🛶 chore: Bring Canary Up to Date With Dev

.github/CONTRIBUTING.md

@@ -4,7 +4,7 @@ Thank you to all the contributors who have helped make this project possible! We
 
 ## Contributing Guidelines
 
-If the feature you would like to contribute has not already received prior approval from the project maintainers (i.e., the feature is currently on the [roadmap](https://github.com/users/danny-avila/projects/2)), please submit a request in the [Feature Requests & Suggestions category](https://github.com/danny-avila/LibreChat/discussions/new?category=feature-requests-suggestions) of the discussions board before beginning work on it. The requests should include specific implementation details, including areas of the application that will be affected by the change (including designs if applicable), and any other relevant information that might be required for a speedy review. However, proposals are not required for small changes, bug fixes, or documentation improvements. Small changes and bug fixes should be tied to an [issue](https://github.com/danny-avila/LibreChat/issues) and included in the corresponding pull request for tracking purposes.
+If the feature you would like to contribute has not already received prior approval from the project maintainers (i.e., the feature is currently on the [roadmap](https://github.com/users/danny-avila/projects/2)), please submit a request in the [Feature Requests & Suggestions category](https://github.com/LibreChat-AI/LibreChat/discussions/new?category=feature-requests-suggestions) of the discussions board before beginning work on it. The requests should include specific implementation details, including areas of the application that will be affected by the change (including designs if applicable), and any other relevant information that might be required for a speedy review. However, proposals are not required for small changes, bug fixes, or documentation improvements. Small changes and bug fixes should be tied to an [issue](https://github.com/LibreChat-AI/LibreChat/issues) and included in the corresponding pull request for tracking purposes.
 
 Please note that a pull request involving a feature that has not been reviewed and approved by the project maintainers may be rejected. We appreciate your understanding and cooperation.
 
@@ -26,7 +26,7 @@ A pull request that appears unannounced, with no issue, no assignment and no pri
 
 **The one exception is a novel P0/P1 defect**: data loss, a broken release, a crash, or a regression with no workaround, that nobody has reported yet. Open it, and put the impact and the reproduction in the first paragraph. Novel is the operative word. A patch for something already reported, already assigned, or already fixed on `dev` is not an exception, and neither is a cosmetic or speculative change dressed up as urgent.
 
-**Security is never an exception.** Do not open a pull request, an issue, or a public message that describes a vulnerability, even a critical one, and even with a fix attached. A pull request is a public disclosure that explains the attack and points at the affected code. Report it through LibreChat's [private vulnerability reporting form](https://github.com/danny-avila/LibreChat/security/advisories/new) and we will open a private channel and coordinate the fix and its release there. See [SECURITY.md](./SECURITY.md).
+**Security is never an exception.** Do not open a pull request, an issue, or a public message that describes a vulnerability, even a critical one, and even with a fix attached. A pull request is a public disclosure that explains the attack and points at the affected code. Report it through LibreChat's [private vulnerability reporting form](https://github.com/LibreChat-AI/LibreChat/security/advisories/new) and we will open a private channel and coordinate the fix and its release there. See [SECURITY.md](./SECURITY.md).
 
 ### Pull requests generated from issues
 
@@ -82,7 +82,7 @@ Project maintainers have the right and responsibility to remove, edit, or reject
 
 1. Before starting work, sync `dev` from this repository. You are working in a fork, so `origin` is
    your fork — add the canonical remote once and sync from it:
-    - `git remote add upstream https://github.com/danny-avila/LibreChat.git`
+    - `git remote add upstream https://github.com/LibreChat-AI/LibreChat.git`
     - `git fetch upstream dev && git checkout -B dev upstream/dev`
     - `npm run update` is the self-host deployment updater — it checks out `main` and rebuilds your
       containers. Do not use it to refresh a development branch.

.github/ISSUE_TEMPLATE/BUG-REPORT.yml

@@ -9,8 +9,8 @@ body:
         Thanks for taking the time to fill out this bug report!
         
