feat(canvas): build and securely deliver cloud artifacts - #73874

Merged

trunk-io[bot] merged 60 commits into

posthog-code/canvas-build-pipeline-phase-6

Aug 3, 2026

Commits on Aug 3, 2026

feat(canvas): build and securely deliver cloud artifacts
k11kirky
authored
b11bcca
refactor(canvas): promote canvases and channels to first-class models
k11kirky
authored
b9d2753
refactor(canvas): simplify-pass cleanups on the remodel
k11kirky
authored
aa524a4
feat(canvas): version history endpoint and versioned source reads
k11kirky
authored
7cf14b1
test(canvas): cover OAuth bearer access to the canvases API
k11kirky
authored
c2e27c7
fix(canvas): name the cause when the local builder can't run
k11kirky
authored
129e7b6
docs(canvas): prefer building on a matching canvas over minting duplicates
k11kirky
authored
7b82223
fix(canvas): bind sandbox-created canvases to their task and unblock dev thread updates
k11kirky
authored
86dd8fb
fix(canvas): serve artifacts with CORS so the sandboxed iframe can load them
k11kirky
authored
beec519
fix(canvas): point the image build and CI at the moved builder package
k11kirky
authored
24beafc
chore(canvas): commit the lint and typegen artifacts CI asked for
k11kirky
authored
3c99f71
chore(canvas): apply ruff format to the files this PR touched
k11kirky
authored
dc05aa9
fix(canvas): publish the canvas OAuth scopes and refresh MCP snapshots
k11kirky
authored
d70317f
fix(canvas): clear the ten mypy errors in the new canvas code
k11kirky
authored
6f382f5
chore(canvas): renumber the drop-desktop-file-system migration onto master
k11kirky
authored
52f404d
fix(canvas): review follow-ups — visibility, build-lifecycle races, migration & serializer hardening (#74603)
k11kirky
authored
879f899
fix(canvas): harden artifact and channel boundaries
k11kirky
authored
6c328f8
fix(canvas): keep private canvases out of HogQL
k11kirky
authored
bfd3533
fix(canvas): split product interface boundaries
k11kirky
authored
573b060
fix(canvas): separate route and task interfaces
k11kirky
authored
47afd17
fix(canvas): cover team-scoped models in IDOR checks
k11kirky
authored
71a47fb
fix(canvas): expose artifact delivery through product boundary
k11kirky
authored
d697966
fix(canvas): acknowledge legacy presentation imports
k11kirky
authored
8b62c0e
chore: update OpenAPI generated types
k11kirky
authored
f5484d3
chore: update OpenAPI generated types
k11kirky
authored
e149304
fix(canvas): make migrations deployment-safe
k11kirky
authored
dcbb43c
test(backend): update query snapshots
k11kirky
authored
3b667cc
fix(tasks): use explicit channel visibility lookups
k11kirky
authored
c148718
fix(canvas): bound pinned artifact retention
k11kirky
authored
fcb4e72
fix(canvas): prepare product test dependencies
k11kirky
authored
1cdf5fa
fix(canvas): style and reload built artifacts
k11kirky
authored
dba6784
fix(canvas): harden build delivery and access controls
k11kirky
authored
d6ac965
fix(canvas): expose channel filter to MCP clients
k11kirky
authored
2665b93
test(mcp): update unit test snapshots
k11kirky
authored
046361b
fix(canvas): close build pipeline reliability gaps
k11kirky
authored
cb93265
fix(tasks): keep channel metadata out of HogQL
k11kirky
authored
7dbb2bf
chore(canvas): format builder artifacts
k11kirky
authored
359a208
fix(canvas): expose sandbox failures through facade
k11kirky
authored
d787cf9
fix(canvas): rebase migration and generated severity type
k11kirky
authored
870187a
chore: update OpenAPI generated types
k11kirky
authored
6835989
chore: update OpenAPI generated types
k11kirky
authored
6d22fb9
test(mcp): refresh canvas tool schema snapshots
k11kirky
authored
2e41ac3
fix(canvas): align lifecycle responses and API tests
k11kirky
authored
a01e8ec
chore(ci): align canvas builder Node setup
k11kirky
authored
e2ae2db
test(backend): update query snapshots
k11kirky
authored
46f2e4d
fix(tasks): preserve context output contracts
k11kirky
authored
979ec79
fix(tasks): document channel instructions patch route
k11kirky
authored
a1b5634
chore: update OpenAPI generated types
k11kirky
authored
533d9fe
fix(canvas): update renamed task migration dependency
k11kirky
authored
7a20255
refactor(canvas): apply simplify-pass cleanups
k11kirky
authored
5bef83f
finish tasks migration renumber
k11kirky
authored
17e9a66
drop leftover desktop file system methods
k11kirky
authored
2ee267a
scope channel visibility reads to team
k11kirky
authored
a22b632
silence semgrep on cross-team build sweep
k11kirky
authored
3bc44f0
chore: update OpenAPI generated types
k11kirky
authored
600261b
chore(visual): update storybook baselines

k11kirky
and
charlesvien
authored
e8956b9
chore: update OpenAPI generated types
k11kirky
authored
61b6aaa
fix(canvas): satisfy current repository checks
k11kirky
authored
18e2114
chore: update OpenAPI generated types
k11kirky
authored
2b05d3a
fix(canvas): harden artifact delivery boundaries
k11kirky
authored
f7e0e03