feat: render saved media in chat across clients

[gabrielelpidio]

Summary

• Add secure signed asset access for saved screenshots, recordings, workspace files, and browser artifacts.
• Let preview snapshots save to workspace paths or browser artifact storage.
• Render saved media directly in web and desktop chat markdown, including expanded images and settled-turn galleries.
• Preserve image-view paths in projected provider activity.
• Add the corresponding mobile behavior: signed media resolution, inline images, the existing full-screen image viewer, and user-initiated recording controls.
• Share markdown media path classification across web and mobile.

This combines the work from #4321 with mobile support in one PR targeting main.

Follow-up

• CloseRender saved screenshots and recordings in chat markdown #4321 if this PR merges first.

Testing

• The original Render saved screenshots and recordings in chat markdown #4321 focused suite passed 277 tests before the mobile split.
• The mobile addition passed 44 focused shared/mobile markdown tests.
• Shared, web, and mobile typechecks passed.
• Targeted lint and formatting passed.
• Mobile native static analysis passed; optional local SwiftLint, ktlint, and detekt binaries were unavailable and skipped.
• Web production build passed.
• Verified signed workspace images inline and expanded in the real web client.
• Verified user and assistant images, expanded images, and MP4 previews on an iPhone 17 Pro simulator running iOS 26.5.
• Re-ran the focused tests, package typechecks, targeted lint and formatting, and mobile native static analysis after rebasing onto the current main.

Visual evidence

• Web: inline user/assistant images and the expanded-image dialog.
• Mobile before: workspace-relative image nodes reserve space but remain blank.
• Mobile after: images render in both message roles and open full-screen.
• Mobile recordings: inline controls render in both message roles and playback remains user initiated.

Model: GPT-5.6-sol
Harness: T3 Code (Codex)

Note

Render saved media (images and videos) in chat across web and mobile clients

• Adds end-to-end support for displaying image_view and imageGeneration media outputs in chat timelines on web and mobile, resolving asset URLs via thread-aware asset resolution.
• Introduces thread-image and browser-artifact asset resource types with strict symlink-safe file access using no-follow semantics on all platforms (noFollowFile.ts).
• Extends the messages timeline on web to emit image-output rows and inline assistantImageOutputs, with thumbnail galleries, loading/failure states, and click-to-expand previews (MessagesTimeline.logic.ts, MessagesTimeline.tsx).
• Adds a MarkdownMedia component on both web (MarkdownMedia.tsx) and mobile (MarkdownMedia.tsx) that resolves workspace-relative and direct media sources and renders images or videos with unavailable fallback states.
• Extends the preview_snapshot MCP tool to accept save/savePath parameters and persist screenshots to the workspace or a dedicated artifacts directory (handlers.ts).
• Risk: asset resolution for thread-image re-canonicalizes paths on every request; post-issuance symlink swaps are detected and return null, not an error, so callers must handle silent resolution failures.

^{Macroscope summarized 275e7d9.}

---

Note

High Risk
Touches signed asset serving, symlink-safe file I/O, and workspace path validation—security-sensitive paths with a large cross-stack surface (server, web, mobile, contracts).

Overview
Chat on web, mobile, and native iOS markdown can now show images and videos from markdown, workspace paths, browser artifacts, and tool image outputs—not just plain links or blank placeholders.

Signed asset access adds browser-artifact and thread-image resources, video preview extensions, and stricter workspace containment (e.g. ..name dirs vs real .. escapes). Sensitive reads/writes use no-follow open helpers on Linux/Darwin/fallback platforms so symlink swaps after token issuance don’t redirect serving or snapshot saves.

Preview preview_snapshot can persist PNGs via save (artifact dir) or savePath (workspace) with containment checks; tool docs steer agents to embed returned paths in replies.

Timeline derives deduplicated image galleries on terminal assistant rows (and trailing rows when needed), withholding in-flight turn images until the turn settles.

Provider projection keeps image-view/generation paths while still pruning huge base64 payloads from activity data.

^{Reviewed by Cursor Bugbot for commit 275e7d9. Bugbot is set up for automated code reviews on this repo. Configure here.}

[coderabbitai]

Important

Review skipped

Auto reviews are disabled on this repository. Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: Repository UI

Review profile: CHILL

Plan: Pro Plus

Run ID: 27353ca3-545c-4bd2-9346-bed42f19dd44

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

[cursor]

Cursor Bugbot has reviewed your changes using high effort and found 1 potential issue.

^{❌ Bugbot Autofix is OFF. To automatically fix reported issues with cloud agents, enable autofix in the Cursor dashboard.}

^{Reviewed by Cursor Bugbot for commit 5445615. Configure here.}

[macroscopeapp]

Approvability

Verdict: Needs human review

This PR introduces a new feature for rendering saved media (images/videos) in chat, adding new asset types, security-sensitive path validation logic, and MCP tool capabilities for saving screenshots. The scope and security implications warrant human review.

^{You can customize Macroscope's approvability policy. Learn more.}

[juliusmarminge]

Closing in favor of #2829 (orchestration V2).

#2829 deletes the V1 orchestration layer this PR builds on — apps/server/src/orchestration/**, provider/Layers/*Adapter.ts and provider/Services/** are removed and replaced by apps/server/src/orchestration-v2/**, with the IPC surface renamed to ORCHESTRATION_V2_WS_METHODS. The files this PR touches either no longer exist or are rewritten, so it can't be rebased — it would need reimplementing against the V2 adapters.

This is not a judgement on the change itself. Several of these are real gaps we still want fixed; the base just moved out from under them.

Once #2829 merges, please rebase onto main, port the change to the V2 equivalent, and reopen (or open a fresh PR). Ping me and I'll prioritise the review.

