Addendum to #261: image-paste failure was a distinct defect from the copy/paste duplication

[gennadiryan]

Important

Problem

#261 documented an image-pasting failure inside the Amicode webview: pasting a screenshot staged a broken thumbnail, and sending with a staged image failed ("Failed to send prompt / failed to fetch"), stalling the chat until the image was removed. With #261 now closed and its fix shipped, this addendum records the correction that mattered for future triage: that defect was unrelated to the separately fixed copy/paste duplication.

Resolution

The image-paste failure was a policy gap in the app server's Content-Security-Policy: the attachment pipeline is built on object URLs, and the policy omitted the blob scheme from its image, connection, and media source lists — so thumbnails could not render and the send path could not fetch the staged blob. Fix: allow the blob scheme in those three lists, shipped on branch fix/image-attachments (PR #140, commit 42a2c2a82). Remote GUI retest passed: screenshot paste stages into the attachments set, the attachment picker works, and copy/paste shows no regression.

---

#261 and PR #130 (fix/paste-duplication-patch) addressed a different defect: duplicate insertion on paste, caused by two live mod+V handlers both bridging the clipboard into the document. That fix removed the duplicate insert path and restored image paste onto the single remaining path — it did not address (and did not cause) the CSP failure above. The two are independent in mechanism, in fix, and in verification.

This addendum does not reopen #261. It exists so a future reader of #261 does not conflate the two failures; both fixes are attributable (fork commit 42a2c2a82; provenance stamp recorded in the amicode record).