Thumbnails are generated + encrypted on the client and uploaded as their own files rows. The thumbnail fileId + key ride inside the parent file message payload. Server never generates previews from ciphertext. Missing/optional thumbnail handled gracefully.
Acceptance criteria:
- Thumbnail is a separate encrypted file referenced by the message
- Server never derives previews from uploaded bytes
- Missing/optional thumbnail handled gracefully
Thumbnails are generated + encrypted on the client and uploaded as their own
filesrows. The thumbnailfileId+ key ride inside the parent file message payload. Server never generates previews from ciphertext. Missing/optional thumbnail handled gracefully.Acceptance criteria: