hub-client: paste images from the clipboard into the source editor (bd-706b0ixu)

[cscheid]

Summary

Cmd/Ctrl-V with an image on the clipboard now ingests it into the project silently — no dialog: the binary file is created next to the current document under a content-hash name (pasted-<hash8>.<ext>) and a markdown image reference is inserted at the cursor, so the image appears in the live preview immediately. Selected text becomes the alt text for single-file pastes; multi-file pastes insert space-separated references.

Design + decision log: claude-notes/plans/2026-08-27-paste-image-clipboard.md (braid bd-706b0ixu, closed).

Behavior

• Take-over rule (pure, DOM-free fileUpload/pasteImages.ts): the paste is handled iff every clipboard file is an accepted raster type (png/jpeg/gif/webp/avif, non-empty) and text/plain is empty or merely the OS file-copy filename rider. Everything else — plain text, Office/Excel payloads (which carry a PNG rendition alongside the TSV text), SVG, PDFs — falls through to Monaco's own paste handling, unchanged.
• SVG is deliberately excluded from the silent path (image/svg+xml can carry executable script); SVG ingestion stays available via the existing drag/drop + asset-dialog flows. Pipeline-wide SVG posture: bd-myoj9kp5. Offering the image rendition of mixed payloads: bd-yspyic32.
• Content-hash naming makes concurrent CRDT pastes safe: createBinaryFile's existence check is check-then-act on the local replica, so two peers claiming the same index key with different content would race to last-writer-wins and silently lose an image. Different content → different hash → different key: no race. Identical content converges and dedups.
• Ingest orchestration (fileUpload/pasteImageHandler.ts) is a dependency-injected factory: 10 MB size limit, per-file error isolation, rename-on-conflict path use, and a file-switch guard that drops the insertion if the user changed documents mid-flight.
• Editor.tsx wiring is a capture-phase paste listener on the editor container (runs before Monaco's own handler, which otherwise inserts the filename rider as stray text), attached once at mount via identity-stable callbacks.

Testing

• 41 new unit tests (classification matrix, filename/extension map, alt-text sanitization, full ingest orchestration incl. dedup/rename/guard paths), written and confirmed failing before implementation.
• Gates: tsc -b, eslint (no new findings vs. baseline), hub-client 1049 unit + 114 integration + 133 wasm tests, npm run build:all, and full cargo xtask verify --skip-hub-build (13,480 Rust tests) — all green.
• End-to-end in the production bundle via local-prod (bundle commit verified in the page footer): pasted a deterministic PNG → pasted-f613c380.png created (name matches the file's true SHA-256 prefix), reference inserted, preview rendered the exact bytes (16×16, naturalWidth confirmed); repeat paste deduped to one file; SVG-with-<script> and Excel-style mixed payloads passed through untouched; zero console errors. Full record in plan §6.

🤖 Generated with Claude Code

https://claude.ai/code/session_01Bs2YW5vUbm1krBkQicB5nr

[posit-snyk-bot]

✅ Snyk checks have passed. No issues have been found so far.

Status	Scan Engine	Critical	High	Medium	Low	Total (0)
✅	Open Source Security	0	0	0	0	0 issues
✅	Licenses	0	0	0	0	0 issues

💻 Catch issues earlier using the plugins for VS Code, JetBrains IDEs, Visual Studio, and Eclipse.