phase: 122_image_documents

**Phase 122 (image documents) — final verification pass: all green. No code changes were needed; defects found: none.**

**Verified (implementation already complete in working tree, reviewed end-to-end):**
- Toggle (`BOR_IMAGES`/`BOR_IMAGE_EXTENSIONS`/`BOR_IMAGE_DIR`, off by default) + `GET /api/config` `images` flag
- Ingest: bytes digest, `image_dir` persistent copy, `content = summary = vision description` (chat-model call; only text embedded), fail-soft skip + `images_failed` counter
- Serve/display: `/api/documents/{id}/image` route (404 matrix), viewer `<img>` + description, Sources 48px lazy thumbnails, chat inline source figure (alt = summary), agent `read` marker
- Prune guard: images-off syncs never prune `is_image` docs

**Test / lint / coverage (exact commands & outcomes):**
- `uv run pytest` → exit 0 (green; note: pytest 9.1.1 `-q` omits the final count line in output — exit code authoritative)
- `uv run pytest --cov=app --cov-report=term-missing` → **2715 passed, exit 0, TOTAL 99%** (>90% gate)
- `uv run ruff check . && uv run pyright` → "All checks passed!" / "0 errors, 0 warnings, 0 informations"
- `uv run pytest tests/e2e/test_image_documents.py -v --no-cov` → **4 passed, exit 0** (isolation)

**Completion criteria:** (1) images=true → described/embedded/displayed docs: ✅ (E2E + integration) · (2) images=false byte-identical + image docs survive sync: ✅ (E2E negative app + unit/integration) · (3) viewer + chat rendering with alt text; failed description skips + logs, sync completes: ✅ · (4) test/lint/coverage gates: ✅ · (5) commit + phase move: deferred to harness per this pass's rules (working tree left uncommitted).

**Notable deviation (pre-existing, documented in code):** image route uses `require_user` (phase-79 posture, same gate as the document content endpoint) rather than the phase text's "public" parenthetical — matches the endpoint it mirrors.

**Next pending phase:** `123_chat_image_questions`.

tests/unit/test_wide_column_css.py

@@ -114,23 +114,25 @@ def test_no_literal_46rem_width_remains() -> None:
 # ---------- the four reading-column selectors ----------
 
 
-def test_the_four_reading_columns_use_the_token() -> None:
-    """.chat-shell, .shared-shell, .doc-md and
-    .doc-summary:has(+ .doc-md) each cap with
-    max-width: var(--chat-column) — and exactly those four rules use
-    the token for a max-width (no other selector)."""
+def test_the_reading_columns_use_the_token() -> None:
+    """.chat-shell, .shared-shell, .doc-md, .doc-image (phase 122,
+    task 04 — the viewer's image block rides the SAME reading column
+    as its .doc-md sibling) and .doc-summary:has(+ .doc-md) each cap
+    with max-width: var(--chat-column) — and exactly those five rules
+    use the token for a max-width (no other selector)."""
     css = _css()
     for selector in (
         ".chat-shell",
         ".shared-shell",
         ".doc-md",
+        ".doc-image",
         ".doc-summary:has(+ .doc-md)",
     ):
         assert "max-width: var(--chat-column)" in _rule_block(css, selector), (
             f"{selector} must cap with max-width: var(--chat-column)"
         )
-    assert css.count("max-width: var(--chat-column)") == 4, (
-        "exactly the four reading-column selectors use the token"
+    assert css.count("max-width: var(--chat-column)") == 5, (
+        "exactly the reading-column selectors use the token"
     )