chore(deps): bump langchain-community in /application

Bumps [langchain-community](https://github.com/langchain-ai/langchain) from 0.3.19 to 0.4.1.
- [Release notes](https://github.com/langchain-ai/langchain/releases)
- [Commits](https://github.com/langchain-ai/langchain/commits)

---
updated-dependencies:
- dependency-name: langchain-community
  dependency-version: 0.4.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

application/agents/tools/todo_list.py

@@ -0,0 +1,321 @@
+from datetime import datetime
+from typing import Any, Dict, List, Optional
+import uuid
+
+from .base import Tool
+from application.core.mongo_db import MongoDB
+from application.core.settings import settings
+
+
+class TodoListTool(Tool):
+    """Todo List
+
+    Manages todo items for users. Supports creating, viewing, updating, and deleting todos.
+    """
+
+    def __init__(self, tool_config: Optional[Dict[str, Any]] = None, user_id: Optional[str] = None) -> None:
+        """Initialize the tool.
+
+        Args:
+            tool_config: Optional tool configuration. Should include:
+                - tool_id: Unique identifier for this todo list tool instance (from user_tools._id)
+                           This ensures each user's tool configuration has isolated todos
+            user_id: The authenticated user's id (should come from decoded_token["sub"]).
+        """
+        self.user_id: Optional[str] = user_id
+
+        # Get tool_id from configuration (passed from user_tools._id in production)
+        # In production, tool_id is the MongoDB ObjectId string from user_tools collection
+        if tool_config and "tool_id" in tool_config:
+            self.tool_id = tool_config["tool_id"]
+        elif user_id:
+            # Fallback for backward compatibility or testing
+            self.tool_id = f"default_{user_id}"
+        else:
+            # Last resort fallback (shouldn't happen in normal use)
+            self.tool_id = str(uuid.uuid4())
+
+        db = MongoDB.get_client()[settings.MONGO_DB_NAME]
+        self.collection = db["todos"]
+
+    # -----------------------------
+    # Action implementations
+    # -----------------------------
+    def execute_action(self, action_name: str, **kwargs: Any) -> str:
+        """Execute an action by name.
+
+        Args:
+            action_name: One of list, create, get, update, complete, delete.
+            **kwargs: Parameters for the action.
+
+        Returns:
+            A human-readable string result.
+        """
+        if not self.user_id:
+            return "Error: TodoListTool requires a valid user_id."
+
+        if action_name == "list":
+            return self._list()
+
+        if action_name == "create":
+            return self._create(kwargs.get("title", ""))
+
+        if action_name == "get":
+            return self._get(kwargs.get("todo_id"))
+
+        if action_name == "update":
+            return self._update(
+                kwargs.get("todo_id"),
+                kwargs.get("title", "")
+            )
+
+        if action_name == "complete":
+            return self._complete(kwargs.get("todo_id"))
+
+        if action_name == "delete":
+            return self._delete(kwargs.get("todo_id"))
+
+        return f"Unknown action: {action_name}"
+
+    def get_actions_metadata(self) -> List[Dict[str, Any]]:
+        """Return JSON metadata describing supported actions for tool schemas."""
+        return [
+            {
+                "name": "list",
+                "description": "List all todos for the user.",
+                "parameters": {"type": "object", "properties": {}},
+            },
+            {
+                "name": "create",
+                "description": "Create a new todo item.",
+                "parameters": {
+                    "type": "object",
+                    "properties": {
+                        "title": {
+                            "type": "string",
+                            "description": "Title of the todo item."
+                        }
+                    },
+                    "required": ["title"],
+                },
+            },
+            {
+                "name": "get",
+                "description": "Get a specific todo by ID.",
+                "parameters": {
+                    "type": "object",
+                    "properties": {
+                        "todo_id": {
+                            "type": "integer",
+                            "description": "The ID of the todo to retrieve."
+                        }
+                    },
+                    "required": ["todo_id"],
+                },
+            },
+            {
+                "name": "update",
+                "description": "Update a todo's title by ID.",
+                "parameters": {
+                    "type": "object",
+                    "properties": {
+                        "todo_id": {
+                            "type": "integer",
+                            "description": "The ID of the todo to update."
+                        },
+                        "title": {
+                            "type": "string",
+                            "description": "The new title for the todo."
+                        }
+                    },
+                    "required": ["todo_id", "title"],
+                },
+            },
+            {
+                "name": "complete",
+                "description": "Mark a todo as completed.",
+                "parameters": {
+                    "type": "object",
+                    "properties": {
+                        "todo_id": {
+                            "type": "integer",
+                            "description": "The ID of the todo to mark as completed."
+                        }
+                    },
+                    "required": ["todo_id"],
+                },
+            },
+            {
+                "name": "delete",
