@stage5/lumine 0.3.75 → 0.3.77

package/lib/admin-arena.js

@@ -13,8 +13,13 @@ import path from "node:path";
 //                              at once; a dry run (validation only) unless --confirm;
 //                              re-importing a folder retires that paper's earlier items
 //   status --item <id> --to live|retired|checked
+//   picture-audit [--items <ids> | --cursor <id>] [--limit 1-20] [--renders <dir>]
+//                              advisory JEV image review list of live picture
+//                              items; never retires or edits. --renders holds
+//                              <itemId>.png renders of picture-option items
+//                              (panels are drawn by the web, not stored)
 export const ARENA_USAGE =
-  "Usage: lumine admin arena queue | paper-queue [--cursor <id>] [--limit <1-100>] | marking [--cursor <id>] [--limit <1-200>] | import (--dir <paper folder> | --additive --file <reviewed-items.json>) [--audio audio/<exam>/<paper>] [--live] [--confirm] | status --item <id> --to live|retired|checked [--confirm] | today-queue [--cursor <id>] [--limit <1-100>] | today-member --user <id> | today-import --file <reviewed-questions.json> [--confirm] [--json]";
+  "Usage: lumine admin arena queue | paper-queue [--cursor <id>] [--limit <1-100>] | marking [--cursor <id>] [--limit <1-200>] | import (--dir <paper folder> | --additive --file <reviewed-items.json>) [--audio audio/<exam>/<paper>] [--live] [--confirm] | status --item <id> --to live|retired|checked [--confirm] | today-queue [--cursor <id>] [--limit <1-100>] | today-member --user <id> | today-import --file <reviewed-questions.json> [--confirm] | picture-audit [--items <id,id,...> | --cursor <id>] [--limit <1-20>] [--renders <dir of <itemId>.png>] [--output <review-list.json>] [--json]";
 const MAX_ITEMS = 300;
 
 function validationError(message) {
@@ -62,7 +67,60 @@ function readAdditiveItems(file) {
   return items;
 }
 
+const PICTURE_AUDIT_MAX = 20;
+const RENDER_MAX_BYTES = 3 * 1024 * 1024;
+// The API's JSON body limit is 8 MB; keep a margin for base64 framing.
+const RENDERS_TOTAL_MAX_BYTES = 5 * 1024 * 1024;
+
+function readRenders(dir, itemIds) {
+  const folder = path.resolve(dir);
+  let names;
+  try {
+    names = fs.readdirSync(folder).filter((name) => /^\d{1,10}\.(png|jpe?g)$/i.test(name));
+  } catch {
+    throw validationError(`Cannot read the renders folder ${folder}.`);
+  }
+  const renders = {};
+  let total = 0;
+  for (const name of names) {
+    const id = name.replace(/\..*$/, "");
+    if (itemIds && !itemIds.includes(Number(id))) continue;
+    const bytes = fs.readFileSync(path.join(folder, name));
+    if (!bytes.length || bytes.length > RENDER_MAX_BYTES) throw validationError(`${name} must be a PNG or JPEG of at most 3 MB.`);
+    total += bytes.length;
+    if (total > RENDERS_TOTAL_MAX_BYTES) throw validationError("Renders for one call must total under 5 MB; audit fewer --items at a time.");
+    renders[id] = bytes.toString("base64");
+  }
+  if (Object.keys(renders).length > PICTURE_AUDIT_MAX) throw validationError(`Send renders for at most ${PICTURE_AUDIT_MAX} items per call (use --items).`);
+  return renders;
+}
+
 export function buildArenaOperation({ action, options }) {
+  if (action === "picture-audit") {
+    const limit = Number(options.adminLimit ?? 10);
+    if (!Number.isInteger(limit) || limit < 1 || limit > PICTURE_AUDIT_MAX) throw validationError(`Use --limit from 1 to ${PICTURE_AUDIT_MAX}.`);
+    let itemIds = null;
+    if (options.adminArenaItems) {
+      itemIds = options.adminArenaItems.split(",").map((value) => Number(value.trim()));
+      if (!itemIds.length || itemIds.length > PICTURE_AUDIT_MAX || itemIds.some((id) => !Number.isSafeInteger(id) || id <= 0)) {
+        throw validationError(`--items is 1-${PICTURE_AUDIT_MAX} comma-separated item ids.`);
+      }
+      if (options.adminCursor) throw validationError("Use --items or --cursor, not both.");
+    }
+    const cursor = Number(options.adminCursor || 0);
+    if (!Number.isSafeInteger(cursor) || cursor < 0) throw validationError("Use a non-negative --cursor.");
+    const body = { limit, ...(itemIds ? { itemIds } : { cursor }) };
+    if (options.adminArenaRenders) body.renders = readRenders(options.adminArenaRenders, itemIds);
+    return {
+      name: "arena.picture-audit",
+      method: "POST",
+      path: "/cli/admin/arena/picture-audit",
+      body,
+      mutates: false,
+      requiresRun: false,
+      timeoutMs: 600000,
+    };
+  }
   if (action === "paper-queue") {
     const cursor = Number(options.adminCursor || 0);
     const limit = Number(options.adminLimit ?? 50);
@@ -112,6 +170,13 @@ export function buildArenaOperation({ action, options }) {
   }
   if (action === "import") {
     const additive = Boolean(options.adminArenaAdditive);
+    if (!options.adminFile && !options.adminDir) {
+      throw validationError(
+        additive
+          ? "--additive needs --file <reviewed-items.json> or --dir <folder>; it never reads the current folder."
+          : ARENA_USAGE,
+      );
+    }
     if ((options.adminFile && options.adminDir) || (options.adminFile && !additive)) {
       throw validationError("Use --dir for a complete paper, or --additive with exactly one of --file or --dir for a refill.");
     }
@@ -167,6 +232,16 @@ export function formatArenaResult({ operation, data }) {
     data?.nextCursor ? `Continue: lumine admin arena today-queue --cursor ${data.nextCursor} --json` : "End of Today’s Q queue.",
   ];
   if (operation.name === "arena.today.member") return [JSON.stringify(data, null, 2)];
+  if (operation.name === "arena.picture-audit") {
+    const items = data?.items || [];
+    return [
+      `Picture audit (advisory; nothing retired or edited): ${items.length} items, ${data?.review?.length || 0} to review, ${data?.needsRender?.length || 0} need a render.`,
+      ...items.map((row) => `#${row.itemId} ${row.examFamily} ${row.itemType}${row.number ? ` no ${row.number}` : ""} [${row.kind || "-"}]: ${
+        row.status === "audited" ? `${row.verdict === "flag" ? "REVIEW" : "ok"}${row.cached ? " (saved)" : ""}${row.notes?.length ? ` · ${row.notes.join("; ")}` : ""}` : `${row.status} (${row.reason})`}`),
+      data?.nextCursor ? `Continue: lumine admin arena picture-audit --cursor ${data.nextCursor} --output <file> --json` : "End of live picture items.",
+      data?.notice || "",
+    ].filter(Boolean);
+  }
   if (operation.name === "arena.today.preview" || operation.name === "arena.today.import") return [
     `${data?.dryRun ? "Dry run" : "Saved"}: ${data?.questions?.length || 0} reviewed personal questions.${data?.dryRun ? " Add --confirm to make new questions available." : ""}`,
   ];

