toolroll 0.9.83 → 0.9.85

package/dist/spend-ui.js

@@ -1,64 +1,99 @@
 /**
- * The Spend page (v105): what agent work cost this month, where it went, and
- * the monthly budgets that alert at 50/80/100 % and (unless set to alert
- * only) stop new work at 100 %. An instance operator's page; budgets change
- * with a step-up.
+ * The Spend page (docs/plans/spend-dashboard.md, slice 1): what agent work cost this month, with API dollars, plan
+ * usage and unknown cost kept apart and never added together, broken down by project, model, role and person, the
+ * runs that cost most, and what isn't recorded here. An instance operator's page. Monthly limits show read-only here
+ * and change on Settings → Spend, with a step-up.
  */
 import { html, postForm, reauth } from "./html.js";
 import { budgetLabel, usd } from "./spend.js";
+import { runHref, taskHref } from "./server/http.js";
 const projectName = (repo) => repo.split("/").filter(Boolean).pop() ?? repo;
 export const SPEND_CSS = `.spend{max-width:960px;min-width:0}.spend-head{display:flex;justify-content:space-between;align-items:baseline;gap:12px;flex-wrap:wrap}.spend-head h1{margin:0}` +
-    `.spend-month{display:flex;gap:10px;align-items:baseline;font-size:.875rem}.spend-total{font-size:1.5rem;font-weight:600;margin:12px 0 2px;font-variant-numeric:tabular-nums}` +
+    `.spend-month{display:flex;gap:10px;align-items:baseline;flex-wrap:wrap;font-size:.875rem;margin:0}` +
     `.spend h2{font-size:.9375rem;margin:24px 0 8px}.spend table{width:100%;border-collapse:collapse;font-size:.8125rem}.spend th,.spend td{text-align:left;padding:6px 8px 6px 0;border-bottom:1px solid var(--border);overflow-wrap:anywhere}` +
-    `.spend th{font-weight:500;color:var(--muted-foreground)}.spend td.n{text-align:right;font-variant-numeric:tabular-nums;white-space:nowrap}.spend-grid{display:grid;grid-template-columns:repeat(auto-fit,minmax(280px,1fr));gap:0 24px}` +
+    `.spend th{font-weight:500;color:var(--muted-foreground)}.spend td.n,.spend th.n{text-align:right;font-variant-numeric:tabular-nums}.spend td.n,.spend th.n{white-space:nowrap}.spend table.lines td:first-child{overflow-wrap:break-word;width:40%}` +
+    `.spend-figures{display:grid;grid-template-columns:repeat(3,minmax(0,1fr));gap:8px;margin:16px 0 4px}.spend-figure{border:1px solid var(--border);border-radius:10px;padding:12px 14px;min-width:0}` +
+    `.spend-figure h2{margin:0;font-size:.8125rem;font-weight:500;color:var(--muted-foreground)}.spend-figure .value{margin:6px 0 0;font-size:1.5rem;font-weight:600;font-variant-numeric:tabular-nums;letter-spacing:-.01em}` +
+    `.spend-figure .meta{margin:4px 0 0}.spend-not-counted ul{margin:0;padding-left:20px;font-size:.8125rem}.spend-not-counted li{margin:2px 0}` +
     `.budget{display:grid;grid-template-columns:minmax(0,1fr) auto;gap:4px 12px;padding:10px 0;border-bottom:1px solid var(--border)}.budget .name{font-weight:500;font-size:.875rem}` +
     `.budget .figures{font-size:.8125rem;font-variant-numeric:tabular-nums;text-align:right}.budget .bar{grid-column:1/-1;height:6px;border-radius:3px;background:var(--muted);overflow:hidden}` +
     `.budget .bar span{display:block;height:100%;background:var(--foreground)}.budget.over .bar span{background:var(--danger)}.budget.over .figures{color:var(--danger)}.budget .meta{grid-column:1/-1}` +
     `.budget details{grid-column:1/-1}.spend form.budget-form{display:grid;grid-template-columns:repeat(auto-fit,minmax(180px,1fr));gap:8px 12px;align-items:end;margin:8px 0}` +
-    `.spend form.budget-form label{display:grid;gap:4px;font-size:.8125rem}.spend form.budget-form .choice{display:flex;gap:8px;align-items:center}.spend form.budget-form button{justify-self:start}`;
-/** The rows of a breakdown: spend and count by a key, biggest first. */
-function breakdown(items, keyOf, top = 12) {
-    const rows = new Map();
-    for (const item of items) {
-        const key = keyOf(item);
-        if (key === null)
-            continue;
-        const row = rows.get(key) ?? { key, microusd: 0, count: 0, unpriced: 0 };
-        row.microusd += item.microusd ?? 0;
-        row.count++;
-        if (item.microusd === null && item.source === "unpriced")
-            row.unpriced++;
-        rows.set(key, row);
-    }
-    return [...rows.values()].sort((a, b) => b.microusd - a.microusd || b.count - a.count).slice(0, top);
-}
-function table(title, rows, name) {
-    if (rows.length === 0)
+    `.spend form.budget-form label{display:grid;gap:4px;font-size:.8125rem}.spend form.budget-form .choice{display:flex;gap:8px;align-items:center}.spend form.budget-form button{justify-self:start}` +
+    `.spend-models dl{display:grid;grid-template-columns:auto minmax(0,1fr);gap:4px 16px;margin:0 0 8px;font-size:.875rem}.spend-models dt{color:var(--muted-foreground)}.spend-models dd{margin:0;overflow-wrap:anywhere}` +
+    `@media(max-width:640px){.spend-figures{grid-template-columns:minmax(0,1fr)}.spend table.lines thead{display:none}.spend table.lines tr{display:grid;grid-template-columns:repeat(3,minmax(0,1fr));gap:2px 12px;padding:8px 0;border-bottom:1px solid var(--border)}` +
+    `.spend table.lines td{border:0;padding:0;white-space:normal}.spend table.lines td:first-child{grid-column:1/-1;font-weight:500;width:auto}.spend table.lines td.n{text-align:left;color:var(--muted-foreground)}.spend table.lines td.n::before{content:attr(data-label);display:block;font-size:.6875rem}}`;
+const ROLE_WORDS = {
+    builder: "Builds", repair: "Repairs", planner: "Plans", reviewer: "Reviews", scout: "Scouting",
+    lead: "Lead chat", chat: "Chat", subagent: "Subagents", flow: "Flows", evals: "Evals",
+};
+/** What this page doesn't record, in plain words (docs/plans/spend-dashboard.md §2.2). */
+export const NOT_COUNTED = [
+    "Sizing a new task (Claude or OpenRouter)",
+    "Memory checks that read finished chat sessions",
+    "Coding sessions in Code",
+    "A flow draft that failed",
+    "A Sort step that failed before saving its answer",
+];
+/** Dollars for the page: a positive amount under a cent reads "<$0.01", never a false $0. */
+export const money = (microusd) => microusd > 0 && microusd < 10_000 ? "<$0.01" : usd(microusd);
+const each = (n, one, many = `${one}s`) => `${n} ${n === 1 ? one : many}`;
+/** A line's plan usage in words: the reported usage, or that none was reported. Never $0 for unreported usage. */
+const usageWords = (line) => line.usageCount === 0 ? "—" : line.usageMicrousd > 0 ? `${money(line.usageMicrousd)}${line.usageUnreported > 0 ? ` + ${line.usageUnreported} not reported` : ""}` : "not reported";
+/** A line's unknown cost in words: how many, and a saved charge as an estimate. Never $0. */
+const unknownWords = (line) => {
+    const counted = line.estimatedMicrousd > 0 ? `${money(line.estimatedMicrousd)} estimated` : "";
+    return line.unknown > 0 ? `${line.unknown}${counted === "" ? "" : ` · ${counted}`}` : counted === "" ? "—" : counted;
+};
+const apiWords = (line) => line.apiMicrousd > 0 ? money(line.apiMicrousd) : "—";
+function linesTable(title, lines, name, top = 12, detail = () => "") {
