LibreChat/api/server
Danny Avila 7dddc4ef05 fix: judge file consumers where they run, not where they upload
Three related corrections from review, all one theme: upload time cannot
see what will read a file.

Stop refusing an upload for having no consumer on the agent record. A
skill contributes file search or code execution for a turn through its
allowed tools, and those are resolved per turn rather than stored on the
agent, so an empty tool list was never evidence that nothing would read
the file. The list still files an upload under a tool it names; it just
no longer refuses one by its silence. This restores the pre-branch
behavior for those uploads rather than introducing a new outcome.

Warn at boot when a delivery fallback is set to none. The fallback
covers every type no override names, so leaving it unannounced hid a
wider change than any single override could make.

Align the native text matcher with the textual MIME set in the
content-protection code, adding javascript and x-yaml, and normalize
parameters and case before matching so a browser-sent
"text/plain; charset=utf-8" is still recognized.

Drops mimeType from resolveUploadDestination, which no longer reads it.
2026-08-31 23:14:05 -04:00
..
controllers 🧷 fix: Close five gaps where an upload succeeded but reached nothing usable 2026-08-31 20:53:59 -04:00
middleware 🪢 feat: show Langfuse session link in shared chats (#15273) 2026-08-27 14:29:57 -04:00
routes 🧷 fix: Close five gaps where an upload succeeded but reached nothing usable 2026-08-31 20:53:59 -04:00
services fix: judge file consumers where they run, not where they upload 2026-08-31 23:14:05 -04:00
utils 🎟️ refactor: Require Credentials for Local Image Access by Default (#15252) 2026-08-27 09:55:27 -04:00
cleanup.js
csp.spec.js 🔣 fix: Escape SPA Language Attribute (#15248) 2026-08-26 07:37:36 -04:00
experimental.js 🧳 feat: Register Principal-Owned Code Environments (#15365) 2026-08-30 19:33:19 -04:00
experimental.spec.js 🧾 feat: Store Durable Event Actor Receipts (#15265) 2026-08-27 06:00:43 -04:00
index.js 🚦 fix: Refuse uploads nothing can read, and move boot diagnostics into packages/api 2026-08-31 19:58:48 -04:00
index.metrics.spec.js ⏱️ feat: Run Scheduled Chats Through Durable Agent Triggers (#14939) 2026-08-20 11:51:30 -04:00
index.spec.js 🦺 feat: Configurable Baseline HTTP Security Headers (#14445) 2026-08-25 08:21:39 -04:00
socialLogins.js feat: Make OpenID Token Reuse Window Configurable (#13546) 2026-06-06 15:15:58 -04:00
socialLogins.spec.js feat: Make OpenID Token Reuse Window Configurable (#13546) 2026-06-06 15:15:58 -04:00
telemetry.js
telemetry.spec.js