fix: Bypass CORS for S3 log fetching in renderer

Moves S3 log fetching from the renderer process to the main process
via IPC to bypass CORS restrictions. The renderer was blocked by CORS
when fetching presigned S3 URLs from localhost in development mode.

The main process (Node.js) is not subject to CORS, so fetching the raw
text there and passing it to the renderer via IPC fixes the issue.

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude <[email protected]>

Author: jonathanlab

apps/array/src/main/preload.ts

@@ -1,5 +1,4 @@
 import type { ContentBlock } from "@agentclientprotocol/sdk";
-import type { AgentEvent } from "@posthog/agent";
 import { contextBridge, type IpcRendererEvent, ipcRenderer } from "electron";
 import type {
   CreateWorkspaceOptions,
@@ -69,7 +68,7 @@ contextBridge.exposeInMainWorld("electronAPI", {
     ipcRenderer.invoke("store-api-key", apiKey),
   retrieveApiKey: (encryptedKey: string): Promise<string | null> =>
     ipcRenderer.invoke("retrieve-api-key", encryptedKey),
-  fetchS3Logs: (logUrl: string): Promise<AgentEvent[]> =>
+  fetchS3Logs: (logUrl: string): Promise<string | null> =>
     ipcRenderer.invoke("fetch-s3-logs", logUrl),
   rendererStore: {
     getItem: (key: string): Promise<string | null> =>

apps/array/src/main/services/posthog.ts

@@ -1,4 +1,3 @@
-import { type AgentEvent, parseAgentEvents } from "@posthog/agent";
 import { type IpcMainInvokeEvent, ipcMain, safeStorage } from "electron";
 import { logger } from "../lib/logger";
 
@@ -35,50 +34,35 @@ export function registerPosthogIpc(): void {
     },
   );
 
-  // Fetch and parse S3 logs
+  // Fetch S3 logs - returns raw text to bypass CORS in renderer
   ipcMain.handle(
     "fetch-s3-logs",
     async (
       _event: IpcMainInvokeEvent,
       logUrl: string,
-    ): Promise<AgentEvent[]> => {
+    ): Promise<string | null> => {
       try {
         log.debug("Fetching S3 logs from:", logUrl);
         const response = await fetch(logUrl);
 
         // 404 is expected for new task runs - file doesn't exist yet
         if (response.status === 404) {
-          return [];
+          return null;
         }
 
         if (!response.ok) {
-          throw new Error(
-            `Failed to fetch logs: ${response.status} ${response.statusText}`,
+          log.warn(
+            "Failed to fetch S3 logs:",
+            response.status,
+            response.statusText,
           );
+          return null;
         }
 
-        const content = await response.text();
-
-        if (!content.trim()) {
-          return [];
-        }
-
-        const rawEntries = content
-          .trim()
-          .split("\n")
-          .map((line) => {
-            try {
-              return JSON.parse(line);
-            } catch {
-              return null;
-            }
-          })
-          .filter(Boolean);
-
-        return parseAgentEvents(rawEntries);
+        return await response.text();
       } catch (error) {
         log.error("Failed to fetch S3 logs:", error);
-        throw error;
+        return null;
       }
     },
   );

apps/array/src/renderer/features/sessions/utils/parseSessionLogs.ts

@@ -1,4 +1,5 @@
 import type { SessionNotification } from "@agentclientprotocol/sdk";
+import "@renderer/types/electron";
 
 export interface StoredLogEntry {
   type: string;
@@ -26,14 +27,17 @@ export interface ParsedSessionLogs {
 export async function fetchSessionLogs(
   logUrl: string,
 ): Promise<ParsedSessionLogs> {
-  if (!logUrl) return { notifications: [], rawEntries: [] };
+  if (!logUrl) {
+    return { notifications: [], rawEntries: [] };
+  }
 
   try {
-    const response = await fetch(logUrl);
-    if (!response.ok) return { notifications: [], rawEntries: [] };
+    // Use IPC to fetch from main process to bypass CORS
+    const content = await window.electronAPI.fetchS3Logs(logUrl);
 
-    const content = await response.text();
-    if (!content.trim()) return { notifications: [], rawEntries: [] };
+    if (!content?.trim()) {
+      return { notifications: [], rawEntries: [] };
+    }
 
     const notifications: SessionNotification[] = [];
     const rawEntries: StoredLogEntry[] = [];
@@ -47,7 +51,6 @@ export async function fetchSessionLogs(
         // - Request (has id + method) = client → agent
         // - Response (has id + result/error) = agent → client
         // - Notification (has method, no id) = agent → client
-        // TODO: Check if this is correct.
         const msg = stored.notification;
         if (msg) {
           const hasId = msg.id !== undefined;
@@ -94,7 +97,6 @@ export async function fetchSessionLogs(
 
     return { notifications, rawEntries, sdkSessionId };
   } catch {
-    // Network error or other failure
     return { notifications: [], rawEntries: [] };
   }
 }

apps/array/src/renderer/types/electron.d.ts

@@ -5,7 +5,6 @@ import type {
   TabContextMenuResult,
   TaskContextMenuResult,
 } from "@main/services/contextMenu.types";
-import type { AgentEvent } from "@posthog/agent";
 import type { ContentBlock } from "@agentclientprotocol/sdk";
 import type {
   ChangedFile,
@@ -25,7 +24,7 @@ declare global {
   interface IElectronAPI {
     storeApiKey: (apiKey: string) => Promise<string>;
     retrieveApiKey: (encryptedKey: string) => Promise<string | null>;
-    fetchS3Logs: (logUrl: string) => Promise<AgentEvent[]>;
+    fetchS3Logs: (logUrl: string) => Promise<string | null>;
     rendererStore: {
       getItem: (key: string) => Promise<string | null>;
       setItem: (key: string, value: string) => Promise<void>;