Open generated images from tool activity

[colonelpanic8]

What Changed

• Recognize completed imageGeneration activities and expose only their activity ID and filename to the client timeline.
• Resolve the provider-saved image path server-side and serve it through a signed, exact-file asset capability.
• Render generated images as compact evidence links in the work log instead of automatically expanding thumbnails.
• Open selected generated images in a dedicated right-panel tab alongside files, diffs, terminals, and browser previews.
• Keep generated-image links visible across turn/work-log folding and preserve open image tabs across reloads.
• Retry the short projection race when an image link is opened immediately after completion, while failing non-transient asset errors immediately.

Why

Generated images already arrive with a provider-saved path in completed tool activity, but that activity was rendered only as a text work-log row. The image should remain viewable after streaming finishes and after a thread is reloaded, without depending on the assistant to repeat a filename.

The interaction follows the Codex desktop pattern: images remain compact, link-like evidence in the transcript and open on demand in the existing right-side workspace. This avoids large automatic thumbnails and avoids requesting image assets until the user selects one.

This builds on the direction explored by #3984, which promotes image filenames explicitly mentioned in assistant Markdown, and #4321, which covers broader workspace/browser media references. Neither PR is included as a dependency here.

UI Changes

• Completed image-generation activity shows an image icon and filename link under the work-log row.
• Selecting the link opens or activates a named generated-image tab in the right panel.
• The panel shows the full image with contained sizing, loading state, and load-error state.
• Multiple generated images remain separate compact transcript links and separate reusable panel tabs.

Current browser evidence

Captured from the exact current PR head 9939cc9a46e6a33dbbca4961b1c755f9ed6fae21 in the combined package 0.0.29-patched-main-20260724 (integration 4dd4cef4039303179929a1dbdbf0c9b358c076f9). The fixture uses a real provider imageGeneration event in a disposable repository.

Compact work-log link	Generated-image right panel

MP4 version of the interaction

Checklist

• pnpm exec vp test run apps/web/src/rightPanelStore.test.ts apps/web/src/components/chat/MessagesTimeline.test.tsx apps/web/src/components/chat/GeneratedImagePanel.test.tsx apps/server/src/assets/GeneratedImageResolver.test.ts (48 tests)
• Targeted pnpm exec vp check for all changed server/web files
• pnpm --filter t3 run typecheck
• React best-practices review: no asset request before selection, no render-time store subscription, keyboard events isolated from the collapsible parent row
• Integrated browser verification in an isolated authenticated environment against the exact combined package: real generated-image activity rendered a compact work-log link and opened the signed image in a reusable right-panel tab
• pnpm --filter @t3tools/web run typecheck currently reports only existing unrelated errors in BranchToolbarBranchSelector.tsx, ModelPickerContent.tsx, PreviewAutomationHosts.tsx, and the atom query hooks

---

Note

Medium Risk
Touches signed asset issuance for absolute provider paths and WS asset URL creation with retries; path validation and exact basename checks limit exposure, but persisted right-panel state migrates to v9.

Overview
Adds end-to-end support for viewing provider-generated images from completed imageGeneration tool activity without exposing filesystem paths in the transcript.

Server & contracts: Introduces a generated-imageAssetResource (thread + activity id). assetsCreateUrl loads the thread projection, reads savedPath from the completed activity via GeneratedImageResolver, and issues signed, exact-file asset tokens after validating image preview paths. Transient “activity not projected yet” failures retry (~20× / 250ms); other errors fail immediately.

Web UI: Work log entries for completed generations get activity id + filename only (not savedPath). The timeline shows a compact filename link that opens a generated-image right-panel tab (GeneratedImagePanel fetches the signed URL on demand). Timeline folding and work-log grouping keep generated-image rows visible when surrounding tool output is collapsed.

Persistence: Right-panel store v9 adds generated-image surfaces with loadRequestId refresh on reopen.

^{Reviewed by Cursor Bugbot for commit 2944f46. Bugbot is set up for automated code reviews on this repo. Configure here.}

Note

Add generated image viewer to the chat right panel from tool activity

• Adds a GeneratedImagePanel component that fetches a signed asset URL for a generated-image resource and renders the image, with spinner and error states.
• Extends AssetAccess to issue and resolve time-limited tokens for generated images, restricting paths to workspace image-preview locations and canonicalizing before serving.
• Adds GeneratedImageResolver utilities to extract savedPath from completed imageGeneration tool activities and retry the lookup up to 20 times with 250ms spacing.
• Adds openGeneratedImage to rightPanelStore (bumps persisted state to version 9) and wires a click link in MessagesTimeline work rows to open the panel.
• Generated-image work entries are excluded from folded turns and contiguous work-log grouping so they stay visible in the timeline.
• Risk: persisted right-panel state is migrated to version 9; malformed generated-image entries are dropped.

^{Macroscope summarized 2944f46.}

[coderabbitai]

Important

Review skipped

Auto reviews are disabled on this repository. Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: Repository UI

Review profile: CHILL

Plan: Pro Plus

Run ID: 4391fcab-e7f3-423f-95a8-612dc993690b

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

[macroscopeapp]

Approvability

Verdict: Needs human review

This PR introduces a new feature allowing users to open generated images from tool activity, adding new UI components, state management, server-side resolution logic, and API contracts.

^{You can customize Macroscope's approvability policy. Learn more.}

[cursor]

Cursor Bugbot has reviewed your changes using high effort and found 1 potential issue.

^{❌ Bugbot Autofix is OFF. To automatically fix reported issues with cloud agents, enable autofix in the Cursor dashboard.}

^{Reviewed by Cursor Bugbot for commit 8d7a2efb38179f135feba25d1d31f0520f40a03c. Configure here.}

[juliusmarminge]

Closing in favor of #2829 (orchestration V2).

#2829 deletes the V1 orchestration layer this PR builds on — apps/server/src/orchestration/**, provider/Layers/*Adapter.ts and provider/Services/** are removed and replaced by apps/server/src/orchestration-v2/**, with the IPC surface renamed to ORCHESTRATION_V2_WS_METHODS. The files this PR touches either no longer exist or are rewritten, so it can't be rebased — it would need reimplementing against the V2 adapters.

This is not a judgement on the change itself. Several of these are real gaps we still want fixed; the base just moved out from under them.

Once #2829 merges, please rebase onto main, port the change to the V2 equivalent, and reopen (or open a fresh PR). Ping me and I'll prioritise the review.

