@kubitnodes/stellaris 0.3.21 → 0.3.23

package/dist/server/index.js

@@ -9,7 +9,7 @@ import { serve } from "@hono/node-server";
 import { chmod as chmod2, cp, mkdir as mkdir4, readdir as readdir3, readFile as readFile4, rename as rename3, rm as rm2, stat as stat3, writeFile as writeFile4 } from "node:fs/promises";
 import path6 from "node:path";
 import { decodeTime, monotonicFactory } from "ulid";
-import { z as z13 } from "zod";
+import { z as z16 } from "zod";
 
 // packages/shared/dist/ids.js
 import { z } from "zod";
@@ -64,7 +64,8 @@ var VERB_NAMES = [
   "create_cron",
   "update_cron",
   "remove_cron",
-  "remove_skill"
+  "remove_skill",
+  "upload_image"
 ];
 var VerbNameSchema = z2.enum(VERB_NAMES);
 var CharterTriggerSchema = z2.enum(["user_post", "ops_event", "heartbeat"]);
@@ -93,6 +94,7 @@ var USER_ROLE = "user";
 var USER_NAME = "user";
 var MEMBER_VERBS = [
   "post_message",
+  "upload_image",
   "read_inbox",
   "search",
   "open_thread",
@@ -169,7 +171,7 @@ var SEED_ROLES = [
 ];
 
 // packages/shared/dist/board.js
-import { z as z4 } from "zod";
+import { z as z5 } from "zod";
 
 // packages/shared/dist/crons.js
 import { Cron as Pattern } from "croner";
@@ -303,6 +305,115 @@ function localTime(date, timeZone) {
   return `${part("weekday")} ${part("year")}-${part("month")}-${part("day")} ${part("hour")}:${part("minute")}`;
 }
 
+// packages/shared/dist/quota.js
+import { z as z4 } from "zod";
+var QUOTA_WARNING_PERCENT = 80;
+var QuotaWindowSchema = z4.object({
+  /**
+   * The CLI's own name for the window: Claude's `five_hour`, `seven_day`, `seven_day_opus`, and
+   * `model:<label>` for a model's weekly window; Codex's `primary` and `secondary`.
+   */
+  key: z4.string().min(1).max(80),
+  /** What a scoped window counts, as the CLI labels it, such as a model's name. */
+  label: z4.string().min(1).max(80).optional(),
+  /** The window's length in minutes, when known. */
+  minutes: z4.number().int().positive().nullable().default(null),
+  /** How much of the window is used, in percent, or null when the CLI did not say. */
+  usedPercent: z4.number().nonnegative().nullable().default(null),
+  /** When the window starts afresh, when known. */
+  resetsAt: IsoDateTimeSchema.nullable().default(null),
+  /** When the CLI last reported this window. */
+  observedAt: IsoDateTimeSchema
+});
+var QuotaStatusSchema = z4.enum(["allowed", "warning", "limited", "none"]);
+var QuotaCreditsSchema = z4.object({
+  hasCredits: z4.boolean(),
+  unlimited: z4.boolean(),
+  balance: z4.string().max(40).nullable()
+});
+var QuotaExtraUsageSchema = z4.object({
+  enabled: z4.boolean(),
+  monthlyLimit: z4.number().nonnegative().nullable(),
+  usedCredits: z4.number().nonnegative().nullable(),
+  currency: z4.string().min(1).max(8).nullable()
+});
+var CliQuotaSchema = z4.object({
+  /** When the CLI last reported anything here. */
+  observedAt: IsoDateTimeSchema,
+  /** Whether it came from a turn's stream or from asking the CLI. */
+  source: z4.enum(["turn", "read"]),
+  status: QuotaStatusSchema,
+  /** While `limited`: when work can go on, when known, and the window that stopped it. */
+  limitedUntil: IsoDateTimeSchema.nullable().default(null),
+  limitedBy: z4.string().min(1).max(80).nullable().default(null),
+  /** The plan's name as the CLI gives it, such as `max` or `pro`. */
+  plan: z4.string().min(1).max(40).nullable().default(null),
+  windows: z4.array(QuotaWindowSchema).max(24).default([]),
+  credits: QuotaCreditsSchema.nullable().default(null),
+  extraUsage: QuotaExtraUsageSchema.nullable().default(null)
+});
+function mergeQuota(previous, next) {
+  if (previous === void 0) {
+    return next;
+  }
+  const windows = new Map(previous.windows.map((window) => [window.key, window]));
+  for (const window of next.windows) {
+    windows.set(window.key, window);
+  }
+  return {
+    ...next,
+    plan: next.plan ?? previous.plan,
+    credits: next.credits ?? previous.credits,
+    extraUsage: next.extraUsage ?? previous.extraUsage,
+    windows: [...windows.values()]
+  };
+}
+function windowCurrent(window, now) {
+  return window.resetsAt === null || Date.parse(window.resetsAt) > now.getTime();
+}
+function quotaLevel(quota, now) {
+  if (quota.status === "none") {
+    return "none";
+  }
+  if (quota.status === "limited" && (quota.limitedUntil === null || Date.parse(quota.limitedUntil) > now.getTime())) {
+    return "limited";
+  }
+  const high = quota.windows.some((window) => windowCurrent(window, now) && window.usedPercent !== null && window.usedPercent >= QUOTA_WARNING_PERCENT);
+  return quota.status === "warning" || high ? "warning" : "ok";
+}
+var WINDOW_NAMES = {
+  five_hour: "5h",
+  seven_day: "7d",
+  seven_day_opus: "7d Opus",
+  seven_day_sonnet: "7d Sonnet",
+  seven_day_oauth_apps: "7d apps",
+  seven_day_overage_included: "7d extra",
+  overage: "extra usage"
+};
+function windowName(window) {
+  if (window.label !== void 0) {
+    return window.minutes === 10080 ? `7d ${window.label}` : window.label;
+  }
+  const named = WINDOW_NAMES[window.key];
+  if (named !== void 0) {
+    return named;
+  }
+  if (window.minutes !== null) {
+    return window.minutes % 1440 === 0 ? `${window.minutes / 1440}d` : window.minutes % 60 === 0 ? `${window.minutes / 60}h` : `${window.minutes}m`;
+  }
+  return window.key;
+}
+function readings(quota) {
+  const windows = quota.windows.map((window) => `${window.key}=${window.usedPercent === null ? "?" : Math.round(window.usedPercent)}@${window.resetsAt === null ? "?" : Math.round(Date.parse(window.resetsAt) / 6e4)}`).toSorted();
+  return windows.join(",");
+}
+function quotaChanged(previous, next) {
+  if (previous === void 0) {
+    return true;
+  }
+  return previous.status !== next.status || previous.limitedUntil !== next.limitedUntil || previous.plan !== next.plan || previous.credits?.balance !== next.credits?.balance || previous.extraUsage?.usedCredits !== next.extraUsage?.usedCredits || readings(previous) !== readings(next);
+}
+
 // packages/shared/dist/board.js
 var ASK_CHANNEL = "asks";
 var SOCIETY_CHANNELS = ["general", "governance", ASK_CHANNEL];
@@ -315,24 +426,24 @@ var SOCIETY_SCOPE = "society";
 function wakeScope(member, project) {
   return project !== null && member.memberships.includes(project) ? project : SOCIETY_SCOPE;
 }
-var CliKindSchema = z4.enum(["claude", "codex"]);
-var ArchivedChannelSchema = z4.object({
+var CliKindSchema = z5.enum(["claude", "codex"]);
+var ArchivedChannelSchema = z5.object({
   name: NameSchema,
   at: IsoDateTimeSchema,
   by: NameSchema,
-  reason: z4.string().min(1)
+  reason: z5.string().min(1)
 });
-var SocietySchema = z4.object({
-  name: z4.string().min(1),
-  version: z4.literal(1),
+var SocietySchema = z5.object({
+  name: z5.string().min(1),
+  version: z5.literal(1),
   createdAt: IsoDateTimeSchema,
   /** The channels that take posts; an archived one moves to `archivedChannels`. */
-  channels: z4.array(NameSchema),
-  archivedChannels: z4.array(ArchivedChannelSchema).default([]),
+  channels: z5.array(NameSchema),
+  archivedChannels: z5.array(ArchivedChannelSchema).default([]),
   /** The time zone crons are read in when they name none, and every prompt tells the time in; the user's to set. */
   timezone: TimeZoneSchema.default(DEFAULT_TIME_ZONE)
 });
-var CompletionEffectSchema = z4.enum(["none", "merge", "ghpr"]);
+var CompletionEffectSchema = z5.enum(["none", "merge", "ghpr"]);
 var GITHUB_REMOTE = [
   /^https:\/\/github\.com\/([A-Za-z0-9-]+)\/([A-Za-z0-9._-]+?)(?:\.git)?\/?$/,
   /^git@github\.com:([A-Za-z0-9-]+)\/([A-Za-z0-9._-]+?)(?:\.git)?$/,
@@ -348,7 +459,7 @@ function githubRepository(remote) {
   return null;
 }
 var PULL_REQUEST_URL = /^https:\/\/github\.com\/([A-Za-z0-9-]+)\/([A-Za-z0-9._-]+)\/pull\/([1-9]\d*)\/?$/;
-var PullRequestUrlSchema = z4.string().trim().regex(PULL_REQUEST_URL, "a pull request's address, https://github.com/<owner>/<repo>/pull/<number>");
+var PullRequestUrlSchema = z5.string().trim().regex(PULL_REQUEST_URL, "a pull request's address, https://github.com/<owner>/<repo>/pull/<number>");
 function parsePullRequestUrl(url) {
   const match = PULL_REQUEST_URL.exec(url.trim());
   return match?.[1] === void 0 || match[2] === void 0 || match[3] === void 0 ? null : { owner: match[1], name: match[2], number: Number(match[3]) };
@@ -356,72 +467,72 @@ function parsePullRequestUrl(url) {
 function sameRepository(a, b) {
   return a.owner.toLowerCase() === b.owner.toLowerCase() && a.name.toLowerCase() === b.name.toLowerCase();
 }
-var MergeSubjectSchema = z4.string().trim().min(1).max(300).regex(/^[^\n]+$/, "a merge commit's subject is one line");
-var PullRequestLinkSchema = z4.object({
+var MergeSubjectSchema = z5.string().trim().min(1).max(300).regex(/^[^\n]+$/, "a merge commit's subject is one line");
+var PullRequestLinkSchema = z5.object({
   url: PullRequestUrlSchema,
-  number: z4.number().int().positive(),
+  number: z5.number().int().positive(),
   subject: MergeSubjectSchema.optional(),
-  body: z4.string().max(2e4).optional(),
+  body: z5.string().max(2e4).optional(),
   linkedBy: NameSchema,
   linkedAt: IsoDateTimeSchema,
   /**
    * Once its `ghpr` task was abandoned, how the board's closing of it on GitHub went: `ok` false
    * leaves it open, for the reason `detail` gives.
    */
-  closed: z4.object({ at: IsoDateTimeSchema, ok: z4.boolean(), detail: z4.string() }).optional()
+  closed: z5.object({ at: IsoDateTimeSchema, ok: z5.boolean(), detail: z5.string() }).optional()
 });
-var DefaultBranchSchema = z4.string().trim().min(1).max(100).regex(/^[A-Za-z0-9][A-Za-z0-9._/-]*$/, "a branch name is letters, digits, and . _ / -").refine((branch) => !branch.includes("..") && !branch.includes("//") && !branch.endsWith("/") && !branch.endsWith(".") && !branch.endsWith(".lock"), "not a branch name git takes").refine((branch) => !branch.startsWith("task/") && !branch.startsWith("agent/"), "task/ and agent/ hold the board's own branches");
-var StageIdSchema = z4.string().regex(/^s[1-9][0-9]*$/, "expected a stage id such as s1");
+var DefaultBranchSchema = z5.string().trim().min(1).max(100).regex(/^[A-Za-z0-9][A-Za-z0-9._/-]*$/, "a branch name is letters, digits, and . _ / -").refine((branch) => !branch.includes("..") && !branch.includes("//") && !branch.endsWith("/") && !branch.endsWith(".") && !branch.endsWith(".lock"), "not a branch name git takes").refine((branch) => !branch.startsWith("task/") && !branch.startsWith("agent/"), "task/ and agent/ hold the board's own branches");
+var StageIdSchema = z5.string().regex(/^s[1-9][0-9]*$/, "expected a stage id such as s1");
 var stageFields = {
-  name: z4.string().trim().min(1).max(120),
+  name: z5.string().trim().min(1).max(120),
   role: NameSchema.optional(),
   agent: NameSchema.optional(),
-  gate: z4.boolean().default(false)
+  gate: z5.boolean().default(false)
 };
 function oneAssignee(stage) {
   return stage.role === void 0 || stage.agent === void 0;
 }
 var ONE_ASSIGNEE = { message: "a stage names a role or an agent, not both" };
-var PlanStageSchema = z4.object(stageFields).refine(oneAssignee, ONE_ASSIGNEE);
-var PlanEditStageSchema = z4.object({ id: StageIdSchema.optional(), ...stageFields }).refine(oneAssignee, ONE_ASSIGNEE);
-var PlanSchema = z4.array(PlanStageSchema);
-var PlanEditSchema = z4.array(PlanEditStageSchema);
-var ProjectSchema = z4.object({
+var PlanStageSchema = z5.object(stageFields).refine(oneAssignee, ONE_ASSIGNEE);
+var PlanEditStageSchema = z5.object({ id: StageIdSchema.optional(), ...stageFields }).refine(oneAssignee, ONE_ASSIGNEE);
+var PlanSchema = z5.array(PlanStageSchema);
+var PlanEditSchema = z5.array(PlanEditStageSchema);
+var ProjectSchema = z5.object({
   slug: NameSchema,
-  name: z4.string().min(1),
-  repo: z4.string().nullable(),
-  defaultBranch: z4.string().min(1),
+  name: z5.string().min(1),
+  repo: z5.string().nullable(),
+  defaultBranch: z5.string().min(1),
   /** The channels that take posts; an archived one moves to `archivedChannels`. */
-  channels: z4.array(NameSchema),
-  archivedChannels: z4.array(ArchivedChannelSchema).default([]),
-  members: z4.array(NameSchema),
-  approvers: z4.array(NameSchema),
-  requiredCapabilities: z4.array(z4.string()),
+  channels: z5.array(NameSchema),
+  archivedChannels: z5.array(ArchivedChannelSchema).default([]),
+  members: z5.array(NameSchema),
+  approvers: z5.array(NameSchema),
+  requiredCapabilities: z5.array(z5.string()),
   createdAt: IsoDateTimeSchema,
   onDone: CompletionEffectSchema.default("none"),
   /** The runner the project lives on, which holds its repository; set on the project's first turn. */
   runner: NameSchema.optional(),
   /** Set once the project is archived: nobody belongs to it, and nothing more is posted, filed, or joined there. */
-  archived: z4.object({ at: IsoDateTimeSchema, by: NameSchema, reason: z4.string().min(1) }).optional()
+  archived: z5.object({ at: IsoDateTimeSchema, by: NameSchema, reason: z5.string().min(1) }).optional()
 });
-var TaskStepSchema = z4.object({
-  action: z4.enum(["advanced", "returned", "abandoned", "landed", "reopened"]),
+var TaskStepSchema = z5.object({
+  action: z5.enum(["advanced", "returned", "abandoned", "landed", "reopened"]),
   stage: StageIdSchema,
   to: StageIdSchema.nullable()
 });
-var ProposalStepSchema = z4.object({ action: z4.enum(["approved", "rejected"]) });
-var MessageStepSchema = z4.union([TaskStepSchema, ProposalStepSchema]);
+var ProposalStepSchema = z5.object({ action: z5.enum(["approved", "rejected"]) });
+var MessageStepSchema = z5.union([TaskStepSchema, ProposalStepSchema]);
 function isTaskStep(step) {
   return "stage" in step;
 }
-var KnowledgeNoticeSchema = z4.object({
-  kind: z4.literal("knowledge"),
-  action: z4.enum(["written", "updated", "removed"]),
+var KnowledgeNoticeSchema = z5.object({
+  kind: z5.literal("knowledge"),
+  action: z5.enum(["written", "updated", "removed"]),
   topic: NameSchema,
   project: NameSchema.nullable()
 });
-var MessageNoticeSchema = z4.discriminatedUnion("kind", [KnowledgeNoticeSchema]);
-var MessageFrontmatterSchema = z4.object({
+var MessageNoticeSchema = z5.discriminatedUnion("kind", [KnowledgeNoticeSchema]);
+var MessageFrontmatterSchema = z5.object({
   id: UlidSchema,
   author: NameSchema,
   channel: ChannelRefSchema,
@@ -435,7 +546,7 @@ var MessageFrontmatterSchema = z4.object({
   /** On a post a verb made about its work, such as a knowledge topic's note: what it records. */
   notice: MessageNoticeSchema.optional(),
   ts: IsoDateTimeSchema,
-  mentions: z4.array(NameSchema)
+  mentions: z5.array(NameSchema)
 });
 var MessageRefSchema = MessageFrontmatterSchema.pick({
   id: true,
@@ -445,16 +556,16 @@ var MessageRefSchema = MessageFrontmatterSchema.pick({
   ts: true
 });
 var MESSAGE_LOOKUP_LIMIT = 50;
-var TaskStatusSchema = z4.enum(["open", "claimed", "done", "abandoned"]);
-var ThreadStateSchema = z4.enum(["open", "closed"]);
-var ThreadSubjectSchema = z4.object({
-  kind: z4.enum(["task", "proposal"]),
+var TaskStatusSchema = z5.enum(["open", "claimed", "done", "abandoned"]);
+var ThreadStateSchema = z5.enum(["open", "closed"]);
+var ThreadSubjectSchema = z5.object({
+  kind: z5.enum(["task", "proposal"]),
   id: UlidSchema
 });
-var ThreadFrontmatterSchema = z4.object({
+var ThreadFrontmatterSchema = z5.object({
   id: UlidSchema,
   channel: ChannelRefSchema,
-  title: z4.string().min(1).max(200),
+  title: z5.string().min(1).max(200),
   subject: ThreadSubjectSchema.optional(),
   state: ThreadStateSchema,
   openedBy: NameSchema,
@@ -462,28 +573,28 @@ var ThreadFrontmatterSchema = z4.object({
   closedBy: NameSchema.optional(),
   closedAt: IsoDateTimeSchema.optional()
 });
-var StageSchema = z4.object({
+var StageSchema = z5.object({
   id: StageIdSchema,
-  name: z4.string().min(1),
+  name: z5.string().min(1),
   role: NameSchema.optional(),
   agent: NameSchema.optional(),
-  gate: z4.boolean().default(false),
+  gate: z5.boolean().default(false),
   /** Everyone who has held the stage, oldest first. */
-  holders: z4.array(NameSchema).default([]),
+  holders: z5.array(NameSchema).default([]),
   completedBy: NameSchema.optional(),
   completedAt: IsoDateTimeSchema.optional()
 });
-var TaskReturnSchema = z4.object({
+var TaskReturnSchema = z5.object({
   from: StageIdSchema,
   by: NameSchema,
   at: IsoDateTimeSchema
 });
-var TaskFrontmatterSchema = z4.object({
+var TaskFrontmatterSchema = z5.object({
   id: UlidSchema,
   project: NameSchema,
   /** The channel of the project the task is filed in, where its thread hangs. */
   channel: NameSchema.default("general"),
-  title: z4.string().min(1),
+  title: z5.string().min(1),
   status: TaskStatusSchema,
   createdBy: NameSchema,
   createdAt: IsoDateTimeSchema,
@@ -492,19 +603,19 @@ var TaskFrontmatterSchema = z4.object({
   claimedBy: NameSchema.optional(),
   leaseExpiresAt: IsoDateTimeSchema.optional(),
   parentId: UlidSchema.optional(),
-  blockedBy: z4.array(UlidSchema),
-  requiredCapabilities: z4.array(z4.string()),
-  stages: z4.array(StageSchema).min(1),
+  blockedBy: z5.array(UlidSchema),
+  requiredCapabilities: z5.array(z5.string()),
+  stages: z5.array(StageSchema).min(1),
   stage: StageIdSchema,
   /** When the current stage last became current or lost its holder: the waiting clock. */
   stageSince: IsoDateTimeSchema,
   /** The highest stage number issued, so a removed stage's id is never reused. */
-  stageSeq: z4.number().int().positive(),
+  stageSeq: z5.number().int().positive(),
   onDone: CompletionEffectSchema.default("none"),
   /** The pull request a `ghpr` task lands through. */
   pullRequest: PullRequestLinkSchema.optional(),
   /** The last stage is complete and the completion effect is running. */
-  completing: z4.boolean().default(false),
+  completing: z5.boolean().default(false),
   /** The latest send-back while its rework lasts: cleared once the task reaches that stage again. */
   returned: TaskReturnSchema.optional()
 });
@@ -528,79 +639,90 @@ function mayHoldStage(member, task) {
   }
   return !(stage.gate && task.stages.slice(0, index).some((s) => s.holders.includes(member.name)));
 }
-var ModelNameSchema = z4.string().trim().min(1).max(120).regex(/^[\w.:/[\]-]+$/, "a model name is one word of letters, digits, and . _ : / - [ ]");
-var EffortSchema = z4.string().trim().min(1).max(32).regex(/^[a-z][a-z0-9_-]*$/, "an effort is one lowercase word, such as high");
-var EffortOptionSchema = z4.object({
+var ModelNameSchema = z5.string().trim().min(1).max(120).regex(/^[\w.:/[\]-]+$/, "a model name is one word of letters, digits, and . _ : / - [ ]");
+var EffortSchema = z5.string().trim().min(1).max(32).regex(/^[a-z][a-z0-9_-]*$/, "an effort is one lowercase word, such as high");
+var EffortOptionSchema = z5.object({
   id: EffortSchema,
-  description: z4.string().default("")
+  description: z5.string().default("")
 });
-var ModelOptionSchema = z4.object({
+var ModelOptionSchema = z5.object({
   id: ModelNameSchema,
-  name: z4.string(),
-  description: z4.string().default(""),
-  isDefault: z4.boolean().default(false),
-  efforts: z4.array(EffortOptionSchema).default([]),
+  name: z5.string(),
+  description: z5.string().default(""),
+  isDefault: z5.boolean().default(false),
+  efforts: z5.array(EffortOptionSchema).default([]),
   defaultEffort: EffortSchema.optional()
 });
-var RunnerModelsSchema = z4.object({
+var RunnerModelsSchema = z5.object({
   runner: NameSchema,
   cli: CliKindSchema,
-  models: z4.array(ModelOptionSchema)
+  models: z5.array(ModelOptionSchema)
 });
-var AgentStatusSchema = z4.enum(["active", "retired"]);
-var AgentSchema = z4.object({
+var AgentStatusSchema = z5.enum(["active", "retired"]);
+var AgentSchema = z5.object({
   name: NameSchema,
   role: NameSchema,
   cli: CliKindSchema.nullable(),
-  model: z4.string().optional(),
+  model: z5.string().optional(),
   /** The reasoning effort set for the agent's turns; the model's own default applies otherwise. */
-  effort: z4.string().optional(),
+  effort: z5.string().optional(),
   /** The runner preferred for the agent's turns where nothing else decides; any runner with its CLI otherwise. */
   homeRunner: NameSchema.optional(),
-  memberships: z4.array(NameSchema),
-  subscriptions: z4.array(ChannelRefSchema),
+  memberships: z5.array(NameSchema),
+  subscriptions: z5.array(ChannelRefSchema),
   status: AgentStatusSchema,
   createdAt: IsoDateTimeSchema,
-  tokenHash: z4.string().min(1),
+  tokenHash: z5.string().min(1),
   retiredAt: IsoDateTimeSchema.optional(),
-  retiredReason: z4.string().optional()
+  retiredReason: z5.string().optional()
 });
-var MemberSchema = z4.object({
+var MemberSchema = z5.object({
   name: NameSchema,
   role: NameSchema,
   cli: CliKindSchema.nullable(),
   homeRunner: NameSchema.optional(),
   status: AgentStatusSchema,
-  resident: z4.boolean().default(false),
+  resident: z5.boolean().default(false),
   /** The model configured on the record, if any; the CLI's own default applies otherwise. */
-  model: z4.string().optional(),
+  model: z5.string().optional(),
   /** The model the CLI reported on the citizen's last turn. */
-  lastModel: z4.string().optional(),
+  lastModel: z5.string().optional(),
   /** The reasoning effort configured on the record, if any; the model's own default applies otherwise. */
-  effort: z4.string().optional(),
+  effort: z5.string().optional(),
   /** The citizen's own skills, by name. */
-  skills: z4.array(NameSchema).default([]),
-  memberships: z4.array(NameSchema),
-  subscriptions: z4.array(ChannelRefSchema),
-  claimsHeld: z4.number().int().nonnegative().default(0),
-  tasksDone: z4.number().int().nonnegative().default(0),
+  skills: z5.array(NameSchema).default([]),
+  memberships: z5.array(NameSchema),
+  subscriptions: z5.array(ChannelRefSchema),
+  claimsHeld: z5.number().int().nonnegative().default(0),
+  tasksDone: z5.number().int().nonnegative().default(0),
   lastTurnAt: IsoDateTimeSchema.optional(),
-  lastTurnOutcome: z4.string().optional(),
+  lastTurnOutcome: z5.string().optional(),
   createdAt: IsoDateTimeSchema,
   retiredAt: IsoDateTimeSchema.optional()
 });
-var RunnerOsSchema = z4.enum(["linux", "windows", "darwin"]);
-var RunnerSchema = z4.object({
+var RunnerOsSchema = z5.enum(["linux", "windows", "darwin"]);
+var GitIdentityPartSchema = z5.enum(["name", "email"]);
+var RunnerSchema = z5.object({
   name: NameSchema,
   os: RunnerOsSchema,
-  clis: z4.array(CliKindSchema),
-  capabilities: z4.array(z4.string()),
+  clis: z5.array(CliKindSchema),
+  capabilities: z5.array(z5.string()),
   /** The release the runner reported when it last registered; absent until it has. */
-  version: z4.string().optional(),
-  status: z4.enum(["connected", "disconnected"]),
-  lastSeen: IsoDateTimeSchema.optional()
+  version: z5.string().optional(),
+  /**
+   * What the runner's account lacked of a git identity when it last registered, empty when it had
+   * both; absent while the runner has not said, as one from before runners checked never does.
+   */
+  gitIdentityMissing: z5.array(GitIdentityPartSchema).optional(),
+  status: z5.enum(["connected", "disconnected"]),
+  lastSeen: IsoDateTimeSchema.optional(),
+  /**
+   * Each CLI's plan quota as its login on this runner last reported it, from a turn's stream or a
+   * read; absent until one has.
+   */
+  quotas: z5.partialRecord(CliKindSchema, CliQuotaSchema).optional()
 });
-var ProposalKindSchema = z4.enum([
+var ProposalKindSchema = z5.enum([
   "role",
   "member",
   "channel",
@@ -609,42 +731,42 @@ var ProposalKindSchema = z4.enum([
   "skill",
   "archive"
 ]);
-var ProposalStatusSchema = z4.enum([
+var ProposalStatusSchema = z5.enum([
   "proposed",
   "approved",
   "rejected",
   "provisioned",
   "retired"
 ]);
-var MemberProposalSchema = z4.object({
+var MemberProposalSchema = z5.object({
   name: NameSchema,
   role: NameSchema,
   cli: CliKindSchema,
-  model: z4.string().optional(),
+  model: z5.string().optional(),
   homeRunner: NameSchema.optional(),
-  memberships: z4.array(NameSchema).default([]),
-  subscriptions: z4.array(ChannelRefSchema).default([]),
-  seedInstructions: z4.string().optional()
+  memberships: z5.array(NameSchema).default([]),
+  subscriptions: z5.array(ChannelRefSchema).default([]),
+  seedInstructions: z5.string().optional()
 });
-var ChannelProposalSchema = z4.object({
+var ChannelProposalSchema = z5.object({
   project: NameSchema.nullable().default(null),
   name: NameSchema,
-  purpose: z4.string().min(1)
+  purpose: z5.string().min(1)
 });
-var RoleChangesSchema = z4.strictObject({
-  maxReplicas: z4.number().int().min(1).optional(),
-  backlogThreshold: z4.number().positive().optional(),
-  wakeTriggers: z4.array(CharterTriggerSchema).optional(),
-  verbs: z4.array(VerbNameSchema).optional()
+var RoleChangesSchema = z5.strictObject({
+  maxReplicas: z5.number().int().min(1).optional(),
+  backlogThreshold: z5.number().positive().optional(),
+  wakeTriggers: z5.array(CharterTriggerSchema).optional(),
+  verbs: z5.array(VerbNameSchema).optional()
 }).refine((changes) => Object.values(changes).some((value) => value !== void 0), {
   message: "a reallocation changes at least one of maxReplicas, backlogThreshold, wakeTriggers, verbs"
 });
-var ReallocationProposalSchema = z4.object({
+var ReallocationProposalSchema = z5.object({
   role: NameSchema,
   changes: RoleChangesSchema,
-  description: z4.string().min(1)
+  description: z5.string().min(1)
 });
-var LegacyReallocationSchema = z4.object({ description: z4.string().min(1) });
+var LegacyReallocationSchema = z5.object({ description: z5.string().min(1) });
 function applyRoleChanges(role, changes) {
   return {
     ...role,
@@ -679,18 +801,18 @@ function roleChangeLines(role, changes) {
   }
   return lines;
 }
-var RetirementProposalSchema = z4.object({
+var RetirementProposalSchema = z5.object({
   agent: NameSchema,
-  reason: z4.string().min(1)
+  reason: z5.string().min(1)
 });
-var ArchiveProposalSchema = z4.object({
+var ArchiveProposalSchema = z5.object({
   project: NameSchema,
-  reason: z4.string().min(1)
+  reason: z5.string().min(1)
 });
-var SkillProposalSchema = z4.object({
+var SkillProposalSchema = z5.object({
   name: NameSchema,
-  summary: z4.string().min(1).max(200),
-  body: z4.string().min(1).optional()
+  summary: z5.string().min(1).max(200),
+  body: z5.string().min(1).optional()
 });
 var ProposalCharterSchemas = {
   role: RoleCharterSchema,
@@ -793,23 +915,23 @@ function describeCharter(kind, charter) {
   }
   return `${kind} ${JSON.stringify(charter)}`;
 }
-var SkillSchema = z4.object({
+var SkillSchema = z5.object({
   name: NameSchema,
-  summary: z4.string().default(""),
-  scope: z4.enum(["own", "society"]),
-  path: z4.string().min(1)
+  summary: z5.string().default(""),
+  scope: z5.enum(["own", "society"]),
+  path: z5.string().min(1)
 });
-var RemovedSkillSchema = z4.object({
+var RemovedSkillSchema = z5.object({
   name: NameSchema,
-  reason: z4.string().min(1),
+  reason: z5.string().min(1),
   removedBy: NameSchema,
   removedAt: IsoDateTimeSchema
 });
-var HomeConflictSchema = z4.object({
+var HomeConflictSchema = z5.object({
   /** The copy, relative to the home. */
-  path: z4.string().min(1),
+  path: z5.string().min(1),
   /** The file beside it, whose version the board kept. */
-  file: z4.string().min(1),
+  file: z5.string().min(1),
   /** When the copy reached the board. */
   since: IsoDateTimeSchema
 });
@@ -817,79 +939,79 @@ var CONFLICT_COPY = /^(.+)\.conflict-[^/.]+$/;
 function conflictCopyOf(copy) {
   return CONFLICT_COPY.exec(copy)?.[1] ?? null;
 }
-var CommitIdSchema = z4.string().regex(/^[0-9a-f]{40}([0-9a-f]{24})?$/);
-var HomeFileChangeSchema = z4.object({
-  path: z4.string().min(1),
-  status: z4.enum(["added", "modified", "deleted"]),
+var CommitIdSchema = z5.string().regex(/^[0-9a-f]{40}([0-9a-f]{24})?$/);
+var HomeFileChangeSchema = z5.object({
+  path: z5.string().min(1),
+  status: z5.enum(["added", "modified", "deleted"]),
   /** Lines added and removed, or null for a binary file. */
-  added: z4.number().int().nonnegative().nullable(),
-  removed: z4.number().int().nonnegative().nullable()
+  added: z5.number().int().nonnegative().nullable(),
+  removed: z5.number().int().nonnegative().nullable()
 });
-var HomeChangeSchema = z4.object({
+var HomeChangeSchema = z5.object({
   commit: CommitIdSchema,
   at: IsoDateTimeSchema,
-  kind: z4.enum(["turn", "board", "merge"]),
-  author: z4.string(),
+  kind: z5.enum(["turn", "board", "merge"]),
+  author: z5.string(),
   /** The turn that made it, from the runner's commit message. */
   turnId: UlidSchema.optional(),
-  subject: z4.string(),
-  files: z4.array(HomeFileChangeSchema)
+  subject: z5.string(),
+  files: z5.array(HomeFileChangeSchema)
 });
-var HomeHistorySchema = z4.object({
-  changes: z4.array(HomeChangeSchema),
+var HomeHistorySchema = z5.object({
+  changes: z5.array(HomeChangeSchema),
   /** Whether older commits remain past the ones read. */
-  more: z4.boolean()
+  more: z5.boolean()
 });
 var HomeFileDiffSchema = HomeFileChangeSchema.pick({ path: true, status: true }).extend({
-  patch: z4.string().nullable(),
+  patch: z5.string().nullable(),
   /** The patch was cut at its size limit. */
-  truncated: z4.boolean()
+  truncated: z5.boolean()
 });
-var KnowledgeSchema = z4.object({
+var KnowledgeSchema = z5.object({
   topic: NameSchema,
   project: NameSchema.nullable(),
-  revision: z4.number().int().min(0),
+  revision: z5.number().int().min(0),
   updatedBy: NameSchema,
   updatedAt: IsoDateTimeSchema
 });
-var RemovedKnowledgeSchema = z4.object({
+var RemovedKnowledgeSchema = z5.object({
   topic: NameSchema,
   project: NameSchema.nullable(),
   removedBy: NameSchema,
   removedAt: IsoDateTimeSchema
 });
-var DashboardSchema = z4.object({
+var DashboardSchema = z5.object({
   project: NameSchema,
-  revision: z4.number().int().min(0),
+  revision: z5.number().int().min(0),
   /** Absent until someone updates the dashboard the project began with. */
   updatedBy: NameSchema.optional(),
   updatedAt: IsoDateTimeSchema.optional(),
-  body: z4.string()
+  body: z5.string()
 });
-var ProposalOriginSchema = z4.object({
+var ProposalOriginSchema = z5.object({
   scope: NameSchema,
   thread: UlidSchema.optional(),
   channel: NameSchema.optional()
 });
 var SKILL_FILES_LIMIT = 100;
 var SKILL_BYTES_LIMIT = 10 * 1024 * 1024;
-var SkillFileSchema = z4.object({
-  path: z4.string().min(1),
-  size: z4.number().int().nonnegative(),
-  executable: z4.boolean()
+var SkillFileSchema = z5.object({
+  path: z5.string().min(1),
+  size: z5.number().int().nonnegative(),
+  executable: z5.boolean()
 });
-var SkillFilesSchema = z4.object({
+var SkillFilesSchema = z5.object({
   /** The commit of the proposer's home the files came from. */
   commit: CommitIdSchema,
   takenAt: IsoDateTimeSchema,
-  files: z4.array(SkillFileSchema)
+  files: z5.array(SkillFileSchema)
 });
 var SkillFileContentSchema = SkillFileSchema.extend({
-  text: z4.string().nullable(),
+  text: z5.string().nullable(),
   /** The text was cut at its size limit. */
-  truncated: z4.boolean()
+  truncated: z5.boolean()
 });
-var ProposalFrontmatterSchema = z4.object({
+var ProposalFrontmatterSchema = z5.object({
   id: UlidSchema,
   kind: ProposalKindSchema,
   proposedBy: NameSchema,
@@ -901,146 +1023,191 @@ var ProposalFrontmatterSchema = z4.object({
   skillFiles: SkillFilesSchema.optional(),
   decidedBy: NameSchema.optional(),
   decidedAt: IsoDateTimeSchema.optional(),
-  reason: z4.string().optional(),
-  charter: z4.record(z4.string(), z4.unknown()),
+  reason: z5.string().optional(),
+  charter: z5.record(z5.string(), z5.unknown()),
   /** What approval created, for kinds the board provisions: the agent, channel, role, or retirement. */
   provisionedAt: IsoDateTimeSchema.optional(),
-  provision: z4.record(z4.string(), z4.unknown()).optional()
+  provision: z5.record(z5.string(), z5.unknown()).optional()
 });
-var DecisionSchema = z4.object({
+var DecisionSchema = z5.object({
   id: UlidSchema,
   proposalId: UlidSchema,
   decidedBy: NameSchema,
-  outcome: z4.enum(["approved", "rejected"]),
-  reason: z4.string().optional(),
+  outcome: z5.enum(["approved", "rejected"]),
+  reason: z5.string().optional(),
   ts: IsoDateTimeSchema
 });
 