package/lib/admin-daily.js

@@ -188,7 +188,7 @@ export async function dailyRunGather(options, { run = runAdmin, now, clock } = {
     collection.invalidate(steps.at(-1).name);
     Object.assign(steps.at(-1), { ok: false, error });
   };
-  const evidenceNames = /^(ai-costs|media-costs|reward-activity|reward-diagnostics|jev-review|owner-wake|bot-output)/;
+  const evidenceNames = /^(ai-costs|media-costs|reward-activity|reward-diagnostics|jev-review|jev-images|owner-wake|bot-output)/;
   const step = (name, args, file) => {
     const res = collection.collect(name, args, file, evidenceNames.test(name) ? "evidence" : "priority", run);
     steps.push({
@@ -283,6 +283,10 @@ export async function dailyRunGather(options, { run = runAdmin, now, clock } = {
     since: jevUntil - 86400, until: jevUntil, step, failLast });
   writeAdminJsonFile(path.join(dir, "jev-review-summary.json"), diagnosticCollectionSummary(jevReview), { privateFile: true });
   steps.push({ name: "jev-review-summary", file: "jev-review-summary.json", ok: true });
+  // JEV image checks (advisory): per-area health, cost, agreement with final
+  // decisions, disagreements and escalations for the report's "JEV images"
+  // section. A failed step is unavailable evidence, not a quiet day.
+  step("jev-images", ["jev-images", "report", "--days", "1"], "jev-images.json");
   // One pending queue covers every Build approval type. Exhaust its cursor;
   // an empty/malformed receipt must not look like an empty queue.
   const buildReviews = { complete: false, pages: 0, items: 0 };

package/lib/admin-jev-images.js

@@ -0,0 +1,105 @@
+// `lumine admin jev-images report|switch|decide` (twinkle-api
+// controllers/cli/admin/jevImages.ts): JEV image checks are advisory only.
+//   report [--days 1..30]                     per-area health, cost, agreement,
+//                                             disagreements and escalations
+//   switch --area <area|all> --mode on|off [--daily-cap <n>]   owner only;
+//                                             takes effect within 30 s, no deploy
+//   decide --area <area> --key <subject> --decision <decision>   record a
+//                                             reviewer's final decision
+export const JEV_IMAGES_AREAS = ["arena_paper", "arena_picture", "study_record", "thumbnail", "sdk_decide"];
+export const JEV_IMAGES_USAGE =
+  "Usage: lumine admin jev-images report [--days 1..30] | switch --area <" +
+  ["all", ...JEV_IMAGES_AREAS].join("|") +
+  "> --mode on|off [--daily-cap <0-5000>] | decide --area <area> --key <subject key, e.g. arenaItem:10176> --decision <decision> [--json]";
+
+function invalid(message) {
+  const error = new Error(message);
+  error.code = "CLI_ADMIN_CLI_VALIDATION";
+  return error;
+}
+
+export function buildJevImagesOperation({ action, options = {} }) {
+  if (!action || action === "report") {
+    const days = options.adminDays === "" || options.adminDays == null ? 1 : Number(options.adminDays);
+    if (!Number.isInteger(days) || days < 1 || days > 30) throw invalid("--days must be 1 to 30.");
+    return {
+      name: "jev-images.report",
+      method: "GET",
+      path: `/cli/admin/jev-images/report?days=${days}`,
+      body: undefined,
+      mutates: false,
+      requiresRun: false,
+    };
+  }
+  if (action === "switch") {
+    const area = String(options.adminJevArea || "");
+    if (area !== "all" && !JEV_IMAGES_AREAS.includes(area)) throw invalid(JEV_IMAGES_USAGE);
+    const mode = String(options.adminMode || "");
+    if (mode !== "on" && mode !== "off") throw invalid("--mode is on or off.");
+    const body = { area, mode };
+    if (options.adminJevDailyCap !== "" && options.adminJevDailyCap != null) {
+      const cap = Number(options.adminJevDailyCap);
+      if (area === "all" || !Number.isInteger(cap) || cap < 0 || cap > 5000) {
+        throw invalid("--daily-cap is set per area, 0 to 5000.");
+      }
+      body.dailyCap = cap;
+    }
+    return {
+      name: "jev-images.switch",
+      method: "POST",
+      path: "/cli/admin/jev-images/switch",
+      body,
+      mutates: true,
+      requiresRun: false,
+    };
+  }
+  if (action === "decide") {
+    const area = String(options.adminJevArea || "");
+    if (!JEV_IMAGES_AREAS.includes(area)) throw invalid(JEV_IMAGES_USAGE);
+    const subjectKey = String(options.adminJevKey || "");
+    if (!/^[A-Za-z][A-Za-z0-9_-]{0,30}:[0-9][A-Za-z0-9:_-]{0,60}$/.test(subjectKey)) {
+      throw invalid("--key is a subject key such as arenaItem:10176 or arenaPaper:12.");
+    }
+    const decision = String(options.adminDecision || "");
+    if (!/^[a-z_]{2,24}$/.test(decision)) throw invalid("--decision is required (e.g. keep, fix, retired).");
+    return {
+      name: "jev-images.decide",
+      method: "POST",
+      path: "/cli/admin/jev-images/decide",
+      body: { area, subjectKey, decision },
+      mutates: true,
+      requiresRun: false,
+    };
+  }
+  throw invalid(JEV_IMAGES_USAGE);
+}
+
+const usd = (value) => `$${Number(value || 0).toFixed(4)}`;
+
+export function formatJevImagesResult({ operation, data = {} }) {
+  if (operation.name === "jev-images.switch") {
+    return [`JEV images ${data.area}: ${data.mode}${data.dailyCap !== undefined ? `, daily cap ${data.dailyCap}` : ""} (all servers within ${data.effectiveWithinSeconds ?? 30} s).`];
+  }
+  if (operation.name === "jev-images.decide") {
+    return [`Recorded ${data.decision} for ${data.subjectKey} (${data.area}) on ${data.updated ?? 0} advisory row(s).`];
+  }
+  const lines = [
+    `JEV images (${data.model || "?"}, advisory only) · last ${data.window?.days ?? "?"} day(s) · coverage ${data.coverage?.status || "unknown"} · ${data.totals?.checks ?? 0} checks · ${usd(data.totals?.costUsd)}`,
+  ];
+  for (const [area, a] of Object.entries(data.areas || {})) {
+    const s = a.setting || {};
+    lines.push(
+      `${area}: ${s.mode} (${s.source}, cap ${s.dailyCap}, used today ${s.usedToday ?? "?"}) · ${a.checks} checks, ${a.ok} ok, ${a.errors} errors, ${a.timeouts} timeouts, ${a.droppedRetries} dropped-image retries · p95 ${a.latencyMs?.p95 ?? "-"} ms · ${a.tokens?.input ?? 0} tokens ${usd(a.costUsd)} · agreement ${a.agreementRate === null ? "-" : `${a.agreed}/${a.scored}`} · ${a.flaggedUndecided} flagged awaiting a decision`,
+    );
+    for (const d of a.disagreements || []) {
+      lines.push(`  disagreement #${d.eventId} ${d.subjectKey}: advisory ${d.advisory}, final ${d.finalDecision}`);
+    }
+  }
+  if ((data.escalations || []).length) {
+    lines.push("Escalations:");
+    for (const e of data.escalations) lines.push(`  ${e.area} ${e.code}: ${e.detail}`);
+  } else {
+    lines.push("Escalations: none.");
+  }
+  return lines;
+}

