diff --git a/apps/backend/cmd/agentctl/github_cli_shim_test.go b/apps/backend/cmd/agentctl/github_cli_shim_test.go
index 61fc161f95..65703fc021 100644
--- a/apps/backend/cmd/agentctl/github_cli_shim_test.go
+++ b/apps/backend/cmd/agentctl/github_cli_shim_test.go
@@ -122,6 +122,7 @@ func TestInstallGitHubCLIShimLoginShellRestoresManagedTools(t *testing.T) {
 	env["KANDEV_GITHUB_PARENT_BASH_ENV"] = parentEnv
 	env["KANDEV_BASH_HOOK_MARKER"] = marker
 	env["BASH_ENV"] = env["KANDEV_GITHUB_CLI_BASH_ENV"]
+	env["HOME"] = root
 	env["PATH"] = "/usr/bin:/bin"
 	commandEnv := make([]string, 0, len(env))
 	for key, value := range env {
diff --git a/apps/backend/internal/agentctl/server/api/git_multi_repo_review_test.go b/apps/backend/internal/agentctl/server/api/git_multi_repo_review_test.go
index e042441525..5a93e4f9fb 100644
--- a/apps/backend/internal/agentctl/server/api/git_multi_repo_review_test.go
+++ b/apps/backend/internal/agentctl/server/api/git_multi_repo_review_test.go
@@ -160,6 +160,7 @@ func TestNestedSubmoduleReviewEndpointsIncludeRootAndStableChildBase(t *testing.
 	childBase := strings.TrimSpace(runGitAPI(t, parent, "rev-parse", "origin/main:vendor/lib"))
 	writeFileAPI(t, parent, "README.md", "root change\n")
 	childDir := filepath.Join(parent, "vendor/lib")
+	runGitAPI(t, childDir, "config", "core.hooksPath", os.DevNull)
 	runGitAPI(t, childDir, "config", "user.email", "test@test.com")
 	runGitAPI(t, childDir, "config", "user.name", "Test User")
 	writeFileAPI(t, childDir, "child-change.txt", "child change\n")
diff --git a/apps/backend/internal/agentctl/server/api/html_injector_test.go b/apps/backend/internal/agentctl/server/api/html_injector_test.go
index 8276f9fd0d..9c2ff7c0f5 100644
--- a/apps/backend/internal/agentctl/server/api/html_injector_test.go
+++ b/apps/backend/internal/agentctl/server/api/html_injector_test.go
@@ -40,49 +40,88 @@ func TestInjectInspectorScript_UpperCaseBodyTag(t *testing.T) {
 	}
 }
 
-func TestInspectorScript_UsesPreviewRouteForAnnotationPagePath(t *testing.T) {
-	if !strings.Contains(inspectorScript, "function currentPagePath()") {
-		t.Fatal("inspector should derive annotation routes through currentPagePath")
+func TestInspectorScript_CapturesVersionedTextEvidence(t *testing.T) {
+	wants := []string{
+		"var PROTOCOL_VERSION = 2;",
+		"function captureTextSelection()",
+		"selection.getRangeAt(0)",
+		"function captureTextEndpoint(",
+		"node_path:",
+		"range.getClientRects()",
+		"containing_element:",
+		"send('capture-completed'",
 	}
-	if !strings.Contains(inspectorScript, "window.__kandevProxyPrefix") {
-		t.Fatal("inspector should read the proxy prefix exposed by the runtime shim")
-	}
-	if !strings.Contains(inspectorScript, "pagePath: currentPagePath()") {
-		t.Fatal("annotations should store the app route, not location.pathname directly")
+	for _, want := range wants {
+		if !strings.Contains(inspectorScript, want) {
+			t.Errorf("inspector should include %q", want)
+		}
 	}
 }
 
-func TestInspectorScript_PreservesPendingAnnotationAcrossPopupCleanup(t *testing.T) {
-	openStart := strings.Index(inspectorScript, "function openCommentPopup(")
-	if openStart < 0 {
-		t.Fatal("inspector should define openCommentPopup")
+func TestInspectorScript_HintsElementCandidateBeforeCapture(t *testing.T) {
+	wants := []string{
+		"function showCandidate(",
+		"candidateLabel.textContent",
+		"send('candidate-changed'",
+		"document.addEventListener('focusin'",
+		"document.addEventListener('touchstart'",
+		"case 'element':",
 	}
-	openEnd := strings.Index(inspectorScript[openStart:], "function commitAnnotation(")
-	if openEnd < 0 {
-		t.Fatal("inspector should define commitAnnotation after openCommentPopup")
+	for _, want := range wants {
+		if !strings.Contains(inspectorScript, want) {
+			t.Errorf("inspector should include %q", want)
+		}
 	}
-	openBody := inspectorScript[openStart : openStart+openEnd]
+}
 
-	keep := strings.Index(openBody, "var keep = pendingAnnotation;")
-	cleanup := strings.Index(openBody, "closePopup();")
-	restore := strings.Index(openBody, "pendingAnnotation = keep;")
-	if keep < 0 || cleanup < 0 || restore < 0 {
-		t.Fatal("openCommentPopup should preserve pendingAnnotation across preventive cleanup")
+func TestInspectorScript_TracksRoutesAndProjectsMarkers(t *testing.T) {
+	wants := []string{
+		"function currentPageRoute()",
+		"window.__kandevProxyPrefix",
+		"history.pushState",
+		"window.addEventListener('popstate'",
+		"case 'project-markers':",
+		"function renderMarkers()",
+		"send('route-changed'",
 	}
-	if keep >= cleanup || cleanup >= restore {
-		t.Fatal("openCommentPopup should preserve pendingAnnotation across preventive cleanup")
+	for _, want := range wants {
+		if !strings.Contains(inspectorScript, want) {
+			t.Errorf("inspector should include %q", want)
+		}
 	}
+}
 
-	closeStart := strings.Index(inspectorScript, "function closePopup()")
-	if closeStart < 0 {
-		t.Fatal("inspector should define closePopup")
+func TestInspectorScript_SanitizesRoutesAndCompletesTouchKeyboardCaptures(t *testing.T) {
+	wants := []string{
+		"function sanitizedSearch()",
+		"location.search",
+		"document.addEventListener('touchend', onTextTouchEnd, true)",
+		"event.key === 'Enter'",
+		"event.key === ' '",
+		"querySelectorAll(selector).length === 1",
+		"hideCandidate();",
 	}
-	closeEnd := strings.Index(inspectorScript[closeStart:], "function currentPagePath()")
-	if closeEnd < 0 {
-		t.Fatal("inspector should define currentPagePath after closePopup")
+	for _, want := range wants {
+		if !strings.Contains(inspectorScript, want) {
+			t.Errorf("inspector should include %q", want)
+		}
 	}
-	if !strings.Contains(inspectorScript[closeStart:closeStart+closeEnd], "pendingAnnotation = null;") {
-		t.Fatal("direct popup cleanup should still clear pendingAnnotation")
+}
+
+func TestInspectorScript_OwnsDragGesturesOnlyInScreenshotMode(t *testing.T) {
+	wants := []string{
+		"function onScreenshotPointerDown(",
+		"function onScreenshotPointerMove(",
+		"function onScreenshotPointerUp(",
+		"if (mode !== 'screenshot') return;",
+		"send('screenshot-region-selected'",
+		"document.addEventListener('pointerdown'",
+		"document.removeEventListener('pointerdown'",
+	}
+	for _, want := range wants {
+		if !strings.Contains(inspectorScript, want) {
+			t.Errorf("inspector should include %q", want)
+		}
 	}
 }
 
diff --git a/apps/backend/internal/agentctl/server/api/scripts/inspector.js b/apps/backend/internal/agentctl/server/api/scripts/inspector.js
index 41fb9d2bef..92a5fb315d 100644
--- a/apps/backend/internal/agentctl/server/api/scripts/inspector.js
+++ b/apps/backend/internal/agentctl/server/api/scripts/inspector.js
@@ -2,130 +2,45 @@
   'use strict';
 
   var SOURCE = 'kandev-inspector';
-  var DRAG_THRESHOLD = 5;
-  var Z = 2147483640;
-
-  var active = false;
-  var mouseDownAt = null;
-  var dragRect = null;
-  var hoverEl = null;
-  var counter = 0;
-
-  var hoverOverlay = null;
-  var dragOverlay = null;
-  var popup = null;
-  var pendingAnnotation = null;
+  var PROTOCOL_VERSION = 2;
+  var Z_INDEX = 2147483640;
+  var MAX_OUTER_HTML = 65536;
+  var mode = null;
+  var candidate = null;
+  var candidateOverlay = null;
+  var candidateLabel = null;
+  var screenshotOverlay = null;
+  var screenshotStart = null;
+  var screenshotCurrent = null;
+  var projectedMarkers = [];
+  var originalCursor = document.documentElement.style.cursor;
+  var originalTouchAction = document.documentElement.style.touchAction;
 
   function send(type, payload) {
     try {
-      window.parent.postMessage({ source: SOURCE, type: type, payload: payload }, '*');
-    } catch (e) {}
+      window.parent.postMessage({
+        source: SOURCE,
+        version: PROTOCOL_VERSION,
+        type: type,
+        payload: payload,
+      }, '*');
+    } catch (error) {}
   }
 
-  function getSelector(el) {
-    var parts = [];
-    var cur = el;
-    while (cur && cur.nodeType === 1 && parts.length < 5) {
-      var tag = cur.tagName.toLowerCase();
-      var id = cur.getAttribute && cur.getAttribute('id');
-      if (id) { parts.unshift(tag + '#' + CSS.escape(id)); break; }
-      var cls = '';
-      if (cur.classList && cur.classList.length) {
-        cls = Array.from(cur.classList).slice(0, 2)
-          .map(function (c) { return '.' + CSS.escape(c); }).join('');
-      }
-      var part = tag + cls;
-      var parent = cur.parentElement;
-      if (parent) {
-        var sibs = Array.from(parent.children).filter(function (c) { return c.tagName === cur.tagName; });
-        if (sibs.length > 1) part += ':nth-of-type(' + (sibs.indexOf(cur) + 1) + ')';
-      }
-      parts.unshift(part);
-      cur = parent;
-    }
-    return parts.join(' > ');
+  function sanitizedSearch() {
+    var sensitiveQueryParameter = /(?:^|[_-])(access[_-]?token|id[_-]?token|token|secret|password|passwd|auth(?:orization)?|credential|cookie|session|capability|signature|sig|nonce|code|state|key)(?:$|[_-])/i;
+    var kept = [];
+    try {
+      var params = new URLSearchParams(location.search);
+      params.forEach(function (value, name) {
+        if (sensitiveQueryParameter.test(name)) return;
+        kept.push(encodeURIComponent(name) + '=' + encodeURIComponent(value));
+      });
+    } catch (error) {}
+    return kept.length ? '?' + kept.join('&') : '';
   }
 
-  function captureElement(el) {
-    if (!el || el.nodeType !== 1) return null;
-    var cls = '';
-    if (el.className && typeof el.className === 'string') {
-      cls = el.className.trim().split(/\s+/).slice(0, 3).join(' ') || '';
-    }
-    return {
-      tag: el.tagName.toLowerCase(),
-      id: el.id || undefined,
-      classes: cls || undefined,
-      role: el.getAttribute('role') || undefined,
-      ariaLabel: el.getAttribute('aria-label') || undefined,
-      text: ((el.textContent || '').replace(/\s+/g, ' ').trim()).slice(0, 120) || undefined,
-      selector: getSelector(el),
-    };
-  }
-
-  function elementsInRect(rect) {
-    var out = [];
-    var all = document.querySelectorAll('body *');
-    for (var i = 0; i < all.length && out.length < 5; i++) {
-      var el = all[i];
-      if (el === hoverOverlay || el === dragOverlay || el === popup) continue;
-      if (popup && popup.contains(el)) continue;
-      var r = el.getBoundingClientRect();
-      if (r.width < 4 || r.height < 4) continue;
-      if (r.left >= rect.x && r.top >= rect.y
-        && r.right <= rect.x + rect.w && r.bottom <= rect.y + rect.h) {
-        out.push(captureElement(el));
-      }
-    }
-    return out;
-  }
-
-  function makeOverlay(borderColor, bg) {
-    var d = document.createElement('div');
-    d.style.cssText = 'position:fixed;pointer-events:none;box-sizing:border-box;display:none;z-index:' + Z + ';'
-      + 'border:2px solid ' + borderColor + ';background:' + bg + ';';
-    document.body.appendChild(d);
-    return d;
-  }
-
-  function ensureOverlays() {
-    if (!hoverOverlay) hoverOverlay = makeOverlay('#6366f1', 'rgba(99,102,241,0.10)');
-    if (!dragOverlay) dragOverlay = makeOverlay('#f59e0b', 'rgba(245,158,11,0.15)');
-  }
-
-  function positionOverlay(o, x, y, w, h) {
-    o.style.display = 'block';
-    o.style.left = x + 'px';
-    o.style.top = y + 'px';
-    o.style.width = w + 'px';
-    o.style.height = h + 'px';
-  }
-
-  function hideOverlay(o) { if (o) o.style.display = 'none'; }
-
-  function placeMarker(num, x, y) {
-    var m = document.createElement('div');
-    m.setAttribute('data-kandev-marker', String(num));
-    m.style.cssText = 'position:fixed;left:' + (x - 12) + 'px;top:' + (y - 12) + 'px;width:24px;height:24px;'
-      + 'border-radius:50%;background:#6366f1;color:#fff;font:600 12px/24px system-ui,sans-serif;'
-      + 'text-align:center;z-index:' + Z + ';pointer-events:none;box-shadow:0 1px 4px rgba(0,0,0,0.3);';
-    m.textContent = String(num);
-    document.body.appendChild(m);
-  }
-
-  function clearMarkers() {
-    var nodes = document.querySelectorAll('[data-kandev-marker]');
-    for (var i = 0; i < nodes.length; i++) nodes[i].parentNode.removeChild(nodes[i]);
-    counter = 0;
-  }
-
-  function closePopup() {
-    if (popup && popup.parentNode) popup.parentNode.removeChild(popup);
-    popup = null;
-    pendingAnnotation = null;
-  }
-
-  function currentPagePath() {
+  function currentPageRoute() {
     var path = location.pathname;
     var prefix = window.__kandevProxyPrefix;
     if (typeof prefix === 'string' && prefix) {
@@ -133,179 +48,538 @@
         path = path.slice(prefix.length) || '/';
       }
     }
-    return path + location.search;
+    return path + sanitizedSearch();
   }
 
-  function openCommentPopup(anchorX, anchorY, onSubmit) {
-    var keep = pendingAnnotation;
-    closePopup();
-    pendingAnnotation = keep;
-    popup = document.createElement('div');
-    popup.style.cssText = 'position:fixed;left:' + anchorX + 'px;top:' + anchorY + 'px;z-index:' + (Z + 1) + ';'
-      + 'background:#fff;border:1px solid #e5e7eb;border-radius:6px;box-shadow:0 4px 12px rgba(0,0,0,0.15);'
-      + 'padding:8px;width:280px;font-family:system-ui,sans-serif;';
-    var ta = document.createElement('textarea');
-    ta.placeholder = 'Describe the change (Enter to save, Esc to cancel)';
-    ta.style.cssText = 'width:100%;min-height:60px;border:1px solid #e5e7eb;border-radius:4px;padding:6px;'
-      + 'font:13px system-ui,sans-serif;resize:vertical;outline:none;box-sizing:border-box;';
-    var row = document.createElement('div');
-    row.style.cssText = 'display:flex;gap:6px;justify-content:flex-end;margin-top:6px;';
-    var cancel = document.createElement('button');
-    cancel.textContent = 'Cancel';
-    cancel.style.cssText = 'padding:4px 10px;border:1px solid #e5e7eb;background:#fff;border-radius:4px;cursor:pointer;font:12px system-ui,sans-serif;';
-    var save = document.createElement('button');
-    save.textContent = 'Save';
-    save.style.cssText = 'padding:4px 10px;border:0;background:#6366f1;color:#fff;border-radius:4px;cursor:pointer;font:12px system-ui,sans-serif;';
-
-    cancel.addEventListener('click', function (e) { e.preventDefault(); e.stopPropagation(); closePopup(); });
-    save.addEventListener('click', function (e) { e.preventDefault(); e.stopPropagation(); onSubmit(ta.value.trim()); });
-    ta.addEventListener('keydown', function (e) {
-      e.stopPropagation();
-      if (e.key === 'Enter' && !e.shiftKey) { e.preventDefault(); onSubmit(ta.value.trim()); }
-      if (e.key === 'Escape') { e.preventDefault(); closePopup(); }
-    });
-
-    popup.appendChild(ta);
-    row.appendChild(cancel); row.appendChild(save);
-    popup.appendChild(row);
-    document.body.appendChild(popup);
-    ta.focus();
-  }
-
-  function commitAnnotation(comment) {
-    if (!pendingAnnotation) return;
-    counter += 1;
-    var a = pendingAnnotation;
-    a.id = 'a-' + Date.now() + '-' + counter;
-    a.comment = comment || '';
-    placeMarker(counter, a.markerX, a.markerY);
-    // Note: we do NOT set `a.number` here. The React parent assigns numbers
-    // so they remain monotonic across iframe refreshes.
-    send('annotation-added', a);
-    pendingAnnotation = null;
-    closePopup();
-  }
-
-  function startPending(kind, rect, element, elements, markerX, markerY) {
-    pendingAnnotation = {
-      kind: kind,
-      rect: rect,
-      element: element || null,
-      elements: elements || null,
-      markerX: markerX,
-      markerY: markerY,
-      pagePath: currentPagePath(),
+  function pageIdentity() {
+    return {
+      page_route: currentPageRoute(),
+      page_title: String(document.title || '').slice(0, 1024),
     };
-    var popupX = Math.min(markerX + 14, window.innerWidth - 296);
-    var popupY = Math.min(markerY + 14, window.innerHeight - 140);
-    openCommentPopup(popupX, popupY, commitAnnotation);
   }
 
-  function onMouseDown(e) {
-    if (popup && popup.contains(e.target)) return;
-    e.preventDefault();
-    e.stopPropagation();
-    mouseDownAt = { x: e.clientX, y: e.clientY };
-    dragRect = null;
+  function escapeSelector(value) {
+    if (window.CSS && typeof window.CSS.escape === 'function') return window.CSS.escape(value);
+    return String(value).replace(/[^a-zA-Z0-9_-]/g, function (character) {
+      return '\\' + character;
+    });
   }
 
-  function onMouseMove(e) {
-    if (popup && popup.contains(e.target)) return;
-    if (mouseDownAt) {
-      var dx = e.clientX - mouseDownAt.x;
-      var dy = e.clientY - mouseDownAt.y;
-      if (Math.abs(dx) > DRAG_THRESHOLD || Math.abs(dy) > DRAG_THRESHOLD) {
-        dragRect = {
-          x: Math.min(mouseDownAt.x, e.clientX),
-          y: Math.min(mouseDownAt.y, e.clientY),
-          w: Math.abs(dx),
-          h: Math.abs(dy),
-        };
-        hideOverlay(hoverOverlay);
-        positionOverlay(dragOverlay, dragRect.x, dragRect.y, dragRect.w, dragRect.h);
+  function selectorIsUnique(selector) {
+    try {
+      return document.querySelectorAll(selector).length === 1;
+    } catch (error) {
+      return false;
+    }
+  }
+
+  function getSelector(element) {
+    var parts = [];
+    var current = element;
+    while (current && current.nodeType === Node.ELEMENT_NODE && parts.length < 8) {
+      var tag = current.tagName.toLowerCase();
+      var id = current.getAttribute('id');
+      if (id) {
+        parts.unshift(tag + '#' + escapeSelector(id));
+      } else {
+        var part = tag;
+        var parent = current.parentElement;
+        if (parent) {
+          var siblings = Array.prototype.filter.call(parent.children, function (child) {
+            return child.tagName === current.tagName;
+          });
+          if (siblings.length > 1) {
+            part += ':nth-of-type(' + (siblings.indexOf(current) + 1) + ')';
+          }
+        }
+        parts.unshift(part);
+      }
+      var selector = parts.join(' > ');
+      if (selector.length <= 4096 && selectorIsUnique(selector)) return selector;
+      current = current.parentElement;
+    }
+    return undefined;
+  }
+
+  function elementClasses(element) {
+    if (!element.classList) return [];
+    return Array.prototype.slice.call(element.classList, 0, 128)
+      .map(function (value) { return String(value).slice(0, 1024); });
+  }
+
+  function accessibleLabel(element) {
+    var explicit = element.getAttribute('aria-label');
+    if (explicit) return explicit.slice(0, 16384);
+    var labelledBy = element.getAttribute('aria-labelledby');
+    if (labelledBy) {
+      var labels = labelledBy.split(/\s+/).map(function (id) {
+        var label = document.getElementById(id);
+        return label ? label.textContent || '' : '';
+      }).join(' ').replace(/\s+/g, ' ').trim();
+      if (labels) return labels.slice(0, 16384);
+    }
+    var alt = element.getAttribute('alt') || element.getAttribute('title');
+    return alt ? alt.slice(0, 16384) : undefined;
+  }
+
+  function captureElement(element) {
+    if (!element || element.nodeType !== Node.ELEMENT_NODE) return null;
+    var html = element.outerHTML || '';
+    return {
+      tag: element.tagName.toLowerCase().slice(0, 128),
+      id: element.id ? String(element.id).slice(0, 1024) : undefined,
+      classes: elementClasses(element),
+      role: (element.getAttribute('role') || '').slice(0, 1024) || undefined,
+      accessible_label: accessibleLabel(element),
+      visible_text: (element.textContent || '').replace(/\s+/g, ' ').trim().slice(0, 16384) || undefined,
+      selector: getSelector(element),
+      outer_html: html.length > MAX_OUTER_HTML ? html.slice(0, MAX_OUTER_HTML) : html,
+    };
+  }
+
+  function rectSnapshot(rect) {
+    return {
+      x: rect.left,
+      y: rect.top,
+      width: rect.width,
+      height: rect.height,
+      document_x: rect.left + window.scrollX,
+      document_y: rect.top + window.scrollY,
+      scroll_x: window.scrollX,
+      scroll_y: window.scrollY,
+      viewport_width: window.innerWidth,
+      viewport_height: window.innerHeight,
+      device_pixel_ratio: window.devicePixelRatio || 1,
+    };
+  }
+
+  function unionRect(rects) {
+    if (!rects.length) return null;
+    var left = rects[0].left;
+    var top = rects[0].top;
+    var right = rects[0].right;
+    var bottom = rects[0].bottom;
+    for (var index = 1; index < rects.length; index += 1) {
+      left = Math.min(left, rects[index].left);
+      top = Math.min(top, rects[index].top);
+      right = Math.max(right, rects[index].right);
+      bottom = Math.max(bottom, rects[index].bottom);
+    }
+    return rectSnapshot({
+      left: left,
+      top: top,
+      width: right - left,
+      height: bottom - top,
+    });
+  }
+
+  function commonElement(range) {
+    var node = range.commonAncestorContainer;
+    if (node.nodeType === Node.ELEMENT_NODE) return node;
+    return node.parentElement;
+  }
+
+  function nodePath(root, node) {
+    var path = [];
+    var current = node;
+    while (current && current !== root) {
+      var parent = current.parentNode;
+      if (!parent) return [];
+      var index = Array.prototype.indexOf.call(parent.childNodes, current);
+      if (index < 0) return [];
+      path.unshift(index);
+      current = parent;
+      if (path.length > 128) return [];
+    }
+    return current === root ? path : [];
+  }
+
+  function captureTextEndpoint(node, offset, root) {
+    return {
+      selector: getSelector(root),
+      node_path: nodePath(root, node),
+      offset: offset,
+    };
+  }
+
+  function captureTextSelection() {
+    var selection = window.getSelection();
+    if (!selection || selection.isCollapsed || selection.rangeCount === 0) return false;
+    var selectedText = selection.toString();
+    if (!selectedText) return false;
+    var range = selection.getRangeAt(0);
+    var container = commonElement(range);
+    var element = captureElement(container);
+    if (!container || !element) return false;
+    var clientRects = Array.prototype.slice.call(range.getClientRects(), 0, 512);
+    var identity = pageIdentity();
+    send('capture-completed', {
+      kind: 'text',
+      page_route: identity.page_route,
+      page_title: identity.page_title,
+      selected_text: selectedText.slice(0, 262144),
+      text_anchor: {
+        start: captureTextEndpoint(range.startContainer, range.startOffset, container),
+        end: captureTextEndpoint(range.endContainer, range.endOffset, container),
+        rects: clientRects.map(rectSnapshot),
+        union_rect: unionRect(clientRects),
+        scroll_x: window.scrollX,
+        scroll_y: window.scrollY,
+        viewport_width: window.innerWidth,
+        viewport_height: window.innerHeight,
+        device_pixel_ratio: window.devicePixelRatio || 1,
+        containing_element: element,
+      },
+    });
+    setMode(null);
+    return true;
+  }
+
+  function isInspectorNode(element) {
+    return !!(element && element.closest && element.closest('[data-kandev-inspector-ui]'));
+  }
+
+  function candidateName(element) {
+    var name = element.tagName.toLowerCase();
+    if (element.id) name += '#' + element.id;
+    var classes = elementClasses(element).slice(0, 2);
+    if (classes.length) name += '.' + classes.join('.');
+    return name.slice(0, 1024);
+  }
+
+  function ensureCandidateOverlay() {
+    if (candidateOverlay) return;
+    candidateOverlay = document.createElement('div');
+    candidateOverlay.setAttribute('data-kandev-inspector-ui', 'candidate');
+    candidateOverlay.setAttribute('aria-hidden', 'true');
+    candidateOverlay.style.cssText = 'position:fixed;display:none;pointer-events:none;box-sizing:border-box;'
+      + 'border:2px solid #6366f1;background:rgba(99,102,241,0.14);z-index:' + Z_INDEX + ';';
+    candidateLabel = document.createElement('div');
+    candidateLabel.style.cssText = 'position:absolute;left:-2px;bottom:100%;max-width:320px;padding:3px 6px;'
+      + 'overflow:hidden;text-overflow:ellipsis;white-space:nowrap;background:#4f46e5;color:#fff;'
+      + 'font:600 11px/16px system-ui,sans-serif;border-radius:3px 3px 0 0;';
+    candidateOverlay.appendChild(candidateLabel);
+    document.documentElement.appendChild(candidateOverlay);
+  }
+
+  function showCandidate(element) {
+    if (!element || element.nodeType !== Node.ELEMENT_NODE || isInspectorNode(element)) return;
+    ensureCandidateOverlay();
+    candidate = element;
+    var rect = element.getBoundingClientRect();
+    candidateOverlay.style.display = 'block';
+    candidateOverlay.style.left = rect.left + 'px';
+    candidateOverlay.style.top = rect.top + 'px';
+    candidateOverlay.style.width = rect.width + 'px';
+    candidateOverlay.style.height = rect.height + 'px';
+    candidateLabel.textContent = candidateName(element);
+    send('candidate-changed', { label: candidateLabel.textContent });
+  }
+
+  function hideCandidate() {
+    candidate = null;
+    if (candidateOverlay) candidateOverlay.style.display = 'none';
+    send('candidate-changed', { label: null });
+  }
+
+  function ensureScreenshotOverlay() {
+    if (screenshotOverlay) return;
+    screenshotOverlay = document.createElement('div');
+    screenshotOverlay.setAttribute('data-kandev-inspector-ui', 'screenshot-region');
+    screenshotOverlay.setAttribute('aria-hidden', 'true');
+    screenshotOverlay.style.cssText = 'position:fixed;display:none;pointer-events:none;box-sizing:border-box;'
+      + 'border:2px solid #f59e0b;background:rgba(245,158,11,0.16);z-index:' + Z_INDEX + ';';
+    document.documentElement.appendChild(screenshotOverlay);
+  }
+
+  function positionScreenshotOverlay(start, end) {
+    ensureScreenshotOverlay();
+    var left = Math.min(start.x, end.x);
+    var top = Math.min(start.y, end.y);
+    var width = Math.abs(end.x - start.x);
+    var height = Math.abs(end.y - start.y);
+    screenshotOverlay.style.display = 'block';
+    screenshotOverlay.style.left = left + 'px';
+    screenshotOverlay.style.top = top + 'px';
+    screenshotOverlay.style.width = width + 'px';
+    screenshotOverlay.style.height = height + 'px';
+  }
+
+  function hideScreenshotOverlay() {
+    screenshotStart = null;
+    screenshotCurrent = null;
+    if (screenshotOverlay) screenshotOverlay.style.display = 'none';
+  }
+
+  function captureCandidate(element) {
+    if (!element || isInspectorNode(element)) return;
+    var snapshot = captureElement(element);
+    if (!snapshot) return;
+    var identity = pageIdentity();
+    send('capture-completed', {
+      kind: 'element',
+      page_route: identity.page_route,
+      page_title: identity.page_title,
+      element_snapshot: snapshot,
+      capture_rect: rectSnapshot(element.getBoundingClientRect()),
+    });
+    setMode(null);
+  }
+
+  function onElementPointerMove(event) {
+    if (mode !== 'element') return;
+    showCandidate(event.target);
+  }
+
+  function onElementFocus(event) {
+    if (mode !== 'element') return;
+    showCandidate(event.target);
+  }
+
+  function onElementTouchStart(event) {
+    if (mode !== 'element' || !event.touches || !event.touches.length) return;
+    var touch = event.touches[0];
+    showCandidate(document.elementFromPoint(touch.clientX, touch.clientY));
+  }
+
+  function onElementTouchEnd(event) {
+    if (mode !== 'element' || !candidate) return;
+    event.preventDefault();
+    event.stopPropagation();
+    captureCandidate(candidate);
+  }
+
+  function onElementClick(event) {
+    if (mode !== 'element' || isInspectorNode(event.target)) return;
+    event.preventDefault();
+    event.stopPropagation();
+    event.stopImmediatePropagation();
+    captureCandidate(event.target);
+  }
+
+  function onTextMouseUp() {
+    if (mode !== 'text') return;
+    window.setTimeout(captureTextSelection, 0);
+  }
+
+  function onTextTouchEnd() {
+    if (mode !== 'text') return;
+    window.setTimeout(captureTextSelection, 0);
+  }
+
+  function onScreenshotPointerDown(event) {
+    if (mode !== 'screenshot') return;
+    event.preventDefault();
+    event.stopPropagation();
+    screenshotStart = { x: event.clientX, y: event.clientY, pointerId: event.pointerId };
+    screenshotCurrent = { x: event.clientX, y: event.clientY };
+    positionScreenshotOverlay(screenshotStart, screenshotStart);
+  }
+
+  function onScreenshotPointerMove(event) {
+    if (mode !== 'screenshot') return;
+    if (!screenshotStart || screenshotStart.pointerId !== event.pointerId) return;
+    event.preventDefault();
+    event.stopPropagation();
+    screenshotCurrent = { x: event.clientX, y: event.clientY };
+    positionScreenshotOverlay(screenshotStart, screenshotCurrent);
+  }
+
+  function completeScreenshot(end) {
+    if (mode !== 'screenshot' || !screenshotStart || !end) return false;
+    var start = screenshotStart;
+    var left = Math.min(start.x, end.x);
+    var top = Math.min(start.y, end.y);
+    var width = Math.abs(end.x - start.x);
+    var height = Math.abs(end.y - start.y);
+    hideScreenshotOverlay();
+    if (width < 5 || height < 5) return false;
+    var identity = pageIdentity();
+    send('screenshot-region-selected', {
+      page_route: identity.page_route,
+      page_title: identity.page_title,
+      capture_rect: rectSnapshot({ left: left, top: top, width: width, height: height }),
+    });
+    setMode(null);
+    return true;
+  }
+
+  function onScreenshotPointerUp(event) {
+    if (mode !== 'screenshot') return;
+    if (!screenshotStart || screenshotStart.pointerId !== event.pointerId) return;
+    event.preventDefault();
+    event.stopPropagation();
+    event.stopImmediatePropagation();
+    completeScreenshot({ x: event.clientX, y: event.clientY });
+  }
+
+  function onScreenshotPointerCancel(event) {
+    if (mode !== 'screenshot') return;
+    if (screenshotStart && screenshotStart.pointerId !== event.pointerId) return;
+    hideScreenshotOverlay();
+  }
+
+  function onCaptureKeyDown(event) {
+    if (!mode) return;
+    if (event.key === 'Enter' || event.key === ' ') {
+      event.preventDefault();
+      event.stopPropagation();
+      if (mode === 'text') {
+        window.setTimeout(captureTextSelection, 0);
+      } else if (mode === 'screenshot') {
+        completeScreenshot(screenshotCurrent);
       }
       return;
     }
-    var el = e.target;
-    if (el === hoverOverlay || el === dragOverlay || (popup && popup.contains(el))) return;
-    hoverEl = el;
-    var r = el.getBoundingClientRect();
-    positionOverlay(hoverOverlay, r.left, r.top, r.width, r.height);
+    if (event.key !== 'Escape') return;
+    event.preventDefault();
+    setMode(null);
+    send('capture-cancelled', {});
   }
 
-  function onMouseUp(e) {
-    if (popup && popup.contains(e.target)) return;
-    var wasDragging = !!dragRect;
-    var rect = dragRect;
-    var down = mouseDownAt;
-    mouseDownAt = null;
-    dragRect = null;
-    hideOverlay(dragOverlay);
+  function removeCaptureListeners() {
+    document.removeEventListener('mousemove', onElementPointerMove, true);
+    document.removeEventListener('focusin', onElementFocus, true);
+    document.removeEventListener('touchstart', onElementTouchStart, true);
+    document.removeEventListener('touchend', onElementTouchEnd, true);
+    document.removeEventListener('click', onElementClick, true);
+    document.removeEventListener('mouseup', onTextMouseUp, true);
+    document.removeEventListener('touchend', onTextTouchEnd, true);
+    document.removeEventListener('pointerdown', onScreenshotPointerDown, true);
+    document.removeEventListener('pointermove', onScreenshotPointerMove, true);
+    document.removeEventListener('pointerup', onScreenshotPointerUp, true);
+    document.removeEventListener('pointercancel', onScreenshotPointerCancel, true);
+    document.removeEventListener('keydown', onCaptureKeyDown, true);
+  }
 
-    if (wasDragging && rect && rect.w > DRAG_THRESHOLD && rect.h > DRAG_THRESHOLD) {
-      var inside = elementsInRect(rect);
-      startPending('area', rect, null, inside, rect.x + rect.w, rect.y);
-      return;
-    }
-    if (down) {
-      var clickEl = document.elementFromPoint(down.x, down.y);
-      if (!clickEl || clickEl === hoverOverlay || clickEl === dragOverlay) return;
-      if (popup && popup.contains(clickEl)) return;
-      var el = captureElement(clickEl);
-      startPending('pin', null, el, null, down.x, down.y);
+  function setMode(nextMode) {
+    removeCaptureListeners();
+    mode = nextMode;
+    hideCandidate();
+    hideScreenshotOverlay();
+    document.documentElement.style.cursor = mode === 'element' || mode === 'screenshot'
+      ? 'crosshair'
+      : originalCursor;
+    document.documentElement.style.touchAction = mode === 'screenshot' ? 'none' : originalTouchAction;
+    if (!mode) return;
+    document.addEventListener('keydown', onCaptureKeyDown, true);
+    switch (mode) {
+      case 'element':
+        document.addEventListener('mousemove', onElementPointerMove, true);
+        document.addEventListener('focusin', onElementFocus, true);
+        document.addEventListener('touchstart', onElementTouchStart, true);
+        document.addEventListener('touchend', onElementTouchEnd, true);
+        document.addEventListener('click', onElementClick, true);
+        break;
+      case 'text':
+        document.addEventListener('mouseup', onTextMouseUp, true);
+        document.addEventListener('touchend', onTextTouchEnd, true);
+        break;
+      case 'screenshot':
+        document.addEventListener('pointerdown', onScreenshotPointerDown, true);
+        document.addEventListener('pointermove', onScreenshotPointerMove, true);
+        document.addEventListener('pointerup', onScreenshotPointerUp, true);
+        document.addEventListener('pointercancel', onScreenshotPointerCancel, true);
+        break;
+      default:
+        break;
     }
   }
 
-  function onClickCapture(e) {
-    if (popup && popup.contains(e.target)) return;
-    e.preventDefault();
-    e.stopPropagation();
-    e.stopImmediatePropagation();
+  function clearMarkerNodes() {
+    var markers = document.querySelectorAll('[data-kandev-inspector-marker]');
+    for (var index = 0; index < markers.length; index += 1) {
+      if (markers[index].parentNode) markers[index].parentNode.removeChild(markers[index]);
+    }
   }
 
-  function onKeyDown(e) {
-    if (popup) return;
-    if (e.key === 'Escape') { e.preventDefault(); setActive(false); send('inspect-exited', {}); }
+  function markerRect(marker) {
+    var selector = marker.element_snapshot && marker.element_snapshot.selector;
+    if (selector) {
+      try {
+        var element = document.querySelector(selector);
+        if (element) return element.getBoundingClientRect();
+      } catch (error) {}
+    }
+    var rect = marker.capture_rect || (marker.text_anchor && marker.text_anchor.union_rect);
+    if (!rect) return null;
+    var documentX = typeof rect.document_x === 'number'
+      ? rect.document_x
+      : rect.x + (typeof rect.scroll_x === 'number' ? rect.scroll_x : 0);
+    var documentY = typeof rect.document_y === 'number'
+      ? rect.document_y
+      : rect.y + (typeof rect.scroll_y === 'number' ? rect.scroll_y : 0);
+    return { left: documentX - window.scrollX, top: documentY - window.scrollY };
   }
 
-  function setActive(isOn) {
-    if (isOn === active) return;
-    active = isOn;
-    if (isOn) {
-      ensureOverlays();
-      document.body.style.cursor = 'crosshair';
-      document.addEventListener('mousedown', onMouseDown, true);
-      document.addEventListener('mousemove', onMouseMove, true);
-      document.addEventListener('mouseup', onMouseUp, true);
-      document.addEventListener('click', onClickCapture, true);
-      document.addEventListener('keydown', onKeyDown, true);
+  function renderMarkers() {
+    clearMarkerNodes();
+    var route = currentPageRoute();
+    var visible = projectedMarkers.filter(function (marker) { return marker.page_route === route; });
+    visible.forEach(function (marker, index) {
+      var rect = markerRect(marker);
+      if (!rect) return;
+      var node = document.createElement('div');
+      node.setAttribute('data-kandev-inspector-marker', marker.id);
+      node.setAttribute('aria-hidden', 'true');
+      node.style.cssText = 'position:fixed;left:' + (rect.left - 11) + 'px;top:' + (rect.top - 11)
+        + 'px;width:22px;height:22px;border-radius:50%;background:#4f46e5;color:#fff;'
+        + 'font:600 11px/22px system-ui,sans-serif;text-align:center;pointer-events:none;'
+        + 'box-shadow:0 1px 4px rgba(0,0,0,0.3);z-index:' + Z_INDEX + ';';
+      node.textContent = String(index + 1);
+      document.documentElement.appendChild(node);
+    });
+  }
+
+  function routeDidChange() {
+    if (mode) {
+      setMode(null);
+      send('capture-cancelled', {});
     } else {
-      document.removeEventListener('mousedown', onMouseDown, true);
-      document.removeEventListener('mousemove', onMouseMove, true);
-      document.removeEventListener('mouseup', onMouseUp, true);
-      document.removeEventListener('click', onClickCapture, true);
-      document.removeEventListener('keydown', onKeyDown, true);
-      document.body.style.cursor = '';
-      hideOverlay(hoverOverlay);
-      hideOverlay(dragOverlay);
-      closePopup();
+      hideCandidate();
     }
+    var identity = pageIdentity();
+    send('route-changed', identity);
+    renderMarkers();
   }
 
-  function removeMarker(num) {
-    if (num == null) return;
-    var nodes = document.querySelectorAll('[data-kandev-marker="' + String(num) + '"]');
-    for (var i = 0; i < nodes.length; i++) {
-      if (nodes[i].parentNode) nodes[i].parentNode.removeChild(nodes[i]);
-    }
-  }
-
-  window.addEventListener('message', function (e) {
-    if (!e.data || e.data.source !== SOURCE) return;
-    if (e.data.type === 'toggle-inspect') setActive(!!(e.data.payload && e.data.payload.active));
-    if (e.data.type === 'clear-annotations') clearMarkers();
-    if (e.data.type === 'remove-marker') removeMarker(e.data.payload && e.data.payload.number);
+  var originalPushState = history.pushState;
+  history.pushState = function () {
+    var result = originalPushState.apply(this, arguments);
+    routeDidChange();
+    return result;
+  };
+  var originalReplaceState = history.replaceState;
+  history.replaceState = function () {
+    var result = originalReplaceState.apply(this, arguments);
+    routeDidChange();
+    return result;
+  };
+  window.addEventListener('popstate', routeDidChange);
+  window.addEventListener('hashchange', routeDidChange);
+  window.addEventListener('scroll', renderMarkers, true);
+  window.addEventListener('resize', function () {
+    if (candidate) showCandidate(candidate);
+    renderMarkers();
   });
 
-  send('inspector-ready', {});
+  window.addEventListener('message', function (event) {
+    var message = event.data;
+    if (!message || message.source !== SOURCE || message.version !== PROTOCOL_VERSION) return;
+    switch (message.type) {
+      case 'set-capture-mode':
+        setMode(message.payload && message.payload.mode);
+        break;
+      case 'project-markers':
+        projectedMarkers = message.payload && Array.isArray(message.payload.markers)
+          ? message.payload.markers.slice()
+          : [];
+        renderMarkers();
+        break;
+      default:
+        break;
+    }
+  });
+
+  send('inspector-ready', pageIdentity());
 })();
diff --git a/apps/backend/internal/agentctl/server/config/config_test.go b/apps/backend/internal/agentctl/server/config/config_test.go
index 60dabd3bb1..9868cc827e 100644
--- a/apps/backend/internal/agentctl/server/config/config_test.go
+++ b/apps/backend/internal/agentctl/server/config/config_test.go
@@ -275,6 +275,7 @@ func TestCollectAgentEnvGitHubCLIShimSurvivesLoginShell(t *testing.T) {
 		"KANDEV_GITHUB_CLI_BASH_ENV":          bashEnv,
 		"BASH_ENV":                            parentBashEnv,
 		"KANDEV_BASH_HOOK_MARKER":             marker,
+		"HOME":                                t.TempDir(),
 		pathEnvKey:                            "/usr/bin:/bin",
 	})
 	if err != nil {
diff --git a/apps/backend/internal/agentctl/server/process/git_empty_remote_test.go b/apps/backend/internal/agentctl/server/process/git_empty_remote_test.go
index 0d03a4d9d5..82cc2663ca 100644
--- a/apps/backend/internal/agentctl/server/process/git_empty_remote_test.go
+++ b/apps/backend/internal/agentctl/server/process/git_empty_remote_test.go
@@ -339,6 +339,7 @@ func setupEmptyRemoteTaskRepo(t *testing.T) (string, string, *GitOperator) {
 	originDir := filepath.Join(root, "origin.git")
 	repoDir := filepath.Join(root, "repo")
 	runGit(t, root, "init", "--bare", "--initial-branch=main", originDir)
+	runGit(t, originDir, "config", "core.hooksPath", filepath.Join(originDir, "hooks"))
 	runGit(t, root, "init", "-b", "main", repoDir)
 	runGit(t, repoDir, "config", "user.name", "Task User")
 	runGit(t, repoDir, "config", "user.email", "task@example.com")
diff --git a/apps/backend/internal/agentctl/server/process/git_push_preflight_test.go b/apps/backend/internal/agentctl/server/process/git_push_preflight_test.go
index da3338905b..f4b5ac375e 100644
--- a/apps/backend/internal/agentctl/server/process/git_push_preflight_test.go
+++ b/apps/backend/internal/agentctl/server/process/git_push_preflight_test.go
@@ -88,17 +88,17 @@ func TestPushPreflightUsesStableGitEnvironment(t *testing.T) {
 	}
 	t.Setenv("PATH", shimDir+string(os.PathListSeparator)+os.Getenv("PATH"))
 	t.Setenv("KANDEV_TEST_PUSH_ENV", envPath)
-	t.Setenv("LANG", "pt_PT.UTF-8")
-	t.Setenv("LC_ALL", "pt_PT.UTF-8")
+	t.Setenv("LANG", "POSIX")
+	t.Setenv("LC_ALL", "POSIX")
 	t.Setenv("GIT_TERMINAL_PROMPT", "1")
 
