Note

Medium Risk
Changes integrated-browser open paths and error typing in chat markdown; invalid asset URLs now fail recoverably instead of dying, with safer diagnostics around signed URLs.

Overview
Preview asset URL construction in openFileInPreview no longer uses resolveAssetUrl or Cause.die when the base/relative URL pair is invalid. It builds the URL with new URL(relative, base) and returns BrowserPreviewAssetUrlInvalidError via Cause.fail, carrying environment/thread/file context, URL lengths and expiry, and the original parser cause—without storing raw base or signed relative URLs.

Browser preview errors are refactored to Effect Schema.TaggedErrorClass types with fixed user-facing messages: BrowserPreviewUnavailableError (runtime unsupported), plus new BrowserPreviewThreadContextUnavailableError and BrowserPreviewEnvironmentDisconnectedError. ChatMarkdown returns these specific failures when opening links or workspace files in the integrated browser instead of overloading BrowserPreviewUnavailableError with ad hoc messages.

Tests in openFileInPreview.test.ts cover the fixed unavailable message, invalid-asset-URL diagnostics, cause identity, and that serialized errors do not leak signed tokens.

^{Reviewed by Cursor Bugbot for commit 56e0750. Bugbot is set up for automated code reviews on this repo. Configure here.}

Note

Structure browser preview asset URL failures as typed errors in openFileInPreview

• Replaces generic defect failures with typed Schema.TaggedErrorClass errors for three new failure cases: missing thread context (BrowserPreviewThreadContextUnavailableError), disconnected environment (BrowserPreviewEnvironmentDisconnectedError), and invalid asset URL (BrowserPreviewAssetUrlInvalidError).
• BrowserPreviewAssetUrlInvalidError captures safe diagnostic fields (environmentId, threadId, filePath, httpBaseUrlLength, relativeUrlLength, expiresAt) and preserves the original cause, avoiding exposure of sensitive URL contents.
• Replaces resolveAssetUrl with a new URL(relativeUrl, httpBaseUrl) call wrapped in try/catch; failures are surfaced as BrowserPreviewAssetUrlInvalidError instead of a defect die.
• Exports isBrowserPreviewAssetUrlInvalidError as a type guard via Schema.is.
• Behavioral Change: callers of openFileInPreview now receive typed failures for URL construction errors instead of unhandled defects.

^{Macroscope summarized 56e0750.}