iframe-proxy

mzxchandra · 2026-10-14T07:58:45Z

Summary

Add authorized Project file rendering, inline content, previews, and indexed search.
Recheck current owner access, source revisions, and embedded-file identities before delivering rendered bytes. Preserve provenance and invalidate compiled artifacts when their inputs change.
Apply opaque/excerpt admission before reading and after revalidation; withhold stale search previews. Failed reads preserve shared deterministic render caches.
Rebase the rendering/search slice onto staging after feat(project-files): add core storage and realtime operations #9016, retaining streaming source downloads and buffered previews. Keep Project API/CLI documentation unpublished until launch.

Type of Change

Feature / refactor

Testing

Latest repair: 85 focused database integration checks and 66 unit tests passed, covering observer refusal, private CLI provenance round trips, registry admission, and HEAD without compilation. Earlier focused delivery/search/cache checks also passed.
Prior real-app delivery/rendering run: 15 checks passed, including browser cache reuse, authenticated HEAD, DOCX/PPTX/PDF rendering, asset-revision cache invalidation, and foreign/archived dependency rejection.
Scoped type check introduced no errors beyond the existing test baseline. Scoped formatting and strict API validation passed.
Pre-deployment source fixtures prepared and verified; post-deployment staging validation remains pending. Full repository checks run in hosted CI.

Checklist

Code follows project style guidelines
Self-reviewed my changes
Focused tests added/updated and passing
No new warnings introduced
Full hosted CI passed
I confirm that I have read and agree to the terms outlined in the Contributor License Agreement (CLA)

Review stack

#9015 and #9016 are merged. This PR contains only rendering/search and targets staging. #9018 adds bulk transfers; #9019 adds sharing. Rebase each following slice after its parent merges. #8610 is superseded by this stack.

vercel · 2026-10-14T07:58:49Z

mzxchandra · 2026-10-14T23:24:29Z

@greptile

mzxchandra · 2026-10-14T23:24:30Z

@cubic-dev-ai review this PR

cubic-dev-ai · 2026-10-14T23:24:36Z

@cubic-dev-ai review this PR

@mzxchandra I have started the AI code review. It will take a few minutes to complete.

cubic-dev-ai

All reported issues were addressed

_{Reply with feedback, questions, or to request a fix.

Turn on auto-fix | Re-trigger cubic}

greptile-apps · 2026-10-14T23:31:09Z

Confidence Score: 5/5

[High impact] The PR appears safe to merge based on the reviewed changes.

Summary

Adds authorized Project file rendering, inline delivery, CSV previews, and indexed search.

Project files can be delivered as rendered documents and image previews.
Project inline files and CSV previews use owner-checked routes.
Project file search returns matches with index coverage.
Embedded file links resolve under their Project or workspace owner.
Workspace file delivery rechecks access and revisions before sending bytes.
Workbench downloads keep file provenance without exposing opaque bytes to the model.
Build checks and sandbox support change without altering file behavior.

Diagram

%%{init: {'theme': 'neutral'}}%%
flowchart TD
  A[File request] --> B[Check current access]
  B --> C[Read source and identify inputs]
  C --> D[Read authorized inputs]
  D --> E[Render or reuse cached bytes]
  E --> F[Recheck access and file revisions]
  F --> G[Check content admission]
  G --> H[Return bytes and provenance]

_{Reviews (5) · Last reviewed commit: "test(files): guard required document for..." · Reviewed by Greptile}

mzxchandra · 2026-10-14T23:45:39Z

@greptile

mzxchandra · 2026-10-14T23:45:41Z

@cubic-dev-ai review this PR

cubic-dev-ai · 2026-10-14T23:45:46Z

@cubic-dev-ai review this PR

@mzxchandra I have started the AI code review. It will take a few minutes to complete.

cubic-dev-ai

All reported issues were addressed across 80 files

_{Reply with feedback, questions, or to request a fix.