[gabrielelpidio]

Summary

• Add secure signed asset access for saved screenshots, recordings, workspace files, and browser artifacts.
• Let preview snapshots save to workspace paths or browser artifact storage.
• Render saved media directly in web and desktop chat markdown, including expanded images and settled-turn galleries.
• Preserve image-view paths in projected provider activity.
• Add the corresponding mobile behavior: signed media resolution, inline images, the existing full-screen image viewer, and user-initiated recording controls.
• Share markdown media path classification across web and mobile.

This combines the work from #4321 with mobile support in one PR targeting main.

Follow-up

• CloseRender saved screenshots and recordings in chat markdown #4321 if this PR merges first.

Testing

• The original Render saved screenshots and recordings in chat markdown #4321 focused suite passed 277 tests before the mobile split.
• The mobile addition passed 44 focused shared/mobile markdown tests.
• Shared, web, and mobile typechecks passed.
• Targeted lint and formatting passed.
• Mobile native static analysis passed; optional local SwiftLint, ktlint, and detekt binaries were unavailable and skipped.
• Web production build passed.
• Verified signed workspace images inline and expanded in the real web client.
• Verified user and assistant images, expanded images, and MP4 previews on an iPhone 17 Pro simulator running iOS 26.5.
• Re-ran the focused tests, package typechecks, targeted lint and formatting, and mobile native static analysis after rebasing onto the current main.

Visual evidence

• Web: inline user/assistant images and the expanded-image dialog.
• Mobile before: workspace-relative image nodes reserve space but remain blank.
• Mobile after: images render in both message roles and open full-screen.
• Mobile recordings: inline controls render in both message roles and playback remains user initiated.

Model: GPT-5.6-sol
Harness: T3 Code (Codex)

Note

Render saved media (images and videos) in chat across web and mobile clients

• Adds end-to-end support for displaying image_view and imageGeneration media outputs in chat timelines on web and mobile, resolving asset URLs via thread-aware asset resolution.
• Introduces thread-image and browser-artifact asset resource types with strict symlink-safe file access using no-follow semantics on all platforms (noFollowFile.ts).
• Extends the messages timeline on web to emit image-output rows and inline assistantImageOutputs, with thumbnail galleries, loading/failure states, and click-to-expand previews (MessagesTimeline.logic.ts, MessagesTimeline.tsx).
• Adds a MarkdownMedia component on both web (MarkdownMedia.tsx) and mobile (MarkdownMedia.tsx) that resolves workspace-relative and direct media sources and renders images or videos with unavailable fallback states.
• Extends the preview_snapshot MCP tool to accept save/savePath parameters and persist screenshots to the workspace or a dedicated artifacts directory (handlers.ts).
• Risk: asset resolution for thread-image re-canonicalizes paths on every request; post-issuance symlink swaps are detected and return null, not an error, so callers must handle silent resolution failures.

^{Macroscope summarized 275e7d9.}

---

Note

High Risk
Touches signed asset serving, symlink-safe file I/O, and workspace path validation—security-sensitive paths with a large cross-stack surface (server, web, mobile, contracts).

Overview
Chat on web, mobile, and native iOS markdown can now show images and videos from markdown, workspace paths, browser artifacts, and tool image outputs—not just plain links or blank placeholders.

Signed asset access adds browser-artifact and thread-image resources, video preview extensions, and stricter workspace containment (e.g. ..name dirs vs real .. escapes). Sensitive reads/writes use no-follow open helpers on Linux/Darwin/fallback platforms so symlink swaps after token issuance don’t redirect serving or snapshot saves.

Preview preview_snapshot can persist PNGs via save (artifact dir) or savePath (workspace) with containment checks; tool docs steer agents to embed returned paths in replies.

Timeline derives deduplicated image galleries on terminal assistant rows (and trailing rows when needed), withholding in-flight turn images until the turn settles.

Provider projection keeps image-view/generation paths while still pruning huge base64 payloads from activity data.

^{Reviewed by Cursor Bugbot for commit 275e7d9. Bugbot is set up for automated code reviews on this repo. Configure here.}

[coderabbitai]

Important

Review skipped

Auto reviews are disabled on this repository. Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: Repository UI

Review profile: CHILL

Plan: Pro Plus

Run ID: 27353ca3-545c-4bd2-9346-bed42f19dd44

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

[cursor]

Cursor Bugbot has reviewed your changes using high effort and found 1 potential issue.

^{❌ Bugbot Autofix is OFF. To automatically fix reported issues with cloud agents, enable autofix in the Cursor dashboard.}

^{Reviewed by Cursor Bugbot for commit 5445615. Configure here.}

[macroscopeapp]

Approvability

Verdict: Needs human review

This PR introduces a new feature for rendering saved media (images/videos) in chat, adding new asset types, security-sensitive path validation logic, and MCP tool capabilities for saving screenshots. The scope and security implications warrant human review.

^{You can customize Macroscope's approvability policy. Learn more.}

[juliusmarminge]

Closing in favor of #2829 (orchestration V2).

#2829 deletes the V1 orchestration layer this PR builds on — apps/server/src/orchestration/**, provider/Layers/*Adapter.ts and provider/Services/** are removed and replaced by apps/server/src/orchestration-v2/**, with the IPC surface renamed to ORCHESTRATION_V2_WS_METHODS. The files this PR touches either no longer exist or are rewritten, so it can't be rebased — it would need reimplementing against the V2 adapters.

This is not a judgement on the change itself. Several of these are real gaps we still want fixed; the base just moved out from under them.

Once #2829 merges, please rebase onto main, port the change to the V2 equivalent, and reopen (or open a fresh PR). Ping me and I'll prioritise the review.