+    if (lines.length === 0)
         return "";
-    return html `<section><h2>${title}</h2><table><tbody>${rows.map(row => html `<tr><td>${name(row.key)}</td><td class="n">${row.count}</td><td class="n">${usd(row.microusd)}${row.unpriced > 0 ? html ` <span class="meta">+${row.unpriced} unpriced</span>` : ""}</td></tr>`)}</tbody></table></section>`;
+    return html `<section><h2>${title}</h2><table class="lines"><thead><tr><th></th><th class="n">API dollars</th><th class="n">Plan usage</th><th class="n">Unknown</th></tr></thead><tbody>${lines.slice(0, top).map(line => html `<tr><td>${name(line.key)}${detail(line) === "" ? "" : html ` <span class="meta">${detail(line)}</span>`}</td><td class="n" data-label="API dollars" data-amount-kind="api">${apiWords(line)}</td><td class="n" data-label="Plan usage" data-amount-kind="subscription">${usageWords(line)}</td><td class="n" data-label="Unknown" data-amount-kind="unknown">${unknownWords(line)}</td></tr>`)}</tbody></table></section>`;
+}
+/** A monthly limit's row; `editor` is Settings → Spend's change form, nothing on the Spend page. */
+function limitRow(budget, nameOfSubagent, editor) {
+    const width = Math.min(100, Math.max(0, budget.percent));
+    const over = budget.spentMicrousd >= budget.limitMicrousd;
+    const label = budgetLabel(budget, budget.scope === "subagent" ? nameOfSubagent(budget.key) : undefined).replace(/'s$/, "");
+    return html `<div class="budget${over ? " over" : ""}" data-budget="${budget.id}"><span class="name">${label}</span><span class="figures">${money(budget.spentMicrousd)} of ${usd(budget.limitMicrousd)} · ${budget.percent}%</span><span class="bar" aria-hidden="true"><span style="width:${width}%"></span></span><span class="meta">${over && budget.hardStop ? "Used up: new API work waits until next month or a higher limit." : budget.hardStop ? "Pauses new API work at 100%." : "Alerts only."}${budget.unpriced > 0 ? ` ${budget.unpriced} without a price.` : ""}</span>${editor}</div>`;
 }
 export function spendHtml(view, notice) {
     const note = notice.problem ? html `<p class="problem" role="alert">${notice.problem}</p>` : notice.said ? html `<p role="status">${notice.said}</p>` : "";
-    const total = view.items.reduce((sum, item) => sum + (item.microusd ?? 0), 0);
-    const unpriced = view.items.filter(item => item.microusd === null && (item.tokensIn !== null || item.kind !== "run")).length;
-    const counts = { run: view.items.filter(item => item.kind === "run").length, subagent: view.items.filter(item => item.kind === "subagent").length, chat: view.items.filter(item => item.kind === "chat").length, sort: view.items.filter(item => item.kind === "sort").length };
-    const parts = [`${counts.run} ${counts.run === 1 ? "run" : "runs"}`, ...(counts.subagent > 0 ? [`${counts.subagent} subagent turns`] : []), ...(counts.chat > 0 ? [`${counts.chat} chat turns`] : []), ...(counts.sort > 0 ? [`${counts.sort} ${counts.sort === 1 ? "sort" : "sorts"}`] : [])];
+    const { totals } = view.report;
     const nameOfSubagent = (key) => view.subagentNames.get(Number(key)) ?? `Subagent ${key}`;
-    const budgets = view.budgets.map(budget => {
-        const width = Math.min(100, Math.max(0, budget.percent));
-        const over = budget.spentMicrousd >= budget.limitMicrousd;
-        const label = budgetLabel(budget, budget.scope === "subagent" ? nameOfSubagent(budget.key) : undefined).replace(/'s$/, "");
-        return html `<div class="budget${over ? " over" : ""}" data-budget="${budget.id}"><span class="name">${label}</span><span class="figures">${usd(budget.spentMicrousd)} of ${usd(budget.limitMicrousd)} · ${budget.percent}%</span><span class="bar" aria-hidden="true"><span style="width:${width}%"></span></span><span class="meta">${over && budget.hardStop ? "Used up: new API work waits until next month or a higher budget." : budget.hardStop ? "Stops API work at 100%." : "Alerts only."}${budget.unpriced > 0 ? ` ${budget.unpriced} unpriced` : ""}</span><details><summary>Change</summary>${postForm("/spend/budget", html `<label>Monthly limit (US dollars)<input type="number" name="usd" min="1" step="1" value="${Math.round(budget.limitMicrousd / 1_000_000)}" required></label><label class="choice"><input type="checkbox" name="stop" value="1"${budget.hardStop ? html ` checked` : ""}> Stop new work at 100%</label>${reauth(html `<label>Your Toolroll password<input type="password" name="password" autocomplete="current-password"></label>`)}<button type="submit" name="action" value="save">Save</button> <button type="submit" name="action" value="remove">Remove</button>`, { attrs: { class: "budget-form" }, hidden: { target: `${budget.scope}:${budget.key}` } })}</details></div>`;
-    });
+    const usageValue = totals.usageCount === 0 ? "None" : totals.usageMicrousd > 0 ? money(totals.usageMicrousd) : "Not reported";
+    const usageMeta = totals.usageCount === 0 ? "No plan usage recorded"
+        : totals.usageMicrousd > 0 ? `of usage at API prices${totals.usageUnreported > 0 ? ` · ${each(totals.usageUnreported, "piece")} of work not reported` : ""}` : `${each(totals.usageCount, "piece")} of work`;
+    const unknownValue = totals.unknown === 0 ? "None" : String(totals.unknown);
+    const unknownMeta = [totals.unknown > 0 ? `${totals.unknown === 1 ? "piece" : "pieces"} of work with billing not proved or cost not recorded` : "Nothing with an unknown cost",
+        ...(totals.estimatedMicrousd > 0 ? [`counted as ${money(totals.estimatedMicrousd)} (estimated)`] : [])].join(" · ");
+    const figures = html `<section class="spend-figures" aria-label="This month">\
+<div class="spend-figure" data-amount-kind="api" data-microusd="${totals.apiMicrousd}"><h2>API dollars</h2><p class="value">${money(totals.apiMicrousd)}</p><p class="meta">Recorded charges to API keys</p></div>\
+<div class="spend-figure" data-amount-kind="subscription" data-microusd="${totals.usageMicrousd}" data-unreported="${totals.usageUnreported}"><h2>Plan usage</h2><p class="value">${usageValue}</p><p class="meta">${usageMeta}</p></div>\
+<div class="spend-figure" data-amount-kind="unknown" data-count="${totals.unknown}" data-estimated-microusd="${totals.estimatedMicrousd}"><h2>Unknown</h2><p class="value">${unknownValue}</p><p class="meta">${unknownMeta}</p></div></section>`;
+    const limits = view.budgets === null ? "" : html `<section><h2>Monthly limits</h2>${view.budgets.length === 0 ? html `<p class="meta">No monthly limits. <a href="/settings/spend">Set a limit</a></p>`
+        : html `${view.budgets.map(budget => limitRow(budget, nameOfSubagent, ""))}<p class="meta"><a href="/settings/spend">Change limits</a> · Evals never count toward a limit.</p>`}${view.windows}</section>`;
+    const runs = view.report.topRuns.length === 0 ? "" : html `<section><h2>Most expensive runs</h2><table><thead><tr><th>Task</th><th>Run</th><th>Model</th><th class="n">API dollars</th></tr></thead><tbody>${view.report.topRuns.map(run => html `<tr data-run="${run.runId}"><td><a href="${taskHref(run.taskId)}">${run.taskId}</a>${run.project === null ? "" : html ` <span class="meta">${projectName(run.project)}</span>`}</td><td><a href="${runHref(run.runId)}">${ROLE_WORDS[run.role]} ${run.runId}</a></td><td>${run.provider} · ${run.model}</td><td class="n">${money(run.microusd)}</td></tr>`)}</tbody></table></section>`;