[colonelpanic8]

What Changed

• Recognize completed imageGeneration activities and expose only their activity ID and filename to the client timeline.
• Resolve the provider-saved image path server-side and serve it through a signed, exact-file asset capability.
• Render generated images as compact evidence links in the work log instead of automatically expanding thumbnails.
• Open selected generated images in a dedicated right-panel tab alongside files, diffs, terminals, and browser previews.
• Keep generated-image links visible across turn/work-log folding and preserve open image tabs across reloads.
• Retry the short projection race when an image link is opened immediately after completion, while failing non-transient asset errors immediately.

Why

Generated images already arrive with a provider-saved path in completed tool activity, but that activity was rendered only as a text work-log row. The image should remain viewable after streaming finishes and after a thread is reloaded, without depending on the assistant to repeat a filename.

The interaction follows the Codex desktop pattern: images remain compact, link-like evidence in the transcript and open on demand in the existing right-side workspace. This avoids large automatic thumbnails and avoids requesting image assets until the user selects one.

This builds on the direction explored by #3984, which promotes image filenames explicitly mentioned in assistant Markdown, and #4321, which covers broader workspace/browser media references. Neither PR is included as a dependency here.

UI Changes

• Completed image-generation activity shows an image icon and filename link under the work-log row.
• Selecting the link opens or activates a named generated-image tab in the right panel.
• The panel shows the full image with contained sizing, loading state, and load-error state.
• Multiple generated images remain separate compact transcript links and separate reusable panel tabs.

Current browser evidence

Captured from the exact current PR head 9939cc9a46e6a33dbbca4961b1c755f9ed6fae21 in the combined package 0.0.29-patched-main-20260724 (integration 4dd4cef4039303179929a1dbdbf0c9b358c076f9). The fixture uses a real provider imageGeneration event in a disposable repository.

Compact work-log link	Generated-image right panel

MP4 version of the interaction

Checklist

• pnpm exec vp test run apps/web/src/rightPanelStore.test.ts apps/web/src/components/chat/MessagesTimeline.test.tsx apps/web/src/components/chat/GeneratedImagePanel.test.tsx apps/server/src/assets/GeneratedImageResolver.test.ts (48 tests)
• Targeted pnpm exec vp check for all changed server/web files
• pnpm --filter t3 run typecheck
• React best-practices review: no asset request before selection, no render-time store subscription, keyboard events isolated from the collapsible parent row
• Integrated browser verification in an isolated authenticated environment against the exact combined package: real generated-image activity rendered a compact work-log link and opened the signed image in a reusable right-panel tab
• pnpm --filter @t3tools/web run typecheck currently reports only existing unrelated errors in BranchToolbarBranchSelector.tsx, ModelPickerContent.tsx, PreviewAutomationHosts.tsx, and the atom query hooks

---

Note

Medium Risk
Touches signed asset issuance for absolute provider paths and WS asset URL creation with retries; path validation and exact basename checks limit exposure, but persisted right-panel state migrates to v9.

Overview
Adds end-to-end support for viewing provider-generated images from completed imageGeneration tool activity without exposing filesystem paths in the transcript.

Server & contracts: Introduces a generated-imageAssetResource (thread + activity id). assetsCreateUrl loads the thread projection, reads savedPath from the completed activity via GeneratedImageResolver, and issues signed, exact-file asset tokens after validating image preview paths. Transient “activity not projected yet” failures retry (~20× / 250ms); other errors fail immediately.

Web UI: Work log entries for completed generations get activity id + filename only (not savedPath). The timeline shows a compact filename link that opens a generated-image right-panel tab (GeneratedImagePanel fetches the signed URL on demand). Timeline folding and work-log grouping keep generated-image rows visible when surrounding tool output is collapsed.

Persistence: Right-panel store v9 adds generated-image surfaces with loadRequestId refresh on reopen.

^{Reviewed by Cursor Bugbot for commit 2944f46. Bugbot is set up for automated code reviews on this repo. Configure here.}

Note

Add generated image viewer to the chat right panel from tool activity

• Adds a GeneratedImagePanel component that fetches a signed asset URL for a generated-image resource and renders the image, with spinner and error states.
• Extends AssetAccess to issue and resolve time-limited tokens for generated images, restricting paths to workspace image-preview locations and canonicalizing before serving.
• Adds GeneratedImageResolver utilities to extract savedPath from completed imageGeneration tool activities and retry the lookup up to 20 times with 250ms spacing.
• Adds openGeneratedImage to rightPanelStore (bumps persisted state to version 9) and wires a click link in MessagesTimeline work rows to open the panel.
• Generated-image work entries are excluded from folded turns and contiguous work-log grouping so they stay visible in the timeline.
• Risk: persisted right-panel state is migrated to version 9; malformed generated-image entries are dropped.

^{Macroscope summarized 2944f46.}

[coderabbitai]

Important

Review skipped

Auto reviews are disabled on this repository. Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: Repository UI

Review profile: CHILL

Plan: Pro Plus

Run ID: 4391fcab-e7f3-423f-95a8-612dc993690b

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

[macroscopeapp]

Approvability

Verdict: Needs human review

This PR introduces a new feature allowing users to open generated images from tool activity, adding new UI components, state management, server-side resolution logic, and API contracts.

^{You can customize Macroscope's approvability policy. Learn more.}

[cursor]

Cursor Bugbot has reviewed your changes using high effort and found 1 potential issue.

^{❌ Bugbot Autofix is OFF. To automatically fix reported issues with cloud agents, enable autofix in the Cursor dashboard.}

^{Reviewed by Cursor Bugbot for commit 8d7a2efb38179f135feba25d1d31f0520f40a03c. Configure here.}

[juliusmarminge]

Closing in favor of #2829 (orchestration V2).

#2829 deletes the V1 orchestration layer this PR builds on — apps/server/src/orchestration/**, provider/Layers/*Adapter.ts and provider/Services/** are removed and replaced by apps/server/src/orchestration-v2/**, with the IPC surface renamed to ORCHESTRATION_V2_WS_METHODS. The files this PR touches either no longer exist or are rewritten, so it can't be rebased — it would need reimplementing against the V2 adapters.

This is not a judgement on the change itself. Several of these are real gaps we still want fixed; the base just moved out from under them.

Once #2829 merges, please rebase onto main, port the change to the V2 equivalent, and reopen (or open a fresh PR). Ping me and I'll prioritise the review.