[gabrielelpidio]

Summary

• Add secure signed asset access for saved screenshots, recordings, workspace files, and browser artifacts.
• Let preview snapshots save to workspace paths or browser artifact storage.
• Render saved media directly in web and desktop chat markdown, including expanded images and settled-turn galleries.
• Preserve image-view paths in projected provider activity.
• Add the corresponding mobile behavior: signed media resolution, inline images, the existing full-screen image viewer, and user-initiated recording controls.
• Share markdown media path classification across web and mobile.

This combines the work from #4321 with mobile support in one PR targeting main.

Follow-up

• CloseRender saved screenshots and recordings in chat markdown #4321 if this PR merges first.

Testing

• The original Render saved screenshots and recordings in chat markdown #4321 focused suite passed 277 tests before the mobile split.
• The mobile addition passed 44 focused shared/mobile markdown tests.
• Shared, web, and mobile typechecks passed.
• Targeted lint and formatting passed.
• Mobile native static analysis passed; optional local SwiftLint, ktlint, and detekt binaries were unavailable and skipped.
• Web production build passed.
• Verified signed workspace images inline and expanded in the real web client.
• Verified user and assistant images, expanded images, and MP4 previews on an iPhone 17 Pro simulator running iOS 26.5.
• Re-ran the focused tests, package typechecks, targeted lint and formatting, and mobile native static analysis after rebasing onto the current main.

Visual evidence

• Web: inline user/assistant images and the expanded-image dialog.
• Mobile before: workspace-relative image nodes reserve space but remain blank.
• Mobile after: images render in both message roles and open full-screen.
• Mobile recordings: inline controls render in both message roles and playback remains user initiated.

Model: GPT-5.6-sol
Harness: T3 Code (Codex)

Note

Render saved media (images and videos) in chat across web and mobile clients

• Adds end-to-end support for displaying image_view and imageGeneration media outputs in chat timelines on web and mobile, resolving asset URLs via thread-aware asset resolution.
• Introduces thread-image and browser-artifact asset resource types with strict symlink-safe file access using no-follow semantics on all platforms (noFollowFile.ts).
• Extends the messages timeline on web to emit image-output rows and inline assistantImageOutputs, with thumbnail galleries, loading/failure states, and click-to-expand previews (MessagesTimeline.logic.ts, MessagesTimeline.tsx).
• Adds a MarkdownMedia component on both web (MarkdownMedia.tsx) and mobile (MarkdownMedia.tsx) that resolves workspace-relative and direct media sources and renders images or videos with unavailable fallback states.
• Extends the preview_snapshot MCP tool to accept save/savePath parameters and persist screenshots to the workspace or a dedicated artifacts directory (handlers.ts).
• Risk: asset resolution for thread-image re-canonicalizes paths on every request; post-issuance symlink swaps are detected and return null, not an error, so callers must handle silent resolution failures.

^{Macroscope summarized 275e7d9.}

---

Note

High Risk
Touches signed asset serving, symlink-safe file I/O, and workspace path validation—security-sensitive paths with a large cross-stack surface (server, web, mobile, contracts).

Overview
Chat on web, mobile, and native iOS markdown can now show images and videos from markdown, workspace paths, browser artifacts, and tool image outputs—not just plain links or blank placeholders.

Signed asset access adds browser-artifact and thread-image resources, video preview extensions, and stricter workspace containment (e.g. ..name dirs vs real .. escapes). Sensitive reads/writes use no-follow open helpers on Linux/Darwin/fallback platforms so symlink swaps after token issuance don’t redirect serving or snapshot saves.

Preview preview_snapshot can persist PNGs via save (artifact dir) or savePath (workspace) with containment checks; tool docs steer agents to embed returned paths in replies.

Timeline derives deduplicated image galleries on terminal assistant rows (and trailing rows when needed), withholding in-flight turn images until the turn settles.

Provider projection keeps image-view/generation paths while still pruning huge base64 payloads from activity data.

^{Reviewed by Cursor Bugbot for commit 275e7d9. Bugbot is set up for automated code reviews on this repo. Configure here.}

[coderabbitai]

Important

Review skipped

Auto reviews are disabled on this repository. Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: Repository UI

Review profile: CHILL

Plan: Pro Plus

Run ID: 27353ca3-545c-4bd2-9346-bed42f19dd44

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

[cursor]

Cursor Bugbot has reviewed your changes using high effort and found 1 potential issue.

^{❌ Bugbot Autofix is OFF. To automatically fix reported issues with cloud agents, enable autofix in the Cursor dashboard.}

^{Reviewed by Cursor Bugbot for commit 5445615. Configure here.}

[macroscopeapp]

Approvability

Verdict: Needs human review

This PR introduces a new feature for rendering saved media (images/videos) in chat, adding new asset types, security-sensitive path validation logic, and MCP tool capabilities for saving screenshots. The scope and security implications warrant human review.

^{You can customize Macroscope's approvability policy. Learn more.}

[juliusmarminge]

Closing in favor of #2829 (orchestration V2).

#2829 deletes the V1 orchestration layer this PR builds on — apps/server/src/orchestration/**, provider/Layers/*Adapter.ts and provider/Services/** are removed and replaced by apps/server/src/orchestration-v2/**, with the IPC surface renamed to ORCHESTRATION_V2_WS_METHODS. The files this PR touches either no longer exist or are rewritten, so it can't be rebased — it would need reimplementing against the V2 adapters.

This is not a judgement on the change itself. Several of these are real gaps we still want fixed; the base just moved out from under them.

Once #2829 merges, please rebase onto main, port the change to the V2 equivalent, and reopen (or open a fresh PR). Ping me and I'll prioritise the review.