package/lib/admin.js

@@ -50,6 +50,7 @@ import { buildCraftOperation, formatCraftResult } from "./admin-craft.js";
 import { buildNonogramOperation, formatNonogramResult } from './admin-nonogram.js';
 import { buildArenaOperation, formatArenaResult } from "./admin-arena.js";
 import { buildJevRoutingReviewOperation, formatJevRoutingReview } from "./admin-jev-review.js";
+import { buildJevImagesOperation, formatJevImagesResult } from "./admin-jev-images.js";
 import { summarizeGameDiagnostics } from "./game-diagnostic-summary.js";
 import {
   buildSlidingBlockOperation,
@@ -377,8 +378,10 @@ function buildApprovalOperation({ action, target, options }) {
   }
   const id = parseApprovalId(target);
   if (action === "show" || action === "get") {
+    // An Arena paper's advisory JEV pre-screen can take a while on first view.
     return readOperation("approvals.show", `/cli/admin/approvals/${id}`, {
       requiresRun: false,
+      timeoutMs: 180000,
     });
   }
   // An Arena paper's page replaced by the reviewer's blurred copy (names,
@@ -2714,6 +2717,10 @@ export function parseAdminOperation(options) {
   if (namespace === "jev-routing") {
     return buildJevRoutingReviewOperation({ action, target, extra, options });
   }
+  // JEV image checks: report, owner switch, final decisions (admin-jev-images.js).
+  if (namespace === "jev-images") {
+    return buildJevImagesOperation({ action, options });
+  }
   // Who holds which management level (admin-roles.js); read-only, no run.
   if (namespace === "roles") {
     return buildRolesOperation(options);
@@ -3063,9 +3070,15 @@ export function parseAdminOperation(options) {
       const raw = readAdminJsonFile(target, "<reviewed-definitions.json>", { maxBytes: 512 * 1024 });
       const items = Array.isArray(raw) ? raw : raw?.items;
       if (!Array.isArray(items) || !items.length || items.length > 100) throw cliValidationError("Review 1 to 100 Korean definitions, keeping exported word IDs, revisions and source hashes.");
-      return writeOperation("dictionary.korean-review", "POST", "/cli/admin/dictionary/korean/review", { items, dryRun: Boolean(options.adminDryRun) }, { requiresRun: false, mutates: !options.adminDryRun, timeoutMs: 120000 });
+      // A preview (dry run) unless --confirm, like arena import and today-import.
+      if (options.adminConfirm && options.adminConfirm !== "true") {
+        throw cliValidationError("Pass --confirm on its own, without a value.");
+      }
+      const confirm = options.adminConfirm === "true";
+      if (confirm && options.adminDryRun) throw cliValidationError("Choose --confirm or --dry-run, not both.");
+      return writeOperation("dictionary.korean-review", "POST", "/cli/admin/dictionary/korean/review", { items, dryRun: !confirm }, { requiresRun: false, mutates: confirm, timeoutMs: 120000 });
     }
-    throw cliValidationError("Use: lumine admin dictionary korean-status | korean-pending [--cursor <time:id>] [--limit <1-100>] | korean-review <reviewed-definitions.json> [--dry-run]");
+    throw cliValidationError("Use: lumine admin dictionary korean-status | korean-pending [--cursor <time:id>] [--limit <1-100>] | korean-review <reviewed-definitions.json> [--confirm]");
   }
   if (namespace === "word-games") {
     if (action === "status") return readOperation("word-games.status", "/cli/admin/word-games/status", { requiresRun: false });
@@ -3173,7 +3186,7 @@ export function parseAdminOperation(options) {
     // as the website. Check-ins provide evidence; every meetup completion
     // waits for Mikey's decision (2026-10-22).
     const usage =
-      "Usage: lumine admin meetup list [--status review|active|completed|all] | show <crewId> | review-completion <crewId> --decision approve|reject --fingerprint <review fingerprint> | info <crewId> <userId> --decision ask|accept|ask-again|withdraw [--note <text>] | set-branch <crewId> <userId> --branch <name> [--note <text>] | branches [list|show|approve|reject|merge] | emails [list|send <id> [--fingerprint <revision>]|discard <id>|review on|off] | friends [status|on|off] | funnel [--days <1-90>] | story ... | announce-checkins [--send] [--as zero|ciel].";
+      "Usage: lumine admin meetup list [--status review|active|completed|all] | show <crewId> | review-completion <crewId> --decision approve|reject --fingerprint <review fingerprint> | info <crewId> <userId> --decision ask|accept|ask-again|withdraw [--note <text>] | set-branch <crewId> <userId> --branch <name> [--note <text>] | branches [list|show|approve|reject|merge] | emails [list|send <id> --fingerprint <revision>|discard <id>|review on|off] | friends [status|on|off] | funnel [--days <1-90>] | story ... | announce-checkins [--send] [--as zero|ciel].";
     const note = String(options.note || "").trim();
     if (note.length > 1000) {
       throw cliValidationError("--note must be at most 1000 characters.");
@@ -3279,11 +3292,18 @@ export function parseAdminOperation(options) {
       }
       if (sub === "send" || sub === "discard") {
         const id = parseRequiredInteger(extra, "Email ID", 1);
-        const revision = sub === "send" ? String(options.adminFingerprint || "").trim() : "";
+        // A send names the exact draft the admin reviewed, so a draft that
+        // changed after review is never sent unseen.
+        const revision = sub === "send" ? String(options.adminFingerprint || "").trim().toLowerCase() : "";
+        if (sub === "send" && !revision) {
+          throw cliValidationError(
+            "Sending a parent email needs --fingerprint <revision>. Run lumine admin meetup emails list, review the draft, then send it with the fingerprint printed beside it.",
+          );
+        }
         if (revision && !/^[0-9a-f]{64}$/.test(revision)) throw cliValidationError("Use --fingerprint from the reviewed email in meetup emails list.");
         return writeOperation("meetup.emails", "POST", `/cli/admin/meetup-quest/emails/${id}/${sub}`, revision ? { revision } : {}, { requiresRun: false });
       }
-      throw cliValidationError("lumine admin meetup emails [list | send <id> | discard <id> | review on|off]");
+      throw cliValidationError("lumine admin meetup emails [list | send <id> --fingerprint <revision> | discard <id> | review on|off]");
     }
     if (action === "friends") {
       const sub = target || "status";
@@ -6902,6 +6922,20 @@ function arenaItemSummary(item) {
   return "";
 }
 