         Before submitting, please:
-        - Search existing [Issues and Discussions](https://github.com/danny-avila/LibreChat/discussions) to see if your bug has already been reported
-        - Use [Discussions](https://github.com/danny-avila/LibreChat/discussions) instead of Issues for:
+        - Search existing [Issues and Discussions](https://github.com/LibreChat-AI/LibreChat/discussions) to see if your bug has already been reported
+        - Use [Discussions](https://github.com/LibreChat-AI/LibreChat/discussions) instead of Issues for:
           - General inquiries
           - Help with setup
           - Questions about whether you're experiencing a bug
@@ -87,7 +87,7 @@ body:
     id: terms
     attributes:
       label: Code of Conduct
-      description: By submitting this issue, you agree to follow our [Code of Conduct](https://github.com/danny-avila/LibreChat/blob/main/.github/CODE_OF_CONDUCT.md)
+      description: By submitting this issue, you agree to follow our [Code of Conduct](https://github.com/LibreChat-AI/LibreChat/blob/main/.github/CODE_OF_CONDUCT.md)
       options:
         - label: I agree to follow this project's Code of Conduct
           required: true

.github/ISSUE_TEMPLATE/FEATURE-REQUEST.yml

@@ -43,7 +43,7 @@ body:
     id: terms
     attributes:
       label: Code of Conduct
-      description: By submitting this issue, you agree to follow our [Code of Conduct](https://github.com/danny-avila/LibreChat/blob/main/.github/CODE_OF_CONDUCT.md)
+      description: By submitting this issue, you agree to follow our [Code of Conduct](https://github.com/LibreChat-AI/LibreChat/blob/main/.github/CODE_OF_CONDUCT.md)
       options:
         - label: I agree to follow this project's Code of Conduct
           required: true

.github/ISSUE_TEMPLATE/NEW-LANGUAGE-REQUEST.yml

@@ -27,7 +27,7 @@ body:
     id: terms
     attributes:
       label: Code of Conduct
-      description: By submitting this issue, you agree to follow our [Code of Conduct](https://github.com/danny-avila/LibreChat/blob/main/.github/CODE_OF_CONDUCT.md).
+      description: By submitting this issue, you agree to follow our [Code of Conduct](https://github.com/LibreChat-AI/LibreChat/blob/main/.github/CODE_OF_CONDUCT.md).
       options:
         - label: I agree to follow this project's Code of Conduct
           required: true

.github/SECURITY.md

@@ -8,7 +8,7 @@ At LibreChat, we prioritize the security of our project and value the contributi
 
 When reporting a security vulnerability, you have the following options to reach out to us:
 
-- **Option 1: GitHub Private Vulnerability Reporting**: Submit sensitive vulnerability details through LibreChat's [private vulnerability reporting form](https://github.com/danny-avila/LibreChat/security/advisories/new). This sends the report confidentially to the project maintainers.
+- **Option 1: GitHub Private Vulnerability Reporting**: Submit sensitive vulnerability details through LibreChat's [private vulnerability reporting form](https://github.com/LibreChat-AI/LibreChat/security/advisories/new). This sends the report confidentially to the project maintainers.
 
 - **Option 2: GitHub Issues**: You can initiate first contact via GitHub Issues. However, please note that initial contact through GitHub Issues should not include any sensitive details.
 
@@ -43,7 +43,7 @@ This security policy applies to the following GitHub repository:
 
 ## Contact
 
-If you have any questions or concerns regarding the security of our project, please join our [Discord community](https://discord.librechat.ai) and report them in the appropriate channel. You can also reach out to us by [opening an issue](https://github.com/danny-avila/LibreChat/issues/new) on GitHub. Please note that the response time may vary depending on the nature and severity of the inquiry.
+If you have any questions or concerns regarding the security of our project, please join our [Discord community](https://discord.librechat.ai) and report them in the appropriate channel. You can also reach out to us by [opening an issue](https://github.com/LibreChat-AI/LibreChat/issues/new) on GitHub. Please note that the response time may vary depending on the nature and severity of the inquiry.
 