[gabrielelpidio]

Summary

• Add secure signed asset access for saved screenshots, recordings, workspace files, and browser artifacts.
• Let preview snapshots save to workspace paths or browser artifact storage.
• Render saved media directly in web and desktop chat markdown, including expanded images and settled-turn galleries.
• Preserve image-view paths in projected provider activity.
• Add the corresponding mobile behavior: signed media resolution, inline images, the existing full-screen image viewer, and user-initiated recording controls.
• Share markdown media path classification across web and mobile.

This combines the work from #4321 with mobile support in one PR targeting main.

Follow-up

• CloseRender saved screenshots and recordings in chat markdown #4321 if this PR merges first.

Testing

• The original Render saved screenshots and recordings in chat markdown #4321 focused suite passed 277 tests before the mobile split.
• The mobile addition passed 44 focused shared/mobile markdown tests.
• Shared, web, and mobile typechecks passed.
• Targeted lint and formatting passed.
• Mobile native static analysis passed; optional local SwiftLint, ktlint, and detekt binaries were unavailable and skipped.
• Web production build passed.
• Verified signed workspace images inline and expanded in the real web client.
• Verified user and assistant images, expanded images, and MP4 previews on an iPhone 17 Pro simulator running iOS 26.5.
• Re-ran the focused tests, package typechecks, targeted lint and formatting, and mobile native static analysis after rebasing onto the current main.

Visual evidence

• Web: inline user/assistant images and the expanded-image dialog.
• Mobile before: workspace-relative image nodes reserve space but remain blank.
• Mobile after: images render in both message roles and open full-screen.
• Mobile recordings: inline controls render in both message roles and playback remains user initiated.

Model: GPT-5.6-sol
Harness: T3 Code (Codex)

Note

Render saved media (images and videos) in chat across web and mobile clients

• Adds end-to-end support for displaying image_view and imageGeneration media outputs in chat timelines on web and mobile, resolving asset URLs via thread-aware asset resolution.
• Introduces thread-image and browser-artifact asset resource types with strict symlink-safe file access using no-follow semantics on all platforms (noFollowFile.ts).
• Extends the messages timeline on web to emit image-output rows and inline assistantImageOutputs, with thumbnail galleries, loading/failure states, and click-to-expand previews (MessagesTimeline.logic.ts, MessagesTimeline.tsx).
• Adds a MarkdownMedia component on both web (MarkdownMedia.tsx) and mobile (MarkdownMedia.tsx) that resolves workspace-relative and direct media sources and renders images or videos with unavailable fallback states.
• Extends the preview_snapshot MCP tool to accept save/savePath parameters and persist screenshots to the workspace or a dedicated artifacts directory (handlers.ts).
• Risk: asset resolution for thread-image re-canonicalizes paths on every request; post-issuance symlink swaps are detected and return null, not an error, so callers must handle silent resolution failures.

^{Macroscope summarized 275e7d9.}

---

Note

High Risk
Touches signed asset serving, symlink-safe file I/O, and workspace path validation—security-sensitive paths with a large cross-stack surface (server, web, mobile, contracts).

Overview
Chat on web, mobile, and native iOS markdown can now show images and videos from markdown, workspace paths, browser artifacts, and tool image outputs—not just plain links or blank placeholders.

Signed asset access adds browser-artifact and thread-image resources, video preview extensions, and stricter workspace containment (e.g. ..name dirs vs real .. escapes). Sensitive reads/writes use no-follow open helpers on Linux/Darwin/fallback platforms so symlink swaps after token issuance don’t redirect serving or snapshot saves.

Preview preview_snapshot can persist PNGs via save (artifact dir) or savePath (workspace) with containment checks; tool docs steer agents to embed returned paths in replies.

Timeline derives deduplicated image galleries on terminal assistant rows (and trailing rows when needed), withholding in-flight turn images until the turn settles.

Provider projection keeps image-view/generation paths while still pruning huge base64 payloads from activity data.

^{Reviewed by Cursor Bugbot for commit 275e7d9. Bugbot is set up for automated code reviews on this repo. Configure here.}

[coderabbitai]

Important

Review skipped

Auto reviews are disabled on this repository. Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: Repository UI

Review profile: CHILL

Plan: Pro Plus

Run ID: 27353ca3-545c-4bd2-9346-bed42f19dd44

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

[cursor]

Cursor Bugbot has reviewed your changes using high effort and found 1 potential issue.

^{❌ Bugbot Autofix is OFF. To automatically fix reported issues with cloud agents, enable autofix in the Cursor dashboard.}

^{Reviewed by Cursor Bugbot for commit 5445615. Configure here.}

[macroscopeapp]

Approvability

Verdict: Needs human review

This PR introduces a new feature for rendering saved media (images/videos) in chat, adding new asset types, security-sensitive path validation logic, and MCP tool capabilities for saving screenshots. The scope and security implications warrant human review.

^{You can customize Macroscope's approvability policy. Learn more.}

[juliusmarminge]

Closing in favor of #2829 (orchestration V2).

#2829 deletes the V1 orchestration layer this PR builds on — apps/server/src/orchestration/**, provider/Layers/*Adapter.ts and provider/Services/** are removed and replaced by apps/server/src/orchestration-v2/**, with the IPC surface renamed to ORCHESTRATION_V2_WS_METHODS. The files this PR touches either no longer exist or are rewritten, so it can't be rebased — it would need reimplementing against the V2 adapters.

This is not a judgement on the change itself. Several of these are real gaps we still want fixed; the base just moved out from under them.

Once #2829 merges, please rebase onto main, port the change to the V2 equivalent, and reopen (or open a fresh PR). Ping me and I'll prioritise the review.