+// JEV image pre-screen notes (advisory only; the decision stays the reviewer's).
+function printPaperPrescreen(prescreen) {
+  if (!prescreen) return;
+  console.log(`Pre-screen (advisory, JEV images): ${prescreen.status}${prescreen.reason ? ` (${prescreen.reason})` : ""}`);
+  for (const page of prescreen.pages || []) {
+    console.log(page.status === "ok"
+      ? `  page ${page.page}: ${page.verdict === "flag" ? "LOOK CLOSELY" : "looks like an exam page"}${page.cached ? " (saved)" : ""} · ${(page.notes || []).join("; ")}`
+      : `  page ${page.page}: no pre-screen (${page.reason})`);
+  }
+  if (prescreen.blankLooking?.length) console.log(`  blank-looking pages: ${prescreen.blankLooking.join(", ")}`);
+  for (const pair of prescreen.duplicatePages || []) console.log(`  pages ${pair.pages.join(" and ")}: ${pair.kind === "same_file" ? "the same file" : "look nearly identical"}`);
+  if (prescreen.notice) console.log(`  ${prescreen.notice}`);
+}
+
 function printArenaEvidence(arena) {
   if (!arena) return;
   if (arena.kind === "scoreReport") {
@@ -6917,6 +6951,7 @@ function printArenaEvidence(arena) {
     console.log(arena.duplicate ? `Duplicate: ${arena.duplicate.reason} of paper #${arena.duplicate.duplicateOf}` : "Duplicate: none found");
     console.log(`Rarity: ${arena.rarity || "-"} · reward ${arena.reward?.xp?.toLocaleString?.("en-US") ?? 0} XP + ${arena.reward?.coins ?? 0} coins${arena.reward?.onApprove ? " on approval" : arena.reward?.paid ? " (paid)" : ""}`);
     if (arena.reviewNote) console.log(`Review note: ${arena.reviewNote}`);
+    printPaperPrescreen(arena.prescreen);
   }
   if (arena.check) console.log(`Check: ${arena.check}`);
 }
@@ -7660,6 +7695,10 @@ function printAdminResult({ operation, result }) {
     for (const line of formatJevRoutingReview(data)) console.log(line);
     return;
   }
+  if (operation.name.startsWith("jev-images.")) {
+    for (const line of formatJevImagesResult({ operation, data })) console.log(line);
+    return;
+  }
   if (operation.name === "roles.read") {
     printRoles(data);
     return;