 // packages/shared/dist/verbs.js
-import { z as z5 } from "zod";
-var MomentSchema = z5.iso.datetime({ offset: true });
-var CronTitleSchema = z5.string().trim().min(1).max(120);
-var CronNoteSchema = z5.string().trim().min(1).max(4e3);
+import { z as z7 } from "zod";
+
+// packages/shared/dist/images.js
+import { z as z6 } from "zod";
+var IMAGE_LIMIT_BYTES = 8 * 1024 * 1024;
+var ImageTypeSchema = z6.enum(["png", "jpeg", "gif", "webp"]);
+var IMAGE_MEDIA_TYPES = {
+  png: "image/png",
+  jpeg: "image/jpeg",
+  gif: "image/gif",
+  webp: "image/webp"
+};
+function startsWith(bytes, prefix, at = 0) {
+  for (let index = 0; index < prefix.length; index += 1) {
+    if (bytes[at + index] !== prefix[index]) {
+      return false;
+    }
+  }
+  return true;
+}
+var ascii = (text) => new TextEncoder().encode(text);
+function imageTypeOf(bytes) {
+  if (startsWith(bytes, [137, 80, 78, 71, 13, 10, 26, 10])) {
+    return "png";
+  }
+  if (startsWith(bytes, [255, 216, 255])) {
+    return "jpeg";
+  }
+  if (startsWith(bytes, ascii("GIF87a")) || startsWith(bytes, ascii("GIF89a"))) {
+    return "gif";
+  }
+  if (startsWith(bytes, ascii("RIFF")) && startsWith(bytes, ascii("WEBP"), 8)) {
+    return "webp";
+  }
+  return null;
+}
+var ImagePathSchema = z6.string().min(1).max(4096).refine((value) => !value.includes("\0"), { message: "a path with no NUL character" });
+var IMAGE_SCHEME = "image:";
+var UploadedImageSchema = z6.object({
+  id: UlidSchema,
+  type: ImageTypeSchema,
+  size: z6.number().int().positive(),
+  markdown: z6.string()
+});
+
+// packages/shared/dist/verbs.js
+var MomentSchema = z7.iso.datetime({ offset: true });
+var CronTitleSchema = z7.string().trim().min(1).max(120);
+var CronNoteSchema = z7.string().trim().min(1).max(4e3);
 var VerbInputs = {
-  post_message: z5.object({
+  post_message: z7.object({
     /** Required outside a thread; in one it may be left out, and must otherwise be the thread's. */
     channel: ChannelRefSchema.optional(),
-    body: z5.string().min(1),
+    body: z7.string().min(1),
     thread_id: UlidSchema.optional()
   }),
-  read_inbox: z5.object({
+  read_inbox: z7.object({
     since_cursor: UlidSchema.nullable().optional(),
-    limit: z5.number().int().positive().max(200).default(50),
-    advance: z5.boolean().default(true)
+    limit: z7.number().int().positive().max(200).default(50),
+    advance: z7.boolean().default(true)
   }),
-  search: z5.object({
-    query: z5.string().min(1),
+  search: z7.object({
+    query: z7.string().min(1),
     project: NameSchema.optional(),
     channel: ChannelRefSchema.optional(),
-    limit: z5.number().int().positive().max(100).default(20)
+    limit: z7.number().int().positive().max(100).default(20)
   }),
   /** On a task or a proposal, whose id the thread takes, or on a channel with a title. */
-  open_thread: z5.object({
+  open_thread: z7.object({
     task_id: UlidSchema.optional(),
     proposal_id: UlidSchema.optional(),
     channel: ChannelRefSchema.optional(),
-    title: z5.string().min(1).max(200).optional()
+    title: z7.string().min(1).max(200).optional()
   }),
-  close_thread: z5.object({ thread_id: UlidSchema, summary: z5.string().min(1) }),
-  create_task: z5.object({
+  close_thread: z7.object({ thread_id: UlidSchema, summary: z7.string().min(1) }),
+  create_task: z7.object({
     project: NameSchema,
-    title: z5.string().min(1).max(200),
-    body: z5.string().default(""),
+    title: z7.string().min(1).max(200),
+    body: z7.string().default(""),
     parent_id: UlidSchema.optional(),
-    required_capabilities: z5.array(z5.string()).default([]),
+    required_capabilities: z7.array(z7.string()).default([]),
     /** The plan; without it the task gets one stage, work, that anyone in the project may take. */
-    stages: z5.array(PlanStageSchema).min(1).optional(),
+    stages: z7.array(PlanStageSchema).min(1).optional(),
     /** A channel of the project the task belongs to, such as a release's; its thread opens there. */
     channel: NameSchema.default("general")
   }),
-  claim_task: z5.object({ task_id: UlidSchema }),
-  release_task: z5.object({ task_id: UlidSchema }),
-  update_task: z5.object({
+  claim_task: z7.object({ task_id: UlidSchema }),
+  release_task: z7.object({ task_id: UlidSchema }),
+  update_task: z7.object({
     task_id: UlidSchema,
     /** Move the task back to this earlier stage. */
     stage: StageIdSchema.optional(),
-    status: z5.enum(["abandoned"]).optional(),
+    status: z7.enum(["abandoned"]).optional(),
     /** Posted to the task's thread as the caller, marked with the step when the task moved. */
-    note: z5.string().min(1).optional(),
-    blocked_by: z5.array(UlidSchema).optional(),
+    note: z7.string().min(1).optional(),
+    blocked_by: z7.array(UlidSchema).optional(),
     /**
      * The pull request a `ghpr` task lands through, on its project's repository, with the merge
      * commit's subject and body; null unlinks it.
      */
-    pull_request: z5.object({
+    pull_request: z7.object({
       url: PullRequestUrlSchema,
       merge_subject: MergeSubjectSchema.optional(),
-      merge_body: z5.string().max(2e4).optional()
+      merge_body: z7.string().max(2e4).optional()
     }).nullable().optional()
   }),
-  get_task: z5.object({ task_id: UlidSchema }),
-  subscribe: z5.object({ channel: ChannelRefSchema }),
-  unsubscribe: z5.object({ channel: ChannelRefSchema }),
-  propose: z5.object({
+  get_task: z7.object({ task_id: UlidSchema }),
+  subscribe: z7.object({ channel: ChannelRefSchema }),
+  unsubscribe: z7.object({ channel: ChannelRefSchema }),
+  propose: z7.object({
     kind: ProposalKindSchema,
-    charter: z5.record(z5.string(), z5.unknown()),
-    rationale: z5.string().default("")
+    charter: z7.record(z7.string(), z7.unknown()),
+    rationale: z7.string().default("")
   }),
-  approve: z5.object({ proposal_id: UlidSchema, reason: z5.string().optional() }),
-  reject: z5.object({ proposal_id: UlidSchema, reason: z5.string().min(1) }),
-  create_project: z5.object({
+  approve: z7.object({ proposal_id: UlidSchema, reason: z7.string().optional() }),
+  reject: z7.object({ proposal_id: UlidSchema, reason: z7.string().min(1) }),
+  create_project: z7.object({
     slug: NameSchema,
-    name: z5.string().min(1).optional(),
-    repo: z5.string().min(1).nullable().default(null),
+    name: z7.string().min(1).optional(),
+    repo: z7.string().min(1).nullable().default(null),
     default_branch: DefaultBranchSchema.default("main"),
     on_done: CompletionEffectSchema.optional()
   }),
-  join_project: z5.object({ project: NameSchema, agent: NameSchema.optional() }),
-  leave_project: z5.object({ project: NameSchema, agent: NameSchema.optional() }),
-  write_knowledge: z5.object({
+  join_project: z7.object({ project: NameSchema, agent: NameSchema.optional() }),
+  leave_project: z7.object({ project: NameSchema, agent: NameSchema.optional() }),
+  write_knowledge: z7.object({
     /** A project you belong to, or null for society knowledge, which the steward and the user curate. */
     project: NameSchema.nullable().default(null),
     topic: NameSchema,
-    body: z5.string().min(1),
+    body: z7.string().min(1),
     /** The `revision` in the frontmatter of the topic you read, 0 when it names none or for a new topic. */
-    revision: z5.number().int().min(0)
+    revision: z7.number().int().min(0)
   }),
-  remove_knowledge: z5.object({
+  remove_knowledge: z7.object({
     /** As for write_knowledge: a project you belong to, or null for society knowledge. */
     project: NameSchema.nullable().default(null),
     topic: NameSchema
   }),
-  plan_task: z5.object({
+  plan_task: z7.object({
     task_id: UlidSchema,
-    stages: z5.array(PlanEditStageSchema),
+    stages: z7.array(PlanEditStageSchema),
     on_done: CompletionEffectSchema.optional()
   }),
   /** The note is posted to the task's thread as the caller, marked with the step. */
-  advance_task: z5.object({ task_id: UlidSchema, note: z5.string().min(1).optional() }),
-  configure_project: z5.object({
+  advance_task: z7.object({ task_id: UlidSchema, note: z7.string().min(1).optional() }),
+  configure_project: z7.object({
     project: NameSchema,
     on_done: CompletionEffectSchema.optional(),
     /** A new display name; the slug, which everything refers to the project by, never changes. */
-    name: z5.string().trim().min(1).max(120).optional(),
+    name: z7.string().trim().min(1).max(120).optional(),
     /** The branch tasks start from and land on from now; tasks in play keep their branches. */
     default_branch: DefaultBranchSchema.optional()
   }),
-  archive_project: z5.object({ project: NameSchema, reason: z5.string().min(1) }),
-  create_channel: z5.object({
+  archive_project: z7.object({ project: NameSchema, reason: z7.string().min(1) }),
+  create_channel: z7.object({
     /** A project, or null for a channel of the society. */
     project: NameSchema.nullable().default(null),
     name: NameSchema,
-    purpose: z5.string().min(1)
+    purpose: z7.string().min(1)
   }),
-  archive_channel: z5.object({ channel: ChannelRefSchema, reason: z5.string().min(1) }),
-  update_dashboard: z5.object({
+  archive_channel: z7.object({ channel: ChannelRefSchema, reason: z7.string().min(1) }),
+  update_dashboard: z7.object({
     project: NameSchema,
     /** The whole dashboard as markdown; the board keeps its frontmatter. */
-    body: z5.string().min(1),
+    body: z7.string().min(1),
     /** The `revision` in the frontmatter of the dashboard you read, 0 when it names none. */
-    revision: z5.number().int().min(0)
+    revision: z7.number().int().min(0)
   }),
-  create_cron: z5.object({
+  create_cron: z7.object({
     title: CronTitleSchema,
     /** What to do when it fires; quoted in the prompt of every turn it starts. */
     note: CronNoteSchema,
@@ -1059,10 +1226,10 @@ var VerbInputs = {
     /** An open channel of that place other than general, whose conversation it fires in. */
     channel: NameSchema.optional()
   }),
-  update_cron: z5.object({
+  update_cron: z7.object({
     cron_id: UlidSchema,
     /** Pause it, or resume it, which starts its schedule afresh from now. */
-    paused: z5.boolean().optional(),
+    paused: z7.boolean().optional(),
     title: CronTitleSchema.optional(),
     note: CronNoteSchema.optional(),
     /** A new expression, or `at` for one time; either starts the schedule afresh. */
@@ -1071,8 +1238,12 @@ var VerbInputs = {
     timezone: TimeZoneSchema.nullable().optional(),
     at: MomentSchema.optional()
   }),
-  remove_cron: z5.object({ cron_id: UlidSchema, reason: z5.string().trim().min(1) }),
-  remove_skill: z5.object({ name: NameSchema, reason: z5.string().trim().min(1) })
+  remove_cron: z7.object({ cron_id: UlidSchema, reason: z7.string().trim().min(1) }),
+  remove_skill: z7.object({ name: NameSchema, reason: z7.string().trim().min(1) }),
+  upload_image: z7.object({
+    /** The image file on the machine your turn runs on: absolute, or relative to your working directory. */
+    path: ImagePathSchema
+  })
 };
 var VERB_DESCRIPTIONS = {
   post_message: "Post a markdown message to a channel, or into a thread when thread_id is given; a thread's message goes to the thread's channel.",
@@ -1083,7 +1254,7 @@ var VERB_DESCRIPTIONS = {
   create_task: "Create a task in a project with its plan: stages of {name, role or agent, gate}. Without stages it gets one stage, work, that anyone in the project may take. File it in a channel of the project, such as a release's, or general by default; its thread opens there with it, under the task's id, for everything said about the work.",
   claim_task: "Hold the task's current stage. Claims are leases renewed by every turn that touches the task.",
   release_task: "Let go of the stage you hold so someone else can take it.",
-  update_task: "Move a task back to an earlier stage, abandon it, set the tasks it is blocked by (blocked_by: its stage wakes nobody until they have all ended), or link its pull request (pull_request: url, with the merge commit's merge_subject and merge_body), which a ghpr task needs before its last stage completes. A note is posted to the task's thread.",
+  update_task: "Move a task back to an earlier stage (the current stage's holder, the user, the steward, or the concierge; anyone else asks the concierge in the task's thread), abandon it, set the tasks it is blocked by (blocked_by: its stage wakes nobody until they have all ended), or link its pull request (pull_request: url, with the merge commit's merge_subject and merge_body), which a ghpr task needs before its last stage completes. A note is posted to the task's thread.",
   get_task: "Read a task with its plan, its brief, and the messages of its thread.",
   subscribe: "Subscribe to a channel. Subscriptions feed your digest; they never wake you.",
   unsubscribe: "Unsubscribe from a channel.",
@@ -1105,11 +1276,12 @@ var VERB_DESCRIPTIONS = {
   create_cron: "Set a cron that wakes you later: a title, a note on what to do then, and either cron, a five-field expression (minute hour day-of-month month day-of-week) read in timezone or the society's, or at, one time. It fires in this turn's conversation unless you name a project, thread_id, or channel, at most every 15 minutes, and every fire is a turn. Only the user, the steward, and the concierge set one that wakes another citizen (agent).",
   update_cron: "Pause or resume a cron, or change its title, note, or schedule; resuming or rescheduling starts it afresh from now. Yours, or anyone's for the user, the steward, and the concierge.",
   remove_cron: "End a cron for good, with a reason. Yours, or anyone's for the user, the steward, and the concierge. A cron also ends with its conversation, and a one-time cron once it fires.",
-  remove_skill: "Remove a skill from the society's skills, with a reason, when it is wrong, superseded, or no longer used: no skills index lists it from the next turn, and a notice in general says so with the reason. Its proposer's own copy stays in its home. Steward and user only; the board keeps its text aside for the user to restore."
+  remove_skill: "Remove a skill from the society's skills, with a reason, when it is wrong, superseded, or no longer used: no skills index lists it from the next turn, and a notice in general says so with the reason. Its proposer's own copy stays in its home. Steward and user only; the board keeps its text aside for the user to restore.",
+  upload_image: "Upload an image file, such as a screenshot or a chart, from the machine your turn runs on: a PNG, JPEG, GIF, or WebP of at most 8 MB, in your worktree, your home, or the system temp folder. Returns its id and the markdown that shows it in a post, `![what it shows](image:<id>)`; write what it shows as the alt text."
 };
 