[gabrielelpidio]

Summary

• Add secure signed asset access for saved screenshots, recordings, workspace files, and browser artifacts.
• Let preview snapshots save to workspace paths or browser artifact storage.
• Render saved media directly in web and desktop chat markdown, including expanded images and settled-turn galleries.
• Preserve image-view paths in projected provider activity.
• Add the corresponding mobile behavior: signed media resolution, inline images, the existing full-screen image viewer, and user-initiated recording controls.
• Share markdown media path classification across web and mobile.

This combines the work from #4321 with mobile support in one PR targeting main.

Follow-up

• CloseRender saved screenshots and recordings in chat markdown #4321 if this PR merges first.

Testing

• The original Render saved screenshots and recordings in chat markdown #4321 focused suite passed 277 tests before the mobile split.
• The mobile addition passed 44 focused shared/mobile markdown tests.
• Shared, web, and mobile typechecks passed.
• Targeted lint and formatting passed.
• Mobile native static analysis passed; optional local SwiftLint, ktlint, and detekt binaries were unavailable and skipped.
• Web production build passed.
• Verified signed workspace images inline and expanded in the real web client.
• Verified user and assistant images, expanded images, and MP4 previews on an iPhone 17 Pro simulator running iOS 26.5.
• Re-ran the focused tests, package typechecks, targeted lint and formatting, and mobile native static analysis after rebasing onto the current main.

Visual evidence

• Web: inline user/assistant images and the expanded-image dialog.
• Mobile before: workspace-relative image nodes reserve space but remain blank.
• Mobile after: images render in both message roles and open full-screen.
• Mobile recordings: inline controls render in both message roles and playback remains user initiated.

Model: GPT-5.6-sol
Harness: T3 Code (Codex)

Note

Render saved media (images and videos) in chat across web and mobile clients

• Adds end-to-end support for displaying image_view and imageGeneration media outputs in chat timelines on web and mobile, resolving asset URLs via thread-aware asset resolution.
• Introduces thread-image and browser-artifact asset resource types with strict symlink-safe file access using no-follow semantics on all platforms (noFollowFile.ts).
• Extends the messages timeline on web to emit image-output rows and inline assistantImageOutputs, with thumbnail galleries, loading/failure states, and click-to-expand previews (MessagesTimeline.logic.ts, MessagesTimeline.tsx).
• Adds a MarkdownMedia component on both web (MarkdownMedia.tsx) and mobile (MarkdownMedia.tsx) that resolves workspace-relative and direct media sources and renders images or videos with unavailable fallback states.
• Extends the preview_snapshot MCP tool to accept save/savePath parameters and persist screenshots to the workspace or a dedicated artifacts directory (handlers.ts).
• Risk: asset resolution for thread-image re-canonicalizes paths on every request; post-issuance symlink swaps are detected and return null, not an error, so callers must handle silent resolution failures.

^{Macroscope summarized 275e7d9.}

---

Note

High Risk
Touches signed asset serving, symlink-safe file I/O, and workspace path validation—security-sensitive paths with a large cross-stack surface (server, web, mobile, contracts).

Overview
Chat on web, mobile, and native iOS markdown can now show images and videos from markdown, workspace paths, browser artifacts, and tool image outputs—not just plain links or blank placeholders.

Signed asset access adds browser-artifact and thread-image resources, video preview extensions, and stricter workspace containment (e.g. ..name dirs vs real .. escapes). Sensitive reads/writes use no-follow open helpers on Linux/Darwin/fallback platforms so symlink swaps after token issuance don’t redirect serving or snapshot saves.

Preview preview_snapshot can persist PNGs via save (artifact dir) or savePath (workspace) with containment checks; tool docs steer agents to embed returned paths in replies.

Timeline derives deduplicated image galleries on terminal assistant rows (and trailing rows when needed), withholding in-flight turn images until the turn settles.

Provider projection keeps image-view/generation paths while still pruning huge base64 payloads from activity data.

^{Reviewed by Cursor Bugbot for commit 275e7d9. Bugbot is set up for automated code reviews on this repo. Configure here.}

[coderabbitai]

Important

Review skipped

Auto reviews are disabled on this repository. Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: Repository UI

Review profile: CHILL

Plan: Pro Plus

Run ID: 27353ca3-545c-4bd2-9346-bed42f19dd44

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

[cursor]

Cursor Bugbot has reviewed your changes using high effort and found 1 potential issue.

^{❌ Bugbot Autofix is OFF. To automatically fix reported issues with cloud agents, enable autofix in the Cursor dashboard.}

^{Reviewed by Cursor Bugbot for commit 5445615. Configure here.}

[macroscopeapp]

Approvability

Verdict: Needs human review

This PR introduces a new feature for rendering saved media (images/videos) in chat, adding new asset types, security-sensitive path validation logic, and MCP tool capabilities for saving screenshots. The scope and security implications warrant human review.

^{You can customize Macroscope's approvability policy. Learn more.}

[juliusmarminge]

Closing in favor of #2829 (orchestration V2).

#2829 deletes the V1 orchestration layer this PR builds on — apps/server/src/orchestration/**, provider/Layers/*Adapter.ts and provider/Services/** are removed and replaced by apps/server/src/orchestration-v2/**, with the IPC surface renamed to ORCHESTRATION_V2_WS_METHODS. The files this PR touches either no longer exist or are rewritten, so it can't be rebased — it would need reimplementing against the V2 adapters.

This is not a judgement on the change itself. Several of these are real gaps we still want fixed; the base just moved out from under them.

Once #2829 merges, please rebase onto main, port the change to the V2 equivalent, and reopen (or open a fresh PR). Ping me and I'll prioritise the review.