+    const notCounted = html `<section class="spend-not-counted" data-not-counted><h2>Not counted here</h2><ul>${NOT_COUNTED.map(one => html `<li>${one}</li>`)}</ul></section>`;
+    return html `<article class="spend"><div class="spend-head"><h1>Spend</h1><p class="spend-month"><a href="/spend?month=${view.previous}">← ${view.previous}</a><strong>${view.month}</strong>${view.next === null ? "" : html `<a href="/spend?month=${view.next}">${view.next} →</a>`}<span class="meta">UTC month</span><a href="/spend?month=${view.month}&amp;format=csv" download>CSV</a></p></div>${note}${figures}${limits}${linesTable("By project", view.report.byProject, projectName)}${linesTable("By model", view.report.byModel, key => key, 12, line => line.chosen.length === 0 ? "" : `chosen as ${line.chosen.join(", ")}`)}${linesTable("By role", view.report.byRole, key => ROLE_WORDS[key] ?? key)}${linesTable("By person", view.report.byPerson, key => key)}${runs}${notCounted}</article>`;
+}
+/** Settings → Spend: the monthly limits editor (moved from the Spend page) and a summary of the models in use. */
+export function spendSettingsHtml(view, notice) {
+    const note = notice.problem ? html `<p class="problem" role="alert">${notice.problem}</p>` : notice.said ? html `<p role="status">${notice.said}</p>` : "";
+    const nameOfSubagent = (key) => view.subagentNames.get(Number(key)) ?? `Subagent ${key}`;
+    const password = reauth(html `<label>Your Toolroll password<input type="password" name="password" autocomplete="current-password"></label>`);
+    const budgets = view.budgets.map(budget => limitRow(budget, nameOfSubagent, html `<details><summary>Change</summary>${postForm("/spend/budget", html `<label>Monthly limit (US dollars)<input type="number" name="usd" min="1" step="1" value="${Math.round(budget.limitMicrousd / 1_000_000)}" required></label><label class="choice"><input type="checkbox" name="stop" value="1"${budget.hardStop ? html ` checked` : ""}> Pause new API work at 100%</label>${password}<button type="submit" name="action" value="save">Save</button> <button type="submit" name="action" value="remove">Remove</button>`, { attrs: { class: "budget-form" }, hidden: { target: `${budget.scope}:${budget.key}` } })}</details>`));
     const groups = ["Everything", "Projects", "People", "Subagents"];
     const options = groups.map(group => {
         const members = view.targets.filter(one => one.group === group);
         return members.length === 0 ? "" : html `<optgroup label="${group}">${members.map(one => html `<option value="${one.value}">${one.label}</option>`)}</optgroup>`;
     });
-    const add = html `<details${view.budgets.length === 0 ? html ` open` : ""}><summary>Add a budget</summary>${postForm("/spend/budget", html `<label>For<select name="target" required>${options}</select></label><label>Monthly limit (US dollars)<input type="number" name="usd" min="1" step="1" required></label><label class="choice"><input type="checkbox" name="stop" value="1" checked> Stop new work at 100%</label>${reauth(html `<label>Your Toolroll password<input type="password" name="password" autocomplete="current-password"></label>`)}<button type="submit" name="action" value="save">Add budget</button>`, { attrs: { class: "budget-form" } })}</details>`;
-    return html `<article class="spend"><div class="spend-head"><h1>Spend</h1><p class="spend-month"><a href="/spend?month=${view.previous}">← ${view.previous}</a><strong>${view.month}</strong>${view.next === null ? "" : html `<a href="/spend?month=${view.next}">${view.next} →</a>`}<a href="/spend?month=${view.month}&amp;format=csv" download>CSV</a></p></div>${note}<p class="spend-total" data-spend-total="${total}">${usd(total)}</p><p class="meta">${parts.join(" · ")}${unpriced > 0 ? ` · ${unpriced} unpriced (no reported cost or catalogue price)` : ""} · UTC month</p><section><h2>Budgets</h2>${budgets.length === 0 ? html `<p class="meta">No budgets yet.</p>` : budgets}${add}</section><div class="spend-grid">${table("By project", breakdown(view.items, item => item.project), projectName)}${table("By person", breakdown(view.items, item => item.person), key => key)}${table("By subagent", breakdown(view.items, item => item.subagent === null ? null : String(item.subagent)), nameOfSubagent)}${table("By model", breakdown(view.items, item => `${item.provider}${item.model === null ? "" : ` · ${item.model}`}`), key => key)}</div><p class="meta">Subscription work is $0; its limits are on Tasks. API work is what the provider reported, or its tokens at the prices in Settings → Models.</p></article>`;
+    const add = html `<details${view.budgets.length === 0 ? html ` open` : ""}><summary>Add a limit</summary>${postForm("/spend/budget", html `<label>For<select name="target" required>${options}</select></label><label>Monthly limit (US dollars)<input type="number" name="usd" min="1" step="1" required></label><label class="choice"><input type="checkbox" name="stop" value="1" checked> Pause new API work at 100%</label>${password}<button type="submit" name="action" value="save">Add limit</button>`, { attrs: { class: "budget-form" } })}</details>`;
+    const models = html `<section class="spend-models"><h2>Models</h2>${view.models.length === 0 ? "" : html `<dl>${view.models.map(one => html `<dt>${one.role}</dt><dd>${one.model}</dd>`)}</dl>`}<p><a href="/settings/models">Change models</a></p></section>`;
+    return html `<article class="spend"><div class="spend-head"><h1>Spend</h1><p class="spend-month"><a href="/spend">See this month's spend</a></p></div>${note}<section><h2>Monthly limits</h2>${budgets.length === 0 ? html `<p class="meta">No monthly limits yet.</p>` : budgets}${add}</section>${models}</article>`;
 }
-/** One row per piece of spend, for a spreadsheet. */
+/** One row per piece of spend, for a spreadsheet (the command line's `spend --csv`). */
 export function spendCsv(items, subagentNames) {
     const cell = (value) => {
         const text = value === null || value === undefined ? "" : String(value);

package/dist/store.d.ts

@@ -1,3 +1,4 @@
+import { type FeedbackImage } from "./result-review.js";
 import { type WritesMode } from "./writes-mode.js";
 import { type CheckAccess } from "./check-access.js";
 import { type ProjectSandbox } from "./project-sandbox.js";
@@ -139,6 +140,18 @@ export declare const V141_ADDED_COLUMNS: Readonly<Record<string, Readonly<Record
     definition: string;
     saved: string;
 }>>>>;
+/** v142 (youiyoux-intake.ts): youiyoux change requests as tasks. `youiyoux_intake` is one row per project the intake
+ * has looked at: a person's on/off choice (`enabled` NULL: automatic, on while the project uses youiyoux) and the last
+ * pass's answer (whether the project uses youiyoux, how many request files couldn't be read, and the problem, if any).