+                "description": "Delete a specific todo by ID.",
+                "parameters": {
+                    "type": "object",
+                    "properties": {
+                        "todo_id": {
+                            "type": "integer",
+                            "description": "The ID of the todo to delete."
+                        }
+                    },
+                    "required": ["todo_id"],
+                },
+            },
+        ]
+
+    def get_config_requirements(self) -> Dict[str, Any]:
+        """Return configuration requirements."""
+        return {}
+
+    # -----------------------------
+    # Internal helpers
+    # -----------------------------
+    def _coerce_todo_id(self, value: Optional[Any]) -> Optional[int]:
+        """Convert todo identifiers to sequential integers."""
+        if value is None:
+            return None
+
+        if isinstance(value, int):
+            return value if value > 0 else None
+
+        if isinstance(value, str):
+            stripped = value.strip()
+            if stripped.isdigit():
+                numeric_value = int(stripped)
+                return numeric_value if numeric_value > 0 else None
+
+        return None
+
+    def _get_next_todo_id(self) -> int:
+        """Get the next sequential todo_id for this user and tool.
+
+        Returns a simple integer (1, 2, 3, ...) scoped to this user/tool.
+        With 5-10 todos max, scanning is negligible.
+        """
+        # Find all todos for this user/tool and get their IDs
+        todos = list(self.collection.find(
+            {"user_id": self.user_id, "tool_id": self.tool_id},
+            {"todo_id": 1}
+        ))
+
+        # Find the maximum todo_id
+        max_id = 0
+        for todo in todos:
+            todo_id = self._coerce_todo_id(todo.get("todo_id"))
+            if todo_id is not None:
+                max_id = max(max_id, todo_id)
+
+        return max_id + 1
+
+    def _list(self) -> str:
+        """List all todos for the user."""
+        cursor = self.collection.find({"user_id": self.user_id, "tool_id": self.tool_id})
+        todos = list(cursor)
+
+        if not todos:
+            return "No todos found."
+
+        result_lines = ["Todos:"]
+        for doc in todos:
+            todo_id = doc.get("todo_id")
+            title = doc.get("title", "Untitled")
+            status = doc.get("status", "open")
+
+            line = f"[{todo_id}] {title} ({status})"
+            result_lines.append(line)
+
+        return "\n".join(result_lines)
+
+    def _create(self, title: str) -> str:
+        """Create a new todo item."""
+        title = (title or "").strip()
+        if not title:
+            return "Error: Title is required."
+
+        now = datetime.now()
+        todo_id = self._get_next_todo_id()
+
+        doc = {
+            "todo_id": todo_id,
+            "user_id": self.user_id,
+            "tool_id": self.tool_id,
+            "title": title,
+            "status": "open",
+            "created_at": now,
+            "updated_at": now,
+        }
+        self.collection.insert_one(doc)
+        return f"Todo created with ID {todo_id}: {title}"
+
+    def _get(self, todo_id: Optional[Any]) -> str:
+        """Get a specific todo by ID."""
+        parsed_todo_id = self._coerce_todo_id(todo_id)
+        if parsed_todo_id is None:
+            return "Error: todo_id must be a positive integer."
+
+        doc = self.collection.find_one({
+            "user_id": self.user_id,
+            "tool_id": self.tool_id,
+            "todo_id": parsed_todo_id
+        })
+
+        if not doc:
+            return f"Error: Todo with ID {parsed_todo_id} not found."
+
+        title = doc.get("title", "Untitled")
+        status = doc.get("status", "open")
+
+        result = f"Todo [{parsed_todo_id}]:\nTitle: {title}\nStatus: {status}"
+
+        return result
+
+    def _update(self, todo_id: Optional[Any], title: str) -> str:
+        """Update a todo's title by ID."""
+        parsed_todo_id = self._coerce_todo_id(todo_id)
+        if parsed_todo_id is None:
+            return "Error: todo_id must be a positive integer."
+
+        title = (title or "").strip()
+        if not title:
+            return "Error: Title is required."
+
+        result = self.collection.update_one(
+            {"user_id": self.user_id, "tool_id": self.tool_id, "todo_id": parsed_todo_id},
+            {"$set": {"title": title, "updated_at": datetime.now()}}
+        )
+
+        if result.matched_count == 0:
+            return f"Error: Todo with ID {parsed_todo_id} not found."
+
+        return f"Todo {parsed_todo_id} updated to: {title}"
+
+    def _complete(self, todo_id: Optional[Any]) -> str:
+        """Mark a todo as completed."""
+        parsed_todo_id = self._coerce_todo_id(todo_id)
+        if parsed_todo_id is None:
+            return "Error: todo_id must be a positive integer."
+
+        result = self.collection.update_one(
+            {"user_id": self.user_id, "tool_id": self.tool_id, "todo_id": parsed_todo_id},
+            {"$set": {"status": "completed", "updated_at": datetime.now()}}
+        )
+
+        if result.matched_count == 0:
+            return f"Error: Todo with ID {parsed_todo_id} not found."
+
+        return f"Todo {parsed_todo_id} marked as completed."
+
+    def _delete(self, todo_id: Optional[Any]) -> str:
+        """Delete a specific todo by ID."""
+        parsed_todo_id = self._coerce_todo_id(todo_id)
+        if parsed_todo_id is None:
+            return "Error: todo_id must be a positive integer."
+
+        result = self.collection.delete_one({
+            "user_id": self.user_id,
+            "tool_id": self.tool_id,
+            "todo_id": parsed_todo_id
+        })
+
+        if result.deleted_count == 0:
+            return f"Error: Todo with ID {parsed_todo_id} not found."
+
+        return f"Todo {parsed_todo_id} deleted."

