feat(chat): add Mermaid fullscreen preview and harden file preview paths (#490)

* feat(chat): add mermaid preview popups and fullscreen diagram viewer

Enable opening Mermaid diagrams from markdown and file attachments with a dedicated fullscreen dialog, while tightening preview loading behavior and sizing for more reliable interaction.

* refactor(chat): extract shared preview overlay hooks

Centralize fullscreen preview transition and viewport lifecycle logic so image and Mermaid dialogs stay behaviorally aligned while reducing maintenance overhead.

* fix(security): enforce workspace boundaries for fs read endpoints

Validate /api/fs/read and /api/fs/raw paths against active workspace roots and canonical realpaths to block traversal and symlink escapes before serving file contents.

* fix(chat): remove dead Mermaid copy component

Drop an unused merge-leftover component in MarkdownRenderer to keep lint clean without changing Mermaid preview behavior.

This commit is contained in:

Iuliia Ivashko

2026-02-24 01:49:06 +02:00

committed by

GitHub

parent b2101acfbf

commit d2d39c48ac

11 changed files with 882 additions and 157 deletions

									
										packages/ui/src/lib/opencode/client.ts
									
		+1
		
												View File
												
				@@ -484,6 +484,7 @@ class OpencodeService {

				      'application/x-sh',

				      'application/x-shellscript',

				      'application/octet-stream',

				      'image/svg+xml',

				    ];

				    return textBasedTypes.includes(lowerMime);