+ * `youiyoux_request` is one row per request taken, keyed by project and request id: the task it became (NULL: left
+ * out, `note` says why), never filed again, the status last written beside it, with the console address its links
+ * named ('' for none), and where the person pointed (route, component, file:line), cleaned, for the task page. An
+ * options request (`kind`) also keeps the options file its agent writes (`proposal`, p-<its hex>), set when filed and
+ * never read from the request again: whether it went to the project's main checkout from which result (`proposal_state`,
+ * `proposal_run`, and why not in `proposal_note`; `taken`: a file was already there, so it was left and is never read
+ * for a decision), the digest of what was copied apart from what a decision changes (`proposal_digest`), and what a
+ * person decided on it in youiyoux's hub (`decided`, `decided_note`: what Toolroll did about it). New tables only. */
+export declare const V142_SCHEMA = "\nCREATE TABLE IF NOT EXISTS youiyoux_intake (\n  repo        TEXT PRIMARY KEY,\n  enabled     INTEGER CHECK (enabled IS NULL OR enabled IN (0, 1)),\n  uses        INTEGER NOT NULL DEFAULT 0 CHECK (uses IN (0, 1)),\n  changed_by  TEXT,\n  changed_at  TEXT,\n  checked_at  TEXT,\n  invalid     INTEGER NOT NULL DEFAULT 0 CHECK (invalid >= 0),\n  problem     TEXT\n);\nCREATE TABLE IF NOT EXISTS youiyoux_request (\n  repo          TEXT NOT NULL,\n  request       TEXT NOT NULL CHECK (length(request) = 12 AND request GLOB 'r-[0-9a-f][0-9a-f][0-9a-f][0-9a-f][0-9a-f][0-9a-f][0-9a-f][0-9a-f][0-9a-f][0-9a-f]'),\n  task_id       TEXT,\n  note          TEXT,\n  filed_at      TEXT NOT NULL,\n  status        TEXT CHECK (status IS NULL OR status IN ('queued','needs-you','building','ready','done','failed','stopped')),\n  detail        TEXT,\n  status_at     TEXT,\n  written_at    TEXT,\n  written_base  TEXT,\n  write_problem TEXT,\n  route         TEXT,\n  component     TEXT,\n  source_at     TEXT,\n  kind          TEXT NOT NULL DEFAULT 'change' CHECK (kind IN ('change','options')),\n  proposal      TEXT CHECK (proposal IS NULL OR (length(proposal) = 12 AND proposal GLOB 'p-[0-9a-f][0-9a-f][0-9a-f][0-9a-f][0-9a-f][0-9a-f][0-9a-f][0-9a-f][0-9a-f][0-9a-f]')),\n  proposal_state TEXT CHECK (proposal_state IS NULL OR proposal_state IN ('copied','taken','missing','unsafe','retry')),\n  proposal_digest TEXT CHECK (proposal_digest IS NULL OR (length(proposal_digest) = 64 AND proposal_digest NOT GLOB '*[^0-9a-f]*')),\n  proposal_run  INTEGER,\n  proposal_note TEXT,\n  proposal_at   TEXT,\n  decided       TEXT CHECK (decided IS NULL OR decided IN ('chosen','dismissed')),\n  decided_at    TEXT,\n  decided_note  TEXT,\n  PRIMARY KEY (repo, request),\n  UNIQUE (task_id),\n  CHECK ((kind = 'options') = (proposal IS NOT NULL)),\n  CHECK (proposal_state IS NULL OR kind = 'options'),\n  CHECK (decided IS NULL OR coalesce(proposal_state = 'copied' AND proposal_digest IS NOT NULL, 0))\n);\n";
 /** A project's "Show commands in the live view" (live-detail.ts): absent means off. */
 export declare const LIVE_DETAIL_SCHEMA = "\nCREATE TABLE IF NOT EXISTS live_detail_setting (\n  repo       TEXT PRIMARY KEY,\n  commands   INTEGER NOT NULL CHECK (commands IN (0,1)),\n  updated_by TEXT NOT NULL,\n  updated_at TEXT NOT NULL\n);\n-- Every run a steering note reached, kept as it happens (live-notes.ts): a\n-- note's own attached/mailed fields move to the next attempt, this does not.\nCREATE TABLE IF NOT EXISTS steer_note_run (\n  note INTEGER NOT NULL REFERENCES task_steer(id) ON DELETE CASCADE,\n  run  INTEGER NOT NULL REFERENCES run(id) ON DELETE CASCADE,\n  how  TEXT NOT NULL CHECK (how IN ('attached','mailed','read')),\n  at   TEXT NOT NULL,\n  PRIMARY KEY (note, run, how)\n);\nCREATE INDEX IF NOT EXISTS steer_note_run_by_run ON steer_note_run (run, note);\n";
 export declare const CHAT_APPROVAL_SCHEMA = "\nCREATE TABLE IF NOT EXISTS chat_approval_setting (\n  approver             TEXT NOT NULL,\n  scope                TEXT NOT NULL,\n  enabled              INTEGER NOT NULL CHECK (enabled IN (0,1)),\n  full_access          INTEGER NOT NULL DEFAULT 0 CHECK (full_access IN (0,1)),\n  attempt_cap_microusd INTEGER CHECK (attempt_cap_microusd IS NULL OR attempt_cap_microusd >= 0),\n  generation           INTEGER NOT NULL,\n  digest               TEXT NOT NULL,\n  updated_by           TEXT NOT NULL,\n  updated_at           TEXT NOT NULL,\n  PRIMARY KEY (approver, scope)\n);\n";
@@ -219,7 +232,7 @@ export type SealedLedgerEntry = LedgerEntry & {
         hash: string;
     } | null;
 };
-export declare const SCHEMA_VERSION = 141;
+export declare const SCHEMA_VERSION = 143;
 /** v118: the tables merged into `credential`, in the order they move (a person's API tokens keep their ids first). */
 export declare const V118_MERGED_TABLES: Readonly<Record<string, CredentialKind>>;
 /**
@@ -376,6 +389,11 @@ export declare const V140_ADDED_COLUMNS: Readonly<Record<string, Readonly<Record
     definition: string;
     saved: string;
 }>>>>;
+/** v143: optional screenshot context on result feedback; existing feedback stays unchanged (saved rows read NULL). */
+export declare const V143_ADDED_COLUMNS: Readonly<Record<string, Readonly<Record<string, {
+    definition: string;
+    saved: string;
+}>>>>;
 /**
  * v135: one approval per release (docs/plans/release-once.md). `release_authority` is the single source of truth for a
