phase: 122_image_documents

**Phase 122 (image documents) — final verification pass: all green. No code changes were needed; defects found: none.**

**Verified (implementation already complete in working tree, reviewed end-to-end):**
- Toggle (`BOR_IMAGES`/`BOR_IMAGE_EXTENSIONS`/`BOR_IMAGE_DIR`, off by default) + `GET /api/config` `images` flag
- Ingest: bytes digest, `image_dir` persistent copy, `content = summary = vision description` (chat-model call; only text embedded), fail-soft skip + `images_failed` counter
- Serve/display: `/api/documents/{id}/image` route (404 matrix), viewer `<img>` + description, Sources 48px lazy thumbnails, chat inline source figure (alt = summary), agent `read` marker
- Prune guard: images-off syncs never prune `is_image` docs

**Test / lint / coverage (exact commands & outcomes):**
- `uv run pytest` → exit 0 (green; note: pytest 9.1.1 `-q` omits the final count line in output — exit code authoritative)
- `uv run pytest --cov=app --cov-report=term-missing` → **2715 passed, exit 0, TOTAL 99%** (>90% gate)
- `uv run ruff check . && uv run pyright` → "All checks passed!" / "0 errors, 0 warnings, 0 informations"
- `uv run pytest tests/e2e/test_image_documents.py -v --no-cov` → **4 passed, exit 0** (isolation)

**Completion criteria:** (1) images=true → described/embedded/displayed docs: ✅ (E2E + integration) · (2) images=false byte-identical + image docs survive sync: ✅ (E2E negative app + unit/integration) · (3) viewer + chat rendering with alt text; failed description skips + logs, sync completes: ✅ · (4) test/lint/coverage gates: ✅ · (5) commit + phase move: deferred to harness per this pass's rules (working tree left uncommitted).

**Notable deviation (pre-existing, documented in code):** image route uses `require_user` (phase-79 posture, same gate as the document content endpoint) rather than the phase text's "public" parenthetical — matches the endpoint it mirrors.

**Next pending phase:** `123_chat_image_questions`.

frontend/assets/styles.css

@@ -737,6 +737,47 @@ details.thinking .thinking-text ul { margin: 0 0 0.5rem; }
 }
 .source-chip:hover { background: var(--brand-soft); text-decoration: underline; }
 
+/* Phase 122 (task 05): the sources block's COMPACT INLINE IMAGE for a
+   retrieved IMAGE document ("shown in the chat nicely", TODO L6) — the
+   .source-image figure sits beside its chip in the .msg-meta flex row
+   (additive: the chip's text and affordance stay). A capped (96px,
+   contain) img on the theme's surface, the document's summary as the
+   visible caption in the AA-safe muted ink (8.6:1 on --bg — the
+   row's page background). A failed image load removes the whole
+   figure in JS (the plain chip stays — never a broken-image icon). */
+.source-image {
+  display: inline-flex;
+  flex-direction: column;
+  align-items: center;
+  gap: 0.15rem;
+  max-width: 100%;
+  min-width: 0;
+  text-decoration: none;
+}
+.source-image-img {
+  display: block;
+  max-height: 96px;
+  max-width: 100%;
+  width: auto;
+  height: auto;
+  object-fit: contain;
+  background: var(--surface);
+  border: 1px solid var(--line);
+  border-radius: var(--radius-sm);
+}
+.source-image-caption {
+  max-width: 14rem;
+  color: var(--ink-soft); /* 8.6:1 on --bg (AA) — the row's page background */
+  font-size: 0.7rem;
+  line-height: 1.25;
+  text-align: center;
+  display: -webkit-box;
+  -webkit-line-clamp: 2;
+  -webkit-box-orient: vertical;
+  overflow: hidden;
+}
+.source-image:hover { text-decoration: underline; } /* flat — the caption underlines, the chip pattern */
+
 /* Phase 113 (task 02): the related-docs row — the SECONDARY tier of
    scored docs (phase 113 task 01's usefulness bar demotes the
    sub-floor hits out of the citation surface; on a deflected turn the
@@ -2246,6 +2287,61 @@ details.thinking .thinking-text ul { margin: 0 0 0.5rem; }
   text-decoration: underline;
 }
 
