:00
AuthService.js	🔒 fix: Refresh MCP OBO Tokens From the Live OpenID Session (#15334)	2026-08-29 23:55:58 -04:00
AuthService.spec.js	🔒 fix: Refresh MCP OBO Tokens From the Live OpenID Session (#15334)	2026-08-29 23:55:58 -04:00
cleanup.js
createRunBody.js	🛂 feat: Filter Model-Bound Content by Source (#14425)	2026-08-21 22:43:32 -04:00
createRunBody.spec.js	🛂 feat: Filter Model-Bound Content by Source (#14425)	2026-08-21 22:43:32 -04:00
GraphApiService.js	🕰️ fix: Guard expires_in So a Token Response Cannot Outlive Its Credential (#15321)	2026-08-28 10:47:09 -04:00
GraphApiService.spec.js	🔒 fix: Refresh MCP OBO Tokens From the Live OpenID Session (#15334)	2026-08-29 23:55:58 -04:00
GraphTokenService.js
initializeMCPs.js	🔌 feat: Add Agent Plugins (Experimental) (#14704)	2026-08-09 08:10:22 -04:00
initializeMCPs.plugins.spec.js	🔌 feat: Add Agent Plugins (Experimental) (#14704)	2026-08-09 08:10:22 -04:00
initializeMCPs.spec.js	🔌 feat: Add Agent Plugins (Experimental) (#14704)	2026-08-09 08:10:22 -04:00
initializeOAuthReconnectManager.js
MCP.js	🔒 fix: Refresh MCP OBO Tokens From the Live OpenID Session (#15334)	2026-08-29 23:55:58 -04:00
MCP.spec.js	🔒 fix: Refresh MCP OBO Tokens From the Live OpenID Session (#15334)	2026-08-29 23:55:58 -04:00
MCPRequestContext.js
OboPolicyService.js
OboTokenService.js	🔒 fix: Refresh MCP OBO Tokens From the Live OpenID Session (#15334)	2026-08-29 23:55:58 -04:00
OboTokenService.spec.js	🔒 fix: Refresh MCP OBO Tokens From the Live OpenID Session (#15334)	2026-08-29 23:55:58 -04:00
OpenIDRefreshFlight.js	🔒 fix: Refresh MCP OBO Tokens From the Live OpenID Session (#15334)	2026-08-29 23:55:58 -04:00
OpenIDRefreshFlight.spec.js	🔒 fix: Refresh MCP OBO Tokens From the Live OpenID Session (#15334)	2026-08-29 23:55:58 -04:00
OpenIDRefreshRecovery.js	🔒 fix: Refresh MCP OBO Tokens From the Live OpenID Session (#15334)	2026-08-29 23:55:58 -04:00
OpenIDSessionRefresh.js	🔒 fix: Refresh MCP OBO Tokens From the Live OpenID Session (#15334)	2026-08-29 23:55:58 -04:00
OpenIDSessionRefresh.spec.js	🔒 fix: Refresh MCP OBO Tokens From the Live OpenID Session (#15334)	2026-08-29 23:55:58 -04:00
PermissionService.js	⚡ perf: Avoid Parallel Full and Paged Prompt Loading on Startup (#15031)	2026-08-25 21:21:17 -04:00
PermissionService.spec.js	🧳 feat: Register Principal-Owned Code Environments (#15365)	2026-08-30 19:33:19 -04:00
PluginService.js	🕸️ feat: Complete Keenable Web Search Provider (#15288)	2026-08-27 14:29:20 -04:00
PluginService.spec.js	🕸️ feat: Complete Keenable Web Search Provider (#15288)	2026-08-27 14:29:20 -04:00
RefreshTokenBridge.js	🔒 fix: Refresh MCP OBO Tokens From the Live OpenID Session (#15334)	2026-08-29 23:55:58 -04:00
RefreshTokenBridge.spec.js	🔒 fix: Refresh MCP OBO Tokens From the Live OpenID Session (#15334)	2026-08-29 23:55:58 -04:00
systemGrant.spec.js
ToolService.js	🗿 feat: Add Attached Stateful Code Environments (#15352)	2026-08-30 15:38:45 -04:00
twoFactorService.js	🥁 fix: Compare TOTP Codes in Constant Time (#15157)	2026-08-24 09:10:03 -04:00
twoFactorService.spec.js	🥁 fix: Compare TOTP Codes in Constant Time (#15157)	2026-08-24 09:10:03 -04:00