  * release a person approved: one row per generation, changed only by compare-and-swap on `rev`, with a lease whose
@@ -2406,8 +2424,9 @@ export declare class Store {
     sealScopeApproval(taskId: string, by: string, now: Date, mutation?: Mutation, basis?: {
         kind: "mode" | "chat" | "grant" | "schedule" | "auto-check" | "auto-green";
         modeDigest: string;
-        /** A chat seal of a deploy gate: the release card it came from (chat-management.md §0a.5). */
-        card?: "release";
+        /** A chat seal of a deploy gate: the release card it came from (chat-management.md §0a.5). A chat seal of a task
+         * filed from outside text: `terms`, and the digest of every word the card showed (chat-terms.ts). */
+        card?: "release" | "terms";
         cardDigest?: string;
     }, approverKind?: ApproverKind): boolean;
     /** Whether this task's scope carries a LIVE seal: approved, and the
@@ -3207,6 +3226,7 @@ export declare class Store {
         author: string;
         /** Ingested comments carry their origin id — the idempotency key (M8.17). */
         sourceKey?: string;
+        image?: FeedbackImage | null;
     }, now: Date): number | null;
     /** Live (unsuperseded, unconsumed) comments on a run's terminal diff. */
     liveDiffComments(runId: number): DiffComment[];
@@ -3405,6 +3425,15 @@ export declare class Store {
         entry: number;
         sourceJson: string;
     } | null;
+    /** v142: where a task filed from a youiyoux change or options request came from, as kept when it was filed
+     * (youiyoux-intake.ts; a revision reads its first version's): the request, its kind, and where the person pointed. Null for every other task. */
+    youiyouxOriginOf(taskId: string): {
+        request: string;
+        kind: "change" | "options";
+        route: string | null;
+        component: string | null;
+        at: string | null;
+    } | null;
     /**
      * Seal a revision in ONE transaction (Codex M5-M8 audit, C-3; contract
      * handoff task 2): the SOURCE BINDING is proven here, against live rows,
@@ -7376,6 +7405,7 @@ export type DiffComment = {
     id: number;
     artifact: number;
     artifactSha: string;
+    image?: FeedbackImage | null;
     run: number;
     path: string | null;
     line: number | null;
@@ -8021,3 +8051,16 @@ export declare function sealStoreMoneyMethods(prototype: object): void;
  * when the prototype's value is the very reference recorded at the seal. `prototype` is Store's own unless a test
  * says otherwise; either way nothing but the recorded references is ever installed. */
 export declare function lockStoreMoneyMethods(store: object, prototype?: object): void;
+/** Takes a saved note's screenshot off without losing the note or its history (v143). Fail closed, in one write
+ * transaction: the note must be live and unconsumed on this run, its screenshot must be genuinely unusable right now
+ * (`unusable` is result-actions.ts feedbackImageProblem, re-read inside the transaction, never the page's say-so), and
+ * the change is recorded in the action ledger under the person who made it. The note is superseded by an exact
+ * imageless copy; the original stays in history. The caller has already proved the person may request changes on
+ * this run (the same authority that seals any saved note into a revision); that standing is re-proved here too. */
+export declare function dropFeedbackImage(store: Store, runId: number, commentId: number, actor: string, unusable: (image: FeedbackImage) => string | null, now: Date): {
+    ok: true;
+    id: number;
+} | {
+    ok: false;
+    reason: "not-found" | "image-usable" | "not-authorized";
+};

package/dist/store.js

@@ -1,3 +1,5 @@
+import { verifyResultImage } from "./chat-evidence.js";
+import { parseFeedbackImage } from "./result-review.js";
 import { mintSecret } from "./secret-mint.js";
 import { WRITES_DEFAULT } from "./writes-mode.js";
 import { checkAccessOf, widerThan } from "./check-access.js";
@@ -107,6 +109,8 @@ import { configBase, envValue, namedPath } from "./names.js";
 import { PULL_REQUEST_SCHEMA } from "./pull-request-schema.js";
 import { chatTurnAmountOf, combineReportedModels, providerTurnsOf, reportedCostUsdOf, reportedModelOf, runAmountOf } from "./reported-usage.js";
 import { usageOf } from "./run-efficiency.js";
+import { YOUIYOUX_FILED_VIA } from "./contracts/youiyoux-request.js";
+import { shownTermsDigest } from "./chat-terms.js";
 // PR #263 follow-up: the built-ins the Store money seal uses, captured as this module is evaluated, so code that later
 // replaces `Object.defineProperty` and the like can't fool the seal or the lock (lockStoreMoneyMethods refuses when
 // they've been replaced). The four sealed method references are recorded once, at the seal, in SEALED_MONEY_METHODS.
@@ -717,6 +721,60 @@ export const V141_ADDED_COLUMNS = Object.freeze({
     },
     chat_turn: { billing_reported: { definition: "TEXT CHECK (billing_reported IS NULL OR billing_reported IN ('subscription','api-key'))", saved: "NULL" } },
 });
+/** v142 (youiyoux-intake.ts): youiyoux change requests as tasks. `youiyoux_intake` is one row per project the intake
+ * has looked at: a person's on/off choice (`enabled` NULL: automatic, on while the project uses youiyoux) and the last
+ * pass's answer (whether the project uses youiyoux, how many request files couldn't be read, and the problem, if any).