 // packages/shared/dist/events.js
-import { z as z6 } from "zod";
+import { z as z8 } from "zod";
 var BOARD_EVENT_TYPES = [
   "society.initialized",
   "project.added",
@@ -1154,6 +1326,7 @@ var BOARD_EVENT_TYPES = [
   "user.signed_out",
   "user.token_rotated",
   "runner.changed",
+  "runner.quota",
   "ops.signal",
   "paused.changed",
   "wake.requested",
@@ -1172,30 +1345,39 @@ var BOARD_EVENT_TYPES = [
   "cron.updated",
   "cron.fired",
   "cron.skipped",
-  "cron.ended"
+  "cron.ended",
+  "image.uploaded"
 ];
-var BoardEventTypeSchema = z6.enum(BOARD_EVENT_TYPES);
-var BoardEventSchema = z6.object({
+var BoardEventTypeSchema = z8.enum(BOARD_EVENT_TYPES);
+var BoardEventSchema = z8.object({
   id: UlidSchema,
   ts: IsoDateTimeSchema,
   type: BoardEventTypeSchema,
   actor: NameSchema,
-  payload: z6.record(z6.string(), z6.unknown())
+  payload: z8.record(z8.string(), z8.unknown())
 });
-var UsageSchema = z6.object({
-  inputTokens: z6.number().int().nonnegative(),
-  outputTokens: z6.number().int().nonnegative(),
-  cacheReadTokens: z6.number().int().nonnegative().default(0),
-  cacheWriteTokens: z6.number().int().nonnegative().default(0)
+var UsageSchema = z8.object({
+  inputTokens: z8.number().int().nonnegative(),
+  outputTokens: z8.number().int().nonnegative(),
+  cacheReadTokens: z8.number().int().nonnegative().default(0),
+  cacheWriteTokens: z8.number().int().nonnegative().default(0)
 });
-var TurnStatusSchema = z6.object({
-  summary: z6.string().min(1),
-  claimsHeld: z6.array(UlidSchema).default([]),
-  blockedOn: z6.array(z6.string()).default([]),
-  needsUserDecision: z6.boolean().default(false),
-  memoryUpdated: z6.boolean().default(false)
+function addUsage(a, b) {
+  return {
+    inputTokens: a.inputTokens + b.inputTokens,
+    outputTokens: a.outputTokens + b.outputTokens,
+    cacheReadTokens: a.cacheReadTokens + b.cacheReadTokens,
+    cacheWriteTokens: a.cacheWriteTokens + b.cacheWriteTokens
+  };
+}
+var TurnStatusSchema = z8.object({
+  summary: z8.string().min(1),
+  claimsHeld: z8.array(UlidSchema).default([]),
+  blockedOn: z8.array(z8.string()).default([]),
+  needsUserDecision: z8.boolean().default(false),
+  memoryUpdated: z8.boolean().default(false)
 });
-var TurnExitReasonSchema = z6.enum([
+var TurnExitReasonSchema = z8.enum([
   "completed",
   "timeout",
   "error",
@@ -1203,50 +1385,50 @@ var TurnExitReasonSchema = z6.enum([
   "blocked",
   "stopped"
 ]);
-var AgentEventSchema = z6.discriminatedUnion("type", [
-  z6.object({
-    type: z6.literal("turn_started"),
+var AgentEventSchema = z8.discriminatedUnion("type", [
+  z8.object({
+    type: z8.literal("turn_started"),
     agent: NameSchema,
-    session: z6.string(),
+    session: z8.string(),
     runner: NameSchema,
     /** The model the CLI reports running, when it reports one. */
-    model: z6.string().optional()
+    model: z8.string().optional()
   }),
   /**
    * The CLI took a steer into the running turn. Adapters name the steer; the server adds the
    * messages it delivered and the text the CLI was given.
    */
-  z6.object({
-    type: z6.literal("steered"),
-    steer: z6.string().min(1),
-    messages: z6.array(UlidSchema).optional(),
-    text: z6.string().optional()
+  z8.object({
+    type: z8.literal("steered"),
+    steer: z8.string().min(1),
+    messages: z8.array(UlidSchema).optional(),
+    text: z8.string().optional()
   }),
-  z6.object({ type: z6.literal("text"), delta: z6.string() }),
-  z6.object({ type: z6.literal("tool_call"), name: z6.string(), input: z6.unknown() }),
-  z6.object({
-    type: z6.literal("tool_result"),
-    name: z6.string(),
-    ok: z6.boolean(),
+  z8.object({ type: z8.literal("text"), delta: z8.string() }),
+  z8.object({ type: z8.literal("tool_call"), name: z8.string(), input: z8.unknown() }),
+  z8.object({
+    type: z8.literal("tool_result"),
+    name: z8.string(),
+    ok: z8.boolean(),
     /** What the tool returned, cut to `OUTPUT_LIMIT` characters by `capOutput`. */
-    output: z6.string().optional()
+    output: z8.string().optional()
   }),
-  z6.object({ type: z6.literal("approval_requested"), kind: z6.string(), detail: z6.unknown() }),
-  z6.object({
-    type: z6.literal("turn_completed"),
+  z8.object({ type: z8.literal("approval_requested"), kind: z8.string(), detail: z8.unknown() }),
+  z8.object({
+    type: z8.literal("turn_completed"),
     usage: UsageSchema,
-    costUsd: z6.number().nonnegative(),
+    costUsd: z8.number().nonnegative(),
     status: TurnStatusSchema.nullable(),
     exitReason: TurnExitReasonSchema
   }),
-  z6.object({ type: z6.literal("error"), message: z6.string() })
+  z8.object({ type: z8.literal("error"), message: z8.string() })
 ]);
-var TranscriptEntrySchema = z6.object({
+var TranscriptEntrySchema = z8.object({
   ts: IsoDateTimeSchema,
   event: AgentEventSchema
 });
-var LiveTurnEventSchema = z6.object({
-  seq: z6.number().int().positive(),
+var LiveTurnEventSchema = z8.object({
+  seq: z8.number().int().positive(),
   ts: IsoDateTimeSchema,
   agent: NameSchema,
   project: NameSchema,
@@ -1258,10 +1440,10 @@ var LiveTurnEventSchema = z6.object({
 });
 
 // packages/shared/dist/turns.js
-import { z as z8 } from "zod";
+import { z as z10 } from "zod";
 