[colonelpanic8]

What Changed

• Recognize completed imageGeneration activities and expose only their activity ID and filename to the client timeline.
• Resolve the provider-saved image path server-side and serve it through a signed, exact-file asset capability.
• Render generated images as compact evidence links in the work log instead of automatically expanding thumbnails.
• Open selected generated images in a dedicated right-panel tab alongside files, diffs, terminals, and browser previews.
• Keep generated-image links visible across turn/work-log folding and preserve open image tabs across reloads.
• Retry the short projection race when an image link is opened immediately after completion, while failing non-transient asset errors immediately.

Why

Generated images already arrive with a provider-saved path in completed tool activity, but that activity was rendered only as a text work-log row. The image should remain viewable after streaming finishes and after a thread is reloaded, without depending on the assistant to repeat a filename.

The interaction follows the Codex desktop pattern: images remain compact, link-like evidence in the transcript and open on demand in the existing right-side workspace. This avoids large automatic thumbnails and avoids requesting image assets until the user selects one.

This builds on the direction explored by #3984, which promotes image filenames explicitly mentioned in assistant Markdown, and #4321, which covers broader workspace/browser media references. Neither PR is included as a dependency here.

UI Changes

• Completed image-generation activity shows an image icon and filename link under the work-log row.
• Selecting the link opens or activates a named generated-image tab in the right panel.
• The panel shows the full image with contained sizing, loading state, and load-error state.
• Multiple generated images remain separate compact transcript links and separate reusable panel tabs.

Current browser evidence

Captured from the exact current PR head 9939cc9a46e6a33dbbca4961b1c755f9ed6fae21 in the combined package 0.0.29-patched-main-20260724 (integration 4dd4cef4039303179929a1dbdbf0c9b358c076f9). The fixture uses a real provider imageGeneration event in a disposable repository.

Compact work-log link	Generated-image right panel

MP4 version of the interaction

Checklist

• pnpm exec vp test run apps/web/src/rightPanelStore.test.ts apps/web/src/components/chat/MessagesTimeline.test.tsx apps/web/src/components/chat/GeneratedImagePanel.test.tsx apps/server/src/assets/GeneratedImageResolver.test.ts (48 tests)
• Targeted pnpm exec vp check for all changed server/web files
• pnpm --filter t3 run typecheck
• React best-practices review: no asset request before selection, no render-time store subscription, keyboard events isolated from the collapsible parent row
• Integrated browser verification in an isolated authenticated environment against the exact combined package: real generated-image activity rendered a compact work-log link and opened the signed image in a reusable right-panel tab
• pnpm --filter @t3tools/web run typecheck currently reports only existing unrelated errors in BranchToolbarBranchSelector.tsx, ModelPickerContent.tsx, PreviewAutomationHosts.tsx, and the atom query hooks

---

Note

Medium Risk
Touches signed asset issuance for absolute provider paths and WS asset URL creation with retries; path validation and exact basename checks limit exposure, but persisted right-panel state migrates to v9.

Overview
Adds end-to-end support for viewing provider-generated images from completed imageGeneration tool activity without exposing filesystem paths in the transcript.

Server & contracts: Introduces a generated-imageAssetResource (thread + activity id). assetsCreateUrl loads the thread projection, reads savedPath from the completed activity via GeneratedImageResolver, and issues signed, exact-file asset tokens after validating image preview paths. Transient “activity not projected yet” failures retry (~20× / 250ms); other errors fail immediately.

Web UI: Work log entries for completed generations get activity id + filename only (not savedPath). The timeline shows a compact filename link that opens a generated-image right-panel tab (GeneratedImagePanel fetches the signed URL on demand). Timeline folding and work-log grouping keep generated-image rows visible when surrounding tool output is collapsed.

Persistence: Right-panel store v9 adds generated-image surfaces with loadRequestId refresh on reopen.

^{Reviewed by Cursor Bugbot for commit 2944f46. Bugbot is set up for automated code reviews on this repo. Configure here.}

Note

Add generated image viewer to the chat right panel from tool activity

• Adds a GeneratedImagePanel component that fetches a signed asset URL for a generated-image resource and renders the image, with spinner and error states.
• Extends AssetAccess to issue and resolve time-limited tokens for generated images, restricting paths to workspace image-preview locations and canonicalizing before serving.
• Adds GeneratedImageResolver utilities to extract savedPath from completed imageGeneration tool activities and retry the lookup up to 20 times with 250ms spacing.
• Adds openGeneratedImage to rightPanelStore (bumps persisted state to version 9) and wires a click link in MessagesTimeline work rows to open the panel.
• Generated-image work entries are excluded from folded turns and contiguous work-log grouping so they stay visible in the timeline.
• Risk: persisted right-panel state is migrated to version 9; malformed generated-image entries are dropped.

^{Macroscope summarized 2944f46.}

[coderabbitai]

Important

Review skipped

Auto reviews are disabled on this repository. Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: Repository UI

Review profile: CHILL

Plan: Pro Plus

Run ID: 4391fcab-e7f3-423f-95a8-612dc993690b

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

[macroscopeapp]

Approvability

Verdict: Needs human review

This PR introduces a new feature allowing users to open generated images from tool activity, adding new UI components, state management, server-side resolution logic, and API contracts.

^{You can customize Macroscope's approvability policy. Learn more.}

[cursor]

Cursor Bugbot has reviewed your changes using high effort and found 1 potential issue.

^{❌ Bugbot Autofix is OFF. To automatically fix reported issues with cloud agents, enable autofix in the Cursor dashboard.}

^{Reviewed by Cursor Bugbot for commit 8d7a2efb38179f135feba25d1d31f0520f40a03c. Configure here.}

[juliusmarminge]

Closing in favor of #2829 (orchestration V2).

#2829 deletes the V1 orchestration layer this PR builds on — apps/server/src/orchestration/**, provider/Layers/*Adapter.ts and provider/Services/** are removed and replaced by apps/server/src/orchestration-v2/**, with the IPC surface renamed to ORCHESTRATION_V2_WS_METHODS. The files this PR touches either no longer exist or are rewritten, so it can't be rebased — it would need reimplementing against the V2 adapters.

This is not a judgement on the change itself. Several of these are real gaps we still want fixed; the base just moved out from under them.

Once #2829 merges, please rebase onto main, port the change to the V2 equivalent, and reopen (or open a fresh PR). Ping me and I'll prioritise the review.