application/agents/tools/tool_manager.py

@@ -28,7 +28,7 @@ class ToolManager:
         module = importlib.import_module(f"application.agents.tools.{tool_name}")
         for member_name, obj in inspect.getmembers(module, inspect.isclass):
             if issubclass(obj, Tool) and obj is not Tool:
-                if tool_name in {"mcp_tool", "notes", "memory"} and user_id:
+                if tool_name in {"mcp_tool", "notes", "memory", "todo_list"} and user_id:
                     return obj(tool_config, user_id)
                 else:
                     return obj(tool_config)
@@ -36,7 +36,7 @@ class ToolManager:
     def execute_action(self, tool_name, action_name, user_id=None, **kwargs):
         if tool_name not in self.tools:
             raise ValueError(f"Tool '{tool_name}' not loaded")
-        if tool_name in {"mcp_tool", "memory"} and user_id:
+        if tool_name in {"mcp_tool", "memory", "todo_list"} and user_id:
             tool_config = self.config.get(tool_name, {})
             tool = self.load_tool(tool_name, tool_config, user_id)
             return tool.execute_action(action_name, **kwargs)

application/requirements.txt

@@ -30,7 +30,7 @@ jsonpatch==1.33
 jsonpointer==3.0.0
 kombu==5.4.2
 langchain==0.3.20
-langchain-community==0.3.19
+langchain-community==0.4.1
 langchain-core==0.3.59
 langchain-openai==0.3.16
 langchain-text-splitters==0.3.8

frontend/public/toolIcons/tool_todo_list.svg

@@ -0,0 +1 @@
+<svg xmlns="http://www.w3.org/2000/svg" height="24px" viewBox="0 -960 960 960" width="24px" fill="#e3e3e3"><path d="M240-80q-33 0-56.5-23.5T160-160v-640q0-33 23.5-56.5T240-880h480q33 0 56.5 23.5T800-800v640q0 33-23.5 56.5T720-80H240Zm0-80h480v-640H240v640Zm88-104 56-56-56-56-56 56 56 56Zm0-160 56-56-56-56-56 56 56 56Zm0-160 56-56-56-56-56 56 56 56Zm120 280h232v-80H448v80Zm0-160h232v-80H448v80Zm0-160h232v-80H448v80ZM240-160v-640 640Z"/></svg>

frontend/src/components/MessageInput.tsx

@@ -1,4 +1,6 @@
-import { useEffect, useRef, useState } from 'react';
+import { useCallback, useEffect, useRef, useState } from 'react';
+import { createPortal } from 'react-dom';
+import { useDropzone } from 'react-dropzone';
 import { useTranslation } from 'react-i18next';
 import { useDispatch, useSelector } from 'react-redux';
 
@@ -6,6 +8,7 @@ import endpoints from '../api/endpoints';
 import userService from '../api/services/userService';
 import AlertIcon from '../assets/alert.svg';
 import ClipIcon from '../assets/clip.svg';
+import DragFileUpload from '../assets/DragFileUpload.svg';
 import ExitIcon from '../assets/exit.svg';
 import SendArrowIcon from './SendArrowIcon';
 import SourceIcon from '../assets/source.svg';
@@ -17,6 +20,7 @@ import {
   selectAttachments,
   updateAttachment,
 } from '../upload/uploadSlice';
+import { reorderAttachments } from '../upload/uploadSlice';
 
 import { ActiveState } from '../models/misc';
 import {
@@ -53,6 +57,7 @@ export default function MessageInput({
   const [isToolsPopupOpen, setIsToolsPopupOpen] = useState(false);
   const [uploadModalState, setUploadModalState] =
     useState<ActiveState>('INACTIVE');
+  const [handleDragActive, setHandleDragActive] = useState<boolean>(false);
 
   const selectedDocs = useSelector(selectSelectedDocs);
   const token = useSelector(selectToken);
@@ -82,79 +87,134 @@ export default function MessageInput({
     };
   }, [browserOS]);
 
-  const handleFileAttachment = (e: React.ChangeEvent<HTMLInputElement>) => {
+  const uploadFiles = useCallback(
-    if (!e.target.files || e.target.files.length === 0) return;
+    (files: File[]) => {
+      const apiHost = import.meta.env.VITE_API_HOST;
 
-    const file = e.target.files[0];
+      files.forEach((file) => {
-    const formData = new FormData();
+        const formData = new FormData();
-    formData.append('file', file);
+        formData.append('file', file);
+        const xhr = new XMLHttpRequest();
+        const uniqueId = crypto.randomUUID();
 
-    const apiHost = import.meta.env.VITE_API_HOST;
+        const newAttachment = {
-    const xhr = new XMLHttpRequest();
+          id: uniqueId,
-    const uniqueId = crypto.randomUUID();
+          fileName: file.name,
+          progress: 0,
+          status: 'uploading' as const,
+          taskId: '',
+        };
 
-    const newAttachment = {
+        dispatch(addAttachment(newAttachment));
-      id: uniqueId,
-      fileName: file.name,
-      progress: 0,
-      status: 'uploading' as const,
-      taskId: '',
-    };
 
-    dispatch(addAttachment(newAttachment));
+        xhr.upload.addEventListener('progress', (event) => {
+          if (event.lengthComputable) {
+            const progress = Math.round((event.loaded / event.total) * 100);
+            dispatch(
+              updateAttachment({
+                id: uniqueId,
+                updates: { progress },
+              }),
+            );
+          }
+        });
 