 // packages/shared/dist/runner.js
-import { z as z7 } from "zod";
+import { z as z9 } from "zod";
 var RUNNER_PROTOCOL = 1;
 var PATH_TOKENS = {
   home: "{{stellaris:home}}",
@@ -1272,67 +1454,77 @@ var SERVER_TOKEN = "{{stellaris:server}}";
 var WORKSPACE_TOKEN = "{{stellaris:workspace}}";
 var HOME_SCRATCH = "scratch";
 var HOME_FILE_LIMIT_BYTES = 8 * 1024 * 1024;
-var RunnerHelloSchema = z7.object({
-  protocol: z7.number().int().positive(),
-  version: z7.string().min(1),
+var RunnerHelloSchema = z9.object({
+  protocol: z9.number().int().positive(),
+  version: z9.string().min(1),
   os: RunnerOsSchema,
-  clis: z7.array(CliKindSchema),
+  clis: z9.array(CliKindSchema),
   /** The CLIs whose adapter can keep a session warm between turns. */
-  residentClis: z7.array(CliKindSchema).default([]),
+  residentClis: z9.array(CliKindSchema).default([]),
   /** The CLIs whose adapter can take input into a running turn; the server steers only these. */
-  steerableClis: z7.array(CliKindSchema).default([]),
+  steerableClis: z9.array(CliKindSchema).default([]),
   /** The CLIs whose adapter can stop a running turn; the server stops only these. */
-  stoppableClis: z7.array(CliKindSchema).default([]),
+  stoppableClis: z9.array(CliKindSchema).default([]),
   /** Whether the runner answers file reads on its projects' branches; one from before never does. */
-  branchReads: z7.boolean().default(false),
+  branchReads: z9.boolean().default(false),
   /** Whether the runner lists what a branch changed; one from before never does. */
-  branchChanges: z7.boolean().default(false),
-  capabilities: z7.array(z7.string()).default([]),
+  branchChanges: z9.boolean().default(false),
+  /** Whether the runner answers a read of a CLI's quota; one from before never does. */
+  quotaReads: z9.boolean().default(false),
+  /** Whether the runner reads an image a turn running there uploads; one from before never does. */
+  imageReads: z9.boolean().default(false),
+  capabilities: z9.array(z9.string()).default([]),
+  /**
+   * What the runner's account lacks of the git identity citizens' own commits carry, checked
+   * before each hello outside any repository; empty when it has both. Absent from a runner from
+   * before the check, which no default fills in, so the board marks only what a runner reported.
+   */
+  gitIdentityMissing: z9.array(GitIdentityPartSchema).optional(),
   /** Turns the runner runs at once, or null for no limit. */
-  slots: z7.number().int().positive().nullable(),
+  slots: z9.number().int().positive().nullable(),
   /** Turns the runner is still running, when it registers again; the server fails the rest of its turns. */
-  turns: z7.array(UlidSchema).default([])
+  turns: z9.array(UlidSchema).default([])
 });
-var RunnerWelcomeSchema = z7.object({ name: NameSchema, version: z7.string() });
-var RunnerEnrollRequestSchema = z7.object({
-  protocol: z7.number().int().positive(),
-  version: z7.string().min(1).max(64),
-  hostname: z7.string().min(1).max(253),
+var RunnerWelcomeSchema = z9.object({ name: NameSchema, version: z9.string() });
+var RunnerEnrollRequestSchema = z9.object({
+  protocol: z9.number().int().positive(),
+  version: z9.string().min(1).max(64),
+  hostname: z9.string().min(1).max(253),
   os: RunnerOsSchema,
-  clis: z7.array(CliKindSchema).max(8),
-  capabilities: z7.array(z7.string().min(1).max(64)).max(32).default([])
+  clis: z9.array(CliKindSchema).max(8),
+  capabilities: z9.array(z9.string().min(1).max(64)).max(32).default([])
 });
-var RunnerEnrollmentSchema = z7.object({
-  deviceCode: z7.string().min(1),
-  userCode: z7.string().min(1),
+var RunnerEnrollmentSchema = z9.object({
+  deviceCode: z9.string().min(1),
+  userCode: z9.string().min(1),
   expiresAt: IsoDateTimeSchema,
-  intervalMs: z7.number().int().positive()
+  intervalMs: z9.number().int().positive()
 });
-var RunnerEnrollPollSchema = z7.object({ deviceCode: z7.string().min(1) });
-var RunnerEnrollStatusSchema = z7.discriminatedUnion("status", [
-  z7.object({ status: z7.literal("pending") }),
-  z7.object({ status: z7.literal("approved"), name: NameSchema, token: z7.string().min(1) }),
-  z7.object({ status: z7.literal("denied") })
+var RunnerEnrollPollSchema = z9.object({ deviceCode: z9.string().min(1) });
+var RunnerEnrollStatusSchema = z9.discriminatedUnion("status", [
+  z9.object({ status: z9.literal("pending") }),
+  z9.object({ status: z9.literal("approved"), name: NameSchema, token: z9.string().min(1) }),
+  z9.object({ status: z9.literal("denied") })
 ]);
-var PendingEnrollmentSchema = z7.object({
-  userCode: z7.string().min(1),
-  hostname: z7.string(),
+var PendingEnrollmentSchema = z9.object({
+  userCode: z9.string().min(1),
+  hostname: z9.string(),
   os: RunnerOsSchema,
-  clis: z7.array(CliKindSchema),
-  capabilities: z7.array(z7.string()),
-  version: z7.string(),
+  clis: z9.array(CliKindSchema),
+  capabilities: z9.array(z9.string()),
+  version: z9.string(),
   requestedAt: IsoDateTimeSchema,
   expiresAt: IsoDateTimeSchema
 });
-var ProjectRepoSchema = z7.object({
+var ProjectRepoSchema = z9.object({
   slug: NameSchema,
-  origin: z7.string().nullable(),
-  defaultBranch: z7.string().min(1),
+  origin: z9.string().nullable(),
+  defaultBranch: z9.string().min(1),
   /**
    * The board lands finished tasks on the default branch, itself or through their pull requests,
    * so the runner lets nothing else move it.
    */
-  boardLands: z7.boolean()
+  boardLands: z9.boolean()
 });
 function projectRepo(project) {
   return {
@@ -1342,29 +1534,29 @@ function projectRepo(project) {
     boardLands: project.onDone !== "none"
   };
 }
-var TurnWorkspaceSchema = z7.discriminatedUnion("kind", [
-  z7.object({
-    kind: z7.literal("home"),
+var TurnWorkspaceSchema = z9.discriminatedUnion("kind", [
+  z9.object({
+    kind: z9.literal("home"),
     thread: UlidSchema.optional(),
     channel: NameSchema.optional()
   }),
-  z7.object({
-    kind: z7.literal("project"),
+  z9.object({
+    kind: z9.literal("project"),
     repo: ProjectRepoSchema,
-    branches: z7.array(z7.string().min(1)),
+    branches: z9.array(z9.string().min(1)),
     thread: UlidSchema.optional(),
     channel: NameSchema.optional()
   }),
-  z7.object({ kind: z7.literal("task"), repo: ProjectRepoSchema, taskId: UlidSchema })
+  z9.object({ kind: z9.literal("task"), repo: ProjectRepoSchema, taskId: UlidSchema })
 ]);
-var TurnJobSchema = z7.object({
+var TurnJobSchema = z9.object({
   turnId: UlidSchema,
   agent: NameSchema,
   role: NameSchema,
   cli: CliKindSchema,
-  model: z7.string().optional(),
+  model: z9.string().optional(),
   /** The reasoning effort set on the agent; absent for the model's own default. */
-  effort: z7.string().optional(),
+  effort: z9.string().optional(),
   /** A project slug, or the society scope. */
   scope: NameSchema,
   /** The thread whose conversation the turn is in; absent for the home conversation. */
@@ -1375,125 +1567,130 @@ var TurnJobSchema = z7.object({
    * The session to resume, or null to start one: the CLI's adapter picks a fresh session's id, and
    * the outcome reports it.
    */
-  session: z7.string().min(1).nullable(),
+  session: z9.string().min(1).nullable(),
   /** The running total the session reported after its last turn, which a resumed session starts from. */
-  costSoFarUsd: z7.number().nonnegative(),
+  costSoFarUsd: z9.number().nonnegative(),
   /** The rendered charter, norms, memory core, and skills index, with `PATH_TOKENS` for places. */
-  instructions: z7.string(),
-  prompt: z7.string(),
-  mcp: z7.object({ url: z7.string().min(1), token: z7.string().min(1) }),
-  limits: z7.object({
-    timeoutMs: z7.number().int().positive().nullable(),
-    maxTurns: z7.number().int().positive().nullable()
+  instructions: z9.string(),
+  prompt: z9.string(),
+  mcp: z9.object({ url: z9.string().min(1), token: z9.string().min(1) }),
+  limits: z9.object({
+    timeoutMs: z9.number().int().positive().nullable(),
+    maxTurns: z9.number().int().positive().nullable()
   }),
   /** Present when the runner keeps the conversation's session warm between turns, under `key`. */
-  resident: z7.object({ key: z7.string().min(1), idleMs: z7.number().int().positive() }).optional(),
+  resident: z9.object({ key: z9.string().min(1), idleMs: z9.number().int().positive() }).optional(),
   workspace: TurnWorkspaceSchema
 });
-var TurnWorkSchema = z7.object({ branch: z7.string().min(1), head: z7.string().min(1) });
-var TurnEventsSchema = z7.object({ entries: z7.array(TranscriptEntrySchema) });
-var TurnOutcomeSchema = z7.object({
+var TurnWorkSchema = z9.object({ branch: z9.string().min(1), head: z9.string().min(1) });
+var TurnEventsSchema = z9.object({ entries: z9.array(TranscriptEntrySchema) });
+var TurnOutcomeSchema = z9.object({
   exitReason: TurnExitReasonSchema,
   status: TurnStatusSchema.nullable(),
-  error: z7.string().nullable(),
+  error: z9.string().nullable(),
   usage: UsageSchema,
-  costUsd: z7.number().nonnegative(),
+  costUsd: z9.number().nonnegative(),
   /** The session's running total after this turn, for CLIs that report one. */
-  sessionCostUsd: z7.number().nonnegative().optional(),
+  sessionCostUsd: z9.number().nonnegative().optional(),
   /** The session the CLI used, which differs from the job's for CLIs that assign their own ids. */
-  session: z7.string().min(1),
+  session: z9.string().min(1),
   /** The model the CLI reported, when it reported one. */
-  model: z7.string().nullable(),
+  model: z9.string().nullable(),
   work: TurnWorkSchema.nullable(),
   /**
    * Whether the turn's own workspace, a thread's, a channel's, or a task's, holds work on no
    * branch after the hand-back: uncommitted changes, or commits no branch contains.
    */
-  leftovers: z7.boolean().default(false)
+  leftovers: z9.boolean().default(false),
+  /**
+   * The CLI's plan quota as the turn's stream last reported it, when it reported any; a runner from
+   * before never sends it.
+   */
+  quota: CliQuotaSchema.optional()
 });
-var TurnAckSchema = z7.object({ dropWorkspace: z7.boolean() });
-var LandRequestSchema = z7.object({
+var TurnAckSchema = z9.object({ dropWorkspace: z9.boolean() });
+var LandRequestSchema = z9.object({
   repo: ProjectRepoSchema,
-  branch: z7.string().min(1),
+  branch: z9.string().min(1),
   /**
    * For a `ghpr` task, the pull request to merge in place of the branch, which must hold the
    * branch's files, and the merge commit's subject and body, the pull request's title and an
    * empty body when left out.
    */
-  pullRequest: z7.object({
-    url: z7.string().min(1),
-    subject: z7.string().min(1).optional(),
-    body: z7.string().optional()
+  pullRequest: z9.object({
+    url: z9.string().min(1),
+    subject: z9.string().min(1).optional(),
+    body: z9.string().optional()
   }).optional()
 });
-var CloseRequestSchema = z7.object({
+var CloseRequestSchema = z9.object({
   repo: ProjectRepoSchema,
-  url: z7.string().min(1),
-  comment: z7.string().min(1)
+  url: z9.string().min(1),
+  comment: z9.string().min(1)
 });
-var MergeOutcomeSchema = z7.object({ ok: z7.boolean(), detail: z7.string() });
-var ModelListSchema = z7.array(ModelOptionSchema);
+var MergeOutcomeSchema = z9.object({ ok: z9.boolean(), detail: z9.string() });
+var ModelListSchema = z9.array(ModelOptionSchema);
 var BRANCH_FILE_LIMIT_BYTES = 8 * 1024 * 1024;
-var BranchPathSchema = z7.string().max(4096).refine((value) => value === "" || value.split("/").every((segment) => segment !== "" && segment !== "." && segment !== ".." && !segment.includes("\0")), { message: "a path inside the branch, with no empty, `.`, or `..` segment" });
-var BranchNameSchema = z7.string().regex(/^[A-Za-z0-9][A-Za-z0-9._/-]*$/);
-var BranchReadSchema = z7.object({
+var BranchPathSchema = z9.string().max(4096).refine((value) => value === "" || value.split("/").every((segment) => segment !== "" && segment !== "." && segment !== ".." && !segment.includes("\0")), { message: "a path inside the branch, with no empty, `.`, or `..` segment" });
+var BranchNameSchema = z9.string().regex(/^[A-Za-z0-9][A-Za-z0-9._/-]*$/);
+var BranchReadSchema = z9.object({
   repo: ProjectRepoSchema,
   branch: BranchNameSchema,
   path: BranchPathSchema
 });
-var BranchCommitSchema = z7.object({
-  id: z7.string().min(1),
+var BranchCommitSchema = z9.object({
+  id: z9.string().min(1),
   at: IsoDateTimeSchema,
-  author: z7.string()
+  author: z9.string()
 });
-var BranchFileSchema = z7.discriminatedUnion("kind", [
-  z7.object({
-    kind: z7.literal("file"),
+var BranchFileSchema = z9.discriminatedUnion("kind", [
+  z9.object({
+    kind: z9.literal("file"),
     path: BranchPathSchema,
     commit: BranchCommitSchema,
-    size: z7.number().int().nonnegative(),
-    content: z7.string().nullable()
+    size: z9.number().int().nonnegative(),
+    content: z9.string().nullable()
   }),
-  z7.object({
-    kind: z7.literal("dir"),
+  z9.object({
+    kind: z9.literal("dir"),
     path: BranchPathSchema,
     commit: BranchCommitSchema,
-    entries: z7.array(z7.object({
-      name: z7.string().min(1),
-      kind: z7.enum(["file", "dir"]),
-      size: z7.number().int().nonnegative().nullable()
+    entries: z9.array(z9.object({
+      name: z9.string().min(1),
+      kind: z9.enum(["file", "dir"]),
+      size: z9.number().int().nonnegative().nullable()
     }))
   })
 ]);
-var BranchChangesReadSchema = z7.object({
+var BranchChangesReadSchema = z9.object({
   repo: ProjectRepoSchema,
   branch: BranchNameSchema
 });
-var BranchFileChangeSchema = z7.object({
-  path: z7.string().min(1),
-  status: z7.enum(["added", "modified", "deleted"]),
+var BranchFileChangeSchema = z9.object({
+  path: z9.string().min(1),
+  status: z9.enum(["added", "modified", "deleted"]),
   /** Lines added and removed, or null for a binary file. */
-  added: z7.number().int().nonnegative().nullable(),
-  removed: z7.number().int().nonnegative().nullable(),
+  added: z9.number().int().nonnegative().nullable(),
+  removed: z9.number().int().nonnegative().nullable(),
   /** Absent when the file changed only through a merge of another branch. */
-  lastChange: z7.object({ author: z7.string(), at: IsoDateTimeSchema }).optional()
+  lastChange: z9.object({ author: z9.string(), at: IsoDateTimeSchema }).optional()
 });
-var BranchChangesSchema = z7.object({
+var BranchChangesSchema = z9.object({
   head: BranchCommitSchema,
-  files: z7.array(BranchFileChangeSchema),
-  total: z7.number().int().nonnegative()
+  files: z9.array(BranchFileChangeSchema),
+  total: z9.number().int().nonnegative()
 });
-var BranchDiffReadSchema = z7.object({
+var BranchDiffReadSchema = z9.object({
   repo: ProjectRepoSchema,
   branch: BranchNameSchema,
   path: BranchPathSchema.min(1)
 });
-var BranchFileDiffSchema = z7.object({
+var BranchFileDiffSchema = z9.object({
   head: BranchCommitSchema,
   path: BranchPathSchema,
   status: BranchFileChangeSchema.shape.status,
-  patch: z7.string().nullable(),
-  truncated: z7.boolean()
+  patch: z9.string().nullable(),
+  truncated: z9.boolean()
 });
 function patchHunks(patch, limit2) {
   if (/^Binary files .* differ$/m.test(patch)) {
@@ -1507,9 +1704,23 @@ function patchHunks(patch, limit2) {
   const cut = hunks.lastIndexOf("\n", limit2);
   return { patch: hunks.slice(0, cut === -1 ? limit2 : cut), truncated: true };
 }
-var WorkspaceConversationSchema = z7.discriminatedUnion("kind", [
-  z7.object({ kind: z7.literal("thread"), id: UlidSchema }),
-  z7.object({ kind: z7.literal("channel"), scope: NameSchema, name: NameSchema })
+var TurnImageReadSchema = z9.object({
+  turnId: UlidSchema,
+  path: ImagePathSchema
+});
+var ImageRefusalSchema = z9.enum(["missing", "outside", "not_image", "too_big"]);
+var TurnImageSchema = z9.discriminatedUnion("kind", [
+  z9.object({
+    kind: z9.literal("image"),
+    type: ImageTypeSchema,
+    size: z9.number().int().positive(),
+    content: z9.string()
+  }),
+  z9.object({ kind: z9.literal("refused"), why: ImageRefusalSchema, detail: z9.string() })
+]);
+var WorkspaceConversationSchema = z9.discriminatedUnion("kind", [
+  z9.object({ kind: z9.literal("thread"), id: UlidSchema }),
+  z9.object({ kind: z9.literal("channel"), scope: NameSchema, name: NameSchema })
 ]);
 function workspaceConversationOf(turn) {
   if (turn.thread !== void 0) {
@@ -1517,60 +1728,70 @@ function workspaceConversationOf(turn) {
   }
   return turn.channel === void 0 ? null : { kind: "channel", scope: turn.scope, name: turn.channel };
 }
-var HeldWorkspaceSchema = z7.object({
+var HeldWorkspaceSchema = z9.object({
   agent: NameSchema,
   scope: NameSchema,
   conversation: WorkspaceConversationSchema
 });
-var HeldWorkspacesSchema = z7.object({ workspaces: z7.array(HeldWorkspaceSchema) });
-var SweepResultSchema = z7.object({ kept: z7.array(HeldWorkspaceSchema) });
-var TurnSteerSchema = z7.object({ id: z7.uuid(), text: z7.string().min(1) });
-var RunnerMessageSchema = z7.discriminatedUnion("type", [
-  z7.object({ type: z7.literal("turn"), job: TurnJobSchema }),
-  z7.object({ type: z7.literal("land"), request: z7.string().min(1), land: LandRequestSchema }),
+var HeldWorkspacesSchema = z9.object({ workspaces: z9.array(HeldWorkspaceSchema) });
+var SweepResultSchema = z9.object({ kept: z9.array(HeldWorkspaceSchema) });
+var TurnSteerSchema = z9.object({ id: z9.uuid(), text: z9.string().min(1) });
+var RunnerMessageSchema = z9.discriminatedUnion("type", [
+  z9.object({ type: z9.literal("turn"), job: TurnJobSchema }),
+  z9.object({ type: z9.literal("land"), request: z9.string().min(1), land: LandRequestSchema }),
   /** Answered with a `MergeOutcome`. */
-  z7.object({ type: z7.literal("close"), request: z7.string().min(1), close: CloseRequestSchema }),
-  z7.object({ type: z7.literal("models"), request: z7.string().min(1), cli: CliKindSchema }),
+  z9.object({ type: z9.literal("close"), request: z9.string().min(1), close: CloseRequestSchema }),
+  z9.object({ type: z9.literal("models"), request: z9.string().min(1), cli: CliKindSchema }),
+  /**
+   * Answered with a `CliQuota` read from the CLI without a turn, or null when its adapter cannot
+   * read one. Sent only to runners whose hello says `quotaReads`.
+   */
+  z9.object({ type: z9.literal("quota"), request: z9.string().min(1), cli: CliKindSchema }),
   /** Answered with a `BranchFile`, or null when the branch or the path does not exist. */
-  z7.object({ type: z7.literal("file"), request: z7.string().min(1), read: BranchReadSchema }),
+  z9.object({ type: z9.literal("file"), request: z9.string().min(1), read: BranchReadSchema }),
   /** Answered with `BranchChanges`, or null when the repository or the branch does not exist. */
-  z7.object({
-    type: z7.literal("changes"),
-    request: z7.string().min(1),
+  z9.object({
+    type: z9.literal("changes"),
+    request: z9.string().min(1),
     read: BranchChangesReadSchema
   }),
   /** Answered with a `BranchFileDiff`, or null when the branch does not exist or left the path alone. */
-  z7.object({ type: z7.literal("diff"), request: z7.string().min(1), read: BranchDiffReadSchema }),
+  z9.object({ type: z9.literal("diff"), request: z9.string().min(1), read: BranchDiffReadSchema }),
+  /**
+   * Answered with a `TurnImage`, or null when the turn is not running there. Sent only to runners
+   * whose hello says `imageReads`.
+   */
+  z9.object({ type: z9.literal("image"), request: z9.string().min(1), read: TurnImageReadSchema }),
   /** Answered with whether the CLI accepted it; that it took it comes as a `steered` event. */
-  z7.object({
-    type: z7.literal("steer"),
-    request: z7.string().min(1),
+  z9.object({
+    type: z9.literal("steer"),
+    request: z9.string().min(1),
     turnId: UlidSchema,
     steer: TurnSteerSchema
   }),
   /** Answered with whether the turn was there to stop; it ends `stopped`. */
-  z7.object({ type: z7.literal("stop"), request: z7.string().min(1), turnId: UlidSchema }),
+  z9.object({ type: z9.literal("stop"), request: z9.string().min(1), turnId: UlidSchema }),
   /**
    * A conversation ended: the runner removes every citizen's workspace for it but those a turn
    * still uses, and answers with a `SweepResult` naming those it kept for holding work on no branch.
    */
-  z7.object({
-    type: z7.literal("sweep"),
-    request: z7.string().min(1),
+  z9.object({
+    type: z9.literal("sweep"),
+    request: z9.string().min(1),
     conversation: WorkspaceConversationSchema
   })
 ]);
-var RunnerAnswerSchema = z7.discriminatedUnion("ok", [
-  z7.object({ ok: z7.literal(true), value: z7.unknown() }),
-  z7.object({ ok: z7.literal(false), error: z7.string() })
+var RunnerAnswerSchema = z9.discriminatedUnion("ok", [
+  z9.object({ ok: z9.literal(true), value: z9.unknown() }),
+  z9.object({ ok: z9.literal(false), error: z9.string() })
 ]);
-var WarmSessionsSchema = z7.object({ warm: z7.array(z7.string()) });
-var FileManifestSchema = z7.object({ files: z7.record(z7.string(), z7.string()) });
+var WarmSessionsSchema = z9.object({ warm: z9.array(z9.string()) });
+var FileManifestSchema = z9.object({ files: z9.record(z9.string(), z9.string()) });
 function fileVersion(sha, executable) {
   return executable ? `${sha}+x` : sha;
 }
-var FileReadSchema = z7.object({ paths: z7.array(z7.string()) });
-var FileContentsSchema = z7.object({ files: z7.record(z7.string(), z7.string()) });
+var FileReadSchema = z9.object({ paths: z9.array(z9.string()) });
+var FileContentsSchema = z9.object({ files: z9.record(z9.string(), z9.string()) });
 function isSafeRelativePath(file) {
   if (file.length === 0 || file.startsWith("/") || file.includes("\\") || file.includes("\0")) {
     return false;
@@ -1579,7 +1800,7 @@ function isSafeRelativePath(file) {
 }
 
