Sync the self-hosting stack

CHANGELOG.md

@@ -9,6 +9,42 @@ one of them changed. An entry says which artefact and which version, so `web 0.1
 Every version published to a channel appears here. Nothing is written from memory afterwards: a build
 cannot be published without its entry.
 
+## 2026-09-27 — A viewer for every file in a conversation `api 0.116.0` `web 0.141.0`
+
+**Open any file in a full-screen viewer.** A click on an attachment in the transcript, on a file in
+the workspace, on a chip in the composer before the message is sent, or on a picture in a reply
+opens it, and previous/next walk through the other files of the same message, or of the workspace
+in the panel's order. The viewer has a dark stage in both themes, an info panel (size, dimensions,
+pages, who sent it, when), download, copy, and a keyboard map; on a phone, swipe between files and
+down to close.
+
+- **Pictures:** zoom at the cursor or between two fingers, fit, fill and actual size, pan with
+  inertia, rotate, a minimap once zoomed, and animated pictures that play. A mouse wheel notch
+  zooms; a trackpad scrolls, and pinches to zoom.
+- **PDFs are drawn in the page**, with thumbnails, find, zoom and fit-width, and their text can be
+  selected. A scanned PDF, which used to show nothing, now shows its pages. They are rendered by
+  pdf.js 6.3.289 with scripting, XFA forms and editing turned off; a link inside a PDF opens in a
+  new tab. On a browser older than Chrome or Edge 125 or Safari 18, a PDF shows its extracted text
+  instead.
+- **Text files:** logs, code, scripts and configuration open in a reader with line numbers,
+  wrapping, find, go to line, colour codes in logs and syntax highlighting, and stay fast on a
+  10 MB log. CSV and TSV open as a table, JSON as a tree you can fold, NDJSON as records, and
+  certificates and certificate requests as their decoded fields. Markdown opens rendered, up to
+  1 MB, with its source a click away; pictures from other sites in it still load only on a click.
+- Files the assistant fetched from a machine are not opened in the viewer, as before.
+
+**Viewing a file uploaded to a workspace is no longer an export.** Opening one used to go through
+the export route, which filed a `document.export` entry on every view; it now reads the file
+directly and files nothing. Downloading it is still an audited export.
+
+**Diagrams** zoom and pan on the same engine, and behave as before.
+
+**Self-hosters:** api and web; publish the api first, since the web uses its new read route. No
+schema change and no new environment variable. **The web app now needs Chrome or Edge 107,
+Firefox 104 or Safari 16 or later.** The web image serves the PDF engine's worker and its
+WebAssembly from `/_assets/pdfjs-6.3.289/`; a reverse proxy in front of it passes them through
+like the other assets.
+
 ## 2026-09-26 — Attach files to a message, and upload files to a conversation's workspace `api 0.115.0` `web 0.140.0`
 
 **Drop, paste or pick files into the composer.** Pictures, text files and PDFs, up to 10 per