fix(files): allow document compiler to read referenced images

apps/sim/lib/copilot/tools/server/files/edit-content.test.ts

@@ -0,0 +1,127 @@
+/**
+ * @vitest-environment node
+ */
+import { beforeEach, describe, expect, it, vi } from 'vitest'
+
+const {
+  buildEmbeddedImageRefWarningMock,
+  compileDocForWriteMock,
+  consumeLatestFileIntentMock,
+  executeCopilotFileUseCaseMock,
+  getDocumentFormatInfoMock,
+  inferContentTypeMock,
+  resolveCopilotFilePrincipalMock,
+} = vi.hoisted(() => ({
+  buildEmbeddedImageRefWarningMock: vi.fn(),
+  compileDocForWriteMock: vi.fn(),
+  consumeLatestFileIntentMock: vi.fn(),
+  executeCopilotFileUseCaseMock: vi.fn(),
+  getDocumentFormatInfoMock: vi.fn(),
+  inferContentTypeMock: vi.fn(),
+  resolveCopilotFilePrincipalMock: vi.fn(),
+}))
+
+vi.mock('@/lib/copilot/application/execute-file-use-case', () => ({
+  executeCopilotFileUseCase: executeCopilotFileUseCaseMock,
+}))
+vi.mock('@/lib/copilot/auth/file-delegation', () => ({
+  messageForCopilotFileError: vi.fn((_error: unknown, fallback: string) => fallback),
+  resolveCopilotFilePrincipal: resolveCopilotFilePrincipalMock,
+}))
+vi.mock('@/lib/core/config/env-flags', () => ({
+  isDocSandboxEnabled: false,
+}))
+vi.mock('@/lib/workspace-files/application/update-workspace-file-content', () => ({
+  updateWorkspaceFileContent: { operation: { id: 'files.update_content' } },
+}))
+vi.mock('@/lib/copilot/tools/server/files/doc-compile', () => ({
+  getE2BDocFormat: vi.fn(),
+}))
+vi.mock('@/lib/copilot/tools/server/files/embedded-image-refs', () => ({
+  buildEmbeddedImageRefWarning: buildEmbeddedImageRefWarningMock,
+}))
+vi.mock('@/lib/copilot/tools/server/files/file-intent-store', () => ({
+  consumeLatestFileIntent: consumeLatestFileIntentMock,
+}))
+vi.mock('@/lib/copilot/tools/server/files/workspace-file', () => ({
+  compileDocForWrite: compileDocForWriteMock,
+  getDocumentFormatInfo: getDocumentFormatInfoMock,
+  inferContentType: inferContentTypeMock,
+}))
+
+import { editContentServerTool } from '@/lib/copilot/tools/server/files/edit-content'
+import { updateWorkspaceFileContent } from '@/lib/workspace-files/application/update-workspace-file-content'
+
+const context = {
+  userId: 'user-1',
+  workspaceId: 'workspace-1',
+  chatId: 'chat-1',
+  messageId: 'message-1',
+  toolCallId: 'tool-call-1',
+  copilotToolExecution: true,
+} as const
+
+const workspacePrincipal = {
+  kind: 'delegated',
+  serviceId: 'copilot',
+  subjectUserId: 'user-1',
+  workspaceId: 'workspace-1',
+  delegationId: 'copilot-tool:tool-call-1',
+  audience: 'sim:workspace-files',
+  issuedAt: new Date('2026-08-12T00:00:00.000Z'),
+  expiresAt: new Date('2026-08-12T00:05:00.000Z'),
+  resourceScope: { chatId: 'chat-1' },
+} as const
+
+describe('edit_content', () => {
+  beforeEach(() => {
+    vi.clearAllMocks()
+    resolveCopilotFilePrincipalMock.mockReturnValue(workspacePrincipal)
+    getDocumentFormatInfoMock.mockReturnValue({ isDoc: true })
+    inferContentTypeMock.mockReturnValue('text/x-python-pdf')
+    compileDocForWriteMock.mockResolvedValue({ ok: true, sourceMime: 'text/x-python-pdf' })
+    executeCopilotFileUseCaseMock.mockResolvedValue({})
+    buildEmbeddedImageRefWarningMock.mockResolvedValue('')
+    consumeLatestFileIntentMock.mockResolvedValue({
+      operation: 'update',
+      fileId: 'pdf-1',
+      workspaceId: 'workspace-1',
+      userId: 'user-1',
+      chatId: 'chat-1',
+      messageId: 'message-1',
+      fileRecord: {
+        id: 'pdf-1',
+        name: 'report.pdf',
+      },
+      contentType: 'text/x-python-pdf',
+      createdAt: Date.now(),
+    })
+  })
+
+  it('compiles with workspace scope while keeping the destination write file-scoped', async () => {
+    const content = "image = ImageReader('/home/user/inputs/image-1')"
+
+    await expect(editContentServerTool.execute({ content }, context)).resolves.toMatchObject({
+      success: true,
+    })
+
+    expect(resolveCopilotFilePrincipalMock).toHaveBeenCalledWith(context)
+    expect(compileDocForWriteMock).toHaveBeenCalledWith(
+      expect.objectContaining({
+        source: content,
+        fileName: 'report.pdf',
+        workspaceId: 'workspace-1',
+        principal: workspacePrincipal,
+      })
+    )
+    expect(executeCopilotFileUseCaseMock).toHaveBeenCalledWith(
+      context,
+      updateWorkspaceFileContent,
+      expect.objectContaining({
+        fileId: 'pdf-1',
+        assertedWorkspaceId: 'workspace-1',
+      }),
+      { fileId: 'pdf-1' }
+    )
+  })
+})

apps/sim/lib/copilot/tools/server/files/edit-content.ts

@@ -224,7 +224,7 @@ export const editContentServerTool: BaseServerTool<EditContentArgs, EditContentR
 
       // Compile once via the right engine (or isolated-vm fallback) and resolve
       // the source MIME to store. Shared with the create path.
-      const principal = resolveCopilotFilePrincipal(context, intent.fileId)
+      const principal = resolveCopilotFilePrincipal(context)
       const compiled = await compileDocForWrite({
         source: finalContent,
         fileName: fileRecord.name,