 ## Acknowledgments
 

.github/pull_request_template.md

@@ -1,6 +1,6 @@
 # Pull Request
 
-> Before submitting, please review the [Contributing Guide](https://github.com/danny-avila/LibreChat/blob/main/.github/CONTRIBUTING.md).
+> Before submitting, please review the [Contributing Guide](https://github.com/LibreChat-AI/LibreChat/blob/main/.github/CONTRIBUTING.md).
 >
 > Documentation changes belong in the [LibreChat documentation repository](https://github.com/LibreChat-AI/librechat.ai).
 
@@ -26,7 +26,7 @@ introduced a regression is the exception: that is history the reader needs.
 Link related issues, and name any dependency this change needs:
 Fixes #123
 Related to #123
-Depends on danny-avila/agents#123
+Depends on LibreChat-AI/agents#123
 -->
 
 ## How it works

.github/scripts/playwright-matrix.test.mjs

@@ -0,0 +1,211 @@
+import yaml from 'js-yaml';
+import { test } from 'node:test';
+import { join } from 'node:path';
+import assert from 'node:assert/strict';
+import { fileURLToPath } from 'node:url';
+import { spawnSync } from 'node:child_process';
+import { mkdtempSync, readFileSync, rmSync, writeFileSync } from 'node:fs';
+
+const scriptsDir = fileURLToPath(new URL('.', import.meta.url));
+const workflow = yaml.load(
+  readFileSync(new URL('../workflows/playwright-mock.yml', import.meta.url), 'utf8'),
+);
+const selector = workflow.jobs.codegraph_select.steps.find((step) => step.id === 'sel');
+const shards = workflow.jobs.e2e_shards;
+const defaults = [...shards.strategy.matrix.matchAll(/fromJSON\('([^']+)'\)/g)].map((match) =>
+  JSON.parse(match[1]),
+);
+const prMatrix = JSON.parse(selector.env.FULL_INCLUDE);
+
+function assertPartition(matrix, store, suite, count) {
+  const lanes = matrix.include.filter(
+    (lane) => lane.stream_store === store && lane.suite === suite,
+  );
+  assert.equal(lanes.length, count);
+  assert.deepEqual(
+    lanes.map((lane) => lane.shard),
+    Array.from({ length: count }, (_, index) => `${index + 1}/${count}`),
+  );
+  assert.ok(
+    lanes.every((lane) => lane.redis_image === (store === 'redis' ? 'redis:7-alpine' : '')),
+  );
+}
+
+function select(t, response, overrides = {}) {
+  const scratch = mkdtempSync(join(scriptsDir, '.playwright-matrix-test-'));
+  t.after(() => rmSync(scratch, { recursive: true, force: true }));
+  writeFileSync(join(scratch, 'response.json'), JSON.stringify(response));
+  writeFileSync(join(scratch, 'output'), '');
+  writeFileSync(join(scratch, 'selector.sh'), selector.run);
+  writeFileSync(
+    join(scratch, 'gh'),
+    '#!/usr/bin/env bash\nprintf \'%s\\n\' \'{"path":"client/src/example.ts","status":"modified"}\'\nexit "${GH_EXIT:-0}"\n',
+    { mode: 0o700 },
+  );
+  writeFileSync(
+    join(scratch, 'curl'),
+    '#!/usr/bin/env bash\ncat response.json\nexit "${CURL_EXIT:-0}"\n',
+    { mode: 0o700 },
+  );
+  const result = spawnSync('bash', ['selector.sh'], {
+    cwd: scratch,
+    encoding: 'utf8',
+    timeout: 10000,
+    env: {
+      PATH: `${scratch}:${process.env.PATH}`,
+      FULL_INCLUDE: selector.env.FULL_INCLUDE,
+      URL: 'https://selector.invalid',
+      TOKEN: 'test-fixture',
+      REPO: 'fixture/repo',
+      PR: '1',
+      BASE_SHA: 'base',
+      HEAD_SHA: 'head',
+      CHANGED: '1',
+      E2E_SKIP_ARMED: '',
+      GITHUB_OUTPUT: join(scratch, 'output'),
+      GITHUB_STEP_SUMMARY: join(scratch, 'summary'),