-	_, err = operator.PushPreflight(context.Background(), PushOptions{})
+	result, err := operator.PushPreflight(context.Background(), PushOptions{})
 	if err != nil {
 		t.Fatalf("PushPreflight returned error: %v", err)
 	}
 	env, err := os.ReadFile(envPath)
 	if err != nil {
-		t.Fatalf("read recorded Git environment: %v", err)
+		t.Fatalf("read recorded Git environment: %v; result=%+v", err, result)
 	}
 	want := "LANG=C\nLC_ALL=C\nGIT_TERMINAL_PROMPT=0\n"
 	if got := string(env); got != want {
diff --git a/apps/backend/internal/agentctl/server/process/manager_rescan_test.go b/apps/backend/internal/agentctl/server/process/manager_rescan_test.go
index 0c44c08e15..b0edd0555a 100644
--- a/apps/backend/internal/agentctl/server/process/manager_rescan_test.go
+++ b/apps/backend/internal/agentctl/server/process/manager_rescan_test.go
@@ -670,6 +670,7 @@ func initGitRepoAt(t *testing.T, dir string) {
 	runIn("git", "config", "user.email", "test@example.com")
 	runIn("git", "config", "user.name", "Test User")
 	runIn("git", "config", "commit.gpgsign", "false")
+	runIn("git", "config", "core.hooksPath", os.DevNull)
 	runIn("git", "commit", "--allow-empty", "-m", "initial")
 }
 
diff --git a/apps/backend/internal/agentctl/server/process/workspace_tracker_test.go b/apps/backend/internal/agentctl/server/process/workspace_tracker_test.go
index 09ec348b0f..da188ad2db 100644
--- a/apps/backend/internal/agentctl/server/process/workspace_tracker_test.go
+++ b/apps/backend/internal/agentctl/server/process/workspace_tracker_test.go
@@ -158,6 +158,7 @@ func TestRunGit_DisablesCommitSigning(t *testing.T) {
 	runGit(t, repoDir, "init", "--initial-branch=main")
 	runGit(t, repoDir, "config", "user.email", "test@test.com")
 	runGit(t, repoDir, "config", "user.name", "Test User")
+	runGit(t, repoDir, "config", "core.hooksPath", os.DevNull)
 	runGit(t, repoDir, "config", "commit.gpgsign", "true")
 	runGit(t, repoDir, "config", "gpg.format", "ssh")
 	runGit(t, repoDir, "config", "user.signingkey", "~/.ssh/id_ed25519.pub")
@@ -333,6 +334,7 @@ func TestGetGitStatus_ReportsUpstreamHeadForHistoryStates(t *testing.T) {
 	providerDir := filepath.Join(providerRoot, "provider")
 	runGit(t, providerDir, "config", "user.email", "provider@test.com")
 	runGit(t, providerDir, "config", "user.name", "Provider User")
+	runGit(t, providerDir, "config", "core.hooksPath", os.DevNull)
 	runGit(t, providerDir, "checkout", "-b", "feature/pr", "origin/feature/pr")
 	writeFile(t, providerDir, "provider.txt", "provider")
 	runGit(t, providerDir, "add", ".")
diff --git a/apps/backend/internal/backendapp/helpers.go b/apps/backend/internal/backendapp/helpers.go
index db08368361..b859975a4f 100644
--- a/apps/backend/internal/backendapp/helpers.go
+++ b/apps/backend/internal/backendapp/helpers.go
@@ -746,6 +746,10 @@ func registerRoutes(p routeParams) {
 	}
 	// Per-user task scoping for plan reads/writes (opt-in auth).
 	planService.SetTaskAuthorizer(p.taskSvc.AuthorizeTaskAccess)
+	if attachments := p.taskSvc.AttachmentService(); attachments != nil {
+		planService.SetPreviewAttachmentCleaner(attachments)
+		planService.SetPreviewScreenshotValidator(attachments)
+	}
 	// Stamps each plan revision with the task's workflow step at write time.
 	planService.SetWorkflowStepGetter(&workflowStepGetterAdapter{svc: p.services.Workflow})
 	clarificationStore := clarification.NewStore(2 * time.Hour)
diff --git a/apps/backend/internal/events/types.go b/apps/backend/internal/events/types.go
index 72a2a77948..40d7899ecd 100644
--- a/apps/backend/internal/events/types.go
+++ b/apps/backend/internal/events/types.go
@@ -123,12 +123,13 @@ const TaskStatusSummaryUpdated = "task.status_summary.updated"
 
 // Event types for task plans
 const (
-	TaskPlanCreated         = "task_plan.created"
-	TaskPlanUpdated         = "task_plan.updated"
-	TaskPlanDeleted         = "task_plan.deleted"
-	TaskPlanRevisionCreated = "task_plan.revision.created"
-	TaskPlanReverted        = "task_plan.reverted"
-	TaskPlanCommentsChanged = "task_plan.comments.changed"
+	TaskPlanCreated            = "task_plan.created"
+	TaskPlanUpdated            = "task_plan.updated"
+	TaskPlanDeleted            = "task_plan.deleted"
+	TaskPlanRevisionCreated    = "task_plan.revision.created"
+	TaskPlanReverted           = "task_plan.reverted"
+	TaskPlanCommentsChanged    = "task_plan.comments.changed"
+	TaskPreviewFeedbackChanged = "task.preview_feedback.changed"
 )
 
 // Event types for task walkthroughs (agent-authored guided code tours)
diff --git a/apps/backend/internal/gateway/websocket/task_notifications.go b/apps/backend/internal/gateway/websocket/task_notifications.go
index 22b53a60a3..81d6dfb7d2 100644
--- a/apps/backend/internal/gateway/websocket/task_notifications.go
+++ b/apps/backend/internal/gateway/websocket/task_notifications.go
@@ -53,6 +53,7 @@ func RegisterTaskNotifications(ctx context.Context, eventBus bus.EventBus, hub *
 	b.subscribe(eventBus, events.TaskPlanRevisionCreated, ws.ActionTaskPlanRevisionCreated)
 	b.subscribe(eventBus, events.TaskPlanReverted, ws.ActionTaskPlanReverted)
 	b.subscribe(eventBus, events.TaskPlanCommentsChanged, ws.ActionTaskPlanCommentsChanged)
+	b.subscribe(eventBus, events.TaskPreviewFeedbackChanged, ws.ActionTaskPreviewFeedbackChanged)
 	b.subscribe(eventBus, events.TaskWalkthroughCreated, ws.ActionTaskWalkthroughCreated)
 	b.subscribe(eventBus, events.TaskWalkthroughUpdated, ws.ActionTaskWalkthroughUpdated)
 	b.subscribe(eventBus, events.TaskWalkthroughDeleted, ws.ActionTaskWalkthroughDeleted)
@@ -266,11 +267,14 @@ func (b *TaskEventBroadcaster) routeBroadcast(
 	msg *ws.Message,
 ) error {
 	switch action {
-	case ws.ActionTaskPlanCommentsChanged:
+	case ws.ActionTaskPlanCommentsChanged, ws.ActionTaskPreviewFeedbackChanged:
 		taskID := extractStringField(data, "task_id")
 		if snapshot, ok := data.(*models.TaskPlanCommentSnapshot); ok {
 			taskID = snapshot.TaskID
 		}
+		if snapshot, ok := data.(*models.TaskPreviewFeedbackSnapshot); ok {
+			taskID = snapshot.TaskID
+		}
 		if taskID != "" {
 			b.hub.BroadcastToTask(taskID, msg)
 		}
diff --git a/apps/backend/internal/gateway/websocket/task_notifications_test.go b/apps/backend/internal/gateway/websocket/task_notifications_test.go
index d81cb748a0..fcbc430271 100644
--- a/apps/backend/internal/gateway/websocket/task_notifications_test.go
+++ b/apps/backend/internal/gateway/websocket/task_notifications_test.go
@@ -245,6 +245,7 @@ func TestTaskEventBroadcaster_NoDuplicateSubscriptions(t *testing.T) {
 		events.GitHubTaskPRDeleted,
 		events.GitLabTaskMRUpdated,
 		events.GitLabTaskMRDeleted,
+		events.TaskPreviewFeedbackChanged,
 	} {
 		subject := subject
 		t.Run(subject, func(t *testing.T) {
diff --git a/apps/backend/internal/launcher/service_native_update_test.go b/apps/backend/internal/launcher/service_native_update_test.go
index 451af24142..4c316ba0db 100644
--- a/apps/backend/internal/launcher/service_native_update_test.go
+++ b/apps/backend/internal/launcher/service_native_update_test.go
@@ -66,6 +66,8 @@ func TestNativeServiceRenderersIncludeManagedIdentity(t *testing.T) {
 }
 
 func TestInstallSystemdWritesOwnerOnlyNativeMetadata(t *testing.T) {
+	t.Setenv("KANDEV_BUNDLE_DIR", "")
+	t.Setenv("KANDEV_VERSION", "")
 	originalExecutablePath := executablePath
 	originalExecuteServiceCommand := executeServiceCommand
 	originalServicePrintln := servicePrintln
@@ -126,6 +128,8 @@ func TestInstallSystemdWritesOwnerOnlyNativeMetadata(t *testing.T) {
 }
 
 func TestInstallLaunchdWritesNativeMetadata(t *testing.T) {
+	t.Setenv("KANDEV_BUNDLE_DIR", "")
+	t.Setenv("KANDEV_VERSION", "")
 	originalExecutablePath := executablePath
 	originalExecuteServiceCommand := executeServiceCommand
 	originalServicePrintln := servicePrintln
diff --git a/apps/backend/internal/orchestrator/handlers/queue_handlers.go b/apps/backend/internal/orchestrator/handlers/queue_handlers.go
index 85d7a663db..5793512b3f 100644
--- a/apps/backend/internal/orchestrator/handlers/queue_handlers.go
+++ b/apps/backend/internal/orchestrator/handlers/queue_handlers.go
@@ -21,7 +21,9 @@ import (
 	"github.com/kandev/kandev/internal/task/dto"
 	"github.com/kandev/kandev/internal/task/models"
 	"github.com/kandev/kandev/internal/task/plancomments"
+	"github.com/kandev/kandev/internal/task/previewfeedback"
 	"github.com/kandev/kandev/internal/task/repository/plancommenttx"
+	"github.com/kandev/kandev/internal/task/repository/previewfeedbacktx"
 	"github.com/kandev/kandev/internal/task/repository/repoerrors"
 	v1 "github.com/kandev/kandev/pkg/api/v1"
 	ws "github.com/kandev/kandev/pkg/websocket"
@@ -289,6 +291,16 @@ type QueueAttachmentClaimPreparer interface {
 	PrepareQueueAttachmentClaim(context.Context, string, []v1.MessageAttachment) (messagequeue.QueueAttachmentClaim, error)
 }
 
+type previewFeedbackAttachmentPreparer interface {
+	PreviewFeedbackAttachments(context.Context, string, []models.TaskPreviewFeedbackRef) ([]v1.MessageAttachment, error)
+}
+
+type planCommentQueueAttachmentPreparation struct {
+	claim           *messagequeue.QueueAttachmentClaim
+	previewResolver func(context.Context, string, []models.TaskPreviewFeedbackRef) ([]messagequeue.MessageAttachment, error)
+	claimResolver   func(context.Context, string, []messagequeue.MessageAttachment) (messagequeue.QueueAttachmentClaim, error)
+}
+
 type QueueAttachmentReleaser interface {
 	ReleaseMessageAttachments(ctx context.Context, taskID, sessionID string, attachments []v1.MessageAttachment) error
 }
@@ -561,6 +573,7 @@ type wsQueueMessageRequest struct {
 	ContextFiles          []v1.ContextFileMeta             `json:"context_files,omitempty"`
 	EntityReferences      []v1.EntityReference             `json:"entity_references,omitempty"`
 	PlanCommentRefs       []models.TaskPlanCommentRef      `json:"plan_comment_refs,omitempty"`
+	PreviewFeedbackRefs   []models.TaskPreviewFeedbackRef  `json:"preview_feedback_refs,omitempty"`
 	RequirePrimarySession bool                             `json:"require_primary_session,omitempty"`
 	UserID                string                           `json:"user_id,omitempty"`
 }
@@ -588,7 +601,7 @@ func (h *QueueHandlers) wsQueueMessage(ctx context.Context, msg *ws.Message) (*w
 		}
 		return denied, nil
 	}
-	if req.Content == "" && len(req.Attachments) == 0 && len(req.PlanCommentRefs) == 0 {
+	if req.Content == "" && len(req.Attachments) == 0 && len(req.PlanCommentRefs) == 0 && len(req.PreviewFeedbackRefs) == 0 {
 		return ws.NewError(msg.ID, msg.Action, ws.ErrorCodeValidation, "content or attachments are required", nil)
 	}
 	if validationError := validatePlanCommentQueueRequest(req); validationError != "" {
@@ -606,7 +619,7 @@ func (h *QueueHandlers) wsQueueMessage(ctx context.Context, msg *ws.Message) (*w
 		return ws.NewError(msg.ID, msg.Action, ws.ErrorCodeValidation, reservedIdentityError(req.UserID), nil)
 	}
 	var err error
-	identifiedOrdinary := req.ClientQueueID != "" && len(req.PlanCommentRefs) == 0
+	identifiedOrdinary := req.ClientQueueID != "" && len(req.PlanCommentRefs) == 0 && len(req.PreviewFeedbackRefs) == 0
 	if identifiedOrdinary {
 		references, normalizeErr := entityrefs.NormalizeForSubmission(req.EntityReferences)
 		if normalizeErr != nil {
@@ -639,6 +652,7 @@ func (h *QueueHandlers) wsQueueMessage(ctx context.Context, msg *ws.Message) (*w
 		metadata[messagequeue.MetadataQueueAdmissionIDs] = []string{req.ClientQueueID}
 	}
 	var snapshot *models.TaskPlanCommentSnapshot
+	var previewSnapshot *models.TaskPreviewFeedbackSnapshot
 	var replay bool
 	var queued *messagequeue.QueuedMessage
 	switch {
@@ -647,11 +661,11 @@ func (h *QueueHandlers) wsQueueMessage(ctx context.Context, msg *ws.Message) (*w
 		if errors.Is(err, errQueueInvalidReferences) {
 			return ws.NewError(msg.ID, msg.Action, ws.ErrorCodeValidation, queueInvalidReferences, nil)
 		}
-	case len(req.PlanCommentRefs) > 0:
+	case len(req.PlanCommentRefs) > 0 || len(req.PreviewFeedbackRefs) > 0:
 		result, admissionErr := h.admitPlanCommentQueuedMessage(ctx, &req, queuedBy, metadata)
 		err = admissionErr
 		if result != nil {
-			queued, snapshot, replay = result.Message, result.Snapshot, result.Replay
+			queued, snapshot, previewSnapshot, replay = result.Message, result.Snapshot, result.PreviewSnapshot, result.Replay
 		}
 	default:
 		queued, err = h.admitQueuedMessage(ctx, &req, queuedBy, metadata)
@@ -686,6 +700,9 @@ func (h *QueueHandlers) wsQueueMessage(ctx context.Context, msg *ws.Message) (*w
 		if errors.Is(err, errQueuedAttachmentUnavailable) {
 			return ws.NewError(msg.ID, msg.Action, ws.ErrorCodeValidation, "Attachment is no longer available", nil)
 		}
+		if errors.Is(err, errPreviewFeedbackAttachmentInvalid) {
+			return ws.NewError(msg.ID, msg.Action, ws.ErrorCodeValidation, "attachment metadata is invalid", nil)
+		}
 		if conflict := planCommentQueueError(msg, err); conflict != nil {
 			return conflict, nil
 		}
@@ -700,6 +717,7 @@ func (h *QueueHandlers) wsQueueMessage(ctx context.Context, msg *ws.Message) (*w
 	}
 	if !replay {
 		h.publishPlanCommentSnapshot(ctx, snapshot)
+		h.publishPreviewFeedbackSnapshot(ctx, previewSnapshot)
 	}
 	h.publishStatusForIdentity(ctx, identity, queued)
 	if h.queueReadiness != nil {
@@ -709,11 +727,12 @@ func (h *QueueHandlers) wsQueueMessage(ctx context.Context, msg *ws.Message) (*w
 }
 
 var (
-	errQueueInvalidReferences        = errors.New("invalid queued entity references")
-	errQueuedAttachmentUnavailable   = errors.New("queued attachment unavailable")
-	errQueuedAttachmentRollback      = errors.New("queued attachment rollback failed")
-	errAttachmentCleanupLeaseActive  = errors.New("queue attachment cleanup blocked by edit lease")
-	errAttachmentCleanupEntryChanged = errors.New("queue attachment cleanup entry changed")
+	errQueueInvalidReferences           = errors.New("invalid queued entity references")
+	errQueuedAttachmentUnavailable      = errors.New("queued attachment unavailable")
+	errQueuedAttachmentRollback         = errors.New("queued attachment rollback failed")
+	errPreviewFeedbackAttachmentInvalid = errors.New("preview feedback attachment metadata is invalid")
+	errAttachmentCleanupLeaseActive     = errors.New("queue attachment cleanup blocked by edit lease")
+	errAttachmentCleanupEntryChanged    = errors.New("queue attachment cleanup entry changed")
 )
 
 func (h *QueueHandlers) admitIdentifiedOrdinaryQueuedMessage(
@@ -917,36 +936,111 @@ func (h *QueueHandlers) admitPlanCommentQueuedMessage(
 		return nil, errors.New("plan comment queue admission is unavailable")
 	}
 	attachments := queueAttachmentsToV1(req.Attachments)
-	var attachmentClaim *messagequeue.QueueAttachmentClaim
-	if h.attachmentClaimer != nil && len(attachments) > 0 {
-		preparer, ok := h.attachmentClaimer.(QueueAttachmentClaimPreparer)
-		if !ok {
-			return nil, errors.New("transactional attachment admission is unavailable")
-		}
-		claim, err := preparer.PrepareQueueAttachmentClaim(ctx, req.TaskID, attachments)
-		if err != nil {
-			return nil, fmt.Errorf("%w: %v", errQueuedAttachmentUnavailable, err)
-		}
-		attachmentClaim = &claim
+	prepared, err := h.preparePlanCommentQueueAttachments(ctx, req, attachments)
+	if err != nil {
+		return nil, err
 	}
 	return service.QueueMessageWithPlanComments(ctx, messagequeue.PlanCommentQueueRequest{
 		ClientQueueID: req.ClientQueueID, SessionID: req.SessionID, TaskID: req.TaskID,
 		SessionIncarnationID: req.SessionIncarnationID,
 		Content:              req.Content, Model: req.Model, UserID: queuedBy, PlanMode: req.PlanMode,
 		Attachments: req.Attachments, Metadata: metadata, PlanCommentRefs: req.PlanCommentRefs,
-		RequirePrimarySession: req.RequirePrimarySession, AttachmentClaim: attachmentClaim,
+		PreviewFeedbackRefs:   req.PreviewFeedbackRefs,
+		RequirePrimarySession: req.RequirePrimarySession, AttachmentClaim: prepared.claim,
+		PreviewFeedbackAttachmentResolver: prepared.previewResolver,
+		AttachmentClaimResolver:           prepared.claimResolver,
 	})
 }
 
+func (h *QueueHandlers) preparePlanCommentQueueAttachments(
+	ctx context.Context,
+	req *wsQueueMessageRequest,
+	attachments []v1.MessageAttachment,
+) (planCommentQueueAttachmentPreparation, error) {
+	if len(req.PreviewFeedbackRefs) == 0 {
+		return h.prepareOrdinaryQueueAttachments(ctx, req.TaskID, attachments)
+	}
+	return h.preparePreviewFeedbackQueueAttachments(req)
+}
+
+func (h *QueueHandlers) prepareOrdinaryQueueAttachments(
+	ctx context.Context,
+	taskID string,
+	attachments []v1.MessageAttachment,
+) (planCommentQueueAttachmentPreparation, error) {
+	if h.attachmentClaimer == nil || len(attachments) == 0 {
+		return planCommentQueueAttachmentPreparation{}, nil
+	}
+	preparer, ok := h.attachmentClaimer.(QueueAttachmentClaimPreparer)
+	if !ok {
+		return planCommentQueueAttachmentPreparation{}, errors.New("transactional attachment admission is unavailable")
+	}
+	claim, err := preparer.PrepareQueueAttachmentClaim(ctx, taskID, attachments)
+	if err != nil {
+		return planCommentQueueAttachmentPreparation{}, fmt.Errorf("%w: %v", errQueuedAttachmentUnavailable, err)
+	}
+	return planCommentQueueAttachmentPreparation{claim: &claim}, nil
+}
+
+func (h *QueueHandlers) preparePreviewFeedbackQueueAttachments(
+	req *wsQueueMessageRequest,
+) (planCommentQueueAttachmentPreparation, error) {
+	preparer, ok := h.attachmentClaimer.(previewFeedbackAttachmentPreparer)
+	if !ok {
+		return planCommentQueueAttachmentPreparation{}, nil
+	}
+	prepared := planCommentQueueAttachmentPreparation{
+		previewResolver: func(
+			resolveCtx context.Context,
+			taskID string,
+			refs []models.TaskPreviewFeedbackRef,
+		) ([]messagequeue.MessageAttachment, error) {
+			resolved, err := preparer.PreviewFeedbackAttachments(resolveCtx, taskID, refs)
+			if err != nil {
+				return nil, err
+			}
+			converted := queueAttachmentsFromV1(resolved)
+			if err := validatePreviewFeedbackQueueAttachments(req.Attachments, converted); err != nil {
+				return nil, err
+			}
+			return converted, nil
+		},
+	}
+	if claimPreparer, canPrepare := h.attachmentClaimer.(QueueAttachmentClaimPreparer); canPrepare && len(req.Attachments) > 0 {
+		prepared.claimResolver = func(
+			resolveCtx context.Context,
+			taskID string,
+			candidate []messagequeue.MessageAttachment,
+		) (messagequeue.QueueAttachmentClaim, error) {
+			return claimPreparer.PrepareQueueAttachmentClaim(resolveCtx, taskID, queueAttachmentsToV1(candidate))
+		}
+	}
+	return prepared, nil
+}
+
+func validatePreviewFeedbackQueueAttachments(
+	caller []messagequeue.MessageAttachment,
+	resolved []messagequeue.MessageAttachment,
+) error {
+	all := append(append([]messagequeue.MessageAttachment{}, caller...), resolved...)
+	if invalid := firstInvalidDeliveryMode(all); invalid >= 0 {
+		return fmt.Errorf("%w: attachment delivery mode at index %d", errPreviewFeedbackAttachmentInvalid, invalid)
+	}
+	if invalid := firstInvalidAttachment(all); invalid >= 0 {
+		return fmt.Errorf("%w at index %d", errPreviewFeedbackAttachmentInvalid, invalid)
+	}
+	return nil
+}
+
 func validatePlanCommentQueueRequest(req wsQueueMessageRequest) string {
 	if len(req.ClientQueueID) > messagequeue.MaxQueueAdmissionIDLength {
 		return "client_queue_id is too long"
 	}
-	if len(req.PlanCommentRefs) == 0 {
+	if len(req.PlanCommentRefs) == 0 && len(req.PreviewFeedbackRefs) == 0 {
 		return ""
 	}
 	if req.ClientQueueID == "" {
-		return "client_queue_id is required with plan comments"
+		return "client_queue_id is required with task feedback"
 	}
 	if plancomments.ContainsReservedPlaceholder(req.Content) {
 		return "content contains a reserved plan comment marker"
@@ -961,14 +1055,34 @@ func validatePlanCommentQueueRequest(req wsQueueMessageRequest) string {
 		}
 		seen[ref.ID] = struct{}{}
 	}
+	seenPreview := make(map[string]struct{}, len(req.PreviewFeedbackRefs))
+	for _, ref := range req.PreviewFeedbackRefs {
+		if ref.ID == "" || ref.Version <= 0 {
+			return "preview_feedback_refs are invalid"
+		}
+		if _, duplicate := seenPreview[ref.ID]; duplicate {
+			return "preview_feedback_refs contain duplicates"
+		}
+		seenPreview[ref.ID] = struct{}{}
+	}
 	return ""
 }
 
 func planCommentQueueError(msg *ws.Message, err error) *ws.Message {
-	if errors.Is(err, plancomments.ErrRenderedTooLarge) {
+	if errors.Is(err, plancomments.ErrRenderedTooLarge) || errors.Is(err, previewfeedback.ErrPromptTooLarge) {
 		response, _ := ws.NewError(msg.ID, msg.Action, ws.ErrorCodeValidation, "Rendered message content is too long", nil)
 		return response
 	}
+	var previewChanged *previewfeedbacktx.FeedbackChangedError
+	if errors.As(err, &previewChanged) {
+		details := map[string]interface{}{}
+		if previewChanged.Snapshot != nil {
+			details["snapshot"] = dto.TaskPreviewFeedbackSnapshotFromModel(previewChanged.Snapshot)
+		}
+		response, _ := ws.NewError(msg.ID, msg.Action, ws.ErrorCodePreviewFeedbackChanged,
+			"Task preview feedback changed", details)
+		return response
+	}
 	var commentsChanged *plancommenttx.CommentsChangedError
 	if errors.As(err, &commentsChanged) {
 		details := map[string]interface{}{}
@@ -1023,6 +1137,19 @@ func (h *QueueHandlers) publishPlanCommentSnapshot(
 	}
 }
 
+func (h *QueueHandlers) publishPreviewFeedbackSnapshot(
+	ctx context.Context,
+	snapshot *models.TaskPreviewFeedbackSnapshot,
+) {
+	if snapshot == nil || h.eventBus == nil {
+		return
+	}
+	if err := h.eventBus.Publish(ctx, events.TaskPreviewFeedbackChanged,
+		bus.NewEvent(events.TaskPreviewFeedbackChanged, "queue-handlers", snapshot)); err != nil {
+		h.logger.Error("publish consumed preview feedback", zap.String("task_id", snapshot.TaskID), zap.Error(err))
+	}
+}
+
 func (h *QueueHandlers) claimQueuedAttachmentsAfterInsert(req *wsQueueMessageRequest) func(context.Context, *messagequeue.QueuedMessage) error {
 	return func(admittedCtx context.Context, source *messagequeue.QueuedMessage) error {
 		claimErr := h.attachmentClaimer.ClaimMessageAttachments(
@@ -2322,6 +2449,18 @@ func queueAttachmentsToV1(attachments []messagequeue.MessageAttachment) []v1.Mes
 	return converted
 }
 
+func queueAttachmentsFromV1(attachments []v1.MessageAttachment) []messagequeue.MessageAttachment {
+	converted := make([]messagequeue.MessageAttachment, 0, len(attachments))
+	for _, attachment := range attachments {
+		converted = append(converted, messagequeue.MessageAttachment{
+			AttachmentID: attachment.AttachmentID, Type: attachment.Type, Data: attachment.Data,
+			MimeType: attachment.MimeType, Name: attachment.Name, SizeBytes: attachment.SizeBytes,
+			DeliveryMode: attachment.DeliveryMode,
+		})
+	}
+	return converted
+}
+
 type wsAppendToQueueRequest struct {
 	SessionID            string `json:"session_id"`
 	TaskID               string `json:"task_id"`
diff --git a/apps/backend/internal/orchestrator/handlers/queue_handlers_plan_comments_test.go b/apps/backend/internal/orchestrator/handlers/queue_handlers_plan_comments_test.go
index 50c07096f9..4658db69d4 100644
--- a/apps/backend/internal/orchestrator/handlers/queue_handlers_plan_comments_test.go
+++ b/apps/backend/internal/orchestrator/handlers/queue_handlers_plan_comments_test.go
@@ -12,6 +12,7 @@ import (
 	"github.com/kandev/kandev/internal/task/models"
 	"github.com/kandev/kandev/internal/task/plancomments"
 	"github.com/kandev/kandev/internal/task/repository/plancommenttx"
+	"github.com/kandev/kandev/internal/task/repository/previewfeedbacktx"
 	v1 "github.com/kandev/kandev/pkg/api/v1"
 	ws "github.com/kandev/kandev/pkg/websocket"
 	"github.com/stretchr/testify/require"
@@ -57,6 +58,15 @@ type recordingPlanCommentAttachmentPreparer struct {
 	prepared []string
 	claim    messagequeue.QueueAttachmentClaim
 	err      error
+	preview  []v1.MessageAttachment
+}
+
+func (p *recordingPlanCommentAttachmentPreparer) PreviewFeedbackAttachments(
+	_ context.Context,
+	_ string,
+	_ []models.TaskPreviewFeedbackRef,
+) ([]v1.MessageAttachment, error) {
+	return p.preview, p.err
 }
 
 func (*recordingPlanCommentAttachmentPreparer) ClaimMessageAttachments(
@@ -134,6 +144,31 @@ func TestWsQueueMessageAdmitsPlanCommentsAndPublishesSnapshot(t *testing.T) {
 	require.Same(t, snapshot, eventBus.events[0].Data)
 }
 
+func TestWsQueueMessageAdmitsPreviewFeedbackAndPublishesSnapshot(t *testing.T) {
+	handlers, service, eventBus := newPlanCommentQueueHandlers(t)
+	handlers.SetAttachmentClaimer(&recordingPlanCommentAttachmentPreparer{})
+	refs := []models.TaskPreviewFeedbackRef{{ID: "preview", Version: 3}}
+	snapshot := &models.TaskPreviewFeedbackSnapshot{TaskID: "task", Revision: 7}
+	service.result = &messagequeue.PlanCommentQueueResult{
+		Message: &messagequeue.QueuedMessage{
+			ID: "client-queue", SessionID: "session", TaskID: "task",
+			Content: "resolved feedback", QueuedBy: messagequeue.QueuedByUser,
+		},
+		PreviewSnapshot: snapshot,
+	}
+
+	response, err := handlers.wsQueueMessage(context.Background(), createTestMessage(t, ws.ActionMessageQueueAdd, map[string]interface{}{
+		"session_id": "session", "task_id": "task", "session_incarnation_id": "incarnation",
+		"client_queue_id": "client-queue", "preview_feedback_refs": refs,
+	}))
+	require.NoError(t, err)
+	require.Equal(t, ws.MessageTypeResponse, response.Type)
+	require.NotNil(t, service.request)
+	require.Equal(t, refs, service.request.PreviewFeedbackRefs)
+	require.Equal(t, []string{events.TaskPreviewFeedbackChanged, events.MessageQueueStatusChanged}, eventBus.subjects)
+	require.Same(t, snapshot, eventBus.events[0].Data)
+}
+
 func TestWsQueueMessageValidatesPlanCommentAdmission(t *testing.T) {
 	tests := []struct {
 		name    string
@@ -190,6 +225,13 @@ func TestWsQueueMessageMapsPlanCommentConflicts(t *testing.T) {
 			}},
 			code: ws.ErrorCodePlanCommentsChanged,
 		},
+		{
+			name: "preview feedback changed",
+			err: &previewfeedbacktx.FeedbackChangedError{Snapshot: &models.TaskPreviewFeedbackSnapshot{
+				TaskID: "task", Revision: 9,
+			}},
+			code: ws.ErrorCodePreviewFeedbackChanged,
+		},
 		{
 			name: "primary changed",
 			err: &plancommenttx.PrimarySessionChangedError{
@@ -210,6 +252,7 @@ func TestWsQueueMessageMapsPlanCommentConflicts(t *testing.T) {
 	for _, test := range tests {
 		t.Run(test.name, func(t *testing.T) {
 			handlers, service, eventBus := newPlanCommentQueueHandlers(t)
+			handlers.SetAttachmentClaimer(&recordingPlanCommentAttachmentPreparer{})
 			service.err = test.err
 			response, err := handlers.wsQueueMessage(context.Background(), createTestMessage(t, ws.ActionMessageQueueAdd, map[string]interface{}{
 				"session_id": "session", "task_id": "task", "client_queue_id": "queue",
diff --git a/apps/backend/internal/orchestrator/handlers/queue_handlers_preview_feedback_test.go b/apps/backend/internal/orchestrator/handlers/queue_handlers_preview_feedback_test.go
new file mode 100644
index 0000000000..0d5c3a08f6
--- /dev/null
+++ b/apps/backend/internal/orchestrator/handlers/queue_handlers_preview_feedback_test.go
@@ -0,0 +1,228 @@
+package handlers
+
+import (
+	"context"
+	"encoding/json"
+	"errors"
+	"path/filepath"
+	"testing"
+	"time"
+
+	"github.com/jmoiron/sqlx"
+	"github.com/kandev/kandev/internal/common/logger"
+	dbutil "github.com/kandev/kandev/internal/db"
+	"github.com/kandev/kandev/internal/orchestrator/messagequeue"
+	"github.com/kandev/kandev/internal/task/models"
+	tasksqlite "github.com/kandev/kandev/internal/task/repository/sqlite"
+	v1 "github.com/kandev/kandev/pkg/api/v1"
+	ws "github.com/kandev/kandev/pkg/websocket"
+	"github.com/stretchr/testify/require"
+)
+
+type replayPreviewFeedbackPreparer struct {
+	calls   int
+	err     error
+	preview []v1.MessageAttachment
+}
+
+func (p *replayPreviewFeedbackPreparer) PreviewFeedbackAttachments(
+	context.Context,
+	string,
+	[]models.TaskPreviewFeedbackRef,
+) ([]v1.MessageAttachment, error) {
+	p.calls++
+	return p.preview, p.err
+}
+
+func (*replayPreviewFeedbackPreparer) ClaimMessageAttachments(
+	context.Context,
+	string,
+	string,
+	[]v1.MessageAttachment,
+) error {
+	return nil
+}
+
+// @covers AC-TASKS-WEB-PREVIEW-FEEDBACK-003.5
+// @covers AC-TASKS-WEB-PREVIEW-FEEDBACK-003.6
+func TestWsQueuePreviewFeedbackLostResponseReplay(t *testing.T) {
+	taskRepo, queueRepo := newPreviewFeedbackQueueStores(t)
+	ctx := context.Background()
+	seedPreviewFeedbackQueueTask(t, ctx, taskRepo)
+	preview := &models.TaskPreviewFeedback{
+		ID:           "preview-handler-replay",
+		TaskID:       "task-handler-replay",
+		Kind:         models.TaskPreviewFeedbackText,
+		Comment:      "Keep the heading visible",
+		SourceKind:   models.TaskPreviewFeedbackBrowser,
+		SourceLabel:  "Local app",
+		PageRoute:    "/checkout",
+		SelectedText: "Checkout",
+		TextAnchor:   json.RawMessage(`{"start":{"node_path":[0],"offset":0},"end":{"node_path":[0],"offset":8}}`),
+	}
+	_, err := taskRepo.CreateTaskPreviewFeedback(ctx, preview, "", "")
+	require.NoError(t, err)
+
+	service := messagequeue.NewService(queueRepo, 10, logger.Default())
+	service.SetAutoMergeEnabled(false)
+	preparer := &replayPreviewFeedbackPreparer{}
+	handlers := NewQueueHandlers(service, &mockEventBus{}, logger.Default(), nil, allowQueueIdentityAccess{}, nil)
+	handlers.SetAttachmentClaimer(preparer)
+
+	identity, err := service.ResolveSessionIdentity(ctx, preview.TaskID, "session-handler-replay")
+	require.NoError(t, err)
+	payload := map[string]interface{}{
+		"task_id":                preview.TaskID,
+		"session_id":             identity.SessionID,
+		"session_incarnation_id": identity.SessionIncarnationID,
+		"client_queue_id":        "queue-handler-replay",
+		"content":                "Please review this",
+		"preview_feedback_refs":  []models.TaskPreviewFeedbackRef{{ID: preview.ID, Version: 1}},
+	}
+
+	first, err := handlers.wsQueueMessage(ctx, createTestMessage(t, ws.ActionMessageQueueAdd, payload))
+	require.NoError(t, err)
+	require.Equal(t, ws.MessageTypeResponse, first.Type)
+	require.Equal(t, 1, preparer.calls)
+
+	reserved, autoRun, err := queueRepo.ReserveHeadIfAutoRunForSession(ctx, identity)
+	require.NoError(t, err)
+	require.True(t, autoRun)
+	require.NotNil(t, reserved)
+	require.NoError(t, queueRepo.AcknowledgeByIDForSession(ctx, identity, reserved))
+
+	preparer.err = errors.New("pending feedback was consumed")
+	newPending := &models.TaskPreviewFeedback{
+		ID:           "preview-handler-replay-new",
+		TaskID:       preview.TaskID,
+		Kind:         models.TaskPreviewFeedbackText,
+		Comment:      "Keep the footer visible",
+		SourceKind:   models.TaskPreviewFeedbackBrowser,
+		SourceLabel:  "Local app",
+		PageRoute:    "/account",
+		SelectedText: "Account",
+		TextAnchor:   json.RawMessage(`{"start":{"node_path":[0],"offset":0},"end":{"node_path":[0],"offset":7}}`),
+	}
+	_, err = taskRepo.CreateTaskPreviewFeedback(ctx, newPending, "", "")
+	require.NoError(t, err)
+	second, err := handlers.wsQueueMessage(ctx, createTestMessage(t, ws.ActionMessageQueueAdd, payload))
+	require.NoError(t, err)
+	require.Equal(t, ws.MessageTypeResponse, second.Type)
+	require.Equal(t, 1, preparer.calls, "an exact replay must not read consumed feedback")
+
+	var replayed messagequeue.QueuedMessage
+	require.NoError(t, json.Unmarshal(second.Payload, &replayed))
+	require.Contains(t, replayed.Content, "Keep the heading visible")
+	entries, err := queueRepo.ListBySession(ctx, identity.SessionID)
+	require.NoError(t, err)
+	require.Empty(t, entries)
+	pending, err := taskRepo.ListTaskPreviewFeedback(ctx, preview.TaskID)
+	require.NoError(t, err)
+	require.Len(t, pending.Items, 1)
+	require.Equal(t, newPending.ID, pending.Items[0].ID)
+}
+
+// @covers AC-TASKS-WEB-PREVIEW-FEEDBACK-003.5
+// @covers AC-TASKS-WEB-PREVIEW-FEEDBACK-003.6
+func TestWsQueuePreviewFeedbackScreenshotLostResponseReplay(t *testing.T) {
+	taskRepo, queueRepo := newPreviewFeedbackQueueStores(t)
+	ctx := context.Background()
+	seedPreviewFeedbackQueueTask(t, ctx, taskRepo)
+	attachment := &models.TaskMessageAttachment{
+		ID: "attachment-handler-replay", OwnerID: "owner-handler-replay",
+		WorkspaceID: "workspace-handler-replay", Name: "checkout.png", MimeType: "image/png",
+		Kind: "image", DeliveryMode: "prompt", SizeBytes: 128, StorageKey: "handler-replay",
+		State: models.AttachmentStateStaged, ExpiresAt: time.Now().UTC().Add(time.Hour),
+	}
+	require.NoError(t, taskRepo.CreateMessageAttachment(ctx, attachment))
+	preview := &models.TaskPreviewFeedback{
+		ID:                     "preview-handler-screenshot-replay",
+		TaskID:                 "task-handler-replay",
+		Kind:                   models.TaskPreviewFeedbackScreenshot,
+		Comment:                "Move the checkout button",
+		SourceKind:             models.TaskPreviewFeedbackBrowser,
+		SourceLabel:            "Local app",
+		PageRoute:              "/checkout",
+		CaptureRect:            json.RawMessage(`{"x":4,"y":8,"width":320,"height":180}`),
+		ScreenshotAttachmentID: attachment.ID,
+	}
+	_, err := taskRepo.CreateTaskPreviewFeedback(ctx, preview, attachment.OwnerID, attachment.WorkspaceID)
+	require.NoError(t, err)
+
+	service := messagequeue.NewService(queueRepo, 10, logger.Default())
+	service.SetAutoMergeEnabled(false)
+	preparer := &replayPreviewFeedbackPreparer{
+		preview: []v1.MessageAttachment{{
+			Type: "image", AttachmentID: attachment.ID, MimeType: attachment.MimeType,
+			Name: attachment.Name, SizeBytes: attachment.SizeBytes, DeliveryMode: attachment.DeliveryMode,
+		}},
+	}
+	handlers := NewQueueHandlers(service, &mockEventBus{}, logger.Default(), nil, allowQueueIdentityAccess{}, nil)
+	handlers.SetAttachmentClaimer(preparer)
+
+	identity, err := service.ResolveSessionIdentity(ctx, preview.TaskID, "session-handler-replay")
+	require.NoError(t, err)
+	payload := map[string]interface{}{
+		"task_id":                preview.TaskID,
+		"session_id":             identity.SessionID,
+		"session_incarnation_id": identity.SessionIncarnationID,
+		"client_queue_id":        "queue-handler-screenshot-replay",
+		"content":                "Please review this image",
+		"preview_feedback_refs":  []models.TaskPreviewFeedbackRef{{ID: preview.ID, Version: 1}},
+	}
+
+	first, err := handlers.wsQueueMessage(ctx, createTestMessage(t, ws.ActionMessageQueueAdd, payload))
+	require.NoError(t, err)
+	require.Equal(t, ws.MessageTypeResponse, first.Type)
+	require.Equal(t, 1, preparer.calls)
+	var firstQueued messagequeue.QueuedMessage
+	require.NoError(t, json.Unmarshal(first.Payload, &firstQueued))
+	require.Len(t, firstQueued.Attachments, 1)
+	require.Equal(t, attachment.ID, firstQueued.Attachments[0].AttachmentID)
+
+	reserved, autoRun, err := queueRepo.ReserveHeadIfAutoRunForSession(ctx, identity)
+	require.NoError(t, err)
+	require.True(t, autoRun)
+	require.NotNil(t, reserved)
+	require.NoError(t, queueRepo.AcknowledgeByIDForSession(ctx, identity, reserved))
+
+	preparer.err = errors.New("pending screenshot feedback was consumed")
+	second, err := handlers.wsQueueMessage(ctx, createTestMessage(t, ws.ActionMessageQueueAdd, payload))
+	require.NoError(t, err)
+	require.Equal(t, ws.MessageTypeResponse, second.Type)
+	require.Equal(t, 1, preparer.calls, "an exact replay must not read consumed screenshot feedback")
+	var replayed messagequeue.QueuedMessage
+	require.NoError(t, json.Unmarshal(second.Payload, &replayed))
+	require.Len(t, replayed.Attachments, 1)
+	require.Equal(t, attachment.ID, replayed.Attachments[0].AttachmentID)
+	entries, err := queueRepo.ListBySession(ctx, identity.SessionID)
+	require.NoError(t, err)
+	require.Empty(t, entries)
+}
+
+func newPreviewFeedbackQueueStores(t *testing.T) (*tasksqlite.Repository, messagequeue.Repository) {
+	t.Helper()
+	dbConn, err := dbutil.OpenSQLite(filepath.Join(t.TempDir(), "preview-feedback-queue.db"))
+	require.NoError(t, err)
+	db := sqlx.NewDb(dbConn, "sqlite3")
+	t.Cleanup(func() { _ = db.Close() })
+	taskRepo, err := tasksqlite.NewWithDB(db, db, nil)
+	require.NoError(t, err)
+	queueRepo, err := messagequeue.NewSQLiteRepository(db, db)
+	require.NoError(t, err)
+	return taskRepo, queueRepo
+}
+
+func seedPreviewFeedbackQueueTask(t *testing.T, ctx context.Context, repo *tasksqlite.Repository) {
+	t.Helper()
+	workspaceID := "workspace-handler-replay"
+	require.NoError(t, repo.CreateWorkspace(ctx, &models.Workspace{ID: workspaceID, Name: "Replay"}))
+	require.NoError(t, repo.CreateTask(ctx, &models.Task{
+		ID: "task-handler-replay", WorkspaceID: workspaceID, Title: "Replay",
+	}))
+	require.NoError(t, repo.CreateTaskSession(ctx, &models.TaskSession{
+		ID: "session-handler-replay", TaskID: "task-handler-replay",
+		State: models.TaskSessionStateWaitingForInput,
+	}))
+	require.NoError(t, repo.SetSessionPrimary(ctx, "session-handler-replay"))
+}
diff --git a/apps/backend/internal/orchestrator/messagequeue/repository_preview_feedback.go b/apps/backend/internal/orchestrator/messagequeue/repository_preview_feedback.go
new file mode 100644
index 0000000000..0199f975fe
--- /dev/null
+++ b/apps/backend/internal/orchestrator/messagequeue/repository_preview_feedback.go
@@ -0,0 +1,235 @@
+package messagequeue
+
+import (
+	"context"
+	"database/sql"
+	"errors"
+	"fmt"
+	"time"
+
+	"github.com/jmoiron/sqlx"
+	"github.com/kandev/kandev/internal/task/models"
+	"github.com/kandev/kandev/internal/task/plancomments"
+	"github.com/kandev/kandev/internal/task/previewfeedback"
+	"github.com/kandev/kandev/internal/task/repository/plancommenttx"
+	"github.com/kandev/kandev/internal/task/repository/previewfeedbacktx"
+)
+
+// InsertWithTaskFeedback admits one caller-owned queue row and consumes exact
+// plan-comment and preview-feedback versions in the same transaction.
+func (r *sqliteRepository) InsertWithTaskFeedback(
+	ctx context.Context,
+	identity QueueSessionIdentity,
+	msg *QueuedMessage,
+	planRefs []models.TaskPlanCommentRef,
+	previewRefs []models.TaskPreviewFeedbackRef,
+	replayFingerprint string,
+	requirePrimary bool,
+	claim *QueueAttachmentClaim,
+	maxPerSession int,
+) (*models.TaskPlanCommentSnapshot, *models.TaskPreviewFeedbackSnapshot, bool, error) {
+	if err := validateTaskFeedbackQueueRequest(identity, msg, previewRefs, replayFingerprint); err != nil {
+		return nil, nil, false, err
+	}
+	release, err := plancommenttx.AcquireLocalAdmission(ctx, msg.TaskID)
+	if err != nil {
+		return nil, nil, false, err
+	}
+	defer release()
+	candidate := *msg
+	tx, err := r.beginPlanCommentQueueAdmission(ctx, identity, &candidate)
+	if err != nil {
+		return nil, nil, false, err
+	}
+	defer func() { _ = tx.Rollback() }()
+	existing, replayed, err := r.commitTaskFeedbackQueueReplay(
+		ctx, tx, identity, &candidate, planRefs, previewRefs, replayFingerprint,
+	)
+	if err != nil {
+		return nil, nil, false, err
+	}
+	if replayed {
+		*msg = *existing
+		return nil, nil, true, nil
+	}
+	if err := r.ensureQueueCapacity(ctx, tx, candidate.SessionID, maxPerSession); err != nil {
+		return nil, nil, false, err
+	}
+	if err := claimOptionalMessageAttachmentsTx(
+		ctx, tx, &identity, claim, candidate.TaskID, candidate.SessionID,
+	); err != nil {
+		return nil, nil, false, err
+	}
+	planResolution, previewResolution, err := r.resolveQueuedTaskFeedback(
+		ctx, tx, &candidate, planRefs, previewRefs, requirePrimary,
+	)
+	if err != nil {
+		return nil, nil, false, err
+	}
+	if err := r.transferPreviewScreenshotsToQueue(
+		ctx, tx, previewResolution, candidate.SessionID,
+	); err != nil {
+		return nil, nil, false, err
+	}
+	candidate.Content = previewResolution.Content
+	if err := r.insertCoalesced(ctx, tx, &candidate, 0); err != nil {
+		return nil, nil, false, err
+	}
+	planSnapshot, previewSnapshot, err := consumeQueuedTaskFeedback(
+		ctx, tx, r.db, planResolution, previewResolution,
+	)
+	if err != nil {
+		return nil, nil, false, err
+	}
+	if err := r.insertQueueAdmissionReceiptTx(
+		ctx, tx, identity, candidate.ID, replayFingerprint, &candidate,
+	); err != nil {
+		return nil, nil, false, err
+	}
+	if err := tx.Commit(); err != nil {
+		return nil, nil, false, fmt.Errorf("commit task-feedback queue admission: %w", err)
+	}
+	*msg = candidate
+	return planSnapshot, previewSnapshot, false, nil
+}
+
+func validateTaskFeedbackQueueRequest(
+	identity QueueSessionIdentity,
+	msg *QueuedMessage,
+	previewRefs []models.TaskPreviewFeedbackRef,
+	replayFingerprint string,
+) error {
+	if msg == nil || msg.ID == "" || len(previewRefs) == 0 || replayFingerprint == "" {
+		return errors.New("client queue id and preview feedback are required")
+	}
+	if msg.TaskID != identity.TaskID || msg.SessionID != identity.SessionID {
+		return ErrSessionIdentityMismatch
+	}
+	return nil
+}
+
+func (r *sqliteRepository) commitTaskFeedbackQueueReplay(
+	ctx context.Context,
+	tx *sqlx.Tx,
+	identity QueueSessionIdentity,
+	candidate *QueuedMessage,
+	planRefs []models.TaskPlanCommentRef,
+	previewRefs []models.TaskPreviewFeedbackRef,
+	replayFingerprint string,
+) (*QueuedMessage, bool, error) {
+	receipt, err := r.readQueueAdmissionReceiptTx(ctx, tx, identity, candidate.ID)
+	if err != nil {
+		return nil, false, err
+	}
+	if receipt != nil {
+		if receipt.Fingerprint != replayFingerprint ||
+			!sameTaskFeedbackQueueRequest(receipt.Message, candidate, planRefs, previewRefs) {
+			return nil, false, ErrQueueIDConflict
+		}
+		if err := tx.Commit(); err != nil {
+			return nil, false, fmt.Errorf("commit task-feedback queue receipt replay: %w", err)
+		}
+		return receipt.Message, true, nil
+	}
+	existing, err := r.findQueuedMessageByIDTx(ctx, tx, candidate.ID)
+	if err != nil || existing == nil {
+		return existing, false, err
+	}
+	if !sameTaskFeedbackQueueRequest(existing, candidate, planRefs, previewRefs) {
+		return nil, false, ErrQueueIDConflict
+	}
+	if err := tx.Commit(); err != nil {
+		return nil, false, fmt.Errorf("commit task-feedback queue replay: %w", err)
+	}
+	return existing, true, nil
+}
+
+func (r *sqliteRepository) resolveQueuedTaskFeedback(
+	ctx context.Context,
+	tx *sqlx.Tx,
+	candidate *QueuedMessage,
+	planRefs []models.TaskPlanCommentRef,
+	previewRefs []models.TaskPreviewFeedbackRef,
+	requirePrimary bool,
+) (*plancommenttx.Resolution, *previewfeedbacktx.Resolution, error) {
+	content := candidate.Content
+	var planResolution *plancommenttx.Resolution
+	var err error
+	if len(planRefs) > 0 {
+		planResolution, err = plancommenttx.ResolveQueue(
+			ctx, tx, r.db, candidate.TaskID, candidate.SessionID, content, planRefs, requirePrimary,
+		)
+		if err != nil {
+			return nil, nil, err
+		}
+		content = planResolution.Content
+	} else if err := plancommenttx.ValidateTargetSession(
+		ctx, tx, r.db, candidate.TaskID, candidate.SessionID, requirePrimary, "",
+	); err != nil {
+		return nil, nil, err
+	}
+	previewResolution, err := previewfeedbacktx.Resolve(
+		ctx, tx, r.db, candidate.TaskID, content, previewRefs,
+	)
+	return planResolution, previewResolution, err
+}
+
+func consumeQueuedTaskFeedback(
+	ctx context.Context,
+	tx *sqlx.Tx,
+	db *sqlx.DB,
+	planResolution *plancommenttx.Resolution,
+	previewResolution *previewfeedbacktx.Resolution,
+) (*models.TaskPlanCommentSnapshot, *models.TaskPreviewFeedbackSnapshot, error) {
+	var planSnapshot *models.TaskPlanCommentSnapshot
+	var err error
+	if planResolution != nil {
+		planSnapshot, err = plancommenttx.Consume(ctx, tx, db, planResolution)
+		if err != nil {
+			return nil, nil, err
+		}
+	}
+	previewSnapshot, err := previewfeedbacktx.Consume(ctx, tx, db, previewResolution)
+	return planSnapshot, previewSnapshot, err
+}
+
+func (r *sqliteRepository) transferPreviewScreenshotsToQueue(
+	ctx context.Context,
+	tx interface {
+		ExecContext(context.Context, string, ...interface{}) (sql.Result, error)
+	},
+	resolved *previewfeedbacktx.Resolution,
+	sessionID string,
+) error {
+	for _, item := range resolved.Items {
+		if item.Kind != models.TaskPreviewFeedbackScreenshot {
+			continue
+		}
+		result, err := tx.ExecContext(ctx, r.db.Rebind(`
+			UPDATE task_message_attachments
+			SET session_id = ?, updated_at = ?
+			WHERE id = ? AND task_id = ? AND state = ?
+			  AND session_id = '' AND message_id = '' AND queue_id = ''
+		`), sessionID, time.Now().UTC(), item.ScreenshotAttachmentID,
+			resolved.TaskID, models.AttachmentStateClaimed)
+		if err != nil {
+			return fmt.Errorf("transfer preview screenshot to queue: %w", err)
+		}
+		if changed, _ := result.RowsAffected(); changed != 1 {
+			return models.ErrAttachmentClaimConflict
+		}
+	}
+	return nil
+}
+
+func sameTaskFeedbackQueueRequest(
+	existing, candidate *QueuedMessage,
+	planRefs []models.TaskPlanCommentRef,
+	previewRefs []models.TaskPreviewFeedbackRef,
+) bool {
+	want, _ := candidate.Metadata[plancomments.MetadataRequestFingerprint].(string)
+	got, _ := existing.Metadata[plancomments.MetadataRequestFingerprint].(string)
+	return want != "" && got == want &&
+		plancomments.MetadataRefsMatch(existing.Metadata, planRefs) &&
+		previewfeedback.MetadataRefsMatch(existing.Metadata, previewRefs)
+}
diff --git a/apps/backend/internal/orchestrator/messagequeue/repository_preview_feedback_test.go b/apps/backend/internal/orchestrator/messagequeue/repository_preview_feedback_test.go
new file mode 100644
index 0000000000..22abc43317
--- /dev/null
+++ b/apps/backend/internal/orchestrator/messagequeue/repository_preview_feedback_test.go
@@ -0,0 +1,143 @@
+package messagequeue_test
+
+import (
+	"context"
+	"encoding/json"
+	"errors"
+	"strings"
+	"testing"
+
+	"github.com/kandev/kandev/internal/orchestrator/messagequeue"
+	"github.com/kandev/kandev/internal/task/models"
+	tasksqlite "github.com/kandev/kandev/internal/task/repository/sqlite"
+)
+
+type taskFeedbackQueueWriter interface {
+	InsertWithTaskFeedback(
+		context.Context,
+		messagequeue.QueueSessionIdentity,
+		*messagequeue.QueuedMessage,
+		[]models.TaskPlanCommentRef,
+		[]models.TaskPreviewFeedbackRef,
+		string,
+		bool,
+		*messagequeue.QueueAttachmentClaim,
+		int,
+	) (*models.TaskPlanCommentSnapshot, *models.TaskPreviewFeedbackSnapshot, bool, error)
+}
+
+func TestSQLiteRepositoryInsertWithTaskFeedbackQueuesAndConsumesMixedContext(t *testing.T) {
+	taskRepo, queueRepo := newPlanCommentQueueRepos(t)
+	ctx := context.Background()
+	seedQueuePlanComment(t, ctx, taskRepo, "preview")
+	preview := seedQueuePreviewFeedback(t, ctx, taskRepo, "preview")
+	queued := planCommentQueuedMessage(
+		"preview", "queue-preview", "fingerprint-preview",
+		[]models.TaskPlanCommentRef{{ID: "comment-preview", Version: 1}},
+	)
+	queued.Metadata["preview_feedback_refs"] = []models.TaskPreviewFeedbackRef{{ID: preview.ID, Version: 1}}
+	identity := resolvePlanCommentQueueIdentity(t, ctx, queueRepo, queued)
+	writer, ok := queueRepo.(taskFeedbackQueueWriter)
+	if !ok {
+		t.Fatal("queue repository does not implement task feedback admission")
+	}
+
+	planSnapshot, previewSnapshot, replay, err := writer.InsertWithTaskFeedback(
+		ctx, identity, queued,
+		[]models.TaskPlanCommentRef{{ID: "comment-preview", Version: 1}},
+		[]models.TaskPreviewFeedbackRef{{ID: preview.ID, Version: 1}},
+		"fingerprint-preview",
+		true, nil, 10,
+	)
+	if err != nil || replay {
+		t.Fatalf("InsertWithTaskFeedback replay=%v err=%v", replay, err)
+	}
+	if planSnapshot == nil || len(planSnapshot.Comments) != 0 ||
+		previewSnapshot == nil || len(previewSnapshot.Items) != 0 {
+		t.Fatalf("snapshots plan=%#v preview=%#v", planSnapshot, previewSnapshot)
+	}
+	for _, want := range []string{
+		"### Plan Comments", "typed content", "### Web Preview Feedback",
+		"Runtime queue copy", "node_path",
+	} {
+		if !strings.Contains(queued.Content, want) {
+			t.Fatalf("queued content missing %q:\n%s", want, queued.Content)
+		}
+	}
+	entries, err := queueRepo.ListBySession(ctx, queued.SessionID)
+	if err != nil || len(entries) != 1 || entries[0].Content != queued.Content {
+		t.Fatalf("stored queue=%#v err=%v", entries, err)
+	}
+}
+
+func TestSQLiteRepositoryTaskFeedbackReplaySurvivesQueueDrain(t *testing.T) {
+	taskRepo, queueRepo := newPlanCommentQueueRepos(t)
+	ctx := context.Background()
+	seedQueuePlanComment(t, ctx, taskRepo, "preview-drained")
+	preview := seedQueuePreviewFeedback(t, ctx, taskRepo, "preview-drained")
+	refs := []models.TaskPreviewFeedbackRef{{ID: preview.ID, Version: 1}}
+	queued := planCommentQueuedMessage("preview-drained", "queue-preview-drained", "fingerprint-preview-drained", nil)
+	queued.Metadata["preview_feedback_refs"] = refs
+	identity := resolvePlanCommentQueueIdentity(t, ctx, queueRepo, queued)
+	writer, ok := queueRepo.(taskFeedbackQueueWriter)
+	if !ok {
+		t.Fatal("queue repository does not implement task feedback admission")
+	}
+
+	_, _, replay, err := writer.InsertWithTaskFeedback(
+		ctx, identity, queued, nil, refs, "fingerprint-preview-drained", false, nil, 10,
+	)
+	if err != nil || replay {
+		t.Fatalf("first insert replay=%v err=%v", replay, err)
+	}
+	reserved, autoRun, err := queueRepo.ReserveHeadIfAutoRunForSession(ctx, identity)
+	if err != nil || !autoRun || reserved == nil {
+		t.Fatalf("reserve accepted feedback = %#v auto_run=%v err=%v", reserved, autoRun, err)
+	}
+	if err := queueRepo.AcknowledgeByIDForSession(ctx, identity, reserved); err != nil {
+		t.Fatalf("acknowledge accepted feedback: %v", err)
+	}
+
+	retry := planCommentQueuedMessage("preview-drained", queued.ID, "fingerprint-preview-drained", nil)
+	retry.Metadata["preview_feedback_refs"] = refs
+	planSnapshot, previewSnapshot, replay, err := writer.InsertWithTaskFeedback(
+		ctx, identity, retry, nil, refs, "fingerprint-preview-drained", false, nil, 10,
+	)
+	if err != nil || !replay || planSnapshot != nil || previewSnapshot != nil {
+		t.Fatalf("drained replay plan=%#v preview=%#v replay=%v err=%v", planSnapshot, previewSnapshot, replay, err)
+	}
+	if retry.Content != queued.Content {
+		t.Fatalf("replayed content = %q, want %q", retry.Content, queued.Content)
+	}
+	conflict := planCommentQueuedMessage("preview-drained", queued.ID, "different-fingerprint", nil)
+	conflict.Metadata["preview_feedback_refs"] = refs
+	if _, _, _, err := writer.InsertWithTaskFeedback(
+		ctx, identity, conflict, nil, refs, "different-fingerprint", false, nil, 10,
+	); !errors.Is(err, messagequeue.ErrQueueIDConflict) {
+		t.Fatalf("conflicting drained replay error = %v, want ErrQueueIDConflict", err)
+	}
+	entries, err := queueRepo.ListBySession(ctx, queued.SessionID)
+	if err != nil || len(entries) != 0 {
+		t.Fatalf("queue after replay = %#v, err=%v", entries, err)
+	}
+}
+
+func seedQueuePreviewFeedback(
+	t *testing.T,
+	ctx context.Context,
+	repo *tasksqlite.Repository,
+	suffix string,
+) *models.TaskPreviewFeedback {
+	t.Helper()
+	item := &models.TaskPreviewFeedback{
+		ID: "preview-queue-" + suffix, TaskID: "task-" + suffix,
+		Kind: models.TaskPreviewFeedbackText, Comment: "Runtime queue copy",
+		SourceKind: models.TaskPreviewFeedbackBrowser, SourceLabel: "Local app",
+		PageRoute: "/queue", SelectedText: "Generated",
+		TextAnchor: json.RawMessage(`{"start":{"node_path":[0],"offset":0},"end":{"node_path":[0],"offset":9},"containing_element":{"tag":"span","outer_html":"<span>Generated</span>"}}`),
+	}
+	if _, err := repo.CreateTaskPreviewFeedback(ctx, item, "", ""); err != nil {
+		t.Fatal(err)
+	}
+	return item
+}
diff --git a/apps/backend/internal/orchestrator/messagequeue/repository_sqlite.go b/apps/backend/internal/orchestrator/messagequeue/repository_sqlite.go
index 0b6adc6331..73bafe7099 100644
--- a/apps/backend/internal/orchestrator/messagequeue/repository_sqlite.go
+++ b/apps/backend/internal/orchestrator/messagequeue/repository_sqlite.go
@@ -871,7 +871,13 @@ func claimMessageAttachmentTx(
 			ctx, tx, claim, taskID, sessionID, attachmentID, attachment, now,
 		)
 	case models.AttachmentStateClaimed:
-		return 0, validateClaimedMessageAttachment(attachment, taskID, sessionID)
+		if err := validateClaimedMessageAttachment(attachment, taskID, sessionID); err != nil {
+			return 0, err
+		}
+		if attachment.SizeBytes < 0 || attachment.SizeBytes > models.MaxMessageAttachmentBytes {
+			return 0, models.ErrAttachmentTooLarge
+		}
+		return attachment.SizeBytes, nil
 	default:
 		return 0, models.ErrAttachmentClaimConflict
 	}
diff --git a/apps/backend/internal/orchestrator/messagequeue/service_plan_comment.go b/apps/backend/internal/orchestrator/messagequeue/service_plan_comment.go
index 4bf05b95a6..08b7e9fb09 100644
--- a/apps/backend/internal/orchestrator/messagequeue/service_plan_comment.go
+++ b/apps/backend/internal/orchestrator/messagequeue/service_plan_comment.go
@@ -6,32 +6,51 @@ import (
 
