feat/file-viewer #17

Closed

sergi wants to merge 0 commits from feat/file-viewer into main

sergi commented

2026-10-22 12:22:31 +02:00

Owner

No description provided.

sergi added 2 commits

2026-10-22 12:22:32 +02:00

feat: stream and replace a document's original file 8a0c096f60

GET /api/documents/{id}/file streams the upload from RAG for the file viewer, forwarding Range and cache headers so recordings can seek.

Every file gets nosniff and private caching; HTML, SVG and XML also get a sandboxing CSP, so an uploaded page cannot run scripts as whoever opens it. The workspace may come as ?workspace=, since a new tab or a player's src cannot send headers.

PUT replaces an uploaded Markdown or text file, which RAG then indexes again.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

feat: preview files in the document column

ragoon-ui-ci / validate (pull_request) Failing after 8m37s

Details

6734a3d9ba

Opening a file from Course material, Group files or My files shows it in place of the panels, which stay mounted so folders and search are as they were on return. Back or Escape returns.

PDFs use the browser's viewer, recordings play beside their transcript with each line seeking there, Markdown and text render in place, and DOCX goes through docx-preview, loaded only when needed. Uploaded HTML and rendered Word markup are shown in sandboxed frames so they cannot run scripts.

Notes keep their editor for now.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

sergi added 1 commit

2026-10-22 14:15:53 +02:00

fix: update certifi for a critical advisory

ragoon-ui-ci / validate (pull_request) Successful in 7m16s

Details

9b3ad0ca96

The image scan fails on GHSA-6q48-6c7w-9gw2: certifi 2026.6.17 bundles emSign root CAs whose intermediate keys were compromised. certifi comes in through httpx, so only the lockfile changes, to 2026.10.19.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>