[gabrielelpidio]

Summary

• Add secure signed asset access for saved screenshots, recordings, workspace files, and browser artifacts.
• Let preview snapshots save to workspace paths or browser artifact storage.
• Render saved media directly in web and desktop chat markdown, including expanded images and settled-turn galleries.
• Preserve image-view paths in projected provider activity.
• Add the corresponding mobile behavior: signed media resolution, inline images, the existing full-screen image viewer, and user-initiated recording controls.
• Share markdown media path classification across web and mobile.

This combines the work from #4321 with mobile support in one PR targeting main.

Follow-up

• CloseRender saved screenshots and recordings in chat markdown #4321 if this PR merges first.

Testing

• The original Render saved screenshots and recordings in chat markdown #4321 focused suite passed 277 tests before the mobile split.
• The mobile addition passed 44 focused shared/mobile markdown tests.
• Shared, web, and mobile typechecks passed.
• Targeted lint and formatting passed.
• Mobile native static analysis passed; optional local SwiftLint, ktlint, and detekt binaries were unavailable and skipped.
• Web production build passed.
• Verified signed workspace images inline and expanded in the real web client.
• Verified user and assistant images, expanded images, and MP4 previews on an iPhone 17 Pro simulator running iOS 26.5.
• Re-ran the focused tests, package typechecks, targeted lint and formatting, and mobile native static analysis after rebasing onto the current main.

Visual evidence

• Web: inline user/assistant images and the expanded-image dialog.
• Mobile before: workspace-relative image nodes reserve space but remain blank.
• Mobile after: images render in both message roles and open full-screen.
• Mobile recordings: inline controls render in both message roles and playback remains user initiated.

Model: GPT-5.6-sol
Harness: T3 Code (Codex)

Note

Render saved media (images and videos) in chat across web and mobile clients

• Adds end-to-end support for displaying image_view and imageGeneration media outputs in chat timelines on web and mobile, resolving asset URLs via thread-aware asset resolution.
• Introduces thread-image and browser-artifact asset resource types with strict symlink-safe file access using no-follow semantics on all platforms (noFollowFile.ts).
• Extends the messages timeline on web to emit image-output rows and inline assistantImageOutputs, with thumbnail galleries, loading/failure states, and click-to-expand previews (MessagesTimeline.logic.ts, MessagesTimeline.tsx).
• Adds a MarkdownMedia component on both web (MarkdownMedia.tsx) and mobile (MarkdownMedia.tsx) that resolves workspace-relative and direct media sources and renders images or videos with unavailable fallback states.
• Extends the preview_snapshot MCP tool to accept save/savePath parameters and persist screenshots to the workspace or a dedicated artifacts directory (handlers.ts).
• Risk: asset resolution for thread-image re-canonicalizes paths on every request; post-issuance symlink swaps are detected and return null, not an error, so callers must handle silent resolution failures.

^{Macroscope summarized 275e7d9.}

---

Note

High Risk
Touches signed asset serving, symlink-safe file I/O, and workspace path validation—security-sensitive paths with a large cross-stack surface (server, web, mobile, contracts).

Overview
Chat on web, mobile, and native iOS markdown can now show images and videos from markdown, workspace paths, browser artifacts, and tool image outputs—not just plain links or blank placeholders.

Signed asset access adds browser-artifact and thread-image resources, video preview extensions, and stricter workspace containment (e.g. ..name dirs vs real .. escapes). Sensitive reads/writes use no-follow open helpers on Linux/Darwin/fallback platforms so symlink swaps after token issuance don’t redirect serving or snapshot saves.

Preview preview_snapshot can persist PNGs via save (artifact dir) or savePath (workspace) with containment checks; tool docs steer agents to embed returned paths in replies.

Timeline derives deduplicated image galleries on terminal assistant rows (and trailing rows when needed), withholding in-flight turn images until the turn settles.

Provider projection keeps image-view/generation paths while still pruning huge base64 payloads from activity data.

^{Reviewed by Cursor Bugbot for commit 275e7d9. Bugbot is set up for automated code reviews on this repo. Configure here.}

[coderabbitai]

Important

Review skipped

Auto reviews are disabled on this repository. Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: Repository UI

Review profile: CHILL

Plan: Pro Plus

Run ID: 27353ca3-545c-4bd2-9346-bed42f19dd44

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

[cursor]

Cursor Bugbot has reviewed your changes using high effort and found 1 potential issue.

^{❌ Bugbot Autofix is OFF. To automatically fix reported issues with cloud agents, enable autofix in the Cursor dashboard.}

^{Reviewed by Cursor Bugbot for commit 5445615. Configure here.}

[macroscopeapp]

Approvability

Verdict: Needs human review

This PR introduces a new feature for rendering saved media (images/videos) in chat, adding new asset types, security-sensitive path validation logic, and MCP tool capabilities for saving screenshots. The scope and security implications warrant human review.

^{You can customize Macroscope's approvability policy. Learn more.}

[juliusmarminge]

Closing in favor of #2829 (orchestration V2).

#2829 deletes the V1 orchestration layer this PR builds on — apps/server/src/orchestration/**, provider/Layers/*Adapter.ts and provider/Services/** are removed and replaced by apps/server/src/orchestration-v2/**, with the IPC surface renamed to ORCHESTRATION_V2_WS_METHODS. The files this PR touches either no longer exist or are rewritten, so it can't be rebased — it would need reimplementing against the V2 adapters.

This is not a judgement on the change itself. Several of these are real gaps we still want fixed; the base just moved out from under them.

Once #2829 merges, please rebase onto main, port the change to the V2 equivalent, and reopen (or open a fresh PR). Ping me and I'll prioritise the review.