 	"github.com/kandev/kandev/internal/task/models"
 	"github.com/kandev/kandev/internal/task/plancomments"
+	"github.com/kandev/kandev/internal/task/previewfeedback"
 	"github.com/kandev/kandev/internal/task/repository/plancommenttx"
 )
 
 // PlanCommentQueueRequest describes a caller-identified queued prompt that
 // consumes exact task-owned plan comments when admitted.
 type PlanCommentQueueRequest struct {
-	ClientQueueID         string
-	SessionID             string
-	TaskID                string
-	SessionIncarnationID  string
-	Content               string
-	Model                 string
-	UserID                string
-	PlanMode              bool
-	Attachments           []MessageAttachment
-	Metadata              map[string]interface{}
-	PlanCommentRefs       []models.TaskPlanCommentRef
-	RequirePrimarySession bool
-	AttachmentClaim       *QueueAttachmentClaim
+	ClientQueueID                     string
+	SessionID                         string
+	TaskID                            string
+	SessionIncarnationID              string
+	Content                           string
+	Model                             string
+	UserID                            string
+	PlanMode                          bool
+	Attachments                       []MessageAttachment
+	Metadata                          map[string]interface{}
+	PlanCommentRefs                   []models.TaskPlanCommentRef
+	PreviewFeedbackRefs               []models.TaskPreviewFeedbackRef
+	RequirePrimarySession             bool
+	AttachmentClaim                   *QueueAttachmentClaim
+	PreviewFeedbackAttachmentResolver func(context.Context, string, []models.TaskPreviewFeedbackRef) ([]MessageAttachment, error)
+	AttachmentClaimResolver           func(context.Context, string, []MessageAttachment) (QueueAttachmentClaim, error)
 }
 
 // PlanCommentQueueResult distinguishes a first admission from an exact replay.
 type PlanCommentQueueResult struct {
-	Message  *QueuedMessage
-	Snapshot *models.TaskPlanCommentSnapshot
-	Replay   bool
+	Message         *QueuedMessage
+	Snapshot        *models.TaskPlanCommentSnapshot
+	PreviewSnapshot *models.TaskPreviewFeedbackSnapshot
+	Replay          bool
+}
+
+type taskFeedbackQueueWriter interface {
+	InsertWithTaskFeedback(
+		context.Context,
+		QueueSessionIdentity,
+		*QueuedMessage,
+		[]models.TaskPlanCommentRef,
+		[]models.TaskPreviewFeedbackRef,
+		string,
+		bool,
+		*QueueAttachmentClaim,
+		int,
+	) (*models.TaskPlanCommentSnapshot, *models.TaskPreviewFeedbackSnapshot, bool, error)
 }
 
 type planCommentQueueWriter interface {
@@ -47,18 +66,19 @@ type planCommentQueueWriter interface {
 }
 
 type planCommentQueueReplayIdentity struct {
-	ClientQueueID         string                      `json:"client_queue_id"`
-	SessionID             string                      `json:"session_id"`
-	TaskID                string                      `json:"task_id"`
-	SessionIncarnationID  string                      `json:"session_incarnation_id"`
-	Content               string                      `json:"content"`
-	Model                 string                      `json:"model"`
-	UserID                string                      `json:"user_id"`
-	PlanMode              bool                        `json:"plan_mode"`
-	Attachments           []MessageAttachment         `json:"attachments"`
-	Metadata              map[string]interface{}      `json:"metadata"`
-	Refs                  []models.TaskPlanCommentRef `json:"refs"`
-	RequirePrimarySession bool                        `json:"require_primary_session"`
+	ClientQueueID         string                          `json:"client_queue_id"`
+	SessionID             string                          `json:"session_id"`
+	TaskID                string                          `json:"task_id"`
+	SessionIncarnationID  string                          `json:"session_incarnation_id"`
+	Content               string                          `json:"content"`
+	Model                 string                          `json:"model"`
+	UserID                string                          `json:"user_id"`
+	PlanMode              bool                            `json:"plan_mode"`
+	Attachments           []MessageAttachment             `json:"attachments"`
+	Metadata              map[string]interface{}          `json:"metadata"`
+	Refs                  []models.TaskPlanCommentRef     `json:"refs"`
+	PreviewRefs           []models.TaskPreviewFeedbackRef `json:"preview_refs"`
+	RequirePrimarySession bool                            `json:"require_primary_session"`
 }
 
 // QueueMessageWithPlanComments admits a comment-bearing row without automatic
@@ -71,8 +91,8 @@ func (s *Service) QueueMessageWithPlanComments(
 	if req.ClientQueueID == "" {
 		return nil, errors.New("client queue id is required")
 	}
-	if len(req.PlanCommentRefs) == 0 {
-		return nil, errors.New("plan comment refs are required")
+	if len(req.PlanCommentRefs) == 0 && len(req.PreviewFeedbackRefs) == 0 {
+		return nil, errors.New("task feedback refs are required")
 	}
 	identity := QueueSessionIdentity{
 		TaskID: req.TaskID, SessionID: req.SessionID, SessionIncarnationID: req.SessionIncarnationID,
@@ -80,17 +100,17 @@ func (s *Service) QueueMessageWithPlanComments(
 	if identity.TaskID == "" || identity.SessionID == "" || identity.SessionIncarnationID == "" {
 		return nil, ErrSessionIdentityMismatch
 	}
-	writer, ok := s.repo.(planCommentQueueWriter)
-	if !ok {
-		return nil, errors.New("plan comment queue admission is unavailable")
-	}
 	metadata, err := preparePlanCommentQueueMetadata(req)
 	if err != nil {
 		return nil, err
 	}
+	content := req.Content
+	if len(req.PlanCommentRefs) > 0 {
+		content = plancomments.WithPlaceholder(content)
+	}
 	message := &QueuedMessage{
 		ID: req.ClientQueueID, SessionID: req.SessionID, TaskID: req.TaskID,
-		Content: plancomments.WithPlaceholder(req.Content), Model: req.Model,
+		Content: content, Model: req.Model,
 		PlanMode: req.PlanMode, Attachments: req.Attachments, Metadata: metadata,
 		QueuedBy: req.UserID,
 	}
@@ -102,25 +122,121 @@ func (s *Service) QueueMessageWithPlanComments(
 	ctx = plancommenttx.WithLocalAdmission(ctx, req.TaskID)
 	var result *PlanCommentQueueResult
 	err = s.WithSessionAdmission(ctx, req.SessionID, func(admittedCtx context.Context) error {
-		snapshot, replay, insertErr := writer.InsertWithPlanComments(
-			admittedCtx, identity, message, req.PlanCommentRefs, req.RequirePrimarySession,
-			req.AttachmentClaim, s.MaxPerSession(),
-		)
-		if insertErr != nil {
-			return insertErr
-		}
-		result = &PlanCommentQueueResult{Message: message, Snapshot: snapshot, Replay: replay}
-		return nil
+		var err error
+		result, err = s.admitTaskFeedbackQueue(admittedCtx, identity, req, message)
+		return err
 	})
 	return result, err
 }
 
+func (s *Service) admitTaskFeedbackQueue(
+	ctx context.Context,
+	identity QueueSessionIdentity,
+	req PlanCommentQueueRequest,
+	message *QueuedMessage,
+) (*PlanCommentQueueResult, error) {
+	if len(req.PreviewFeedbackRefs) == 0 {
+		writer, ok := s.repo.(planCommentQueueWriter)
+		if !ok {
+			return nil, errors.New("plan comment queue admission is unavailable")
+		}
+		snapshot, replay, err := writer.InsertWithPlanComments(
+			ctx, identity, message, req.PlanCommentRefs, req.RequirePrimarySession,
+			req.AttachmentClaim, s.MaxPerSession(),
+		)
+		if err != nil {
+			return nil, err
+		}
+		return &PlanCommentQueueResult{Message: message, Snapshot: snapshot, Replay: replay}, nil
+	}
+	writer, ok := s.repo.(taskFeedbackQueueWriter)
+	if !ok {
+		return nil, errors.New("task feedback queue admission is unavailable")
+	}
+	reader, ok := s.repo.(queueAdmissionRepository)
+	if !ok {
+		return nil, ErrQueueAdmissionUnavailable
+	}
+	replayFingerprint, existing, replay, err := lookupTaskFeedbackQueueReplay(
+		ctx, reader, identity, req.ClientQueueID, message,
+	)
+	if err != nil {
+		return nil, err
+	}
+	if replay {
+		return &PlanCommentQueueResult{Message: existing, Replay: true}, nil
+	}
+	claim, err := s.resolveTaskFeedbackQueueInputs(ctx, req, message)
+	if err != nil {
+		return nil, err
+	}
+	snapshot, previewSnapshot, replay, err := writer.InsertWithTaskFeedback(
+		ctx, identity, message, req.PlanCommentRefs, req.PreviewFeedbackRefs,
+		replayFingerprint, req.RequirePrimarySession, claim, s.MaxPerSession(),
+	)
+	if err != nil {
+		return nil, err
+	}
+	return &PlanCommentQueueResult{
+		Message: message, Snapshot: snapshot, PreviewSnapshot: previewSnapshot, Replay: replay,
+	}, nil
+}
+
+func lookupTaskFeedbackQueueReplay(
+	ctx context.Context,
+	reader queueAdmissionRepository,
+	identity QueueSessionIdentity,
+	clientQueueID string,
+	message *QueuedMessage,
+) (string, *QueuedMessage, bool, error) {
+	fingerprint, err := queueAdmissionFingerprint(identity, message)
+	if err != nil {
+		return "", nil, false, err
+	}
+	existing, replay, err := reader.LookupQueueAdmission(ctx, identity, clientQueueID, message)
+	if err != nil {
+		return "", nil, false, err
+	}
+	if replay {
+		return "", existing, true, nil
+	}
+	return fingerprint, nil, false, nil
+}
+
+func (s *Service) resolveTaskFeedbackQueueInputs(
+	ctx context.Context,
+	req PlanCommentQueueRequest,
+	message *QueuedMessage,
+) (*QueueAttachmentClaim, error) {
+	if req.PreviewFeedbackAttachmentResolver == nil {
+		return nil, errors.New("preview feedback attachments are unavailable")
+	}
+	attachments, err := req.PreviewFeedbackAttachmentResolver(ctx, req.TaskID, req.PreviewFeedbackRefs)
+	if err != nil {
+		return nil, err
+	}
+	message.Attachments = append(message.Attachments, attachments...)
+	claim := req.AttachmentClaim
+	if claim == nil && len(req.Attachments) > 0 {
+		if req.AttachmentClaimResolver == nil {
+			return nil, errors.New("transactional attachment admission is unavailable")
+		}
+		prepared, err := req.AttachmentClaimResolver(ctx, req.TaskID, req.Attachments)
+		if err != nil {
+			return nil, err
+		}
+		claim = &prepared
+	}
+	return claim, nil
+}
+
 func preparePlanCommentQueueMetadata(req PlanCommentQueueRequest) (map[string]interface{}, error) {
-	metadata := make(map[string]interface{}, len(req.Metadata)+3)
+	metadata := make(map[string]interface{}, len(req.Metadata)+4)
 	for key, value := range req.Metadata {
 		if key != plancomments.MetadataRefs &&
 			key != plancomments.MetadataRequestFingerprint &&
-			key != plancomments.MetadataClientQueueID {
+			key != plancomments.MetadataClientQueueID &&
+			key != previewfeedback.MetadataRefs {
 			metadata[key] = value
 		}
 	}
@@ -129,6 +245,7 @@ func preparePlanCommentQueueMetadata(req PlanCommentQueueRequest) (map[string]in
 		SessionIncarnationID: req.SessionIncarnationID,
 		Content:              req.Content, Model: req.Model, UserID: req.UserID, PlanMode: req.PlanMode,
 		Attachments: req.Attachments, Metadata: metadata, Refs: req.PlanCommentRefs,
+		PreviewRefs:           req.PreviewFeedbackRefs,
 		RequirePrimarySession: req.RequirePrimarySession,
 	}
 	fingerprint, err := plancomments.Fingerprint(identity)
@@ -138,5 +255,6 @@ func preparePlanCommentQueueMetadata(req PlanCommentQueueRequest) (map[string]in
 	metadata[plancomments.MetadataRefs] = req.PlanCommentRefs
 	metadata[plancomments.MetadataRequestFingerprint] = fingerprint
 	metadata[plancomments.MetadataClientQueueID] = req.ClientQueueID
+	metadata[previewfeedback.MetadataRefs] = req.PreviewFeedbackRefs
 	return metadata, nil
 }
diff --git a/apps/backend/internal/task/dto/dto.go b/apps/backend/internal/task/dto/dto.go
index c46b02bdd5..7263b10efc 100644
--- a/apps/backend/internal/task/dto/dto.go
+++ b/apps/backend/internal/task/dto/dto.go
@@ -1,6 +1,7 @@
 package dto
 
 import (
+	"encoding/json"
 	"time"
 
 	"github.com/kandev/kandev/internal/authz"
@@ -1358,6 +1359,77 @@ func TaskPlanCommentSnapshotFromModel(snapshot *models.TaskPlanCommentSnapshot)
 	return out
 }
 
+type TaskPreviewScreenshotDTO struct {
+	AttachmentID string `json:"attachment_id"`
+	Name         string `json:"name"`
+	MimeType     string `json:"mime_type"`
+	Kind         string `json:"kind"`
+	DeliveryMode string `json:"delivery_mode"`
+	SizeBytes    int64  `json:"size_bytes"`
+	State        string `json:"state"`
+}
+
+type TaskPreviewFeedbackDTO struct {
+	ID                     string                               `json:"id"`
+	TaskID                 string                               `json:"task_id"`
+	Kind                   models.TaskPreviewFeedbackKind       `json:"kind"`
+	Comment                string                               `json:"comment"`
+	SourceKind             models.TaskPreviewFeedbackSourceKind `json:"source_kind"`
+	SourceSessionID        string                               `json:"source_session_id,omitempty"`
+	SourceLabel            string                               `json:"source_label"`
+	SourcePath             string                               `json:"source_path,omitempty"`
+	PageRoute              string                               `json:"page_route"`
+	PageTitle              string                               `json:"page_title"`
+	SelectedText           string                               `json:"selected_text,omitempty"`
+	TextAnchor             json.RawMessage                      `json:"text_anchor,omitempty"`
+	ElementSnapshot        json.RawMessage                      `json:"element_snapshot,omitempty"`
+	CaptureRect            json.RawMessage                      `json:"capture_rect,omitempty"`
+	ScreenshotAttachmentID string                               `json:"screenshot_attachment_id,omitempty"`
+	ScreenshotAttachment   *TaskPreviewScreenshotDTO            `json:"screenshot_attachment,omitempty"`
+	Version                int64                                `json:"version"`
+	CreatedAt              time.Time                            `json:"created_at"`
+	UpdatedAt              time.Time                            `json:"updated_at"`
+}
+
+type TaskPreviewFeedbackSnapshotDTO struct {
+	TaskID   string                    `json:"task_id"`
+	Revision int64                     `json:"revision"`
+	Items    []*TaskPreviewFeedbackDTO `json:"items"`
+}
+
+func TaskPreviewFeedbackSnapshotFromModel(
+	snapshot *models.TaskPreviewFeedbackSnapshot,
+) *TaskPreviewFeedbackSnapshotDTO {
+	if snapshot == nil {
+		return nil
+	}
+	out := &TaskPreviewFeedbackSnapshotDTO{
+		TaskID: snapshot.TaskID, Revision: snapshot.Revision,
+		Items: make([]*TaskPreviewFeedbackDTO, 0, len(snapshot.Items)),
+	}
+	for _, item := range snapshot.Items {
+		dtoItem := &TaskPreviewFeedbackDTO{
+			ID: item.ID, TaskID: item.TaskID, Kind: item.Kind, Comment: item.Comment,
+			SourceKind: item.SourceKind, SourceSessionID: item.SourceSessionID,
+			SourceLabel: item.SourceLabel, SourcePath: item.SourcePath,
+			PageRoute: item.PageRoute, PageTitle: item.PageTitle,
+			SelectedText: item.SelectedText, TextAnchor: item.TextAnchor,
+			ElementSnapshot: item.ElementSnapshot, CaptureRect: item.CaptureRect,
+			ScreenshotAttachmentID: item.ScreenshotAttachmentID,
+			Version:                item.Version, CreatedAt: item.CreatedAt, UpdatedAt: item.UpdatedAt,
+		}
+		if attachment := item.ScreenshotAttachment; attachment != nil {
+			dtoItem.ScreenshotAttachment = &TaskPreviewScreenshotDTO{
+				AttachmentID: attachment.ID, Name: attachment.Name, MimeType: attachment.MimeType,
+				Kind: attachment.Kind, DeliveryMode: attachment.DeliveryMode,
+				SizeBytes: attachment.SizeBytes, State: attachment.State,
+			}
+		}
+		out.Items = append(out.Items, dtoItem)
+	}
+	return out
+}
+
 // TaskPlanRevisionDTO represents a plan revision for API responses.
 // Content is optional so list responses can omit it (fetched on demand).
 type TaskPlanRevisionDTO struct {
diff --git a/apps/backend/internal/task/handlers/message_handlers.go b/apps/backend/internal/task/handlers/message_handlers.go
index 92a56a75c1..159e809fcf 100644
--- a/apps/backend/internal/task/handlers/message_handlers.go
+++ b/apps/backend/internal/task/handlers/message_handlers.go
@@ -25,7 +25,9 @@ import (
 	"github.com/kandev/kandev/internal/task/dto"
 	"github.com/kandev/kandev/internal/task/models"
 	"github.com/kandev/kandev/internal/task/plancomments"
+	"github.com/kandev/kandev/internal/task/previewfeedback"
 	"github.com/kandev/kandev/internal/task/repository/plancommenttx"
+	"github.com/kandev/kandev/internal/task/repository/previewfeedbacktx"
 	"github.com/kandev/kandev/internal/task/repository/repoerrors"
 	taskrepo "github.com/kandev/kandev/internal/task/repository/sqlite"
 	"github.com/kandev/kandev/internal/task/service"
@@ -492,20 +494,21 @@ func (h *MessageHandlers) httpListMessages(c *gin.Context) {
 // WS handlers
 
 type wsAddMessageRequest struct {
-	TaskID                string                      `json:"task_id"`
-	TaskSessionID         string                      `json:"session_id"`
-	MessageID             string                      `json:"message_id,omitempty"`
-	ClientMessageID       string                      `json:"client_message_id,omitempty"`
-	Content               string                      `json:"content"`
-	AuthorID              string                      `json:"author_id,omitempty"`
-	Model                 string                      `json:"model,omitempty"`
-	PlanMode              bool                        `json:"plan_mode,omitempty"`
-	HasReviewComments     bool                        `json:"has_review_comments,omitempty"`
-	Attachments           []v1.MessageAttachment      `json:"attachments,omitempty"`
-	ContextFiles          []v1.ContextFileMeta        `json:"context_files,omitempty"`
-	EntityReferences      []v1.EntityReference        `json:"entity_references,omitempty"`
-	PlanCommentRefs       []models.TaskPlanCommentRef `json:"plan_comment_refs,omitempty"`
-	RequirePrimarySession bool                        `json:"require_primary_session,omitempty"`
+	TaskID                string                          `json:"task_id"`
+	TaskSessionID         string                          `json:"session_id"`
+	MessageID             string                          `json:"message_id,omitempty"`
+	ClientMessageID       string                          `json:"client_message_id,omitempty"`
+	Content               string                          `json:"content"`
+	AuthorID              string                          `json:"author_id,omitempty"`
+	Model                 string                          `json:"model,omitempty"`
+	PlanMode              bool                            `json:"plan_mode,omitempty"`
+	HasReviewComments     bool                            `json:"has_review_comments,omitempty"`
+	Attachments           []v1.MessageAttachment          `json:"attachments,omitempty"`
+	ContextFiles          []v1.ContextFileMeta            `json:"context_files,omitempty"`
+	EntityReferences      []v1.EntityReference            `json:"entity_references,omitempty"`
+	PlanCommentRefs       []models.TaskPlanCommentRef     `json:"plan_comment_refs,omitempty"`
+	PreviewFeedbackRefs   []models.TaskPreviewFeedbackRef `json:"preview_feedback_refs,omitempty"`
+	RequirePrimarySession bool                            `json:"require_primary_session,omitempty"`
 	// These fields are server-owned and are carried only from message admission
 	// to the created-session dispatch. They are intentionally not JSON fields.
 	canvasGuidanceResolved   bool
@@ -515,18 +518,19 @@ type wsAddMessageRequest struct {
 }
 
 type addMessageReplayIdentity struct {
-	TaskID                string                      `json:"task_id"`
-	TaskSessionID         string                      `json:"session_id"`
-	Content               string                      `json:"content"`
-	AuthorID              string                      `json:"author_id"`
-	Model                 string                      `json:"model"`
-	PlanMode              bool                        `json:"plan_mode"`
-	HasReviewComments     bool                        `json:"has_review_comments"`
-	Attachments           []v1.MessageAttachment      `json:"attachments"`
-	ContextFiles          []v1.ContextFileMeta        `json:"context_files"`
-	EntityReferences      []v1.EntityReference        `json:"entity_references"`
-	PlanCommentRefs       []models.TaskPlanCommentRef `json:"plan_comment_refs"`
-	RequirePrimarySession bool                        `json:"require_primary_session"`
+	TaskID                string                          `json:"task_id"`
+	TaskSessionID         string                          `json:"session_id"`
+	Content               string                          `json:"content"`
+	AuthorID              string                          `json:"author_id"`
+	Model                 string                          `json:"model"`
+	PlanMode              bool                            `json:"plan_mode"`
+	HasReviewComments     bool                            `json:"has_review_comments"`
+	Attachments           []v1.MessageAttachment          `json:"attachments"`
+	ContextFiles          []v1.ContextFileMeta            `json:"context_files"`
+	EntityReferences      []v1.EntityReference            `json:"entity_references"`
+	PlanCommentRefs       []models.TaskPlanCommentRef     `json:"plan_comment_refs"`
+	PreviewFeedbackRefs   []models.TaskPreviewFeedbackRef `json:"preview_feedback_refs"`
+	RequirePrimarySession bool                            `json:"require_primary_session"`
 }
 
 func addMessageRequestFingerprint(req wsAddMessageRequest) (string, error) {
@@ -535,7 +539,8 @@ func addMessageRequestFingerprint(req wsAddMessageRequest) (string, error) {
 		AuthorID: req.AuthorID, Model: req.Model, PlanMode: req.PlanMode,
 		HasReviewComments: req.HasReviewComments, Attachments: req.Attachments,
 		ContextFiles: req.ContextFiles, EntityReferences: req.EntityReferences,
-		PlanCommentRefs: req.PlanCommentRefs, RequirePrimarySession: req.RequirePrimarySession,
+		PlanCommentRefs: req.PlanCommentRefs, PreviewFeedbackRefs: req.PreviewFeedbackRefs,
+		RequirePrimarySession: req.RequirePrimarySession,
 	})
 }
 
@@ -569,7 +574,7 @@ func (h *MessageHandlers) wsAddMessage(ctx context.Context, msg *ws.Message) (*w
 		return response, nil
 	}
 	admissionCtx := ctx
-	if len(req.PlanCommentRefs) > 0 {
+	if len(req.PlanCommentRefs) > 0 || len(req.PreviewFeedbackRefs) > 0 {
 		var releaseAdmission func()
 		admissionCtx, releaseAdmission, err = h.service.AcquirePlanCommentAndMessageAdmission(
 			ctx, req.TaskID, req.ClientMessageID,
@@ -587,7 +592,7 @@ func (h *MessageHandlers) wsAddMessage(ctx context.Context, msg *ws.Message) (*w
 			return response, nil
 		}
 	}
-	if len(req.PlanCommentRefs) == 0 && req.ClientMessageID != "" {
+	if len(req.PlanCommentRefs) == 0 && len(req.PreviewFeedbackRefs) == 0 && req.ClientMessageID != "" {
 		var releaseMessageAdmission func()
 		admissionCtx, releaseMessageAdmission, err = h.service.AcquireMessageAdmission(
 			admissionCtx, req.ClientMessageID,
@@ -640,9 +645,10 @@ func (h *MessageHandlers) wsAddMessage(ctx context.Context, msg *ws.Message) (*w
 		}
 		req.EntityReferences = references
 	}
-	if len(req.PlanCommentRefs) > 0 {
-		if err := h.service.ValidatePlanCommentMessage(
-			admissionCtx, req.TaskID, req.TaskSessionID, req.Content, req.PlanCommentRefs,
+	if len(req.PlanCommentRefs) > 0 || len(req.PreviewFeedbackRefs) > 0 {
+		if err := h.service.ValidateTaskFeedbackMessage(
+			admissionCtx, req.TaskID, req.TaskSessionID, req.Content,
+			req.PlanCommentRefs, req.PreviewFeedbackRefs,
 			req.RequirePrimarySession, sessionResp.Session.State,
 		); err != nil {
 			if response := planCommentMessageError(msg, err); response != nil {
@@ -652,8 +658,23 @@ func (h *MessageHandlers) wsAddMessage(ctx context.Context, msg *ws.Message) (*w
 			return ws.NewError(msg.ID, msg.Action, ws.ErrorCodeInternalError, "Failed to validate plan comments", nil)
 		}
 	}
+	if len(req.PreviewFeedbackRefs) > 0 {
+		previewAttachments, err := h.service.PreviewFeedbackAttachments(
+			admissionCtx, req.TaskID, req.PreviewFeedbackRefs,
+		)
+		if err != nil {
+			if response := planCommentMessageError(msg, err); response != nil {
+				return response, nil
+			}
+			return ws.NewError(msg.ID, msg.Action, ws.ErrorCodeValidation, "Invalid preview feedback attachments", nil)
+		}
+		req.Attachments = append(req.Attachments, previewAttachments...)
+		if err := validateAttachments(req.Attachments); err != nil {
+			return ws.NewError(msg.ID, msg.Action, ws.ErrorCodeValidation, err.Error(), nil)
+		}
+	}
 	var planCommentAttachmentClaim *messagequeue.QueueAttachmentClaim
-	if len(req.PlanCommentRefs) > 0 && len(req.Attachments) > 0 {
+	if (len(req.PlanCommentRefs) > 0 || len(req.PreviewFeedbackRefs) > 0) && len(req.Attachments) > 0 {
 		claim, err := h.service.PrepareMessageAttachmentClaim(ctx, req.TaskID, req.Attachments)
 		if err != nil {
 			return ws.NewError(msg.ID, msg.Action, ws.ErrorCodeValidation, err.Error(), nil)
@@ -755,7 +776,8 @@ func (h *MessageHandlers) wsAddMessage(ctx context.Context, msg *ws.Message) (*w
 	storedContent = orchestrator.AppendEntityReferenceContext(storedContent, req.EntityReferences)
 	configMode, _ := sessionResp.Session.Metadata["config_mode"].(bool)
 	titleOwner := false
-	hasMessageContent := req.Content != "" || len(req.Attachments) > 0 || len(req.PlanCommentRefs) > 0
+	hasMessageContent := req.Content != "" || len(req.Attachments) > 0 ||
+		len(req.PlanCommentRefs) > 0 || len(req.PreviewFeedbackRefs) > 0
 	task, titleOwner, wsErr = h.resolveMessageTaskAndTitleOwner(
 		ctx, msg, task, req.TaskID, req.TaskSessionID, configMode, startCreatedSession, hasMessageContent,
 	)
@@ -817,6 +839,7 @@ func (h *MessageHandlers) wsAddMessage(ctx context.Context, msg *ws.Message) (*w
 		AuthorID:              req.AuthorID,
 		Metadata:              messageMetadata,
 		PlanCommentRefs:       req.PlanCommentRefs,
+		PreviewFeedbackRefs:   req.PreviewFeedbackRefs,
 		RequirePrimarySession: req.RequirePrimarySession,
 		ExpectedSessionState:  sessionResp.Session.State,
 		AttachmentClaim:       planCommentAttachmentClaim,
@@ -826,9 +849,9 @@ func (h *MessageHandlers) wsAddMessage(ctx context.Context, msg *ws.Message) (*w
 	// Every comment-bearing message uses the queue row as a durable dispatch
 	// receipt. Promptable sessions drain it immediately; workflow waits and
 	// process restarts retain the same caller-owned delivery identity.
-	atomicQueuedPlanComments := len(req.PlanCommentRefs) > 0
+	atomicQueuedTaskFeedback := len(req.PlanCommentRefs) > 0 || len(req.PreviewFeedbackRefs) > 0
 	var queuedCoordinator AtomicQueuedPromptCoordinator
-	if atomicQueuedPlanComments {
+	if atomicQueuedTaskFeedback {
 		var ok bool
 		queuedCoordinator, ok = h.orchestrator.(AtomicQueuedPromptCoordinator)
 		if !ok {
@@ -836,7 +859,7 @@ func (h *MessageHandlers) wsAddMessage(ctx context.Context, msg *ws.Message) (*w
 		}
 	}
 	createMessage := func() (*models.Message, error) {
-		if atomicQueuedPlanComments {
+		if atomicQueuedTaskFeedback {
 			queueMetadata := make(map[string]interface{}, len(createRequest.Metadata)+1)
 			for key, value := range createRequest.Metadata {
 				queueMetadata[key] = value
@@ -913,7 +936,7 @@ func (h *MessageHandlers) wsAddMessage(ctx context.Context, msg *ws.Message) (*w
 		promptReferencesPrepared = initialTaskBrief.PromptReferencesPrepared
 		req.promptReferencesPrepared = promptReferencesPrepared
 	}
-	if initialTaskBriefQueued && h.orchestrator != nil && !atomicQueuedPlanComments {
+	if initialTaskBriefQueued && h.orchestrator != nil && !atomicQueuedTaskFeedback {
 		queueMetadata := meta.ToMap()
 		if queueMetadata == nil {
 			queueMetadata = make(map[string]interface{})
@@ -937,7 +960,7 @@ func (h *MessageHandlers) wsAddMessage(ctx context.Context, msg *ws.Message) (*w
 				zap.Error(err))
 			return ws.NewError(msg.ID, msg.Action, ws.ErrorCodeInternalError, "Failed to queue prompt", nil)
 		}
-	} else if turnStartResult.Queued && !atomicQueuedPlanComments {
+	} else if turnStartResult.Queued && !atomicQueuedTaskFeedback {
 		if err := h.orchestrator.QueueUserPrompt(
 			ctx,
 			req.TaskID,
@@ -967,7 +990,7 @@ func (h *MessageHandlers) wsAddMessage(ctx context.Context, msg *ws.Message) (*w
 	// an orchestrator is available. This runs async so the WS request can
 	// respond immediately. Plan mode changes the execution prompt and agent
 	// behavior; it does not make message.add a record-only operation.
-	if h.orchestrator != nil && !turnStartResult.Queued && !atomicQueuedPlanComments && !initialTaskBriefQueued {
+	if h.orchestrator != nil && !turnStartResult.Queued && !atomicQueuedTaskFeedback && !initialTaskBriefQueued {
 		h.dispatchPromptAsync(
 			ctx, req, sessionResp.Session.AgentProfileID, startCreatedSession, steer, trustedPromptContext,
 		)
@@ -1011,7 +1034,7 @@ func (h *MessageHandlers) addMessageReplayResponse(
 		// A replay may be the first process that survives long enough to kick
 		// the atomically persisted delivery receipt. Notification is idempotent:
 		// an acknowledged receipt makes this a no-op.
-		if len(req.PlanCommentRefs) > 0 {
+		if len(req.PlanCommentRefs) > 0 || len(req.PreviewFeedbackRefs) > 0 {
 			if coordinator, ok := h.orchestrator.(AtomicQueuedPromptCoordinator); ok {
 				coordinator.NotifyQueuedUserPrompt(ctx, existing.TaskID, existing.TaskSessionID)
 			}
@@ -1050,8 +1073,9 @@ func addMessageReplayConflicts(
 	}
 	storedFingerprint, _ := existing.Metadata[plancomments.MetadataClientMessageFingerprint].(string)
 	return (storedFingerprint != "" && storedFingerprint != requestFingerprint) ||
-		(storedFingerprint == "" && len(req.PlanCommentRefs) > 0) ||
-		!plancomments.MetadataRefsMatch(existing.Metadata, req.PlanCommentRefs)
+		(storedFingerprint == "" && (len(req.PlanCommentRefs) > 0 || len(req.PreviewFeedbackRefs) > 0)) ||
+		!plancomments.MetadataRefsMatch(existing.Metadata, req.PlanCommentRefs) ||
+		!previewfeedback.MetadataRefsMatch(existing.Metadata, req.PreviewFeedbackRefs)
 }
 