 // packages/shared/dist/turns.js
-var TriggerKindSchema = z8.enum([
+var TriggerKindSchema = z10.enum([
   "mention",
   "stage",
   "task_done",
@@ -1593,11 +1814,11 @@ var TriggerKindSchema = z8.enum([
   "closing",
   "cron"
 ]);
-var TriggerSchema = z8.object({
+var TriggerSchema = z10.object({
   kind: TriggerKindSchema,
   from: NameSchema.optional(),
-  fromUser: z8.boolean().default(false),
-  reason: z8.string().default(""),
+  fromUser: z10.boolean().default(false),
+  reason: z10.string().default(""),
   taskId: UlidSchema.optional(),
   messageId: UlidSchema.optional(),
   /** The channel the waking message was posted in. */
@@ -1605,17 +1826,17 @@ var TriggerSchema = z8.object({
   /** The cron that came due, for a `cron` wake. */
   cronId: UlidSchema.optional()
 });
-var TurnThreadSchema = z8.object({ id: UlidSchema, task: z8.boolean() });
-var TurnDispatchSchema = z8.object({
+var TurnThreadSchema = z10.object({ id: UlidSchema, task: z10.boolean() });
+var TurnDispatchSchema = z10.object({
   agent: NameSchema,
   project: NameSchema,
   thread: TurnThreadSchema.optional(),
   channel: NameSchema.optional(),
   trigger: TriggerSchema,
-  priority: z8.number().int().min(0).max(2),
-  onboarding: z8.boolean().default(false),
+  priority: z10.number().int().min(0).max(2),
+  onboarding: z10.boolean().default(false),
   /** Every cron that came due for this turn, whatever wake it merged into; its prompt quotes each. */
-  crons: z8.array(UlidSchema).optional()
+  crons: z10.array(UlidSchema).optional()
 });
 function conversationPart(conversation) {
   return conversation.thread ?? (conversation.channel === void 0 ? void 0 : `#${conversation.channel}`);
@@ -1639,7 +1860,7 @@ function channelConversation(scope, channel) {
   const name = at < 0 ? channel : channel.slice(at + 1);
   return place === scope && name !== "general" ? name : void 0;
 }
-var TurnRecordSchema = z8.object({
+var TurnRecordSchema = z10.object({
   /** Assigned by the board when the turn begins; the turn's transcript is filed under it. */
   id: UlidSchema.optional(),
   agent: NameSchema,
@@ -1650,31 +1871,31 @@ var TurnRecordSchema = z8.object({
   channel: NameSchema.optional(),
   runner: NameSchema,
   cli: CliKindSchema.nullable(),
-  session: z8.string().nullable(),
+  session: z10.string().nullable(),
   trigger: TriggerSchema,
   startedAt: IsoDateTimeSchema,
   endedAt: IsoDateTimeSchema.nullable(),
   exitReason: TurnExitReasonSchema.nullable(),
   status: TurnStatusSchema.nullable(),
-  error: z8.string().nullable(),
+  error: z10.string().nullable(),
   usage: UsageSchema.nullable(),
-  costUsd: z8.number().nonnegative().default(0),
+  costUsd: z10.number().nonnegative().default(0),
   /**
    * The running total the CLI reported for the session after this turn, when it reports one. A
    * resumed session starts from it, so the next turn's own cost is measured from here.
    */
-  sessionCostUsd: z8.number().nonnegative().optional(),
-  toolCalls: z8.number().int().nonnegative().default(0),
+  sessionCostUsd: z10.number().nonnegative().optional(),
+  toolCalls: z10.number().int().nonnegative().default(0),
   /** The model the CLI reported for this turn, else the model configured for the agent, else null. */
-  model: z8.string().nullable().default(null),
+  model: z10.string().nullable().default(null),
   /** The task branch the turn left work on, with its commit, as the runner reported it. */
   work: TurnWorkSchema.optional(),
   /** Who stopped the turn, for one that ended `stopped`. */
   stoppedBy: NameSchema.optional(),
   /** The crons whose fire started the turn, which record how it ended. */
-  crons: z8.array(UlidSchema).optional()
+  crons: z10.array(UlidSchema).optional()
 });
-var RunningTurnSchema = z8.object({
+var RunningTurnSchema = z10.object({
   turnId: UlidSchema,
   agent: NameSchema,
   scope: NameSchema,
@@ -1682,49 +1903,49 @@ var RunningTurnSchema = z8.object({
   channel: NameSchema.optional(),
   cli: CliKindSchema,
   askedIn: ChannelRefSchema.optional(),
-  steerable: z8.boolean(),
-  stoppable: z8.boolean()
+  steerable: z10.boolean(),
+  stoppable: z10.boolean()
 });
-var SessionsFileSchema = z8.object({
-  claude: z8.string().optional(),
-  codex: z8.string().optional(),
+var SessionsFileSchema = z10.object({
+  claude: z10.string().optional(),
+  codex: z10.string().optional(),
   runner: NameSchema.optional()
 });
-var WakeRequestSchema = z8.object({
+var WakeRequestSchema = z10.object({
   agent: NameSchema,
   project: NameSchema,
-  reason: z8.string().default("manual wake"),
+  reason: z10.string().default("manual wake"),
   /** A manual wake, or a reflection turn requested ahead of the cadence. */
-  kind: z8.enum(["manual", "reflection"]).default("manual")
+  kind: z10.enum(["manual", "reflection"]).default("manual")
 });
-var TurnHistoryEntrySchema = z8.object({
+var TurnHistoryEntrySchema = z10.object({
   /** The id of the event that ended the turn. */
   id: UlidSchema,
   /** The turn's own id, when it has a transcript to open; turns before transcripts have none. */
   turnId: UlidSchema.optional(),
   ts: IsoDateTimeSchema,
-  outcome: z8.enum(["completed", "failed"]),
+  outcome: z10.enum(["completed", "failed"]),
   /** A project slug, or the society scope. */
   project: NameSchema,
   /** The thread whose conversation the turn was in; absent for the home conversation. */
   thread: UlidSchema.optional(),
   /** The channel, never general, whose conversation the turn was in. */
   channel: NameSchema.optional(),
-  trigger: z8.string(),
-  exitReason: z8.string().nullable(),
-  costUsd: z8.number(),
+  trigger: z10.string(),
+  exitReason: z10.string().nullable(),
+  costUsd: z10.number(),
   /** The tokens the turn used; absent for turns logged before turns recorded them. */
   usage: UsageSchema.optional(),
-  model: z8.string().nullable(),
-  summary: z8.string().nullable(),
-  error: z8.string().nullable(),
+  model: z10.string().nullable(),
+  summary: z10.string().nullable(),
+  error: z10.string().nullable(),
   /** When the log recorded the turn's start; absent when the start is missing from the log. */
   startedAt: IsoDateTimeSchema.optional(),
-  toolCalls: z8.number().int().nonnegative().optional()
+  toolCalls: z10.number().int().nonnegative().optional()
 });
 
 // packages/shared/dist/ops.js
-import { z as z9 } from "zod";
+import { z as z11 } from "zod";
 var OPS_SIGNAL_KINDS = [
   "waiting_stage",
   "backlog",
@@ -1740,7 +1961,7 @@ var OPS_SIGNAL_KINDS = [
   "stuck_workspace",
   "cron_failing"
 ];
-var OpsSignalKindSchema = z9.enum(OPS_SIGNAL_KINDS);
+var OpsSignalKindSchema = z11.enum(OPS_SIGNAL_KINDS);
 var WAKING_SIGNAL_KINDS = [
   "backlog",
   "role_gap",
@@ -1750,15 +1971,15 @@ var WAKING_SIGNAL_KINDS = [
   "blocked_capability",
   "scaled"
 ];
-var OpsSignalSchema = z9.object({
+var OpsSignalSchema = z11.object({
   kind: OpsSignalKindSchema,
   /** Identifies the condition, for example `backlog:demo:engineer`, so a persisting one is not logged again every pass. */
-  key: z9.string().min(1),
+  key: z11.string().min(1),
   /** One line a reader can act on. */
-  summary: z9.string().min(1),
+  summary: z11.string().min(1),
   /** The counter or timer value behind the signal. */
-  value: z9.number(),
-  threshold: z9.number().optional(),
+  value: z11.number(),
+  threshold: z11.number().optional(),
   project: NameSchema.optional(),
   agent: NameSchema.optional(),
   role: NameSchema.optional(),
@@ -1766,8 +1987,8 @@ var OpsSignalSchema = z9.object({
 });
 
 // packages/shared/dist/metrics.js
-import { z as z10 } from "zod";
-var MetricsWindowSchema = z10.enum(["24h", "7d", "all"]);
+import { z as z12 } from "zod";
+var MetricsWindowSchema = z12.enum(["24h", "7d", "all"]);
 var METRICS_WINDOW_MS = {
   "24h": 24 * 36e5,
   "7d": 7 * 24 * 36e5,
@@ -1778,9 +1999,9 @@ function isBoardAction(tool) {
   const verb = /^mcp__board__(.+)$/.exec(tool)?.[1];
   return verb !== void 0 && !READ_VERBS.some((read2) => read2 === verb);
 }
-var CountSchema = z10.number().int().nonnegative();
-var MsSchema = z10.number().nonnegative();
-var MetricsSchema = z10.object({
+var CountSchema = z12.number().int().nonnegative();
+var MsSchema = z12.number().nonnegative();
+var MetricsSchema = z12.object({
   window: MetricsWindowSchema,
   since: IsoDateTimeSchema.nullable(),
   until: IsoDateTimeSchema,
@@ -1788,12 +2009,12 @@ var MetricsSchema = z10.object({
    * Finished turns that changed nothing on the board. Reflections are left out, since they write
    * memory, not the board; turns without a transcript are counted apart, their actions unknown.
    */
-  idle: z10.object({
+  idle: z12.object({
     turns: CountSchema,
     idle: CountSchema,
     unknown: CountSchema,
-    byTrigger: z10.array(z10.object({ trigger: z10.string(), turns: CountSchema, idle: CountSchema })),
-    byAgent: z10.array(z10.object({
+    byTrigger: z12.array(z12.object({ trigger: z12.string(), turns: CountSchema, idle: CountSchema })),
+    byAgent: z12.array(z12.object({
       agent: NameSchema,
       role: NameSchema.nullable(),
       turns: CountSchema,
@@ -1801,33 +2022,33 @@ var MetricsSchema = z10.object({
     }))
   }),
   /** Work sent back to an earlier stage: over the tasks finished in the window, and by where. */
-  sentBack: z10.object({
+  sentBack: z12.object({
     finished: CountSchema,
     sendBacks: CountSchema,
     tasksSentBack: CountSchema,
-    byStage: z10.array(z10.object({ project: NameSchema, stage: z10.string(), count: CountSchema })),
-    bySender: z10.array(z10.object({ agent: NameSchema, count: CountSchema }))
+    byStage: z12.array(z12.object({ project: NameSchema, stage: z12.string(), count: CountSchema })),
+    bySender: z12.array(z12.object({ agent: NameSchema, count: CountSchema }))
   }),
   /** Posts in the threads of the tasks finished in the window, the board's own notices left out. */
-  messages: z10.object({
+  messages: z12.object({
     finished: CountSchema,
     messages: CountSchema,
-    byProject: z10.array(z10.object({ project: NameSchema, finished: CountSchema, messages: CountSchema })),
-    busiest: z10.array(z10.object({
+    byProject: z12.array(z12.object({ project: NameSchema, finished: CountSchema, messages: CountSchema })),
+    busiest: z12.array(z12.object({
       taskId: UlidSchema,
-      title: z10.string(),
+      title: z12.string(),
       project: NameSchema,
       messages: CountSchema
     }))
   }),
   /** Time from a mention to the start of the turn it woke, in the conversation it was made in. */
-  latency: z10.object({
+  latency: z12.object({
     mentions: CountSchema,
     /** Mentions no turn has followed yet. */
     unanswered: CountSchema,
     medianMs: MsSchema.nullable(),
     slowestMs: MsSchema.nullable(),
-    byAgent: z10.array(z10.object({
+    byAgent: z12.array(z12.object({
       agent: NameSchema,
       mentions: CountSchema,
       medianMs: MsSchema,
@@ -1835,61 +2056,73 @@ var MetricsSchema = z10.object({
     }))
   }),
   /** The user's decisions: proposals decided, questions answered, and stages passed or sent back. */
-  decisions: z10.object({
+  decisions: z12.object({
     total: CountSchema,
-    byDay: z10.array(z10.object({
-      day: z10.string(),
+    byDay: z12.array(z12.object({
+      day: z12.string(),
       proposals: CountSchema,
       answers: CountSchema,
       stages: CountSchema
     }))
   }),
   /** Tasks that needed a capability no connected runner offered, and whether they still do. */
-  blocked: z10.array(z10.object({
+  blocked: z12.array(z12.object({
     taskId: UlidSchema,
-    title: z10.string().nullable(),
+    title: z12.string().nullable(),
     project: NameSchema.nullable(),
-    summary: z10.string(),
+    summary: z12.string(),
     firstAt: IsoDateTimeSchema,
     lastAt: IsoDateTimeSchema,
-    holds: z10.boolean()
+    holds: z12.boolean()
   }))
 });
+var CitizenTokensSchema = z12.object({
+  agent: NameSchema,
+  turns: CountSchema,
+  withUsage: CountSchema,
+  usage: UsageSchema.nullable()
+});
+var TokenUseSchema = z12.object({
+  window: MetricsWindowSchema,
+  since: IsoDateTimeSchema.nullable(),
+  until: IsoDateTimeSchema,
+  citizens: z12.array(CitizenTokensSchema)
+});
 
 // packages/shared/dist/config.js
-import { z as z11 } from "zod";
-var LogLevelSchema = z11.enum(["trace", "debug", "info", "warn", "error", "fatal"]);
-var GithubSignInSchema = z11.object({
-  clientId: z11.string().min(1),
-  clientSecret: z11.string().min(1),
+import { z as z13 } from "zod";
+var LogLevelSchema = z13.enum(["trace", "debug", "info", "warn", "error", "fatal"]);
+var GithubSignInSchema = z13.object({
+  clientId: z13.string().min(1),
+  clientSecret: z13.string().min(1),
   /** Logins, lowercased; GitHub logins are case-insensitive. */
-  users: z11.array(z11.string().min(1)).min(1)
+  users: z13.array(z13.string().min(1)).min(1)
 });
-var ServerConfigSchema = z11.object({
-  dataDir: z11.string().min(1),
-  host: z11.string().min(1),
-  port: z11.number().int().positive().max(65535),
+var ServerConfigSchema = z13.object({
+  dataDir: z13.string().min(1),
+  host: z13.string().min(1),
+  port: z13.number().int().positive().max(65535),
   /**
    * An address every runner's agents reach this server at, for example https://board.example, or
    * null for each runner to use the address it reaches the server at itself.
    */
-  publicUrl: z11.string().min(1).nullable(),
+  publicUrl: z13.string().min(1).nullable(),
   logLevel: LogLevelSchema,
   /** Turns running at once across every runner, or null for no limit beyond each runner's own. */
-  concurrency: z11.number().int().positive().nullable(),
+  concurrency: z13.number().int().positive().nullable(),
   /** How long one turn may run before it is stopped, or null for no limit. */
-  turnTimeoutMs: z11.number().int().positive().nullable(),
+  turnTimeoutMs: z13.number().int().positive().nullable(),
   /** Rounds of tool calls one Claude turn may take, or null for no limit. */
-  toolRounds: z11.number().int().positive().nullable(),
+  toolRounds: z13.number().int().positive().nullable(),
   /** How long a resident session stays warm after its last turn. */
-  residentIdleMs: z11.number().int().positive(),
+  residentIdleMs: z13.number().int().positive(),
   /** Signing in to the board with GitHub, or null when only a token lets anyone in. */
   github: GithubSignInSchema.nullable(),
   /**
    * Reverse proxies in front of the server whose X-Forwarded-For entries name the client, for the
    * rate limits on what anyone may ask without a token: 0 when clients connect directly.
    */
-  trustedProxies: z11.number().int().min(0).max(16)
+  trustedProxies: z13.number().int().min(0).max(16)
 });
 function limit(value, fallback) {
   if (value === void 0 || value.trim() === "") {
@@ -1927,25 +2160,73 @@ function loadServerConfig(env) {
     trustedProxies: Number(env["STELLARIS_TRUSTED_PROXIES"] ?? "0")
   });
 }
-var RunnerConfigSchema = z11.object({
+var RunnerConfigSchema = z13.object({
   /** The board server, for example http://127.0.0.1:4700. */
-  serverUrl: z11.string().url(),
+  serverUrl: z13.string().url(),
   /**
    * The runner's token, from `runner add`, or null for the one it saved when it was enrolled, or
    * to enroll it.
    */
-  token: z11.string().min(1).nullable(),
+  token: z13.string().min(1).nullable(),
   /** The runner's own data directory: the board mirror, agent homes, repositories, worktrees. */
-  dataDir: z11.string().min(1),
+  dataDir: z13.string().min(1),
   logLevel: LogLevelSchema,
   /** Turns this machine runs at once, or null for no limit. */
-  slots: z11.number().int().positive().nullable(),
-  clis: z11.array(CliKindSchema).min(1),
-  capabilities: z11.array(z11.string())
+  slots: z13.number().int().positive().nullable(),
+  clis: z13.array(CliKindSchema).min(1),
+  capabilities: z13.array(z13.string())
 });
 