-    xhr.upload.addEventListener('progress', (event) => {
+        xhr.onload = () => {
-      if (event.lengthComputable) {
+          if (xhr.status === 200) {
-        const progress = Math.round((event.loaded / event.total) * 100);
+            const response = JSON.parse(xhr.responseText);
-        dispatch(
+            if (response.task_id) {
-          updateAttachment({
+              dispatch(
-            id: uniqueId,
+                updateAttachment({
-            updates: { progress },
+                  id: uniqueId,
-          }),
+                  updates: {
-        );
+                    taskId: response.task_id,
-      }
+                    status: 'processing',
-    });
+                    progress: 10,
+                  },
+                }),
+              );
+            }
+          } else {
+            dispatch(
+              updateAttachment({
+                id: uniqueId,
+                updates: { status: 'failed' },
+              }),
+            );
+          }
+        };
 
-    xhr.onload = () => {
+        xhr.onerror = () => {
-      if (xhr.status === 200) {
-        const response = JSON.parse(xhr.responseText);
-        if (response.task_id) {
           dispatch(
             updateAttachment({
               id: uniqueId,
-              updates: {
+              updates: { status: 'failed' },
-                taskId: response.task_id,
-                status: 'processing',
-                progress: 10,
-              },
             }),
           );
-        }
+        };
-      } else {
-        dispatch(
-          updateAttachment({
-            id: uniqueId,
-            updates: { status: 'failed' },
-          }),
-        );
-      }
-    };
 
-    xhr.onerror = () => {
+        xhr.open('POST', `${apiHost}${endpoints.USER.STORE_ATTACHMENT}`);
-      dispatch(
+        xhr.setRequestHeader('Authorization', `Bearer ${token}`);
-        updateAttachment({
+        xhr.send(formData);
-          id: uniqueId,
+      });
-          updates: { status: 'failed' },
+    },
-        }),
+    [dispatch, token],
-      );
+  );
-    };
 
-    xhr.open('POST', `${apiHost}${endpoints.USER.STORE_ATTACHMENT}`);
+  const handleFileAttachment = (e: React.ChangeEvent<HTMLInputElement>) => {
-    xhr.setRequestHeader('Authorization', `Bearer ${token}`);
+    if (!e.target.files || e.target.files.length === 0) return;
-    xhr.send(formData);
+
+    const files = Array.from(e.target.files);
+    uploadFiles(files);
+
+    // clear input so same file can be selected again
     e.target.value = '';
   };
 
+  // Drag and drop handler
+  const onDrop = useCallback(
+    (acceptedFiles: File[]) => {
+      uploadFiles(acceptedFiles);
+      setHandleDragActive(false);
+    },
+    [uploadFiles],
+  );
+
+  const { getRootProps, getInputProps } = useDropzone({
+    onDrop,
+    noClick: true,
+    noKeyboard: true,
+    multiple: true,
+    onDragEnter: () => {
+      setHandleDragActive(true);
+    },
+    onDragLeave: () => {
+      setHandleDragActive(false);
+    },
+    maxSize: 25000000,
+    accept: {
+      'application/pdf': ['.pdf'],
+      'text/plain': ['.txt'],
+      'text/x-rst': ['.rst'],
+      'text/x-markdown': ['.md'],
+      'application/zip': ['.zip'],
+      'application/vnd.openxmlformats-officedocument.wordprocessingml.document':
+        ['.docx'],
+      'application/json': ['.json'],
+      'text/csv': ['.csv'],
+      'text/html': ['.html'],
+      'application/epub+zip': ['.epub'],
+      'application/vnd.openxmlformats-officedocument.spreadsheetml.sheet': [
+        '.xlsx',
+      ],
+      'application/vnd.openxmlformats-officedocument.presentationml.presentation':
+        ['.pptx'],
+      'image/png': ['.png'],
+      'image/jpeg': ['.jpeg'],
+      'image/jpg': ['.jpg'],
+    },
+  });
+
   useEffect(() => {
     const checkTaskStatus = () => {
       const processingAttachments = attachments.filter(
@@ -261,86 +321,131 @@ export default function MessageInput({
     handleAbort();
   };
 