Turn on auto-fix | Re-trigger cubic}

mzxchandra · 2026-10-14T23:56:07Z

@cubic-dev-ai review this PR

cubic-dev-ai · 2026-10-14T23:56:12Z

@cubic-dev-ai review this PR

@mzxchandra I have started the AI code review. It will take a few minutes to complete.

mzxchandra · 2026-10-15T00:17:39Z

@cubic-dev-ai review this PR

cubic-dev-ai · 2026-10-15T00:17:44Z

@cubic-dev-ai review this PR

@mzxchandra I have started the AI code review. It will take a few minutes to complete.

mzxchandra · 2026-10-15T00:20:32Z

@greptile

cubic-dev-ai

All reported issues were addressed across 89 files

_{You've manually re-run cubic several times on this PR. Each manual re-review checks the full PR again and counts toward your usage quota. To preserve your usage limits, we recommend letting cubic automatically review new commits.

Turn on auto-fix | Re-trigger cubic}

mzxchandra · 2026-10-15T00:28:35Z

@cubic-dev-ai review this PR

cubic-dev-ai · 2026-10-15T00:28:42Z

@cubic-dev-ai review this PR

@mzxchandra I have started the AI code review. It will take a few minutes to complete.

mzxchandra · 2026-10-15T00:31:33Z

@greptile

cubic-dev-ai

No issues found across 89 files

Confidence score: 5/5

Automated review surfaced no issues in the provided summaries.
No files require special attention.

_{Turn on auto-fix | Re-trigger cubic}

mzxchandra · 2026-10-15T01:49:21Z

vercel Bot deployed to Preview October 14, 2026 08:03

View deployment

mzxchandra force-pushed the codex/project-files-rendering branch from 524b6e7 to f0d1dc8 Compare October 14, 2026 08:16

mzxchandra force-pushed the codex/project-files-core branch from 118f899 to 427586b Compare October 14, 2026 08:16

vercel Bot deployed to Preview October 14, 2026 08:20

View deployment

mzxchandra mentioned this pull request Oct 14, 2026

feat(project-files): let Chat read and write Project files #9034

Merged

7 tasks done

Base automatically changed from codex/project-files-core to staging October 14, 2026 23:15

mzxchandra force-pushed the codex/project-files-rendering branch from f0d1dc8 to a2f50d8 Compare October 14, 2026 23:23

cubic-dev-ai Bot reviewed Oct 14, 2026

View reviewed changes

greptile-apps Bot reviewed Oct 14, 2026

View reviewed changes

Comment thread apps/sim/lib/projects/files/application/search.ts Outdated

Comment thread apps/sim/app/api/files/serve/[...path]/route.ts

Comment thread apps/sim/lib/projects/files/application/artifacts.ts Outdated

vercel Bot deployed to Preview October 14, 2026 23:32

View deployment

mzxchandra force-pushed the codex/project-files-rendering branch from 883d3bd to 428b57c Compare October 14, 2026 23:44

cubic-dev-ai Bot reviewed Oct 14, 2026

View reviewed changes

Comment thread apps/sim/lib/projects/files/application/previews.ts Outdated

Comment thread apps/sim/app/api/files/serve/[...path]/route.ts

vercel Bot deployed to Preview October 14, 2026 23:50

View deployment

mzxchandra force-pushed the codex/project-files-rendering branch from 428b57c to 2042762 Compare October 14, 2026 23:55

greptile-apps Bot reviewed Oct 14, 2026

View reviewed changes

Comment thread apps/sim/lib/uploads/documents/compile.ts Outdated

vercel Bot deployed to Preview October 15, 2026 00:15

View deployment

waleedlatif1 mentioned this pull request Oct 15, 2026

fix(project-files): hold the Project and permission-group locks shared for non-charging file operations #9058

