v1.0.5

%23%20v1.0.5%0A%0A%23%23%20Fixed%3A%20pasted-image%20references%20now%20resolve%20automatically%0A%0AText-only%20models%20can%20now%20hand%20the%20vision%20tool%20a%20pasted%20image%20reference%20and%20have%20it%20%22just%20work%22.%20Previously%20the%20durable%20%60!%5B%E5%9B%BE%E7%89%87%5D(%2Fdsh-free-vision%2Fraw%2F%3Cid%3E%E2%80%A6)%60%20markdown%20the%20client%20pastes%20into%20the%20conversation%20could%20not%20be%20consumed%20by%20the%20plugin's%20own%20engine-proxied%20%60image_understand%60%20tool%3A%0A%0A-%20the%20engine's%20SSRF%20guard%20blocks%20the%20loopback%20%60127.0.0.1%60%20URL%3B%0A-%20its%20extension-based%20sniffing%20rejects%20the%20extension-less%20content-addressed%20store%20files%3B%0A-%20its%20narrower%20allowed-dirs%20policy%20rejects%20%60%2Ftmp%60-style%20downloads.%0A%0AThe%20tool%20now%20resolves%20references%2C%20content%20ids%2C%20and%20attachment%20object%20paths%20on%20the%20host%20side%20into%20a%20%60data%3A%60%20URI%20before%20the%20engine%20sees%20them%2C%20so%20all%20three%20failure%20modes%20are%20bypassed%20in%20one%20step.%0A%0A-%20Resolves%20%60!%5B%E5%9B%BE%E7%89%87%5D(%2Fdsh-free-vision%2Fraw%2F%E2%80%A6)%60%20%2F%20%60%5Bimage%20attachment%20%E2%80%A6%5D%60%20%2F%20%60sha256%3A%3Chex64%3E%60%20%2F%20%60%E2%80%A6%2Fobjects%2F%3Cxx%3E%2F%3Chex64%3E%60%20references%20(durable%20%60%3Fref%3D%60%20%E2%86%92%20in-process%20registry%20%E2%86%92%20content-addressed%20file%20on%20disk).%0A-%20Local%20paths%20are%20allowlisted%20on%20the%20host%20(reusing%20%60allowedDirs%60)%2C%20sniffed%2C%20sent%20as%20%60data%3A%60%20URI.%0A-%20Actionable%20error%20messages%20(allowed%20roots%20listed%2C%20how%20to%20fix).%0A%0A__npm__%3A%20%5Bdsh-free-vision%401.0.5%5D(https%3A%2F%2Fwww.npmjs.com%2Fpackage%2Fdsh-free-vision)%20(already%20published).