[colonelpanic8]

What Changed

• Recognize completed imageGeneration activities and expose only their activity ID and filename to the client timeline.
• Resolve the provider-saved image path server-side and serve it through a signed, exact-file asset capability.
• Render generated images as compact evidence links in the work log instead of automatically expanding thumbnails.
• Open selected generated images in a dedicated right-panel tab alongside files, diffs, terminals, and browser previews.
• Keep generated-image links visible across turn/work-log folding and preserve open image tabs across reloads.
• Retry the short projection race when an image link is opened immediately after completion, while failing non-transient asset errors immediately.

Why

Generated images already arrive with a provider-saved path in completed tool activity, but that activity was rendered only as a text work-log row. The image should remain viewable after streaming finishes and after a thread is reloaded, without depending on the assistant to repeat a filename.

The interaction follows the Codex desktop pattern: images remain compact, link-like evidence in the transcript and open on demand in the existing right-side workspace. This avoids large automatic thumbnails and avoids requesting image assets until the user selects one.

This builds on the direction explored by #3984, which promotes image filenames explicitly mentioned in assistant Markdown, and #4321, which covers broader workspace/browser media references. Neither PR is included as a dependency here.

UI Changes

• Completed image-generation activity shows an image icon and filename link under the work-log row.
• Selecting the link opens or activates a named generated-image tab in the right panel.
• The panel shows the full image with contained sizing, loading state, and load-error state.
• Multiple generated images remain separate compact transcript links and separate reusable panel tabs.

Current browser evidence

Captured from the exact current PR head 9939cc9a46e6a33dbbca4961b1c755f9ed6fae21 in the combined package 0.0.29-patched-main-20260724 (integration 4dd4cef4039303179929a1dbdbf0c9b358c076f9). The fixture uses a real provider imageGeneration event in a disposable repository.

Compact work-log link	Generated-image right panel

MP4 version of the interaction

Checklist

• pnpm exec vp test run apps/web/src/rightPanelStore.test.ts apps/web/src/components/chat/MessagesTimeline.test.tsx apps/web/src/components/chat/GeneratedImagePanel.test.tsx apps/server/src/assets/GeneratedImageResolver.test.ts (48 tests)
• Targeted pnpm exec vp check for all changed server/web files
• pnpm --filter t3 run typecheck
• React best-practices review: no asset request before selection, no render-time store subscription, keyboard events isolated from the collapsible parent row
• Integrated browser verification in an isolated authenticated environment against the exact combined package: real generated-image activity rendered a compact work-log link and opened the signed image in a reusable right-panel tab
• pnpm --filter @t3tools/web run typecheck currently reports only existing unrelated errors in BranchToolbarBranchSelector.tsx, ModelPickerContent.tsx, PreviewAutomationHosts.tsx, and the atom query hooks

---

Note

Medium Risk
Touches signed asset issuance for absolute provider paths and WS asset URL creation with retries; path validation and exact basename checks limit exposure, but persisted right-panel state migrates to v9.

Overview
Adds end-to-end support for viewing provider-generated images from completed imageGeneration tool activity without exposing filesystem paths in the transcript.

Server & contracts: Introduces a generated-imageAssetResource (thread + activity id). assetsCreateUrl loads the thread projection, reads savedPath from the completed activity via GeneratedImageResolver, and issues signed, exact-file asset tokens after validating image preview paths. Transient “activity not projected yet” failures retry (~20× / 250ms); other errors fail immediately.

Web UI: Work log entries for completed generations get activity id + filename only (not savedPath). The timeline shows a compact filename link that opens a generated-image right-panel tab (GeneratedImagePanel fetches the signed URL on demand). Timeline folding and work-log grouping keep generated-image rows visible when surrounding tool output is collapsed.

Persistence: Right-panel store v9 adds generated-image surfaces with loadRequestId refresh on reopen.

^{Reviewed by Cursor Bugbot for commit 2944f46. Bugbot is set up for automated code reviews on this repo. Configure here.}

Note

Add generated image viewer to the chat right panel from tool activity

• Adds a GeneratedImagePanel component that fetches a signed asset URL for a generated-image resource and renders the image, with spinner and error states.
• Extends AssetAccess to issue and resolve time-limited tokens for generated images, restricting paths to workspace image-preview locations and canonicalizing before serving.
• Adds GeneratedImageResolver utilities to extract savedPath from completed imageGeneration tool activities and retry the lookup up to 20 times with 250ms spacing.
• Adds openGeneratedImage to rightPanelStore (bumps persisted state to version 9) and wires a click link in MessagesTimeline work rows to open the panel.
• Generated-image work entries are excluded from folded turns and contiguous work-log grouping so they stay visible in the timeline.
• Risk: persisted right-panel state is migrated to version 9; malformed generated-image entries are dropped.

^{Macroscope summarized 2944f46.}

[coderabbitai]

Important

Review skipped

Auto reviews are disabled on this repository. Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: Repository UI

Review profile: CHILL

Plan: Pro Plus

Run ID: 4391fcab-e7f3-423f-95a8-612dc993690b

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

[macroscopeapp]

Approvability

Verdict: Needs human review

This PR introduces a new feature allowing users to open generated images from tool activity, adding new UI components, state management, server-side resolution logic, and API contracts.

^{You can customize Macroscope's approvability policy. Learn more.}

[cursor]

Cursor Bugbot has reviewed your changes using high effort and found 1 potential issue.

^{❌ Bugbot Autofix is OFF. To automatically fix reported issues with cloud agents, enable autofix in the Cursor dashboard.}

^{Reviewed by Cursor Bugbot for commit 8d7a2efb38179f135feba25d1d31f0520f40a03c. Configure here.}

[juliusmarminge]

Closing in favor of #2829 (orchestration V2).

#2829 deletes the V1 orchestration layer this PR builds on — apps/server/src/orchestration/**, provider/Layers/*Adapter.ts and provider/Services/** are removed and replaced by apps/server/src/orchestration-v2/**, with the IPC surface renamed to ORCHESTRATION_V2_WS_METHODS. The files this PR touches either no longer exist or are rewritten, so it can't be rebased — it would need reimplementing against the V2 adapters.

This is not a judgement on the change itself. Several of these are real gaps we still want fixed; the base just moved out from under them.

Once #2829 merges, please rebase onto main, port the change to the V2 equivalent, and reopen (or open a fresh PR). Ping me and I'll prioritise the review.