package/lib/commands.js

@@ -2545,6 +2545,17 @@ export function parseArgs(args) {
           ? `${raw.branch},${inlineValue}`
           : inlineValue;
     } else if (booleanFlags.has(camelKey)) {
+      // A switch never takes a spaced value, so `--live false` would turn the
+      // switch on and leave "false" behind. Refuse it rather than guess.
+      const nextValue = rest[i + 1];
+      if (
+        nextValue !== undefined &&
+        ["false", "no", "off", "0"].includes(nextValue.trim().toLowerCase())
+      ) {
+        throw new Error(
+          `--${key} is a switch and does not take "${nextValue}" after a space. Leave --${key} out (or write --${key}=false) to turn it off.`,
+        );
+      }
       raw[camelKey] = true;
     } else if (
       optionalValueFlags.has(camelKey) &&
@@ -2683,7 +2694,7 @@ export function parseArgs(args) {
     adminSinceRun: Boolean(raw.sinceRun),
     adminSince: raw.since ? String(raw.since) : "",
     adminUntil: raw.until ? String(raw.until) : "",
-    adminIncludeSynthetic: Boolean(raw.includeSynthetic),
+    adminIncludeSynthetic: parseBoolean(raw.includeSynthetic, false),
     adminPath: raw.path ? String(raw.path) : "",
     adminPerf: Boolean(raw.perf),
     adminWake: Boolean(raw.wake),
@@ -2708,6 +2719,12 @@ export function parseArgs(args) {
     adminArenaAdditive: parseBoolean(raw.additive, false),
     adminArenaItem: raw.item ? String(raw.item) : "",
     adminArenaTo: raw.to ? String(raw.to) : "",
+    adminArenaRenders: raw.renders ? String(raw.renders) : "",
+    adminArenaItems: raw.items ? String(raw.items) : "",
+    // lumine admin jev-images (admin-jev-images.js)
+    adminJevArea: raw.area ? String(raw.area) : "",
+    adminJevKey: raw.key ? String(raw.key) : "",
+    adminJevDailyCap: raw.dailyCap === undefined ? "" : String(raw.dailyCap),
     adminClaimFile: raw.claim ? String(raw.claim) : "",
     adminScaffoldFile: raw.scaffold ? String(raw.scaffold) : "",
     adminTargetFile: raw.targetFile ? String(raw.targetFile) : "",
@@ -3319,13 +3336,13 @@ export function printHelp() {
   lumine admin teachers audit [--limit <1-100>] [--cursor <c>] [--all] | revoke <userId> --reason <text>   (approved teachers, a page at a time or --all: new flags first, then changed since your review; revoke removes the status cleanly)
   lumine admin teachers branches suggest | networks | confirm <networkId> --branch <name> [--branch <name>] [--note <text>] | unconfirm <networkId> | set <userId|username> --branch <name> [--note <text>] | clear <userId|username> | apply | list [--branch <name>|none]   (which branch each teacher works at, confirmed by you through the academy networks they use: suggest finds the networks, confirm names their branch (repeat --branch for a building branches share), apply gives teachers the branch most of their actions there point at and lists the unclear ones; set wins over networks)
   lumine admin teachers review <userId> --decision legit|revoke --note <text> [--fingerprint <fp>, required for revoke] | review --all-flagged --expect <id[:fp],...> --note <text>   (record your review of the facts shown; --all-flagged records only the --expect teachers; nothing is recorded if they changed since. A reviewed teacher comes back when its flags or linked accounts change; accounts sharing a network count only when they change a network flag)
-  lumine admin dictionary korean-status | korean-pending [--cursor <time:id>] [--limit <1-100>] | korean-review <reviewed-definitions.json> [--dry-run]   (shared Korean word-bank definitions; daily review, no paid generation)
+  lumine admin dictionary korean-status | korean-pending [--cursor <time:id>] [--limit <1-100>] | korean-review <reviewed-definitions.json> [--confirm]   (shared Korean word-bank definitions; daily review, no paid generation; a preview unless --confirm)
   lumine admin english import <verdicts.json> --pass a|b | adjudicate <file> | add-questions <file> | relevel <file> | mastery <userId> --reason <why> | backfill-distractors | summary | review [--limit <n>] | accept|retire <questionId> | retag <questionId> --skill <code>   (English skill tags and bank upkeep for Grammarbles; content written by Claude Code agents)
   lumine admin reward-review list [--status pending|approved|all] [--cursor <id>] [--json]
   lumine admin cardcraft-review list [--status pending|approved|all] [--cursor <id>] | show <id> | approve|reject|revoke <id> [--reason <text>]
   lumine admin craft seed --build <id> --file <pairs.json> [--confirm] | stats --build <id> [--limit <1-100>] | revise --build <id> --item <id|name> [--why <text>] [--emoji <emoji>] [--category <field>] [--confirm] | revise --build <id> --pair <pairId|a+b> --why <text> [--confirm] | retire --build <id> --item <id|name> --reason <text> [--confirm] | unfizzle --build <id> [--since <iso>] [--pair <a+b>] [--confirm]   (Twinkle.craft curation: dry run without --confirm)
   lumine admin sliding-block status | add --file <levels.json> [--confirm]   (sliding-block-v1 campaign refills, RushHour: dry run without --confirm; the server solves each board and appends it)
-  lumine admin arena queue | paper-queue [--cursor <id>] [--limit <1-100>] | import --dir <paper folder> [--audio audio/<exam>/<paper>] [--live] [--confirm] | status --item <id> --to live|retired|checked --confirm   (Arena's mock-exam bank: import is a validation-only dry run without --confirm; upload audio first with twinkle-api scripts/arena-upload-media.ts)
+  lumine admin arena queue | paper-queue [--cursor <id>] [--limit <1-100>] | import --dir <paper folder> [--audio audio/<exam>/<paper>] [--live] [--confirm] | status --item <id> --to live|retired|checked --confirm | picture-audit [--items <id,id,...> | --cursor <id>] [--limit 1-20] [--renders <dir of <itemId>.png>] [--output <review-list.json>]   (Arena's mock-exam bank; picture-audit is an advisory JEV image review list that never retires or edits items; import is a validation-only dry run without --confirm; upload audio first with twinkle-api scripts/arena-upload-media.ts)
   lumine admin nonogram status | add --file <pictures.json> | retire <key> | restore <key> [--confirm]   (private reviewed pictures; changes are dry runs without --confirm)
   lumine admin build-plans stuck [--days <1-90>] [--all] | recheck <buildId> [<buildId> ...] [--confirm]   (Lumine Build plans stuck on one milestone: runs, Energy vs estimate, gradings, loop-guard state; recheck re-grades the current milestone with today's evaluator, free for the creator, dry run without --confirm)
   lumine admin storage list [--status pending|approved|rejected|all] [--cursor <id>] | show <user-id-or-username> | approve <request-id> [--size <500MB|1GB|2GB|n MB>] [--reason <text>] | reject <request-id> [--reason <text>] | grant <user-id-or-username> --size <500MB|1GB|2GB|n MB> [--reason <text>]
@@ -3383,6 +3400,7 @@ export function printHelp() {
   lumine admin reward-bank report <buildId> [--days 1] [--json]   (question-bank telemetry: generation outcomes, learners, payouts, ladder, questions to review)
   lumine admin owner-trace [--since 2h|30m|3d|<iso>] [--type route,feed-open,scroll-anchor,content-scroll,error,rejection,session,nav-timing,slow-request,stall,page-load,scroll-perf,scroll-frame] [--perf] [--wake] [--path <substring>] [--limit 300] [--json]   (--wake: sessions, 20 s wake profiles, bounded viewport geometry and dropped-event counts after loads or returns; network tags identify the upload network; what the website did on Mikey's own devices: routes with PUSH/POP/REPLACE, Home feed card opens, scroll-anchor restores, content scroll positions, window errors, and performance: tap-to-page timing, API requests over 1 s, main-thread stalls over 200 ms, page load, scroll frame pacing and slow-frame attribution (Long Animation Frame scripts on Chrome, feed card renders on Safari); --perf shows only those; kept 30 days)
   lumine admin roles [--min-level 1] [--limit 50] [--json]   (every user type with its management level and who holds it; admin pages need level 3, achievement points never pass level 2)
+  lumine admin jev-images report [--days 1..30] | switch --area <all|arena_paper|arena_picture|study_record|thumbnail|sdk_decide> --mode on|off [--daily-cap <0-5000>] | decide --area <area> --key <subject key> --decision <decision> [--json]   (JEV image checks: advisory only; per-area health, cost, agreement with final decisions and escalations for the daily run; switch is owner-only and needs no deploy)
   lumine admin jev-routing review --since <unix|ISO> --until <unix|ISO> [--limit 1..20] [--cursor <cursor> | --all --checkpoint <file> [--resume]] [--include-synthetic] [--json]   (bounded frozen evidence for paired disagreements and Auto fallbacks; collection is not review)
   lumine admin comment draft <target> [--type subject|comment|build|aiStory|dailyReflection] [--file <comment.md>] [--review-receipt <review.json>|--reviewed-version <id> --reviewed-via runtime|code] [--review-context <context.json>] [--identity zero|ciel|auto] [--json]
   lumine admin comment reply comment:<id> [--file <reply.md>] [--reviewed-version <id> --reviewed-via runtime|code] [--review-context <context.json>] [--identity zero|ciel|auto] [--json]

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@stage5/lumine",
-  "version": "0.3.75",
+  "version": "0.3.77",
   "description": "Command line tools for launching Lumine builds on Twinkle.",
   "type": "module",
   "bin": {

package/sdk/BUILD_SDK_INDEX.md

@@ -1,8 +1,8 @@
 # Build SDK Index
 
-Version: 1.74.0
-Updated: 2026-10-29
-Generated: 2026-10-28T20:08:43.889Z
+Version: 1.76.0
+Updated: 2026-11-01
+Generated: 2026-11-01T11:22:03.891Z
 