 // lockMessageID serializes acceptance for one caller-owned message ID. The
@@ -1159,7 +1183,7 @@ func validateAddMessageRequest(req wsAddMessageRequest) string {
 		return "task_id is required"
 	}
 	// Content can be empty if there are attachments (image-only messages)
-	if req.Content == "" && len(req.Attachments) == 0 && len(req.PlanCommentRefs) == 0 {
+	if req.Content == "" && len(req.Attachments) == 0 && len(req.PlanCommentRefs) == 0 && len(req.PreviewFeedbackRefs) == 0 {
 		return "content or attachments are required"
 	}
 	seenPlanComments := make(map[string]struct{}, len(req.PlanCommentRefs))
@@ -1172,11 +1196,21 @@ func validateAddMessageRequest(req wsAddMessageRequest) string {
 		}
 		seenPlanComments[ref.ID] = struct{}{}
 	}
+	seenPreviewFeedback := make(map[string]struct{}, len(req.PreviewFeedbackRefs))
+	for _, ref := range req.PreviewFeedbackRefs {
+		if ref.ID == "" || ref.Version <= 0 {
+			return "preview_feedback_refs are invalid"
+		}
+		if _, duplicate := seenPreviewFeedback[ref.ID]; duplicate {
+			return "preview_feedback_refs contain duplicates"
+		}
+		seenPreviewFeedback[ref.ID] = struct{}{}
+	}
 	if len(req.ClientMessageID) > 128 {
 		return "client_message_id is too long"
 	}
-	if len(req.PlanCommentRefs) > 0 && req.ClientMessageID == "" {
-		return "client_message_id is required with plan comments"
+	if (len(req.PlanCommentRefs) > 0 || len(req.PreviewFeedbackRefs) > 0) && req.ClientMessageID == "" {
+		return "client_message_id is required with task feedback"
 	}
 	if len(req.PlanCommentRefs) > 0 && plancomments.ContainsReservedPlaceholder(req.Content) {
 		return "content contains a reserved plan comment marker"
@@ -1203,10 +1237,20 @@ func queuedMessageAttachments(attachments []v1.MessageAttachment) []messagequeue
 }
 
 func planCommentMessageError(msg *ws.Message, err error) *ws.Message {
-	if errors.Is(err, plancomments.ErrRenderedTooLarge) {
+	if errors.Is(err, plancomments.ErrRenderedTooLarge) || errors.Is(err, previewfeedback.ErrPromptTooLarge) {
 		response, _ := ws.NewError(msg.ID, msg.Action, ws.ErrorCodeValidation, "Rendered message content is too long", nil)
 		return response
 	}
+	var previewChanged *previewfeedbacktx.FeedbackChangedError
+	if errors.As(err, &previewChanged) {
+		details := map[string]interface{}{}
+		if previewChanged.Snapshot != nil {
+			details["snapshot"] = dto.TaskPreviewFeedbackSnapshotFromModel(previewChanged.Snapshot)
+		}
+		response, _ := ws.NewError(msg.ID, msg.Action, ws.ErrorCodePreviewFeedbackChanged,
+			"Task preview feedback changed", details)
+		return response
+	}
 	var commentsChanged *plancommenttx.CommentsChangedError
 	if errors.As(err, &commentsChanged) {
 		details := map[string]interface{}{}
diff --git a/apps/backend/internal/task/handlers/message_handlers_plan_comments_test.go b/apps/backend/internal/task/handlers/message_handlers_plan_comments_test.go
index ee673168f6..e295193698 100644
--- a/apps/backend/internal/task/handlers/message_handlers_plan_comments_test.go
+++ b/apps/backend/internal/task/handlers/message_handlers_plan_comments_test.go
@@ -13,12 +13,98 @@ import (
 	"github.com/kandev/kandev/internal/orchestrator/messagequeue"
 	"github.com/kandev/kandev/internal/task/models"
 	"github.com/kandev/kandev/internal/task/plancomments"
+	"github.com/kandev/kandev/internal/task/previewfeedback"
 	"github.com/kandev/kandev/internal/task/repository/plancommenttx"
 	"github.com/kandev/kandev/internal/task/service"
 	ws "github.com/kandev/kandev/pkg/websocket"
 	"github.com/stretchr/testify/require"
 )
 
+func (r *messageAddSwitchRepo) ValidateMessageTaskFeedback(
+	_ context.Context,
+	_, _, content string,
+	planRefs []models.TaskPlanCommentRef,
+	previewRefs []models.TaskPreviewFeedbackRef,
+	requirePrimary bool,
+	_ models.TaskSessionState,
+) error {
+	if !requirePrimary || len(planRefs) != 0 || len(previewRefs) != 1 ||
+		previewRefs[0] != (models.TaskPreviewFeedbackRef{ID: "preview-handler", Version: 2}) ||
+		content != "" {
+		return errors.New("preview feedback preflight was not forwarded")
+	}
+	return nil
+}
+
+func (r *messageAddSwitchRepo) ListTaskPreviewFeedback(
+	context.Context,
+	string,
+) (*models.TaskPreviewFeedbackSnapshot, error) {
+	return handlerPreviewFeedbackSnapshot(), nil
+}
+
+func (r *messageAddSwitchRepo) CreateMessageWithTaskFeedback(
+	_ context.Context,
+	message *models.Message,
+	planRefs []models.TaskPlanCommentRef,
+	previewRefs []models.TaskPreviewFeedbackRef,
+	requirePrimary bool,
+	_ models.TaskSessionState,
+	_ *messagequeue.QueueAttachmentClaim,
+) (*models.TaskPlanCommentSnapshot, *models.TaskPreviewFeedbackSnapshot, error) {
+	if !requirePrimary || len(planRefs) != 0 || len(previewRefs) != 1 ||
+		previewRefs[0] != (models.TaskPreviewFeedbackRef{ID: "preview-handler", Version: 2}) {
+		return nil, nil, errors.New("preview feedback request was not forwarded")
+	}
+	content, err := previewfeedback.AppendMarkdown(message.Content, handlerPreviewFeedbackSnapshot().Items)
+	if err != nil {
+		return nil, nil, err
+	}
+	message.Content = content
+	message.PromptIndex = 1
+	r.messagesMu.Lock()
+	r.messages = append(r.messages, message)
+	r.idempotentMessage = message
+	r.messagesMu.Unlock()
+	return nil, &models.TaskPreviewFeedbackSnapshot{TaskID: message.TaskID, Revision: 4, Items: []*models.TaskPreviewFeedback{}}, nil
+}
+
+func (r *messageAddSwitchRepo) CreateMessageWithTaskFeedbackAndQueue(
+	ctx context.Context,
+	message *models.Message,
+	queued *messagequeue.QueuedMessage,
+	planRefs []models.TaskPlanCommentRef,
+	previewRefs []models.TaskPreviewFeedbackRef,
+	requirePrimary bool,
+	expectedState models.TaskSessionState,
+	claim *messagequeue.QueueAttachmentClaim,
+	_ int,
+) (*models.TaskPlanCommentSnapshot, *models.TaskPreviewFeedbackSnapshot, error) {
+	planSnapshot, previewSnapshot, err := r.CreateMessageWithTaskFeedback(
+		ctx, message, planRefs, previewRefs, requirePrimary, expectedState, claim,
+	)
+	if err != nil {
+		return nil, nil, err
+	}
+	queued.Content = message.Content
+	copy := *queued
+	r.queuedMessage = &copy
+	return planSnapshot, previewSnapshot, nil
+}
+
+func handlerPreviewFeedbackSnapshot() *models.TaskPreviewFeedbackSnapshot {
+	return &models.TaskPreviewFeedbackSnapshot{
+		TaskID: "t1", Revision: 3,
+		Items: []*models.TaskPreviewFeedback{{
+			ID: "preview-handler", TaskID: "t1", Version: 2,
+			Kind: models.TaskPreviewFeedbackText, Comment: "Generated copy is unclear",
+			SourceKind: models.TaskPreviewFeedbackBrowser, SourceLabel: "Local app",
+			PageRoute: "/generated", SelectedText: "Runtime label",
+			TextAnchor: json.RawMessage(`{"start":{"node_path":[0],"offset":0},"end":{"node_path":[0],"offset":13},"containing_element":{"tag":"span","outer_html":"<span>Runtime label</span>"}}`),
+		}},
+	}
+}
+
 func (r *messageAddSwitchRepo) ValidateMessagePlanComments(
 	_ context.Context,
 	_, _, content string,
@@ -136,6 +222,44 @@ func TestWSAddMessageAcceptsEmptyBodyWithPlanCommentsAndUsesResolvedContent(t *t
 	require.False(t, strings.ContainsRune(stored, '\x00'))
 }
 
+func TestWSAddMessageAcceptsEmptyBodyWithPreviewFeedbackAndUsesResolvedContent(t *testing.T) {
+	now := time.Now().UTC()
+	repo := &messageAddSwitchRepo{
+		tasks: map[string]*models.Task{
+			"t1": {ID: "t1", State: "IN_PROGRESS", UpdatedAt: now},
+		},
+		sessions: map[string]*models.TaskSession{
+			"s1": {ID: "s1", TaskID: "t1", State: models.TaskSessionStateWaitingForInput, UpdatedAt: now},
+		},
+		primaryID: "s1",
+	}
+	log, err := logger.NewLogger(logger.LoggingConfig{Level: "error", Format: "json"})
+	require.NoError(t, err)
+	svc := service.NewService(service.Repos{
+		Workspaces: repo, Tasks: repo, TaskRepos: repo,
+		Workflows: repo, Messages: repo, Turns: repo,
+		Sessions: repo, GitSnapshots: repo, RepoEntities: repo,
+		Executors: repo, Environments: repo, TaskEnvironments: repo,
+		Reviews: repo,
+	}, nil, log, service.RepositoryDiscoveryConfig{})
+	h := NewMessageHandlers(svc, &firstTurnCaptureOrchestrator{}, log)
+	req, err := ws.NewRequest("req-preview-feedback", ws.ActionMessageAdd, map[string]interface{}{
+		"task_id": "t1", "session_id": "s1", "content": "",
+		"client_message_id":       "message-handler-preview-feedback",
+		"preview_feedback_refs":   []map[string]interface{}{{"id": "preview-handler", "version": 2}},
+		"require_primary_session": true,
+	})
+	require.NoError(t, err)
+
+	response, err := h.wsAddMessage(t.Context(), req)
+	require.NoError(t, err)
+	require.Equal(t, ws.MessageTypeResponse, response.Type, string(response.Payload))
+	stored := repo.firstMessageContent()
+	require.Contains(t, stored, "### Web Preview Feedback")
+	require.Contains(t, stored, "Runtime label")
+	require.Contains(t, stored, "containing_element")
+}
+
 func TestWSAddMessageRunRejectsPrimaryReplacedByOnTurnStart(t *testing.T) {
 	now := time.Now().UTC()
 	repo := &messageAddSwitchRepo{
diff --git a/apps/backend/internal/task/handlers/task_handlers.go b/apps/backend/internal/task/handlers/task_handlers.go
index 71f330458f..26ee6887df 100644
--- a/apps/backend/internal/task/handlers/task_handlers.go
+++ b/apps/backend/internal/task/handlers/task_handlers.go
@@ -284,6 +284,11 @@ func (h *TaskHandlers) registerWS(dispatcher *ws.Dispatcher) {
 	dispatcher.RegisterFunc(ws.ActionTaskPlanCommentCreate, h.wsCreateTaskPlanComment)
 	dispatcher.RegisterFunc(ws.ActionTaskPlanCommentUpdate, h.wsUpdateTaskPlanComment)
 	dispatcher.RegisterFunc(ws.ActionTaskPlanCommentDelete, h.wsDeleteTaskPlanComment)
+	dispatcher.RegisterFunc(ws.ActionTaskPreviewFeedbackList, h.wsListTaskPreviewFeedback)
+	dispatcher.RegisterFunc(ws.ActionTaskPreviewFeedbackCreate, h.wsCreateTaskPreviewFeedback)
+	dispatcher.RegisterFunc(ws.ActionTaskPreviewFeedbackUpdate, h.wsUpdateTaskPreviewFeedback)
+	dispatcher.RegisterFunc(ws.ActionTaskPreviewFeedbackDelete, h.wsDeleteTaskPreviewFeedback)
+	dispatcher.RegisterFunc(ws.ActionTaskPreviewFeedbackClear, h.wsClearTaskPreviewFeedback)
 }
 
 // convertToServiceRepos converts dto.TaskRepositoryInput slice to service.TaskRepositoryInput slice.
diff --git a/apps/backend/internal/task/handlers/task_preview_feedback_handlers.go b/apps/backend/internal/task/handlers/task_preview_feedback_handlers.go
new file mode 100644
index 0000000000..f8f6120a5b
--- /dev/null
+++ b/apps/backend/internal/task/handlers/task_preview_feedback_handlers.go
@@ -0,0 +1,155 @@
+package handlers
+
+import (
+	"context"
+	"encoding/json"
+	"errors"
+
+	"github.com/kandev/kandev/internal/task/dto"
+	"github.com/kandev/kandev/internal/task/models"
+	"github.com/kandev/kandev/internal/task/previewfeedback"
+	"github.com/kandev/kandev/internal/task/repository"
+	"github.com/kandev/kandev/internal/task/service"
+	ws "github.com/kandev/kandev/pkg/websocket"
+)
+
+func (h *TaskHandlers) wsListTaskPreviewFeedback(ctx context.Context, msg *ws.Message) (*ws.Message, error) {
+	var req struct {
+		TaskID string `json:"task_id"`
+	}
+	if err := json.Unmarshal(msg.Payload, &req); err != nil {
+		return invalidPreviewFeedbackPayload(msg)
+	}
+	snapshot, err := h.planService.ListPreviewFeedback(ctx, req.TaskID)
+	if err != nil {
+		return previewFeedbackError(msg, err, snapshot)
+	}
+	return ws.NewResponse(msg.ID, msg.Action, dto.TaskPreviewFeedbackSnapshotFromModel(snapshot))
+}
+
+func (h *TaskHandlers) wsCreateTaskPreviewFeedback(ctx context.Context, msg *ws.Message) (*ws.Message, error) {
+	var req struct {
+		TaskID                 string                               `json:"task_id"`
+		ID                     string                               `json:"id"`
+		Kind                   models.TaskPreviewFeedbackKind       `json:"kind"`
+		Comment                string                               `json:"comment"`
+		SourceKind             models.TaskPreviewFeedbackSourceKind `json:"source_kind"`
+		SourceSessionID        string                               `json:"source_session_id"`
+		SourceLabel            string                               `json:"source_label"`
+		SourcePath             string                               `json:"source_path"`
+		PageRoute              string                               `json:"page_route"`
+		PageTitle              string                               `json:"page_title"`
+		SelectedText           string                               `json:"selected_text"`
+		TextAnchor             json.RawMessage                      `json:"text_anchor"`
+		ElementSnapshot        json.RawMessage                      `json:"element_snapshot"`
+		CaptureRect            json.RawMessage                      `json:"capture_rect"`
+		ScreenshotAttachmentID string                               `json:"screenshot_attachment_id"`
+	}
+	if err := json.Unmarshal(msg.Payload, &req); err != nil {
+		return invalidPreviewFeedbackPayload(msg)
+	}
+	snapshot, err := h.planService.CreatePreviewFeedback(ctx, &models.TaskPreviewFeedback{
+		ID: req.ID, TaskID: req.TaskID, Kind: req.Kind, Comment: req.Comment,
+		SourceKind: req.SourceKind, SourceSessionID: req.SourceSessionID,
+		SourceLabel: req.SourceLabel, SourcePath: req.SourcePath,
+		PageRoute: req.PageRoute, PageTitle: req.PageTitle,
+		SelectedText: req.SelectedText, TextAnchor: req.TextAnchor,
+		ElementSnapshot: req.ElementSnapshot, CaptureRect: req.CaptureRect,
+		ScreenshotAttachmentID: req.ScreenshotAttachmentID,
+	})
+	if err != nil {
+		return previewFeedbackError(msg, err, snapshot)
+	}
+	return ws.NewResponse(msg.ID, msg.Action, dto.TaskPreviewFeedbackSnapshotFromModel(snapshot))
+}
+
+func (h *TaskHandlers) wsUpdateTaskPreviewFeedback(ctx context.Context, msg *ws.Message) (*ws.Message, error) {
+	var req struct {
+		TaskID          string `json:"task_id"`
+		ID              string `json:"id"`
+		Comment         string `json:"comment"`
+		ExpectedVersion int64  `json:"expected_version"`
+	}
+	if err := json.Unmarshal(msg.Payload, &req); err != nil {
+		return invalidPreviewFeedbackPayload(msg)
+	}
+	snapshot, err := h.planService.UpdatePreviewFeedback(
+		ctx, req.TaskID, req.ID, req.Comment, req.ExpectedVersion,
+	)
+	if err != nil {
+		return previewFeedbackError(msg, err, snapshot)
+	}
+	return ws.NewResponse(msg.ID, msg.Action, dto.TaskPreviewFeedbackSnapshotFromModel(snapshot))
+}
+
+func (h *TaskHandlers) wsDeleteTaskPreviewFeedback(ctx context.Context, msg *ws.Message) (*ws.Message, error) {
+	var req struct {
+		TaskID          string `json:"task_id"`
+		ID              string `json:"id"`
+		ExpectedVersion int64  `json:"expected_version"`
+	}
+	if err := json.Unmarshal(msg.Payload, &req); err != nil {
+		return invalidPreviewFeedbackPayload(msg)
+	}
+	snapshot, err := h.planService.DeletePreviewFeedback(ctx, req.TaskID, req.ID, req.ExpectedVersion)
+	if err != nil {
+		return previewFeedbackError(msg, err, snapshot)
+	}
+	return ws.NewResponse(msg.ID, msg.Action, dto.TaskPreviewFeedbackSnapshotFromModel(snapshot))
+}
+
+func (h *TaskHandlers) wsClearTaskPreviewFeedback(ctx context.Context, msg *ws.Message) (*ws.Message, error) {
+	var req struct {
+		TaskID           string `json:"task_id"`
+		ExpectedRevision int64  `json:"expected_revision"`
+	}
+	if err := json.Unmarshal(msg.Payload, &req); err != nil {
+		return invalidPreviewFeedbackPayload(msg)
+	}
+	snapshot, err := h.planService.ClearPreviewFeedback(ctx, req.TaskID, req.ExpectedRevision)
+	if err != nil {
+		return previewFeedbackError(msg, err, snapshot)
+	}
+	return ws.NewResponse(msg.ID, msg.Action, dto.TaskPreviewFeedbackSnapshotFromModel(snapshot))
+}
+
+func invalidPreviewFeedbackPayload(msg *ws.Message) (*ws.Message, error) {
+	return ws.NewError(msg.ID, msg.Action, ws.ErrorCodeBadRequest, "Invalid payload", nil)
+}
+
+func previewFeedbackError(
+	msg *ws.Message,
+	err error,
+	snapshot *models.TaskPreviewFeedbackSnapshot,
+) (*ws.Message, error) {
+	if errors.Is(err, service.ErrTaskPreviewFeedbackChanged) {
+		details := map[string]interface{}{}
+		if snapshot != nil {
+			details["snapshot"] = dto.TaskPreviewFeedbackSnapshotFromModel(snapshot)
+		}
+		return ws.NewError(msg.ID, msg.Action, ws.ErrorCodePreviewFeedbackChanged,
+			"Task preview feedback changed", details)
+	}
+	code := ws.ErrorCodeValidation
+	message := "Invalid preview feedback"
+	switch {
+	case errors.Is(err, repository.ErrTaskNotFound):
+		code, message = ws.ErrorCodeNotFound, "Task not found"
+	case errors.Is(err, models.ErrAttachmentClaimConflict), errors.Is(err, models.ErrAttachmentForbidden):
+		code, message = ws.ErrorCodeConflict, "Screenshot attachment is unavailable"
+	case errors.Is(err, previewfeedback.ErrTooManyItems), errors.Is(err, previewfeedback.ErrTooManyScreenshots),
+		errors.Is(err, previewfeedback.ErrCollectionTooLarge):
+		message = "Task preview feedback collection is too large"
+	case errors.Is(err, previewfeedback.ErrCommentRequired):
+		message = "Preview feedback comment is required"
+	case errors.Is(err, previewfeedback.ErrCommentTooLarge), errors.Is(err, previewfeedback.ErrCaptureTooLarge),
+		errors.Is(err, previewfeedback.ErrSourceIdentityLarge):
+		message = "Preview feedback is too large"
+	case errors.Is(err, service.ErrTaskIDRequired), errors.Is(err, service.ErrPreviewFeedbackIDRequired),
+		errors.Is(err, service.ErrPreviewFeedbackIDInvalid), errors.Is(err, service.ErrPreviewFeedbackVersionRequired),
+		errors.Is(err, service.ErrPreviewFeedbackRevisionInvalid), errors.Is(err, previewfeedback.ErrCaptureInvalid):
+	default:
+		code, message = ws.ErrorCodeInternalError, "Failed to update task preview feedback"
+	}
+	return ws.NewError(msg.ID, msg.Action, code, message, nil)
+}
diff --git a/apps/backend/internal/task/handlers/task_preview_feedback_handlers_test.go b/apps/backend/internal/task/handlers/task_preview_feedback_handlers_test.go
new file mode 100644
index 0000000000..3edfac5d54
--- /dev/null
+++ b/apps/backend/internal/task/handlers/task_preview_feedback_handlers_test.go
@@ -0,0 +1,93 @@
+package handlers
+
+import (
+	"context"
+	"encoding/json"
+	"testing"
+
+	ws "github.com/kandev/kandev/pkg/websocket"
+)
+
+type previewFeedbackHandlerContract interface {
+	wsListTaskPreviewFeedback(context.Context, *ws.Message) (*ws.Message, error)
+	wsCreateTaskPreviewFeedback(context.Context, *ws.Message) (*ws.Message, error)
+	wsUpdateTaskPreviewFeedback(context.Context, *ws.Message) (*ws.Message, error)
+	wsDeleteTaskPreviewFeedback(context.Context, *ws.Message) (*ws.Message, error)
+	wsClearTaskPreviewFeedback(context.Context, *ws.Message) (*ws.Message, error)
+}
+
+func requirePreviewFeedbackHandlers(t *testing.T, handlers *TaskHandlers) previewFeedbackHandlerContract {
+	t.Helper()
+	contract, ok := any(handlers).(previewFeedbackHandlerContract)
+	if !ok {
+		t.Fatal("TaskHandlers does not implement task preview feedback actions")
+	}
+	return contract
+}
+
+func TestTaskPreviewFeedbackHandlersCRUDAndConflictSnapshot(t *testing.T) {
+	h := newPlanTestHandlers(t)
+	handlers := requirePreviewFeedbackHandlers(t, h)
+	ctx := context.Background()
+
+	created, err := handlers.wsCreateTaskPreviewFeedback(ctx, planMsg(t, "task.preview_feedback.create",
+		`{"task_id":"`+planTaskID+`","id":"e587551e-cb61-4c12-b1b6-e205ad9c65fb",`+
+			`"kind":"text","comment":"Increase contrast","source_kind":"browser",`+
+			`"source_label":"Local app","page_route":"/products","page_title":"Products",`+
+			`"selected_text":"Choose a plan","text_anchor":{"start":{"path":[0],"offset":0}}}`))
+	if err != nil {
+		t.Fatalf("wsCreateTaskPreviewFeedback: %v", err)
+	}
+	snapshot := decodePreviewFeedbackSnapshot(t, created)
+	if snapshot.Revision != 1 || len(snapshot.Items) != 1 || snapshot.Items[0].Version != 1 {
+		t.Fatalf("created snapshot = %#v", snapshot)
+	}
+
+	updated, err := handlers.wsUpdateTaskPreviewFeedback(ctx, planMsg(t, "task.preview_feedback.update",
+		`{"task_id":"`+planTaskID+`","id":"e587551e-cb61-4c12-b1b6-e205ad9c65fb",`+
+			`"comment":"Use stronger contrast","expected_version":1}`))
+	if err != nil {
+		t.Fatalf("wsUpdateTaskPreviewFeedback: %v", err)
+	}
+	snapshot = decodePreviewFeedbackSnapshot(t, updated)
+	if snapshot.Revision != 2 || snapshot.Items[0].Comment != "Use stronger contrast" {
+		t.Fatalf("updated snapshot = %#v", snapshot)
+	}
+
+	conflict, err := handlers.wsDeleteTaskPreviewFeedback(ctx, planMsg(t, "task.preview_feedback.delete",
+		`{"task_id":"`+planTaskID+`","id":"e587551e-cb61-4c12-b1b6-e205ad9c65fb",`+
+			`"expected_version":1}`))
+	if err != nil {
+		t.Fatalf("wsDeleteTaskPreviewFeedback: %v", err)
+	}
+	var payload ws.ErrorPayload
+	if err := json.Unmarshal(conflict.Payload, &payload); err != nil {
+		t.Fatal(err)
+	}
+	current, ok := payload.Details["snapshot"].(map[string]any)
+	if payload.Code != "preview_feedback_changed" || !ok || current["revision"] != float64(2) {
+		t.Fatalf("conflict payload = %#v", payload)
+	}
+}
+
+type previewFeedbackSnapshotPayload struct {
+	TaskID   string `json:"task_id"`
+	Revision int64  `json:"revision"`
+	Items    []struct {
+		ID      string `json:"id"`
+		Comment string `json:"comment"`
+		Version int64  `json:"version"`
+	} `json:"items"`
+}
+
+func decodePreviewFeedbackSnapshot(t *testing.T, msg *ws.Message) previewFeedbackSnapshotPayload {
+	t.Helper()
+	if msg.Type != ws.MessageTypeResponse {
+		t.Fatalf("message type = %q, want response (payload %s)", msg.Type, msg.Payload)
+	}
+	var snapshot previewFeedbackSnapshotPayload
+	if err := json.Unmarshal(msg.Payload, &snapshot); err != nil {
+		t.Fatalf("decode snapshot: %v", err)
+	}
+	return snapshot
+}
diff --git a/apps/backend/internal/task/models/models.go b/apps/backend/internal/task/models/models.go
index 7b52b32b53..5e6df41099 100644
--- a/apps/backend/internal/task/models/models.go
+++ b/apps/backend/internal/task/models/models.go
@@ -2722,6 +2722,57 @@ type TaskPlanCommentRef struct {
 	Version int64  `json:"version"`
 }
 
+type TaskPreviewFeedbackKind string
+
+const (
+	TaskPreviewFeedbackText       TaskPreviewFeedbackKind = "text"
+	TaskPreviewFeedbackElement    TaskPreviewFeedbackKind = "element"
+	TaskPreviewFeedbackScreenshot TaskPreviewFeedbackKind = "screenshot"
+)
+
+type TaskPreviewFeedbackSourceKind string
+
+const (
+	TaskPreviewFeedbackBrowser  TaskPreviewFeedbackSourceKind = "browser"
+	TaskPreviewFeedbackHTMLFile TaskPreviewFeedbackSourceKind = "html_file"
+)
+
+// TaskPreviewFeedback is one immutable rendered-page capture with an editable comment.
+type TaskPreviewFeedback struct {
+	ID                     string                        `json:"id"`
+	TaskID                 string                        `json:"task_id"`
+	Kind                   TaskPreviewFeedbackKind       `json:"kind"`
+	Comment                string                        `json:"comment"`
+	SourceKind             TaskPreviewFeedbackSourceKind `json:"source_kind"`
+	SourceSessionID        string                        `json:"source_session_id,omitempty"`
+	SourceLabel            string                        `json:"source_label"`
+	SourcePath             string                        `json:"source_path,omitempty"`
+	PageRoute              string                        `json:"page_route"`
+	PageTitle              string                        `json:"page_title"`
+	SelectedText           string                        `json:"selected_text,omitempty"`
+	TextAnchor             json.RawMessage               `json:"text_anchor,omitempty"`
+	ElementSnapshot        json.RawMessage               `json:"element_snapshot,omitempty"`
+	CaptureRect            json.RawMessage               `json:"capture_rect,omitempty"`
+	ScreenshotAttachmentID string                        `json:"screenshot_attachment_id,omitempty"`
+	ScreenshotAttachment   *TaskMessageAttachment        `json:"screenshot_attachment,omitempty"`
+	Version                int64                         `json:"version"`
+	CreatedAt              time.Time                     `json:"created_at"`
+	UpdatedAt              time.Time                     `json:"updated_at"`
+}
+
+// TaskPreviewFeedbackSnapshot is the authoritative pending collection for a task.
+type TaskPreviewFeedbackSnapshot struct {
+	TaskID   string                 `json:"task_id" db:"task_id"`
+	Revision int64                  `json:"revision" db:"revision"`
+	Items    []*TaskPreviewFeedback `json:"items"`
+}
+
+// TaskPreviewFeedbackRef identifies the exact pending item version included in delivery.
+type TaskPreviewFeedbackRef struct {
+	ID      string `json:"id"`
+	Version int64  `json:"version"`
+}
+
 // TaskPlanRevision is one immutable snapshot in the revision history of a task plan.
 // Revisions are the source of truth for history; TaskPlan stores the latest revision's content as HEAD.
 type TaskPlanRevision struct {
diff --git a/apps/backend/internal/task/previewfeedback/format.go b/apps/backend/internal/task/previewfeedback/format.go
new file mode 100644
index 0000000000..7dd3a2a071
--- /dev/null
+++ b/apps/backend/internal/task/previewfeedback/format.go
@@ -0,0 +1,179 @@
+package previewfeedback
+
+import (
+	"bytes"
+	"encoding/json"
+	"errors"
+	"fmt"
+	"strconv"
+	"strings"
+
+	"github.com/kandev/kandev/internal/task/models"
+)
+
+var ErrPromptTooLarge = errors.New("preview feedback prompt is too large")
+
+const (
+	MetadataRefs               = "preview_feedback_refs"
+	MetadataRequestFingerprint = "preview_feedback_request_fingerprint"
+)
+
+// AppendMarkdown adds persisted rendered-page evidence as visible user content.
+func AppendMarkdown(content string, items []*models.TaskPreviewFeedback) (string, error) {
+	if len(items) == 0 {
+		return "", errors.New("preview feedback items are required")
+	}
+	var out strings.Builder
+	out.WriteString(content)
+	if content != "" && !strings.HasSuffix(content, "\n\n") {
+		if strings.HasSuffix(content, "\n") {
+			out.WriteByte('\n')
+		} else {
+			out.WriteString("\n\n")
+		}
+	}
+	out.WriteString("### Web Preview Feedback\n\n")
+	for index, item := range items {
+		if item == nil {
+			return "", ErrCaptureInvalid
+		}
+		if err := appendItemMarkdown(&out, index, item); err != nil {
+			return "", ErrCaptureInvalid
+		}
+	}
+	if out.Len() > MaxPromptBytes {
+		return "", ErrPromptTooLarge
+	}
+	return out.String(), nil
+}
+
+func appendItemMarkdown(out *strings.Builder, index int, item *models.TaskPreviewFeedback) error {
+	fmt.Fprintf(out, "#### %d. %s feedback\n\n", index+1, formatKind(item.Kind))
+	writeQuotedField(out, "Source", item.SourceLabel)
+	writeQuotedField(out, "Source type", string(item.SourceKind))
+	if item.SourcePath != "" {
+		writeQuotedField(out, "Source path", item.SourcePath)
+	}
+	writeQuotedField(out, "Page route", item.PageRoute)
+	if item.PageTitle != "" {
+		writeQuotedField(out, "Page title", item.PageTitle)
+	}
+	out.WriteString("- Comment:\n")
+	writeQuote(out, item.Comment)
+	out.WriteByte('\n')
+
+	if err := appendCaptureMarkdown(out, item); err != nil {
+		return err
+	}
+	out.WriteByte('\n')
+	return nil
+}
+
+func appendCaptureMarkdown(out *strings.Builder, item *models.TaskPreviewFeedback) error {
+	switch item.Kind {
+	case models.TaskPreviewFeedbackText:
+		out.WriteString("- Selected text:\n")
+		writeQuote(out, item.SelectedText)
+		out.WriteString("\n- Rendered text anchor (containing element, DOM endpoints, rectangles, scroll, viewport, and pixel ratio):\n")
+		writeJSONFence(out, item.TextAnchor)
+	case models.TaskPreviewFeedbackElement:
+		out.WriteString("- Rendered element snapshot:\n")
+		writeJSONFence(out, item.ElementSnapshot)
+		out.WriteString("- Rendered position:\n")
+		writeJSONFence(out, item.CaptureRect)
+	case models.TaskPreviewFeedbackScreenshot:
+		writeQuotedField(out, "Image", screenshotName(item))
+		out.WriteString("- Captured region and dimensions:\n")
+		writeJSONFence(out, item.CaptureRect)
+	default:
+		return ErrCaptureInvalid
+	}
+	return nil
+}
+
+func screenshotName(item *models.TaskPreviewFeedback) string {
+	if item.ScreenshotAttachment != nil && item.ScreenshotAttachment.Name != "" {
+		return item.ScreenshotAttachment.Name
+	}
+	return item.ScreenshotAttachmentID
+}
+
+// MetadataRefsMatch verifies the persisted delivery identity for an exact retry.
+func MetadataRefsMatch(metadata map[string]interface{}, refs []models.TaskPreviewFeedbackRef) bool {
+	raw, exists := metadata[MetadataRefs]
+	if !exists {
+		return len(refs) == 0
+	}
+	data, err := json.Marshal(raw)
+	if err != nil {
+		return false
+	}
+	var stored []models.TaskPreviewFeedbackRef
+	if err := json.Unmarshal(data, &stored); err != nil || len(stored) != len(refs) {
+		return false
+	}
+	for index := range refs {
+		if stored[index] != refs[index] {
+			return false
+		}
+	}
+	return true
+}
+
+func formatKind(kind models.TaskPreviewFeedbackKind) string {
+	switch kind {
+	case models.TaskPreviewFeedbackText:
+		return "Text"
+	case models.TaskPreviewFeedbackElement:
+		return "Element"
+	case models.TaskPreviewFeedbackScreenshot:
+		return "Screenshot"
+	default:
+		return "Unknown"
+	}
+}
+
+func writeQuotedField(out *strings.Builder, label, value string) {
+	fmt.Fprintf(out, "- %s: %s\n", label, strconv.Quote(value))
+}
+
+func writeQuote(out *strings.Builder, value string) {
+	for _, line := range strings.Split(value, "\n") {
+		out.WriteString("> ")
+		out.WriteString(line)
+		out.WriteByte('\n')
+	}
+}
+
+func writeJSONFence(out *strings.Builder, raw json.RawMessage) {
+	formatted := raw
+	var pretty bytes.Buffer
+	if json.Indent(&pretty, raw, "", "  ") == nil {
+		formatted = pretty.Bytes()
+	}
+	fence := strings.Repeat("`", longestBacktickRun(string(formatted))+1)
+	if len(fence) < 3 {
+		fence = "```"
+	}
+	out.WriteString(fence)
+	out.WriteString("json\n")
+	out.Write(formatted)
+	out.WriteByte('\n')
+	out.WriteString(fence)
+	out.WriteByte('\n')
+}
+
+func longestBacktickRun(value string) int {
+	longest, current := 0, 0
+	for _, char := range value {
+		if char == '`' {
+			current++
+			if current > longest {
+				longest = current
+			}
+		} else {
+			current = 0
+		}
+	}
+	return longest
+}
diff --git a/apps/backend/internal/task/previewfeedback/format_test.go b/apps/backend/internal/task/previewfeedback/format_test.go
new file mode 100644
index 0000000000..d97bb4bd68
--- /dev/null
+++ b/apps/backend/internal/task/previewfeedback/format_test.go
@@ -0,0 +1,90 @@
+package previewfeedback
+
+import (
+	"encoding/json"
+	"strings"
+	"testing"
+
+	"github.com/kandev/kandev/internal/task/models"
+)
+
+func TestAppendMarkdownIncludesRuntimeTextLocationAndEscapesFences(t *testing.T) {
+	item := &models.TaskPreviewFeedback{
+		Kind: models.TaskPreviewFeedbackText, Comment: "Generated at runtime",
+		SourceKind: models.TaskPreviewFeedbackBrowser, SourceLabel: "Local app",
+		PageRoute: "/products?tab=all", PageTitle: "Products",
+		SelectedText: "Choose `this` plan",
+		TextAnchor: json.RawMessage(`{
+			"start":{"selector":"#offer","node_path":[0,1],"offset":2},
+			"end":{"selector":"#offer","node_path":[0,1],"offset":20},
+			"rects":[{"x":20,"y":30,"width":160,"height":20}],
+			"union_rect":{"x":20,"y":30,"width":160,"height":20},
+			"scroll_x":0,"scroll_y":480,"viewport_width":1280,"viewport_height":720,
+			"device_pixel_ratio":2,
+			"containing_element":{"tag":"button","classes":["offer"],"outer_html":"<button>` + "```generated```" + `</button>"}
+		}`),
+	}
+
+	got, err := AppendMarkdown("Please fix this.", []*models.TaskPreviewFeedback{item})
+	if err != nil {
+		t.Fatalf("AppendMarkdown: %v", err)
+	}
+	for _, want := range []string{
+		"Please fix this.", "### Web Preview Feedback", "Text feedback",
+		`Source: "Local app"`, `Page route: "/products?tab=all"`,
+		"Choose `this` plan", "containing_element", "node_path", "union_rect",
+		"scroll_y", "viewport_width", "device_pixel_ratio", "````json",
+	} {
+		if !strings.Contains(got, want) {
+			t.Fatalf("formatted prompt missing %q:\n%s", want, got)
+		}
+	}
+}
+
+func TestAppendMarkdownFormatsElementAndScreenshot(t *testing.T) {
+	items := []*models.TaskPreviewFeedback{
+		{
+			Kind: models.TaskPreviewFeedbackElement, Comment: "Align with price",
+			SourceKind: models.TaskPreviewFeedbackHTMLFile, SourceLabel: "checkout.html",
+			SourcePath: "mockups/checkout.html", PageRoute: "/checkout", PageTitle: "Checkout",
+			ElementSnapshot: json.RawMessage(`{"tag":"button","selector":"button.checkout","outer_html":"<button class=\"checkout\">Pay</button>"}`),
+			CaptureRect:     json.RawMessage(`{"x":12,"y":24,"width":80,"height":32}`),
+		},
+		{
+			Kind: models.TaskPreviewFeedbackScreenshot, Comment: "The form clips here",
+			SourceKind: models.TaskPreviewFeedbackBrowser, SourceLabel: "Local app",
+			PageRoute: "/account", PageTitle: "Account",
+			CaptureRect:            json.RawMessage(`{"x":10,"y":20,"width":820,"height":360}`),
+			ScreenshotAttachmentID: "shot-1",
+			ScreenshotAttachment: &models.TaskMessageAttachment{
+				ID: "shot-1", Name: "account-form.png", MimeType: "image/png", SizeBytes: 1234,
+			},
+		},
+	}
+
+	got, err := AppendMarkdown("", items)
+	if err != nil {
+		t.Fatalf("AppendMarkdown: %v", err)
+	}
+	for _, want := range []string{
+		"Element feedback", `<button class=\"checkout\">Pay</button>`,
+		"Rendered position", "Screenshot feedback", `Image: "account-form.png"`,
+		"820", "360", "The form clips here",
+	} {
+		if !strings.Contains(got, want) {
+			t.Fatalf("formatted prompt missing %q:\n%s", want, got)
+		}
+	}
+}
+
+func TestAppendMarkdownRejectsOversizedPrompt(t *testing.T) {
+	_, err := AppendMarkdown(strings.Repeat("x", MaxPromptBytes), []*models.TaskPreviewFeedback{{
+		Kind: models.TaskPreviewFeedbackElement, Comment: "comment",
+		SourceKind: models.TaskPreviewFeedbackBrowser, SourceLabel: "app",
+		PageRoute: "/", ElementSnapshot: json.RawMessage(`{"outer_html":"<main></main>"}`),
+		CaptureRect: json.RawMessage(`{"x":0,"y":0,"width":1,"height":1}`),
+	}})
+	if err == nil {
+		t.Fatal("AppendMarkdown accepted an oversized prompt")
+	}
+}
diff --git a/apps/backend/internal/task/previewfeedback/validate.go b/apps/backend/internal/task/previewfeedback/validate.go
new file mode 100644
index 0000000000..d4c5fce761
--- /dev/null
+++ b/apps/backend/internal/task/previewfeedback/validate.go
@@ -0,0 +1,174 @@
+// Package previewfeedback validates task-owned rendered-page feedback at every
+// persistence and delivery boundary.
+package previewfeedback
+
+import (
+	"encoding/json"
+	"errors"
+	"fmt"
+	"strings"
+
+	"github.com/kandev/kandev/internal/task/models"
+)
+
+const (
+	MaxItems                        = 100
+	MaxCommentBytes                 = 64 * 1024
+	MaxCaptureFieldBytes            = 256 * 1024
+	MaxCollectionPayloadBytes       = 1024 * 1024
+	MaxScreenshots                  = 10
+	MaxScreenshotBytes        int64 = 10 * 1024 * 1024
+	MaxScreenshotPixels       int64 = 16_000_000
+	MaxPromptBytes                  = 1024 * 1024
+	MaxSourceLabelBytes             = 4 * 1024
+	MaxPageIdentityBytes            = 16 * 1024
+)
+
+var (
+	ErrCommentRequired     = errors.New("preview feedback comment is required")
+	ErrCommentTooLarge     = errors.New("preview feedback comment is too large")
+	ErrCaptureTooLarge     = errors.New("preview feedback capture is too large")
+	ErrCaptureInvalid      = errors.New("preview feedback capture is invalid")
+	ErrCollectionTooLarge  = errors.New("preview feedback collection is too large")
+	ErrTooManyItems        = errors.New("too many preview feedback items")
+	ErrTooManyScreenshots  = errors.New("too many preview feedback screenshots")
+	ErrSourceIdentityLarge = errors.New("preview feedback source identity is too large")
+)
+
+func ValidateComment(comment string) error {
+	if strings.TrimSpace(comment) == "" {
+		return ErrCommentRequired
+	}
+	if len(comment) > MaxCommentBytes {
+		return ErrCommentTooLarge
+	}
+	return nil
+}
+
+// ValidateItem enforces kind-specific capture fields and bounded source data.
+func ValidateItem(item *models.TaskPreviewFeedback) error {
+	if item == nil {
+		return ErrCaptureInvalid
+	}
+	if err := ValidateComment(item.Comment); err != nil {
+		return err
+	}
+	if err := validateSource(item); err != nil {
+		return err
+	}
+	if err := validateOptionalJSON(item.CaptureRect); err != nil {
+		return err
+	}
+	switch item.Kind {
+	case models.TaskPreviewFeedbackText:
+		return validateTextItem(item)
+	case models.TaskPreviewFeedbackElement:
+		return validateElementItem(item)
+	case models.TaskPreviewFeedbackScreenshot:
+		return validateScreenshotItem(item)
+	default:
+		return ErrCaptureInvalid
+	}
+}
+
+func validateSource(item *models.TaskPreviewFeedback) error {
+	if strings.TrimSpace(item.SourceLabel) == "" || strings.TrimSpace(item.PageRoute) == "" {
+		return ErrCaptureInvalid
+	}
+	if len(item.SourceLabel) > MaxSourceLabelBytes || len(item.SourcePath) > MaxPageIdentityBytes ||
+		len(item.PageRoute) > MaxPageIdentityBytes || len(item.PageTitle) > MaxPageIdentityBytes {
+		return ErrSourceIdentityLarge
+	}
+	switch item.SourceKind {
+	case models.TaskPreviewFeedbackBrowser:
+		if item.SourcePath != "" {
+			return ErrCaptureInvalid
+		}
+	case models.TaskPreviewFeedbackHTMLFile:
+		if strings.TrimSpace(item.SourcePath) == "" {
+			return ErrCaptureInvalid
+		}
+	default:
+		return ErrCaptureInvalid
+	}
+	return nil
+}
+
+func validateTextItem(item *models.TaskPreviewFeedback) error {
+	if strings.TrimSpace(item.SelectedText) == "" || len(item.TextAnchor) == 0 ||
+		len(item.ElementSnapshot) != 0 || item.ScreenshotAttachmentID != "" {
+		return ErrCaptureInvalid
+	}
+	if len(item.SelectedText) > MaxCaptureFieldBytes {
+		return ErrCaptureTooLarge
+	}
+	return validateRequiredJSON(item.TextAnchor)
+}
+
+func validateElementItem(item *models.TaskPreviewFeedback) error {
+	if item.SelectedText != "" || len(item.TextAnchor) != 0 || len(item.ElementSnapshot) == 0 ||
+		len(item.CaptureRect) == 0 || item.ScreenshotAttachmentID != "" {
+		return ErrCaptureInvalid
+	}
+	return validateRequiredJSON(item.ElementSnapshot)
+}
+
+func validateScreenshotItem(item *models.TaskPreviewFeedback) error {
+	if item.SelectedText != "" || len(item.TextAnchor) != 0 || len(item.ElementSnapshot) != 0 ||
+		len(item.CaptureRect) == 0 || item.ScreenshotAttachmentID == "" {
+		return ErrCaptureInvalid
+	}
+	return nil
+}
+
+// ValidateCollection applies count and aggregate non-image payload limits.
+func ValidateCollection(items []*models.TaskPreviewFeedback) error {
+	if len(items) > MaxItems {
+		return ErrTooManyItems
+	}
+	total := 0
+	screenshots := 0
+	for _, item := range items {
+		if err := ValidateItem(item); err != nil {
+			return err
+		}
+		if item.Kind == models.TaskPreviewFeedbackScreenshot {
+			screenshots++
+		}
+		total += itemPayloadBytes(item)
+	}
+	if screenshots > MaxScreenshots {
+		return ErrTooManyScreenshots
+	}
+	if total > MaxCollectionPayloadBytes {
+		return ErrCollectionTooLarge
+	}
+	return nil
+}
+
+func validateRequiredJSON(value json.RawMessage) error {
+	if len(value) == 0 {
+		return ErrCaptureInvalid
+	}
+	return validateOptionalJSON(value)
+}
+
+func validateOptionalJSON(value json.RawMessage) error {
+	if len(value) == 0 {
+		return nil
+	}
+	if len(value) > MaxCaptureFieldBytes {
+		return ErrCaptureTooLarge
+	}
+	if !json.Valid(value) {
+		return fmt.Errorf("%w: malformed JSON", ErrCaptureInvalid)
+	}
+	return nil
+}
+
+func itemPayloadBytes(item *models.TaskPreviewFeedback) int {
+	return len(item.Comment) + len(item.SourceSessionID) + len(item.SourceLabel) +
+		len(item.SourcePath) + len(item.PageRoute) + len(item.PageTitle) +
+		len(item.SelectedText) + len(item.TextAnchor) + len(item.ElementSnapshot) +
+		len(item.CaptureRect)
+}
diff --git a/apps/backend/internal/task/repository/interface.go b/apps/backend/internal/task/repository/interface.go
index 5992bd7c30..e97664738a 100644
--- a/apps/backend/internal/task/repository/interface.go
+++ b/apps/backend/internal/task/repository/interface.go
@@ -19,6 +19,7 @@ var ErrNoPrimarySession = repoerrors.ErrNoPrimarySession
 var ErrTaskParentMismatch = repoerrors.ErrTaskParentMismatch
 var ErrTaskPlanNotFound = repoerrors.ErrTaskPlanNotFound
 var ErrTaskPlanCommentsChanged = repoerrors.ErrTaskPlanCommentsChanged
+var ErrTaskPreviewFeedbackChanged = repoerrors.ErrTaskPreviewFeedbackChanged
 var ErrRepositoryNotFound = repoerrors.ErrRepositoryNotFound
 var ErrTaskEnvironmentNotFound = repoerrors.ErrTaskEnvironmentNotFound
 var ErrTaskEnvironmentOwnershipChanged = repoerrors.ErrTaskEnvironmentOwnershipChanged
@@ -387,6 +388,15 @@ type AttachmentRepository interface {
 	MarkExpiredMessageAttachments(ctx context.Context, now time.Time) ([]*models.TaskMessageAttachment, error)
 }
 