+  // Drag state for reordering
+  const [draggingId, setDraggingId] = useState<string | null>(null);
+
+  // no preview object URLs to revoke (preview removed per reviewer request)
+
+  const findIndexById = (id: string) =>
+    attachments.findIndex((a) => a.id === id);
+
+  const handleDragStart = (e: React.DragEvent, id: string) => {
+    setDraggingId(id);
+    try {
+      e.dataTransfer.setData('text/plain', id);
+      e.dataTransfer.effectAllowed = 'move';
+    } catch (err) {
+      // ignore
+    }
+  };
+
+  const handleDragOver = (e: React.DragEvent) => {
+    e.preventDefault();
+    e.dataTransfer.dropEffect = 'move';
+  };
+
+  const handleDropOn = (e: React.DragEvent, targetId: string) => {
+    e.preventDefault();
+    const sourceId = e.dataTransfer.getData('text/plain');
+    if (!sourceId || sourceId === targetId) return;
+
+    const sourceIndex = findIndexById(sourceId);
+    const destIndex = findIndexById(targetId);
+    if (sourceIndex === -1 || destIndex === -1) return;
+
+    dispatch(reorderAttachments({ sourceIndex, destinationIndex: destIndex }));
+    setDraggingId(null);
+  };
+
   return (
-    <div className="flex w-full flex-col">
+    <div {...getRootProps()} className="flex w-full flex-col">
+      <input {...getInputProps()} />
       <div className="border-dark-gray bg-lotion dark:border-grey relative flex w-full flex-col rounded-[23px] border dark:bg-transparent">
         <div className="flex flex-wrap gap-1.5 px-2 py-2 sm:gap-2 sm:px-3">
-          {attachments.map((attachment) => (
+          {attachments.map((attachment) => {
-            <div
+            return (
-              key={attachment.id}
+              <div
-              className={`group dark:text-bright-gray relative flex items-center rounded-xl bg-[#EFF3F4] px-2 py-1 text-[12px] text-[#5D5D5D] sm:px-3 sm:py-1.5 sm:text-[14px] dark:bg-[#393B3D] ${
+                key={attachment.id}
-                attachment.status !== 'completed' ? 'opacity-70' : 'opacity-100'
+                draggable={true}
-              }`}
+                onDragStart={(e) => handleDragStart(e, attachment.id)}
-              title={attachment.fileName}
+                onDragOver={handleDragOver}
-            >
+                onDrop={(e) => handleDropOn(e, attachment.id)}
-              <div className="bg-purple-30 mr-2 items-center justify-center rounded-lg p-[5.5px]">
+                className={`group dark:text-bright-gray relative flex items-center rounded-xl bg-[#EFF3F4] px-2 py-1 text-[12px] text-[#5D5D5D] sm:px-3 sm:py-1.5 sm:text-[14px] dark:bg-[#393B3D] ${
-                {attachment.status === 'completed' && (
+                  attachment.status !== 'completed'
-                  <img
+                    ? 'opacity-70'
-                    src={DocumentationDark}
+                    : 'opacity-100'
-                    alt="Attachment"
+                } ${draggingId === attachment.id ? 'ring-dashed opacity-60 ring-2 ring-purple-200' : ''}`}
-                    className="h-[15px] w-[15px] object-fill"
+                title={attachment.fileName}
-                  />
-                )}
-
-                {attachment.status === 'failed' && (
-                  <img
-                    src={AlertIcon}
-                    alt="Failed"
-                    className="h-[15px] w-[15px] object-fill"
-                  />
-                )}
-
-                {(attachment.status === 'uploading' ||
-                  attachment.status === 'processing') && (
-                  <div className="flex h-[15px] w-[15px] items-center justify-center">
-                    <svg className="h-[15px] w-[15px]" viewBox="0 0 24 24">
-                      <circle
-                        className="opacity-0"
-                        cx="12"
-                        cy="12"
-                        r="10"
-                        stroke="transparent"
-                        strokeWidth="4"
-                        fill="none"
-                      />
-                      <circle
-                        className="text-[#ECECF1]"
-                        cx="12"
-                        cy="12"
-                        r="10"
-                        stroke="currentColor"
-                        strokeWidth="4"
-                        fill="none"
-                        strokeDasharray="62.83"
-                        strokeDashoffset={
-                          62.83 * (1 - attachment.progress / 100)
-                        }
-                        transform="rotate(-90 12 12)"
-                      />
-                    </svg>
-                  </div>
-                )}
-              </div>
-
-              <span className="max-w-[120px] truncate font-medium sm:max-w-[150px]">
-                {attachment.fileName}
-              </span>
-
-              <button
-                className="ml-1.5 flex items-center justify-center rounded-full p-1"
-                onClick={() => {
-                  dispatch(removeAttachment(attachment.id));
-                }}
-                aria-label={t('conversation.attachments.remove')}
               >
-                <img
+                <div className="bg-purple-30 mr-2 flex h-8 w-8 items-center justify-center rounded-md p-1">
-                  src={ExitIcon}
+                  {attachment.status === 'completed' && (
-                  alt={t('conversation.attachments.remove')}
+                    <img
-                  className="h-2.5 w-2.5 filter dark:invert"
+                      src={DocumentationDark}
-                />
+                      alt="Attachment"
-              </button>
+                      className="h-[15px] w-[15px] object-fill"
-            </div>
+                    />
-          ))}
+                  )}
+
+                  {attachment.status === 'failed' && (
+                    <img
+                      src={AlertIcon}
+                      alt="Failed"
+                      className="h-[15px] w-[15px] object-fill"
+                    />
+                  )}
+
+                  {(attachment.status === 'uploading' ||
+                    attachment.status === 'processing') && (
+                    <div className="flex h-[15px] w-[15px] items-center justify-center">
+                      <svg className="h-[15px] w-[15px]" viewBox="0 0 24 24">
+                        <circle
+                          className="opacity-0"
+                          cx="12"
+                          cy="12"
+                          r="10"
+                          stroke="transparent"
+                          strokeWidth="4"
+                          fill="none"
+                        />
+                        <circle
+                          className="text-[#ECECF1]"
+                          cx="12"
+                          cy="12"
+                          r="10"
+                          stroke="currentColor"
+                          strokeWidth="4"
+                          fill="none"
+                          strokeDasharray="62.83"
+                          strokeDashoffset={
+                            62.83 * (1 - attachment.progress / 100)
+                          }
+                          transform="rotate(-90 12 12)"
+                        />
+                      </svg>
+                    </div>
+                  )}
+                </div>
+
+                <span className="max-w-[120px] truncate font-medium sm:max-w-[150px]">
+                  {attachment.fileName}
+                </span>
+
+                <button
+                  className="ml-1.5 flex items-center justify-center rounded-full p-1"
+                  onClick={() => {
+                    dispatch(removeAttachment(attachment.id));
+                  }}
+                  aria-label={t('conversation.attachments.remove')}
+                >
+                  <img
+                    src={ExitIcon}
+                    alt={t('conversation.attachments.remove')}
+                    className="h-2.5 w-2.5 filter dark:invert"
+                  />
+                </button>
+              </div>
+            );
+          })}
         </div>
 