 // packages/shared/dist/version.js
-var STELLARIS_VERSION = "0.3.21";
+var STELLARIS_VERSION = "0.3.23";
+
+// packages/shared/dist/mentions.js
+import { parse, postprocess, preprocess } from "micromark";
+import { gfm } from "micromark-extension-gfm";
+var MENTION_PATTERN = /(^|[^\w@])@([a-z0-9][a-z0-9-]{0,31})(?![\w-])/g;
+var CODE = /* @__PURE__ */ new Set(["codeText", "codeFenced", "codeIndented"]);
+var SLOW = {
+  disable: {
+    null: [
+      "wwwAutolink",
+      "protocolAutolink",
+      "emailAutolink",
+      "gfmFootnoteCall",
+      "gfmPotentialFootnoteCall"
+    ]
+  }
+};
+function codeRanges(markdown) {
+  const shift = markdown.startsWith("\uFEFF") ? 1 : 0;
+  const events = postprocess(parse({ extensions: [gfm(), SLOW] }).document().write(preprocess()(markdown, void 0, true)));
+  return events.flatMap(([kind, token]) => kind === "enter" && CODE.has(token.type) ? [[token.start.offset + shift, token.end.offset + shift]] : []);
+}
+function addMentions(found, text) {
+  for (const match of text.matchAll(MENTION_PATTERN)) {
+    const name = match[2];
+    if (name !== void 0) {
+      found.add(name);
+    }
+  }
+}
+function mentionsIn(markdown) {
+  if (markdown.search(MENTION_PATTERN) === -1) {
+    return [];
+  }
+  const found = /* @__PURE__ */ new Set();
+  let from = 0;
+  for (const [start, end] of codeRanges(markdown)) {
+    addMentions(found, markdown.slice(from, start));
+    from = end;
+  }
+  addMentions(found, markdown.slice(from));
+  return [...found].toSorted();
+}
+function mentionsAnywhere(text) {
+  const found = /* @__PURE__ */ new Set();
+  addMentions(found, text);
+  return [...found].toSorted();
+}
 
 // packages/board-core/dist/errors.js
 var BoardError = class extends Error {
@@ -2591,33 +2872,59 @@ function filesOf(lines, status) {
   return [...files.values()];
 }
 
+// packages/board-core/dist/mentions.js
+import vm from "node:vm";
+var MENTION_PARSE_MS = 500;
+var context = vm.createContext({});
+var call = new vm.Script("work()");
+function within(work, ms) {
+  let result;
+  context["work"] = () => {
+    result = work();
+  };
+  try {
+    call.runInContext(context, { timeout: ms });
+  } catch (error) {
+    if (typeof error === "object" && error !== null && "code" in error && error.code === "ERR_SCRIPT_EXECUTION_TIMEOUT") {
+      return void 0;
+    }
+    throw error;
+  } finally {
+    context["work"] = void 0;
+  }
+  return result;
+}
+function postMentions(body) {
+  return within(() => mentionsIn(body), MENTION_PARSE_MS) ?? mentionsAnywhere(body);
+}
+
 // packages/board-core/dist/metrics.js
-import { z as z12 } from "zod";
-var TurnPayload = z12.object({
-  turnId: z12.string().optional(),
-  project: z12.string(),
-  thread: z12.string().optional(),
-  channel: z12.string().optional(),
-  trigger: z12.string()
+import { z as z14 } from "zod";
+var TurnPayload = z14.object({
+  turnId: z14.string().optional(),
+  project: z14.string(),
+  thread: z14.string().optional(),
+  channel: z14.string().optional(),
+  trigger: z14.string()
 });
-var TaskPayload = z12.object({
-  taskId: z12.string(),
-  project: z12.string(),
-  from: z12.string().optional()
+var TaskPayload = z14.object({
+  taskId: z14.string(),
+  project: z14.string(),
+  from: z14.string().optional()
 });
-var MessagePayload = z12.object({
-  id: z12.string().optional(),
-  channel: z12.string(),
-  thread: z12.string().nullable().optional(),
-  mentions: z12.array(z12.string()).default([])
+var MessagePayload = z14.object({
+  id: z14.string().optional(),
+  channel: z14.string(),
+  thread: z14.string().nullable().optional(),
+  mentions: z14.array(z14.string()).default([])
 });
-var SteeredPayload = z12.object({ messages: z12.array(z12.string()) });
-var SignalPayload = z12.object({
-  kind: z12.string(),
-  key: z12.string(),
-  summary: z12.string(),
-  taskId: z12.string().optional(),
-  project: z12.string().optional()
+var SteeredPayload = z14.object({ messages: z14.array(z14.string()) });
+var SignalPayload = z14.object({
+  kind: z14.string(),
+  key: z14.string(),
+  summary: z14.string(),
+  taskId: z14.string().optional(),
+  project: z14.string().optional()
 });
 function median(values) {
   const sorted = values.toSorted((a, b) => a - b);
@@ -2906,6 +3213,59 @@ function computeMetrics(input) {
   };
 }
 
+// packages/board-core/dist/turn-history.js
+import { z as z15 } from "zod";
+var TurnHistoryPayloadSchema = z15.object({
+  project: NameSchema,
+  thread: UlidSchema.optional(),
+  channel: NameSchema.optional(),
+  trigger: z15.string().default("manual"),
+  exitReason: z15.string().nullable().default(null),
+  costUsd: z15.number().default(0),
+  usage: UsageSchema.optional(),
+  model: z15.string().nullable().default(null),
+  summary: z15.string().nullable().default(null),
+  error: z15.string().nullable().default(null),
+  toolCalls: z15.number().int().nonnegative().optional(),
+  turnId: UlidSchema.optional()
+});
+function tokenUse(events, window, now) {
+  const span = METRICS_WINDOW_MS[window];
+  const since = span === null ? null : now.getTime() - span;
+  const rows = /* @__PURE__ */ new Map();
+  for (const event of events) {
+    if (event.type !== "turn.completed" && event.type !== "turn.failed") {
+      continue;
+    }
+    if (since !== null && Date.parse(event.ts) < since) {
+      continue;
+    }
+    const turn = TurnHistoryPayloadSchema.safeParse(event.payload);
+    if (!turn.success) {
+      continue;
+    }
+    const row = rows.get(event.actor) ?? {
+      agent: event.actor,
+      turns: 0,
+      withUsage: 0,
+      usage: null
+    };
+    const usage = turn.data.usage;
+    rows.set(event.actor, {
+      agent: event.actor,
+      turns: row.turns + 1,
+      withUsage: row.withUsage + (usage === void 0 ? 0 : 1),
+      usage: usage === void 0 ? row.usage : row.usage === null ? usage : addUsage(row.usage, usage)
+    });
+  }
+  return {
+    window,
+    since: since === null ? null : new Date(since).toISOString(),
+    until: now.toISOString(),
+    citizens: [...rows.values()].toSorted((a, b) => a.agent.localeCompare(b.agent))
+  };
+}
+
 // packages/board-core/dist/mutex.js
 var Mutex = class {
   tail = Promise.resolve();
@@ -3112,6 +3472,13 @@ var BoardPaths = class {
   eventLog() {
     return path5.join(this.events(), "log.jsonl");
   }
+  /** Images citizens uploaded, by id: outside the projection, which every runner mirrors. */
+  images() {
+    return path5.join(this.dataDir, "images");
+  }
+  image(id) {
+    return path5.join(this.images(), id);
+  }
   state() {
     return path5.join(this.dataDir, "state");
   }
@@ -3147,41 +3514,27 @@ function namesList(names) {
   return names.length <= 1 ? names[0] ?? "" : `${names.slice(0, -1).join(", ")} and ${names.at(-1) ?? ""}`;
 }
 var SKIPPED_IN_HOME = /* @__PURE__ */ new Set([".git", "turns", ".claude", ".codex"]);
-var RunnerTokensSchema = z13.object({
-  runners: z13.record(z13.string(), z13.object({ tokenHash: z13.string().min(1) }))
+var RunnerTokensSchema = z16.object({
+  runners: z16.record(z16.string(), z16.object({ tokenHash: z16.string().min(1) }))
 });
-var SignInsSchema = z13.object({
-  signIns: z13.array(z13.object({
-    tokenHash: z13.string().min(1),
-    login: z13.string().min(1),
+var SignInsSchema = z16.object({
+  signIns: z16.array(z16.object({
+    tokenHash: z16.string().min(1),
+    login: z16.string().min(1),
     /** The account's picture at the identity provider; sign-ins from before it have none. */
-    avatarUrl: z13.url().optional(),
+    avatarUrl: z16.url().optional(),
     createdAt: IsoDateTimeSchema,
     expiresAt: IsoDateTimeSchema
   })).default([])
 });
-var TurnHistoryPayloadSchema = z13.object({
-  project: NameSchema,
-  thread: UlidSchema.optional(),
-  channel: NameSchema.optional(),
-  trigger: z13.string().default("manual"),
-  exitReason: z13.string().nullable().default(null),
-  costUsd: z13.number().default(0),
-  usage: UsageSchema.optional(),
-  model: z13.string().nullable().default(null),
-  summary: z13.string().nullable().default(null),
-  error: z13.string().nullable().default(null),
-  toolCalls: z13.number().int().nonnegative().optional(),
-  turnId: UlidSchema.optional()
-});
-var TurnStartPayloadSchema = z13.object({ project: NameSchema, turnId: UlidSchema.optional() });
-var CursorsSchema = z13.object({
-  digest: z13.string().nullable(),
-  scopes: z13.record(z13.string(), z13.string()).default({}),
-  threadsFrom: z13.record(z13.string(), z13.string().nullable()).default({}),
-  channelsFrom: z13.record(z13.string(), z13.string().nullable()).default({}),
+var TurnStartPayloadSchema = z16.object({ project: NameSchema, turnId: UlidSchema.optional() });
+var CursorsSchema = z16.object({
+  digest: z16.string().nullable(),
+  scopes: z16.record(z16.string(), z16.string()).default({}),
+  threadsFrom: z16.record(z16.string(), z16.string().nullable()).default({}),
+  channelsFrom: z16.record(z16.string(), z16.string().nullable()).default({}),
   /** How far a work role has read news, which goes to whichever of its general conversations reads first. */
-  news: z13.string().optional()
+  news: z16.string().optional()
 });
 var NO_CURSORS = { digest: null, scopes: {}, threadsFrom: {}, channelsFrom: {} };
 function conversationKey(scope, part) {
@@ -3220,9 +3573,8 @@ function byId(a, b) {
 function turnTime(record) {
   return record.endedAt ?? record.startedAt;
 }
-var PausedSchema = z13.object({ paused: z13.boolean() });
+var PausedSchema = z16.object({ paused: z16.boolean() });
 var DEFAULT_LEASE_MS = 30 * 60 * 1e3;
-var MENTION_PATTERN = /(^|[^\w@])@([a-z0-9][a-z0-9-]{0,31})(?![\w-])/g;
 function withoutMentions(text) {
   return text.replaceAll(MENTION_PATTERN, "$1$2");
 }
@@ -3246,7 +3598,7 @@ var OPS_WAKE_TRIGGER = "ops_event";
 var FRONT_DESK_TRIGGER = "user_post";
 var OPS_CHANNELS = ["governance"];
 var FRONT_DESK_CHANNELS = [ASK_CHANNEL];
-var AlignmentsSchema = z13.object({ applied: z13.array(z13.string()).default([]) });
+var AlignmentsSchema = z16.object({ applied: z16.array(z16.string()).default([]) });
 var FOLLOW_DECISIONS = "ops-readers-follow-decisions";
 var THREAD_RECORDS = "threads-as-records";
 var DIGEST_CURSORS = "digest-replaces-inbox";
@@ -3260,10 +3612,11 @@ var CHANNEL_CONVERSATIONS = "channel-conversations";
 var DASHBOARD_UPDATES = "dashboard-updates-granted";
 var CRON_VERBS = "cron-verbs-granted";
 var KNOWLEDGE_NOTICES = "knowledge-notices";
-var KnowledgeEventSchema = z13.object({
+var IMAGE_UPLOADS = "image-uploads-granted";
+var KnowledgeEventSchema = z16.object({
   topic: NameSchema,
   project: NameSchema.nullable(),
-  replaced: z13.boolean().optional()
+  replaced: z16.boolean().optional()
 });
 var CRON_VERB_NAMES = ["create_cron", "update_cron", "remove_cron"];
 var OLD_DASHBOARD_LINE = "Agents may edit this file. It is rendered by the board UI.";
@@ -3381,16 +3734,6 @@ function unanswered(messages) {
   }
   return waiting;
 }
-function extractMentions(body) {
-  const found = /* @__PURE__ */ new Set();
-  for (const match of body.matchAll(MENTION_PATTERN)) {
-    const name = match[2];
-    if (name !== void 0) {
-      found.add(name);
-    }
-  }
-  return [...found].toSorted();
-}
 function snippetAround(text, query, radius = 80) {
   const index = text.toLowerCase().indexOf(query.toLowerCase());
   if (index === -1) {
@@ -3405,6 +3748,7 @@ var Board = class _Board {
   mutex = new Mutex();
   /** The turns in flight, which the server hosting them supplies; none until it does. */
   turnsInFlight = () => [];
+  imageSource = null;
   newId = monotonicFactory();
   events;
   actionCounts = /* @__PURE__ */ new Map();
@@ -3469,7 +3813,8 @@ var Board = class _Board {
       CHANNEL_CONVERSATIONS,
       DASHBOARD_UPDATES,
       CRON_VERBS,
-      KNOWLEDGE_NOTICES
+      KNOWLEDGE_NOTICES,
+      IMAGE_UPLOADS
     ].filter((name) => !applied.includes(name));
     if (pending.length === 0) {
       return;
@@ -3499,13 +3844,13 @@ var Board = class _Board {
       await this.openAsksChannel();
     }
     if (pending.includes(KNOWLEDGE_REMOVAL)) {
-      await this.grantBesideKnowledge("remove_knowledge");
+      await this.grantBeside("write_knowledge", "remove_knowledge");
     }
     if (pending.includes(CHANNEL_CONVERSATIONS)) {
       await this.startChannelCursors();
     }
     if (pending.includes(DASHBOARD_UPDATES)) {
-      await this.grantBesideKnowledge("update_dashboard");
+      await this.grantBeside("write_knowledge", "update_dashboard");
       await this.rewordDashboards();
     }
     if (pending.includes(CRON_VERBS)) {
@@ -3514,6 +3859,9 @@ var Board = class _Board {
     if (pending.includes(KNOWLEDGE_NOTICES)) {
       await this.noticeKnowledgeNotes();
     }
+    if (pending.includes(IMAGE_UPLOADS)) {
+      await this.grantBeside("post_message", "upload_image");
+    }
     await writeJson(file, { applied: [...applied, ...pending] });
   }
   /**
@@ -3555,12 +3903,12 @@ var Board = class _Board {
     }
   }
   /**
-   * Grants `verb` once to every charter granting `write_knowledge`, the work roles' charters in
-   * practice; seed roles have it from their seed.
+   * Grants `verb` once to every charter granting `beside`, the work roles' charters in practice;
+   * seed roles have it from their seed.
    */
-  async grantBesideKnowledge(verb) {
+  async grantBeside(beside, verb) {
     for (const charter of await this.listRoles()) {
-      if (charter.verbs.includes("write_knowledge") && !charter.verbs.includes(verb)) {
+      if (charter.verbs.includes(beside) && !charter.verbs.includes(verb)) {
         await this.writeRoleUnlocked(USER_NAME, { ...charter, verbs: [...charter.verbs, verb] }, { verbsAdded: [verb] });
       }
     }
@@ -3718,7 +4066,7 @@ var Board = class _Board {
         }
       }
       for (const file of await listFiles(this.paths.tasks(slug))) {
-        const raw = await readMarkdown(path6.join(this.paths.tasks(slug), file), z13.record(z13.string(), z13.unknown()));
+        const raw = await readMarkdown(path6.join(this.paths.tasks(slug), file), z16.record(z16.string(), z16.unknown()));
         const legacy = raw.data["thread"];
         if (legacy === void 0) {
           continue;
@@ -3796,7 +4144,7 @@ var Board = class _Board {
    * turns, so it follows nothing now.
    */
   async renameInboxCursors() {
-    const Legacy = z13.object({ inbox: z13.string().nullable() });
+    const Legacy = z16.object({ inbox: z16.string().nullable() });
     for (const agent of await this.listAgents()) {
       const file = this.paths.agentCursors(agent.name);
       if (await exists(file)) {
@@ -3842,7 +4190,7 @@ ${charter.purpose}
    */
   async alignSeedRole(seed) {
     const file = this.paths.role(seed.name);
-    const raw = await readMarkdown(file, z13.record(z13.string(), z13.unknown()));
+    const raw = await readMarkdown(file, z16.record(z16.string(), z16.unknown()));
     const current = RoleCharterSchema.parse(raw.data);
     const verbsAdded = seed.verbs.filter((verb) => !current.verbs.includes(verb));
     const fieldsAligned = RoleCharterSchema.keyof().options.filter((key) => key === "verbs" || seed[key] === void 0 ? false : seed.name === USER_ROLE ? JSON.stringify(seed[key]) !== JSON.stringify(current[key]) : !(key in raw.data));
@@ -4159,7 +4507,7 @@ ${charter.purpose}
   /** The society's norms, the one knowledge topic every turn loads. Empty until the steward writes it. */
   async readSocietyNorms() {
     const file = this.paths.societyKnowledgeFile("norms");
-    return await exists(file) ? (await readMarkdown(file, z13.record(z13.string(), z13.unknown()))).body : "";
+    return await exists(file) ? (await readMarkdown(file, z16.record(z16.string(), z16.unknown()))).body : "";
   }
   /** Knowledge topics of a project, or of the society when the project is null. */
   async listKnowledge(project) {
@@ -4179,7 +4527,7 @@ ${charter.purpose}
    */
   async knowledgeAt(file, project, topic) {
     const { data, body } = await readLooseMarkdown(file);
-    const revision = z13.number().int().min(0).safeParse(data["revision"]);
+    const revision = z16.number().int().min(0).safeParse(data["revision"]);
     const updatedBy = NameSchema.safeParse(data["updatedBy"]);
     const updatedAt = IsoDateTimeSchema.safeParse(data["updatedAt"]);
     return {
@@ -4512,8 +4860,11 @@ ${DASHBOARD_LINE}
         throw new BoardError("NOT_FOUND", `runner ${name} not found`);
       }
       const doc = await readMarkdown(file, RunnerSchema);
+      const { gitIdentityMissing: reported, ...rest } = doc.data;
+      const gitIdentityMissing = patch.gitIdentityMissing === void 0 ? reported : patch.gitIdentityMissing ?? void 0;
       const next = RunnerSchema.parse({
-        ...doc.data,
+        ...rest,
+        ...gitIdentityMissing === void 0 ? {} : { gitIdentityMissing: [...gitIdentityMissing] },
         ...patch.status === void 0 ? {} : { status: patch.status },
         ...patch.os === void 0 ? {} : { os: patch.os },
         ...patch.clis === void 0 ? {} : { clis: [...patch.clis] },
@@ -4541,6 +4892,36 @@ ${DASHBOARD_LINE}
       return next;
     });
   }
+  /**
+   * Records a CLI's plan quota as a runner reported it, from a turn's stream or a read, merged over
+   * what the record held. The record is written on every report, so it says when the numbers were
+   * last seen; `runner.quota` is appended only when what a reader would see changes, since every
+   * turn reports.
+   */
+  async recordQuota(name, cli, quota) {
+    return this.mutex.run(async () => {
+      const file = this.paths.runner(name);
+      if (!await exists(file)) {
+        throw new BoardError("NOT_FOUND", `runner ${name} not found`);
+      }
+      const doc = await readMarkdown(file, RunnerSchema);
+      const previous = doc.data.quotas?.[cli];
+      const merged = mergeQuota(previous, quota);
+      const next = RunnerSchema.parse({
+        ...doc.data,
+        quotas: { ...doc.data.quotas, [cli]: merged }
+      });
+      await writeMarkdown(file, next, doc.body);
+      if (quotaChanged(previous, merged)) {
+        await this.events.append("runner.quota", SYSTEM_ACTOR.name, {
+          name,
+          cli,
+          status: merged.status
+        });
+      }
+      return next;
+    });
+  }
   /**
    * Logs an operations signal as an `ops.signal` event. No channel carries it: the scheduler wakes
    * its readers from the event, the runner lists it in their prompts, and the interface's log shows
@@ -5109,6 +5490,60 @@ ${current.body}`);
       return updated;
     });
   }
+  /**
+   * Keeps an image a citizen's turn names by its path, read on the runner the turn runs on, which
+   * refuses a file outside the turn's worktree, the citizen's home, and the system temp folder.
+   * Only the bytes of a PNG, JPEG, GIF, or WebP of at most `IMAGE_LIMIT_BYTES` are kept, checked
+   * here again whatever the runner said, under a new id outside the projection, so no runner
+   * mirrors them and no prompt carries them: a post shows the image by its `image:` address.
+   */
+  async uploadImage(actor, input) {
+    const args = VerbInputs.upload_image.parse(input);
+    await this.authorize(actor, "upload_image");
+    if (actor.scope === void 0) {
+      throw new BoardError("INVALID_STATE", "upload_image reads the file on the machine a turn runs on, so only a turn can call it");
+    }
+    if (this.imageSource === null) {
+      throw new BoardError("NOT_FOUND", "this board has no runners to read an image from");
+    }
+    const bytes = await this.imageSource(actor, args.path);
+    const type = imageTypeOf(bytes);
+    if (type === null) {
+      throw new BoardError("VALIDATION", `${args.path} is not a PNG, JPEG, GIF, or WebP image by its first bytes`);
+    }
+    if (bytes.byteLength > IMAGE_LIMIT_BYTES) {
+      throw new BoardError("VALIDATION", `${args.path} is ${bytes.byteLength} bytes, over the ${IMAGE_LIMIT_BYTES} an image may be`);
+    }
+    return this.mutex.run(async () => {
+      const id = this.newId();
+      await writeFileAtomic(this.paths.image(id), bytes);
+      await this.events.append("image.uploaded", actor.name, {
+        id,
+        type,
+        size: bytes.byteLength
+      });
+      const name = path6.basename(args.path).replaceAll(/[[\]\\\r\n]/g, "");
+      return {
+        id,
+        type,
+        size: bytes.byteLength,
+        markdown: `![${name}](${IMAGE_SCHEME}${id})`
+      };
+    });
+  }
+  /** An uploaded image's bytes and kind, which its first bytes tell. */
+  async readImage(id) {
+    const file = this.paths.image(UlidSchema.parse(id));
+    if (!await exists(file)) {
+      throw new BoardError("NOT_FOUND", `image ${id} not found`);
+    }
+    const bytes = await readFile4(file);
+    const type = imageTypeOf(bytes);
+    if (type === null) {
+      throw new BoardError("NOT_FOUND", `image ${id} is not an image the board shows`);
+    }
+    return { type, bytes };
+  }
   /** Every cron, ended ones included, oldest first. */
   async listCrons() {
     const crons = [];
@@ -5500,6 +5935,13 @@ ${current.body}`);
   watchTurns(source) {
     this.turnsInFlight = source;
   }
+  /**
+   * Where `upload_image` reads a file from: the runner the calling turn runs on, through the server
+   * that hosts the runners. Without one, as in the admin CLI, nothing can be uploaded.
+   */
+  readImagesWith(source) {
+    this.imageSource = source;
+  }
   /**
    * Refuses to end conversations while another citizen's turn is in one of them: `cut` picks the
    * turns that would lose theirs. The caller's own turn is exempt, since ending a conversation
@@ -6329,6 +6771,8 @@ ${rationale}`}`);
         return this.updateCron(actor, VerbInputs.update_cron.parse(input));
       case "remove_cron":
         return this.removeCron(actor, VerbInputs.remove_cron.parse(input));
+      case "upload_image":
+        return this.uploadImage(actor, VerbInputs.upload_image.parse(input));
       default:
         throw new BoardError("VALIDATION", `unknown verb ${String(verb)}`);
     }
@@ -6375,7 +6819,7 @@ ${rationale}`}`);
   }
   async readAgentRoleBody(agent) {
     const file = this.paths.agentRole(agent);
-    return await exists(file) ? (await readMarkdown(file, z13.record(z13.string(), z13.unknown()))).body : "";
+    return await exists(file) ? (await readMarkdown(file, z16.record(z16.string(), z16.unknown()))).body : "";
   }
   /** The steps of one finished turn, as the runner handed them over when it ended. */
   /**
@@ -6406,6 +6850,14 @@ ${rationale}`}`);
     }
     return computeMetrics({ events, tasks, citizens, actions, activeSignals, window, now });
   }
+  /**
+   * Each citizen's finished turns over a window and the tokens of those that counted them, from
+   * the event log alone, which holds every turn's end whatever runner it ran on.
+   */
+  async tokenUse(window) {
+    const events = await this.events.readSince(null, Number.MAX_SAFE_INTEGER);
+    return tokenUse(events, window, this.now());
+  }
   /** The board actions a finished turn took, from its transcript; null when it kept none. */
   async turnActions(agent, turnId) {
     const known = this.actionCounts.get(turnId);
@@ -6775,7 +7227,7 @@ ${rationale}`}`);
       return { project: slug, revision: 0, body: "" };
     }
     const { data, body } = await readLooseMarkdown(file);
-    const revision = z13.number().int().min(0).safeParse(data["revision"]);
+    const revision = z16.number().int().min(0).safeParse(data["revision"]);
     const updatedBy = NameSchema.safeParse(data["updatedBy"]);
     const updatedAt = IsoDateTimeSchema.safeParse(data["updatedAt"]);
     return {
@@ -7049,7 +7501,7 @@ ${charter.purpose}
 