+ * `youiyoux_request` is one row per request taken, keyed by project and request id: the task it became (NULL: left
+ * out, `note` says why), never filed again, the status last written beside it, with the console address its links
+ * named ('' for none), and where the person pointed (route, component, file:line), cleaned, for the task page. An
+ * options request (`kind`) also keeps the options file its agent writes (`proposal`, p-<its hex>), set when filed and
+ * never read from the request again: whether it went to the project's main checkout from which result (`proposal_state`,
+ * `proposal_run`, and why not in `proposal_note`; `taken`: a file was already there, so it was left and is never read
+ * for a decision), the digest of what was copied apart from what a decision changes (`proposal_digest`), and what a
+ * person decided on it in youiyoux's hub (`decided`, `decided_note`: what Toolroll did about it). New tables only. */
+export const V142_SCHEMA = `
+CREATE TABLE IF NOT EXISTS youiyoux_intake (
+  repo        TEXT PRIMARY KEY,
+  enabled     INTEGER CHECK (enabled IS NULL OR enabled IN (0, 1)),
+  uses        INTEGER NOT NULL DEFAULT 0 CHECK (uses IN (0, 1)),
+  changed_by  TEXT,
+  changed_at  TEXT,
+  checked_at  TEXT,
+  invalid     INTEGER NOT NULL DEFAULT 0 CHECK (invalid >= 0),
+  problem     TEXT
+);
+CREATE TABLE IF NOT EXISTS youiyoux_request (
+  repo          TEXT NOT NULL,
+  request       TEXT NOT NULL CHECK (length(request) = 12 AND request GLOB 'r-[0-9a-f][0-9a-f][0-9a-f][0-9a-f][0-9a-f][0-9a-f][0-9a-f][0-9a-f][0-9a-f][0-9a-f]'),
+  task_id       TEXT,
+  note          TEXT,
+  filed_at      TEXT NOT NULL,
+  status        TEXT CHECK (status IS NULL OR status IN ('queued','needs-you','building','ready','done','failed','stopped')),
+  detail        TEXT,
+  status_at     TEXT,
+  written_at    TEXT,
+  written_base  TEXT,
+  write_problem TEXT,
+  route         TEXT,
+  component     TEXT,
+  source_at     TEXT,
+  kind          TEXT NOT NULL DEFAULT 'change' CHECK (kind IN ('change','options')),
+  proposal      TEXT CHECK (proposal IS NULL OR (length(proposal) = 12 AND proposal GLOB 'p-[0-9a-f][0-9a-f][0-9a-f][0-9a-f][0-9a-f][0-9a-f][0-9a-f][0-9a-f][0-9a-f][0-9a-f]')),
+  proposal_state TEXT CHECK (proposal_state IS NULL OR proposal_state IN ('copied','taken','missing','unsafe','retry')),
+  proposal_digest TEXT CHECK (proposal_digest IS NULL OR (length(proposal_digest) = 64 AND proposal_digest NOT GLOB '*[^0-9a-f]*')),
+  proposal_run  INTEGER,
+  proposal_note TEXT,
+  proposal_at   TEXT,
+  decided       TEXT CHECK (decided IS NULL OR decided IN ('chosen','dismissed')),
+  decided_at    TEXT,
+  decided_note  TEXT,
+  PRIMARY KEY (repo, request),
+  UNIQUE (task_id),
+  CHECK ((kind = 'options') = (proposal IS NOT NULL)),
+  CHECK (proposal_state IS NULL OR kind = 'options'),
+  CHECK (decided IS NULL OR coalesce(proposal_state = 'copied' AND proposal_digest IS NOT NULL, 0))
+);
+`;
 /** A project's "Show commands in the live view" (live-detail.ts): absent means off. */
 export const LIVE_DETAIL_SCHEMA = `
 CREATE TABLE IF NOT EXISTS live_detail_setting (
@@ -1030,7 +1088,11 @@ const REGISTERED_AT_FILING = "again, as it was filed";
 // v141 adds, and changes no saved row: the eval set's records (docs/plans/evals-nightly.md, part C) — campaigns,
 // attempts, each attempt's provider dispatches, the baseline pin and eval debt (V141_SCHEMA) — and how a run's or chat
 // request's billing was known (V141_ADDED_COLUMNS; saved rows NULL: unknown).
-export const SCHEMA_VERSION = 141;
+// v142 adds, and changes no saved row: youiyoux change requests as tasks (V142_SCHEMA, new tables only) — each
+// project's intake choice and last answer, and each request taken, with the task it became.
+// v143 adds, and changes no saved row: optional exact-screenshot context on result feedback
+// (diff_comment.image_json, V143_ADDED_COLUMNS; saved notes read NULL and keep their file/line target).
+export const SCHEMA_VERSION = 143;
 /** v118: the tables merged into `credential`, in the order they move (a person's API tokens keep their ids first). */
 export const V118_MERGED_TABLES = Object.freeze({ api_token: "person", coordinator_credential: "coordinator", lead_credential: "lead" });
 /** The foreign keys that named a merged table, exactly as their DDL wrote them; each names `credential(id)` instead. */
@@ -1163,7 +1225,7 @@ const V115_DROPPED_REFERENCES = /\s+REFERENCES (?:contestant|contest|tournament_
  * unchanged), and adds the nullable column in V125_ADDED_COLUMNS, checked the same way. v126 only adds a new table
  * (task_source) and the columns in V126_ADDED_COLUMNS (null or 0), checked the same way.
  */
-export const UPDATE_SAFE_MIGRATIONS = Object.freeze([108, 109, 110, 111, 112, 113, 114, 115, 116, 117, 118, 119, 120, 121, 122, 123, 124, 125, 126, 127, 128, 129, 130, 131, 132, 133, 134, 135, 136, 137, 138, 139, 140, 141]);
+export const UPDATE_SAFE_MIGRATIONS = Object.freeze([108, 109, 110, 111, 112, 113, 114, 115, 116, 117, 118, 119, 120, 121, 122, 123, 124, 125, 126, 127, 128, 129, 130, 131, 132, 133, 134, 135, 136, 137, 138, 139, 140, 141, 142, 143]);
 /** v119: the columns it adds, by table, with the value every row saved before it reads (toolroll-update's HISTORY_RULES). */
 export const V119_ADDED_COLUMNS = Object.freeze({
     task_ref: { planning_generation: { definition: "INTEGER NOT NULL DEFAULT 0", saved: "0" } },
@@ -1299,6 +1361,10 @@ export const V140_ADDED_COLUMNS = Object.freeze({
         reported_cost_usd: { definition: "REAL CHECK (reported_cost_usd IS NULL OR reported_cost_usd >= 0)", saved: "NULL" },
     },
 });
+/** v143: optional screenshot context on result feedback; existing feedback stays unchanged (saved rows read NULL). */
+export const V143_ADDED_COLUMNS = Object.freeze({
+    diff_comment: { image_json: { definition: "TEXT", saved: "NULL" } },
+});
 /**
  * v135: one approval per release (docs/plans/release-once.md). `release_authority` is the single source of truth for a
  * release a person approved: one row per generation, changed only by compare-and-swap on `rev`, with a lease whose
@@ -4549,6 +4615,13 @@ CREATE INDEX IF NOT EXISTS run_checkpoint_by_task ON run_checkpoint (task_ref, i
         for (const [column, { definition }] of Object.entries(columns))
             addColumn(db, table, column, definition);
     }
+    // v142: youiyoux change requests as tasks (new tables only).
+    db.exec(V142_SCHEMA);
+    // v143: optional exact-screenshot context on result feedback (V143_ADDED_COLUMNS: saved notes read NULL).