[gabrielelpidio]

Summary

• Add secure signed asset access for saved screenshots, recordings, workspace files, and browser artifacts.
• Let preview snapshots save to workspace paths or browser artifact storage.
• Render saved media directly in web and desktop chat markdown, including expanded images and settled-turn galleries.
• Preserve image-view paths in projected provider activity.
• Add the corresponding mobile behavior: signed media resolution, inline images, the existing full-screen image viewer, and user-initiated recording controls.
• Share markdown media path classification across web and mobile.

This combines the work from #4321 with mobile support in one PR targeting main.

Follow-up

• CloseRender saved screenshots and recordings in chat markdown #4321 if this PR merges first.

Testing

• The original Render saved screenshots and recordings in chat markdown #4321 focused suite passed 277 tests before the mobile split.
• The mobile addition passed 44 focused shared/mobile markdown tests.
• Shared, web, and mobile typechecks passed.
• Targeted lint and formatting passed.
• Mobile native static analysis passed; optional local SwiftLint, ktlint, and detekt binaries were unavailable and skipped.
• Web production build passed.
• Verified signed workspace images inline and expanded in the real web client.
• Verified user and assistant images, expanded images, and MP4 previews on an iPhone 17 Pro simulator running iOS 26.5.
• Re-ran the focused tests, package typechecks, targeted lint and formatting, and mobile native static analysis after rebasing onto the current main.

Visual evidence

• Web: inline user/assistant images and the expanded-image dialog.
• Mobile before: workspace-relative image nodes reserve space but remain blank.
• Mobile after: images render in both message roles and open full-screen.
• Mobile recordings: inline controls render in both message roles and playback remains user initiated.

Model: GPT-5.6-sol
Harness: T3 Code (Codex)

Note

Render saved media (images and videos) in chat across web and mobile clients

• Adds end-to-end support for displaying image_view and imageGeneration media outputs in chat timelines on web and mobile, resolving asset URLs via thread-aware asset resolution.
• Introduces thread-image and browser-artifact asset resource types with strict symlink-safe file access using no-follow semantics on all platforms (noFollowFile.ts).
• Extends the messages timeline on web to emit image-output rows and inline assistantImageOutputs, with thumbnail galleries, loading/failure states, and click-to-expand previews (MessagesTimeline.logic.ts, MessagesTimeline.tsx).
• Adds a MarkdownMedia component on both web (MarkdownMedia.tsx) and mobile (MarkdownMedia.tsx) that resolves workspace-relative and direct media sources and renders images or videos with unavailable fallback states.
• Extends the preview_snapshot MCP tool to accept save/savePath parameters and persist screenshots to the workspace or a dedicated artifacts directory (handlers.ts).
• Risk: asset resolution for thread-image re-canonicalizes paths on every request; post-issuance symlink swaps are detected and return null, not an error, so callers must handle silent resolution failures.

^{Macroscope summarized 275e7d9.}

---

Note

High Risk
Touches signed asset serving, symlink-safe file I/O, and workspace path validation—security-sensitive paths with a large cross-stack surface (server, web, mobile, contracts).

Overview
Chat on web, mobile, and native iOS markdown can now show images and videos from markdown, workspace paths, browser artifacts, and tool image outputs—not just plain links or blank placeholders.

Signed asset access adds browser-artifact and thread-image resources, video preview extensions, and stricter workspace containment (e.g. ..name dirs vs real .. escapes). Sensitive reads/writes use no-follow open helpers on Linux/Darwin/fallback platforms so symlink swaps after token issuance don’t redirect serving or snapshot saves.

Preview preview_snapshot can persist PNGs via save (artifact dir) or savePath (workspace) with containment checks; tool docs steer agents to embed returned paths in replies.

Timeline derives deduplicated image galleries on terminal assistant rows (and trailing rows when needed), withholding in-flight turn images until the turn settles.

Provider projection keeps image-view/generation paths while still pruning huge base64 payloads from activity data.

^{Reviewed by Cursor Bugbot for commit 275e7d9. Bugbot is set up for automated code reviews on this repo. Configure here.}

[coderabbitai]

Important

Review skipped

Auto reviews are disabled on this repository. Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: Repository UI

Review profile: CHILL

Plan: Pro Plus

Run ID: 27353ca3-545c-4bd2-9346-bed42f19dd44

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

[cursor]

Cursor Bugbot has reviewed your changes using high effort and found 1 potential issue.

^{❌ Bugbot Autofix is OFF. To automatically fix reported issues with cloud agents, enable autofix in the Cursor dashboard.}

^{Reviewed by Cursor Bugbot for commit 5445615. Configure here.}

[macroscopeapp]

Approvability

Verdict: Needs human review

This PR introduces a new feature for rendering saved media (images/videos) in chat, adding new asset types, security-sensitive path validation logic, and MCP tool capabilities for saving screenshots. The scope and security implications warrant human review.

^{You can customize Macroscope's approvability policy. Learn more.}

[juliusmarminge]

Closing in favor of #2829 (orchestration V2).

#2829 deletes the V1 orchestration layer this PR builds on — apps/server/src/orchestration/**, provider/Layers/*Adapter.ts and provider/Services/** are removed and replaced by apps/server/src/orchestration-v2/**, with the IPC surface renamed to ORCHESTRATION_V2_WS_METHODS. The files this PR touches either no longer exist or are rewritten, so it can't be rebased — it would need reimplementing against the V2 adapters.

This is not a judgement on the change itself. Several of these are real gaps we still want fixed; the base just moved out from under them.

Once #2829 merges, please rebase onto main, port the change to the V2 equivalent, and reopen (or open a fresh PR). Ping me and I'll prioritise the review.

