feat: extend data retention to files, tool calls, and shared links

Add expiredAt field and TTL indexes to file, toolCall, and share schemas.
Set expiredAt on tool calls, shared links, and file uploads when
retentionMode is "all" or chat is temporary.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

api/server/controllers/tools.js

@@ -1,12 +1,13 @@
 const { nanoid } = require('nanoid');
 const { EnvVar } = require('@librechat/agents');
 const { logger } = require('@librechat/data-schemas');
-const { checkAccess, loadWebSearchAuth } = require('@librechat/api');
+const { checkAccess, loadWebSearchAuth, createTempChatExpirationDate } = require('@librechat/api');
 const {
   Tools,
   AuthType,
   Permissions,
   ToolCallTypes,
+  RetentionMode,
   PermissionTypes,
 } = require('librechat-data-provider');
 const { getRoleByName, createToolCall, getToolCallsByConvo, getMessage } = require('~/models');
@@ -181,6 +182,15 @@ const callTool = async (req, res) => {
       user: req.user.id,
     };
 
+    if (req?.body?.isTemporary || appConfig?.interfaceConfig?.retentionMode === RetentionMode.ALL) {
+      try {
+        toolCallData.expiredAt = createTempChatExpirationDate(appConfig?.interfaceConfig);
+      } catch (err) {
+        logger.error('Error creating tool call expiration date:', err);
+        toolCallData.expiredAt = null;
+      }
+    }
+
     if (!artifact || !artifact.files || toolId !== Tools.execute_code) {
       createToolCall(toolCallData).catch((error) => {
         logger.error(`Error creating tool call: ${error.message}`);

api/server/routes/share.js

@@ -1,6 +1,7 @@
 const express = require('express');
-const { isEnabled } = require('@librechat/api');
+const { isEnabled, createTempChatExpirationDate } = require('@librechat/api');
 const { logger } = require('@librechat/data-schemas');
+const { RetentionMode } = require('librechat-data-provider');
 const {
   getSharedMessages,
   createSharedLink,
@@ -98,7 +99,20 @@ router.get('/link/:conversationId', requireJwtAuth, async (req, res) => {
 router.post('/:conversationId', requireJwtAuth, async (req, res) => {
   try {
     const { targetMessageId } = req.body;
-    const created = await createSharedLink(req.user.id, req.params.conversationId, targetMessageId);
+    let expiredAt;
+    if (req?.config?.interfaceConfig?.retentionMode === RetentionMode.ALL) {
+      try {
+        expiredAt = createTempChatExpirationDate(req.config?.interfaceConfig);
+      } catch (err) {
+        logger.error('Error creating shared link expiration date:', err);
+      }
+    }
+    const created = await createSharedLink(
+      req.user.id,
+      req.params.conversationId,
+      targetMessageId,
+      expiredAt,
+    );
     if (created) {
       res.status(200).json(created);
     } else {
@@ -112,7 +126,15 @@ router.post('/:conversationId', requireJwtAuth, async (req, res) => {
 
 router.patch('/:shareId', requireJwtAuth, async (req, res) => {
   try {
-    const updatedShare = await updateSharedLink(req.user.id, req.params.shareId);
+    let expiredAt;
+    if (req?.config?.interfaceConfig?.retentionMode === RetentionMode.ALL) {
+      try {
+        expiredAt = createTempChatExpirationDate(req.config?.interfaceConfig);
+      } catch (err) {
+        logger.error('Error creating shared link expiration date:', err);
+      }
+    }
+    const updatedShare = await updateSharedLink(req.user.id, req.params.shareId, expiredAt);
     if (updatedShare) {
       res.status(200).json(updatedShare);
     } else {

api/server/services/Files/Code/process.js

@@ -27,6 +27,7 @@ const { filterFilesByAgentAccess } = require('~/server/services/Files/permission
 const { createFile, getFiles, updateFile, claimCodeFile } = require('~/models');
 const { getStrategyFunctions } = require('~/server/services/Files/strategies');
 const { convertImage } = require('~/server/services/Files/images/convert');
+const { getRetentionExpiry } = require('~/server/services/Files/process');
 const { determineFileType } = require('~/server/utils');
 