 ${charter.purpose}
 
-Route every lesson with one question: about me, my craft, or the user, it goes in memory/core.md; about this codebase, it goes in the project's knowledge directory; something everyone should know, post it.
+Route every lesson with one question: about me, my craft, or the user, it goes in memory/core.md; about how this codebase behaves, it goes in the repo's AGENTS.md or README; about this project as a place (runners, access, flow, where results live), it goes in the project's knowledge; something everyone should know, post it.
 ` + (seed.length === 0 ? "" : `
 ${SEED_INSTRUCTIONS_HEADING}
 
@@ -7066,7 +7518,7 @@ ${seed}
         continue;
       }
       const file = this.paths.agentRole(agent.name);
-      const body = await exists(file) ? (await readMarkdown(file, z13.record(z13.string(), z13.unknown()))).body : "";
+      const body = await exists(file) ? (await readMarkdown(file, z16.record(z16.string(), z16.unknown()))).body : "";
       const at = body.indexOf(`
 ${SEED_INSTRUCTIONS_HEADING}
 `);
@@ -7904,7 +8356,7 @@ ${charter.purpose}
       id: this.newId(),
       ...head,
       ts: this.now().toISOString(),
-      mentions: extractMentions(body)
+      mentions: postMentions(body)
     });
     const { author } = head;
     await writeMarkdown(this.paths.messageFile(dir, frontmatter.id, author), frontmatter, body);
@@ -8282,7 +8734,7 @@ function decideWake(input) {
 }
 
 // packages/scheduler/dist/scheduler.js
-import { z as z14 } from "zod";
+import { z as z17 } from "zod";
 function besideFields(beside) {
   if (beside === void 0) {
     return {};
@@ -8309,21 +8761,21 @@ var DEFAULT_TIMINGS = Object.freeze({
   scaleCooldownMs: 36e5,
   reflectionMs: 24 * 36e5
 });
-var SchedulerTimingsSchema = z14.object({
-  pollMs: z14.number().positive(),
-  debounceMs: z14.number().nonnegative(),
-  userDebounceMs: z14.number().nonnegative(),
-  heartbeatMs: z14.number().positive(),
-  waitingStageMs: z14.number().positive(),
-  leaseSweepMs: z14.number().positive(),
-  opsIntervalMs: z14.number().positive(),
-  signalRepeatMs: z14.number().positive(),
-  costReportMs: z14.number().positive(),
-  staleThreadMs: z14.number().positive(),
-  idleMemberMs: z14.number().positive(),
-  homeConflictMs: z14.number().positive(),
-  scaleCooldownMs: z14.number().positive(),
-  reflectionMs: z14.number().positive()
+var SchedulerTimingsSchema = z17.object({
+  pollMs: z17.number().positive(),
+  debounceMs: z17.number().nonnegative(),
+  userDebounceMs: z17.number().nonnegative(),
+  heartbeatMs: z17.number().positive(),
+  waitingStageMs: z17.number().positive(),
+  leaseSweepMs: z17.number().positive(),
+  opsIntervalMs: z17.number().positive(),
+  signalRepeatMs: z17.number().positive(),
+  costReportMs: z17.number().positive(),
+  staleThreadMs: z17.number().positive(),
+  idleMemberMs: z17.number().positive(),
+  homeConflictMs: z17.number().positive(),
+  scaleCooldownMs: z17.number().positive(),
+  reflectionMs: z17.number().positive()
 }).partial();
 function parseTimings(input) {
   const parsed = SchedulerTimingsSchema.parse(input);
@@ -8335,32 +8787,32 @@ function parseTimings(input) {
   }
   return overrides;
 }
-var PendingSchema = z14.object({
+var PendingSchema = z17.object({
   dispatch: TurnDispatchSchema,
-  readyAt: z14.number(),
-  stageWakes: z14.array(TriggerSchema).optional(),
-  holder: z14.boolean().optional(),
+  readyAt: z17.number(),
+  stageWakes: z17.array(TriggerSchema).optional(),
+  holder: z17.boolean().optional(),
   newestMessage: UlidSchema.optional(),
-  onlyMessages: z14.boolean().optional(),
+  onlyMessages: z17.boolean().optional(),
   steeredThrough: UlidSchema.optional(),
-  onlyCrons: z14.boolean().optional()
+  onlyCrons: z17.boolean().optional()
 });
-var StateSchema = z14.object({
-  cursor: z14.string().nullable(),
-  lastHeartbeat: z14.record(z14.string(), z14.string()),
+var StateSchema = z17.object({
+  cursor: z17.string().nullable(),
+  lastHeartbeat: z17.record(z17.string(), z17.string()),
   /** Waiting stages already signalled, as `task:stage`, so each is logged once while it waits. */
-  waitingSeen: z14.record(z14.string(), z14.string()).default({}),
+  waitingSeen: z17.record(z17.string(), z17.string()).default({}),
   /** Queued dispatches survive a restart; the cursor has already moved past the events that made them. */
-  pending: z14.record(z14.string(), PendingSchema).default({}),
-  opsReported: z14.record(z14.string(), z14.string()).default({}),
-  releaseCounts: z14.record(z14.string(), z14.number().int().nonnegative()).default({}),
-  lastOps: z14.string().nullable().default(null),
-  lastScaled: z14.record(z14.string(), z14.string()).default({}),
-  lastCostReport: z14.string().nullable().default(null),
-  costSinceReport: z14.number().nonnegative().default(0),
-  turnsSinceReport: z14.number().int().nonnegative().default(0),
+  pending: z17.record(z17.string(), PendingSchema).default({}),
+  opsReported: z17.record(z17.string(), z17.string()).default({}),
+  releaseCounts: z17.record(z17.string(), z17.number().int().nonnegative()).default({}),
+  lastOps: z17.string().nullable().default(null),
+  lastScaled: z17.record(z17.string(), z17.string()).default({}),
+  lastCostReport: z17.string().nullable().default(null),
+  costSinceReport: z17.number().nonnegative().default(0),
+  turnsSinceReport: z17.number().int().nonnegative().default(0),
   /** When each member last reflected, or was first seen; the cadence counts from here. */
-  lastReflection: z14.record(z14.string(), z14.string()).default({})
+  lastReflection: z17.record(z17.string(), z17.string()).default({})
 });
 function messageOf(trigger) {
   return trigger.kind === "mention" || trigger.kind === "user_post" ? trigger.messageId : void 0;
@@ -9933,11 +10385,11 @@ var TURN_CONTRACT = [
   "- Posts that would wake this conversation may arrive while you work, delivered into the turn under a heading that says so and formatted like the digest. They are part of this turn: act on them now, after the step in hand, or not at all, as with the digest. The user may also stop a turn; the next turn is told.",
   "- Silence is allowed. If the digest needs no reply, post nothing.",
   "- To come back to something later, set a cron with create_cron: a note on what to do then, and a five-field cron expression or one time with at. It wakes you in this conversation unless you name another, at most every fifteen minutes, and every fire is a paid turn, so end a cron with remove_cron once it has done its job. Never wait by holding a stage, sleeping, or leaving a process running: a turn's board token ends with the turn, so nothing it leaves behind can act on the board. The society's crons are under society/crons/ in the board projection.",
-  "- An @mention wakes the citizen named, and every wake costs a turn. Address someone with @ only when you need them to act; when you merely refer to citizens, write their names plainly. @user wakes nobody, since the user takes no turns; it is what puts a question before the user, so use it only when you need the user to answer or decide.",
+  "- An @mention wakes the citizen named, and every wake costs a turn. Address someone with @ only when you need them to act; when you merely refer to citizens, write their names plainly. A name in a code span or a code block is no mention, so code keeps its @ as written. @user wakes nobody, since the user takes no turns; it is what puts a question before the user, so use it only when you need the user to answer or decide.",
   "- A thread is a conversation off a channel that reaches only its participants and whoever is mentioned in it. Every task has one, opened with it under the task's id on the channel of its project it was filed in, general unless it was filed in another: talk about a task there, with post_message and its thread_id, and the notes you give advance_task and update_task are posted there as you. Its participants are the task's creator, its stage holders and assignees, whoever may take the stage that waits, and anyone who posted; it closes when the task ends. Every proposal has one too, in governance, opened with its pitch and closed by its decision. Open other threads with open_thread on a channel with a title, for any other topic; close_thread posts your summary to its channel.",
-  "- To show an image in a post, such as a screenshot or a chart, commit the file to a task's branch and link it by its path in the task's worktree, as `![what it shows](<path>)`: the board shows a file on a task's branch in place once it is committed, at the latest when your turn ends. An image at an https address shows too. Never put an image or any other file into a message as base64 or a data: URL: the board does not show it, and every reader of the conversation gets it in full in their prompt.",
-  "- Route every lesson: about you, your craft, or the user, write it to memory/core.md in your home directory, and keep that file short by moving detail to memory/<topic>.md, your archive; a durable fact about a project's codebase or process goes through `write_knowledge` on that project; something the whole project should know now, post it to the project channel, and anything about one task, in the task's thread.",
-  '- A procedure you have followed twice is a skill: write it to skills/<name>/SKILL.md in your home, frontmatter with `name` and a one-line `description` and then the steps, and your skills index lists it from the next turn. Files the steps use, such as scripts/ and references/, go in the same folder, named in SKILL.md by paths relative to it. Propose it with kind "skill" when the whole society would use it.',
+  "- To show an image in a post, such as a screenshot or a chart, save it anywhere you can read it, such as a folder from `mktemp -d`, call upload_image with its path, and put the markdown it returns in the post, `![what it shows](image:<id>)`, with what the image shows as its alt text: the board keeps the image, so it shows in any conversation after the file is gone. It takes a PNG, JPEG, GIF, or WebP of at most 8 MB from your worktree, your home, or the system temp folder. An image committed on a task's branch, linked by its path in the task's worktree, still shows in place, and so does one at an https address. Never put an image or any other file into a message as base64 or a data: URL: the board does not show it, and every reader of the conversation gets it in full in their prompt.",
+  "- Route every lesson: about you, your craft, or the user, write it to memory/core.md in your home directory, and keep that file short by moving detail to memory/<topic>.md, your archive; how a codebase behaves (architecture, conventions, gotchas, how to build, test, and verify it) goes in its AGENTS.md or README, committed on a task's branch like any change to the code, or proposed in the task's thread or the project channel when it is outside the task at hand; a durable fact about a project as a place (runners, access, flow, where results live) goes through `write_knowledge` on that project; something the whole project should know now, post it to the project channel, and anything about one task, in the task's thread.",
+  '- A procedure you have followed twice is a candidate for a skill, which it is when it makes a citizen better at a kind of work on any project: write it to skills/<name>/SKILL.md in your home, frontmatter with `name` and a one-line `description` and then the steps, and your skills index lists it from the next turn. Files the steps use, such as scripts/ and references/, go in the same folder, named in SKILL.md by paths relative to it. Propose it with kind "skill" when more than one citizen would use it and nothing in it is tied to one place; a skill only you use stays yours, however many projects you use it on.',
   "- To take a published skill for yourself, install it in a temporary folder and copy it into your home: in a folder from `mktemp -d`, `npx -y skills add <source> --skill <name> -a universal --copy -y` writes `.agents/skills/<name>/` and a lock file there, and you copy that skill folder to skills/<name>/ in your home, named in lowercase letters, digits, and hyphens. Never install one inside a worktree, where it would be committed into the project, or with -g, which writes to the runner's own home, shared by every citizen on it and listed in no skills index.",
   "- Report memoryUpdated: true in the status object whenever you changed memory/core.md or a skill, so a warm session restarts with the new instructions.",
   "- Other turns of yours may be running at the same time and share your home. Change a file there with your edit tool, which refuses a file changed since you read it, and never rewrite one whole from an earlier read, with a shell redirect or a script, or you erase what another of your turns wrote.",
@@ -9948,7 +10400,7 @@ var PLANNING = [
   "- A task is a plan of stages between open and done. Hold the current stage with claim_task and finish it with advance_task; the next stage becomes current, and past the last one the task is done.",
   "- Name stages by what gets done. Plan the next few steps rather than everything, and reshape with plan_task as the work teaches you.",
   "- Assign a stage to a role when anyone in it could do it, to a citizen only when it must be them, and to nobody when anyone in the project could. A citizen named on a stage must be a member of the task's project; add them first. A stage wakes everyone it is open to when it comes up, so the narrower the assignee, the fewer turns it costs.",
-  "- Reshape rather than force: another round is an inserted stage, and a wait on something outside the society is a stage named for what it waits on. When a check finds work unfinished, send the task back to an earlier stage with update_task.",
+  "- Reshape rather than force: another round is an inserted stage, and a wait on something outside the society is a stage named for what it waits on. When a check finds work unfinished, the holder of the current stage sends the task back to an earlier stage with update_task, and so may the user, the steward, and the concierge; anyone else asks the concierge in the task's thread.",
   "- A task that cannot start until other tasks finish names them with update_task blocked_by. While any of them is in play, its stage wakes nobody, neither when it comes up nor on a heartbeat; once the last has ended, done or abandoned, the stage wakes as if it had just come up, or wakes its holder. Nobody needs to clear the block or mention anyone when they end; change blocked_by only when the plan changes.",
   "- A gated stage is an independent check: nobody who held an earlier stage of the task may hold it, and only the user, the steward, and the concierge may add, remove, move, reassign, or ungate it. Ask them in the task's thread when a gate should change.",
   "- Commit your work on the task's branch before you advance, and say what you did in the advance note; it is the handover the next holder reads in the task's thread."
@@ -9967,15 +10419,15 @@ var GOVERNANCE = [
   "- Prefer scaling an existing role over inventing one, with a reallocation of its replicas, backlog threshold, wakes, or verbs; a new role is justified by work a project needs that no existing role covers. A role that needs a tool the board lacks is an engineering task, not a hiring request.",
   "- Operations signals are counters and timers the board logs, listed in the prompt of a role that reads them: stages waiting for a holder, backlog per role, stages waiting on a role nobody fills, churn, stale threads, idle members, missing capabilities, replicas added, spend. They are not posts in any channel; interpreting them is your judgment."
 ].join("\n");
-function renderOnboardingPreamble(context) {
+function renderOnboardingPreamble(context2) {
   return [
-    `This is your first turn as ${context.agentName}.`,
+    `This is your first turn as ${context2.agentName}.`,
     "",
-    `Your role in one paragraph: ${context.roleSummary}`,
+    `Your role in one paragraph: ${context2.roleSummary}`,
     "",
-    `You are working on project "${context.project}" in the worktree at ${context.worktree}.`,
-    ...(context.otherChannels ?? []).length === 0 ? [] : [
-      `You follow its general channel. It also has ${(context.otherChannels ?? []).map((ref) => `#${ref}`).join(", ")}, each a workstream such as a release: subscribe to one when your work there needs its posts. Its tasks and mentions reach you either way.`
+    `You are working on project "${context2.project}" in the worktree at ${context2.worktree}.`,
+    ...(context2.otherChannels ?? []).length === 0 ? [] : [
+      `You follow its general channel. It also has ${(context2.otherChannels ?? []).map((ref) => `#${ref}`).join(", ")}, each a workstream such as a release: subscribe to one when your work there needs its posts. Its tasks and mentions reach you either way.`
     ],
     "Your memory is empty. Write durable lessons about yourself, your craft, or the user to memory/core.md in your home directory.",
     "Write profile.md in your home directory: one paragraph on what you do well and what to send your way. The roster the front desk routes with is built from it.",
@@ -9986,7 +10438,7 @@ function renderOnboardingPreamble(context) {
 function renderSkillsIndex(skills) {
   if (skills.length === 0) {
     return [
-      "None yet. Write the first one when you notice yourself doing something the same way twice."
+      "None yet. Something you have done the same way twice is a candidate for the first; the turn contract says when it is one."
     ];
   }
   return [
@@ -10015,9 +10467,9 @@ var REFLECTION_INTRO = "This turn is for your memory; take no new work, and answ
 var RECONCILE = "- Reconcile first: merge each copy listed under Edits to reconcile in your home into the file beside it, then delete the copy.";
 var REFLECTION_STEPS = [
   "- Consolidate memory/core.md: keep it to lessons that still hold, about sixty lines at most, and move detail worth keeping to memory/<topic>.md in your home, which the board's search covers for you alone.",
-  '- Extract a skill: a procedure you have followed twice goes to skills/<name>/SKILL.md, frontmatter with `name` and a one-line `description` and then the steps, with any script or reference it uses in the same folder. Propose it with kind "skill" when other citizens would use it.',
+  '- Extract a skill: a procedure you have followed twice is a candidate, and one that makes a citizen better at a kind of work on any project goes to skills/<name>/SKILL.md, frontmatter with `name` and a one-line `description` and then the steps, with any script or reference it uses in the same folder. Propose it with kind "skill" when more than one citizen would use it and nothing in it is tied to one place; one only you use stays yours.',
   "- Refresh profile.md: one paragraph on what you do well and what to send your way; the roster the front desk routes with is built from it.",
-  "- Share: a durable fact about this scope's codebase or process goes through write_knowledge; a norm the whole society should follow goes to the steward as a plain post in general.",
+  "- Share: how a codebase behaves goes in its AGENTS.md or README through a task like any change to the code, so propose it in that task's thread or the project channel; a durable fact about this scope as a place (runners, access, flow, where results live) goes through write_knowledge; a norm the whole society should follow goes to the steward as a plain post in general.",
   "- Report memoryUpdated: true in the status object when core.md or a skill changed."
 ];
 var MAX_BODY_CHARS = 1500;
@@ -10061,10 +10513,25 @@ function signalLine(ts, signal) {
   ].filter((fact) => fact.length > 0);
   return `- [${ts}] ${signal.kind}: ${signal.summary} (${facts.join("; ")})`;
 }
-function runnerLine(runner, projects) {
+function quotaPhrase(cli, quota, now) {
+  const level = quotaLevel(quota, now);
+  if (level === "none") {
+    return `${cli} reports no plan limits`;
+  }
+  if (level === "limited") {
+    return `${cli} limited until ${quota.limitedUntil ?? "an unknown time"}`;
+  }
+  const windows = quota.windows.map((window) => !windowCurrent(window, now) ? `${windowName(window)} reset since` : `${windowName(window)} ${window.usedPercent === null ? "?" : Math.floor(window.usedPercent)}%`);
+  return `${cli} ${windows.length === 0 ? "allowed" : windows.join(", ")}${level === "warning" ? " (near a limit)" : ""} as of ${quota.observedAt}`;
+}
+function runnerLine(runner, projects, now) {
   const living = projects.filter((project) => project.runner === runner.name).map((project) => project.slug);
   const state = runner.status === "connected" ? "connected" : `away${runner.lastSeen === void 0 ? "" : ` since ${runner.lastSeen}`}`;
-  return `- ${runner.name}: ${state}; ${runner.os}; CLIs ${runner.clis.length === 0 ? "none" : runner.clis.join(", ")}; offers ${runner.capabilities.length === 0 ? "nothing beyond its CLIs" : runner.capabilities.join(", ")}; ${living.length === 0 ? "no projects" : `projects ${living.join(", ")}`}`;
+  const quotas = runner.clis.flatMap((cli) => {
+    const quota = runner.quotas?.[cli];
+    return quota === void 0 ? [] : [quotaPhrase(cli, quota, now)];
+  });
+  return `- ${runner.name}: ${state}; ${runner.os}; CLIs ${runner.clis.length === 0 ? "none" : runner.clis.join(", ")}; offers ${runner.capabilities.length === 0 ? "nothing beyond its CLIs" : runner.capabilities.join(", ")}; ${living.length === 0 ? "no projects" : `projects ${living.join(", ")}`}${quotas.length === 0 ? "" : `; quota ${quotas.join("; ")}`}`;
 }
 function profileLine(profile) {
   const line = profile.split("\n").map((entry) => entry.trim()).find((entry) => entry.length > 0 && !entry.startsWith("#"));
@@ -10214,19 +10681,19 @@ function buildTurnPrompt(input) {
   }
   const machines = input.runners;
   if (machines !== void 0 && machines !== null) {
-    lines.push("", "## Runners", "", "The machines turns run on. A project lives on the runner that takes its first turn, one that offers every capability the project and that turn's task require, and never moves. A task's required_capabilities must name capabilities exactly as a runner below offers them; a task needing one its project's runner lacks waits.", "");
+    lines.push("", "## Runners", "", "The machines turns run on. A project lives on the runner that takes its first turn, one that offers every capability the project and that turn's task require, and never moves. A task's required_capabilities must name capabilities exactly as a runner below offers them; a task needing one its project's runner lacks waits. A runner's quota is what each CLI's login there last reported of its plan, in percent of each window; a CLI limited until a time fails its turns there until then.", "");
     if (machines.runners.length === 0) {
       lines.push("None registered yet.");
     }
     for (const runner of machines.runners) {
-      lines.push(runnerLine(runner, machines.projects));
+      lines.push(runnerLine(runner, machines.projects, input.clock?.now ?? /* @__PURE__ */ new Date()));
     }
   }
   const knowledge = input.knowledge;
   if (knowledge !== void 0 && knowledge !== null) {
     lines.push("", `## Knowledge of ${dispatch.project}`, "");
     if (knowledge.topics.length === 0) {
-      lines.push("None yet. A durable fact about this scope's codebase or process is worth a write_knowledge call.");
+      lines.push("None yet. A durable fact about this place, such as its runners, access, flow, or where results live, is worth a write_knowledge call.");
     } else {
       lines.push(`Topics under ${knowledge.dir}; open one with your file tools when it is relevant.`, "");
       for (const topic of knowledge.topics) {
@@ -10752,6 +11219,11 @@ var TurnHost = class {
         }
       }
     });
+    if (outcome.quota !== void 0) {
+      await this.board.recordQuota(turn.runner, job.cli, outcome.quota).catch((error) => {
+        this.log.warn({ runner: turn.runner, cli: job.cli, error: String(error) }, "could not record a quota");
+      });
+    }
     if (recorded) {
       this.log.info({
         agent: job.agent,
@@ -10997,6 +11469,12 @@ var DEFAULT_GRACE_MS = 2 * 6e4;
 var DEFAULT_REQUEST_TIMEOUT_MS = 10 * 6e4;
 var CONTROL_TIMEOUT_MS = 15e3;
 var FILE_TIMEOUT_MS = 6e4;
+var IMAGE_REFUSALS = {
+  missing: "NOT_FOUND",
+  outside: "FORBIDDEN",
+  not_image: "VALIDATION",
+  too_big: "VALIDATION"
+};
 var SWEEP_TIMEOUT_MS = 2 * 6e4;
 var DEFAULT_ACK_TIMEOUT_MS = 3e4;
 var RunnerHub = class {
@@ -11081,7 +11559,8 @@ var RunnerHub = class {
       os: hello.os,
       clis: hello.clis,
       capabilities: hello.capabilities,
-      version: hello.version
+      version: hello.version,
+      gitIdentityMissing: hello.gitIdentityMissing ?? null
     });
     this.runnerChanged(name);
     this.log.info({ runner: name, version: hello.version, clis: hello.clis, slots: hello.slots }, "runner registered");
@@ -11504,6 +11983,33 @@ var RunnerHub = class {
     }
     return diff;
   }
+  /**
+   * The image file a citizen's turn names for `upload_image`, read on the runner that turn runs on,
+   * which refuses a file outside the turn's worktree, its citizen's home, and the system temp
+   * folder, and anything but a PNG, JPEG, GIF, or WebP within the size limit; each refusal comes
+   * back as a `BoardError` in the runner's words.
+   */
+  async readTurnImage(actor, file) {
+    const turn = this.host.runningTurns().find((each) => each.agent === actor.name && each.scope === actor.scope && each.thread === actor.thread && each.channel === actor.channel);
+    if (turn === void 0) {
+      throw new BoardError("INVALID_STATE", `${actor.name} has no turn running in this conversation to read ${file} from`);
+    }
+    const seat = this.seats.get(turn.runner);
+    if (seat === void 0 || seat.send === null) {
+      throw new RunnerAwayError(`runner ${turn.runner}, where the turn runs, is not connected`);
+    }
+    if (!seat.hello.imageReads) {
+      throw new BoardError("INVALID_STATE", `runner ${seat.name}, where the turn runs, cannot read images yet; upgrade it`);
+    }
+    const image = TurnImageSchema.nullable().parse(await this.request(seat, (request) => ({ type: "image", request, read: { turnId: turn.turnId, path: file } }), FILE_TIMEOUT_MS));
+    if (image === null) {
+      throw new BoardError("INVALID_STATE", `the turn is no longer running on runner ${seat.name}`);
+    }
+    if (image.kind === "refused") {
+      throw new BoardError(IMAGE_REFUSALS[image.why], image.detail);
+    }
+    return Buffer.from(image.content, "base64");
+  }
   /** The models a CLI offers, asked of a connected runner that has it; none when no runner has it. */
   /**
    * The connected runner a model list for `cli` comes from: the first of `prefer` that has the CLI,
@@ -11523,6 +12029,26 @@ var RunnerHub = class {
     }
     return ModelListSchema.parse(await this.request(seat, (request) => ({ type: "models", request, cli })));
   }
+  /**
+   * A CLI's plan quota, read on a runner without a turn and recorded on the runner's record.
+   * Refused for a runner not connected with the CLI, and for one from before quota reads, which
+   * would skip the request and leave the reader waiting.
+   */
+  async quota(runner, cli) {
+    const seat = this.seats.get(runner);
+    if (seat === void 0 || seat.send === null || !seat.hello.clis.includes(cli)) {
+      throw new RunnerAwayError(`runner ${runner} is not connected with ${cli}`);
+    }
+    if (!seat.hello.quotaReads) {
+      throw new BoardError("INVALID_STATE", `runner ${runner} cannot read quotas yet; upgrade it`);
+    }
+    const quota = CliQuotaSchema.nullable().parse(await this.request(seat, (request) => ({ type: "quota", request, cli }), FILE_TIMEOUT_MS));
+    if (quota === null) {
+      throw new BoardError("NOT_FOUND", `${cli} on runner ${runner} cannot read its quota`);
+    }
+    await this.board.recordQuota(runner, cli, quota);
+    return quota;
+  }
   /** Calls `listener` whenever a runner registers, connects, or goes away. */
   onRunnerChange(listener) {
     this.runnerListeners.add(listener);
@@ -11755,20 +12281,20 @@ async function handleMcpRequest(board2, actor, request, version) {
 import { Hono as Hono3 } from "hono";
 import { compress } from "hono/compress";
 import { streamSSE as streamSSE2 } from "hono/streaming";
-import { z as z16, ZodError } from "zod";
+import { z as z19, ZodError } from "zod";
 