+// PreviewFeedbackRepository stores one revisioned pending collection per task.
+type PreviewFeedbackRepository interface {
+	ListTaskPreviewFeedback(ctx context.Context, taskID string) (*models.TaskPreviewFeedbackSnapshot, error)
+	CreateTaskPreviewFeedback(ctx context.Context, item *models.TaskPreviewFeedback, ownerID, workspaceID string) (*models.TaskPreviewFeedbackSnapshot, error)
+	UpdateTaskPreviewFeedback(ctx context.Context, taskID, itemID, comment string, expectedVersion int64) (*models.TaskPreviewFeedbackSnapshot, error)
+	DeleteTaskPreviewFeedback(ctx context.Context, taskID, itemID string, expectedVersion int64) (*models.TaskPreviewFeedbackSnapshot, []*models.TaskMessageAttachment, error)
+	ClearTaskPreviewFeedback(ctx context.Context, taskID string, expectedRevision int64) (*models.TaskPreviewFeedbackSnapshot, []*models.TaskMessageAttachment, error)
+}
+
 // QueueAttachmentAdmissionRepository scopes provisional attachment claims to
 // one caller-owned queue admission so rollback can restore only that attempt.
 type QueueAttachmentAdmissionRepository interface {
diff --git a/apps/backend/internal/task/repository/plancommenttx/consume.go b/apps/backend/internal/task/repository/plancommenttx/consume.go
index a9d335cab4..354de2c6c2 100644
--- a/apps/backend/internal/task/repository/plancommenttx/consume.go
+++ b/apps/backend/internal/task/repository/plancommenttx/consume.go
@@ -106,6 +106,19 @@ func ResolveQueue(
 	return resolve(ctx, tx, db, taskID, sessionID, contentTemplate, refs, requirePrimary, "")
 }
 
+// ValidateTargetSession exposes the shared task/session route guard to other
+// task-owned context admitted by the same message transaction.
+func ValidateTargetSession(
+	ctx context.Context,
+	tx *sqlx.Tx,
+	db *sqlx.DB,
+	taskID, sessionID string,
+	requirePrimary bool,
+	expectedState models.TaskSessionState,
+) error {
+	return validateTargetSession(ctx, tx, db, taskID, sessionID, requirePrimary, expectedState)
+}
+
 func resolve(
 	ctx context.Context,
 	tx *sqlx.Tx,
diff --git a/apps/backend/internal/task/repository/previewfeedbacktx/consume.go b/apps/backend/internal/task/repository/previewfeedbacktx/consume.go
new file mode 100644
index 0000000000..af6f8fd9c5
--- /dev/null
+++ b/apps/backend/internal/task/repository/previewfeedbacktx/consume.go
@@ -0,0 +1,205 @@
+// Package previewfeedbacktx resolves and consumes task-owned preview feedback
+// inside the final message or queue admission transaction.
+package previewfeedbacktx
+
+import (
+	"context"
+	"database/sql"
+	"encoding/json"
+	"errors"
+	"fmt"
+
+	"github.com/jmoiron/sqlx"
+	"github.com/kandev/kandev/internal/task/models"
+	"github.com/kandev/kandev/internal/task/previewfeedback"
+	"github.com/kandev/kandev/internal/task/repository/repoerrors"
+)
+
+// Resolution is the immutable evidence selected under the task admission lock.
+type Resolution struct {
+	TaskID  string
+	Content string
+	Items   []*models.TaskPreviewFeedback
+	Before  *models.TaskPreviewFeedbackSnapshot
+}
+
+// FeedbackChangedError carries the authoritative snapshot for client recovery.
+type FeedbackChangedError struct {
+	Snapshot *models.TaskPreviewFeedbackSnapshot
+}
+
+func (e *FeedbackChangedError) Error() string {
+	return repoerrors.ErrTaskPreviewFeedbackChanged.Error()
+}
+func (e *FeedbackChangedError) Unwrap() error { return repoerrors.ErrTaskPreviewFeedbackChanged }
+
+// Resolve validates exact task-owned references and formats their visible prompt section.
+func Resolve(
+	ctx context.Context,
+	tx *sqlx.Tx,
+	db *sqlx.DB,
+	taskID, content string,
+	refs []models.TaskPreviewFeedbackRef,
+) (*Resolution, error) {
+	snapshot, err := readSnapshot(ctx, tx, db, taskID)
+	if err != nil {
+		return nil, err
+	}
+	items, ok := resolveReferences(snapshot, refs)
+	if !ok {
+		return nil, &FeedbackChangedError{Snapshot: snapshot}
+	}
+	formatted, err := previewfeedback.AppendMarkdown(content, items)
+	if err != nil {
+		return nil, err
+	}
+	return &Resolution{TaskID: taskID, Content: formatted, Items: items, Before: snapshot}, nil
+}
+
+// Consume conditionally deletes exact versions and advances the collection revision.
+func Consume(
+	ctx context.Context,
+	tx *sqlx.Tx,
+	db *sqlx.DB,
+	resolved *Resolution,
+) (*models.TaskPreviewFeedbackSnapshot, error) {
+	if resolved == nil || len(resolved.Items) == 0 {
+		return nil, errors.New("resolved preview feedback is required")
+	}
+	query := `DELETE FROM task_preview_feedback WHERE task_id = ? AND (`
+	args := []interface{}{resolved.TaskID}
+	for index, item := range resolved.Items {
+		if index > 0 {
+			query += ` OR `
+		}
+		query += `(id = ? AND version = ?)`
+		args = append(args, item.ID, item.Version)
+	}
+	query += `)`
+	result, err := tx.ExecContext(ctx, db.Rebind(query), args...)
+	if err != nil {
+		return nil, fmt.Errorf("consume task preview feedback: %w", err)
+	}
+	if changed, _ := result.RowsAffected(); changed != int64(len(resolved.Items)) {
+		return nil, &FeedbackChangedError{Snapshot: resolved.Before}
+	}
+	result, err = tx.ExecContext(ctx, db.Rebind(`
+		UPDATE task_preview_feedback_collections SET revision = revision + 1
+		WHERE task_id = ?
+	`), resolved.TaskID)
+	if err != nil {
+		return nil, fmt.Errorf("advance task preview feedback revision: %w", err)
+	}
+	if changed, _ := result.RowsAffected(); changed != 1 {
+		return nil, repoerrors.ErrTaskNotFound
+	}
+	return readSnapshot(ctx, tx, db, resolved.TaskID)
+}
+
+func resolveReferences(
+	snapshot *models.TaskPreviewFeedbackSnapshot,
+	refs []models.TaskPreviewFeedbackRef,
+) ([]*models.TaskPreviewFeedback, bool) {
+	if snapshot == nil || len(refs) == 0 {
+		return nil, false
+	}
+	wanted := make(map[string]int64, len(refs))
+	for _, ref := range refs {
+		if ref.ID == "" || ref.Version <= 0 {
+			return nil, false
+		}
+		if _, duplicate := wanted[ref.ID]; duplicate {
+			return nil, false
+		}
+		wanted[ref.ID] = ref.Version
+	}
+	items := make([]*models.TaskPreviewFeedback, 0, len(refs))
+	for _, item := range snapshot.Items {
+		if version, selected := wanted[item.ID]; selected {
+			if item.Version != version {
+				return nil, false
+			}
+			items = append(items, item)
+		}
+	}
+	return items, len(items) == len(refs)
+}
+
+func readSnapshot(
+	ctx context.Context,
+	q sqlx.QueryerContext,
+	db *sqlx.DB,
+	taskID string,
+) (*models.TaskPreviewFeedbackSnapshot, error) {
+	snapshot := &models.TaskPreviewFeedbackSnapshot{TaskID: taskID, Items: []*models.TaskPreviewFeedback{}}
+	if err := sqlx.GetContext(ctx, q, &snapshot.Revision, db.Rebind(`
+		SELECT revision FROM task_preview_feedback_collections WHERE task_id = ?
+	`), taskID); err != nil {
+		return nil, fmt.Errorf("read task preview feedback collection: %w", err)
+	}
+	rows, err := q.QueryContext(ctx, db.Rebind(`
+		SELECT f.id, f.task_id, f.kind, f.comment, f.source_kind,
+		       COALESCE(f.source_session_id, ''), f.source_label, COALESCE(f.source_path, ''),
+		       f.page_route, f.page_title, COALESCE(f.selected_text, ''),
+		       COALESCE(f.text_anchor_json, ''), COALESCE(f.element_snapshot_json, ''),
+		       COALESCE(f.capture_rect_json, ''), COALESCE(f.screenshot_attachment_id, ''),
+		       f.version, f.created_at, f.updated_at,
+		       COALESCE(a.id, ''), COALESCE(a.owner_id, ''), COALESCE(a.workspace_id, ''),
+		       COALESCE(a.task_id, ''), COALESCE(a.session_id, ''), COALESCE(a.message_id, ''),
+		       COALESCE(a.queue_id, ''), COALESCE(a.name, ''), COALESCE(a.mime_type, ''),
+		       COALESCE(a.kind, ''), COALESCE(a.delivery_mode, ''), COALESCE(a.size_bytes, 0),
+		       COALESCE(a.storage_key, ''), COALESCE(a.state, ''), a.expires_at, a.created_at, a.updated_at
+		FROM task_preview_feedback f
+		LEFT JOIN task_message_attachments a ON a.id = f.screenshot_attachment_id
+		WHERE f.task_id = ? ORDER BY f.created_at, f.id
+	`), taskID)
+	if err != nil {
+		return nil, fmt.Errorf("list task preview feedback for delivery: %w", err)
+	}
+	defer func() { _ = rows.Close() }()
+	for rows.Next() {
+		item := &models.TaskPreviewFeedback{}
+		attachment := &models.TaskMessageAttachment{}
+		var textAnchor, elementSnapshot, captureRect string
+		var attachmentExpires, attachmentCreated, attachmentUpdated sql.NullTime
+		if err := rows.Scan(
+			&item.ID, &item.TaskID, &item.Kind, &item.Comment, &item.SourceKind,
+			&item.SourceSessionID, &item.SourceLabel, &item.SourcePath,
+			&item.PageRoute, &item.PageTitle, &item.SelectedText,
+			&textAnchor, &elementSnapshot, &captureRect, &item.ScreenshotAttachmentID,
+			&item.Version, &item.CreatedAt, &item.UpdatedAt,
+			&attachment.ID, &attachment.OwnerID, &attachment.WorkspaceID,
+			&attachment.TaskID, &attachment.SessionID, &attachment.MessageID,
+			&attachment.QueueID, &attachment.Name, &attachment.MimeType,
+			&attachment.Kind, &attachment.DeliveryMode, &attachment.SizeBytes,
+			&attachment.StorageKey, &attachment.State, &attachmentExpires,
+			&attachmentCreated, &attachmentUpdated,
+		); err != nil {
+			return nil, fmt.Errorf("scan task preview feedback for delivery: %w", err)
+		}
+		item.TextAnchor = rawJSON(textAnchor)
+		item.ElementSnapshot = rawJSON(elementSnapshot)
+		item.CaptureRect = rawJSON(captureRect)
+		if item.ScreenshotAttachmentID != "" {
+			if attachment.ID == "" {
+				return nil, models.ErrAttachmentNotFound
+			}
+			attachment.ExpiresAt = attachmentExpires.Time
+			attachment.CreatedAt = attachmentCreated.Time
+			attachment.UpdatedAt = attachmentUpdated.Time
+			item.ScreenshotAttachment = attachment
+		}
+		snapshot.Items = append(snapshot.Items, item)
+	}
+	if err := rows.Err(); err != nil {
+		return nil, fmt.Errorf("iterate task preview feedback for delivery: %w", err)
+	}
+	return snapshot, nil
+}
+
+func rawJSON(value string) json.RawMessage {
+	if value == "" {
+		return nil
+	}
+	return json.RawMessage(value)
+}
diff --git a/apps/backend/internal/task/repository/repoerrors/errors.go b/apps/backend/internal/task/repository/repoerrors/errors.go
index 9fe01d2aa6..62a93bf9a5 100644
--- a/apps/backend/internal/task/repository/repoerrors/errors.go
+++ b/apps/backend/internal/task/repository/repoerrors/errors.go
@@ -38,6 +38,10 @@ var ErrTaskPlanNotFound = errors.New("task plan not found")
 // stale plan identity, row version, or caller-generated comment identity.
 var ErrTaskPlanCommentsChanged = errors.New("task plan comments changed")
 
+// ErrTaskPreviewFeedbackChanged reports an optimistic-version conflict in a
+// task's pending rendered-page feedback collection.
+var ErrTaskPreviewFeedbackChanged = errors.New("task preview feedback changed")
+
 // ErrPrimarySessionChanged reports that a guarded delivery no longer targets
 // the task's current primary session.
 var ErrPrimarySessionChanged = errors.New("primary session changed")
diff --git a/apps/backend/internal/task/repository/sqlite/attachment.go b/apps/backend/internal/task/repository/sqlite/attachment.go
index 1fde5be931..696b61dc1c 100644
--- a/apps/backend/internal/task/repository/sqlite/attachment.go
+++ b/apps/backend/internal/task/repository/sqlite/attachment.go
@@ -273,6 +273,10 @@ func addQueuedAttachmentToClaim(
 		(attachment.QueueID != "" && attachment.QueueID != queueID) {
 		return models.ErrAttachmentClaimConflict
 	}
+	if attachment.SizeBytes < 0 || attachment.SizeBytes > models.MaxMessageAttachmentBytes {
+		return models.ErrAttachmentTooLarge
+	}
+	selection.selectedSize += attachment.SizeBytes
 	return nil
 }
 
@@ -407,6 +411,10 @@ func addDirectAttachmentToClaim(
 		(attachment.MessageID != "" && attachment.MessageID != messageID) {
 		return models.ErrAttachmentClaimConflict
 	}
+	if attachment.SizeBytes < 0 || attachment.SizeBytes > models.MaxMessageAttachmentBytes {
+		return models.ErrAttachmentTooLarge
+	}
+	selection.selectedSize += attachment.SizeBytes
 	return nil
 }
 
diff --git a/apps/backend/internal/task/repository/sqlite/base_schema.go b/apps/backend/internal/task/repository/sqlite/base_schema.go
index 08db9d24ea..16bf98778c 100644
--- a/apps/backend/internal/task/repository/sqlite/base_schema.go
+++ b/apps/backend/internal/task/repository/sqlite/base_schema.go
@@ -36,6 +36,7 @@ func (r *Repository) initSchemaContext(ctx context.Context) error {
 		r.initStepEntriesSchema,
 		r.initTaskUsageEventsSchema,
 		r.initAttachmentsSchema,
+		r.initPreviewFeedbackSchema,
 		r.initTaskResourceCleanupSchema,
 		r.initControlServerRecordSchema,
 		r.initGitSchema,
@@ -943,6 +944,64 @@ func (r *Repository) initAttachmentsSchema() error {
 	return nil
 }
 
