LibreChat/api/server/services/Files/Code/preflight.js
Danny Avila 67b7b441b2
🛂 feat: Filter Model-Bound Content by Source (#14425)
* feat: introduce optional content protection seam

* feat: enforce source-aware content filters

* feat: complete source-aware content enforcement

* test: activate skill file-text fail-close fixtures

* fix: harden source-aware content filters

* fix: harden model-bound content filtering

* fix: preserve legacy filters and generated files

* fix: inspect shared scalar metadata

* test: align mocks with current dev dependencies

* feat: add persisted content filter safeguards

* feat: complete source-aware content filter enforcement

* fix: move resume content preflight into TypeScript

* fix: close content inspection edge cases

* fix: harden content protection boundaries

* fix: complete content protection safeguards

* test: align persisted memory filter coverage

* fix: reconcile content protection with current dev

* fix: reconcile content protection with latest dev

* fix: close content protection review gaps

* fix: enforce source-aware provider boundaries

* fix: preserve legacy PII preflight semantics

* test: stabilize stored branch preflight fixture

* fix: defer agent writes until protected model admission

* perf: harden source-aware model-bound filtering

* fix: canonicalize provider lineage before validation

* fix: satisfy model-bound callback type checks

* perf: Bound content protection filtering work

* fix: Bound submission array traversal

* fix: Stabilize bounded content snapshots

* fix: Scope model-bound traversal overflows

* fix: Preserve scoped content inspection

* fix: Accumulate aggregate traversal scopes

* fix: centralize content policy boundaries

* test: align deferred tool policy context

* test: align controller policy mocks

* style: normalize content protection imports

* fix: close content policy review gaps

* fix: narrow active skill policy config

* fix: address content protection review boundaries

* fix: retain exact provenance overflow sentinel

* fix: preserve literal and scoped provenance updates

* fix: narrow persisted edit provenance

* fix: isolate exact overflow attribution

* fix: centralize stored prompt protection

* fix: fail closed on incomplete transcript evidence

* fix: align canonical transcript routing

* refactor: centralize content policy preflights

* fix: isolate upload policy error typing

* style: sort policy preflight imports

* refactor: centralize content policy boundaries
2026-08-21 22:43:32 -04:00

48 lines
1.6 KiB
JavaScript

const { logger } = require('@librechat/data-schemas');
const { preflightCodeOutputBatch: runCodeOutputBatchPreflight } = require('@librechat/api');
const {
EModelEndpoint,
mergeFileConfig,
getEndpointFileConfig,
} = require('librechat-data-provider');
const { prepareCodeOutputForInspection } = require('./process');
const preflightCodeOutputBatch = async ({ req, artifact, codeExecutionContext }) => {
const mergedFileConfig = mergeFileConfig(req.config?.fileConfig);
const endpointFileConfig = getEndpointFileConfig({
fileConfig: mergedFileConfig,
endpoint: EModelEndpoint.agents,
});
return await runCodeOutputBatchPreflight({
filters: req.config?.filters,
artifact,
limits: {
fileLimit: endpointFileConfig.fileLimit,
fileSizeLimit: endpointFileConfig.fileSizeLimit ?? mergedFileConfig.serverFileSizeLimit,
totalSizeLimit:
endpointFileConfig.totalSizeLimit ??
endpointFileConfig.fileSizeLimit ??
mergedFileConfig.serverFileSizeLimit,
},
prepare: ({ file, sessionId, maxBytes, inspectContent }) =>
prepareCodeOutputForInspection({
req,
id: file.id,
name: file.name,
session_id: sessionId,
maxBytes,
inspectContent,
codeApiBaseUrl: codeExecutionContext?.baseUrl,
executionProfile: codeExecutionContext?.executionProfile,
}),
onInspectionUnavailable: (index) => {
logger.warn(
`[preflightCodeOutputBatch] Generated artifact ${index + 1} could not be inspected`,
);
},
});
};
module.exports = {
preflightCodeOutputBatch,
};