 // apps/server/dist/github-auth.js
 import { randomBytes as randomBytes2 } from "node:crypto";
 import { Hono } from "hono";
-import { z as z15 } from "zod";
+import { z as z18 } from "zod";
 var SIGN_IN_TTL_MS = 30 * 24 * 36e5;
 var STATE_TTL_MS = 10 * 6e4;
 var MAX_STATES = 1e3;
-var TokenAnswerSchema = z15.object({ access_token: z15.string().min(1) });
-var GithubUserSchema = z15.object({
-  login: z15.string().min(1),
-  id: z15.number().int(),
-  avatar_url: z15.string().optional()
+var TokenAnswerSchema = z18.object({ access_token: z18.string().min(1) });
+var GithubUserSchema = z18.object({
+  login: z18.string().min(1),
+  id: z18.number().int(),
+  avatar_url: z18.string().optional()
 });
 function githubAvatar(url) {
   try {
@@ -12191,7 +12717,7 @@ async function isFile(file) {
     return false;
   }
 }
-function within(root, pathname) {
+function within2(root, pathname) {
   let decoded;
   try {
     decoded = decodeURIComponent(pathname);
@@ -12208,7 +12734,7 @@ function spaHandler(staticDir) {
     if (pathname.startsWith("/api/")) {
       return c.json({ error: "NOT_FOUND", message: `no route ${pathname}` }, 404);
     }
-    const file = within(root, pathname);
+    const file = within2(root, pathname);
     const headers = { "x-content-type-options": "nosniff" };
     if (file !== null && await isFile(file)) {
       return c.body(await readFile5(file), 200, {
@@ -12243,19 +12769,19 @@ var ERROR_STATUS = {
   INVALID_STATE: 409
 };
 var EVENT_PAGE = 100;
-var RetireBodySchema = z16.object({ reason: z16.string().min(1) });
-var RunnerBodySchema = z16.object({ name: NameSchema });
-var EnrollmentApprovalSchema = z16.object({ name: NameSchema });
-var HomeRunnerBodySchema = z16.object({ runner: NameSchema.nullable() });
-var ModelBodySchema = z16.object({ model: ModelNameSchema.nullable() });
-var EffortBodySchema = z16.object({ effort: EffortSchema.nullable() });
-var HistoryLimitSchema = z16.coerce.number().int().min(1).max(500);
-var MessageIdsSchema = z16.string().transform((ids) => ids.split(",").filter((id) => id !== "")).pipe(z16.array(UlidSchema).min(1).max(MESSAGE_LOOKUP_LIMIT));
-var TimezoneBodySchema = z16.object({ timezone: TimeZoneSchema });
-var ChannelBodySchema = z16.object({
+var RetireBodySchema = z19.object({ reason: z19.string().min(1) });
+var RunnerBodySchema = z19.object({ name: NameSchema });
+var EnrollmentApprovalSchema = z19.object({ name: NameSchema });
+var HomeRunnerBodySchema = z19.object({ runner: NameSchema.nullable() });
+var ModelBodySchema = z19.object({ model: ModelNameSchema.nullable() });
+var EffortBodySchema = z19.object({ effort: EffortSchema.nullable() });
+var HistoryLimitSchema = z19.coerce.number().int().min(1).max(500);
+var MessageIdsSchema = z19.string().transform((ids) => ids.split(",").filter((id) => id !== "")).pipe(z19.array(UlidSchema).min(1).max(MESSAGE_LOOKUP_LIMIT));
+var TimezoneBodySchema = z19.object({ timezone: TimeZoneSchema });
+var ChannelBodySchema = z19.object({
   project: NameSchema.nullable().default(null),
   name: NameSchema,
-  purpose: z16.string().min(1)
+  purpose: z19.string().min(1)
 });
 function bearer2(c) {
   const header = c.req.header("authorization") ?? "";
@@ -12263,7 +12789,7 @@ function bearer2(c) {
   return match?.[1]?.trim() ?? null;
 }
 function createApp(deps) {
-  const { board: board2, version, turns: turns2, scheduler: scheduler2, models } = deps;
+  const { board: board2, version, turns: turns2, scheduler: scheduler2, models, quotas } = deps;
   const eventStreamPingMs = deps.eventStreamPingMs ?? 15e3;
   const app2 = new Hono3();
   app2.get("/health", (c) => c.json({ ok: true, version }));
@@ -12333,6 +12859,17 @@ function createApp(deps) {
   api.get("/agents/:name/history/:commit", async (c) => c.json(await board2.homeChange(c.req.param("name"), c.req.param("commit"))));
   api.get("/roles", async (c) => c.json(await board2.listRoles()));
   api.get("/runners", async (c) => c.json(await board2.listRunners()));
+  api.post("/runners/:name/quota/:cli", async (c) => {
+    if (c.get("actor").role !== USER_ROLE) {
+      throw new BoardError("FORBIDDEN", "only the user reads a runner's quota");
+    }
+    const runner = NameSchema.parse(c.req.param("name"));
+    const cli = CliKindSchema.parse(c.req.param("cli"));
+    if (quotas === void 0) {
+      throw new RunnerAwayError("this server asks no runner for quotas");
+    }
+    return c.json(await quotas.read(runner, cli));
+  });
   api.post("/runners", async (c) => {
     const body = RunnerBodySchema.parse(await c.req.json());
     return c.json(await board2.addRunner(c.get("actor"), body.name));
@@ -12369,6 +12906,10 @@ function createApp(deps) {
     const window = MetricsWindowSchema.parse(c.req.query("window") ?? "7d");
     return c.json(await board2.metrics(window, new Set(scheduler2?.activeSignals ?? [])));
   });
+  api.get("/tokens", async (c) => {
+    const window = MetricsWindowSchema.parse(c.req.query("window") ?? "24h");
+    return c.json(await board2.tokenUse(window));
+  });
   api.get("/society/knowledge", async (c) => c.json(await board2.listKnowledge(null)));
   api.get("/skills", async (c) => c.json(await board2.listSocietySkills()));
   api.post("/agents/:name/retire", async (c) => {
@@ -12412,7 +12953,7 @@ function createApp(deps) {
   });
   api.put("/roles/:name", async (c) => {
     const charter = RoleCharterSchema.parse({
-      ...z16.record(z16.string(), z16.unknown()).parse(await c.req.json()),
+      ...z19.record(z19.string(), z19.unknown()).parse(await c.req.json()),
       name: c.req.param("name")
     });
     return c.json(await board2.setRoleCharter(c.get("actor"), charter));
@@ -12451,6 +12992,15 @@ function createApp(deps) {
     return c.json(await deps.runners.branchDiff(task.project, `task/${task.id}`, BranchPathSchema.parse(c.req.param("path"))));
   });
   api.get("/tasks/:id/files/:path{.+}", (c) => taskFile(c, c.req.param("path")));
+  api.get("/images/:id", async (c) => {
+    const { type, bytes } = await board2.readImage(UlidSchema.parse(c.req.param("id")));
+    return c.body(new Uint8Array(bytes), 200, {
+      "content-type": IMAGE_MEDIA_TYPES[type],
+      "cache-control": "private, max-age=31536000, immutable",
+      "x-content-type-options": "nosniff",
+      "content-security-policy": "default-src 'none'; sandbox"
+    });
+  });
   api.get("/threads", async (c) => c.json(await board2.listThreads()));
   api.get("/requests", async (c) => c.json(await board2.listRequests()));
   api.get("/threads/:id", async (c) => {
@@ -12762,6 +13312,35 @@ var ModelCatalog = class {
   }
 };
 
+// apps/server/dist/quotas.js
+var MINUTE = 6e4;
+var QuotaReads = class {
+  runners;
+  floorMs;
+  now;
+  kept = /* @__PURE__ */ new Map();
+  constructor(runners2, floorMs = MINUTE, now = Date.now) {
+    this.runners = runners2;
+    this.floorMs = floorMs;
+    this.now = now;
+  }
+  read(runner, cli) {
+    const key = `${runner}/${cli}`;
+    const kept = this.kept.get(key);
+    if (kept !== void 0 && this.now() - kept.at < this.floorMs) {
+      return kept.quota;
+    }
+    const quota = this.runners.quota(runner, cli);
+    this.kept.set(key, { at: this.now(), quota });
+    quota.catch(() => {
+      if (this.kept.get(key)?.quota === quota) {
+        this.kept.delete(key);
+      }
+    });
+    return quota;
+  }
+};
+
 // apps/server/dist/turn-hub.js
 var TurnHub = class {
   capacity;
@@ -12844,6 +13423,7 @@ var host = new TurnHost({
 });
 var runners = new RunnerHub({ board, host, version: VERSION, log });
 board.watchTurns(() => host.inFlight());
+board.readImagesWith((actor, file) => runners.readTurnImage(actor, file));
 var concurrency = config.concurrency ?? Number.POSITIVE_INFINITY;
 var timings = parseTimings(JSON.parse(process.env["STELLARIS_TIMINGS"] ?? "{}"));
 var scheduler = new Scheduler({ board, runner: runners, log, concurrency, timings });
@@ -12869,6 +13449,7 @@ var app = createApp({
   turns,
   scheduler: view,
   models: new ModelCatalog(runners),
+  quotas: new QuotaReads(runners),
   runners,
   webDir,
   signIn: { github: config.github, log },