+func (r *Repository) initPreviewFeedbackSchema() error {
+	_, err := r.db.ExecContext(r.migrationContext(), `
+	CREATE TABLE IF NOT EXISTS task_preview_feedback_collections (
+		task_id TEXT PRIMARY KEY,
+		revision INTEGER NOT NULL DEFAULT 0,
+		created_at TIMESTAMP NOT NULL,
+		updated_at TIMESTAMP NOT NULL,
+		FOREIGN KEY (task_id) REFERENCES tasks(id) ON DELETE CASCADE
+	);
+	CREATE TABLE IF NOT EXISTS task_preview_feedback (
+		id TEXT PRIMARY KEY,
+		task_id TEXT NOT NULL,
+		kind TEXT NOT NULL CHECK (kind IN ('text', 'element', 'screenshot')),
+		comment TEXT NOT NULL,
+		source_kind TEXT NOT NULL CHECK (source_kind IN ('browser', 'html_file')),
+		source_session_id TEXT,
+		source_label TEXT NOT NULL,
+		source_path TEXT,
+		page_route TEXT NOT NULL,
+		page_title TEXT NOT NULL,
+		selected_text TEXT,
+		text_anchor_json TEXT,
+		element_snapshot_json TEXT,
+		capture_rect_json TEXT,
+		screenshot_attachment_id TEXT UNIQUE,
+		version INTEGER NOT NULL DEFAULT 1,
+		created_at TIMESTAMP NOT NULL,
+		updated_at TIMESTAMP NOT NULL,
+		FOREIGN KEY (task_id) REFERENCES tasks(id) ON DELETE CASCADE,
+		FOREIGN KEY (screenshot_attachment_id) REFERENCES task_message_attachments(id),
+		CHECK (
+			(kind = 'text' AND selected_text IS NOT NULL AND text_anchor_json IS NOT NULL
+				AND element_snapshot_json IS NULL AND screenshot_attachment_id IS NULL)
+			OR (kind = 'element' AND selected_text IS NULL AND text_anchor_json IS NULL
+				AND element_snapshot_json IS NOT NULL AND screenshot_attachment_id IS NULL)
+			OR (kind = 'screenshot' AND selected_text IS NULL AND text_anchor_json IS NULL
+				AND element_snapshot_json IS NULL AND capture_rect_json IS NOT NULL
+				AND screenshot_attachment_id IS NOT NULL)
+		)
+	);
+	CREATE INDEX IF NOT EXISTS idx_task_preview_feedback_order
+		ON task_preview_feedback(task_id, created_at, id);
+	CREATE TABLE IF NOT EXISTS task_preview_feedback_admissions (
+		id TEXT PRIMARY KEY,
+		task_id TEXT NOT NULL,
+		request_fingerprint TEXT NOT NULL,
+		created_at TIMESTAMP NOT NULL,
+		FOREIGN KEY (task_id) REFERENCES tasks(id) ON DELETE CASCADE
+	);
+	CREATE INDEX IF NOT EXISTS idx_task_preview_feedback_admissions_task
+		ON task_preview_feedback_admissions(task_id);
+	`)
+	if err != nil {
+		return fmt.Errorf("init preview feedback schema: %w", err)
+	}
+	return nil
+}
+
 func (r *Repository) initSessionSchema() error {
 	if err := r.initSessionWorktreeSchema(); err != nil {
 		return err
diff --git a/apps/backend/internal/task/repository/sqlite/message_preview_feedback.go b/apps/backend/internal/task/repository/sqlite/message_preview_feedback.go
new file mode 100644
index 0000000000..23c8a3f63b
--- /dev/null
+++ b/apps/backend/internal/task/repository/sqlite/message_preview_feedback.go
@@ -0,0 +1,465 @@
+package sqlite
+
+import (
+	"context"
+	"database/sql"
+	"encoding/json"
+	"fmt"
+	"time"
+
+	"github.com/google/uuid"
+	"github.com/jmoiron/sqlx"
+	"github.com/kandev/kandev/internal/db/dialect"
+	"github.com/kandev/kandev/internal/orchestrator/messagequeue"
+	"github.com/kandev/kandev/internal/task/models"
+	"github.com/kandev/kandev/internal/task/repository/admission"
+	"github.com/kandev/kandev/internal/task/repository/plancommenttx"
+	"github.com/kandev/kandev/internal/task/repository/previewfeedbacktx"
+)
+
+// ValidateMessageTaskFeedback repeats exact route, plan-comment, preview, and
+// final prompt validation without accepting a message.
+func (r *Repository) ValidateMessageTaskFeedback(
+	ctx context.Context,
+	taskID, sessionID, content string,
+	planRefs []models.TaskPlanCommentRef,
+	previewRefs []models.TaskPreviewFeedbackRef,
+	requirePrimary bool,
+	expectedState models.TaskSessionState,
+) error {
+	tx, release, err := r.beginPlanCommentTx(ctx, taskID)
+	if err != nil {
+		return err
+	}
+	defer release()
+	defer func() { _ = tx.Rollback() }()
+	if err := r.guardActivePlanCommentTaskTx(ctx, tx, taskID); err != nil {
+		return err
+	}
+	if len(planRefs) > 0 {
+		resolved, err := plancommenttx.ResolveDirect(
+			ctx, tx, r.db, taskID, sessionID, content, planRefs, requirePrimary, expectedState,
+		)
+		if err != nil {
+			return err
+		}
+		content = resolved.Content
+	} else if err := plancommenttx.ValidateTargetSession(
+		ctx, tx, r.db, taskID, sessionID, requirePrimary, expectedState,
+	); err != nil {
+		return err
+	}
+	_, err = previewfeedbacktx.Resolve(ctx, tx, r.db, taskID, content, previewRefs)
+	return err
+}
+
+// CreateMessageWithTaskFeedback atomically persists a user message and
+// consumes its exact plan-comment and preview-feedback snapshots.
+func (r *Repository) CreateMessageWithTaskFeedback(
+	ctx context.Context,
+	message *models.Message,
+	planRefs []models.TaskPlanCommentRef,
+	previewRefs []models.TaskPreviewFeedbackRef,
+	requirePrimary bool,
+	expectedState models.TaskSessionState,
+	claim *messagequeue.QueueAttachmentClaim,
+) (*models.TaskPlanCommentSnapshot, *models.TaskPreviewFeedbackSnapshot, error) {
+	return r.createMessageWithTaskFeedback(
+		ctx, message, nil, planRefs, previewRefs, requirePrimary, expectedState, claim,
+	)
+}
+
+// CreateMessageWithTaskFeedbackWithInitialTaskBrief includes first-prompt
+// selection in the same context-consumption transaction.
+func (r *Repository) CreateMessageWithTaskFeedbackWithInitialTaskBrief(
+	ctx context.Context,
+	message *models.Message,
+	candidate *admission.InitialTaskBriefCandidate,
+	planRefs []models.TaskPlanCommentRef,
+	previewRefs []models.TaskPreviewFeedbackRef,
+	requirePrimary bool,
+	expectedState models.TaskSessionState,
+	claim *messagequeue.QueueAttachmentClaim,
+) (*models.TaskPlanCommentSnapshot, *models.TaskPreviewFeedbackSnapshot, error) {
+	return r.createMessageWithTaskFeedback(
+		ctx, message, candidate, planRefs, previewRefs, requirePrimary, expectedState, claim,
+	)
+}
+
+func (r *Repository) createMessageWithTaskFeedback(
+	ctx context.Context,
+	message *models.Message,
+	candidate *admission.InitialTaskBriefCandidate,
+	planRefs []models.TaskPlanCommentRef,
+	previewRefs []models.TaskPreviewFeedbackRef,
+	requirePrimary bool,
+	expectedState models.TaskSessionState,
+	claim *messagequeue.QueueAttachmentClaim,
+) (*models.TaskPlanCommentSnapshot, *models.TaskPreviewFeedbackSnapshot, error) {
+	if message == nil || len(previewRefs) == 0 {
+		return nil, nil, fmt.Errorf("preview feedback and user message are required")
+	}
+	messageType, requestsInput, err := normalizeTaskFeedbackMessage(message)
+	if err != nil {
+		return nil, nil, err
+	}
+	original := *message
+	originalCandidateSelected := taskFeedbackCandidateSelected(candidate)
+	tx, release, err := r.beginPlanCommentTx(ctx, message.TaskID)
+	if err != nil {
+		return nil, nil, fmt.Errorf("begin task-feedback message creation: %w", err)
+	}
+	defer release()
+	defer func() {
+		_ = tx.Rollback()
+		if err != nil {
+			*message = original
+			if candidate != nil {
+				candidate.Selected = originalCandidateSelected
+			}
+		}
+	}()
+	if err = r.guardActivePlanCommentTaskTx(ctx, tx, message.TaskID); err != nil {
+		return nil, nil, err
+	}
+	if err = lockSessionTurnWrites(ctx, tx, r.db.DriverName(), message.TaskSessionID); err != nil {
+		return nil, nil, err
+	}
+
+	content, err := r.applyTaskFeedbackInitialBrief(ctx, tx, message, candidate)
+	if err != nil {
+		return nil, nil, err
+	}
+	planResolution, previewResolution, err := r.resolveDirectTaskFeedback(
+		ctx, tx, message, content, planRefs, previewRefs, requirePrimary, expectedState,
+	)
+	if err != nil {
+		return nil, nil, err
+	}
+	if err = r.persistDirectTaskFeedbackMessage(
+		ctx, tx, message, previewResolution, claim, messageType, requestsInput,
+	); err != nil {
+		return nil, nil, err
+	}
+	planSnapshot, previewSnapshot, err := consumeDirectTaskFeedback(
+		ctx, tx, r.db, planResolution, previewResolution,
+	)
+	if err != nil {
+		return nil, nil, err
+	}
+	if err = tx.Commit(); err != nil {
+		return nil, nil, fmt.Errorf("commit task-feedback message creation: %w", err)
+	}
+	return planSnapshot, previewSnapshot, nil
+}
+
+// CreateMessageWithTaskFeedbackAndQueue persists the transcript row, durable
+// queue receipt, attachment claims, and exact feedback consumption together.
+func (r *Repository) CreateMessageWithTaskFeedbackAndQueue(
+	ctx context.Context,
+	message *models.Message,
+	queued *messagequeue.QueuedMessage,
+	planRefs []models.TaskPlanCommentRef,
+	previewRefs []models.TaskPreviewFeedbackRef,
+	requirePrimary bool,
+	expectedState models.TaskSessionState,
+	claim *messagequeue.QueueAttachmentClaim,
+	maxPerSession int,
+) (*models.TaskPlanCommentSnapshot, *models.TaskPreviewFeedbackSnapshot, error) {
+	return r.createMessageWithTaskFeedbackAndQueue(
+		ctx, message, queued, nil, planRefs, previewRefs, requirePrimary,
+		expectedState, claim, maxPerSession,
+	)
+}
+
+// CreateMessageWithTaskFeedbackAndQueueWithInitialTaskBrief includes first-prompt
+// selection in the same queued context-consumption transaction.
+func (r *Repository) CreateMessageWithTaskFeedbackAndQueueWithInitialTaskBrief(
+	ctx context.Context,
+	message *models.Message,
+	queued *messagequeue.QueuedMessage,
+	candidate *admission.InitialTaskBriefCandidate,
+	planRefs []models.TaskPlanCommentRef,
+	previewRefs []models.TaskPreviewFeedbackRef,
+	requirePrimary bool,
+	expectedState models.TaskSessionState,
+	claim *messagequeue.QueueAttachmentClaim,
+	maxPerSession int,
+) (*models.TaskPlanCommentSnapshot, *models.TaskPreviewFeedbackSnapshot, error) {
+	return r.createMessageWithTaskFeedbackAndQueue(
+		ctx, message, queued, candidate, planRefs, previewRefs, requirePrimary,
+		expectedState, claim, maxPerSession,
+	)
+}
+
+func (r *Repository) createMessageWithTaskFeedbackAndQueue(
+	ctx context.Context,
+	message *models.Message,
+	queued *messagequeue.QueuedMessage,
+	candidate *admission.InitialTaskBriefCandidate,
+	planRefs []models.TaskPlanCommentRef,
+	previewRefs []models.TaskPreviewFeedbackRef,
+	requirePrimary bool,
+	expectedState models.TaskSessionState,
+	claim *messagequeue.QueueAttachmentClaim,
+	maxPerSession int,
+) (*models.TaskPlanCommentSnapshot, *models.TaskPreviewFeedbackSnapshot, error) {
+	if err := validateQueuedTaskFeedbackMessage(message, queued, previewRefs); err != nil {
+		return nil, nil, err
+	}
+	messageType, requestsInput, err := normalizeTaskFeedbackMessage(message)
+	if err != nil || queued.QueuedBy != messagequeue.QueuedByUser {
+		return nil, nil, fmt.Errorf("queued task feedback requires a user message")
+	}
+	originalMessage, originalQueued := *message, *queued
+	originalCandidateSelected := taskFeedbackCandidateSelected(candidate)
+	tx, release, err := r.beginPlanCommentTx(ctx, message.TaskID)
+	if err != nil {
+		return nil, nil, fmt.Errorf("begin queued task-feedback message creation: %w", err)
+	}
+	defer release()
+	defer func() {
+		_ = tx.Rollback()
+		if err != nil {
+			*message, *queued = originalMessage, originalQueued
+			if candidate != nil {
+				candidate.Selected = originalCandidateSelected
+			}
+		}
+	}()
+	if err = r.guardActivePlanCommentTaskTx(ctx, tx, message.TaskID); err != nil {
+		return nil, nil, err
+	}
+	if err = lockSessionTurnWrites(ctx, tx, r.db.DriverName(), message.TaskSessionID); err != nil {
+		return nil, nil, err
+	}
+	content, err := r.applyTaskFeedbackInitialBrief(ctx, tx, message, candidate)
+	if err != nil {
+		return nil, nil, err
+	}
+	planResolution, previewResolution, err := r.resolveDirectTaskFeedback(
+		ctx, tx, message, content, planRefs, previewRefs, requirePrimary, expectedState,
+	)
+	if err != nil {
+		return nil, nil, err
+	}
+	if err = r.persistQueuedTaskFeedbackMessage(
+		ctx, tx, message, queued, previewResolution, claim,
+		messageType, requestsInput, maxPerSession,
+	); err != nil {
+		return nil, nil, err
+	}
+	planSnapshot, previewSnapshot, err := consumeDirectTaskFeedback(
+		ctx, tx, r.db, planResolution, previewResolution,
+	)
+	if err != nil {
+		return nil, nil, err
+	}
+	if err = tx.Commit(); err != nil {
+		return nil, nil, fmt.Errorf("commit queued task-feedback message creation: %w", err)
+	}
+	return planSnapshot, previewSnapshot, nil
+}
+
+func (r *Repository) persistDirectTaskFeedbackMessage(
+	ctx context.Context,
+	tx *sqlx.Tx,
+	message *models.Message,
+	previewResolution *previewfeedbacktx.Resolution,
+	claim *messagequeue.QueueAttachmentClaim,
+	messageType string,
+	requestsInput int,
+) error {
+	message.Content = previewResolution.Content
+	if err := r.claimDirectMessageAttachmentsTx(
+		ctx, tx, claim, message.TaskID, message.TaskSessionID, message.ID,
+	); err != nil {
+		return err
+	}
+	if err := r.transferPreviewScreenshotsToMessage(
+		ctx, tx, previewResolution, message.TaskSessionID, message.ID,
+	); err != nil {
+		return err
+	}
+	metadataJSON, err := marshalTaskFeedbackMetadata(message.Metadata)
+	if err != nil {
+		return fmt.Errorf("serialize task-feedback message metadata: %w", err)
+	}
+	normalizedTime := dialect.NormalizedMicrosecond(r.db.DriverName(), "created_at")
+	if err := r.assignUserMessageBoundary(
+		ctx, tx, message, r.db.DriverName(), normalizedTime,
+	); err != nil {
+		return err
+	}
+	return r.insertMessageRow(ctx, tx, message, requestsInput, messageType, string(metadataJSON))
+}
+
+func (r *Repository) persistQueuedTaskFeedbackMessage(
+	ctx context.Context,
+	tx *sqlx.Tx,
+	message *models.Message,
+	queued *messagequeue.QueuedMessage,
+	previewResolution *previewfeedbacktx.Resolution,
+	claim *messagequeue.QueueAttachmentClaim,
+	messageType string,
+	requestsInput, maxPerSession int,
+) error {
+	if err := r.persistDirectTaskFeedbackMessage(
+		ctx, tx, message, previewResolution, claim, messageType, requestsInput,
+	); err != nil {
+		return err
+	}
+	queued.Content = previewResolution.Content
+	return messagequeue.InsertTaskOwnedInTransaction(ctx, tx, r.db, queued, maxPerSession)
+}
+
+func normalizeTaskFeedbackMessage(message *models.Message) (string, int, error) {
+	if message.ID == "" {
+		message.ID = uuid.New().String()
+	}
+	if message.AuthorType == "" {
+		message.AuthorType = models.MessageAuthorUser
+	}
+	if message.AuthorType != models.MessageAuthorUser {
+		return "", 0, fmt.Errorf("task feedback requires a user message")
+	}
+	messageType := string(message.Type)
+	if messageType == "" {
+		messageType = string(models.MessageTypeMessage)
+	}
+	requestsInput := 0
+	if message.RequestsInput {
+		requestsInput = 1
+	}
+	return messageType, requestsInput, nil
+}
+
+func validateQueuedTaskFeedbackMessage(
+	message *models.Message,
+	queued *messagequeue.QueuedMessage,
+	previewRefs []models.TaskPreviewFeedbackRef,
+) error {
+	if message == nil || queued == nil || queued.ID == "" || len(previewRefs) == 0 {
+		return fmt.Errorf("preview feedback, user message, and queued message are required")
+	}
+	if message.TaskID != queued.TaskID || message.TaskSessionID != queued.SessionID {
+		return fmt.Errorf("queued task-feedback target does not match user message")
+	}
+	return nil
+}
+
+func taskFeedbackCandidateSelected(candidate *admission.InitialTaskBriefCandidate) bool {
+	return candidate != nil && candidate.Selected
+}
+
+func (r *Repository) applyTaskFeedbackInitialBrief(
+	ctx context.Context,
+	tx *sqlx.Tx,
+	message *models.Message,
+	candidate *admission.InitialTaskBriefCandidate,
+) (string, error) {
+	content := message.Content
+	if candidate == nil {
+		return content, nil
+	}
+	if err := r.validateInitialTaskBriefCandidate(ctx, tx, message.TaskID, candidate); err != nil {
+		return "", err
+	}
+	if err := r.selectInitialTaskBriefCandidate(
+		ctx, tx, message.TaskSessionID, message, candidate,
+	); err != nil {
+		return "", err
+	}
+	if candidate.Selected {
+		return message.Content, nil
+	}
+	return content, nil
+}
+
+func (r *Repository) resolveDirectTaskFeedback(
+	ctx context.Context,
+	tx *sqlx.Tx,
+	message *models.Message,
+	content string,
+	planRefs []models.TaskPlanCommentRef,
+	previewRefs []models.TaskPreviewFeedbackRef,
+	requirePrimary bool,
+	expectedState models.TaskSessionState,
+) (*plancommenttx.Resolution, *previewfeedbacktx.Resolution, error) {
+	var planResolution *plancommenttx.Resolution
+	var err error
+	if len(planRefs) > 0 {
+		planResolution, err = plancommenttx.ResolveDirect(
+			ctx, tx, r.db, message.TaskID, message.TaskSessionID, content,
+			planRefs, requirePrimary, expectedState,
+		)
+		if err != nil {
+			return nil, nil, err
+		}
+		content = planResolution.Content
+	} else if err := plancommenttx.ValidateTargetSession(
+		ctx, tx, r.db, message.TaskID, message.TaskSessionID, requirePrimary, expectedState,
+	); err != nil {
+		return nil, nil, err
+	}
+	previewResolution, err := previewfeedbacktx.Resolve(
+		ctx, tx, r.db, message.TaskID, content, previewRefs,
+	)
+	return planResolution, previewResolution, err
+}
+
+func marshalTaskFeedbackMetadata(metadata map[string]interface{}) ([]byte, error) {
+	value, err := json.Marshal(metadata)
+	if err == nil && string(value) == jsonNull {
+		return []byte("{}"), nil
+	}
+	return value, err
+}
+
+func consumeDirectTaskFeedback(
+	ctx context.Context,
+	tx *sqlx.Tx,
+	db *sqlx.DB,
+	planResolution *plancommenttx.Resolution,
+	previewResolution *previewfeedbacktx.Resolution,
+) (*models.TaskPlanCommentSnapshot, *models.TaskPreviewFeedbackSnapshot, error) {
+	var planSnapshot *models.TaskPlanCommentSnapshot
+	var err error
+	if planResolution != nil {
+		planSnapshot, err = plancommenttx.Consume(ctx, tx, db, planResolution)
+		if err != nil {
+			return nil, nil, err
+		}
+	}
+	previewSnapshot, err := previewfeedbacktx.Consume(ctx, tx, db, previewResolution)
+	return planSnapshot, previewSnapshot, err
+}
+
+func (r *Repository) transferPreviewScreenshotsToMessage(
+	ctx context.Context,
+	tx interface {
+		ExecContext(context.Context, string, ...interface{}) (sql.Result, error)
+	},
+	resolved *previewfeedbacktx.Resolution,
+	sessionID, messageID string,
+) error {
+	for _, item := range resolved.Items {
+		if item.Kind != models.TaskPreviewFeedbackScreenshot {
+			continue
+		}
+		result, err := tx.ExecContext(ctx, r.db.Rebind(`
+			UPDATE task_message_attachments
+			SET session_id = ?, message_id = ?, updated_at = ?
+			WHERE id = ? AND task_id = ? AND state = ?
+			  AND session_id = '' AND message_id = '' AND queue_id = ''
+		`), sessionID, messageID, time.Now().UTC(), item.ScreenshotAttachmentID,
+			resolved.TaskID, models.AttachmentStateClaimed)
+		if err != nil {
+			return fmt.Errorf("transfer preview screenshot to message: %w", err)
+		}
+		if changed, _ := result.RowsAffected(); changed != 1 {
+			return models.ErrAttachmentClaimConflict
+		}
+	}
+	return nil
+}
diff --git a/apps/backend/internal/task/repository/sqlite/message_preview_feedback_test.go b/apps/backend/internal/task/repository/sqlite/message_preview_feedback_test.go
new file mode 100644
index 0000000000..ad3a30175a
--- /dev/null
+++ b/apps/backend/internal/task/repository/sqlite/message_preview_feedback_test.go
@@ -0,0 +1,248 @@
+//go:build cgo
+
+package sqlite
+
+import (
+	"context"
+	"database/sql"
+	"encoding/json"
+	"errors"
+	"strings"
+	"testing"
+	"time"
+
+	"github.com/kandev/kandev/internal/orchestrator/messagequeue"
+	"github.com/kandev/kandev/internal/task/models"
+	"github.com/kandev/kandev/internal/task/previewfeedback"
+	"github.com/kandev/kandev/internal/task/repository/repoerrors"
+)
+
+type taskFeedbackMessageRepository interface {
+	CreateMessageWithTaskFeedback(
+		context.Context,
+		*models.Message,
+		[]models.TaskPlanCommentRef,
+		[]models.TaskPreviewFeedbackRef,
+		bool,
+		models.TaskSessionState,
+		*messagequeue.QueueAttachmentClaim,
+	) (*models.TaskPlanCommentSnapshot, *models.TaskPreviewFeedbackSnapshot, error)
+}
+
+func TestCreateMessageWithTaskFeedbackConsumesMixedSnapshotsAtomically(t *testing.T) {
+	repo := newRepoForSessionTests(t)
+	ctx := context.Background()
+	seedMessagePlanComment(t, ctx, repo, "mixed-preview")
+	preview := seedMessagePreviewFeedback(t, ctx, repo, "mixed-preview")
+	writes, ok := any(repo).(taskFeedbackMessageRepository)
+	if !ok {
+		t.Fatal("Repository does not implement atomic task-feedback message creation")
+	}
+	message := planCommentMessage("mixed-preview", "message-mixed-preview")
+
+	planSnapshot, previewSnapshot, err := writes.CreateMessageWithTaskFeedback(
+		ctx,
+		message,
+		[]models.TaskPlanCommentRef{{ID: "comment-mixed-preview", Version: 1}},
+		[]models.TaskPreviewFeedbackRef{{ID: preview.ID, Version: 1}},
+		true,
+		"",
+		nil,
+	)
+	if err != nil {
+		t.Fatalf("CreateMessageWithTaskFeedback: %v", err)
+	}
+	if planSnapshot == nil || len(planSnapshot.Comments) != 0 ||
+		previewSnapshot == nil || previewSnapshot.Revision != 2 || len(previewSnapshot.Items) != 0 {
+		t.Fatalf("snapshots plan=%#v preview=%#v", planSnapshot, previewSnapshot)
+	}
+	for _, want := range []string{
+		"### Plan Comments", "stored mixed-preview", "typed content",
+		"### Web Preview Feedback", "Generated total", "Runtime value",
+		"containing_element", "node_path", "scroll_y", "viewport_width",
+	} {
+		if !strings.Contains(message.Content, want) {
+			t.Fatalf("message content missing %q:\n%s", want, message.Content)
+		}
+	}
+	pending, err := repo.ListTaskPreviewFeedback(ctx, message.TaskID)
+	if err != nil || len(pending.Items) != 0 || pending.Revision != 2 {
+		t.Fatalf("pending preview snapshot=%#v err=%v", pending, err)
+	}
+}
+
+func TestCreateMessageWithTaskFeedbackStalePreviewRollsBackPlanAndMessage(t *testing.T) {
+	repo := newRepoForSessionTests(t)
+	ctx := context.Background()
+	seedMessagePlanComment(t, ctx, repo, "stale-preview")
+	preview := seedMessagePreviewFeedback(t, ctx, repo, "stale-preview")
+	message := planCommentMessage("stale-preview", "message-stale-preview")
+
+	_, previewSnapshot, err := repo.CreateMessageWithTaskFeedback(
+		ctx,
+		message,
+		[]models.TaskPlanCommentRef{{ID: "comment-stale-preview", Version: 1}},
+		[]models.TaskPreviewFeedbackRef{{ID: preview.ID, Version: 9}},
+		false,
+		"",
+		nil,
+	)
+	if !errors.Is(err, repoerrors.ErrTaskPreviewFeedbackChanged) ||
+		previewSnapshot != nil {
+		t.Fatalf("stale preview snapshot=%#v err=%v", previewSnapshot, err)
+	}
+	if _, err := repo.GetMessageWithPromptIndex(ctx, message.ID); !errors.Is(err, sql.ErrNoRows) {
+		t.Fatalf("message persisted after stale preview: %v", err)
+	}
+	planPending, err := repo.ListTaskPlanComments(ctx, message.TaskID)
+	if err != nil || len(planPending.Comments) != 1 {
+		t.Fatalf("plan comments changed on rollback: %#v err=%v", planPending, err)
+	}
+	previewPending, err := repo.ListTaskPreviewFeedback(ctx, message.TaskID)
+	if err != nil || len(previewPending.Items) != 1 || previewPending.Revision != 1 {
+		t.Fatalf("preview feedback changed on rollback: %#v err=%v", previewPending, err)
+	}
+}
+
+func TestCreateMessageWithTaskFeedbackTransfersScreenshotToAcceptedMessage(t *testing.T) {
+	repo := newRepoForSessionTests(t)
+	ctx := context.Background()
+	seedMessagePlanComment(t, ctx, repo, "screenshot-preview")
+	seedWorkspace(t, repo, "workspace-screenshot-preview")
+	if _, err := repo.db.ExecContext(ctx, repo.db.Rebind(
+		`UPDATE tasks SET workspace_id = ? WHERE id = ?`,
+	), "workspace-screenshot-preview", "task-message-comments-screenshot-preview"); err != nil {
+		t.Fatal(err)
+	}
+	attachment := &models.TaskMessageAttachment{
+		ID: "attachment-screenshot-preview", OwnerID: "owner-screenshot-preview",
+		WorkspaceID: "workspace-screenshot-preview", Name: "checkout.png", MimeType: "image/png",
+		Kind: "image", DeliveryMode: "prompt", SizeBytes: 512, StorageKey: "attachment-screenshot-preview",
+		State: models.AttachmentStateStaged, ExpiresAt: time.Now().UTC().Add(time.Hour),
+	}
+	if err := repo.CreateMessageAttachment(ctx, attachment); err != nil {
+		t.Fatal(err)
+	}
+	item := &models.TaskPreviewFeedback{
+		ID: "preview-screenshot-transfer", TaskID: "task-message-comments-screenshot-preview",
+		Kind: models.TaskPreviewFeedbackScreenshot, Comment: "Form is clipped",
+		SourceKind: models.TaskPreviewFeedbackBrowser, SourceLabel: "Local app",
+		PageRoute: "/checkout", CaptureRect: json.RawMessage(`{"x":10,"y":20,"width":320,"height":180}`),
+		ScreenshotAttachmentID: attachment.ID,
+	}
+	if _, err := repo.CreateTaskPreviewFeedback(
+		ctx, item, attachment.OwnerID, attachment.WorkspaceID,
+	); err != nil {
+		t.Fatal(err)
+	}
+	message := planCommentMessage("screenshot-preview", "message-screenshot-preview")
+	message.Content = "typed content"
+	_, _, err := repo.CreateMessageWithTaskFeedback(
+		ctx, message, nil, []models.TaskPreviewFeedbackRef{{ID: item.ID, Version: 1}},
+		true, "", &messagequeue.QueueAttachmentClaim{
+			OwnerID: attachment.OwnerID, WorkspaceID: attachment.WorkspaceID, IDs: []string{attachment.ID},
+		},
+	)
+	if err != nil {
+		t.Fatalf("CreateMessageWithTaskFeedback: %v", err)
+	}
+	transferred, err := repo.GetMessageAttachment(ctx, attachment.ID)
+	if err != nil {
+		t.Fatal(err)
+	}
+	if transferred.State != models.AttachmentStateClaimed ||
+		transferred.TaskID != item.TaskID || transferred.SessionID != message.TaskSessionID ||
+		transferred.MessageID != message.ID {
+		t.Fatalf("transferred attachment = %#v", transferred)
+	}
+}
+
+func TestCreateMessageWithTaskFeedbackRejectsCombinedScreenshotAndOrdinaryAttachmentLimit(t *testing.T) {
+	repo := newRepoForSessionTests(t)
+	ctx := context.Background()
+	seedMessagePlanComment(t, ctx, repo, "screenshot-limit")
+	seedWorkspace(t, repo, "workspace-screenshot-limit")
+	taskID := "task-message-comments-screenshot-limit"
+	if _, err := repo.db.ExecContext(ctx, repo.db.Rebind(
+		`UPDATE tasks SET workspace_id = ? WHERE id = ?`,
+	), "workspace-screenshot-limit", taskID); err != nil {
+		t.Fatal(err)
+	}
+	now := time.Now().UTC()
+	screenshot := &models.TaskMessageAttachment{
+		ID: "attachment-screenshot-limit", OwnerID: "owner-screenshot-limit",
+		WorkspaceID: "workspace-screenshot-limit", Name: "screen.png", MimeType: "image/png",
+		Kind: "image", DeliveryMode: "prompt", SizeBytes: previewfeedback.MaxScreenshotBytes,
+		StorageKey: "attachment-screenshot-limit", State: models.AttachmentStateStaged,
+		ExpiresAt: now.Add(time.Hour),
+	}
+	ordinary := &models.TaskMessageAttachment{
+		ID: "attachment-ordinary-limit", OwnerID: screenshot.OwnerID,
+		WorkspaceID: screenshot.WorkspaceID, Name: "video.bin", MimeType: "application/octet-stream",
+		Kind: "resource", DeliveryMode: "path",
+		SizeBytes:  models.MaxMessageAttachmentBytes - previewfeedback.MaxScreenshotBytes + 1,
+		StorageKey: "attachment-ordinary-limit", State: models.AttachmentStateStaged,
+		ExpiresAt: now.Add(time.Hour),
+	}
+	for _, attachment := range []*models.TaskMessageAttachment{screenshot, ordinary} {
+		if err := repo.CreateMessageAttachment(ctx, attachment); err != nil {
+			t.Fatal(err)
+		}
+	}
+	item := &models.TaskPreviewFeedback{
+		ID: "preview-screenshot-limit", TaskID: taskID,
+		Kind: models.TaskPreviewFeedbackScreenshot, Comment: "Capture is clipped",
+		SourceKind: models.TaskPreviewFeedbackBrowser, SourceLabel: "Local app", PageRoute: "/",
+		CaptureRect:            json.RawMessage(`{"x":0,"y":0,"width":100,"height":100}`),
+		ScreenshotAttachmentID: screenshot.ID,
+	}
+	if _, err := repo.CreateTaskPreviewFeedback(
+		ctx, item, screenshot.OwnerID, screenshot.WorkspaceID,
+	); err != nil {
+		t.Fatal(err)
+	}
+	message := planCommentMessage("screenshot-limit", "message-screenshot-limit")
+	_, _, err := repo.CreateMessageWithTaskFeedback(
+		ctx, message, nil, []models.TaskPreviewFeedbackRef{{ID: item.ID, Version: 1}},
+		true, "", &messagequeue.QueueAttachmentClaim{
+			OwnerID: screenshot.OwnerID, WorkspaceID: screenshot.WorkspaceID,
+			IDs: []string{screenshot.ID, ordinary.ID},
+		},
+	)
+	if !errors.Is(err, models.ErrAttachmentTotalTooLarge) {
+		t.Fatalf("CreateMessageWithTaskFeedback error = %v", err)
+	}
+	if _, err := repo.GetMessageWithPromptIndex(ctx, message.ID); !errors.Is(err, sql.ErrNoRows) {
+		t.Fatalf("message persisted after rejected combined limit: %v", err)
+	}
+	pending, err := repo.ListTaskPreviewFeedback(ctx, taskID)
+	if err != nil || len(pending.Items) != 1 {
+		t.Fatalf("preview feedback changed after rejected combined limit: %#v err=%v", pending, err)
+	}
+}
+
+func seedMessagePreviewFeedback(
+	t *testing.T,
+	ctx context.Context,
+	repo *Repository,
+	suffix string,
+) *models.TaskPreviewFeedback {
+	t.Helper()
+	item := &models.TaskPreviewFeedback{
+		ID: "preview-" + suffix, TaskID: "task-message-comments-" + suffix,
+		Kind: models.TaskPreviewFeedbackText, Comment: "Generated total",
+		SourceKind: models.TaskPreviewFeedbackBrowser, SourceLabel: "Local app",
+		PageRoute: "/totals", PageTitle: "Totals", SelectedText: "Runtime value",
+		TextAnchor: json.RawMessage(`{
+			"start":{"selector":"#total","node_path":[0],"offset":0},
+			"end":{"selector":"#total","node_path":[0],"offset":13},
+			"rects":[{"x":10,"y":20,"width":90,"height":20}],
+			"scroll_y":300,"viewport_width":1024,"viewport_height":768,
+			"containing_element":{"tag":"span","outer_html":"<span id=\"total\">Runtime value</span>"}
+		}`),
+	}
+	if _, err := repo.CreateTaskPreviewFeedback(ctx, item, "", ""); err != nil {
+		t.Fatal(err)
+	}
+	return item
+}
diff --git a/apps/backend/internal/task/repository/sqlite/preview_feedback.go b/apps/backend/internal/task/repository/sqlite/preview_feedback.go
new file mode 100644
index 0000000000..a0dc321eb1
--- /dev/null
+++ b/apps/backend/internal/task/repository/sqlite/preview_feedback.go
@@ -0,0 +1,530 @@
+package sqlite
+
+import (
+	"context"
+	"database/sql"
+	"encoding/json"
+	"errors"
+	"fmt"
+	"time"
+
+	"github.com/jmoiron/sqlx"
+	"github.com/kandev/kandev/internal/task/models"
+	"github.com/kandev/kandev/internal/task/plancomments"
+	"github.com/kandev/kandev/internal/task/previewfeedback"
+	"github.com/kandev/kandev/internal/task/repository/repoerrors"
+)
+
+const previewFeedbackSelectCols = `
+	id, task_id, kind, comment, source_kind,
+	COALESCE(source_session_id, ''), source_label, COALESCE(source_path, ''),
+	page_route, page_title, COALESCE(selected_text, ''),
+	COALESCE(text_anchor_json, ''), COALESCE(element_snapshot_json, ''),
+	COALESCE(capture_rect_json, ''), COALESCE(screenshot_attachment_id, ''),
+	version, created_at, updated_at`
+
+// ListTaskPreviewFeedback returns one authoritative task-owned snapshot.
+func (r *Repository) ListTaskPreviewFeedback(
+	ctx context.Context,
+	taskID string,
+) (*models.TaskPreviewFeedbackSnapshot, error) {
+	tx, release, err := r.beginPlanCommentTx(ctx, taskID)
+	if err != nil {
+		return nil, err
+	}
+	defer release()
+	defer func() { _ = tx.Rollback() }()
+	if err := r.ensurePreviewFeedbackCollection(ctx, tx, taskID); err != nil {
+		return nil, err
+	}
+	return r.commitPreviewFeedbackRead(ctx, tx, taskID)
+}
+
+// CreateTaskPreviewFeedback inserts a caller-identified capture and claims its optional screenshot.
+func (r *Repository) CreateTaskPreviewFeedback(
+	ctx context.Context,
+	item *models.TaskPreviewFeedback,
+	ownerID, workspaceID string,
+) (*models.TaskPreviewFeedbackSnapshot, error) {
+	if err := previewfeedback.ValidateItem(item); err != nil {
+		return nil, err
+	}
+	fingerprint, err := previewFeedbackFingerprint(item)
+	if err != nil {
+		return nil, err
+	}
+	tx, release, err := r.beginPlanCommentTx(ctx, item.TaskID)
+	if err != nil {
+		return nil, err
+	}
+	defer release()
+	defer func() { _ = tx.Rollback() }()
+	if err := r.ensurePreviewFeedbackCollection(ctx, tx, item.TaskID); err != nil {
+		return nil, err
+	}
+	storedFingerprint, err := r.previewFeedbackAdmission(ctx, tx, item.ID)
+	if err != nil {
+		return nil, err
+	}
+	if storedFingerprint != "" {
+		if storedFingerprint == fingerprint {
+			return r.commitPreviewFeedbackRead(ctx, tx, item.TaskID)
+		}
+		return r.commitPreviewFeedbackConflict(ctx, tx, item.TaskID)
+	}
+
+	now := time.Now().UTC()
+	if err := r.claimPreviewScreenshot(ctx, tx, item, ownerID, workspaceID, now); err != nil {
+		return nil, err
+	}
+	item.Version = 1
+	item.CreatedAt = now
+	item.UpdatedAt = now
+	if _, err := tx.ExecContext(ctx, r.db.Rebind(`
+		INSERT INTO task_preview_feedback (
+			id, task_id, kind, comment, source_kind, source_session_id, source_label,
+			source_path, page_route, page_title, selected_text, text_anchor_json,
+			element_snapshot_json, capture_rect_json, screenshot_attachment_id,
+			version, created_at, updated_at
+		) VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)
+	`), item.ID, item.TaskID, item.Kind, item.Comment, item.SourceKind,
+		nullableString(item.SourceSessionID), item.SourceLabel, nullableString(item.SourcePath),
+		item.PageRoute, item.PageTitle, nullableString(item.SelectedText),
+		previewNullableJSON(item.TextAnchor), previewNullableJSON(item.ElementSnapshot),
+		previewNullableJSON(item.CaptureRect), nullableString(item.ScreenshotAttachmentID),
+		item.Version, item.CreatedAt, item.UpdatedAt); err != nil {
+		return nil, fmt.Errorf("insert task preview feedback: %w", err)
+	}
+	if _, err := tx.ExecContext(ctx, r.db.Rebind(`
+		INSERT INTO task_preview_feedback_admissions
+			(id, task_id, request_fingerprint, created_at) VALUES (?, ?, ?, ?)
+	`), item.ID, item.TaskID, fingerprint, now); err != nil {
+		return nil, fmt.Errorf("insert task preview feedback admission: %w", err)
+	}
+	if err := r.validatePreviewFeedbackCollection(ctx, tx, item.TaskID); err != nil {
+		return nil, err
+	}
+	return r.incrementAndCommitPreviewFeedback(ctx, tx, item.TaskID)
+}
+
+// UpdateTaskPreviewFeedback edits only the user comment; captured page evidence stays immutable.
+func (r *Repository) UpdateTaskPreviewFeedback(
+	ctx context.Context,
+	taskID, itemID, comment string,
+	expectedVersion int64,
+) (*models.TaskPreviewFeedbackSnapshot, error) {
+	if err := previewfeedback.ValidateComment(comment); err != nil {
+		return nil, err
+	}
+	tx, release, err := r.beginPlanCommentTx(ctx, taskID)
+	if err != nil {
+		return nil, err
+	}
+	defer release()
+	defer func() { _ = tx.Rollback() }()
+	if err := r.ensurePreviewFeedbackCollection(ctx, tx, taskID); err != nil {
+		return nil, err
+	}
+	result, err := tx.ExecContext(ctx, r.db.Rebind(`
+		UPDATE task_preview_feedback
+		SET comment = ?, version = version + 1, updated_at = ?
+		WHERE id = ? AND task_id = ? AND version = ?
+	`), comment, time.Now().UTC(), itemID, taskID, expectedVersion)
+	if err != nil {
+		return nil, fmt.Errorf("update task preview feedback: %w", err)
+	}
+	if changed, _ := result.RowsAffected(); changed != 1 {
+		return r.commitPreviewFeedbackConflict(ctx, tx, taskID)
+	}
+	if err := r.validatePreviewFeedbackCollection(ctx, tx, taskID); err != nil {
+		return nil, err
+	}
+	return r.incrementAndCommitPreviewFeedback(ctx, tx, taskID)
+}
+
+// DeleteTaskPreviewFeedback removes one exact item and expires its task-owned screenshot claim.
+func (r *Repository) DeleteTaskPreviewFeedback(
+	ctx context.Context,
+	taskID, itemID string,
+	expectedVersion int64,
+) (*models.TaskPreviewFeedbackSnapshot, []*models.TaskMessageAttachment, error) {
+	tx, release, err := r.beginPlanCommentTx(ctx, taskID)
+	if err != nil {
+		return nil, nil, err
+	}
+	defer release()
+	defer func() { _ = tx.Rollback() }()
+	if err := r.ensurePreviewFeedbackCollection(ctx, tx, taskID); err != nil {
+		return nil, nil, err
+	}
+	attachment, err := r.previewScreenshotForItem(ctx, tx, taskID, itemID, expectedVersion)
+	if err != nil {
+		return nil, nil, err
+	}
+	result, err := tx.ExecContext(ctx, r.db.Rebind(`
+		DELETE FROM task_preview_feedback WHERE id = ? AND task_id = ? AND version = ?
+	`), itemID, taskID, expectedVersion)
+	if err != nil {
+		return nil, nil, fmt.Errorf("delete task preview feedback: %w", err)
+	}
+	if changed, _ := result.RowsAffected(); changed != 1 {
+		snapshot, conflictErr := r.commitPreviewFeedbackConflict(ctx, tx, taskID)
+		return snapshot, nil, conflictErr
+	}
+	released, err := r.expirePreviewScreenshots(ctx, tx, attachment)
+	if err != nil {
+		return nil, nil, err
+	}
+	snapshot, err := r.incrementAndCommitPreviewFeedback(ctx, tx, taskID)
+	return snapshot, released, err
+}
+
+// ClearTaskPreviewFeedback removes the exact rendered collection revision.
+func (r *Repository) ClearTaskPreviewFeedback(
+	ctx context.Context,
+	taskID string,
+	expectedRevision int64,
+) (*models.TaskPreviewFeedbackSnapshot, []*models.TaskMessageAttachment, error) {
+	tx, release, err := r.beginPlanCommentTx(ctx, taskID)
+	if err != nil {
+		return nil, nil, err
+	}
+	defer release()
+	defer func() { _ = tx.Rollback() }()
+	if err := r.ensurePreviewFeedbackCollection(ctx, tx, taskID); err != nil {
+		return nil, nil, err
+	}
+	var current int64
+	if err := tx.GetContext(ctx, &current, r.db.Rebind(`
+		SELECT revision FROM task_preview_feedback_collections WHERE task_id = ?
+	`), taskID); err != nil {
+		return nil, nil, fmt.Errorf("read task preview feedback revision: %w", err)
+	}
+	if current != expectedRevision {
+		snapshot, conflictErr := r.commitPreviewFeedbackConflict(ctx, tx, taskID)
+		return snapshot, nil, conflictErr
+	}
+	attachments, err := r.listPreviewScreenshots(ctx, tx, taskID)
+	if err != nil {
+		return nil, nil, err
+	}
+	if _, err := tx.ExecContext(ctx, r.db.Rebind(`
+		DELETE FROM task_preview_feedback WHERE task_id = ?
+	`), taskID); err != nil {
+		return nil, nil, fmt.Errorf("clear task preview feedback: %w", err)
+	}
+	released, err := r.expirePreviewScreenshots(ctx, tx, attachments...)
+	if err != nil {
+		return nil, nil, err
+	}
+	snapshot, err := r.incrementAndCommitPreviewFeedback(ctx, tx, taskID)
+	return snapshot, released, err
+}
+
+func (r *Repository) ensurePreviewFeedbackCollection(ctx context.Context, tx *sqlx.Tx, taskID string) error {
+	now := time.Now().UTC()
+	_, err := tx.ExecContext(ctx, r.db.Rebind(`
+		INSERT INTO task_preview_feedback_collections (task_id, revision, created_at, updated_at)
+		VALUES (?, 0, ?, ?) ON CONFLICT (task_id) DO NOTHING
+	`), taskID, now, now)
+	if err != nil {
+		return fmt.Errorf("ensure task preview feedback collection: %w", err)
+	}
+	return nil
+}
+
+func (r *Repository) previewFeedbackAdmission(ctx context.Context, tx *sqlx.Tx, itemID string) (string, error) {
+	var fingerprint string
+	err := tx.GetContext(ctx, &fingerprint, r.db.Rebind(`
+		SELECT request_fingerprint FROM task_preview_feedback_admissions WHERE id = ?
+	`), itemID)
+	if errors.Is(err, sql.ErrNoRows) {
+		return "", nil
+	}
+	if err != nil {
+		return "", fmt.Errorf("read task preview feedback admission: %w", err)
+	}
+	return fingerprint, nil
+}
+
+func previewFeedbackFingerprint(item *models.TaskPreviewFeedback) (string, error) {
+	return plancomments.Fingerprint(struct {
+		ID                     string                               `json:"id"`
+		TaskID                 string                               `json:"task_id"`
+		Kind                   models.TaskPreviewFeedbackKind       `json:"kind"`
+		Comment                string                               `json:"comment"`
+		SourceKind             models.TaskPreviewFeedbackSourceKind `json:"source_kind"`
+		SourceSessionID        string                               `json:"source_session_id"`
+		SourceLabel            string                               `json:"source_label"`
+		SourcePath             string                               `json:"source_path"`
+		PageRoute              string                               `json:"page_route"`
+		PageTitle              string                               `json:"page_title"`
+		SelectedText           string                               `json:"selected_text"`
+		TextAnchor             json.RawMessage                      `json:"text_anchor"`
+		ElementSnapshot        json.RawMessage                      `json:"element_snapshot"`
+		CaptureRect            json.RawMessage                      `json:"capture_rect"`
+		ScreenshotAttachmentID string                               `json:"screenshot_attachment_id"`
+	}{
+		item.ID, item.TaskID, item.Kind, item.Comment, item.SourceKind,
+		item.SourceSessionID, item.SourceLabel, item.SourcePath, item.PageRoute,
+		item.PageTitle, item.SelectedText, item.TextAnchor, item.ElementSnapshot,
+		item.CaptureRect, item.ScreenshotAttachmentID,
+	})
+}
+
+func previewNullableJSON(value json.RawMessage) interface{} {
+	if len(value) == 0 {
+		return nil
+	}
+	return string(value)
+}
+
+func (r *Repository) claimPreviewScreenshot(
+	ctx context.Context,
+	tx *sqlx.Tx,
+	item *models.TaskPreviewFeedback,
+	ownerID, workspaceID string,
+	now time.Time,
+) error {
+	if item.ScreenshotAttachmentID == "" {
+		return nil
+	}
+	result, err := tx.ExecContext(ctx, r.db.Rebind(`
+		UPDATE task_message_attachments
+		SET task_id = ?, session_id = '', state = ?, updated_at = ?
+		WHERE id = ? AND owner_id = ? AND workspace_id = ? AND state = ?
+			AND mime_type = 'image/png' AND kind = 'image' AND delivery_mode = 'prompt'
+			AND size_bytes > 0 AND size_bytes <= ?
+	`), item.TaskID, models.AttachmentStateClaimed, now, item.ScreenshotAttachmentID,
+		ownerID, workspaceID, models.AttachmentStateStaged, previewfeedback.MaxScreenshotBytes)
+	if err != nil {
+		return fmt.Errorf("claim preview screenshot: %w", err)
+	}
+	if changed, _ := result.RowsAffected(); changed != 1 {
+		return models.ErrAttachmentClaimConflict
+	}
+	return nil
+}
+
+func (r *Repository) previewScreenshotForItem(
+	ctx context.Context,
+	tx *sqlx.Tx,
+	taskID, itemID string,
+	expectedVersion int64,
+) (*models.TaskMessageAttachment, error) {
+	var attachmentID sql.NullString
+	err := tx.GetContext(ctx, &attachmentID, r.db.Rebind(`
+		SELECT screenshot_attachment_id FROM task_preview_feedback
+		WHERE id = ? AND task_id = ? AND version = ?
+	`), itemID, taskID, expectedVersion)
+	if errors.Is(err, sql.ErrNoRows) || !attachmentID.Valid {
+		return nil, nil
+	}
+	if err != nil {
+		return nil, fmt.Errorf("read preview screenshot reference: %w", err)
+	}
+	return r.getAttachmentInTx(ctx, tx, attachmentID.String)
+}
+
+func (r *Repository) listPreviewScreenshots(
+	ctx context.Context,
+	tx *sqlx.Tx,
+	taskID string,
+) ([]*models.TaskMessageAttachment, error) {
+	rows, err := tx.QueryxContext(ctx, r.db.Rebind(`
+		SELECT a.* FROM task_message_attachments a
+		JOIN task_preview_feedback f ON f.screenshot_attachment_id = a.id
+		WHERE f.task_id = ?
+	`), taskID)
+	if err != nil {
+		return nil, fmt.Errorf("list preview screenshots: %w", err)
+	}
+	defer func() { _ = rows.Close() }()
+	var attachments []*models.TaskMessageAttachment
+	for rows.Next() {
+		attachment := &models.TaskMessageAttachment{}
+		if err := rows.StructScan(attachment); err != nil {
+			return nil, fmt.Errorf("scan preview screenshot: %w", err)
+		}
+		attachments = append(attachments, attachment)
+	}
+	if err := rows.Err(); err != nil {
+		return nil, fmt.Errorf("iterate preview screenshots: %w", err)
+	}
+	return attachments, nil
+}
+
+func (r *Repository) getAttachmentInTx(
+	ctx context.Context,
+	tx *sqlx.Tx,
+	id string,
+) (*models.TaskMessageAttachment, error) {
+	attachment := &models.TaskMessageAttachment{}
+	err := tx.GetContext(ctx, attachment, r.db.Rebind(`
+		SELECT * FROM task_message_attachments WHERE id = ?
+	`), id)
+	if err != nil {
+		return nil, fmt.Errorf("read preview screenshot: %w", err)
+	}
+	return attachment, nil
+}
+
+func (r *Repository) expirePreviewScreenshots(
+	ctx context.Context,
+	tx *sqlx.Tx,
+	attachments ...*models.TaskMessageAttachment,
+) ([]*models.TaskMessageAttachment, error) {
+	now := time.Now().UTC()
+	var released []*models.TaskMessageAttachment
+	for _, attachment := range attachments {
+		if attachment == nil {
+			continue
+		}
+		if _, err := tx.ExecContext(ctx, r.db.Rebind(`
+			UPDATE task_message_attachments SET state = ?, expires_at = ?, updated_at = ?
+			WHERE id = ? AND task_id = ? AND state = ?
+		`), models.AttachmentStateExpired, now, now, attachment.ID,
+			attachment.TaskID, models.AttachmentStateClaimed); err != nil {
+			return nil, fmt.Errorf("expire preview screenshot: %w", err)
+		}
+		attachment.State = models.AttachmentStateExpired
+		attachment.ExpiresAt = now
+		attachment.UpdatedAt = now
+		released = append(released, attachment)
+	}
+	return released, nil
+}
+
+func (r *Repository) incrementAndCommitPreviewFeedback(
+	ctx context.Context,
+	tx *sqlx.Tx,
+	taskID string,
+) (*models.TaskPreviewFeedbackSnapshot, error) {
+	now := time.Now().UTC()
+	result, err := tx.ExecContext(ctx, r.db.Rebind(`
+		UPDATE task_preview_feedback_collections
+		SET revision = revision + 1, updated_at = ? WHERE task_id = ?
+	`), now, taskID)
+	if err != nil {
+		return nil, fmt.Errorf("increment task preview feedback revision: %w", err)
+	}
+	if changed, _ := result.RowsAffected(); changed != 1 {
+		return nil, repoerrors.ErrTaskNotFound
+	}
+	return r.commitPreviewFeedbackRead(ctx, tx, taskID)
+}
+
+func (r *Repository) validatePreviewFeedbackCollection(
+	ctx context.Context,
+	q sqlx.QueryerContext,
+	taskID string,
+) error {
+	snapshot, err := r.readPreviewFeedbackSnapshot(ctx, q, taskID)
+	if err != nil {
+		return err
+	}
+	return previewfeedback.ValidateCollection(snapshot.Items)
+}
+
+func (r *Repository) commitPreviewFeedbackConflict(
+	ctx context.Context,
+	tx *sqlx.Tx,
+	taskID string,
+) (*models.TaskPreviewFeedbackSnapshot, error) {
+	snapshot, err := r.commitPreviewFeedbackRead(ctx, tx, taskID)
+	if err != nil {
+		return nil, err
+	}
+	return snapshot, repoerrors.ErrTaskPreviewFeedbackChanged
+}
+
+func (r *Repository) commitPreviewFeedbackRead(
+	ctx context.Context,
+	tx *sqlx.Tx,
+	taskID string,
+) (*models.TaskPreviewFeedbackSnapshot, error) {
+	snapshot, err := r.readPreviewFeedbackSnapshot(ctx, tx, taskID)
+	if err != nil {
+		return nil, err
+	}
+	if err := tx.Commit(); err != nil {
+		return nil, fmt.Errorf("commit task preview feedback transaction: %w", err)
+	}
+	return snapshot, nil
+}
+
+func (r *Repository) readPreviewFeedbackSnapshot(
+	ctx context.Context,
+	q sqlx.QueryerContext,
+	taskID string,
+) (*models.TaskPreviewFeedbackSnapshot, error) {
+	snapshot := &models.TaskPreviewFeedbackSnapshot{TaskID: taskID, Items: make([]*models.TaskPreviewFeedback, 0)}
+	if err := sqlx.GetContext(ctx, q, &snapshot.Revision, r.db.Rebind(`
+		SELECT revision FROM task_preview_feedback_collections WHERE task_id = ?
+	`), taskID); err != nil {
+		return nil, fmt.Errorf("read task preview feedback collection: %w", err)
+	}
+	rows, err := q.QueryContext(ctx, r.db.Rebind(`
+		SELECT `+previewFeedbackSelectCols+`
+		FROM task_preview_feedback WHERE task_id = ? ORDER BY created_at, id
+	`), taskID)
+	if err != nil {
+		return nil, fmt.Errorf("list task preview feedback: %w", err)
+	}
+	items := make([]*models.TaskPreviewFeedback, 0)
+	for rows.Next() {
+		item := &models.TaskPreviewFeedback{}
+		var textAnchor, elementSnapshot, captureRect string
+		if err := rows.Scan(
+			&item.ID, &item.TaskID, &item.Kind, &item.Comment, &item.SourceKind,
+			&item.SourceSessionID, &item.SourceLabel, &item.SourcePath,
+			&item.PageRoute, &item.PageTitle, &item.SelectedText,
+			&textAnchor, &elementSnapshot, &captureRect, &item.ScreenshotAttachmentID,
+			&item.Version, &item.CreatedAt, &item.UpdatedAt,
+		); err != nil {
+			return nil, fmt.Errorf("scan task preview feedback: %w", err)
+		}
+		item.TextAnchor = previewRawJSON(textAnchor)
+		item.ElementSnapshot = previewRawJSON(elementSnapshot)
+		item.CaptureRect = previewRawJSON(captureRect)
+		items = append(items, item)
+	}
+	if err := rows.Err(); err != nil {
+		return nil, fmt.Errorf("iterate task preview feedback: %w", err)
+	}
+	if err := rows.Close(); err != nil {
+		return nil, fmt.Errorf("close task preview feedback rows: %w", err)
+	}
+	for _, item := range items {
+		if item.ScreenshotAttachmentID == "" {
+			continue
+		}
+		item.ScreenshotAttachment, err = r.getAttachmentQuery(ctx, q, item.ScreenshotAttachmentID)
+		if err != nil {
+			return nil, err
+		}
+	}
+	snapshot.Items = items
+	return snapshot, nil
+}
+
+func (r *Repository) getAttachmentQuery(
+	ctx context.Context,
+	q sqlx.QueryerContext,
+	id string,
+) (*models.TaskMessageAttachment, error) {
+	attachment := &models.TaskMessageAttachment{}
+	if err := sqlx.GetContext(ctx, q, attachment, r.db.Rebind(`
+		SELECT * FROM task_message_attachments WHERE id = ?
+	`), id); err != nil {
+		return nil, fmt.Errorf("read task preview screenshot descriptor: %w", err)
+	}
+	return attachment, nil
+}
+
+func previewRawJSON(value string) json.RawMessage {
+	if value == "" {
+		return nil
+	}
+	return json.RawMessage(value)
+}
diff --git a/apps/backend/internal/task/repository/sqlite/preview_feedback_postgres_test.go b/apps/backend/internal/task/repository/sqlite/preview_feedback_postgres_test.go
new file mode 100644
index 0000000000..1d1f7efcec
--- /dev/null
+++ b/apps/backend/internal/task/repository/sqlite/preview_feedback_postgres_test.go
@@ -0,0 +1,58 @@
+package sqlite
+
+import (
+	"context"
+	"encoding/json"
+	"testing"
+	"time"
+
+	"github.com/kandev/kandev/internal/task/models"
+	"github.com/kandev/kandev/internal/testutil"
+)
+
+func TestPostgresPreviewFeedbackLoadsScreenshotAttachmentAfterRowsClose(t *testing.T) {
+	db := testutil.OpenIsolatedPostgres(t, testutil.PostgresDSNFromEnv(t))
+	repo, err := NewWithDB(db, db, nil)
+	if err != nil {
+		t.Fatalf("init postgres schema: %v", err)
+	}
+	ctx := context.Background()
+	workspaceID := "workspace-preview-feedback-pg"
+	taskID := "task-preview-feedback-pg"
+	if err := repo.CreateWorkspace(ctx, &models.Workspace{ID: workspaceID, Name: workspaceID}); err != nil {
+		t.Fatalf("seed workspace: %v", err)
+	}
+	if err := repo.CreateTask(ctx, &models.Task{ID: taskID, WorkspaceID: workspaceID, Title: taskID}); err != nil {
+		t.Fatalf("seed task: %v", err)
+	}
+	attachment := &models.TaskMessageAttachment{
+		ID: "attachment-preview-feedback-pg", OwnerID: "owner-preview-feedback-pg",
+		WorkspaceID: workspaceID, Name: "capture.png", MimeType: "image/png", Kind: "image",
+		DeliveryMode: "prompt", SizeBytes: 128, StorageKey: "attachment-preview-feedback-pg",
+		State: models.AttachmentStateStaged, ExpiresAt: time.Now().UTC().Add(time.Hour),
+	}
+	if err := repo.CreateMessageAttachment(ctx, attachment); err != nil {
+		t.Fatalf("create attachment: %v", err)
+	}
+	item := &models.TaskPreviewFeedback{
+		ID: "feedback-preview-feedback-pg", TaskID: taskID,
+		Kind: models.TaskPreviewFeedbackScreenshot, Comment: "The screenshot is useful",
+		SourceKind: models.TaskPreviewFeedbackBrowser, SourceLabel: "Local app",
+		PageRoute: "/checkout", PageTitle: "Checkout",
+		CaptureRect:            json.RawMessage(`{"x":1,"y":2,"width":320,"height":180}`),
+		ScreenshotAttachmentID: attachment.ID,
+	}
+	if _, err := repo.CreateTaskPreviewFeedback(ctx, item, attachment.OwnerID, workspaceID); err != nil {
+		t.Fatalf("create preview feedback: %v", err)
+	}
+	snapshot, err := repo.ListTaskPreviewFeedback(ctx, taskID)
+	if err != nil {
+		t.Fatalf("list preview feedback: %v", err)
+	}
+	if len(snapshot.Items) != 1 || snapshot.Items[0].ScreenshotAttachment == nil {
+		t.Fatalf("snapshot = %#v, want screenshot attachment descriptor", snapshot)
+	}
+	if snapshot.Items[0].ScreenshotAttachment.ID != attachment.ID {
+		t.Fatalf("screenshot attachment ID = %q, want %q", snapshot.Items[0].ScreenshotAttachment.ID, attachment.ID)
+	}
+}
diff --git a/apps/backend/internal/task/repository/sqlite/preview_feedback_test.go b/apps/backend/internal/task/repository/sqlite/preview_feedback_test.go
new file mode 100644
index 0000000000..7996966950
--- /dev/null
+++ b/apps/backend/internal/task/repository/sqlite/preview_feedback_test.go
@@ -0,0 +1,214 @@
+//go:build cgo
+
+package sqlite
+
+import (
+	"context"
+	"encoding/json"
+	"errors"
+	"testing"
+	"time"
+
+	"github.com/kandev/kandev/internal/task/models"
+	"github.com/kandev/kandev/internal/task/repository/repoerrors"
+)
+
+type previewFeedbackRepositoryContract interface {
+	ListTaskPreviewFeedback(context.Context, string) (*models.TaskPreviewFeedbackSnapshot, error)
+	CreateTaskPreviewFeedback(context.Context, *models.TaskPreviewFeedback, string, string) (*models.TaskPreviewFeedbackSnapshot, error)
+	UpdateTaskPreviewFeedback(context.Context, string, string, string, int64) (*models.TaskPreviewFeedbackSnapshot, error)
+	DeleteTaskPreviewFeedback(context.Context, string, string, int64) (*models.TaskPreviewFeedbackSnapshot, []*models.TaskMessageAttachment, error)
+	ClearTaskPreviewFeedback(context.Context, string, int64) (*models.TaskPreviewFeedbackSnapshot, []*models.TaskMessageAttachment, error)
+}
+
+func TestPreviewFeedbackScreenshotClaimAndClearAreAtomic(t *testing.T) {
+	repo := newRepoForEntityTests(t)
+	contract := requirePreviewFeedbackRepository(t, repo)
+	ctx := context.Background()
+	seedWorkspace(t, repo, "workspace-preview-feedback")
+	seedAttachmentTask(t, repo, "task-preview-screenshot", "workspace-preview-feedback")
+	attachment := &models.TaskMessageAttachment{
+		ID: "preview-screenshot", OwnerID: "owner-preview", WorkspaceID: "workspace-preview-feedback",
+		Name: "capture.png", MimeType: "image/png", Kind: "image", DeliveryMode: "prompt",
+		SizeBytes: 128, StorageKey: "preview-screenshot", State: models.AttachmentStateStaged,
+		ExpiresAt: time.Now().UTC().Add(time.Hour),
+	}
+	if err := repo.CreateMessageAttachment(ctx, attachment); err != nil {
+		t.Fatal(err)
+	}
+	item := &models.TaskPreviewFeedback{
+		ID: "screenshot-feedback", TaskID: "task-preview-screenshot",
+		Kind: models.TaskPreviewFeedbackScreenshot, Comment: "The form clips here",
+		SourceKind: models.TaskPreviewFeedbackBrowser, SourceLabel: "Checkout",
+		PageRoute: "/checkout", PageTitle: "Checkout",
+		CaptureRect:            json.RawMessage(`{"x":1,"y":2,"width":320,"height":180}`),
+		ScreenshotAttachmentID: attachment.ID,
+	}
+	created, err := contract.CreateTaskPreviewFeedback(
+		ctx, item, attachment.OwnerID, attachment.WorkspaceID,
+	)
+	if err != nil || created.Revision != 1 || created.Items[0].ScreenshotAttachment == nil {
+		t.Fatalf("create screenshot feedback = %#v, %v", created, err)
+	}
+	claimed, err := repo.GetMessageAttachment(ctx, attachment.ID)
+	if err != nil || claimed.State != models.AttachmentStateClaimed ||
+		claimed.TaskID != item.TaskID || claimed.SessionID != "" {
+		t.Fatalf("claimed attachment = %#v, %v", claimed, err)
+	}
+
+	stale, released, err := contract.ClearTaskPreviewFeedback(ctx, item.TaskID, 0)
+	if !errors.Is(err, repoerrors.ErrTaskPreviewFeedbackChanged) || stale.Revision != 1 || len(released) != 0 {
+		t.Fatalf("stale clear = %#v, released=%#v, err=%v", stale, released, err)
+	}
+	cleared, released, err := contract.ClearTaskPreviewFeedback(ctx, item.TaskID, 1)
+	if err != nil || cleared.Revision != 2 || len(cleared.Items) != 0 || len(released) != 1 {
+		t.Fatalf("clear = %#v, released=%#v, err=%v", cleared, released, err)
+	}
+	if released[0].State != models.AttachmentStateExpired {
+		t.Fatalf("released attachment state = %q", released[0].State)
+	}
+}
+
+func TestPreviewFeedbackScreenshotClaimRequiresPromptDelivery(t *testing.T) {
+	repo := newRepoForEntityTests(t)
+	contract := requirePreviewFeedbackRepository(t, repo)
+	ctx := context.Background()
+	seedWorkspace(t, repo, "workspace-preview-feedback-mode")
+	seedAttachmentTask(t, repo, "task-preview-screenshot-mode", "workspace-preview-feedback-mode")
+	attachment := &models.TaskMessageAttachment{
+		ID: "preview-screenshot-path", OwnerID: "owner-preview", WorkspaceID: "workspace-preview-feedback-mode",
+		Name: "capture.png", MimeType: "image/png", Kind: "image", DeliveryMode: "path",
+		SizeBytes: 128, StorageKey: "preview-screenshot-path", State: models.AttachmentStateStaged,
+		ExpiresAt: time.Now().UTC().Add(time.Hour),
+	}
+	if err := repo.CreateMessageAttachment(ctx, attachment); err != nil {
+		t.Fatal(err)
+	}
+	item := &models.TaskPreviewFeedback{
+		ID: "screenshot-feedback-path", TaskID: "task-preview-screenshot-mode",
+		Kind: models.TaskPreviewFeedbackScreenshot, Comment: "The form clips here",
+		SourceKind: models.TaskPreviewFeedbackBrowser, SourceLabel: "Checkout",
+		PageRoute: "/checkout", PageTitle: "Checkout",
+		CaptureRect:            json.RawMessage(`{"x":1,"y":2,"width":320,"height":180}`),
+		ScreenshotAttachmentID: attachment.ID,
+	}
+
+	if _, err := contract.CreateTaskPreviewFeedback(
+		ctx, item, attachment.OwnerID, attachment.WorkspaceID,
+	); !errors.Is(err, models.ErrAttachmentClaimConflict) {
+		t.Fatalf("CreateTaskPreviewFeedback error = %v, want attachment conflict", err)
+	}
+	stored, err := repo.GetMessageAttachment(ctx, attachment.ID)
+	if err != nil || stored.State != models.AttachmentStateStaged {
+		t.Fatalf("attachment after rejected claim = %#v, %v", stored, err)
+	}
+}
+
+func requirePreviewFeedbackRepository(t *testing.T, repo *Repository) previewFeedbackRepositoryContract {
+	t.Helper()
+	contract, ok := any(repo).(previewFeedbackRepositoryContract)
+	if !ok {
+		t.Fatal("Repository does not implement task preview feedback persistence")
+	}
+	return contract
+}
+
+func TestPreviewFeedbackSchemaExistsOnFreshDatabase(t *testing.T) {
+	repo := newRepoForEntityTests(t)
+
+	for _, table := range []string{
+		"task_preview_feedback_collections",
+		"task_preview_feedback",
+		"task_preview_feedback_admissions",
+	} {
+		var count int
+		if err := repo.db.Get(&count, `
+			SELECT COUNT(*) FROM sqlite_master
+			WHERE type = 'table' AND name = ?
+		`, table); err != nil {
+			t.Fatalf("inspect %s: %v", table, err)
+		}
+		if count != 1 {
+			t.Fatalf("%s table count = %d, want 1", table, count)
+		}
+	}
+}
+
+func TestPreviewFeedbackRepositoryCRUDUsesOptimisticVersions(t *testing.T) {
+	repo := newRepoForEntityTests(t)
+	contract := requirePreviewFeedbackRepository(t, repo)
+	ctx := context.Background()
+	seedTaskForDocs(t, repo, "task-preview-feedback")
+
+	initial, err := contract.ListTaskPreviewFeedback(ctx, "task-preview-feedback")
+	if err != nil {
+		t.Fatalf("ListTaskPreviewFeedback: %v", err)
+	}
+	if initial.Revision != 0 || len(initial.Items) != 0 {
+		t.Fatalf("initial snapshot = %#v", initial)
+	}
+
+	item := &models.TaskPreviewFeedback{
+		ID: "feedback-1", TaskID: "task-preview-feedback",
+		Kind: models.TaskPreviewFeedbackText, Comment: "Increase contrast",
+		SourceKind: models.TaskPreviewFeedbackBrowser, SourceLabel: "Local app",
+		PageRoute: "/products?plan=pro", PageTitle: "Products",
+		SelectedText: "Choose a plan", TextAnchor: json.RawMessage(`{"start":{"path":[0],"offset":0}}`),
+		CaptureRect: json.RawMessage(`{"x":20,"y":40,"width":120,"height":24}`),
+	}
+	created, err := contract.CreateTaskPreviewFeedback(ctx, item, "", "")
+	if err != nil {
+		t.Fatalf("CreateTaskPreviewFeedback: %v", err)
+	}
+	if created.Revision != 1 || len(created.Items) != 1 || created.Items[0].Version != 1 {
+		t.Fatalf("created snapshot = %#v", created)
+	}
+
+	replayed, err := contract.CreateTaskPreviewFeedback(ctx, item, "", "")
+	if err != nil || replayed.Revision != 1 {
+		t.Fatalf("idempotent replay = %#v, %v", replayed, err)
+	}
+
+	updated, err := contract.UpdateTaskPreviewFeedback(ctx, item.TaskID, item.ID, "Use the stronger color", 1)
+	if err != nil {
+		t.Fatalf("UpdateTaskPreviewFeedback: %v", err)
+	}
+	if updated.Revision != 2 || updated.Items[0].Version != 2 || updated.Items[0].Comment != "Use the stronger color" {
+		t.Fatalf("updated snapshot = %#v", updated)
+	}
+
+	stale, _, err := contract.DeleteTaskPreviewFeedback(ctx, item.TaskID, item.ID, 1)
+	if err == nil || stale.Revision != 2 || len(stale.Items) != 1 {
+		t.Fatalf("stale delete = %#v, %v", stale, err)
+	}
+
+	deleted, released, err := contract.DeleteTaskPreviewFeedback(ctx, item.TaskID, item.ID, 2)
+	if err != nil || deleted.Revision != 3 || len(deleted.Items) != 0 || len(released) != 0 {
+		t.Fatalf("deleted snapshot = %#v, released=%#v, err=%v", deleted, released, err)
+	}
+}
+
+func TestPreviewFeedbackRepositoryRejectsInvalidCapture(t *testing.T) {
+	repo := newRepoForEntityTests(t)
+	contract := requirePreviewFeedbackRepository(t, repo)
+	seedTaskForDocs(t, repo, "task-invalid-preview-feedback")
+
+	item := &models.TaskPreviewFeedback{
+		ID: "invalid-feedback", TaskID: "task-invalid-preview-feedback",
+		Kind: models.TaskPreviewFeedbackText, Comment: "   ",
+		SourceKind: models.TaskPreviewFeedbackBrowser, SourceLabel: "Local app",
+		PageRoute: "/", SelectedText: "Selected",
+		TextAnchor: json.RawMessage(`{"start":{"path":[0],"offset":0}}`),
+	}
+	if snapshot, err := contract.CreateTaskPreviewFeedback(context.Background(), item, "", ""); err == nil {
+		t.Fatalf("invalid capture was stored: %#v", snapshot)
+	}
+
+	var count int
+	if err := repo.db.Get(&count, `SELECT COUNT(*) FROM task_preview_feedback`); err != nil {
+		t.Fatal(err)
+	}
+	if count != 0 {
+		t.Fatalf("stored invalid preview feedback rows = %d, want 0", count)
+	}
+}
diff --git a/apps/backend/internal/task/service/attachment_service.go b/apps/backend/internal/task/service/attachment_service.go
index fed2f1ce6d..15e2483180 100644
--- a/apps/backend/internal/task/service/attachment_service.go
+++ b/apps/backend/internal/task/service/attachment_service.go
@@ -1,11 +1,11 @@
 package service
 
 import (
+	"bytes"
 	"context"
 	"errors"
 	"fmt"
-	"github.com/google/uuid"
-	"go.uber.org/zap"
+	"image/png"
 	"io"
 	"os"
 	"path/filepath"
@@ -13,10 +13,13 @@ import (
 	"sync"
 	"time"
 