[colonelpanic8]

What Changed

• Recognize completed imageGeneration activities and expose only their activity ID and filename to the client timeline.
• Resolve the provider-saved image path server-side and serve it through a signed, exact-file asset capability.
• Render generated images as compact evidence links in the work log instead of automatically expanding thumbnails.
• Open selected generated images in a dedicated right-panel tab alongside files, diffs, terminals, and browser previews.
• Keep generated-image links visible across turn/work-log folding and preserve open image tabs across reloads.
• Retry the short projection race when an image link is opened immediately after completion, while failing non-transient asset errors immediately.

Why

Generated images already arrive with a provider-saved path in completed tool activity, but that activity was rendered only as a text work-log row. The image should remain viewable after streaming finishes and after a thread is reloaded, without depending on the assistant to repeat a filename.

The interaction follows the Codex desktop pattern: images remain compact, link-like evidence in the transcript and open on demand in the existing right-side workspace. This avoids large automatic thumbnails and avoids requesting image assets until the user selects one.

This builds on the direction explored by #3984, which promotes image filenames explicitly mentioned in assistant Markdown, and #4321, which covers broader workspace/browser media references. Neither PR is included as a dependency here.

UI Changes

• Completed image-generation activity shows an image icon and filename link under the work-log row.
• Selecting the link opens or activates a named generated-image tab in the right panel.
• The panel shows the full image with contained sizing, loading state, and load-error state.
• Multiple generated images remain separate compact transcript links and separate reusable panel tabs.

Current browser evidence

Captured from the exact current PR head 9939cc9a46e6a33dbbca4961b1c755f9ed6fae21 in the combined package 0.0.29-patched-main-20260724 (integration 4dd4cef4039303179929a1dbdbf0c9b358c076f9). The fixture uses a real provider imageGeneration event in a disposable repository.

Compact work-log link	Generated-image right panel

MP4 version of the interaction

Checklist

• pnpm exec vp test run apps/web/src/rightPanelStore.test.ts apps/web/src/components/chat/MessagesTimeline.test.tsx apps/web/src/components/chat/GeneratedImagePanel.test.tsx apps/server/src/assets/GeneratedImageResolver.test.ts (48 tests)
• Targeted pnpm exec vp check for all changed server/web files
• pnpm --filter t3 run typecheck
• React best-practices review: no asset request before selection, no render-time store subscription, keyboard events isolated from the collapsible parent row
• Integrated browser verification in an isolated authenticated environment against the exact combined package: real generated-image activity rendered a compact work-log link and opened the signed image in a reusable right-panel tab
• pnpm --filter @t3tools/web run typecheck currently reports only existing unrelated errors in BranchToolbarBranchSelector.tsx, ModelPickerContent.tsx, PreviewAutomationHosts.tsx, and the atom query hooks

---

Note

Medium Risk
Touches signed asset issuance for absolute provider paths and WS asset URL creation with retries; path validation and exact basename checks limit exposure, but persisted right-panel state migrates to v9.

Overview
Adds end-to-end support for viewing provider-generated images from completed imageGeneration tool activity without exposing filesystem paths in the transcript.

Server & contracts: Introduces a generated-imageAssetResource (thread + activity id). assetsCreateUrl loads the thread projection, reads savedPath from the completed activity via GeneratedImageResolver, and issues signed, exact-file asset tokens after validating image preview paths. Transient “activity not projected yet” failures retry (~20× / 250ms); other errors fail immediately.

Web UI: Work log entries for completed generations get activity id + filename only (not savedPath). The timeline shows a compact filename link that opens a generated-image right-panel tab (GeneratedImagePanel fetches the signed URL on demand). Timeline folding and work-log grouping keep generated-image rows visible when surrounding tool output is collapsed.

Persistence: Right-panel store v9 adds generated-image surfaces with loadRequestId refresh on reopen.

^{Reviewed by Cursor Bugbot for commit 2944f46. Bugbot is set up for automated code reviews on this repo. Configure here.}

Note

Add generated image viewer to the chat right panel from tool activity

• Adds a GeneratedImagePanel component that fetches a signed asset URL for a generated-image resource and renders the image, with spinner and error states.
• Extends AssetAccess to issue and resolve time-limited tokens for generated images, restricting paths to workspace image-preview locations and canonicalizing before serving.
• Adds GeneratedImageResolver utilities to extract savedPath from completed imageGeneration tool activities and retry the lookup up to 20 times with 250ms spacing.
• Adds openGeneratedImage to rightPanelStore (bumps persisted state to version 9) and wires a click link in MessagesTimeline work rows to open the panel.
• Generated-image work entries are excluded from folded turns and contiguous work-log grouping so they stay visible in the timeline.
• Risk: persisted right-panel state is migrated to version 9; malformed generated-image entries are dropped.

^{Macroscope summarized 2944f46.}

[coderabbitai]

Important

Review skipped

Auto reviews are disabled on this repository. Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: Repository UI

Review profile: CHILL

Plan: Pro Plus

Run ID: 4391fcab-e7f3-423f-95a8-612dc993690b

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

[macroscopeapp]

Approvability

Verdict: Needs human review

This PR introduces a new feature allowing users to open generated images from tool activity, adding new UI components, state management, server-side resolution logic, and API contracts.

^{You can customize Macroscope's approvability policy. Learn more.}

[cursor]

Cursor Bugbot has reviewed your changes using high effort and found 1 potential issue.

^{❌ Bugbot Autofix is OFF. To automatically fix reported issues with cloud agents, enable autofix in the Cursor dashboard.}

^{Reviewed by Cursor Bugbot for commit 8d7a2efb38179f135feba25d1d31f0520f40a03c. Configure here.}

[juliusmarminge]

Closing in favor of #2829 (orchestration V2).

#2829 deletes the V1 orchestration layer this PR builds on — apps/server/src/orchestration/**, provider/Layers/*Adapter.ts and provider/Services/** are removed and replaced by apps/server/src/orchestration-v2/**, with the IPC surface renamed to ORCHESTRATION_V2_WS_METHODS. The files this PR touches either no longer exist or are rewritten, so it can't be rebased — it would need reimplementing against the V2 adapters.

This is not a judgement on the change itself. Several of these are real gaps we still want fixed; the base just moved out from under them.

Once #2829 merges, please rebase onto main, port the change to the V2 equivalent, and reopen (or open a fresh PR). Ping me and I'll prioritise the review.