         <div className="w-full">
@@ -422,6 +527,7 @@ export default function MessageInput({
               <input
                 type="file"
                 className="hidden"
+                multiple
                 onChange={handleFileAttachment}
               />
             </label>
@@ -481,6 +587,20 @@ export default function MessageInput({
           close={() => setUploadModalState('INACTIVE')}
         />
       )}
+
+      {handleDragActive &&
+        createPortal(
+          <div className="dark:bg-gray-alpha/50 pointer-events-none fixed top-0 left-0 z-50 flex size-full flex-col items-center justify-center bg-white/85">
+            <img className="filter dark:invert" src={DragFileUpload} />
+            <span className="text-outer-space dark:text-silver px-2 text-2xl font-bold">
+              {t('modals.uploadDoc.drag.title')}
+            </span>
+            <span className="text-s text-outer-space dark:text-silver w-48 p-2 text-center">
+              {t('modals.uploadDoc.drag.description')}
+            </span>
+          </div>,
+          document.body,
+        )}
     </div>
   );
 }

frontend/src/conversation/Conversation.tsx

@@ -1,20 +1,16 @@
 import { useCallback, useEffect, useRef, useState } from 'react';
-import { useDropzone } from 'react-dropzone';
 import { useTranslation } from 'react-i18next';
 import { useDispatch, useSelector } from 'react-redux';
 
 import SharedAgentCard from '../agents/SharedAgentCard';
-import DragFileUpload from '../assets/DragFileUpload.svg';
 import MessageInput from '../components/MessageInput';
 import { useMediaQuery } from '../hooks';
-import { ActiveState } from '../models/misc';
 import {
   selectConversationId,
   selectSelectedAgent,
   selectToken,
 } from '../preferences/preferenceSlice';
 import { AppDispatch } from '../store';
-import Upload from '../upload/Upload';
 import { handleSendFeedback } from './conversationHandlers';
 import ConversationMessages from './ConversationMessages';
 import { FEEDBACK, Query } from './conversationModels';
@@ -45,53 +41,12 @@ export default function Conversation() {
   const selectedAgent = useSelector(selectSelectedAgent);
   const completedAttachments = useSelector(selectCompletedAttachments);
 
-  const [uploadModalState, setUploadModalState] =
-    useState<ActiveState>('INACTIVE');
-  const [files, setFiles] = useState<File[]>([]);
   const [lastQueryReturnedErr, setLastQueryReturnedErr] =
     useState<boolean>(false);
   const [isShareModalOpen, setShareModalState] = useState<boolean>(false);
-  const [handleDragActive, setHandleDragActive] = useState<boolean>(false);
 
   const fetchStream = useRef<any>(null);
 
-  const onDrop = useCallback((acceptedFiles: File[]) => {
-    setUploadModalState('ACTIVE');
-    setFiles(acceptedFiles);
-    setHandleDragActive(false);
-  }, []);
-
-  const { getRootProps, getInputProps } = useDropzone({
-    onDrop,
-    noClick: true,
-    multiple: true,
-    onDragEnter: () => {
-      setHandleDragActive(true);
-    },
-    onDragLeave: () => {
-      setHandleDragActive(false);
-    },
-    maxSize: 25000000,
-    accept: {
-      'application/pdf': ['.pdf'],
-      'text/plain': ['.txt'],
-      'text/x-rst': ['.rst'],
-      'text/x-markdown': ['.md'],
-      'application/zip': ['.zip'],
-      'application/vnd.openxmlformats-officedocument.wordprocessingml.document':
-        ['.docx'],
-      'application/json': ['.json'],
-      'text/csv': ['.csv'],
-      'text/html': ['.html'],
-      'application/epub+zip': ['.epub'],
-      'application/vnd.openxmlformats-officedocument.spreadsheetml.sheet': [
-        '.xlsx',
-      ],
-      'application/vnd.openxmlformats-officedocument.presentationml.presentation':
-        ['.pptx'],
-    },
-  });
-
   const handleFetchAnswer = useCallback(
     ({ question, index }: { question: string; index?: number }) => {
       fetchStream.current = dispatch(fetchAnswer({ question, indx: index }));
@@ -222,14 +177,7 @@ export default function Conversation() {
       />
 
       <div className="bg-opacity-0 z-3 flex h-auto w-full max-w-[1300px] flex-col items-end self-center rounded-2xl py-1 md:w-9/12 lg:w-8/12 xl:w-8/12 2xl:w-6/12">
-        <div
+        <div className="flex w-full items-center rounded-[40px] px-2">
-          {...getRootProps()}
-          className="flex w-full items-center rounded-[40px] px-2"
-        >
-          <label htmlFor="file-upload" className="sr-only">
-            {t('modals.uploadDoc.label')}
-          </label>
-          <input {...getInputProps()} id="file-upload" />
           <MessageInput
             onSubmit={(text) => {
               handleQuestionSubmission(text);
@@ -244,26 +192,6 @@ export default function Conversation() {
           {t('tagline')}
         </p>
       </div>
-      {handleDragActive && (
-        <div className="bg-opacity-50 dark:bg-gray-alpha pointer-events-none fixed top-0 left-0 z-30 flex size-full flex-col items-center justify-center bg-white">
-          <img className="filter dark:invert" src={DragFileUpload} />
-          <span className="text-outer-space dark:text-silver px-2 text-2xl font-bold">
-            {t('modals.uploadDoc.drag.title')}
-          </span>
-          <span className="text-s text-outer-space dark:text-silver w-48 p-2 text-center">
-            {t('modals.uploadDoc.drag.description')}
-          </span>
-        </div>
-      )}
-      {uploadModalState === 'ACTIVE' && (
-        <Upload
-          receivedFile={files}
-          setModalState={setUploadModalState}
-          isOnboarding={false}
-          renderTab={'file'}
-          close={() => setUploadModalState('INACTIVE')}
-        ></Upload>
-      )}
     </div>
   );
 }