+	"github.com/google/uuid"
 	"github.com/jmoiron/sqlx"
 	"github.com/kandev/kandev/internal/common/logger"
 	"github.com/kandev/kandev/internal/task/models"
+	"github.com/kandev/kandev/internal/task/previewfeedback"
 	"github.com/kandev/kandev/internal/task/repository"
+	"go.uber.org/zap"
 )
 
 const (
@@ -27,6 +30,7 @@ const (
 	MaxAttachmentCount           = models.MaxMessageAttachmentCount
 	attachmentDeliveryModePrompt = "prompt"
 	attachmentDeliveryModePath   = "path"
+	previewScreenshotMimeType    = "image/png"
 )
 
 var (
@@ -265,6 +269,90 @@ func (s *AttachmentService) Open(ctx context.Context, ownerID, id string) (*mode
 	return attachment, file, nil
 }
 
+// ValidatePreviewScreenshot verifies task-feedback screenshot bytes before the
+// repository changes their staged claim. Already claimed task-feedback bytes
+// are accepted so a lost create response can be retried idempotently.
+func (s *AttachmentService) ValidatePreviewScreenshot(
+	ctx context.Context,
+	ownerID, workspaceID, taskID, id string,
+) error {
+	attachment, file, err := s.Open(ctx, ownerID, id)
+	if err != nil {
+		return err
+	}
+	defer func() { _ = file.Close() }()
+
+	if err := validatePreviewScreenshotMetadata(attachment, ownerID, workspaceID, taskID); err != nil {
+		return err
+	}
+	return validatePreviewScreenshotFile(file, attachment.SizeBytes)
+}
+
+func validatePreviewScreenshotMetadata(
+	attachment *models.TaskMessageAttachment,
+	ownerID, workspaceID, taskID string,
+) error {
+	if !validPreviewScreenshotClaim(attachment, ownerID, workspaceID, taskID) {
+		return ErrAttachmentClaimConflict
+	}
+	if attachment.MimeType != previewScreenshotMimeType || attachment.Kind != "image" ||
+		attachment.DeliveryMode != attachmentDeliveryModePrompt {
+		return fmt.Errorf("%w: screenshot attachment metadata", previewfeedback.ErrCaptureInvalid)
+	}
+	if attachment.SizeBytes <= 0 || attachment.SizeBytes > previewfeedback.MaxScreenshotBytes {
+		return previewfeedback.ErrCaptureTooLarge
+	}
+	return nil
+}
+
+func validatePreviewScreenshotFile(file *os.File, expectedSize int64) error {
+	stat, err := file.Stat()
+	if err != nil {
+		return fmt.Errorf("inspect preview screenshot: %w", err)
+	}
+	if stat.Size() != expectedSize || stat.Size() > previewfeedback.MaxScreenshotBytes {
+		return fmt.Errorf("%w: screenshot byte count", previewfeedback.ErrCaptureInvalid)
+	}
+
+	var signature [8]byte
+	if _, err := io.ReadFull(file, signature[:]); err != nil ||
+		!bytes.Equal(signature[:], []byte("\x89PNG\r\n\x1a\n")) {
+		return fmt.Errorf("%w: invalid PNG signature", previewfeedback.ErrCaptureInvalid)
+	}
+	if _, err := file.Seek(0, io.SeekStart); err != nil {
+		return fmt.Errorf("seek preview screenshot: %w", err)
+	}
+	config, err := png.DecodeConfig(io.LimitReader(file, previewfeedback.MaxScreenshotBytes+1))
+	if err != nil || config.Width <= 0 || config.Height <= 0 {
+		return fmt.Errorf("%w: invalid PNG metadata", previewfeedback.ErrCaptureInvalid)
+	}
+	if uint64(config.Width)*uint64(config.Height) > uint64(previewfeedback.MaxScreenshotPixels) {
+		return previewfeedback.ErrCaptureTooLarge
+	}
+	if _, err := file.Seek(0, io.SeekStart); err != nil {
+		return fmt.Errorf("seek preview screenshot for decode: %w", err)
+	}
+	if _, err := png.Decode(io.LimitReader(file, previewfeedback.MaxScreenshotBytes+1)); err != nil {
+		return fmt.Errorf("%w: invalid PNG data", previewfeedback.ErrCaptureInvalid)
+	}
+	return nil
+}
+
+func validPreviewScreenshotClaim(
+	attachment *models.TaskMessageAttachment,
+	ownerID, workspaceID, taskID string,
+) bool {
+	if attachment == nil || attachment.OwnerID != ownerID || attachment.WorkspaceID != workspaceID {
+		return false
+	}
+	if attachment.State == models.AttachmentStateStaged {
+		return attachment.TaskID == "" && attachment.SessionID == "" &&
+			attachment.MessageID == "" && attachment.QueueID == ""
+	}
+	return attachment.State == models.AttachmentStateClaimed && attachment.TaskID == taskID &&
+		attachment.SessionID == "" && attachment.MessageID == "" && attachment.QueueID == ""
+}
+
 // OpenClaimed opens a descriptor for the internal lifecycle delivery path.
 // It deliberately authorizes by the claimed task/session binding rather than
 // accepting a caller-supplied owner, and never exposes the storage key.
diff --git a/apps/backend/internal/task/service/attachment_service_preview_test.go b/apps/backend/internal/task/service/attachment_service_preview_test.go
new file mode 100644
index 0000000000..7fde2536f3
--- /dev/null
+++ b/apps/backend/internal/task/service/attachment_service_preview_test.go
@@ -0,0 +1,150 @@
+package service
+
+import (
+	"bytes"
+	"context"
+	"encoding/binary"
+	"errors"
+	"hash/crc32"
+	"image"
+	"image/png"
+	"testing"
+
+	"github.com/kandev/kandev/internal/task/previewfeedback"
+)
+
+func encodePreviewPNG(t *testing.T, bounds image.Rectangle) []byte {
+	t.Helper()
+	var encoded bytes.Buffer
+	if err := png.Encode(&encoded, image.NewRGBA(bounds)); err != nil {
+		t.Fatalf("encode PNG: %v", err)
+	}
+	return encoded.Bytes()
+}
+
+func previewPNGWithDimensions(t *testing.T, width, height uint32) []byte {
+	t.Helper()
+	content := encodePreviewPNG(t, image.Rect(0, 0, 1, 1))
+	binary.BigEndian.PutUint32(content[16:20], width)
+	binary.BigEndian.PutUint32(content[20:24], height)
+	binary.BigEndian.PutUint32(content[29:33], crc32.ChecksumIEEE(content[12:29]))
+	return content
+}
+
+func TestValidatePreviewScreenshotAcceptsBoundedPNG(t *testing.T) {
+	svc, _, _, _ := newAttachmentTestService(t)
+	content := encodePreviewPNG(t, image.Rect(0, 0, 320, 180))
+	attachment, err := svc.Stage(
+		context.Background(), "user-a", "ws-att", "capture.png", "image/png", "image", "prompt",
+		bytes.NewReader(content),
+	)
+	if err != nil {
+		t.Fatalf("Stage: %v", err)
+	}
+
+	if err := svc.ValidatePreviewScreenshot(
+		context.Background(), "user-a", "ws-att", "task-1", attachment.ID,
+	); err != nil {
+		t.Fatalf("ValidatePreviewScreenshot: %v", err)
+	}
+}
+
+func TestValidatePreviewScreenshotRejectsInvalidPNGBytes(t *testing.T) {
+	svc, _, _, _ := newAttachmentTestService(t)
+	attachment, err := svc.Stage(
+		context.Background(), "user-a", "ws-att", "capture.png", "image/png", "image", "prompt",
+		bytes.NewBufferString("not a PNG"),
+	)
+	if err != nil {
+		t.Fatalf("Stage: %v", err)
+	}
+
+	err = svc.ValidatePreviewScreenshot(
+		context.Background(), "user-a", "ws-att", "task-1", attachment.ID,
+	)
+	if !errors.Is(err, previewfeedback.ErrCaptureInvalid) {
+		t.Fatalf("ValidatePreviewScreenshot error = %v, want ErrCaptureInvalid", err)
+	}
+}
+
+func TestValidatePreviewScreenshotRejectsTruncatedPNGData(t *testing.T) {
+	svc, _, _, _ := newAttachmentTestService(t)
+	content := encodePreviewPNG(t, image.Rect(0, 0, 20, 20))
+	// DecodeConfig can read the dimensions from the PNG header even when the
+	// image data is missing. Full decoding must still reject the attachment.
+	truncated := content[:33]
+	attachment, err := svc.Stage(
+		context.Background(), "user-a", "ws-att", "capture.png", "image/png", "image", "prompt",
+		bytes.NewReader(truncated),
+	)
+	if err != nil {
+		t.Fatalf("Stage: %v", err)
+	}
+
+	err = svc.ValidatePreviewScreenshot(
+		context.Background(), "user-a", "ws-att", "task-1", attachment.ID,
+	)
+	if !errors.Is(err, previewfeedback.ErrCaptureInvalid) {
+		t.Fatalf("ValidatePreviewScreenshot error = %v, want ErrCaptureInvalid", err)
+	}
+}
+
+func TestValidatePreviewScreenshotRejectsOversizedPixelMetadata(t *testing.T) {
+	svc, _, _, _ := newAttachmentTestService(t)
+	content := previewPNGWithDimensions(t, 4001, 4000)
+	attachment, err := svc.Stage(
+		context.Background(), "user-a", "ws-att", "capture.png", "image/png", "image", "prompt",
+		bytes.NewReader(content),
+	)
+	if err != nil {
+		t.Fatalf("Stage: %v", err)
+	}
+
+	err = svc.ValidatePreviewScreenshot(
+		context.Background(), "user-a", "ws-att", "task-1", attachment.ID,
+	)
+	if !errors.Is(err, previewfeedback.ErrCaptureTooLarge) {
+		t.Fatalf("ValidatePreviewScreenshot error = %v, want ErrCaptureTooLarge", err)
+	}
+}
+
+func TestValidatePreviewScreenshotAcceptsIdempotentTaskClaim(t *testing.T) {
+	svc, _, _, _ := newAttachmentTestService(t)
+	content := encodePreviewPNG(t, image.Rect(0, 0, 20, 20))
+	attachment, err := svc.Stage(
+		context.Background(), "user-a", "ws-att", "capture.png", "image/png", "image", "prompt",
+		bytes.NewReader(content),
+	)
+	if err != nil {
+		t.Fatalf("Stage: %v", err)
+	}
+	if err := svc.Claim(context.Background(), "user-a", "ws-att", "task-1", "", []string{attachment.ID}); err != nil {
+		t.Fatalf("Claim: %v", err)
+	}
+	svc.SetTaskAuthorizer(func(context.Context, string) error { return nil })
+
+	if err := svc.ValidatePreviewScreenshot(
+		context.Background(), "user-a", "ws-att", "task-1", attachment.ID,
+	); err != nil {
+		t.Fatalf("ValidatePreviewScreenshot claimed retry: %v", err)
+	}
+}
+
+func TestValidatePreviewScreenshotRejectsWrongAttachmentMetadata(t *testing.T) {
+	svc, _, _, _ := newAttachmentTestService(t)
+	content := encodePreviewPNG(t, image.Rect(0, 0, 20, 20))
+	attachment, err := svc.Stage(
+		context.Background(), "user-a", "ws-att", "capture.png", "image/png", "image", "path",
+		bytes.NewReader(content),
+	)
+	if err != nil {
+		t.Fatalf("Stage: %v", err)
+	}
+
+	err = svc.ValidatePreviewScreenshot(
+		context.Background(), "user-a", "ws-att", "task-1", attachment.ID,
+	)
+	if !errors.Is(err, previewfeedback.ErrCaptureInvalid) {
+		t.Fatalf("ValidatePreviewScreenshot error = %v, want ErrCaptureInvalid", err)
+	}
+}
diff --git a/apps/backend/internal/task/service/plan_service.go b/apps/backend/internal/task/service/plan_service.go
index 92765d7a2c..651b153212 100644
--- a/apps/backend/internal/task/service/plan_service.go
+++ b/apps/backend/internal/task/service/plan_service.go
@@ -68,6 +68,12 @@ type PlanService struct {
 	// workflowStepGetter resolves the task's current workflow step for the
 	// write-time stamp. Nil is safe: stamped fields stay empty.
 	workflowStepGetter PlanWorkflowStepGetter
+	previewCleaner     interface {
+		DeleteDescriptors(context.Context, []*models.TaskMessageAttachment) error
+	}
+	previewScreenshotValidator interface {
+		ValidatePreviewScreenshot(context.Context, string, string, string, string) error
+	}
 }
 
 // NewPlanService creates a new task plan service. The concrete repository
@@ -101,6 +107,22 @@ func (s *PlanService) SetWorkflowStepGetter(getter PlanWorkflowStepGetter) {
 	s.workflowStepGetter = getter
 }
 
+// SetPreviewAttachmentCleaner removes screenshot bytes after their task-owned
+// feedback claim has been durably released.
+func (s *PlanService) SetPreviewAttachmentCleaner(cleaner interface {
+	DeleteDescriptors(context.Context, []*models.TaskMessageAttachment) error
+}) {
+	s.previewCleaner = cleaner
+}
+
+// SetPreviewScreenshotValidator wires the private-byte validation that runs
+// before a staged screenshot is claimed by task feedback.
+func (s *PlanService) SetPreviewScreenshotValidator(validator interface {
+	ValidatePreviewScreenshot(context.Context, string, string, string, string) error
+}) {
+	s.previewScreenshotValidator = validator
+}
+
 func (s *PlanService) authorize(ctx context.Context, taskID string) error {
 	if s.authorizeTask == nil {
 		return nil
diff --git a/apps/backend/internal/task/service/preview_feedback_service.go b/apps/backend/internal/task/service/preview_feedback_service.go
new file mode 100644
index 0000000000..0700a20a04
--- /dev/null
+++ b/apps/backend/internal/task/service/preview_feedback_service.go
@@ -0,0 +1,259 @@
+package service
+
+import (
+	"context"
+	"errors"
+	"strings"
+
+	"github.com/google/uuid"
+	"github.com/kandev/kandev/internal/auth/authn"
+	"github.com/kandev/kandev/internal/events"
+	"github.com/kandev/kandev/internal/events/bus"
+	"github.com/kandev/kandev/internal/task/models"
+	"github.com/kandev/kandev/internal/task/previewfeedback"
+	"github.com/kandev/kandev/internal/task/repository"
+	"go.uber.org/zap"
+)
+
+var (
+	ErrPreviewFeedbackIDRequired      = errors.New("preview feedback id is required")
+	ErrPreviewFeedbackIDInvalid       = errors.New("preview feedback id must be a UUID")
+	ErrPreviewFeedbackVersionRequired = errors.New("preview feedback expected_version must be positive")
+	ErrPreviewFeedbackRevisionInvalid = errors.New("preview feedback expected_revision must not be negative")
+	ErrTaskPreviewFeedbackChanged     = errors.New("task preview feedback changed")
+)
+
+func (s *PlanService) previewFeedbackRepo() (repository.PreviewFeedbackRepository, error) {
+	repo, ok := s.repo.(repository.PreviewFeedbackRepository)
+	if !ok {
+		return nil, errors.New("task preview feedback persistence is unavailable")
+	}
+	return repo, nil
+}
+
+func (s *PlanService) ListPreviewFeedback(
+	ctx context.Context,
+	taskID string,
+) (*models.TaskPreviewFeedbackSnapshot, error) {
+	if strings.TrimSpace(taskID) == "" {
+		return nil, ErrTaskIDRequired
+	}
+	if err := s.authorize(ctx, taskID); err != nil {
+		return nil, err
+	}
+	repo, err := s.previewFeedbackRepo()
+	if err != nil {
+		return nil, err
+	}
+	snapshot, err := repo.ListTaskPreviewFeedback(ctx, taskID)
+	return snapshot, mapPreviewFeedbackError(err)
+}
+
+func (s *PlanService) CreatePreviewFeedback(
+	ctx context.Context,
+	item *models.TaskPreviewFeedback,
+) (*models.TaskPreviewFeedbackSnapshot, error) {
+	if err := validatePreviewFeedbackIdentity(item); err != nil {
+		return nil, err
+	}
+	if err := previewfeedback.ValidateItem(item); err != nil {
+		return nil, err
+	}
+	if err := s.authorize(ctx, item.TaskID); err != nil {
+		return nil, err
+	}
+	repo, err := s.previewFeedbackRepo()
+	if err != nil {
+		return nil, err
+	}
+	ownerID, workspaceID, err := s.previewScreenshotScope(ctx, item)
+	if err != nil {
+		return nil, err
+	}
+	if item.ScreenshotAttachmentID != "" {
+		if s.previewScreenshotValidator == nil {
+			return nil, errors.New("preview screenshot validation is unavailable")
+		}
+		if err := s.previewScreenshotValidator.ValidatePreviewScreenshot(
+			ctx, ownerID, workspaceID, item.TaskID, item.ScreenshotAttachmentID,
+		); err != nil {
+			return nil, err
+		}
+	}
+	snapshot, err := repo.CreateTaskPreviewFeedback(ctx, item, ownerID, workspaceID)
+	if err != nil {
+		return snapshot, mapPreviewFeedbackError(err)
+	}
+	s.publishPreviewFeedbackSnapshot(ctx, "create", snapshot)
+	return snapshot, nil
+}
+
+func (s *PlanService) UpdatePreviewFeedback(
+	ctx context.Context,
+	taskID, itemID, comment string,
+	expectedVersion int64,
+) (*models.TaskPreviewFeedbackSnapshot, error) {
+	if err := validatePreviewFeedbackMutation(taskID, itemID, expectedVersion); err != nil {
+		return nil, err
+	}
+	if err := previewfeedback.ValidateComment(comment); err != nil {
+		return nil, err
+	}
+	if err := s.authorize(ctx, taskID); err != nil {
+		return nil, err
+	}
+	repo, err := s.previewFeedbackRepo()
+	if err != nil {
+		return nil, err
+	}
+	snapshot, err := repo.UpdateTaskPreviewFeedback(ctx, taskID, itemID, comment, expectedVersion)
+	if err != nil {
+		return snapshot, mapPreviewFeedbackError(err)
+	}
+	s.publishPreviewFeedbackSnapshot(ctx, "update", snapshot)
+	return snapshot, nil
+}
+
+func (s *PlanService) DeletePreviewFeedback(
+	ctx context.Context,
+	taskID, itemID string,
+	expectedVersion int64,
+) (*models.TaskPreviewFeedbackSnapshot, error) {
+	if err := validatePreviewFeedbackMutation(taskID, itemID, expectedVersion); err != nil {
+		return nil, err
+	}
+	if err := s.authorize(ctx, taskID); err != nil {
+		return nil, err
+	}
+	repo, err := s.previewFeedbackRepo()
+	if err != nil {
+		return nil, err
+	}
+	snapshot, released, err := repo.DeleteTaskPreviewFeedback(ctx, taskID, itemID, expectedVersion)
+	if err != nil {
+		return snapshot, mapPreviewFeedbackError(err)
+	}
+	s.publishPreviewFeedbackSnapshot(ctx, "delete", snapshot)
+	s.cleanupPreviewScreenshots(ctx, released)
+	return snapshot, nil
+}
+
+func (s *PlanService) ClearPreviewFeedback(
+	ctx context.Context,
+	taskID string,
+	expectedRevision int64,
+) (*models.TaskPreviewFeedbackSnapshot, error) {
+	if strings.TrimSpace(taskID) == "" {
+		return nil, ErrTaskIDRequired
+	}
+	if expectedRevision < 0 {
+		return nil, ErrPreviewFeedbackRevisionInvalid
+	}
+	if err := s.authorize(ctx, taskID); err != nil {
+		return nil, err
+	}
+	repo, err := s.previewFeedbackRepo()
+	if err != nil {
+		return nil, err
+	}
+	snapshot, released, err := repo.ClearTaskPreviewFeedback(ctx, taskID, expectedRevision)
+	if err != nil {
+		return snapshot, mapPreviewFeedbackError(err)
+	}
+	s.publishPreviewFeedbackSnapshot(ctx, "clear", snapshot)
+	s.cleanupPreviewScreenshots(ctx, released)
+	return snapshot, nil
+}
+
+func validatePreviewFeedbackIdentity(item *models.TaskPreviewFeedback) error {
+	if item == nil || strings.TrimSpace(item.TaskID) == "" {
+		return ErrTaskIDRequired
+	}
+	if strings.TrimSpace(item.ID) == "" {
+		return ErrPreviewFeedbackIDRequired
+	}
+	if uuid.Validate(item.ID) != nil {
+		return ErrPreviewFeedbackIDInvalid
+	}
+	return nil
+}
+
+func validatePreviewFeedbackMutation(taskID, itemID string, expectedVersion int64) error {
+	if strings.TrimSpace(taskID) == "" {
+		return ErrTaskIDRequired
+	}
+	if strings.TrimSpace(itemID) == "" {
+		return ErrPreviewFeedbackIDRequired
+	}
+	if uuid.Validate(itemID) != nil {
+		return ErrPreviewFeedbackIDInvalid
+	}
+	if expectedVersion <= 0 {
+		return ErrPreviewFeedbackVersionRequired
+	}
+	return nil
+}
+
+func (s *PlanService) previewScreenshotScope(
+	ctx context.Context,
+	item *models.TaskPreviewFeedback,
+) (string, string, error) {
+	if item.ScreenshotAttachmentID == "" {
+		return "", "", nil
+	}
+	identity, ok := authn.IdentityFromContext(ctx)
+	if !ok || strings.TrimSpace(identity.UserID) == "" {
+		return "", "", models.ErrAttachmentForbidden
+	}
+	task, err := s.repo.GetTask(ctx, item.TaskID)
+	if err != nil {
+		return "", "", err
+	}
+	return identity.UserID, task.WorkspaceID, nil
+}
+
+func mapPreviewFeedbackError(err error) error {
+	if err == nil {
+		return nil
+	}
+	if errors.Is(err, repository.ErrTaskPreviewFeedbackChanged) {
+		return ErrTaskPreviewFeedbackChanged
+	}
+	if errors.Is(err, repository.ErrTaskNotFound) {
+		return repository.ErrTaskNotFound
+	}
+	return err
+}
+
+func (s *PlanService) publishPreviewFeedbackSnapshot(
+	ctx context.Context,
+	mutation string,
+	snapshot *models.TaskPreviewFeedbackSnapshot,
+) {
+	if s.eventBus == nil {
+		return
+	}
+	if err := s.eventBus.Publish(ctx, events.TaskPreviewFeedbackChanged,
+		bus.NewEvent(events.TaskPreviewFeedbackChanged, "preview-feedback-service", snapshot)); err != nil {
+		s.logger.Error("publish preview feedback snapshot",
+			zap.String("task_id", snapshot.TaskID),
+			zap.Int64("revision", snapshot.Revision),
+			zap.String("mutation", mutation),
+			zap.Int("item_count", len(snapshot.Items)),
+			zap.Error(err),
+		)
+	}
+}
+
+func (s *PlanService) cleanupPreviewScreenshots(
+	ctx context.Context,
+	attachments []*models.TaskMessageAttachment,
+) {
+	if s.previewCleaner == nil || len(attachments) == 0 {
+		return
+	}
+	if err := s.previewCleaner.DeleteDescriptors(ctx, attachments); err != nil {
+		s.logger.Warn("cleanup preview feedback screenshots",
+			zap.Int("attachment_count", len(attachments)), zap.Error(err))
+	}
+}
diff --git a/apps/backend/internal/task/service/preview_feedback_service_test.go b/apps/backend/internal/task/service/preview_feedback_service_test.go
new file mode 100644
index 0000000000..da66d14941
--- /dev/null
+++ b/apps/backend/internal/task/service/preview_feedback_service_test.go
@@ -0,0 +1,120 @@
+package service
+
+import (
+	"context"
+	"encoding/json"
+	"errors"
+	"testing"
+
+	"github.com/kandev/kandev/internal/task/models"
+)
+
+type previewFeedbackServiceContract interface {
+	ListPreviewFeedback(context.Context, string) (*models.TaskPreviewFeedbackSnapshot, error)
+	CreatePreviewFeedback(context.Context, *models.TaskPreviewFeedback) (*models.TaskPreviewFeedbackSnapshot, error)
+	UpdatePreviewFeedback(context.Context, string, string, string, int64) (*models.TaskPreviewFeedbackSnapshot, error)
+	DeletePreviewFeedback(context.Context, string, string, int64) (*models.TaskPreviewFeedbackSnapshot, error)
+	ClearPreviewFeedback(context.Context, string, int64) (*models.TaskPreviewFeedbackSnapshot, error)
+}
+
+type recordingPreviewScreenshotValidator struct {
+	ownerID, workspaceID, taskID, attachmentID string
+	err                                        error
+}
+
+func (v *recordingPreviewScreenshotValidator) ValidatePreviewScreenshot(
+	_ context.Context,
+	ownerID, workspaceID, taskID, attachmentID string,
+) error {
+	v.ownerID = ownerID
+	v.workspaceID = workspaceID
+	v.taskID = taskID
+	v.attachmentID = attachmentID
+	return v.err
+}
+
+func requirePreviewFeedbackService(t *testing.T, svc *PlanService) previewFeedbackServiceContract {
+	t.Helper()
+	contract, ok := any(svc).(previewFeedbackServiceContract)
+	if !ok {
+		t.Fatal("PlanService does not implement task preview feedback operations")
+	}
+	return contract
+}
+
+func TestPreviewFeedbackServiceAuthorizesPublishesAndMapsConflicts(t *testing.T) {
+	svc, eventBus, repo := createTestPlanService(t)
+	ctx := context.Background()
+	seedTask(t, ctx, repo, "task-preview-feedback-service")
+	eventBus.ClearEvents()
+
+	var authorized []string
+	svc.SetTaskAuthorizer(func(_ context.Context, taskID string) error {
+		authorized = append(authorized, taskID)
+		if taskID == "task-preview-denied" {
+			return errors.New("denied")
+		}
+		return nil
+	})
+	feedback := requirePreviewFeedbackService(t, svc)
+	created, err := feedback.CreatePreviewFeedback(ctx, &models.TaskPreviewFeedback{
+		ID: "7b014fea-f9ea-4365-a8c6-17ad1b0b0c4f", TaskID: "task-preview-feedback-service",
+		Kind: models.TaskPreviewFeedbackText, Comment: "Increase contrast",
+		SourceKind: models.TaskPreviewFeedbackBrowser, SourceLabel: "Local app",
+		PageRoute: "/products", PageTitle: "Products", SelectedText: "Choose a plan",
+		TextAnchor: json.RawMessage(`{"start":{"path":[0],"offset":0}}`),
+	})
+	if err != nil || created.Revision != 1 || len(created.Items) != 1 {
+		t.Fatalf("CreatePreviewFeedback = %#v, %v", created, err)
+	}
+	if len(authorized) != 1 || authorized[0] != "task-preview-feedback-service" {
+		t.Fatalf("authorized task IDs = %v", authorized)
+	}
+	published := eventBus.GetPublishedEvents()
+	if len(published) != 1 || published[0].Type != "task.preview_feedback.changed" {
+		t.Fatalf("published events = %#v", published)
+	}
+
+	eventBus.ClearEvents()
+	stale, err := feedback.UpdatePreviewFeedback(
+		ctx, "task-preview-feedback-service", created.Items[0].ID, "Stale", 9,
+	)
+	if err == nil || stale.Revision != 1 {
+		t.Fatalf("stale update = %#v, %v", stale, err)
+	}
+	if len(eventBus.GetPublishedEvents()) != 0 {
+		t.Fatal("failed mutation published an event")
+	}
+	if _, err := feedback.ListPreviewFeedback(ctx, "task-preview-denied"); err == nil {
+		t.Fatal("denied list succeeded")
+	}
+}
+
+func TestPreviewFeedbackServiceValidatesScreenshotBeforeClaim(t *testing.T) {
+	svc, _, repo := createTestPlanService(t)
+	seedTask(t, context.Background(), repo, "task-preview-screenshot-validation")
+	validationErr := errors.New("invalid screenshot bytes")
+	validator := &recordingPreviewScreenshotValidator{err: validationErr}
+	svc.SetPreviewScreenshotValidator(validator)
+
+	_, err := svc.CreatePreviewFeedback(ctxAs("owner-preview"), &models.TaskPreviewFeedback{
+		ID: "db6b016a-717b-4ae8-b9a0-f4eb8eb723bf", TaskID: "task-preview-screenshot-validation",
+		Kind: models.TaskPreviewFeedbackScreenshot, Comment: "The form clips here",
+		SourceKind: models.TaskPreviewFeedbackBrowser, SourceLabel: "Checkout",
+		PageRoute: "/checkout", PageTitle: "Checkout",
+		CaptureRect:            json.RawMessage(`{"x":1,"y":2,"width":320,"height":180}`),
+		ScreenshotAttachmentID: "staged-screenshot",
+	})
+	if !errors.Is(err, validationErr) {
+		t.Fatalf("CreatePreviewFeedback error = %v, want validator error", err)
+	}
+	if validator.ownerID != "owner-preview" || validator.workspaceID != "ws-plan" ||
+		validator.taskID != "task-preview-screenshot-validation" ||
+		validator.attachmentID != "staged-screenshot" {
+		t.Fatalf("validator scope = %#v", validator)
+	}
+	snapshot, listErr := svc.ListPreviewFeedback(context.Background(), "task-preview-screenshot-validation")
+	if listErr != nil || len(snapshot.Items) != 0 {
+		t.Fatalf("snapshot after rejected screenshot = %#v, %v", snapshot, listErr)
+	}
+}
diff --git a/apps/backend/internal/task/service/service_attachments.go b/apps/backend/internal/task/service/service_attachments.go
index d7462de52f..e767bc4b21 100644
--- a/apps/backend/internal/task/service/service_attachments.go
+++ b/apps/backend/internal/task/service/service_attachments.go
@@ -7,9 +7,94 @@ import (
 	"github.com/kandev/kandev/internal/auth/authn"
 	"github.com/kandev/kandev/internal/orchestrator/messagequeue"
 	"github.com/kandev/kandev/internal/task/models"
+	"github.com/kandev/kandev/internal/task/repository/previewfeedbacktx"
 	v1 "github.com/kandev/kandev/pkg/api/v1"
 )
 
+// PreviewFeedbackAttachments returns server-owned screenshot descriptors for
+// the exact visible snapshot submitted by the composer.
+func (s *Service) PreviewFeedbackAttachments(
+	ctx context.Context,
+	taskID string,
+	refs []models.TaskPreviewFeedbackRef,
+) ([]v1.MessageAttachment, error) {
+	if len(refs) == 0 {
+		return nil, nil
+	}
+	if _, err := s.GetTask(ctx, taskID); err != nil {
+		return nil, err
+	}
+	repo, ok := s.messages.(interface {
+		ListTaskPreviewFeedback(context.Context, string) (*models.TaskPreviewFeedbackSnapshot, error)
+	})
+	if !ok {
+		return nil, errors.New("preview feedback repository is unavailable")
+	}
+	snapshot, err := repo.ListTaskPreviewFeedback(ctx, taskID)
+	if err != nil {
+		return nil, err
+	}
+	wanted, err := wantedPreviewFeedbackVersions(refs, snapshot)
+	if err != nil {
+		return nil, err
+	}
+	attachments, matched, err := collectPreviewFeedbackAttachments(snapshot, wanted)
+	if err != nil {
+		return nil, err
+	}
+	if matched != len(refs) {
+		return nil, &previewfeedbacktx.FeedbackChangedError{Snapshot: snapshot}
+	}
+	return attachments, nil
+}
+
+func wantedPreviewFeedbackVersions(
+	refs []models.TaskPreviewFeedbackRef,
+	snapshot *models.TaskPreviewFeedbackSnapshot,
+) (map[string]int64, error) {
+	wanted := make(map[string]int64, len(refs))
+	for _, ref := range refs {
+		if ref.ID == "" || ref.Version <= 0 {
+			return nil, &previewfeedbacktx.FeedbackChangedError{Snapshot: snapshot}
+		}
+		if _, duplicate := wanted[ref.ID]; duplicate {
+			return nil, &previewfeedbacktx.FeedbackChangedError{Snapshot: snapshot}
+		}
+		wanted[ref.ID] = ref.Version
+	}
+	return wanted, nil
+}
+
+func collectPreviewFeedbackAttachments(
+	snapshot *models.TaskPreviewFeedbackSnapshot,
+	wanted map[string]int64,
+) ([]v1.MessageAttachment, int, error) {
+	attachments := make([]v1.MessageAttachment, 0)
+	matched := 0
+	for _, item := range snapshot.Items {
+		version, selected := wanted[item.ID]
+		if !selected {
+			continue
+		}
+		if item.Version != version {
+			return nil, 0, &previewfeedbacktx.FeedbackChangedError{Snapshot: snapshot}
+		}
+		matched++
+		if item.Kind != models.TaskPreviewFeedbackScreenshot {
+			continue
+		}
+		attachment := item.ScreenshotAttachment
+		if attachment == nil || attachment.ID != item.ScreenshotAttachmentID {
+			return nil, 0, models.ErrAttachmentClaimConflict
+		}
+		attachments = append(attachments, v1.MessageAttachment{
+			Type: attachment.Kind, AttachmentID: attachment.ID, MimeType: attachment.MimeType,
+			Name: attachment.Name, SizeBytes: attachment.SizeBytes, DeliveryMode: attachment.DeliveryMode,
+		})
+	}
+	return attachments, matched, nil
+}
+
 // ClaimMessageAttachments binds staged descriptors to a task/session after
 // the normal task and session authorization checks have completed.
 func (s *Service) ClaimMessageAttachments(ctx context.Context, taskID, sessionID string, attachments []v1.MessageAttachment) error {
diff --git a/apps/backend/internal/task/service/service_message_preview_feedback_test.go b/apps/backend/internal/task/service/service_message_preview_feedback_test.go
new file mode 100644
index 0000000000..50eb303195
--- /dev/null
+++ b/apps/backend/internal/task/service/service_message_preview_feedback_test.go
@@ -0,0 +1,75 @@
+package service
+
+import (
+	"context"
+	"encoding/json"
+	"strings"
+	"testing"
+
+	"github.com/kandev/kandev/internal/events"
+	"github.com/kandev/kandev/internal/task/models"
+	sqliterepo "github.com/kandev/kandev/internal/task/repository/sqlite"
+)
+
+func TestServiceCreateMessageWithPreviewFeedbackConsumesAndReplays(t *testing.T) {
+	svc, eventBus, repo := createTestService(t)
+	ctx := context.Background()
+	sessionID, turnID := seedServicePlanComment(t, ctx, repo, "preview")
+	preview := seedServicePreviewFeedback(t, ctx, repo, "preview")
+	eventBus.ClearEvents()
+	request := &CreateMessageRequest{
+		TaskSessionID: sessionID, TaskID: "task-123", TurnID: turnID,
+		Content: "typed body", AuthorType: "user",
+		PreviewFeedbackRefs:   []models.TaskPreviewFeedbackRef{{ID: preview.ID, Version: 1}},
+		RequirePrimarySession: true,
+	}
+
+	first, err := svc.CreateMessageIdempotent(ctx, "message-service-preview-feedback", request)
+	if err != nil {
+		t.Fatalf("CreateMessageIdempotent: %v", err)
+	}
+	for _, want := range []string{"typed body", "### Web Preview Feedback", "Runtime total", "node_path"} {
+		if !strings.Contains(first.Content, want) {
+			t.Fatalf("stored content missing %q:\n%s", want, first.Content)
+		}
+	}
+	eventTypes := eventTypesForPlanCommentTest(eventBus)
+	if len(eventTypes) != 3 || eventTypes[0] != events.MessageAdded ||
+		eventTypes[1] != events.SessionPendingActionChanged ||
+		eventTypes[2] != events.TaskPreviewFeedbackChanged {
+		t.Fatalf("published event types = %v", eventTypes)
+	}
+
+	replayed, err := svc.CreateMessageIdempotent(ctx, "message-service-preview-feedback", request)
+	if err != nil || replayed.ID != first.ID || replayed.Content != first.Content {
+		t.Fatalf("replay=%#v err=%v", replayed, err)
+	}
+	pending, err := repo.ListTaskPreviewFeedback(ctx, "task-123")
+	if err != nil || len(pending.Items) != 0 || pending.Revision != 2 {
+		t.Fatalf("pending snapshot=%#v err=%v", pending, err)
+	}
+}
+
+func seedServicePreviewFeedback(
+	t *testing.T,
+	ctx context.Context,
+	repo *sqliterepo.Repository,
+	suffix string,
+) *models.TaskPreviewFeedback {
+	t.Helper()
+	item := &models.TaskPreviewFeedback{
+		ID: "preview-service-" + suffix, TaskID: "task-123",
+		Kind: models.TaskPreviewFeedbackText, Comment: "Runtime total",
+		SourceKind: models.TaskPreviewFeedbackBrowser, SourceLabel: "Local app",
+		PageRoute: "/totals", SelectedText: "$42",
+		TextAnchor: json.RawMessage(`{
+			"start":{"node_path":[0],"offset":0},
+			"end":{"node_path":[0],"offset":3},
+			"containing_element":{"tag":"strong","outer_html":"<strong>$42</strong>"}
+		}`),
+	}
+	if _, err := repo.CreateTaskPreviewFeedback(ctx, item, "", ""); err != nil {
+		t.Fatal(err)
+	}
+	return item
+}
diff --git a/apps/backend/internal/task/service/service_messages.go b/apps/backend/internal/task/service/service_messages.go
index 3b0b67850e..594978ae28 100644
--- a/apps/backend/internal/task/service/service_messages.go
+++ b/apps/backend/internal/task/service/service_messages.go
@@ -17,6 +17,7 @@ import (
 	"github.com/kandev/kandev/internal/orchestrator/messagequeue"
 	"github.com/kandev/kandev/internal/task/models"
 	"github.com/kandev/kandev/internal/task/plancomments"
+	"github.com/kandev/kandev/internal/task/previewfeedback"
 	"github.com/kandev/kandev/internal/task/repository/admission"
 	"github.com/kandev/kandev/internal/task/repository/plancommenttx"
 	"github.com/kandev/kandev/internal/task/repository/repoerrors"
@@ -43,6 +44,37 @@ type planCommentMessageWriter interface {
 	) (*models.TaskPlanCommentSnapshot, error)
 }
 
+type taskFeedbackMessageWriter interface {
+	CreateMessageWithTaskFeedback(
+		context.Context,
+		*models.Message,
+		[]models.TaskPlanCommentRef,
+		[]models.TaskPreviewFeedbackRef,
+		bool,
+		models.TaskSessionState,
+		*messagequeue.QueueAttachmentClaim,
+	) (*models.TaskPlanCommentSnapshot, *models.TaskPreviewFeedbackSnapshot, error)
+}
+
+type initialTaskBriefTaskFeedbackMessageWriter interface {
+	CreateMessageWithTaskFeedbackWithInitialTaskBrief(
+		context.Context,
+		*models.Message,
+		*admission.InitialTaskBriefCandidate,
+		[]models.TaskPlanCommentRef,
+		[]models.TaskPreviewFeedbackRef,
+		bool,
+		models.TaskSessionState,
+		*messagequeue.QueueAttachmentClaim,
+	) (*models.TaskPlanCommentSnapshot, *models.TaskPreviewFeedbackSnapshot, error)
+}
+
+type messageFeedbackSnapshots struct {
+	plan    *models.TaskPlanCommentSnapshot
+	preview *models.TaskPreviewFeedbackSnapshot
+	receipt *models.ConversationMutationReceipt
+}
+
 type queuedPlanCommentMessageWriter interface {
 	CreateMessageWithPlanCommentsAndQueue(
 		context.Context,
@@ -56,6 +88,35 @@ type queuedPlanCommentMessageWriter interface {
 	) (*models.TaskPlanCommentSnapshot, error)
 }
 
+type queuedTaskFeedbackMessageWriter interface {
+	CreateMessageWithTaskFeedbackAndQueue(
+		context.Context,
+		*models.Message,
+		*messagequeue.QueuedMessage,
+		[]models.TaskPlanCommentRef,
+		[]models.TaskPreviewFeedbackRef,
+		bool,
+		models.TaskSessionState,
+		*messagequeue.QueueAttachmentClaim,
+		int,
+	) (*models.TaskPlanCommentSnapshot, *models.TaskPreviewFeedbackSnapshot, error)
+}
+
+type initialTaskBriefQueuedTaskFeedbackMessageWriter interface {
+	CreateMessageWithTaskFeedbackAndQueueWithInitialTaskBrief(
+		context.Context,
+		*models.Message,
+		*messagequeue.QueuedMessage,
+		*admission.InitialTaskBriefCandidate,
+		[]models.TaskPlanCommentRef,
+		[]models.TaskPreviewFeedbackRef,
+		bool,
+		models.TaskSessionState,
+		*messagequeue.QueueAttachmentClaim,
+		int,
+	) (*models.TaskPlanCommentSnapshot, *models.TaskPreviewFeedbackSnapshot, error)
+}
+
 type initialTaskBriefMessageWriter interface {
 	CreateMessageWithInitialTaskBrief(context.Context, *models.Message, *admission.InitialTaskBriefCandidate) error
 }
@@ -177,7 +238,7 @@ func (s *Service) acquireMessageCreateAdmission(
 	messageID string,
 	req *CreateMessageRequest,
 ) (context.Context, func(), error) {
-	if req != nil && len(req.PlanCommentRefs) > 0 {
+	if req != nil && (len(req.PlanCommentRefs) > 0 || len(req.PreviewFeedbackRefs) > 0) {
 		return s.AcquirePlanCommentAndMessageAdmission(ctx, req.TaskID, messageID)
 	}
 	return s.AcquireMessageAdmission(ctx, messageID)
@@ -261,15 +322,15 @@ func (s *Service) CreateMessage(ctx context.Context, req *CreateMessageRequest)
 		// as an explicit import and reject same-microsecond creates.
 	}
 
-	snapshot, receipt, err := s.persistMessage(ctx, message, req)
+	snapshots, err := s.persistMessage(ctx, message, req)
 	if err != nil {
 		s.logger.Error("failed to create message", zap.Error(err))
 		return nil, err
 	}
 
 	// Publish message.added event
-	_ = s.publishMessageEvent(ctx, events.MessageAdded, message, receipt)
-	s.publishMessagePlanCommentSnapshot(ctx, snapshot)
+	_ = s.publishMessageEvent(ctx, events.MessageAdded, message, snapshots.receipt)
+	s.publishMessageFeedbackSnapshots(ctx, snapshots)
 
 	s.logger.Info("message created",
 		zap.String("message_id", message.ID),
@@ -343,6 +404,46 @@ type planCommentMessageValidator interface {
 	) error
 }
 
