Preserve preview harness, editor, email and task improvements

Snapshot current maintainer-preview application changes and regression fixtures for integration into lab. Excludes local runtime data, evaluation outputs and source backups. Focused Python regression selection: 140 passed; full suite not certified.

tests/test_edit_image_tool.py

@@ -119,4 +119,57 @@ def test_edit_image_rejects_actions_without_complete_input_contract():
     ))
 
     assert result["exit_code"] == 1
-    assert "Use upscale or rembg" in result["error"]
+    assert "Use prompt, upscale or rembg" in result["error"]
+
+
+def test_prompt_edit_forwards_owned_pixels_and_preserves_original(monkeypatch, tmp_path):
+    source_path = tmp_path / 'source.png'
+    Image.new('RGB', (3, 2), 'red').save(source_path)
+    original = source_path.read_bytes()
+    monkeypatch.setattr('core.database.SessionLocal', lambda: _Db(_source(source_path.name)))
+    monkeypatch.setattr('src.constants.GENERATED_IMAGES_DIR', str(tmp_path))
+    monkeypatch.setattr('src.settings.load_settings', lambda: {'image_gen_enabled': True})
+    calls = []
+    async def edit(prompt, path, **kwargs):
+        calls.append((prompt, Path(path).read_bytes(), kwargs))
+        return {'image_id': 'edited', 'image_url': '/api/generated-image/edited.png'}
+    from pathlib import Path
+    monkeypatch.setattr('src.ai_interaction.do_edit_image', edit)
+    result = asyncio.run(do_edit_image(json.dumps({'image_id': 'source-id', 'action': 'prompt', 'prompt': 'Add another cow'}), owner='alice'))
+    assert result['image_id'] == 'edited'
+    assert calls == [('Add another cow', original, {'session_id': 'session-1', 'owner': 'alice', 'size': 'auto'})]
+    assert source_path.read_bytes() == original
+    denied = asyncio.run(do_edit_image('{"image_id":"source-id","action":"prompt","prompt":"edit"}', owner=None))
+    assert denied['error'] == 'Image not found'
+    assert len(calls) == 1
+
+
+def test_uploaded_image_edit_uses_owner_scoped_reference(monkeypatch, tmp_path):
+    path = tmp_path / 'upload.jpg'
+    Image.new('RGB', (3, 2), 'blue').save(path)
+    resolutions = []
+    class Handler:
+        def resolve_upload(self, upload_id, **kwargs):
+            resolutions.append((upload_id, kwargs))
+            if kwargs['owner'] != 'alice':
+                return None
+            return {'path': str(path), 'name': 'upload.jpg', 'mime': 'image/jpeg'}
+        def is_image_file(self, name, mime):
+            return mime.startswith('image/')
+    monkeypatch.setattr('src.tool_utils.get_upload_handler', lambda: Handler())
+    monkeypatch.setattr('src.settings.load_settings', lambda: {'image_gen_enabled': True})
+    calls = []
+    async def edit(prompt, image_path, **kwargs):
+        calls.append((prompt, image_path, kwargs))
+        return {'image_id': 'edited'}
+    monkeypatch.setattr('src.ai_interaction.do_edit_image', edit)
+    args = '{"image_id":"odysseus://attachment/upload.jpg","action":"prompt","prompt":"Make more realistic"}'
+    assert asyncio.run(do_edit_image(args, owner='alice')) == {'image_id': 'edited'}
+    assert calls == [('Make more realistic', str(path), {'owner': 'alice', 'size': 'auto'})]
+    assert resolutions == [('upload.jpg', {'owner': 'alice', 'allow_admin': False})]
+    assert 'error' in asyncio.run(do_edit_image(args, owner='bob'))
+    assert len(calls) == 1
+    monkeypatch.setattr('src.settings.load_settings', lambda: {'image_gen_enabled': False})
+    disabled = asyncio.run(do_edit_image(args, owner='alice'))
+    assert 'disabled' in disabled['error']
+    assert len(calls) == 1