fix(community): real persona thumbnails + proxy-route gallery previews

.gitattributes

@@ -1,9 +1,9 @@
 *.png filter=lfs diff=lfs merge=lfs -text
 *.webp filter=lfs diff=lfs merge=lfs -text
-*.ico filter=lfs diff=lfs merge=lfs -text
+*.svg filter=lfs diff=lfs merge=lfs -text
+*.woff filter=lfs diff=lfs merge=lfs -text
 *.hpersona filter=lfs diff=lfs merge=lfs -text
 *.jpg filter=lfs diff=lfs merge=lfs -text
 *.jpeg filter=lfs diff=lfs merge=lfs -text
-*.svg filter=lfs diff=lfs merge=lfs -text
-*.woff filter=lfs diff=lfs merge=lfs -text
 *.woff2 filter=lfs diff=lfs merge=lfs -text
+*.ico filter=lfs diff=lfs merge=lfs -text

frontend/.cache-bust

@@ -1 +1 @@
-1783158664
+1783159161

frontend/src/ui/CommunityGallery.tsx

@@ -64,17 +64,45 @@ type CommunityGalleryProps = {
   onInstalled?: () => void  // refresh project list after install
 }
 
+// ---------------------------------------------------------------------------
+// Preview URL resolution
+// ---------------------------------------------------------------------------
+
+/**
+ * Resolve the thumbnail URL for a community persona.
+ *
+ * Always prefer the backend proxy route `/community/preview/{id}/{version}`:
+ * the backend serves the bundled local asset first and transparently falls
+ * back to the remote gallery, so the frontend never depends on (or leaks) an
+ * external Worker/R2 URL that may be missing, stale, or blocked. Only when we
+ * can't build the proxy route (no id/version) do we fall back to the raw
+ * `preview_url` from the registry.
+ */
+function resolvePreviewUrl(
+  backendUrl: string,
+  item: CommunityPersonaItem,
+): string | undefined {
+  const version = item.latest?.version
+  if (item.id && version) {
+    const base = backendUrl.replace(/\/+$/, '')
+    return `${base}/community/preview/${encodeURIComponent(item.id)}/${encodeURIComponent(version)}`
+  }
+  return item.latest?.preview_url || undefined
+}
+
 // ---------------------------------------------------------------------------
 // Gallery Card
 // ---------------------------------------------------------------------------
 
 function GalleryCard({
   item,
+  previewUrl,
   installing,
   onInstall,
   onDetail,
 }: {
   item: CommunityPersonaItem
+  previewUrl?: string
   installing: boolean
   onInstall: () => void
   onDetail: () => void
@@ -90,13 +118,20 @@ function GalleryCard({
     <div className="relative w-full max-w-[340px] bg-white/[0.04] border border-white/[0.08] rounded-xl overflow-hidden hover:border-white/[0.16] transition-all group">
       {/* Preview */}
       <div className="relative aspect-[4/5] bg-black/20 overflow-hidden">
-        {item.latest?.preview_url ? (
+        {previewUrl ? (
           <img
-            src={item.latest.preview_url}
+            src={previewUrl}
             alt={item.name}
             loading="lazy"
             className="block w-full h-full object-cover"
             onError={(e) => {
+              if (import.meta.env.DEV) {
+                console.warn(
+                  `[CommunityGallery] preview failed for ${item.id}@${item.latest?.version}:`,
+                  previewUrl,
+                )
+              }
+              // Last-resort: hide the broken image so the initials placeholder shows.
               ;(e.target as HTMLImageElement).style.display = 'none'
             }}
           />
@@ -849,6 +884,7 @@ export function CommunityGallery({ backendUrl, apiKey, onInstalled }: CommunityG
               <GalleryCard
                 key={item.id}
                 item={item}
+                previewUrl={resolvePreviewUrl(cleanUrl, item)}
                 installing={
                   (install.kind === 'downloading' || install.kind === 'previewing' || install.kind === 'installing')
                   && install.personaId === item.id
@@ -876,7 +912,7 @@ export function CommunityGallery({ backendUrl, apiKey, onInstalled }: CommunityG
         <DetailModal
           card={detail.card}
           item={detail.item}
-          previewUrl={detail.item.latest?.preview_url}
+          previewUrl={resolvePreviewUrl(cleanUrl, detail.item)}
           onClose={() => setDetail(null)}
           onInstall={() => handleInstall(detail.item)}
         />