[colonelpanic8]

What Changed

• Recognize completed imageGeneration activities and expose only their activity ID and filename to the client timeline.
• Resolve the provider-saved image path server-side and serve it through a signed, exact-file asset capability.
• Render generated images as compact evidence links in the work log instead of automatically expanding thumbnails.
• Open selected generated images in a dedicated right-panel tab alongside files, diffs, terminals, and browser previews.
• Keep generated-image links visible across turn/work-log folding and preserve open image tabs across reloads.
• Retry the short projection race when an image link is opened immediately after completion, while failing non-transient asset errors immediately.

Why

Generated images already arrive with a provider-saved path in completed tool activity, but that activity was rendered only as a text work-log row. The image should remain viewable after streaming finishes and after a thread is reloaded, without depending on the assistant to repeat a filename.

The interaction follows the Codex desktop pattern: images remain compact, link-like evidence in the transcript and open on demand in the existing right-side workspace. This avoids large automatic thumbnails and avoids requesting image assets until the user selects one.

This builds on the direction explored by #3984, which promotes image filenames explicitly mentioned in assistant Markdown, and #4321, which covers broader workspace/browser media references. Neither PR is included as a dependency here.

UI Changes

• Completed image-generation activity shows an image icon and filename link under the work-log row.
• Selecting the link opens or activates a named generated-image tab in the right panel.
• The panel shows the full image with contained sizing, loading state, and load-error state.
• Multiple generated images remain separate compact transcript links and separate reusable panel tabs.

Current browser evidence

Captured from the exact current PR head 9939cc9a46e6a33dbbca4961b1c755f9ed6fae21 in the combined package 0.0.29-patched-main-20260724 (integration 4dd4cef4039303179929a1dbdbf0c9b358c076f9). The fixture uses a real provider imageGeneration event in a disposable repository.

Compact work-log link	Generated-image right panel

MP4 version of the interaction

Checklist

• pnpm exec vp test run apps/web/src/rightPanelStore.test.ts apps/web/src/components/chat/MessagesTimeline.test.tsx apps/web/src/components/chat/GeneratedImagePanel.test.tsx apps/server/src/assets/GeneratedImageResolver.test.ts (48 tests)
• Targeted pnpm exec vp check for all changed server/web files
• pnpm --filter t3 run typecheck
• React best-practices review: no asset request before selection, no render-time store subscription, keyboard events isolated from the collapsible parent row
• Integrated browser verification in an isolated authenticated environment against the exact combined package: real generated-image activity rendered a compact work-log link and opened the signed image in a reusable right-panel tab
• pnpm --filter @t3tools/web run typecheck currently reports only existing unrelated errors in BranchToolbarBranchSelector.tsx, ModelPickerContent.tsx, PreviewAutomationHosts.tsx, and the atom query hooks

---

Note

Medium Risk
Touches signed asset issuance for absolute provider paths and WS asset URL creation with retries; path validation and exact basename checks limit exposure, but persisted right-panel state migrates to v9.

Overview
Adds end-to-end support for viewing provider-generated images from completed imageGeneration tool activity without exposing filesystem paths in the transcript.

Server & contracts: Introduces a generated-imageAssetResource (thread + activity id). assetsCreateUrl loads the thread projection, reads savedPath from the completed activity via GeneratedImageResolver, and issues signed, exact-file asset tokens after validating image preview paths. Transient “activity not projected yet” failures retry (~20× / 250ms); other errors fail immediately.

Web UI: Work log entries for completed generations get activity id + filename only (not savedPath). The timeline shows a compact filename link that opens a generated-image right-panel tab (GeneratedImagePanel fetches the signed URL on demand). Timeline folding and work-log grouping keep generated-image rows visible when surrounding tool output is collapsed.

Persistence: Right-panel store v9 adds generated-image surfaces with loadRequestId refresh on reopen.

^{Reviewed by Cursor Bugbot for commit 2944f46. Bugbot is set up for automated code reviews on this repo. Configure here.}

Note

Add generated image viewer to the chat right panel from tool activity

• Adds a GeneratedImagePanel component that fetches a signed asset URL for a generated-image resource and renders the image, with spinner and error states.
• Extends AssetAccess to issue and resolve time-limited tokens for generated images, restricting paths to workspace image-preview locations and canonicalizing before serving.
• Adds GeneratedImageResolver utilities to extract savedPath from completed imageGeneration tool activities and retry the lookup up to 20 times with 250ms spacing.
• Adds openGeneratedImage to rightPanelStore (bumps persisted state to version 9) and wires a click link in MessagesTimeline work rows to open the panel.
• Generated-image work entries are excluded from folded turns and contiguous work-log grouping so they stay visible in the timeline.
• Risk: persisted right-panel state is migrated to version 9; malformed generated-image entries are dropped.

^{Macroscope summarized 2944f46.}

[coderabbitai]

Important

Review skipped

Auto reviews are disabled on this repository. Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: Repository UI

Review profile: CHILL

Plan: Pro Plus

Run ID: 4391fcab-e7f3-423f-95a8-612dc993690b

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

[macroscopeapp]

Approvability

Verdict: Needs human review

This PR introduces a new feature allowing users to open generated images from tool activity, adding new UI components, state management, server-side resolution logic, and API contracts.

^{You can customize Macroscope's approvability policy. Learn more.}

[cursor]

Cursor Bugbot has reviewed your changes using high effort and found 1 potential issue.

^{❌ Bugbot Autofix is OFF. To automatically fix reported issues with cloud agents, enable autofix in the Cursor dashboard.}

^{Reviewed by Cursor Bugbot for commit 8d7a2efb38179f135feba25d1d31f0520f40a03c. Configure here.}

[juliusmarminge]

Closing in favor of #2829 (orchestration V2).

#2829 deletes the V1 orchestration layer this PR builds on — apps/server/src/orchestration/**, provider/Layers/*Adapter.ts and provider/Services/** are removed and replaced by apps/server/src/orchestration-v2/**, with the IPC surface renamed to ORCHESTRATION_V2_WS_METHODS. The files this PR touches either no longer exist or are rewritten, so it can't be rebased — it would need reimplementing against the V2 adapters.

This is not a judgement on the change itself. Several of these are real gaps we still want fixed; the base just moved out from under them.

Once #2829 merges, please rebase onto main, port the change to the V2 equivalent, and reopen (or open a fresh PR). Ping me and I'll prioritise the review.