+      ...overrides,
+    },
+  });
+  assert.equal(result.status, 0, result.stdout + result.stderr);
+  const outputs = Object.fromEntries(
+    readFileSync(join(scratch, 'output'), 'utf8')
+      .trim()
+      .split('\n')
+      .filter(Boolean)
+      .map((line) => {
+        const separator = line.indexOf('=');
+        return [line.slice(0, separator), line.slice(separator + 1)];
+      }),
+  );
+  return { outputs, matrix: outputs.e2e_include ? JSON.parse(outputs.e2e_include) : defaults[0] };
+}
+
+function decision(redis, mcp = true) {
+  return { matrix: { 'playwright-mock': { redis_transport: redis, mcp_tool_list_changed: mcp } } };
+}
+
+test('PR selection and fail-open defaults use six memory shards and two Redis transport shards', () => {
+  assert.equal(defaults.length, 2);
+  assert.deepEqual(defaults[0], prMatrix);
+  assert.equal(prMatrix.include.length, 8);
+  assertPartition(prMatrix, 'memory', 'full', 6);
+  assertPartition(prMatrix, 'redis', 'transport', 2);
+});
+
+test('nightly and default manual runs retain full-suite coverage on both stores', () => {
+  assert.equal(workflow.on.workflow_dispatch.inputs.coverage.default, 'full');
+  assert.equal(defaults[1].include.length, 4);
+  assertPartition(defaults[1], 'memory', 'full', 2);
+  assertPartition(defaults[1], 'redis', 'full', 2);
+});
+
+test('PR and nightly matrices preserve both registered-email change modes on one memory shard', () => {
+  for (const matrix of [prMatrix, ...defaults]) {
+    const emailLanes = matrix.include.filter((lane) => lane.email_change === 'true');
+    assert.equal(emailLanes.length, 1);
+    assert.equal(emailLanes[0].stream_store, 'memory');
+    assert.match(emailLanes[0].shard, /^1\//);
+  }
+  assert.equal(shards.steps.filter((step) => step.if === "matrix.email_change == 'true'").length, 2);
+});
+
+test('manual PR coverage opts into the PR fallback matrix without bypassing the PR author gate', () => {
+  assert.deepEqual(workflow.on.workflow_dispatch.inputs.coverage.options, ['full', 'pr']);
+  assert.match(
+    shards.strategy.matrix,
+    /github\.event_name == 'pull_request' \|\| inputs\.coverage == 'pr'/,
+  );
+  assert.match(shards.if, /github\.event_name == 'workflow_dispatch'/);
+  assert.match(shards.if, /github\.event\.pull_request\.author_association/);
+});
+
+test('every shard has a unique job name and artifact namespace', () => {
+  for (const matrix of [prMatrix, ...defaults]) {
+    for (const key of ['name', 'artifact']) {
+      assert.equal(new Set(matrix.include.map((lane) => lane[key])).size, matrix.include.length);
+    }
+  }
+});
+
+test('both suite commands consume the matrix shard without increasing worker concurrency', () => {
+  for (const suite of ['full', 'transport']) {
+    const step = shards.steps.find((entry) => entry.if === `matrix.suite == '${suite}'`);
+    assert.match(step.run, /--shard=\$\{\{ matrix\.shard \}\}/);
+    assert.doesNotMatch(step.run, /--workers/);
+  }
+  const config = readFileSync(
+    new URL('../../e2e/playwright.config.mock.ts', import.meta.url),
+    'utf8',
+  );
+  assert.match(config, /workers: 1,/);
+  assert.equal(shards['runs-on'], 'ubuntu-latest');
+});
+
+test('an explicit Redis skip drops both transport shards and no memory shard', (t) => {
+  const { matrix, outputs } = select(t, decision(false, false));