+    for (const [table, columns] of Object.entries(V143_ADDED_COLUMNS)) {
+        for (const [column, { definition }] of Object.entries(columns))
+            addColumn(db, table, column, definition);
+    }
     // Keep the epoch until reclamation succeeds, including a retry after compaction already committed. A new file has
     // nothing to reclaim.
     if (!fresh)
@@ -7282,6 +7355,14 @@ export class Store {
                     .get(taskId);
                 if (writtenByLead !== undefined)
                     return false;
+                // THE OUTSIDE-REQUEST QUARANTINE (youiyoux-intake.ts): a task filed from a youiyoux change request is text
+                // anyone who can write the project's folder wrote, so only a person who read every word of it approves it.
+                // Its provenance is immutable, so no road around this exists. A mode, a grant, a schedule, auto-check and
+                // auto-green (approvals no person read) never seal it. A person's own ceremony does. So does their paired-
+                // chat tap, only with the digest of every word the card showed (`terms`, chat-terms.ts), recomputed below
+                // from the live scope: a card that cut a word, or terms that changed since, seal nothing.
+                if (basis.kind !== "chat" && this.filedViaOf(taskId) === YOUIYOUX_FILED_VIA)
+                    return false;
                 // CHECK ACCESS (v132, check-access.ts): a scope whose checks reach beyond the fence (sign-ins, or no sandbox at
                 // all) seals only on a person's password ceremony — never a mode, a grant, a chat confirmation or a carry.
                 const profileText = this.db.prepare("SELECT profile_json FROM task_scope WHERE task_id = ?").get(taskId)?.["profile_json"];
@@ -7348,6 +7429,10 @@ export class Store {
                 return false;
             if (deployGate && basis?.kind === "chat" && !(basis.card === "release" && typeof basis.cardDigest === "string" && /^[0-9a-f]{64}$/.test(basis.cardDigest)))
                 return false;
+            // The outside-request quarantine's chat road (above): the card showed every word of these live terms.
+            if (basis?.kind === "chat" && this.filedViaOf(taskId) === YOUIYOUX_FILED_VIA
+                && !(basis.card === "terms" && typeof basis.cardDigest === "string" && basis.cardDigest === shownTermsDigest(readScope(working))))
+                return false;
             // AUTOMATIC RELEASE SEALS (auto-approve-green.md): only on a release task (a candidate and release terms signed
             // in), only naming the evidence row the plane wrote for exactly this task, kind, digest and candidate.
             const automatic = basis?.kind === "auto-check" || basis?.kind === "auto-green";
@@ -9535,13 +9620,21 @@ export class Store {
         if (artifact === undefined || artifact.kind !== "terminal-diff") {
             throw new Error(`artifact ${args.artifactId} is not run ${args.runId}'s terminal diff — comments bind to the exact bytes reviewed`);
         }
+        const image = parseFeedbackImage(args.image);
+        if (image === false)
+            throw new Error("Invalid feedback image.");
+        if (image !== null) {
+            const shot = this.artifactForRun(args.runId, image.artifact);
+            if (image.run !== args.runId || shot?.kind !== "screenshot" || shot.sha256 !== image.sha256)
+                throw new Error("The feedback image does not belong to this result.");
+        }
         // The unique index is the real concurrent guard (audit C-9): a race on
         // the same source key lands in DO NOTHING, not in a thrown constraint.
         const inserted = this.db
-            .prepare(`INSERT INTO diff_comment (artifact, artifact_sha, run, path, line, note, author, created_at, source_key)
-         VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?)
+            .prepare(`INSERT INTO diff_comment (artifact, artifact_sha, run, path, line, note, author, created_at, source_key, image_json)
+         VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?)
          ON CONFLICT (source_key) WHERE source_key IS NOT NULL DO NOTHING`)
-            .run(args.artifactId, artifact.sha256, args.runId, args.path, args.line, args.note, args.author, now.toISOString(), args.sourceKey ?? null);
+            .run(args.artifactId, artifact.sha256, args.runId, args.path, args.line, args.note, args.author, now.toISOString(), args.sourceKey ?? null, image === null ? null : JSON.stringify(image));
         return Number(inserted.changes) === 0 ? null : Number(inserted.lastInsertRowid);
     }
     /** Live (unsuperseded, unconsumed) comments on a run's terminal diff. */
@@ -10229,6 +10322,19 @@ export class Store {
         const row = this.db.prepare("SELECT flow, card, card_entry, source_json FROM task_source WHERE task_id = ?").get(taskId);
         return row === undefined ? null : { flow: Number(row["flow"]), card: Number(row["card"]), entry: Number(row["card_entry"]), sourceJson: String(row["source_json"]) };
     }
+    /** v142: where a task filed from a youiyoux change or options request came from, as kept when it was filed
+     * (youiyoux-intake.ts; a revision reads its first version's): the request, its kind, and where the person pointed. Null for every other task. */
+    youiyouxOriginOf(taskId) {
+        const text = (value) => typeof value === "string" && value !== "" ? value : null;
+        let id = taskId;
+        for (let hop = 0; id !== null && hop < 20; hop++) {
+            const row = this.db.prepare("SELECT request, kind, route, component, source_at FROM youiyoux_request WHERE task_id = ?").get(id);
+            if (row !== undefined)
+                return { request: String(row["request"]), kind: row["kind"] === "options" ? "options" : "change", route: text(row["route"]), component: text(row["component"]), at: text(row["source_at"]) };
+            id = this.lookupRef(id)?.revisionOf ?? null;
+        }
+        return null;
+    }
     // ---- the revision boundary: ONE field-by-field policy -------------------
     /**
      * Seal a revision in ONE transaction (Codex M5-M8 audit, C-3; contract
@@ -10320,7 +10426,14 @@ export class Store {
                     if (ids.size !== args.commentIds.length || live.length !== ids.size) {
                         throw new RevisionRaced("this annotation batch is no longer whole — read the current comments before sealing it");
                     }
-                    const exactComment = (one) => ({ id: one["id"], path: one["path"], line: one["line"], note: one["note"], author: one["author"], createdAt: one["createdAt"] });
+                    for (const one of live) {
+                        if (one.image == null)
+                            continue;
+                        const image = sourceRef.repo === null ? null : verifyResultImage(this, args.brief.evidenceRoot, [sourceRef.repo], { taskId: args.source.task, ...one.image });
+                        if (one.image.run !== sourceRun.id || image === null || !image.ok)
+                            return refuse("brief-custody", "A feedback screenshot is unavailable or changed. The notes were not consumed.");
+                    }
+                    const exactComment = (one) => ({ id: one["id"], path: one["path"], line: one["line"], note: one["note"], author: one["author"], createdAt: one["createdAt"], image: one["image"] ?? null });
                     const expected = live.map(one => exactComment({ ...one }));
                     const described = Array.isArray(named.comments) && named.comments.every(one => one !== null && typeof one === "object" && !Array.isArray(one))
                         ? named.comments.map(one => exactComment(one)) : null;
@@ -20632,6 +20745,7 @@ function readDiffComment(row) {
         id: Number(row["id"]),
         artifact: Number(row["artifact"]),
         artifactSha: String(row["artifact_sha"]),
+        image: readFeedbackImage(row["image_json"]),
         run: Number(row["run"]),
         path: row["path"] === null ? null : String(row["path"]),
         line: row["line"] === null ? null : Number(row["line"]),
@@ -21510,3 +21624,48 @@ export function lockStoreMoneyMethods(store, prototype = Store.prototype) {
             throw new Error(`Store.${name} couldn't be locked`);
     }
 }
+/** A saved note's screenshot reference (v143), or null; a damaged one refuses rather than reading as none. */
+function readFeedbackImage(value) {
+    const image = parseFeedbackImage(value);
+    if (image === false)
+        throw new Error("The saved feedback image is damaged.");
+    return image;
+}
+/** Takes a saved note's screenshot off without losing the note or its history (v143). Fail closed, in one write
+ * transaction: the note must be live and unconsumed on this run, its screenshot must be genuinely unusable right now
+ * (`unusable` is result-actions.ts feedbackImageProblem, re-read inside the transaction, never the page's say-so), and
+ * the change is recorded in the action ledger under the person who made it. The note is superseded by an exact
+ * imageless copy; the original stays in history. The caller has already proved the person may request changes on
+ * this run (the same authority that seals any saved note into a revision); that standing is re-proved here too. */
+export function dropFeedbackImage(store, runId, commentId, actor, unusable, now) {
+    return store.transact(() => {
+        // The person's standing is re-read under the write lock: a revocation, a downgrade or a lost project committed
+        // after the request was admitted refuses here (check and write together).
