fix(internal): harden file response handling

[jdomeracki-coder]

Summary

• Keep uploaded file responses inline while adding restrictive response policy headers.
• Add a CSP with default-src 'none', sandbox, and frame-ancestors 'none'.
• Avoid surfacing normal test Postgres socket cleanup as a background test error.
• Add regression coverage for inline file response headers and absence of the legacy frame header.

Testing

• bunx prettier --write internal/database/src/postgres-worker.ts internal/api/src/routes/files.server.ts internal/api/src/routes/files.test.ts
• bunx biome check internal/database/src/postgres-worker.ts internal/api/src/routes/files.server.ts internal/api/src/routes/files.test.ts
• bunx bun@1.3.14 test internal/database/src/postgres.test.ts internal/api/src/routes/agents/me/me.test.ts internal/api/src/routes/files.test.ts
• bunx bun@1.3.14 test --rerun-each=50 internal/database/src/postgres.test.ts
• bunx turbo typecheck --concurrency=1
• bun run format:check

Generated by Coder Agents.

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated (UTC)
blink	Ready	Preview, Comment	Jun 22, 2026 8:52pm