+  assert.equal(outputs.decided, 'true');
+  assert.equal(outputs.mcp_run, 'false');
+  assert.equal(matrix.include.length, 6);
+  assertPartition(matrix, 'memory', 'full', 6);
+});
+
+test('missing or non-boolean Redis decisions retain both transport shards', (t) => {
+  for (const redis of [true, 'false', null, undefined]) {
+    const { matrix } = select(t, decision(redis));
+    assert.deepEqual(matrix, prMatrix);
+    assertPartition(matrix, 'redis', 'transport', 2);
+  }
+});
+
+test('unavailable configuration, failed requests, and incomplete file lists fall back to the full PR matrix', (t) => {
+  for (const overrides of [
+    { URL: '' },
+    { TOKEN: '' },
+    { CURL_EXIT: '28' },
+    { GH_EXIT: '1' },
+    { CHANGED: '2' },
+  ]) {
+    const { matrix, outputs } = select(t, decision(false, false), overrides);
+    assert.equal(outputs.e2e_include, undefined);
+    assert.equal(outputs.mcp_run, undefined);
+    assert.deepEqual(matrix, prMatrix);
+  }
+  const { matrix, outputs } = select(t, {});
+  assert.equal(outputs.e2e_include, undefined);
+  assert.deepEqual(matrix, prMatrix);
+});
+
+test('graduated spec skips keep the same pool across shards and remain opt-in', (t) => {
+  const response = {
+    ...decision(true),
+    e2e: { fail_open: false, graduated: ['e2e/specs/mock/sidebar.spec.ts'] },
+  };
+  const dark = select(t, response);
+  assert.equal(dark.outputs.e2e_skip, '');
+  const armed = select(t, response, { E2E_SKIP_ARMED: 'on' });
+  assert.equal(armed.outputs.e2e_skip, 'specs/mock/sidebar.spec.ts');
+  assert.deepEqual(armed.matrix, prMatrix);
+  const fallback = select(
+    t,
+    { ...response, e2e: { ...response.e2e, fail_open: true } },
+    { E2E_SKIP_ARMED: 'on' },
+  );
+  assert.equal(fallback.outputs.e2e_skip, '');
+  assert.deepEqual(fallback.matrix, prMatrix);
+});
+
+test('the required gate still waits for all shards and rejects failures without fighting cancellation', () => {
+  const gate = workflow.jobs.e2e;
+  assert.equal(gate.name, 'e2e');
+  assert.deepEqual(gate.needs, ['codegraph_select', 'e2e_shards', 'mcp_tool_list_changed', 'mcp_apps']);
+  assert.equal(shards.strategy['fail-fast'], false);
+  assert.match(gate.if, /!cancelled\(\)/);
+  assert.match(shards.if, /!cancelled\(\)/);
+  assert.match(gate.steps[0].if, /needs\.e2e_shards\.result != 'success'/);
+  assert.match(gate.steps[0].if, /needs\.mcp_apps\.result != 'success'/);
+  assert.match(gate.steps[0].if, /needs\.mcp_tool_list_changed\.result != 'success'/);
+  assert.match(gate.steps[0].if, /needs\.codegraph_select\.outputs\.mcp_run == 'false'/);
+  assert.equal(gate.steps[0].run, 'exit 1');
+  assert.equal(workflow.concurrency['cancel-in-progress'], true);
+});

.github/scripts/retarget-prs.sh

@@ -100,6 +100,14 @@ for number in "$@"; do
     continue
   fi
 
+  # Canary is an intentional integration target. Keep it untouched even if a caller passes
+  # its number to the sweep or overrides RELEASE_BASE, TARGET_BASE or EXPLAIN_MISSING.
+  if [ "$base_ref" = "canary" ]; then
+    echo "#$number: skipped — canary is an explicit target"
+    skipped=$((skipped + 1))
+    continue
+  fi
+
   if [ "$base_ref" = "$TARGET_BASE" ] && [ "$EXPLAIN_MISSING" = "true" ] && [ "$DRY_RUN" != "true" ]; then
     echo "#$number: already on $TARGET_BASE — posting any missing explanation"
     post_explanation "$number"