+        const run = store.getRun(runId);
+        const repo = run === null ? null : store.refById(run.taskRef)?.repo ?? null;
+        const account = store.accountOf(actor);
+        if (run === null || account === null || account.revokedAt !== null || account.role !== "approver" || !store.accountCanAccess(actor, repo)) {
+            return { ok: false, reason: "not-authorized" };
+        }
+        const live = store.handle.prepare(`SELECT id, image_json FROM diff_comment WHERE id = ? AND run = ? AND superseded_by IS NULL AND consumed_by IS NULL
+      AND reviewer_run IS NULL AND image_json IS NOT NULL`).get(commentId, runId);
+        if (live === undefined)
+            return { ok: false, reason: "not-found" };
+        const image = readFeedbackImage(live["image_json"]);
+        if (image === null)
+            return { ok: false, reason: "not-found" };
+        const problem = unusable(image);
+        if (problem === null)
+            return { ok: false, reason: "image-usable" };
+        const copy = store.handle.prepare(`INSERT INTO diff_comment (artifact, artifact_sha, run, path, line, note, author, created_at, reviewer_run, severity)
+      SELECT artifact, artifact_sha, run, path, line, note, author, ?, reviewer_run, severity FROM diff_comment WHERE id = ?`).run(now.toISOString(), commentId);
+        const id = Number(copy.lastInsertRowid);
+        const moved = store.handle.prepare("UPDATE diff_comment SET superseded_by = ? WHERE id = ? AND superseded_by IS NULL AND consumed_by IS NULL").run(id, commentId);
+        if (Number(moved.changes) !== 1)
+            throw new Error("The saved note changed while its screenshot was being removed.");
+        store.recordAction({ at: now.toISOString(), actor, repo,
+            taskId: store.externalIdFor(run.taskRef) ?? null, runId, action: "feedback screenshot removed", outcome: "recorded", source: "work",
+            detail: `note ${commentId} kept as note ${id} without screenshot ${image.artifact}: ${problem}` });
+        return { ok: true, id };
+    });
+}

package/dist/task-sizing.d.ts

@@ -1,11 +1,11 @@
 import { type SizeAnswer } from "./contracts/task-sizing.js";
 import { type CommandRunner } from "./claude-print.js";
-import { type TaskSizing } from "./phase-routing.js";
+import { type TaskSize, type TaskSizing } from "./phase-routing.js";
 import type { Store } from "./store.js";
 /** The classifier's whole budget, from asking to answer. */
 export declare const SIZING_BUDGET_MS = 5000;
-/** The model `claude -p` sizes with: small and fast. */
-export declare const SIZING_CLAUDE_MODEL = "haiku";
+/** The model `claude -p` sizes with: small and fast, by its exact id (an alias would float to whatever is newest). */
+export declare const SIZING_CLAUDE_MODEL = "claude-haiku-5-5";
 export type SizingInput = {
     title: string;
     goal?: string | undefined;
@@ -22,6 +22,8 @@ export declare const SUBSTANTIAL_WORK: RegExp;
 export declare function planningSignals(input: SizingInput): boolean;
 /** The size the description alone gives — today's planning signals, never risky. */
 export declare function heuristicSizing(input: SizingInput, why?: string | null): TaskSizing;
+export declare const SIZE_MEANS: Record<TaskSize, string>;
+export declare const RISKY_MEANS = "Could a mistake here lose data, break security, sign-in, payments or permissions, change a database schema or migration, or be hard to undo?";
 /** What the classifier reads: the task as data, bounded, keys blanked. */
 export declare function sizingText(input: SizingInput): string;
 /** A small Claude model on this computer's sign-in: no tools, no MCP servers, no repository, credential keys stripped.

package/dist/task-sizing.js

@@ -30,8 +30,8 @@ import {} from "./phase-routing.js";
 import { ALL_CREDENTIAL_ENV } from "./provider.js";
 /** The classifier's whole budget, from asking to answer. */
 export const SIZING_BUDGET_MS = 5_000;
-/** The model `claude -p` sizes with: small and fast. */
-export const SIZING_CLAUDE_MODEL = "haiku";
+/** The model `claude -p` sizes with: small and fast, by its exact id (an alias would float to whatever is newest). */
+export const SIZING_CLAUDE_MODEL = "claude-haiku-5-5";
 /** Structural or broad work — the description signal planning has always read. */
 export const SUBSTANTIAL_WORK = /\b(?:architecture|end[- ]to[- ]end|migrat(?:e|ion)|moderni[sz]e|redesign|refactor|rework|workflow|navigation|accessibility|responsive|performance|security|unif(?:y|ied)|multi[- ](?:step|project|service))\b/i;
 /** The description's own signals: several paths, a long description, or
@@ -55,12 +55,12 @@ function answerOf(value) {
     const read = readSizeAnswer(value);
     return read.ok ? read.value : null;
 }
-const SIZE_MEANS = {
+export const SIZE_MEANS = {
     small: "a contained change a fast model can make directly: copy, a style, a config value, one small function, one or two files",
     medium: "ordinary feature or fix work across a few files that benefits from the everyday model",
     large: "broad or structural work: many files, a new subsystem, a redesign or refactor, cross-cutting behaviour",
 };
-const RISKY_MEANS = "Could a mistake here lose data, break security, sign-in, payments or permissions, change a database schema or migration, or be hard to undo?";
+export const RISKY_MEANS = "Could a mistake here lose data, break security, sign-in, payments or permissions, change a database schema or migration, or be hard to undo?";
 /** What the classifier reads: the task as data, bounded, keys blanked. */
 export function sizingText(input) {
     return [