[gabrielelpidio]

Summary

• Add secure signed asset access for saved screenshots, recordings, workspace files, and browser artifacts.
• Let preview snapshots save to workspace paths or browser artifact storage.
• Render saved media directly in web and desktop chat markdown, including expanded images and settled-turn galleries.
• Preserve image-view paths in projected provider activity.
• Add the corresponding mobile behavior: signed media resolution, inline images, the existing full-screen image viewer, and user-initiated recording controls.
• Share markdown media path classification across web and mobile.

This combines the work from #4321 with mobile support in one PR targeting main.

Follow-up

• CloseRender saved screenshots and recordings in chat markdown #4321 if this PR merges first.

Testing

• The original Render saved screenshots and recordings in chat markdown #4321 focused suite passed 277 tests before the mobile split.
• The mobile addition passed 44 focused shared/mobile markdown tests.
• Shared, web, and mobile typechecks passed.
• Targeted lint and formatting passed.
• Mobile native static analysis passed; optional local SwiftLint, ktlint, and detekt binaries were unavailable and skipped.
• Web production build passed.
• Verified signed workspace images inline and expanded in the real web client.
• Verified user and assistant images, expanded images, and MP4 previews on an iPhone 17 Pro simulator running iOS 26.5.
• Re-ran the focused tests, package typechecks, targeted lint and formatting, and mobile native static analysis after rebasing onto the current main.

Visual evidence

• Web: inline user/assistant images and the expanded-image dialog.
• Mobile before: workspace-relative image nodes reserve space but remain blank.
• Mobile after: images render in both message roles and open full-screen.
• Mobile recordings: inline controls render in both message roles and playback remains user initiated.

Model: GPT-5.6-sol
Harness: T3 Code (Codex)

Note

Render saved media (images and videos) in chat across web and mobile clients

• Adds end-to-end support for displaying image_view and imageGeneration media outputs in chat timelines on web and mobile, resolving asset URLs via thread-aware asset resolution.
• Introduces thread-image and browser-artifact asset resource types with strict symlink-safe file access using no-follow semantics on all platforms (noFollowFile.ts).
• Extends the messages timeline on web to emit image-output rows and inline assistantImageOutputs, with thumbnail galleries, loading/failure states, and click-to-expand previews (MessagesTimeline.logic.ts, MessagesTimeline.tsx).
• Adds a MarkdownMedia component on both web (MarkdownMedia.tsx) and mobile (MarkdownMedia.tsx) that resolves workspace-relative and direct media sources and renders images or videos with unavailable fallback states.
• Extends the preview_snapshot MCP tool to accept save/savePath parameters and persist screenshots to the workspace or a dedicated artifacts directory (handlers.ts).
• Risk: asset resolution for thread-image re-canonicalizes paths on every request; post-issuance symlink swaps are detected and return null, not an error, so callers must handle silent resolution failures.

^{Macroscope summarized 275e7d9.}

---

Note

High Risk
Touches signed asset serving, symlink-safe file I/O, and workspace path validation—security-sensitive paths with a large cross-stack surface (server, web, mobile, contracts).

Overview
Chat on web, mobile, and native iOS markdown can now show images and videos from markdown, workspace paths, browser artifacts, and tool image outputs—not just plain links or blank placeholders.

Signed asset access adds browser-artifact and thread-image resources, video preview extensions, and stricter workspace containment (e.g. ..name dirs vs real .. escapes). Sensitive reads/writes use no-follow open helpers on Linux/Darwin/fallback platforms so symlink swaps after token issuance don’t redirect serving or snapshot saves.

Preview preview_snapshot can persist PNGs via save (artifact dir) or savePath (workspace) with containment checks; tool docs steer agents to embed returned paths in replies.

Timeline derives deduplicated image galleries on terminal assistant rows (and trailing rows when needed), withholding in-flight turn images until the turn settles.

Provider projection keeps image-view/generation paths while still pruning huge base64 payloads from activity data.

^{Reviewed by Cursor Bugbot for commit 275e7d9. Bugbot is set up for automated code reviews on this repo. Configure here.}

[coderabbitai]

Important

Review skipped

Auto reviews are disabled on this repository. Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: Repository UI

Review profile: CHILL

Plan: Pro Plus

Run ID: 27353ca3-545c-4bd2-9346-bed42f19dd44

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

[cursor]

Cursor Bugbot has reviewed your changes using high effort and found 1 potential issue.

^{❌ Bugbot Autofix is OFF. To automatically fix reported issues with cloud agents, enable autofix in the Cursor dashboard.}

^{Reviewed by Cursor Bugbot for commit 5445615. Configure here.}

[macroscopeapp]

Approvability

Verdict: Needs human review

This PR introduces a new feature for rendering saved media (images/videos) in chat, adding new asset types, security-sensitive path validation logic, and MCP tool capabilities for saving screenshots. The scope and security implications warrant human review.

^{You can customize Macroscope's approvability policy. Learn more.}

[juliusmarminge]

Closing in favor of #2829 (orchestration V2).

#2829 deletes the V1 orchestration layer this PR builds on — apps/server/src/orchestration/**, provider/Layers/*Adapter.ts and provider/Services/** are removed and replaced by apps/server/src/orchestration-v2/**, with the IPC surface renamed to ORCHESTRATION_V2_WS_METHODS. The files this PR touches either no longer exist or are rewritten, so it can't be rebased — it would need reimplementing against the V2 adapters.

This is not a judgement on the change itself. Several of these are real gaps we still want fixed; the base just moved out from under them.

Once #2829 merges, please rebase onto main, port the change to the V2 equivalent, and reopen (or open a fresh PR). Ping me and I'll prioritise the review.