[Enhancement]: Granular Sharing for Shared Links

[tenfef]

What happened?

Although the data model for shareable links has an isPublic: boolean property, the UI and API do not have the ability to set this to false.
For this reason all shareable links are always public.

share.ts

    isPublic: {
      type: Boolean,
      default: true,
    },

Server create path never accepts or sets isPublic; it always creates (and thus defaults to public):
share.ts

      const [existingShare, conversationMessages] = await Promise.all([
        SharedLink.findOne({ conversationId, user, isPublic: true })
...
256:264
      } else if (existingShare) {
        await SharedLink.deleteOne({ conversationId, user });
      }
...
285:293
      const shareId = nanoid();
      await SharedLink.create({
        shareId,
        conversationId,
        messages: conversationMessages,
        title,
        user,
      });

The route for creating a share takes no body (so you can’t pass isPublic=false):

router.post('/:conversationId', requireJwtAuth, async (req, res) => {
  const created = await createSharedLink(req.user.id, req.params.conversationId);
  ...
});

Implications

There’s no public API or UI path to create a private (isPublic=false) share.
Even if you manually inserted a private share in the DB, the public view route wouldn’t return it (it filters isPublic: true), and creating a share for the same conversation would delete the existing non‑public record and create a public one.
ALLOW_SHARED_LINKS_PUBLIC only controls whether viewing requires auth; it still restricts results to isPublic=true.

Summary
Shared links are always created as public; no UI or API supports creating non‑public shares.
View endpoint only serves isPublic=true.
Listing can filter private/public, but the UI uses isPublic=true by default with no toggle.

Version Information

ghcr.io/danny-avila/librechat-dev latest c001413add14 2 weeks ago 1.12GB
ghcr.io/danny-avila/librechat-rag-api-dev-lite latest 833a22bcf14c 4 weeks ago 1.45GB

Steps to Reproduce

N/A

What browsers are you seeing the problem on?

No response

Relevant log output

N/A

Screenshots

No response

Code of Conduct

• I agree to follow this project's Code of Conduct

[danny-avila]

You are describing intended behavior, not a bug. This is a feature request for adding private shareable links functionality.

We are adding "granular sharing" for other "resources" (agents, prompts) within the week, so there will be a way to do this for shared links in the future.

[tenfef]

Great! Thank you. Looking forward to seeing that.

[pelli18]

Has this been implemented yet? Specifically granular permissions for sharing of agents

[danny-avila]

Yes