frontend/src/locale/en.json

@@ -255,8 +255,8 @@
         "addQuery": "Add Query"
       },
       "drag": {
-        "title": "Upload a source file",
+        "title": "Drop attachments here",
-        "description": "Drop your file here to add it as a source"
+        "description": "Release to upload your attachments"
       },
       "progress": {
         "upload": "Upload is in progress",

frontend/src/locale/es.json

@@ -218,8 +218,8 @@
         "addQuery": "Agregar Consulta"
       },
       "drag": {
-        "title": "Subir archivo fuente",
+        "title": "Suelta los archivos adjuntos aquí",
-        "description": "Arrastra tu archivo aquí para agregarlo como fuente"
+        "description": "Suelta para subir tus archivos adjuntos"
       },
       "progress": {
         "upload": "Subida en progreso",

frontend/src/locale/jp.json

@@ -218,8 +218,8 @@
         "addQuery": "クエリを追加"
       },
       "drag": {
-        "title": "ソースファイルをアップロード",
+        "title": "添付ファイルをここにドロップ",
-        "description": "ファイルをここにドロップしてソースとして追加してください"
+        "description": "リリースして添付ファイルをアップロード"
       },
       "progress": {
         "upload": "アップロード中",

frontend/src/locale/ru.json

@@ -218,8 +218,8 @@
         "addQuery": "Добавить запрос"
       },
       "drag": {
-        "title": "Загрузить исходный файл",
+        "title": "Перетащите вложения сюда",
-        "description": "Перетащите файл сюда, чтобы добавить его как источник"
+        "description": "Отпустите, чтобы загрузить ваши вложения"
       },
       "progress": {
         "upload": "Идет загрузка",

frontend/src/locale/zh-TW.json

@@ -218,8 +218,8 @@
         "addQuery": "新增查詢"
       },
       "drag": {
-        "title": "上傳來源檔案",
+        "title": "將附件拖放到此處",
-        "description": "將檔案拖放到此處以新增為來源"
+        "description": "釋放以上傳您的附件"
       },
       "progress": {
         "upload": "正在上傳",

frontend/src/locale/zh.json

@@ -218,8 +218,8 @@
         "addQuery": "添加查询"
       },
       "drag": {
-        "title": "上传源文件",
+        "title": "将附件拖放到此处",
-        "description": "将文件拖放到此处以添加为源"
+        "description": "释放以上传您的附件"
       },
       "progress": {
         "upload": "正在上传",

frontend/src/upload/uploadSlice.ts

@@ -66,6 +66,23 @@ export const uploadSlice = createSlice({
         (att) => att.id !== action.payload,
       );
     },
+    // Reorder attachments array by moving item from sourceIndex to destinationIndex
+    reorderAttachments: (
+      state,
+      action: PayloadAction<{ sourceIndex: number; destinationIndex: number }>,
+    ) => {
+      const { sourceIndex, destinationIndex } = action.payload;
+      if (
+        sourceIndex < 0 ||
+        destinationIndex < 0 ||
+        sourceIndex >= state.attachments.length ||
+        destinationIndex >= state.attachments.length
+      )
+        return;
+
+      const [moved] = state.attachments.splice(sourceIndex, 1);
+      state.attachments.splice(destinationIndex, 0, moved);
+    },
     clearAttachments: (state) => {
       state.attachments = state.attachments.filter(
         (att) => att.status === 'uploading' || att.status === 'processing',
@@ -121,6 +138,7 @@ export const {
   addAttachment,
   updateAttachment,
   removeAttachment,
+  reorderAttachments,
   clearAttachments,
   addUploadTask,
   updateUploadTask,