 ## Platform rules
 Each rule below is a way an app breaks once it runs inside Twinkle's sandboxed frame, even when the code itself is correct. They outrank every other guideline: follow them in every change, including small ones, and fix any break of them you see in code you touch.
@@ -32,6 +32,7 @@ Features every app needs whenever they apply. When you build a new app or make a
 - Reward is part of completion: a reward-paying run must stay pending until awarded:true and its canonical receipt (or getReceipt status awarded). Do not show final solved/completed status, advance rewarded progress, or discard finished proof before that. Preserve the exact challenge/proof and acknowledged progress in a durable per-viewer outbox; reconcile getReceipt after a lost reply and retry the same challenge, never inventing a payment. Explain explicit practice, already collected, exhausted approved limits, preview and disclosed zero-value retry outcomes. Use the start response as a conservative elapsed-time reference, and test delayed start, network failure, lost claim reply, reload, day/viewer change and duplicate recovery.
 - This SDK is injected into Build iframes via the Build preview/runtime.
 - Widgets call SDK methods; the parent proxies to the API.
+- When an SDK request never got a reply from Twinkle's server (the device went offline, the network dropped, or the connection was cut first), its rejected error has error.details.isTransportError === true. Its error.status is 500 for older apps, so check this flag before treating a 500 as a server failure. The request may or may not have been applied: retry a write only with the same operationId or requestId, and only after a later user action or decision point, never in a loop. Errors that came back from the server never carry the flag.
 - Data API methods require scoped tokens handled by the parent; some namespaces include write methods.
 - Use Twinkle.privateDb for LOW-frequency durable private per-user state such as preferences, drafts, settings, inventory checkpoints, and saved progress. It is NOT for high-frequency or per-frame/per-tick writes; the server rate-limits writes and returns 429.
 - Match storage to update frequency: privateDb and sharedDb are for LOW-frequency durable state that changes on a user action. NEVER write per-frame/per-tick state to them (camera or cursor position, animation, live movement, presence, autosave every frame/tick). Keep live state in client memory, broadcast realtime/presence via Twinkle.world, and flush only occasional durable snapshots (on an interval or on exit, never per frame). The server enforces per-key write rate limits and returns 429 on excess; never retry-loop a 429.
@@ -553,7 +554,7 @@ const result = await Twinkle.ai.chat({ message, history: chatHistory, systemProm
   - Template values describe types, not answers to copy. All object keys are required and extra keys are rejected, including inside nested objects; {} means an exactly empty object, not a free-form dictionary. A non-empty array uses only its first item as the template for every returned item, with no fixed length; mixed examples do not declare a union. [] allows arbitrary JSON items. A null template accepts any JSON primitive (string, number, boolean or null), but the key is still required. Use 'number' for fractional numbers; 0 and other integer examples require integers. State content requirements in prompt or instructions. GPT routes retain descriptive string examples as field guidance, not enforced enum values.
   - GPT models prefer native JSON Schema output for compatible shapes. Shapes outside the strict provider subset, such as [] with arbitrary items or deeply nested structures, use prompt-based JSON generation with the same final validation. A provider rejection specifically of the native schema triggers one prompt-based fallback; auth, quota, safety and unrelated request failures do not trigger that fallback. Validation retries preserve the original task and instructions. The returned object/result shape and streaming callbacks are unchanged.
   - mode is accepted as an alias for thinkingMode, and mid is accepted as an alias for medium.
-  - Omit model to use the normal Lite/Medium/High routing. Low and Medium use gpt-6-luna; explicit gpt-6-luna accepts Low, Medium or High thinking. Existing apps naming claude-haiku-5-5 now run on gpt-6-luna at the requested thinking level. Explicit claude-sonnet-5-5, gpt-6.1-sol or claude-opus-5-5 still require thinkingMode: 'high'; unknown model IDs reject instead of silently falling back. Retired IDs still work and run on their replacement: claude-sonnet-5 runs claude-sonnet-5-5; gpt-6-sol and gpt-5.6-sol run gpt-6.1-sol; gpt-6-astra, claude-opus-5 and claude-fable-5-1 run claude-opus-5-5.
+  - Omit model to use the normal Lite/Medium/High routing. Low and Medium use gpt-6-luna; explicit gpt-6-luna accepts Low, Medium or High thinking. Existing apps naming claude-haiku-5-5 now run on gpt-6-luna at the requested thinking level. Explicit gpt-6.1-sol requires thinkingMode: 'high' (it reasons at xhigh). Explicit claude-sonnet-5-5 or claude-opus-5-5 think at the requested level (low, medium or high; Opus 5.5's own default is medium). A Claude model's thinking shares one reply with the object, so if a large object fails with code build_ai_output_too_long (cut off at the length limit), offer the player a retry at a lower thinkingMode or a smaller request; a cut-off reply is not charged to the player's AI Energy. Unknown model IDs reject instead of silently falling back. Retired IDs still work and run on their replacement: claude-sonnet-5 runs claude-sonnet-5-5; gpt-6-sol and gpt-5.6-sol run gpt-6.1-sol; gpt-6-astra, claude-opus-5 and claude-fable-5-1 run claude-opus-5-5.
   - thinkingMode low uses GPT-6 Luna with low reasoning and consumes the viewer's AI Energy from confirmed provider usage.
   - thinkingMode medium uses GPT-6 Luna with medium reasoning and consumes normal AI Energy.
   - thinkingMode high without model uses Claude Sonnet 5.5 with high adaptive thinking and consumes high AI Energy. Explicit model: 'gpt-6.1-sol' selects GPT-6.1 Sol with xhigh reasoning at the same High AI Energy tier; model: 'claude-sonnet-5-5' names Sonnet 5.5 directly.
@@ -1403,17 +1404,18 @@ const result = await Twinkle.characters.chat({ character: 'zero', thinkingMode:
   - For oldest-first chronological reads, pass order: 'asc' or order: 'oldest'. sort and direction are accepted as aliases.
   - Supports cursor-based pagination. Newest-first cursors page toward older entries; oldest-first cursors page toward newer entries.
 - async queryEntries(topicName, { limit, pageSize, cursor, order, authorUserId, fields, where, countBy, includeAuthor } = {}) | scopes: sharedDb:read
-  - Returns: { entries?, groups?, cursor, hasMore, queryVersion: 1 }
+  - Returns: { entries?, groups?, cursor, hasMore, queryVersion: 1, truncated? }
   - Read selected shared data fields with server-side creator filtering, scalar matching and grouped counts.
   - Returns the same paginated entries as getEntries, plus queryVersion: 1.
   - authorUserId filters to one entry creator on the server. It does not change read or write permissions.
   - fields selects at most 24 top-level data field names; missing selected fields are null. Omit fields for complete data; [] returns only row metadata.
   - where: { field, equals } filters one top-level data field by exact JSON scalar equality (string, number, boolean or null).
   - Alternatively where: { field, truthy: true } requires a present JSON value other than null, false, zero or an empty string.
-  - countBy groups matching entries by one top-level data field and returns { groups: [{ value, count }], cursor, hasMore, queryVersion: 1 } instead of entries. This avoids transferring documents just to count comments. Groups page in first-entry order; use the returned cursor with the same query. Per-viewer hidden entries are excluded before counting.
+  - countBy groups matching entries by one top-level data field and returns { groups: [{ value, count }], cursor, hasMore, queryVersion: 1 } instead of entries. This avoids transferring documents just to count comments. Groups page in first-entry order; use the returned cursor with the same query. Per-viewer hidden entries are excluded before counting. Counts cover at most the newest 4000 entries of the topic (or of authorUserId's entries in it); when the topic is larger the result has truncated: true, so keep a running tally field instead of recounting a huge topic.
   - includeAuthor: false skips username/profile-photo enrichment for count/index reads; id, topicId, userId and timestamps remain available.
   - Field names use letters, digits and underscores, starting with a letter or underscore, at most 64 characters. No SQL or nested paths.
-  - Keep the same filters/fields/order when passing a cursor. Reads retain app/topic boundaries, published guest opt-ins and per-viewer content visibility. Signed-in queries read canonical writer state.
+  - Keep the same filters/fields/order when passing a cursor. Reads retain app/topic boundaries, published guest opt-ins and per-viewer content visibility. Signed-in entry queries read canonical writer state; grouped counts may trail a just-saved entry by a moment.
+  - queryEntries calls are limited to 60 a minute per viewer (per IP for guests) and 600 a minute per app; a busy app gets HTTP 429 and should retry later rather than loop.
   - Use metadata lists for browsing and getEntriesByIds only when a member opens a full recording/document.
 - async loadMoreEntries(topicName, { limit, pageSize, cursor, order, sort, direction } = {}) | scopes: sharedDb:read
   - Returns: { entries: [{ id, topicId, userId, username, profilePicUrl, data, createdAt, updatedAt }], cursor?, hasMore }
@@ -1572,14 +1574,14 @@ world.updatePresence({ x, y, z, facing });
   - Daily reflections are Daily Question answers shown in the Twinkle feed.
   - Only currently shared public reflections are returned. The response field is the stored shared response version, which may be raw or polished depending on what the author explicitly shared.
   - submittedAt and sharedAt are Unix timestamps (seconds). Use new Date(value * 1000) to convert to JS Date.
-  - dayType is 'word' (Word Day), 'picture' (Picture Day) or null (an ordinary reflection). On a Picture Day the member described a picture instead of reflecting: pictureUrl is the picture they chose (null when they finished with words only), pictureStyle the style they asked for, and response is their description. Show the picture with the description, not the stock question.
+  - dayType is 'word' (Word Day), 'advice' (Advice Day: a Word Day that asks for a piece of advice; response is the advice, or whatever they chose to write instead), 'picture' (Picture Day) or null (an ordinary reflection). On a Picture Day the member described a picture instead of reflecting: pictureUrl is the picture they chose (null when they finished with words only), pictureStyle the style they asked for, and response is their description. Show the picture with the description, not the stock question.
 - async getDailyReflectionsByUser(userId, { cursor, lastId, limit } = {}) | scopes: dailyReflections:read
   - Returns: { reflections: [{ id, userId, response, questionId, submittedAt, sharedAt, username, profilePicUrl, question, dayType, pictureUrl, pictureStyle }], cursor? }
   - Read one user's currently public Daily Reflection shares. response is the exact text the author chose to share publicly, never an unshared raw/private answer.
   - Daily reflections are Daily Question answers shown in the Twinkle feed.
   - Only currently shared public reflections are returned. The response field is the stored shared response version, which may be raw or polished depending on what the author explicitly shared.
   - submittedAt and sharedAt are Unix timestamps (seconds). Use new Date(value * 1000) to convert to JS Date.
-  - dayType is 'word' (Word Day), 'picture' (Picture Day) or null (an ordinary reflection). On a Picture Day the member described a picture instead of reflecting: pictureUrl is the picture they chose (null when they finished with words only), pictureStyle the style they asked for, and response is their description. Show the picture with the description, not the stock question.
+  - dayType is 'word' (Word Day), 'advice' (Advice Day: a Word Day that asks for a piece of advice; response is the advice, or whatever they chose to write instead), 'picture' (Picture Day) or null (an ordinary reflection). On a Picture Day the member described a picture instead of reflecting: pictureUrl is the picture they chose (null when they finished with words only), pictureStyle the style they asked for, and response is their description. Show the picture with the description, not the stock question.
 
