mirror of
https://github.com/danny-avila/LibreChat.git
synced 2026-09-08 15:41:38 +00:00
Code outputs are recorded with kind: 'user' at generation time, but the provisioning scope predicate treated any context other than message_attachment as agent-scoped. An expired artifact re-provisioned on a later turn was therefore uploaded into the agent's shared sandbox, exposing one user's private conversation artifact to every user of a shared agent. Both the provisioning writer and the tool-resource reconstruction now share one predicate that treats execute_code outputs as user-scoped alongside chat attachments. |
||
|---|---|---|
| .. | ||
| controllers | ||
| middleware | ||
| routes | ||
| services | ||
| utils | ||
| cleanup.js | ||
| csp.spec.js | ||
| experimental.js | ||
| experimental.spec.js | ||
| index.js | ||
| index.metrics.spec.js | ||
| index.spec.js | ||
| socialLogins.js | ||
| socialLogins.spec.js | ||
| telemetry.js | ||
| telemetry.spec.js | ||