File download error

[fes323]

Hi! LibreChat v0.8.4, code interpreter from the main branch. Everything was successfully launched locally, but I couldn't download the file from the chat.

Log api:

{"authContextUserId":"local-test-user","level":"error","message":"failed to resolve SessionKey (sessionAuth: parseUploadSessionKeyInput) type must be one of the following: skill, agent, user","method":"GET","path":"/download/VRu_iRoeHvHwjKB1lhsZO/9yv5UN1bKW2ADGtLMgwL9","requestUserId":"local-test-user","service":"service-api","status":400,"tenantId":"local","timestamp":"2026-07-21T09:09:37.258Z"}

The file is in the test-bucket and is available for download from the MinIO panel, but it is not downloading from the chat. What have I missed?

Full log api:

{"apiKeyId":"local-test-key","files":{"agentCount":0,"count":0,"skillCount":0,"userCount":0},"language":"py","level":"info","message":"Request received","service":"service-api","sessionKey":"local:user:local-test-user","session_id":"SLPRHUQrnYGThx1YSkK4W","timestamp":"2026-07-21T08:44:52.785Z","user":"69c647b7372972602d099858","userId":"local-test-user"}

{"level":"info","message":"Execution completed","service":"service-api","session_id":"SLPRHUQrnYGThx1YSkK4W","timestamp":"2026-07-21T08:44:54.758Z","user_id":"69c647b7372972602d099858"}

{"authContextUserId":"local-test-user","level":"error","message":"sessionKey resolution failed (sessionAuth: parseUploadSessionKeyInput) kind must be one of: skill, agent, user","method":"GET","path":"/download/SLPRHUQrnYGThx1YSkK4W/PrQ9KAAdH_Jgz5KduTBNj","requestUserId":"local-test-user","service":"service-api","status":400,"tenantId":"local","timestamp":"2026-07-21T08:44:54.881Z"}

{"authContextUserId":"local-test-user","level":"error","message":"sessionKey resolution failed (sessionAuth: parseUploadSessionKeyInput) kind must be one of: skill, agent, user","method":"GET","path":"/download/SLPRHUQrnYGThx1YSkK4W/PrQ9KAAdH_Jgz5KduTBNj","requestUserId":"local-test-user","service":"service-api","status":400,"tenantId":"local","timestamp":"2026-07-21T08:44:57.011Z"}

{"authContextUserId":"local-test-user","level":"error","message":"sessionKey resolution failed (sessionAuth: parseUploadSessionKeyInput) kind must be one of: skill, agent, user","method":"GET","path":"/download/SLPRHUQrnYGThx1YSkK4W/PrQ9KAAdH_Jgz5KduTBNj","requestUserId":"local-test-user","service":"service-api","status":400,"tenantId":"local","timestamp":"2026-07-21T08:45:00.524Z"}

{"authContextUserId":"local-test-user","level":"error","message":"sessionKey resolution failed (sessionAuth: parseUploadSessionKeyInput) kind must be one of: skill, agent, user","method":"GET","path":"/download/SLPRHUQrnYGThx1YSkK4W/PrQ9KAAdH_Jgz5KduTBNj","requestUserId":"local-test-user","service":"service-api","status":400,"tenantId":"local","timestamp":"2026-07-21T08:45:08.501Z"}

{"authContextUserId":"local-test-user","level":"error","message":"sessionKey resolution failed (sessionAuth: parseUploadSessionKeyInput) kind must be one of: skill, agent, user","method":"GET","path":"/download/SLPRHUQrnYGThx1YSkK4W/PrQ9KAAdH_Jgz5KduTBNj","requestUserId":"local-test-user","service":"service-api","status":400,"tenantId":"local","timestamp":"2026-07-21T08:45:25.688Z"}

{"authContextUserId":"local-test-user","level":"error","message":"sessionKey resolution failed (sessionAuth: parseUploadSessionKeyInput) kind must be one of: skill, agent, user","method":"GET","path":"/download/SLPRHUQrnYGThx1YSkK4W/PrQ9KAAdH_Jgz5KduTBNj","requestUserId":"local-test-user","service":"service-api","status":400,"tenantId":"local","timestamp":"2026-07-21T08:46:10.339Z"}

{"apiKeyId":"local-test-key","files":{"agentCount":0,"count":0,"skillCount":0,"userCount":0},"language":"py","level":"info","message":"Request received","service":"service-api","sessionKey":"local:user:local-test-user","session_id":"uFgiGzib0gSuaKYAmROY3","timestamp":"2026-07-21T09:02:27.497Z","user":"69c647b7372972602d099858","userId":"local-test-user"}

{"level":"info","message":"Execution completed","service":"service-api","session_id":"uFgiGzib0gSuaKYAmROY3","timestamp":"2026-07-21T09:02:31.737Z","user_id":"69c647b7372972602d099858"}