[colonelpanic8]

What Changed

• Recognize completed imageGeneration activities and expose only their activity ID and filename to the client timeline.
• Resolve the provider-saved image path server-side and serve it through a signed, exact-file asset capability.
• Render generated images as compact evidence links in the work log instead of automatically expanding thumbnails.
• Open selected generated images in a dedicated right-panel tab alongside files, diffs, terminals, and browser previews.
• Keep generated-image links visible across turn/work-log folding and preserve open image tabs across reloads.
• Retry the short projection race when an image link is opened immediately after completion, while failing non-transient asset errors immediately.

Why

Generated images already arrive with a provider-saved path in completed tool activity, but that activity was rendered only as a text work-log row. The image should remain viewable after streaming finishes and after a thread is reloaded, without depending on the assistant to repeat a filename.

The interaction follows the Codex desktop pattern: images remain compact, link-like evidence in the transcript and open on demand in the existing right-side workspace. This avoids large automatic thumbnails and avoids requesting image assets until the user selects one.

This builds on the direction explored by #3984, which promotes image filenames explicitly mentioned in assistant Markdown, and #4321, which covers broader workspace/browser media references. Neither PR is included as a dependency here.

UI Changes

• Completed image-generation activity shows an image icon and filename link under the work-log row.
• Selecting the link opens or activates a named generated-image tab in the right panel.
• The panel shows the full image with contained sizing, loading state, and load-error state.
• Multiple generated images remain separate compact transcript links and separate reusable panel tabs.

Current browser evidence

Captured from the exact current PR head 9939cc9a46e6a33dbbca4961b1c755f9ed6fae21 in the combined package 0.0.29-patched-main-20260724 (integration 4dd4cef4039303179929a1dbdbf0c9b358c076f9). The fixture uses a real provider imageGeneration event in a disposable repository.

Compact work-log link	Generated-image right panel

MP4 version of the interaction

Checklist

• pnpm exec vp test run apps/web/src/rightPanelStore.test.ts apps/web/src/components/chat/MessagesTimeline.test.tsx apps/web/src/components/chat/GeneratedImagePanel.test.tsx apps/server/src/assets/GeneratedImageResolver.test.ts (48 tests)
• Targeted pnpm exec vp check for all changed server/web files
• pnpm --filter t3 run typecheck
• React best-practices review: no asset request before selection, no render-time store subscription, keyboard events isolated from the collapsible parent row
• Integrated browser verification in an isolated authenticated environment against the exact combined package: real generated-image activity rendered a compact work-log link and opened the signed image in a reusable right-panel tab
• pnpm --filter @t3tools/web run typecheck currently reports only existing unrelated errors in BranchToolbarBranchSelector.tsx, ModelPickerContent.tsx, PreviewAutomationHosts.tsx, and the atom query hooks

---

Note

Medium Risk
Touches signed asset issuance for absolute provider paths and WS asset URL creation with retries; path validation and exact basename checks limit exposure, but persisted right-panel state migrates to v9.

Overview
Adds end-to-end support for viewing provider-generated images from completed imageGeneration tool activity without exposing filesystem paths in the transcript.

Server & contracts: Introduces a generated-imageAssetResource (thread + activity id). assetsCreateUrl loads the thread projection, reads savedPath from the completed activity via GeneratedImageResolver, and issues signed, exact-file asset tokens after validating image preview paths. Transient “activity not projected yet” failures retry (~20× / 250ms); other errors fail immediately.

Web UI: Work log entries for completed generations get activity id + filename only (not savedPath). The timeline shows a compact filename link that opens a generated-image right-panel tab (GeneratedImagePanel fetches the signed URL on demand). Timeline folding and work-log grouping keep generated-image rows visible when surrounding tool output is collapsed.

Persistence: Right-panel store v9 adds generated-image surfaces with loadRequestId refresh on reopen.

^{Reviewed by Cursor Bugbot for commit 2944f46. Bugbot is set up for automated code reviews on this repo. Configure here.}

Note

Add generated image viewer to the chat right panel from tool activity

• Adds a GeneratedImagePanel component that fetches a signed asset URL for a generated-image resource and renders the image, with spinner and error states.
• Extends AssetAccess to issue and resolve time-limited tokens for generated images, restricting paths to workspace image-preview locations and canonicalizing before serving.
• Adds GeneratedImageResolver utilities to extract savedPath from completed imageGeneration tool activities and retry the lookup up to 20 times with 250ms spacing.
• Adds openGeneratedImage to rightPanelStore (bumps persisted state to version 9) and wires a click link in MessagesTimeline work rows to open the panel.
• Generated-image work entries are excluded from folded turns and contiguous work-log grouping so they stay visible in the timeline.
• Risk: persisted right-panel state is migrated to version 9; malformed generated-image entries are dropped.

^{Macroscope summarized 2944f46.}

[coderabbitai]

Important

Review skipped

Auto reviews are disabled on this repository. Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: Repository UI

Review profile: CHILL

Plan: Pro Plus

Run ID: 4391fcab-e7f3-423f-95a8-612dc993690b

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

[macroscopeapp]

Approvability

Verdict: Needs human review

This PR introduces a new feature allowing users to open generated images from tool activity, adding new UI components, state management, server-side resolution logic, and API contracts.

^{You can customize Macroscope's approvability policy. Learn more.}

[cursor]

Cursor Bugbot has reviewed your changes using high effort and found 1 potential issue.

^{❌ Bugbot Autofix is OFF. To automatically fix reported issues with cloud agents, enable autofix in the Cursor dashboard.}

^{Reviewed by Cursor Bugbot for commit 8d7a2efb38179f135feba25d1d31f0520f40a03c. Configure here.}

[juliusmarminge]

Closing in favor of #2829 (orchestration V2).

#2829 deletes the V1 orchestration layer this PR builds on — apps/server/src/orchestration/**, provider/Layers/*Adapter.ts and provider/Services/** are removed and replaced by apps/server/src/orchestration-v2/**, with the IPC surface renamed to ORCHESTRATION_V2_WS_METHODS. The files this PR touches either no longer exist or are rewritten, so it can't be rebased — it would need reimplementing against the V2 adapters.

This is not a judgement on the change itself. Several of these are real gaps we still want fixed; the base just moved out from under them.

Once #2829 merges, please rebase onto main, port the change to the V2 equivalent, and reopen (or open a fresh PR). Ping me and I'll prioritise the review.