+/* Image-document rows (phase 122, task 04): the file table's Path cell
+   carries a FIXED 48px thumbnail box before the path link (image rows
+   only — text rows keep the pre-phase bare-link cell, no box). The
+   .kb-doc-path flex wrapper gives the link its own ellipsis budget
+   (min-width: 0 — the .sync-label pattern) now that the box shares
+   the cell; object-fit: cover keeps every aspect ratio inside the
+   square (CSS on .kb-doc-thumb-img). The glyph fallback (a failed
+   fetch, or a node without a servable image_url) swaps INSIDE the
+   same fixed box — no layout shift beyond the box, no broken-image
+   placeholder. The img's alt (the vision description) carries the
+   accessibility; the glyph is aria-hidden. Phase-08 tokens only. */
+.kb-doc-path {
+  display: flex;
+  align-items: center;
+  gap: 0.5rem;
+  min-width: 0;
+  max-width: 100%;
+}
+.kb-doc-path .doc-link {
+  flex: 1 1 auto;
+  min-width: 0; /* lets the link shrink — what engages the ellipsis */
+  overflow: hidden;
+  text-overflow: ellipsis;
+}
+.kb-doc-thumb {
+  flex: 0 0 auto;
+  display: block;
+  width: 48px;
+  height: 48px;
+  border: 1px solid var(--line);
+  border-radius: var(--radius-sm);
+  background: var(--bg);
+  color: var(--ink-soft); /* the glyph's stroke color (decorative) */
+  overflow: hidden;
+}
+.kb-doc-thumb-img {
+  display: block;
+  width: 100%;
+  height: 100%;
+  object-fit: cover;
+}
+.kb-doc-thumb-glyph {
+  display: flex;
+  align-items: center;
+  justify-content: center;
+  width: 100%;
+  height: 100%;
+  padding: 9px;
+  box-sizing: border-box;
+}
+.kb-doc-thumb-glyph svg {
+  width: 100%;
+  height: 100%;
+}
+
 /* ---------- KB folder-description editor (phase 97, task 05) ----------
    The phase-57 edit affordance on the RAG view's folder descriptions
    (the .kb-summary-* family, mirroring the viewer's .doc-summary-*):
@@ -4267,6 +4363,44 @@ details.thinking .thinking-text ul { margin: 0 0 0.5rem; }
   line-height: 1.5;
 }
 
+/* Image documents (phase 122, task 04): the viewer's image block —
+   the document's persistent bytes (the /api/documents/{id}/image
+   route) above its description (the .doc-raw content slot below). The
+   theme's surface card treatment (the .doc-md language): the image
+   sits on --surface with the line border + radius; max-width 100% +
+   max-height 70vh keep any aspect ratio inside the page (height: auto
+   keeps the ratio). Static content — no animation; the alt text (the
+   vision description) carries the accessibility (WCAG). Phase-08
+   tokens only (no new hue — the monochrome invariant). */
+.doc-image {
+  width: 100%;
+  max-width: var(--chat-column);
+  margin: 0 auto 1rem;
+  display: flex;
+  justify-content: center;
+  background: var(--surface);
+  border: 1px solid var(--line);
+  border-radius: var(--radius);
+  box-shadow: var(--shadow);
+  padding: 0.5rem;
+}
+.doc-image-img {
+  display: block;
+  max-width: 100%;
+  max-height: 70vh;
+  height: auto;
+  border-radius: var(--radius-sm);
+  background: var(--bg);
+}
+/* The onerror fallback (the route's 404 — the row exists but the
+   copy was lost): a muted note in the card's place-of-image; the
+   description below still renders, so the doc stays readable. */
+.doc-image-unavailable {
+  margin: 1.25rem 1rem;
+  color: var(--ink-soft); /* 5.1:1 on --surface (AA) */
+  font-size: 0.9rem;
+}
+
 /* Designed not-found state (no emoji — plain SVG mark, phase 08 rule). */
 .doc-not-found {
   width: 100%;