Merged

6 tasks done

mzxchandra force-pushed the codex/project-files-rendering branch from 0228620 to 4cce577 Compare October 15, 2026 00:17

cubic-dev-ai Bot reviewed Oct 15, 2026

View reviewed changes

Comment thread apps/sim/lib/uploads/documents/compile.ts Outdated

Comment thread apps/sim/lib/projects/files/__integration__/content-rendered.integration.ts Outdated

vercel Bot deployed to Preview October 15, 2026 00:23

View deployment

mzxchandra force-pushed the codex/project-files-rendering branch from 4cce577 to 46eef76 Compare October 15, 2026 00:27

mzxchandra added 8 commits October 14, 2026 17:31

feat(project-files): add rendered delivery and indexed search

34d21e6

chore(files): shrink obsolete audit baselines

6cb93b4

fix(files): fence content delivery and preserve shared render caches

bca860f

fix(files): await delivery observers and track private CLI downloads

1faceba

fix(files): bound CSV previews and preserve render provenance

45b5f42

fix(files): fence render names and separate compiler caches

547e79b

fix(files): align search with rendered cache identities

3eddd9a

test(files): guard required document format fixtures

8fc8b2e

mzxchandra force-pushed the codex/project-files-rendering branch from 46eef76 to 8fc8b2e Compare October 15, 2026 00:31

vercel Bot deployed to Preview October 15, 2026 00:36

View deployment

mzxchandra marked this pull request as ready for review October 15, 2026 00:45

cubic-dev-ai Bot reviewed Oct 15, 2026

View reviewed changes

mzxchandra merged commit 219b292 into staging Oct 15, 2026
53 checks passed

mzxchandra deleted the codex/project-files-rendering branch October 15, 2026 00:59

This was referenced Oct 15, 2026

fix(contracts): drop unused project file search query exports #9062

Merged

fix(project-files): requeue rendered-artifact search after commit and trim Project read transactions #9063

Merged

waleedlatif1 mentioned this pull request Oct 15, 2026

v0.9.23: project files foundation, ci fixes #9078

Merged

Sunbelt Computer Software

PL/B Language Development and Support

Conversation

mzxchandra commented Oct 14, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Summary

Type of Change

Testing

Checklist

Review stack

Uh oh!

vercel Bot commented Oct 14, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

mzxchandra commented Oct 14, 2026

Uh oh!

mzxchandra commented Oct 14, 2026

Uh oh!

cubic-dev-ai Bot commented Oct 14, 2026

Uh oh!

cubic-dev-ai Bot left a comment • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

greptile-apps Bot commented Oct 14, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Confidence Score: 5/5

Summary

Diagram

Uh oh!

Uh oh!

Uh oh!

Uh oh!

mzxchandra commented Oct 14, 2026

Uh oh!

mzxchandra commented Oct 14, 2026

Uh oh!

cubic-dev-ai Bot commented Oct 14, 2026

Uh oh!

cubic-dev-ai Bot left a comment • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Uh oh!

Uh oh!

mzxchandra commented Oct 14, 2026

Uh oh!

cubic-dev-ai Bot commented Oct 14, 2026

Uh oh!

Uh oh!

mzxchandra commented Oct 15, 2026

Uh oh!

cubic-dev-ai Bot commented Oct 15, 2026

Uh oh!

mzxchandra commented Oct 15, 2026

Uh oh!

cubic-dev-ai Bot left a comment • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Uh oh!

Uh oh!

mzxchandra commented Oct 15, 2026

Uh oh!

cubic-dev-ai Bot commented Oct 15, 2026

Uh oh!

mzxchandra commented Oct 15, 2026

Uh oh!

cubic-dev-ai Bot left a comment

Choose a reason for hiding this comment

mzxchandra commented Oct 14, 2026 •

edited

Loading

vercel Bot commented Oct 14, 2026 •

edited

Loading

cubic-dev-ai Bot left a comment •

edited

Loading

greptile-apps Bot commented Oct 14, 2026 •

edited

Loading

cubic-dev-ai Bot left a comment •

edited

Loading

cubic-dev-ai Bot left a comment •

edited

Loading

mzxchandra commented Oct 15, 2026 •

edited

Loading