[colonelpanic8]

What Changed

• Recognize completed imageGeneration activities and expose only their activity ID and filename to the client timeline.
• Resolve the provider-saved image path server-side and serve it through a signed, exact-file asset capability.
• Render generated images as compact evidence links in the work log instead of automatically expanding thumbnails.
• Open selected generated images in a dedicated right-panel tab alongside files, diffs, terminals, and browser previews.
• Keep generated-image links visible across turn/work-log folding and preserve open image tabs across reloads.
• Retry the short projection race when an image link is opened immediately after completion, while failing non-transient asset errors immediately.

Why

Generated images already arrive with a provider-saved path in completed tool activity, but that activity was rendered only as a text work-log row. The image should remain viewable after streaming finishes and after a thread is reloaded, without depending on the assistant to repeat a filename.

The interaction follows the Codex desktop pattern: images remain compact, link-like evidence in the transcript and open on demand in the existing right-side workspace. This avoids large automatic thumbnails and avoids requesting image assets until the user selects one.

This builds on the direction explored by #3984, which promotes image filenames explicitly mentioned in assistant Markdown, and #4321, which covers broader workspace/browser media references. Neither PR is included as a dependency here.

UI Changes

• Completed image-generation activity shows an image icon and filename link under the work-log row.
• Selecting the link opens or activates a named generated-image tab in the right panel.
• The panel shows the full image with contained sizing, loading state, and load-error state.
• Multiple generated images remain separate compact transcript links and separate reusable panel tabs.

Current browser evidence

Captured from the exact current PR head 9939cc9a46e6a33dbbca4961b1c755f9ed6fae21 in the combined package 0.0.29-patched-main-20260724 (integration 4dd4cef4039303179929a1dbdbf0c9b358c076f9). The fixture uses a real provider imageGeneration event in a disposable repository.

Compact work-log link	Generated-image right panel

MP4 version of the interaction

Checklist

• pnpm exec vp test run apps/web/src/rightPanelStore.test.ts apps/web/src/components/chat/MessagesTimeline.test.tsx apps/web/src/components/chat/GeneratedImagePanel.test.tsx apps/server/src/assets/GeneratedImageResolver.test.ts (48 tests)
• Targeted pnpm exec vp check for all changed server/web files
• pnpm --filter t3 run typecheck
• React best-practices review: no asset request before selection, no render-time store subscription, keyboard events isolated from the collapsible parent row
• Integrated browser verification in an isolated authenticated environment against the exact combined package: real generated-image activity rendered a compact work-log link and opened the signed image in a reusable right-panel tab
• pnpm --filter @t3tools/web run typecheck currently reports only existing unrelated errors in BranchToolbarBranchSelector.tsx, ModelPickerContent.tsx, PreviewAutomationHosts.tsx, and the atom query hooks

---

Note

Medium Risk
Touches signed asset issuance for absolute provider paths and WS asset URL creation with retries; path validation and exact basename checks limit exposure, but persisted right-panel state migrates to v9.

Overview
Adds end-to-end support for viewing provider-generated images from completed imageGeneration tool activity without exposing filesystem paths in the transcript.

Server & contracts: Introduces a generated-imageAssetResource (thread + activity id). assetsCreateUrl loads the thread projection, reads savedPath from the completed activity via GeneratedImageResolver, and issues signed, exact-file asset tokens after validating image preview paths. Transient “activity not projected yet” failures retry (~20× / 250ms); other errors fail immediately.

Web UI: Work log entries for completed generations get activity id + filename only (not savedPath). The timeline shows a compact filename link that opens a generated-image right-panel tab (GeneratedImagePanel fetches the signed URL on demand). Timeline folding and work-log grouping keep generated-image rows visible when surrounding tool output is collapsed.

Persistence: Right-panel store v9 adds generated-image surfaces with loadRequestId refresh on reopen.

^{Reviewed by Cursor Bugbot for commit 2944f46. Bugbot is set up for automated code reviews on this repo. Configure here.}

Note

Add generated image viewer to the chat right panel from tool activity

• Adds a GeneratedImagePanel component that fetches a signed asset URL for a generated-image resource and renders the image, with spinner and error states.
• Extends AssetAccess to issue and resolve time-limited tokens for generated images, restricting paths to workspace image-preview locations and canonicalizing before serving.
• Adds GeneratedImageResolver utilities to extract savedPath from completed imageGeneration tool activities and retry the lookup up to 20 times with 250ms spacing.
• Adds openGeneratedImage to rightPanelStore (bumps persisted state to version 9) and wires a click link in MessagesTimeline work rows to open the panel.
• Generated-image work entries are excluded from folded turns and contiguous work-log grouping so they stay visible in the timeline.
• Risk: persisted right-panel state is migrated to version 9; malformed generated-image entries are dropped.

^{Macroscope summarized 2944f46.}

[coderabbitai]

Important

Review skipped

Auto reviews are disabled on this repository. Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: Repository UI

Review profile: CHILL

Plan: Pro Plus

Run ID: 4391fcab-e7f3-423f-95a8-612dc993690b

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

[macroscopeapp]

Approvability

Verdict: Needs human review

This PR introduces a new feature allowing users to open generated images from tool activity, adding new UI components, state management, server-side resolution logic, and API contracts.

^{You can customize Macroscope's approvability policy. Learn more.}

[cursor]

Cursor Bugbot has reviewed your changes using high effort and found 1 potential issue.

^{❌ Bugbot Autofix is OFF. To automatically fix reported issues with cloud agents, enable autofix in the Cursor dashboard.}

^{Reviewed by Cursor Bugbot for commit 8d7a2efb38179f135feba25d1d31f0520f40a03c. Configure here.}

[juliusmarminge]

Closing in favor of #2829 (orchestration V2).

#2829 deletes the V1 orchestration layer this PR builds on — apps/server/src/orchestration/**, provider/Layers/*Adapter.ts and provider/Services/** are removed and replaced by apps/server/src/orchestration-v2/**, with the IPC surface renamed to ORCHESTRATION_V2_WS_METHODS. The files this PR touches either no longer exist or are rewritten, so it can't be rebased — it would need reimplementing against the V2 adapters.

This is not a judgement on the change itself. Several of these are real gaps we still want fixed; the base just moved out from under them.

Once #2829 merges, please rebase onto main, port the change to the V2 equivalent, and reopen (or open a fresh PR). Ping me and I'll prioritise the review.