 ### Twinkle.privateDb
 - async get(key) | scopes: privateDb:read

package/sdk/LUMINE_ADMIN.md

@@ -1328,7 +1328,7 @@ Birthdate, teacher-signup (`mentor`) and meetup-achievement requests, each with
 
 ```bash
 lumine admin approvals list [--status pending|approved|rejected|all] [--type dob|mentor|meetup]
-lumine admin approvals show <id>
+lumine admin approvals show <id>            # an Arena paper also gets advisory JEV pre-screen notes (see JEV images)
 lumine admin approvals approve|reject <id> [--reason <text>]
 lumine admin teachers audit [--limit 1-100] [--cursor <c>] [--all]
 lumine admin teachers revoke <userId> --reason <text>
@@ -3176,6 +3176,9 @@ unrelated release authority. Keep release evidence and private diagnostics out
 of the public article. Follow the repository's daily website-code update
 procedure and the existing dated-revision contract for an approved correction.
 
+**Plain words (Mikey, 2026-10-30):** write the article for 10-15-year-olds with no technical background. Describe what members can now do or what feels better in everyday words; avoid developer terms and internal names (API, SDK, frame rate, memory, cache, deploy, version numbers, counterproposal and the like). The same applies to the newspaper's front-page piece about it. A published update Subject cannot be edited through the CLI, so check the wording before `--confirm`.
+Model to follow (Mikey, 2026-10-30): the Subject 37274 form in `agent-guides/daily-update-post-template.md`: short headline, one-line greeting from the duty bot, the biggest change first in bold with a link, a short bold-labelled paragraph for each other change, and a closing question.
+
 Use the scoped posting command after composing and reviewing the article:
 
 ```bash
@@ -3997,6 +4000,72 @@ input snapshots as described below.
 See `twinkle-api/JEV_PILOT.md` for configuration,
 the synthetic evaluation step and release checks.
 