 const axios = createAxiosInstance();
@@ -182,6 +183,7 @@ const processCodeOutput = async ({
         source: appConfig.fileStrategy,
         context: FileContext.execute_code,
         metadata: { fileIdentifier },
+        ...getRetentionExpiry(req),
       };
       await createFile(file, true);
       return Object.assign(file, { messageId, toolCallId });
@@ -241,6 +243,7 @@ const processCodeOutput = async ({
       context: FileContext.execute_code,
       usage: isUpdate ? (claimed.usage ?? 0) + 1 : 1,
       createdAt: isUpdate ? claimed.createdAt : formattedDate,
+      ...getRetentionExpiry(req),
     };
 
     await createFile(file, true);

api/server/services/Files/process.js

@@ -8,6 +8,7 @@ const {
   FileContext,
   FileSources,
   imageExtRegex,
+  RetentionMode,
   EModelEndpoint,
   EToolResources,
   mergeFileConfig,
@@ -20,7 +21,12 @@ const {
 } = require('librechat-data-provider');
 const { EnvVar } = require('@librechat/agents');
 const { logger } = require('@librechat/data-schemas');
-const { sanitizeFilename, parseText, processAudioFile } = require('@librechat/api');
+const {
+  sanitizeFilename,
+  parseText,
+  processAudioFile,
+  createTempChatExpirationDate,
+} = require('@librechat/api');
 const {
   convertImage,
   resizeAndConvert,
@@ -37,6 +43,23 @@ const { determineFileType } = require('~/server/utils');
 const { STTService } = require('./Audio/STTService');
 const db = require('~/models');
 
+/**
+ * Returns `{ expiredAt }` when the request indicates data retention applies, otherwise `{}`.
+ * Spread into file data objects before calling createFile.
+ * @param {ServerRequest} req
+ * @returns {{ expiredAt?: Date }}
+ */
+function getRetentionExpiry(req) {
+  if (req?.body?.isTemporary || req?.config?.interfaceConfig?.retentionMode === RetentionMode.ALL) {
+    try {
+      return { expiredAt: createTempChatExpirationDate(req.config?.interfaceConfig) };
+    } catch (_err) {
+      return {};
+    }
+  }
+  return {};
+}
+
 /**
  * Creates a modular file upload wrapper that ensures filename sanitization
  * across all storage strategies. This prevents storage-specific implementations
@@ -307,6 +330,7 @@ const processImageFile = async ({ req, res, metadata, returnFile = false }) => {
       context: FileContext.message_attachment,
       source,
       type: `image/${appConfig.imageOutputType}`,
+      ...getRetentionExpiry(req),
       width,
       height,
     },
@@ -359,6 +383,7 @@ const uploadImageBuffer = async ({ req, context, metadata = {}, resize = true })
       source,
       type,
       width,
+      ...getRetentionExpiry(req),
       height,
     },
     true,
@@ -445,6 +470,7 @@ const processFileUpload = async ({ req, res, metadata }) => {
       context: isAssistantUpload ? FileContext.assistants : FileContext.message_attachment,
       model: isAssistantUpload ? req.body.model : undefined,
       type: file.mimetype,
+      ...getRetentionExpiry(req),
       embedded,
       source,
       height,
@@ -541,6 +567,7 @@ const processAgentFileUpload = async ({ req, res, metadata }) => {
         filename: file.originalname,
         model: messageAttachment ? undefined : req.body.model,
         context: messageAttachment ? FileContext.message_attachment : FileContext.agents,
+        ...getRetentionExpiry(req),
       });
 
       if (!messageAttachment && tool_resource) {
@@ -717,6 +744,7 @@ const processAgentFileUpload = async ({ req, res, metadata }) => {
     source,
     height,
     width,
+    ...getRetentionExpiry(req),
   });
 
   const result = await db.createFile(fileInfo, true);
@@ -762,6 +790,7 @@ const processOpenAIFile = async ({
     source,
     model: openai.req.body.model,
     filename: originalName ?? file_id,
+    ...getRetentionExpiry(openai.req),
   };
 
   if (saveFile) {
@@ -805,6 +834,7 @@ const processOpenAIImageOutput = async ({ req, buffer, file_id, filename, fileEx
     context: FileContext.assistants_output,
     file_id,
     filename,
+    ...getRetentionExpiry(req),
   };
   db.createFile(file, true);
   return file;
@@ -961,6 +991,7 @@ async function saveBase64Image(
       user: req.user.id,
       bytes: image.bytes,
       width: image.width,
+      ...getRetentionExpiry(req),
       height: image.height,
     },
     true,
@@ -1047,6 +1078,7 @@ function filterFile({ req, image, isAvatar }) {
 
 module.exports = {
   filterFile,
+  getRetentionExpiry,
   processFileURL,
   saveBase64Image,
   processImageFile,