tests/test_todo_tool.py

@@ -0,0 +1,156 @@
+import pytest
+from application.agents.tools.todo_list import TodoListTool
+from application.core.settings import settings
+
+
+class FakeCursor(list):
+    def sort(self, key, direction):
+        reverse = direction == -1
+        sorted_list = sorted(self, key=lambda d: d.get(key, 0), reverse=reverse)
+        return FakeCursor(sorted_list)
+
+    def limit(self, count):
+        return FakeCursor(self[:count])
+
+    def __iter__(self):
+        return self
+
+    def __next__(self):
+        if not self:
+            raise StopIteration
+        return self.pop(0)
+
+
+class FakeCollection:
+    def __init__(self):
+        self.docs = {}
+
+    def create_index(self, *args, **kwargs):
+        pass
+
+    def insert_one(self, doc):
+        key = (doc["user_id"], doc["tool_id"], int(doc["todo_id"]))
+        self.docs[key] = doc
+        return type("res", (), {"inserted_id": key})
+
+    def find_one(self, query):
+        key = (query.get("user_id"), query.get("tool_id"), int(query.get("todo_id")))
+        return self.docs.get(key)
+
+    def find(self, query):
+        user_id = query.get("user_id")
+        tool_id = query.get("tool_id")
+        filtered = [
+            doc for (uid, tid, _), doc in self.docs.items()
+            if uid == user_id and tid == tool_id
+        ]
+        return FakeCursor(filtered)
+
+    def update_one(self, query, update, upsert=False):
+        key = (query.get("user_id"), query.get("tool_id"), int(query.get("todo_id")))
+        if key in self.docs:
+            self.docs[key].update(update.get("$set", {}))
+            return type("res", (), {"matched_count": 1})
+        elif upsert:
+            new_doc = {**query, **update.get("$set", {})}
+            self.docs[key] = new_doc
+            return type("res", (), {"matched_count": 1})
+        else:
+            return type("res", (), {"matched_count": 0})
+
+    def delete_one(self, query):
+        key = (query.get("user_id"), query.get("tool_id"), int(query.get("todo_id")))
+        if key in self.docs:
+            del self.docs[key]
+            return type("res", (), {"deleted_count": 1})
+        return type("res", (), {"deleted_count": 0})
+
+
+@pytest.fixture
+def todo_tool(monkeypatch) -> TodoListTool:
+    """Provides a TodoListTool with a fake MongoDB backend."""
+    fake_collection = FakeCollection()
+    fake_client = {settings.MONGO_DB_NAME: {"todos": fake_collection}}
+    monkeypatch.setattr("application.core.mongo_db.MongoDB.get_client", lambda: fake_client)
+    return TodoListTool({"tool_id": "test_tool"}, user_id="test_user")
+
+
+def test_create_and_get(todo_tool: TodoListTool):
+    res = todo_tool.execute_action("todo_create", title="Write tests", description="Write pytest cases")
+    assert res["status_code"] == 201
+    todo_id = res["todo_id"]
+
+    get_res = todo_tool.execute_action("todo_get", todo_id=todo_id)
+    assert get_res["status_code"] == 200
+    assert get_res["todo"]["title"] == "Write tests"
+    assert get_res["todo"]["description"] == "Write pytest cases"
+
+
+def test_get_all_todos(todo_tool: TodoListTool):
+    todo_tool.execute_action("todo_create", title="Task 1")
+    todo_tool.execute_action("todo_create", title="Task 2")
+
+    list_res = todo_tool.execute_action("todo_list")
+    assert list_res["status_code"] == 200
+    titles = [todo["title"] for todo in list_res["todos"]]
+    assert "Task 1" in titles
+    assert "Task 2" in titles
+
+
+def test_update_todo(todo_tool: TodoListTool):
+    create_res = todo_tool.execute_action("todo_create", title="Initial Title")
+    todo_id = create_res["todo_id"]
+
+    update_res = todo_tool.execute_action("todo_update", todo_id=todo_id, updates={"title": "Updated Title", "status": "done"})
+    assert update_res["status_code"] == 200
+
+    get_res = todo_tool.execute_action("todo_get", todo_id=todo_id)
+    assert get_res["todo"]["title"] == "Updated Title"
+    assert get_res["todo"]["status"] == "done"
+
+
+def test_delete_todo(todo_tool: TodoListTool):
+    create_res = todo_tool.execute_action("todo_create", title="To Delete")
+    todo_id = create_res["todo_id"]
+
+    delete_res = todo_tool.execute_action("todo_delete", todo_id=todo_id)
+    assert delete_res["status_code"] == 200
+
+    get_res = todo_tool.execute_action("todo_get", todo_id=todo_id)
+    assert get_res["status_code"] == 404
+
+
+def test_isolation_and_default_tool_id(monkeypatch):
+    """Ensure todos are isolated by tool_id and user_id."""
+    fake_collection = FakeCollection()
+    fake_client = {settings.MONGO_DB_NAME: {"todos": fake_collection}}
+    monkeypatch.setattr("application.core.mongo_db.MongoDB.get_client", lambda: fake_client)
+
+    # Same user, different tool_id
+    tool1 = TodoListTool({"tool_id": "tool_1"}, user_id="u1")
+    tool2 = TodoListTool({"tool_id": "tool_2"}, user_id="u1")
+
+    r1_create = tool1.execute_action("todo_create", title="from tool 1")
+    r2_create = tool2.execute_action("todo_create", title="from tool 2")
+
+    r1 = tool1.execute_action("todo_get", todo_id=r1_create["todo_id"])
+    r2 = tool2.execute_action("todo_get", todo_id=r2_create["todo_id"])
+
+    assert r1["status_code"] == 200
+    assert r1["todo"]["title"] == "from tool 1"
+
+    assert r2["status_code"] == 200
+    assert r2["todo"]["title"] == "from tool 2"
+
+    # Same user, no tool_id → should default to same value
+    t3 = TodoListTool({}, user_id="default_user")
+    t4 = TodoListTool({}, user_id="default_user")
+
+    assert t3.tool_id == "default_default_user"
+    assert t4.tool_id == "default_default_user"
+
+    create_res = t3.execute_action("todo_create", title="shared default")
+    r = t4.execute_action("todo_get", todo_id=create_res["todo_id"])
+
+    assert r["status_code"] == 200
+    assert r["todo"]["title"] == "shared default"