{"authContextUserId":"local-test-user","level":"error","message":"sessionKey resolution failed (sessionAuth: parseUploadSessionKeyInput) kind must be one of: skill, agent, user","method":"GET","path":"/download/uFgiGzib0gSuaKYAmROY3/Cz47XVpFvnsAAxFgEPgW-","requestUserId":"local-test-user","service":"service-api","status":400,"tenantId":"local","timestamp":"2026-07-21T09:02:31.803Z"}

{"authContextUserId":"local-test-user","level":"error","message":"sessionKey resolution failed (sessionAuth: parseUploadSessionKeyInput) kind must be one of: skill, agent, user","method":"GET","path":"/download/uFgiGzib0gSuaKYAmROY3/Cz47XVpFvnsAAxFgEPgW-","requestUserId":"local-test-user","service":"service-api","status":400,"tenantId":"local","timestamp":"2026-07-21T09:02:33.502Z"}

{"apiKeyId":"local-test-key","files":{"agentCount":0,"count":0,"skillCount":0,"userCount":0},"language":"py","level":"info","message":"Request received","service":"service-api","sessionKey":"local:user:local-test-user","session_id":"kQoGAx_BN-oMxulZWyKcq","timestamp":"2026-07-21T09:04:43.174Z","user":"69c647b7372972602d099858","userId":"local-test-user"}

{"level":"info","message":"Execution completed","service":"service-api","session_id":"kQoGAx_BN-oMxulZWyKcq","timestamp":"2026-07-21T09:04:43.399Z","user_id":"69c647b7372972602d099858"}

{"apiKeyId":"local-test-key","files":{"agentCount":0,"count":0,"skillCount":0,"userCount":0},"language":"py","level":"info","message":"Request received","service":"service-api","sessionKey":"local:user:local-test-user","session_id":"VRu_iRoeHvHwjKB1lhsZO","timestamp":"2026-07-21T09:06:08.180Z","user":"69c647b7372972602d099858","userId":"local-test-user"}

{"level":"info","message":"Execution completed","service":"service-api","session_id":"VRu_iRoeHvHwjKB1lhsZO","timestamp":"2026-07-21T09:06:10.019Z","user_id":"69c647b7372972602d099858"}

{"authContextUserId":"local-test-user","level":"error","message":"sessionKey resolution failed (sessionAuth: parseUploadSessionKeyInput) kind must be one of: skill, agent, user","method":"GET","path":"/download/VRu_iRoeHvHwjKB1lhsZO/9yv5UN1bKW2ADGtLMgwL9","requestUserId":"local-test-user","service":"service-api","status":400,"tenantId":"local","timestamp":"2026-07-21T09:06:10.065Z"}

{"authContextUserId":"local-test-user","level":"error","message":"sessionKey resolution failed (sessionAuth: parseUploadSessionKeyInput) kind must be one of: skill, agent, user","method":"GET","path":"/download/VRu_iRoeHvHwjKB1lhsZO/9yv5UN1bKW2ADGtLMgwL9","requestUserId":"local-test-user","service":"service-api","status":400,"tenantId":"local","timestamp":"2026-07-21T09:06:33.208Z"}

[yhay81]

You have not missed a MinIO setting. This is a LibreChat / Code Interpreter API-version mismatch.

The 400 happens before the object is read from MinIO. Current Code Interpreter runs sessionAuth on /download/:session_id/:fileId and requires these query parameters:

• kind: user, agent, or skill
• id: the owning resource/user ID
• version: additionally required for skill

Your request is only:

/download/VRu_iRoeHvHwjKB1lhsZO/9yv5UN1bKW2ADGtLMgwL9

so kind is undefined, which produces exactly kind must be one of: skill, agent, user.

LibreChat v0.8.4 generates that legacy URL without a query string (source). Current LibreChat instead builds a user-scoped query and requests:

/download/<session>/<file>?kind=user&id=<current-user-id>

(current implementation). This matches the current Code Interpreter authorization contract, which derives the session key from kind/id and the authenticated user (sessionAuth).

The proper fix is therefore to run a matched pair:

1. Upgrade LibreChat to a release/commit that contains buildCodeEnvDownloadQuery and use the corresponding current Code Interpreter stack, or
2. Pin Code Interpreter to the version intended for LibreChat v0.8.4.

After changing versions, rebuild/recreate the containers (do not only restart them), start a new code-execution run, and check that the service-api log shows ?kind=user&id=... on the download request.

I would not “fix” this by making kind optional or defaulting it in Code Interpreter. That check is part of the storage authorization boundary. A one-line URL patch in v0.8.4 may make local mode work, but current main also changed upload identity and authentication handling, so aligning the two versions is safer than selectively backporting only the query string.