+### JEV images (standing duty, every full daily review; added 2026-11-01)
+
+```bash
+lumine admin jev-images report --json                 # last 24 h; --days 1..30
+lumine admin jev-images switch --area all --mode off  # owner kill switch, no deploy
+lumine admin jev-images switch --area arena_picture --mode on --daily-cap 100
+lumine admin jev-images decide --area arena_picture --key arenaItem:10176 --decision keep|fix|retired
+lumine admin arena picture-audit [--items <id,...> | --cursor <id>] [--limit 1-20] [--renders <dir>] --output <review-list.json> --json
+```
+
+JEV image checks (Mikey, November 1) send pictures to JEV (`jev-1.13.0`,
+pinned) with the `TypeSafe-Danger-Zone-Images` opt-in. The vendor marks images
+experimental. **Every answer is advisory:** never the only gate, never a
+child-safety decision and never a reason to pay or withhold a reward (standing
+ruling 11-01). Areas: `arena_paper` (paper-upload pre-screen notes in
+`approvals show`), `arena_picture` (picture-bank audit). `study_record`,
+`thumbnail` and `sdk_decide` are reserved for later steps and stay off.
+
+Each check carries a small coloured square and asks its colour. A wrong or
+unsure colour, or an answer from a different model, means the pictures were
+dropped. The check is retried once (`droppedRetries`), then returns
+`images_dropped`. An unavailable check (off, capped, timeout, provider error,
+dropped images, tables missing) leaves the caller exactly as it was before.
+
+`daily-run gather` saves the report as `jev-images.json`. Give the full report a
+**JEV images** section:
+- per area: mode and source, daily cap and today's use, checks, errors,
+  timeouts, dropped-image retries and give-ups, latency p50/p95, tokens and cost;
+- agreement between advisories and final decisions (`agreed/scored`), every
+  listed disagreement and the flagged items still awaiting a decision;
+- every `escalations` entry. Thresholds (`thresholds` in the JSON): error rate
+  above 20% or timeouts above 10% (at least 5 sent checks), dropped-image retries
+  above 5% of requests or any give-up, daily cost above $0.10 and 3x the previous
+  7-day average, daily cost above $2, agreement below 80% over at least 10
+  decided items, and any check skipped at the cap.
+
+`coverage.status: store_unavailable` means the tables are not migrated: report
+"not deployed", not a quiet day. A failed gather step is unavailable evidence.
+JEV image spend is also in the AI ledger (`surface: jev_images`), so never add
+it to the AI cost total a second time. Agreement is not accuracy: a
+disagreement can be JEV's mistake or the reviewer's, so read the item before
+saying which.
+
+**Paper pre-screen.** For a pending `arenaPaper`, `approvals show <id>` adds a
+`prescreen` block: per page, whether it looks like a test page, legibility, a
+guess at the exam family and printed year, whether it fits its tags, plus
+blank-looking and duplicate pages (plain image arithmetic). Results are saved
+per page, so a second `show` makes no new call (`(saved)`). Add
+`?prescreen=off` to the API read to skip it. The approval criterion is
+unchanged (a real exam paper matching its tags, ruling 10-29): read every page
+yourself. Approve/reject records the final decision for agreement.
+
+**Picture-bank audit.** `arena picture-audit` reads live items with a picture
+and asks fixed questions. For 수능 listening #4 it asks which labelled object
+mismatches the script, whether the keyed object is drawn as briefed, whether
+the ① to ⑤ labels are present, and whether there is stray text. For picture
+choices it asks which picture matches the heard sentence and whether every
+picture is readable. For other single pictures it asks whether the picture is
+readable and whether there is stray text. Picture choices are drawn by the web,
+so pass `--renders <dir>` containing `<itemId>.png` renders of the item as
+printed, for example from an Arena render script. Without one, the item is
+listed under `needsRender`. The command never retires or edits an item. Read
+each `review` item yourself. Record `keep`, `fix` or `retired` with
+`jev-images decide`. Retiring an item through `arena status` records `retired`
+automatically. Fixing or retiring live items needs the usual authorization.
+
 ### Spending by calendar month
 
 ```bash
@@ -5568,7 +5637,7 @@ Bridge Builder qualifies from QR check-ins: 7 different people, or one meetup a
   - The private note and the change history are admin-only; nobody is messaged.
   - It refuses members who left and crews that are not active.
 - `lumine admin meetup funnel [--days <1-90>]` shows views, crews by stage, and check-ins: pairs, how many were on one network or at an academy, and refusals by reason.
-- `lumine admin meetup emails` lists parent emails held for review. Kind `witness` is a child asking a parent to be the grown-up.
+- `lumine admin meetup emails` lists parent emails held for review. Kind `witness` is a child asking a parent to be the grown-up. `lumine admin meetup emails send <id> --fingerprint <revision>` sends one; the fingerprint is the reviewed draft's revision that `emails list` prints, and a send without it is refused. If the draft changed after review, list and review it again. `emails discard <id>` drops one.
 - `lumine admin meetup announce-checkins [--send] [--as zero|ciel]` is about the one-time announcement of the check-in rework in each crew chat. It posts itself when the website with check-ins is out. The messages are pre-written; without `--send` this only shows them. `--send` retries a crew whose post failed. Each crew gets it once.
 - **Held unlocks:** every physical-meetup qualification gets a `meetup` approval item (`lumine admin approvals list --type meetup`). `approvals show <id> --json` includes `meetupEvidence` for all participants. After Mikey decides, use `approvals approve|reject <id> --fingerprint <meetupEvidence.fingerprint>`. Proximity never bypasses review.
 - **Crew completions:** `meetup show <crewId> --json` includes the same owner-only scan packet. After Mikey decides, use `meetup review-completion <crewId> --decision approve|reject --fingerprint <meetupEvidence.fingerprint>`. The decision fails if the shown evidence or proposed attendance changed. New attendees and tier upgrades need a new decision.
@@ -5621,6 +5690,6 @@ Every full management run includes this dedicated review, requested by Mikey Oct
 
 - `lumine admin dictionary korean-status --json`: current generated/reviewed/pending coverage, oldest pending time, outstanding jobs and recent failures.
 - `lumine admin dictionary korean-pending --limit 100 [--cursor <time:id>] --json`: full text, English reference meanings, exact IDs/revisions/source hashes. Continue through `nextCursor` until null. Read and assess every entry; collection alone is not review.
-- `lumine admin dictionary korean-review <reviewed.json> --dry-run --json`, then omit `--dry-run` to apply the same reviewed payload within authorized content-maintenance scope. Accepts an array or `{ "items": [...] }`, 1–100 entries, each `{ "wordId": 123, "word": "example", "expectedRevision": 1, "expectedSourceHash": "<exported SHA-256>", "koreanDefinition": "<checked Korean meaning>", "reason": "<what was checked or corrected>" }`. Keep exact exported identity/version fields; supply a reason even when accepting unchanged text. All entries commit together with a mutation audit. Conflicts require re-export and re-review, never blind retry with new revisions.
+- `lumine admin dictionary korean-review <reviewed.json> --json` previews (validation only, nothing written); then add `--confirm` to apply the same reviewed payload within authorized content-maintenance scope. Accepts an array or `{ "items": [...] }`, 1–100 entries, each `{ "wordId": 123, "word": "example", "expectedRevision": 1, "expectedSourceHash": "<exported SHA-256>", "koreanDefinition": "<checked Korean meaning>", "reason": "<what was checked or corrected>" }`. Keep exact exported identity/version fields; supply a reason even when accepting unchanged text. All entries commit together with a mutation audit. Conflicts require re-export and re-review, never blind retry with new revisions.
 
 Assess common senses, part of speech and inflections, precision and natural Korean for learners. Use your own language judgment and source checks where needed; no paid batch-generation calls. Corrections update the shared word-bank field for all apps; successful reviews mark it reviewed and advance its revision. Future paid generation never overwrites existing text. The final run report includes reviewed/corrected/remaining counts, oldest waiting age, generation/Battery recovery failures, pagination coverage and carryovers. Re-read status after applying. Missing tables/endpoints mean the release is unavailable, not an empty healthy queue.