Detect .exr and .hdr image outputs before normal Job Monitor thumbnail rendering, and show explicit source-preview fallback tiles instead of broken image elements.
Keep normal image thumbnails plus existing media and asset fallback behavior intact, and document the HDR fallback posture.
Validation: targeted Vitest, R107 Playwright, doc-contract checks, and the full Windows test gate passed.
Route signed connector media through a shared MIME-aware response helper so dangerous active content downloads with octet-stream and nosniff headers while safe images remain inline-compatible.
Preserve media token, expiry, and path-boundary checks for LINE and WhatsApp media routes.
Validation: targeted connector media tests passed; full Windows test gate passed.
Keep filename-backed output references previewable when hosts omit hash metadata, while preserving the explicit no-go path for asset-only references.
Update public docs and generated OpenAPI contract to describe optional hash metadata and the ComfyUI asset hashing flag.
Validation: targeted backend/unit/E2E checks passed; full Windows test gate passed.
Update active ComfyUI and standalone frontend compatibility anchors while preserving desktop as a lagging host surface.
Refresh host-surface expectations and compatibility governance tests.
Validation: Windows full test gate passed with Playwright 39 passed.
Atlas Cloud exposes an OpenAI-compatible API, so it works through the existing
`custom` provider (OPENCLAW_LLM_PROVIDER=custom + OPENCLAW_LLM_BASE_URL) with no
code changes. Document it under "Configure an LLM key", noting that its public
HTTPS host passes the default SSRF-safe egress validation (no insecure override).
Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
rookiestar28