+type taskFeedbackMessageValidator interface {
+	ValidateMessageTaskFeedback(
+		context.Context,
+		string,
+		string,
+		string,
+		[]models.TaskPlanCommentRef,
+		[]models.TaskPreviewFeedbackRef,
+		bool,
+		models.TaskSessionState,
+	) error
+}
+
+// ValidateTaskFeedbackMessage rejects stale preview references before stateful
+// workflow hooks. Persistence repeats this under the final transaction.
+func (s *Service) ValidateTaskFeedbackMessage(
+	ctx context.Context,
+	taskID, sessionID, content string,
+	planRefs []models.TaskPlanCommentRef,
+	previewRefs []models.TaskPreviewFeedbackRef,
+	requirePrimary bool,
+	expectedState models.TaskSessionState,
+) error {
+	if len(previewRefs) == 0 {
+		return s.ValidatePlanCommentMessage(
+			ctx, taskID, sessionID, content, planRefs, requirePrimary, expectedState,
+		)
+	}
+	validator, ok := s.messages.(taskFeedbackMessageValidator)
+	if !ok {
+		return errors.New("task feedback message validation is unavailable")
+	}
+	if len(planRefs) > 0 {
+		content = plancomments.WithPlaceholder(content)
+	}
+	return validator.ValidateMessageTaskFeedback(
+		ctx, taskID, sessionID, content, planRefs, previewRefs, requirePrimary, expectedState,
+	)
+}
+
 // ValidatePlanCommentMessage rejects stale references before callers execute
 // stateful turn-start hooks. Persistence repeats the same validation under its
 // atomic message/comment boundary to close races.
@@ -407,22 +508,42 @@ func (s *Service) CreateQueuedMessageIdempotent(
 	queued.Content = message.Content
 	queued.QueuedBy = messagequeue.QueuedByUser
 
-	writer, ok := s.messages.(queuedPlanCommentMessageWriter)
-	if !ok {
-		return nil, errors.New("queued plan comment message admission is unavailable")
-	}
-	var snapshot *models.TaskPlanCommentSnapshot
+	var snapshots messageFeedbackSnapshots
 	if req.InitialTaskBrief != nil {
-		initialWriter, initialOK := s.messages.(initialTaskBriefQueuedPlanCommentMessageWriter)
-		if !initialOK {
-			return nil, errors.New("queued initial task brief admission is unavailable")
+		if len(req.PreviewFeedbackRefs) > 0 {
+			writer, ok := s.messages.(initialTaskBriefQueuedTaskFeedbackMessageWriter)
+			if !ok {
+				return nil, errors.New("queued preview feedback initial task brief admission is unavailable")
+			}
+			snapshots.plan, snapshots.preview, err = writer.CreateMessageWithTaskFeedbackAndQueueWithInitialTaskBrief(
+				ctx, message, queued, req.InitialTaskBrief, req.PlanCommentRefs, req.PreviewFeedbackRefs,
+				req.RequirePrimarySession, req.ExpectedSessionState, req.AttachmentClaim, maxPerSession,
+			)
+		} else {
+			initialWriter, initialOK := s.messages.(initialTaskBriefQueuedPlanCommentMessageWriter)
+			if !initialOK {
+				return nil, errors.New("queued initial task brief admission is unavailable")
+			}
+			snapshots.plan, err = initialWriter.CreateMessageWithPlanCommentsAndQueueWithInitialTaskBrief(
+				ctx, message, queued, req.InitialTaskBrief, req.PlanCommentRefs,
+				req.RequirePrimarySession, req.ExpectedSessionState, req.AttachmentClaim, maxPerSession,
+			)
 		}
-		snapshot, err = initialWriter.CreateMessageWithPlanCommentsAndQueueWithInitialTaskBrief(
-			ctx, message, queued, req.InitialTaskBrief, req.PlanCommentRefs,
+	} else if len(req.PreviewFeedbackRefs) > 0 {
+		writer, ok := s.messages.(queuedTaskFeedbackMessageWriter)
+		if !ok {
+			return nil, errors.New("queued task feedback message admission is unavailable")
+		}
+		snapshots.plan, snapshots.preview, err = writer.CreateMessageWithTaskFeedbackAndQueue(
+			ctx, message, queued, req.PlanCommentRefs, req.PreviewFeedbackRefs,
 			req.RequirePrimarySession, req.ExpectedSessionState, req.AttachmentClaim, maxPerSession,
 		)
 	} else {
-		snapshot, err = writer.CreateMessageWithPlanCommentsAndQueue(
+		writer, ok := s.messages.(queuedPlanCommentMessageWriter)
+		if !ok {
+			return nil, errors.New("queued plan comment message admission is unavailable")
+		}
+		snapshots.plan, err = writer.CreateMessageWithPlanCommentsAndQueue(
 			ctx, message, queued, req.PlanCommentRefs, req.RequirePrimarySession,
 			req.ExpectedSessionState, req.AttachmentClaim, maxPerSession,
 		)
@@ -436,7 +557,7 @@ func (s *Service) CreateQueuedMessageIdempotent(
 	}
 
 	_ = s.publishMessageEvent(ctx, events.MessageAdded, message)
-	s.publishMessagePlanCommentSnapshot(ctx, snapshot)
+	s.publishMessageFeedbackSnapshots(ctx, &snapshots)
 	s.logger.Info("queued message created with ID",
 		zap.String("message_id", message.ID),
 		zap.String("session_id", message.TaskSessionID),
@@ -452,8 +573,8 @@ func validateQueuedPlanCommentMessage(
 	if id == "" {
 		return errors.New("message id is required for idempotent creation")
 	}
-	if req == nil || len(req.PlanCommentRefs) == 0 {
-		return errors.New("plan comment refs are required for queued message creation")
+	if req == nil || len(req.PlanCommentRefs) == 0 && len(req.PreviewFeedbackRefs) == 0 {
+		return errors.New("task feedback refs are required for queued message creation")
 	}
 	if queued == nil {
 		return errors.New("queued message is required")
@@ -519,7 +640,7 @@ func (s *Service) CreateMessageWithID(ctx context.Context, id string, req *Creat
 		return nil, err
 	}
 
-	snapshot, receipt, err := s.createMessageWithRequestRetry(
+	snapshots, err := s.createMessageWithRequestRetry(
 		ctx, message, req, messageCreateMaxRetries, messageCreateRetryDelay,
 	)
 	if err != nil {
@@ -527,8 +648,8 @@ func (s *Service) CreateMessageWithID(ctx context.Context, id string, req *Creat
 	}
 
 	// Publish message.added event
-	_ = s.publishMessageEvent(ctx, events.MessageAdded, message, receipt)
-	s.publishMessagePlanCommentSnapshot(ctx, snapshot)
+	_ = s.publishMessageEvent(ctx, events.MessageAdded, message, snapshots.receipt)
+	s.publishMessageFeedbackSnapshots(ctx, snapshots)
 
 	s.logger.Info("message created with ID",
 		zap.String("message_id", message.ID),
@@ -660,20 +781,19 @@ func (s *Service) createMessageWithRequestRetry(
 	req *CreateMessageRequest,
 	maxRetries int,
 	retryDelay time.Duration,
-) (*models.TaskPlanCommentSnapshot, *models.ConversationMutationReceipt, error) {
+) (*messageFeedbackSnapshots, error) {
 	var err error
 	for attempt := 0; attempt < maxRetries; attempt++ {
-		var snapshot *models.TaskPlanCommentSnapshot
-		var receipt *models.ConversationMutationReceipt
-		snapshot, receipt, err = s.persistMessage(ctx, message, req)
+		var snapshots *messageFeedbackSnapshots
+		snapshots, err = s.persistMessage(ctx, message, req)
 		if err == nil {
-			return snapshot, receipt, nil
+			return snapshots, nil
 		}
 		if ctx.Err() != nil {
-			return nil, nil, ctx.Err()
+			return nil, ctx.Err()
 		}
 		if errors.Is(err, repoerrors.ErrInitialTaskBriefStale) {
-			return nil, nil, err
+			return nil, err
 		}
 		if attempt < maxRetries-1 {
 			s.logger.Debug("failed to create message, retrying",
@@ -688,75 +808,100 @@ func (s *Service) createMessageWithRequestRetry(
 		zap.String("id", message.ID),
 		zap.Int("retries", maxRetries),
 		zap.Error(err))
-	return nil, nil, err
+	return nil, err
 }
 
 func (s *Service) persistMessage(
 	ctx context.Context,
 	message *models.Message,
 	req *CreateMessageRequest,
-) (*models.TaskPlanCommentSnapshot, *models.ConversationMutationReceipt, error) {
-	if len(req.PlanCommentRefs) == 0 {
+) (*messageFeedbackSnapshots, error) {
+	if len(req.PlanCommentRefs) == 0 && len(req.PreviewFeedbackRefs) == 0 {
 		if req.InitialTaskBrief != nil {
 			writer, ok := s.messages.(initialTaskBriefMessageWriter)
 			if !ok {
-				return nil, nil, errors.New("initial task brief admission is unavailable")
+				return nil, errors.New("initial task brief admission is unavailable")
 			}
-			return nil, nil, writer.CreateMessageWithInitialTaskBrief(ctx, message, req.InitialTaskBrief)
+			return &messageFeedbackSnapshots{}, writer.CreateMessageWithInitialTaskBrief(ctx, message, req.InitialTaskBrief)
 		}
 		if writer, ok := s.messages.(conversationMessageReceiptWriter); ok {
 			receipt, err := writer.CreateMessageWithConversationReceipt(ctx, message)
-			return nil, receipt, err
+			return &messageFeedbackSnapshots{receipt: receipt}, err
 		}
-		return nil, nil, s.messages.CreateMessage(ctx, message)
+		return &messageFeedbackSnapshots{}, s.messages.CreateMessage(ctx, message)
+	}
+	if len(req.PreviewFeedbackRefs) > 0 {
+		if req.InitialTaskBrief != nil {
+			writer, ok := s.messages.(initialTaskBriefTaskFeedbackMessageWriter)
+			if !ok {
+				return nil, errors.New("preview feedback initial task brief admission is unavailable")
+			}
+			planSnapshot, previewSnapshot, err := writer.CreateMessageWithTaskFeedbackWithInitialTaskBrief(
+				ctx, message, req.InitialTaskBrief, req.PlanCommentRefs, req.PreviewFeedbackRefs,
+				req.RequirePrimarySession, req.ExpectedSessionState, req.AttachmentClaim,
+			)
+			return &messageFeedbackSnapshots{plan: planSnapshot, preview: previewSnapshot}, err
+		}
+		writer, ok := s.messages.(taskFeedbackMessageWriter)
+		if !ok {
+			return nil, errors.New("task feedback message admission is unavailable")
+		}
+		planSnapshot, previewSnapshot, err := writer.CreateMessageWithTaskFeedback(
+			ctx, message, req.PlanCommentRefs, req.PreviewFeedbackRefs,
+			req.RequirePrimarySession, req.ExpectedSessionState, req.AttachmentClaim,
+		)
+		return &messageFeedbackSnapshots{plan: planSnapshot, preview: previewSnapshot}, err
 	}
 	if req.InitialTaskBrief != nil {
 		writer, ok := s.messages.(initialTaskBriefPlanCommentMessageWriter)
 		if !ok {
-			return nil, nil, errors.New("plan comment initial task brief admission is unavailable")
+			return nil, errors.New("plan comment initial task brief admission is unavailable")
 		}
 		snapshot, err := writer.CreateMessageWithPlanCommentsWithInitialTaskBrief(
 			ctx, message, req.InitialTaskBrief, req.PlanCommentRefs, req.RequirePrimarySession,
 			req.ExpectedSessionState, req.AttachmentClaim,
 		)
-		return snapshot, nil, err
+		return &messageFeedbackSnapshots{plan: snapshot}, err
 	}
 	writer, ok := s.messages.(planCommentMessageWriter)
 	if !ok {
-		return nil, nil, errors.New("plan comment message admission is unavailable")
+		return nil, errors.New("plan comment message admission is unavailable")
 	}
 	snapshot, err := writer.CreateMessageWithPlanComments(
 		ctx, message, req.PlanCommentRefs, req.RequirePrimarySession, req.ExpectedSessionState, req.AttachmentClaim,
 	)
-	return snapshot, nil, err
+	return &messageFeedbackSnapshots{plan: snapshot}, err
 }
 
 type planCommentMessageReplayIdentity struct {
-	TaskSessionID  string                      `json:"session_id"`
-	TaskID         string                      `json:"task_id"`
-	TurnID         string                      `json:"turn_id"`
-	Content        string                      `json:"content"`
-	AuthorID       string                      `json:"author_id"`
-	MessageType    string                      `json:"message_type"`
-	Metadata       map[string]interface{}      `json:"metadata"`
-	Refs           []models.TaskPlanCommentRef `json:"refs"`
-	RequirePrimary bool                        `json:"require_primary"`
+	TaskSessionID  string                          `json:"session_id"`
+	TaskID         string                          `json:"task_id"`
+	TurnID         string                          `json:"turn_id"`
+	Content        string                          `json:"content"`
+	AuthorID       string                          `json:"author_id"`
+	MessageType    string                          `json:"message_type"`
+	Metadata       map[string]interface{}          `json:"metadata"`
+	Refs           []models.TaskPlanCommentRef     `json:"refs"`
+	PreviewRefs    []models.TaskPreviewFeedbackRef `json:"preview_refs"`
+	RequirePrimary bool                            `json:"require_primary"`
 }
 
 func preparePlanCommentMessageRequest(req *CreateMessageRequest) error {
-	if req == nil || len(req.PlanCommentRefs) == 0 {
+	if req == nil || len(req.PlanCommentRefs) == 0 && len(req.PreviewFeedbackRefs) == 0 {
 		return nil
 	}
-	metadata := make(map[string]interface{}, len(req.Metadata)+2)
+	metadata := make(map[string]interface{}, len(req.Metadata)+4)
 	for key, value := range req.Metadata {
-		if key != plancomments.MetadataRefs && key != plancomments.MetadataRequestFingerprint {
+		if key != plancomments.MetadataRefs && key != plancomments.MetadataRequestFingerprint &&
+			key != previewfeedback.MetadataRefs && key != previewfeedback.MetadataRequestFingerprint {
 			metadata[key] = value
 		}
 	}
 	identity := planCommentMessageReplayIdentity{
 		TaskSessionID: req.TaskSessionID, TaskID: req.TaskID, TurnID: req.TurnID,
 		Content: req.Content, AuthorID: req.AuthorID, MessageType: req.Type,
-		Metadata: metadata, Refs: req.PlanCommentRefs, RequirePrimary: req.RequirePrimarySession,
+		Metadata: metadata, Refs: req.PlanCommentRefs, PreviewRefs: req.PreviewFeedbackRefs,
+		RequirePrimary: req.RequirePrimarySession,
 	}
 	fingerprint, err := plancomments.Fingerprint(identity)
 	if err != nil {
@@ -764,6 +909,8 @@ func preparePlanCommentMessageRequest(req *CreateMessageRequest) error {
 	}
 	metadata[plancomments.MetadataRefs] = req.PlanCommentRefs
 	metadata[plancomments.MetadataRequestFingerprint] = fingerprint
+	metadata[previewfeedback.MetadataRefs] = req.PreviewFeedbackRefs
+	metadata[previewfeedback.MetadataRequestFingerprint] = fingerprint
 	req.Metadata = metadata
 	return nil
 }
@@ -773,7 +920,7 @@ func matchesPlanCommentMessageReplay(existing *models.Message, req *CreateMessag
 		got, _ := existing.Metadata[plancomments.MetadataClientMessageFingerprint].(string)
 		return got == want
 	}
-	if len(req.PlanCommentRefs) == 0 {
+	if len(req.PlanCommentRefs) == 0 && len(req.PreviewFeedbackRefs) == 0 {
 		return true
 	}
 	want, _ := req.Metadata[plancomments.MetadataRequestFingerprint].(string)
@@ -781,6 +928,35 @@ func matchesPlanCommentMessageReplay(existing *models.Message, req *CreateMessag
 	return want != "" && got == want
 }
 
+func (s *Service) publishMessageFeedbackSnapshots(
+	ctx context.Context,
+	snapshots *messageFeedbackSnapshots,
+) {
+	if snapshots == nil {
+		return
+	}
+	s.publishMessagePlanCommentSnapshot(ctx, snapshots.plan)
+	s.publishMessagePreviewFeedbackSnapshot(ctx, snapshots.preview)
+}
+
+func (s *Service) publishMessagePreviewFeedbackSnapshot(
+	ctx context.Context,
+	snapshot *models.TaskPreviewFeedbackSnapshot,
+) {
+	if snapshot == nil || s.eventBus == nil {
+		return
+	}
+	if err := s.eventBus.Publish(ctx, events.TaskPreviewFeedbackChanged,
+		bus.NewEvent(events.TaskPreviewFeedbackChanged, "task-service", snapshot)); err != nil {
+		s.logger.Error("publish consumed preview feedback",
+			zap.String("task_id", snapshot.TaskID),
+			zap.Int64("revision", snapshot.Revision),
+			zap.Int("item_count", len(snapshot.Items)),
+			zap.Error(err),
+		)
+	}
+}
+
 func (s *Service) publishMessagePlanCommentSnapshot(
 	ctx context.Context,
 	snapshot *models.TaskPlanCommentSnapshot,
@@ -1116,13 +1292,13 @@ func (s *Service) upsertAgentPlanMessageFallback(
 	if err != nil && !errors.Is(err, sql.ErrNoRows) {
 		return fmt.Errorf("check existing agent plan message: %w", err)
 	}
-	_, receipt, err := s.createMessageWithRequestRetry(
+	snapshots, err := s.createMessageWithRequestRetry(
 		admissionCtx, message, req, messageCreateMaxRetries, messageCreateRetryDelay,
 	)
 	if err != nil {
 		return err
 	}
-	return s.publishAgentPlanMessage(admissionCtx, message, receipt, true)
+	return s.publishAgentPlanMessage(admissionCtx, message, snapshots.receipt, true)
 }
 
 func (s *Service) publishAgentPlanMessage(
diff --git a/apps/backend/internal/task/service/service_requests.go b/apps/backend/internal/task/service/service_requests.go
index 646914d193..9d783b3904 100644
--- a/apps/backend/internal/task/service/service_requests.go
+++ b/apps/backend/internal/task/service/service_requests.go
@@ -387,6 +387,7 @@ type CreateMessageRequest struct {
 	Type                  string                               `json:"type,omitempty"`
 	Metadata              map[string]interface{}               `json:"metadata,omitempty"`
 	PlanCommentRefs       []models.TaskPlanCommentRef          `json:"plan_comment_refs,omitempty"`
+	PreviewFeedbackRefs   []models.TaskPreviewFeedbackRef      `json:"preview_feedback_refs,omitempty"`
 	RequirePrimarySession bool                                 `json:"require_primary_session,omitempty"`
 	ExpectedSessionState  models.TaskSessionState              `json:"-"`
 	AttachmentClaim       *messagequeue.QueueAttachmentClaim   `json:"-"`
diff --git a/apps/backend/pkg/websocket/actions.go b/apps/backend/pkg/websocket/actions.go
index 8908c79d84..ee3f56e7c8 100644
--- a/apps/backend/pkg/websocket/actions.go
+++ b/apps/backend/pkg/websocket/actions.go
@@ -72,28 +72,33 @@ const (
 	ActionEnvironmentDelete = "environment.delete"
 
 	// Task actions
-	ActionTaskList              = "task.list"
-	ActionTaskCreate            = "task.create"
-	ActionTaskGet               = "task.get"
-	ActionTaskUpdate            = "task.update"
-	ActionTaskRepoUpdate        = "task.repository.update"
-	ActionTaskDelete            = "task.delete"
-	ActionTaskMove              = "task.move"
-	ActionTaskState             = "task.state"
-	ActionTaskArchive           = "task.archive"
-	ActionTaskRunner            = "task.runner"
-	ActionTaskPlanCreate        = "task.plan.create"
-	ActionTaskPlanGet           = "task.plan.get"
-	ActionTaskPlanUpdate        = "task.plan.update"
-	ActionTaskPlanDelete        = "task.plan.delete"
-	ActionTaskPlanRevisionsList = "task.plan.revisions.list"
-	ActionTaskPlanRevisionGet   = "task.plan.revision.get"
-	ActionTaskPlanRevert        = "task.plan.revert"
-	ActionTaskPlanImplement     = "task.plan.implementation_started"
-	ActionTaskPlanCommentsList  = "task.plan.comments.list"
-	ActionTaskPlanCommentCreate = "task.plan.comments.create"
-	ActionTaskPlanCommentUpdate = "task.plan.comments.update"
-	ActionTaskPlanCommentDelete = "task.plan.comments.delete"
+	ActionTaskList                  = "task.list"
+	ActionTaskCreate                = "task.create"
+	ActionTaskGet                   = "task.get"
+	ActionTaskUpdate                = "task.update"
+	ActionTaskRepoUpdate            = "task.repository.update"
+	ActionTaskDelete                = "task.delete"
+	ActionTaskMove                  = "task.move"
+	ActionTaskState                 = "task.state"
+	ActionTaskArchive               = "task.archive"
+	ActionTaskRunner                = "task.runner"
+	ActionTaskPlanCreate            = "task.plan.create"
+	ActionTaskPlanGet               = "task.plan.get"
+	ActionTaskPlanUpdate            = "task.plan.update"
+	ActionTaskPlanDelete            = "task.plan.delete"
+	ActionTaskPlanRevisionsList     = "task.plan.revisions.list"
+	ActionTaskPlanRevisionGet       = "task.plan.revision.get"
+	ActionTaskPlanRevert            = "task.plan.revert"
+	ActionTaskPlanImplement         = "task.plan.implementation_started"
+	ActionTaskPlanCommentsList      = "task.plan.comments.list"
+	ActionTaskPlanCommentCreate     = "task.plan.comments.create"
+	ActionTaskPlanCommentUpdate     = "task.plan.comments.update"
+	ActionTaskPlanCommentDelete     = "task.plan.comments.delete"
+	ActionTaskPreviewFeedbackList   = "task.preview_feedback.list"
+	ActionTaskPreviewFeedbackCreate = "task.preview_feedback.create"
+	ActionTaskPreviewFeedbackUpdate = "task.preview_feedback.update"
+	ActionTaskPreviewFeedbackDelete = "task.preview_feedback.delete"
+	ActionTaskPreviewFeedbackClear  = "task.preview_feedback.clear"
 
 	// Plugin-backed canvas lifecycle notifications. These are owner-scoped
 	// workspace/task events and contain no application content or capabilities.
@@ -215,6 +220,7 @@ const (
 	ActionTaskPlanRevisionCreated        = "task.plan.revision.created"
 	ActionTaskPlanReverted               = "task.plan.reverted"
 	ActionTaskPlanCommentsChanged        = "task.plan.comments.changed"
+	ActionTaskPreviewFeedbackChanged     = "task.preview_feedback.changed"
 	ActionTaskWalkthroughGet             = "task.walkthrough.get"
 	ActionTaskWalkthroughDelete          = "task.walkthrough.delete"
 	ActionTaskWalkthroughCreated         = "task.walkthrough.created"
@@ -697,15 +703,16 @@ const (
 
 // Error codes
 const (
-	ErrorCodeBadRequest            = "BAD_REQUEST"
-	ErrorCodeNotFound              = "NOT_FOUND"
-	ErrorCodeInternalError         = "INTERNAL_ERROR"
-	ErrorCodeUnauthorized          = "UNAUTHORIZED"
-	ErrorCodeForbidden             = "FORBIDDEN"
-	ErrorCodeValidation            = "VALIDATION_ERROR"
-	ErrorCodeConflict              = "CONFLICT"
-	ErrorCodeUnavailable           = "UNAVAILABLE"
-	ErrorCodeUnknownAction         = "UNKNOWN_ACTION"
-	ErrorCodePlanCommentsChanged   = "plan_comments_changed"
-	ErrorCodePrimarySessionChanged = "primary_session_changed"
+	ErrorCodeBadRequest             = "BAD_REQUEST"
+	ErrorCodeNotFound               = "NOT_FOUND"
+	ErrorCodeInternalError          = "INTERNAL_ERROR"
+	ErrorCodeUnauthorized           = "UNAUTHORIZED"
+	ErrorCodeForbidden              = "FORBIDDEN"
+	ErrorCodeValidation             = "VALIDATION_ERROR"
+	ErrorCodeConflict               = "CONFLICT"
+	ErrorCodeUnavailable            = "UNAVAILABLE"
+	ErrorCodeUnknownAction          = "UNKNOWN_ACTION"
+	ErrorCodePlanCommentsChanged    = "plan_comments_changed"
+	ErrorCodePreviewFeedbackChanged = "preview_feedback_changed"
+	ErrorCodePrimarySessionChanged  = "primary_session_changed"
 )
diff --git a/apps/pnpm-lock.yaml b/apps/pnpm-lock.yaml
index b165d7dec6..b8cec56296 100644
--- a/apps/pnpm-lock.yaml
+++ b/apps/pnpm-lock.yaml
@@ -453,6 +453,9 @@ importers:
       embla-carousel-react:
         specifier: ^8.6.0
         version: 8.6.0(react@19.2.3)
+      html2canvas-pro:
+        specifier: 2.4.3
+        version: 2.4.3
       i18next:
         specifier: ^26.3.6
         version: 26.3.6(typescript@5.9.3)
@@ -3292,6 +3295,10 @@ packages:
     resolution: {integrity: sha512-BLrgEcRTwX2o6gGxGOCNyMvGSp35YofuYzw9h1IMTRmKqttAZZVU67bdb9Pr2vUHA8+j3i2tJfjO6C6+4myGTA==}
     engines: {node: 18 || 20 || >=22}
 
+  base64-arraybuffer@1.0.2:
+    resolution: {integrity: sha512-I3yl4r9QB5ZRY3XuJVEPfc2XhZO6YweFPI+UovAzn+8/hb3oJ6lnysaFcjVpkCPfVWFUDvoZ8kmVDP7WyRtYtQ==}
+    engines: {node: '>= 0.6.0'}
+
   baseline-browser-mapping@2.11.21:
     resolution: {integrity: sha512-uh8vpY/1/YyFkunIDFH/12p7/7VdPKA1hejMVEbdkEaWnUz0Hesvx5EbiU6XxjyHZIOju+ZMbQJkRh+es3/spQ==}
     engines: {node: '>=6.0.0'}
@@ -3457,6 +3464,9 @@ packages:
     resolution: {integrity: sha512-uV2QOWP2nWzsy2aMp8aRibhi9dlzF5Hgh5SHaB9OiTGEyDTiJJyx0uy51QXdyWbtAHNua4XJzUKca3OzKUd3vA==}
     engines: {node: '>= 8'}
 
+  css-line-break@2.1.0:
+    resolution: {integrity: sha512-FHcKFCZcAha3LwfVBhCQbW2nCNbkZXn7KVUJcsT5/P8YmfsVja0FMPJr0B903j/E69HUphKiV9iQArX8SDYA4w==}
+
   csstype@3.2.3:
     resolution: {integrity: sha512-z1HGKcYy2xA8AGQfwrn0PAy+PB7X/GSj3UVJW9qKyn43xWa+gl5nXmU4qqLMRzWVLFC8KusUX8T/0kCiOYpAIQ==}
 
@@ -4015,6 +4025,10 @@ packages:
   html-void-elements@3.0.0:
     resolution: {integrity: sha512-bEqo66MRXsUGxWHV5IP0PUiAWwoEjba4VCzg0LjFJBpchPaTfyfCKTG6bc5F8ucKec3q5y6qOdGyYTSBEvhCrg==}
 
+  html2canvas-pro@2.4.3:
+    resolution: {integrity: sha512-ov+EmxDc2abD2uKYpZdFWHkQkl3pu2fH0N98khT1Ojfqr3DJOuGyFIFTSfSyaWxddK9jSJu8sM7aUATxM26mDg==}
+    engines: {node: '>=16.0.0'}
+
   i18next@26.3.6:
     resolution: {integrity: sha512-Bu5Z2nAXgfVyM8xvW3jk9EKRIuX37PudsrBViThNFx7CR7aaYTpP01cxNB/E4c4UUzTDiAZRstEhsRfPOL/8xA==}
     peerDependencies:
@@ -5130,6 +5144,9 @@ packages:
     resolution: {integrity: sha512-g9ljZiwki/LfxmQADO3dEY1CbpmXT5Hm2fJ+QaGKwSXUylMybePR7/67YW7jOrrvjEgL1Fmz5kzyAjWVWLlucg==}
     engines: {node: '>=6'}
 
+  text-segmentation@1.0.3:
+    resolution: {integrity: sha512-iOiPUo/BGnZ6+54OsWxZidGCsdU8YbE4PSpdPinp7DeMtUJNJBoJ/ouUSTJjHkh1KntHaltHl/gDs2FC4i5+Nw==}
+
   tiny-invariant@1.3.3:
     resolution: {integrity: sha512-+FbBPE1o9QAYvviau/qC5SE3caw21q3xkvWKBtja5vgqOWIHHJ3ioaq1VPfn/Szqctz2bU/oYeKd9/z5BL+PVg==}
 
@@ -5280,6 +5297,9 @@ packages:
     peerDependencies:
       react: ^16.8.0 || ^17.0.0 || ^18.0.0 || ^19.0.0
 
+  utrie@1.0.2:
+    resolution: {integrity: sha512-1MLa5ouZiOmQzUbjbu9VmjLzn1QLXBhwpUa7kdLUQK+KQ5KA9I1vk5U4YHe/X2Ch7PYnJfWuWT+VbuxbGwljhw==}
+
   uuid@11.1.1:
     resolution: {integrity: sha512-vIYxrBCC/N/K+Js3qSN88go7kIfNPssr/hHCesKCQNAjmgvYS2oqr69kIufEG+O4+PfezOH4EbIeHCfFov8ZgQ==}
     hasBin: true
@@ -8274,6 +8294,8 @@ snapshots:
 
   balanced-match@4.0.4: {}
 
+  base64-arraybuffer@1.0.2: {}
+
   baseline-browser-mapping@2.11.21: {}
 
   brace-expansion@1.1.18:
@@ -8433,6 +8455,10 @@ snapshots:
       shebang-command: 2.0.0
       which: 2.0.2
 
+  css-line-break@2.1.0:
+    dependencies:
+      utrie: 1.0.2
+
   csstype@3.2.3: {}
 
   cytoscape-cose-bilkent@4.1.0(cytoscape@3.34.0):
@@ -9083,6 +9109,11 @@ snapshots:
 
   html-void-elements@3.0.0: {}
 
+  html2canvas-pro@2.4.3:
+    dependencies:
+      css-line-break: 2.1.0
+      text-segmentation: 1.0.3
+
   i18next@26.3.6(typescript@5.9.3):
     optionalDependencies:
       typescript: 5.9.3
@@ -10505,6 +10536,10 @@ snapshots:
 
   tapable@2.3.0: {}
 
+  text-segmentation@1.0.3:
+    dependencies:
+      utrie: 1.0.2
+
   tiny-invariant@1.3.3: {}
 
   tinybench@2.9.0: {}
@@ -10655,6 +10690,10 @@ snapshots:
     dependencies:
       react: 19.2.3
 
+  utrie@1.0.2:
+    dependencies:
+      base64-arraybuffer: 1.0.2
+
   uuid@11.1.1: {}
 
   vaul@1.1.2(@types/react-dom@19.2.3(@types/react@19.2.8))(@types/react@19.2.8)(react-dom@19.2.3(react@19.2.3))(react@19.2.3):
diff --git a/apps/web/components/task/browser-panel.test.tsx b/apps/web/components/task/browser-panel.test.tsx
new file mode 100644
index 0000000000..66209348ee
--- /dev/null
+++ b/apps/web/components/task/browser-panel.test.tsx
@@ -0,0 +1,97 @@
+import { cleanup, fireEvent, render, screen, waitFor } from "@testing-library/react";
+import { afterEach, describe, expect, it, vi } from "vitest";
+import { BrowserPanel } from "./browser-panel";
+
+const usePreviewCapture = vi.hoisted(() => vi.fn());
+vi.mock("@/hooks/use-preview-capture", () => ({ usePreviewCapture }));
+vi.mock("@/hooks/use-preview-console-forwarder", () => ({
+  usePreviewConsoleForwarder: vi.fn(),
+}));
+vi.mock("@/components/state-provider", () => ({
+  useAppStore: (selector: (state: unknown) => unknown) =>
+    selector({
+      tasks: { activeTaskId: "task-1", activeSessionId: "session-1" },
+      processes: { devProcessBySessionId: {}, outputsByProcessId: {} },
+    }),
+}));
+
+const capture = {
+  items: [],
+  snapshot: { task_id: "task-1", revision: 0, items: [] },
+  mode: null,
+  draft: null,
+  draftComment: "",
+  setDraftComment: vi.fn(),
+  candidateLabel: null,
+  captureError: null,
+  isRasterizing: false,
+  isUploading: false,
+  isMutating: false,
+  mutationError: null,
+  startCapture: vi.fn(),
+  cancelCapture: vi.fn(),
+  discardDraft: vi.fn(),
+  saveDraft: vi.fn(),
+  update: vi.fn(),
+  remove: vi.fn(),
+  clear: vi.fn(),
+  handleIframeLoad: vi.fn(),
+};
+
+afterEach(() => {
+  cleanup();
+  vi.unstubAllGlobals();
+});
+
+describe("BrowserPanel preview feedback", () => {
+  it("offers task-backed annotation for a localhost page through the injected proxy", () => {
+    usePreviewCapture.mockReturnValue(capture);
+    render(<BrowserPanel panelId="browser-1" params={{ url: "http://localhost:3000/products" }} />);
+
+    expect(screen.getByRole("button", { name: "Annotate (0)" })).toBeTruthy();
+    expect(usePreviewCapture).toHaveBeenCalledWith(
+      expect.objectContaining({
+        taskId: "task-1",
+        enabled: true,
+        source: {
+          kind: "browser",
+          sessionId: "session-1",
+          label: "http://localhost:3000",
+        },
+      }),
+    );
+  });
+
+  it("keeps task-backed annotation visible when secondary actions overflow", async () => {
+    class ResizeObserverMock {
+      constructor(private readonly callback: ResizeObserverCallback) {}
+
+      observe(target: Element) {
+        Object.defineProperty(target, "getBoundingClientRect", {
+          configurable: true,
+          value: () => ({ width: 240 }),
+        });
+        this.callback([{ target } as ResizeObserverEntry], this as unknown as ResizeObserver);
+      }
+
+      disconnect() {}
+    }
+
+    vi.stubGlobal("ResizeObserver", ResizeObserverMock);
+    usePreviewCapture.mockReturnValue(capture);
+    render(<BrowserPanel panelId="browser-1" params={{ url: "http://localhost:3000/products" }} />);
+
+    await waitFor(() => expect(screen.getByTestId("panel-header-overflow")).toBeTruthy());
+    expect(screen.getByRole("button", { name: "Annotate (0)" })).toBeTruthy();
+  });
+
+  it("allows the annotation popover to extend beyond the panel header", () => {
+    usePreviewCapture.mockReturnValue(capture);
+    render(<BrowserPanel panelId="browser-1" params={{ url: "http://localhost:3000/products" }} />);
+
+    fireEvent.click(screen.getByRole("button", { name: "Annotate (0)" }));
+    const actionSlot = screen.getByTestId("preview-feedback-popover").parentElement?.parentElement;
+    expect(actionSlot?.className).toContain("overflow-visible");
+    expect(actionSlot?.className).not.toContain("overflow-hidden");
+  });
+});
diff --git a/apps/web/components/task/browser-panel.tsx b/apps/web/components/task/browser-panel.tsx
index 28e6d1a96d..b03aaaa930 100644
--- a/apps/web/components/task/browser-panel.tsx
+++ b/apps/web/components/task/browser-panel.tsx
@@ -1,7 +1,7 @@
 "use client";
 
 import { memo, useState, useEffect, useMemo, useRef } from "react";
-import { IconRefresh, IconExternalLink, IconClick } from "@tabler/icons-react";
+import { IconRefresh, IconExternalLink } from "@tabler/icons-react";
 import { Button } from "@kandev/ui/button";
 import { DropdownMenuItem } from "@kandev/ui/dropdown-menu";
 import { Input } from "@kandev/ui/input";
@@ -13,11 +13,11 @@ import {
 } from "./panel-primitives";
 import { useAppStore } from "@/components/state-provider";
 import { detectPreviewUrlFromOutput, rewritePreviewUrlForProxy } from "@/lib/preview-url-detector";
-import { InspectButton } from "./inspector/inspect-button";
-import { AnnotationsPanel } from "./inspector/annotations-panel";
-import { useInspectMode } from "@/hooks/use-inspect-mode";
+import { PreviewFeedbackControls } from "./inspector/preview-feedback-controls";
+import { usePreviewCapture } from "@/hooks/use-preview-capture";
 import { usePreviewConsoleForwarder } from "@/hooks/use-preview-console-forwarder";
 import { openExternalLink } from "@/lib/desktop/external-links";
+import { previewSourceLabel } from "@/lib/preview-feedback-source";
 import { useTranslation } from "react-i18next";
 
 function BrowserPanelContent({
@@ -68,7 +68,7 @@ type BrowserPanelProps = {
   params: Record<string, unknown>;
 };
 
-function useBrowserPanelUrl(initialUrl: string, useProxy: boolean) {
+function useBrowserPanelUrl(initialUrl: string) {
   const [userUrl, setUserUrl] = useState(initialUrl);
   const [urlDraft, setUrlDraft] = useState(initialUrl);
   const [refreshKey, setRefreshKey] = useState(0);
@@ -98,12 +98,9 @@ function useBrowserPanelUrl(initialUrl: string, useProxy: boolean) {
     return rewritePreviewUrlForProxy(directUrl, activeSessionId);
   }, [directUrl, activeSessionId]);
 
-  // Default to the direct URL so the page renders normally; clicking Inspect
-  // switches to the proxied src so the inspector script can be injected. The
-  // gateway port-proxy rewrites root-absolute asset references and patches the
-  // network-facing browser APIs at runtime, so the proxied page works for SPA
-  // routers and dynamic asset URLs too.
-  const iframeSrc = useProxy && proxiedUrl ? proxiedUrl : directUrl;
+  // Eligible local pages stay behind the proxy so task markers and the capture
+  // bridge survive route changes even while selection mode is inactive.
+  const iframeSrc = proxiedUrl ?? directUrl;
 
   // Key the loading-spinner gate to the underlying URL (and the refresh key),
   // NOT to `iframeSrc`. Toggling Inspect mode flips `iframeSrc` between the
@@ -150,20 +147,29 @@ function useBrowserPanelUrl(initialUrl: string, useProxy: boolean) {
 
 export const BrowserPanel = memo(function BrowserPanel({ params }: BrowserPanelProps) {
   const iframeRef = useRef<HTMLIFrameElement>(null);
-  const inspect = useInspectMode(iframeRef);
   usePreviewConsoleForwarder(iframeRef);
-  // Inspect mode = "load this page through the proxy so the inspector script
-  // can be injected". Toggling Inspect remounts the iframe with a different src.
-  const url = useBrowserPanelUrl((params.url as string) || "", inspect.isInspectMode);
+  const activeTaskId = useAppStore((state) => state.tasks.activeTaskId);
+  const activeSessionId = useAppStore((state) => state.tasks.activeSessionId);
+  const url = useBrowserPanelUrl((params.url as string) || "");
   const showInspect = url.canProxy;
+  const capture = usePreviewCapture({
+    taskId: activeTaskId,
+    iframeRef,
+    enabled: showInspect && !!activeTaskId,
+    source: {
+      kind: "browser",
+      sessionId: activeSessionId ?? undefined,
+      label: previewSourceLabel(url.directUrl),
+    },
+  });
+
   return (
     <PanelRoot data-testid="browser-panel">
-      <BrowserPanelHeader url={url} inspect={inspect} showInspect={showInspect} />
-
-      <AnnotationsPanel
-        annotations={inspect.annotations}
-        onRemove={inspect.handleRemoveAnnotation}
-        onClear={inspect.handleClearAnnotations}
+      <BrowserPanelHeader
+        url={url}
+        capture={capture}
+        showInspect={showInspect}
+        enabled={!!activeTaskId}
       />
 
       <PanelBody padding={false} scroll={false}>
@@ -172,7 +178,7 @@ export const BrowserPanel = memo(function BrowserPanel({ params }: BrowserPanelP
           iframeSrc={url.iframeSrc}
           refreshKey={url.refreshKey}
           iframeRef={iframeRef}
-          onIframeLoad={inspect.handleIframeLoad}
+          onIframeLoad={capture.handleIframeLoad}
         />
       </PanelBody>
     </PanelRoot>
@@ -181,12 +187,14 @@ export const BrowserPanel = memo(function BrowserPanel({ params }: BrowserPanelP
 
 function BrowserPanelHeader({
   url,
-  inspect,
+  capture,
   showInspect,
+  enabled,
 }: {
   url: ReturnType<typeof useBrowserPanelUrl>;
-  inspect: ReturnType<typeof useInspectMode>;
+  capture: ReturnType<typeof usePreviewCapture>;
   showInspect: boolean;
+  enabled: boolean;
 }) {
   const { t } = useTranslation();
   const directActions = (
@@ -213,13 +221,7 @@ function BrowserPanelHeader({
       >
         <IconRefresh className="h-4 w-4" />
       </Button>
-      {showInspect && (
-        <InspectButton
-          active={inspect.isInspectMode}
-          count={inspect.annotations.length}
-          onToggle={inspect.toggleInspect}
-        />
-      )}
+      {showInspect && <PreviewFeedbackControls capture={capture} enabled={enabled} />}
     </>
   );
   const overflowActions = (
@@ -240,12 +242,6 @@ function BrowserPanelHeader({
         <IconRefresh className="size-4" />
         {t("task:refresh")}
       </DropdownMenuItem>
-      {showInspect && (
-        <DropdownMenuItem className="cursor-pointer gap-2" onSelect={inspect.toggleInspect}>
-          <IconClick className="size-4" />
-          {inspect.isInspectMode ? t("task:exitInspectMode") : t("task:enterInspectMode")}
-        </DropdownMenuItem>
-      )}
     </PanelHeaderOverflowMenu>
   );
 
@@ -268,6 +264,10 @@ function BrowserPanelHeader({
         />
       }
       right={directActions}
+      rightClassName="overflow-visible"
+      rightWhenOverflow={
+        showInspect ? <PreviewFeedbackControls capture={capture} enabled={enabled} /> : undefined
+      }
       overflow={overflowActions}
       overflowAt={420}
     />
diff --git a/apps/web/components/task/chat-context-items.test.ts b/apps/web/components/task/chat-context-items.test.ts
index 5dd5559ffd..f4f0185b51 100644
--- a/apps/web/components/task/chat-context-items.test.ts
+++ b/apps/web/components/task/chat-context-items.test.ts
@@ -91,6 +91,54 @@ describe("buildContextItems task plan comments", () => {
   });
 });
 
+describe("buildContextItems task preview feedback", () => {
+  it("opens the task-scoped collection from the context chip", () => {
+    const open = vi.fn();
+    const items = buildContextItems({
+      planContextEnabled: false,
+      contextFiles: [],
+      resolvedSessionId: "session-secondary",
+      removeContextFile: vi.fn(),
+      unpinFile: vi.fn(),
+      addPlan: vi.fn(),
+      promptsMap: new Map(),
+      pendingCommentsByFile: {},
+      handleRemoveCommentFile: vi.fn(),
+      handleRemoveComment: vi.fn(),
+      planComments: [],
+      handleClearPlanComments: vi.fn(),
+      previewFeedback: [
+        {
+          id: "preview-1",
+          version: 2,
+          comment: "Increase contrast",
+          kind: "element",
+          source_label: "Checkout preview",
+          page_route: "/cart",
+        },
+      ],
+      pendingPRFeedback: [],
+      handleRemovePRFeedback: vi.fn(),
+      handleClearPRFeedback: vi.fn(),
+      walkthroughComments: [],
+      handleRemoveWalkthroughComment: vi.fn(),
+      handleClearWalkthroughComments: vi.fn(),
+      messageComments: [],
+      handleClearMessageComments: vi.fn(),
+      taskId: "task-1",
+      onOpenPreviewFeedback: open,
+    } as never);
+
+    const item = items.find((candidate) => candidate.kind === "preview-feedback");
+    expect(item).toMatchObject({
+      kind: "preview-feedback",
+      label: "1 preview feedback item",
+      onOpen: open,
+    });
+    expect(item?.onRemove).toBeUndefined();
+  });
+});
+
 describe("buildContextItems file and directory context", () => {
   function buildItems(contextFiles: never[]) {
     return buildContextItems({
diff --git a/apps/web/components/task/chat-context-items.ts b/apps/web/components/task/chat-context-items.ts
index 461ab91fa5..4673187804 100644
--- a/apps/web/components/task/chat-context-items.ts
+++ b/apps/web/components/task/chat-context-items.ts
@@ -9,6 +9,7 @@ import type {
   WalkthroughComment,
   AgentMessageComment,
 } from "@/lib/state/slices/comments";
+import type { TaskPreviewFeedback } from "@/lib/types/http";
 
 const PLAN_CONTEXT_PATH = "plan:context";
 
@@ -27,6 +28,7 @@ export type BuildContextItemsParams = {
   onOpenFileAtLine?: (filePath: string, repositoryName?: string) => void;
   planComments: PlanComment[];
   handleClearPlanComments: () => void;
+  previewFeedback?: TaskPreviewFeedback[];
   pendingPRFeedback: PRFeedbackComment[];
   handleRemovePRFeedback: (commentId: string) => void;
   handleClearPRFeedback: () => void;
@@ -36,6 +38,7 @@ export type BuildContextItemsParams = {
   messageComments: AgentMessageComment[];
   handleClearMessageComments: () => void;
   taskId: string | null;
+  onOpenPreviewFeedback?: () => void;
 };
 
 type FileItemHelpers = {
@@ -219,10 +222,11 @@ const KIND_ORDER: Record<string, number> = {
   prompt: 2,
   comment: 3,
   "plan-comment": 4,
-  "walkthrough-comment": 5,
-  "agent-message-comment": 6,
-  image: 7,
-  "pr-feedback": 8,
+  "preview-feedback": 5,
+  "walkthrough-comment": 6,
+  "agent-message-comment": 7,
+  image: 8,
+  "pr-feedback": 9,
 };
 
 export function contextItemSortFn(a: ContextItem, b: ContextItem): number {
@@ -255,5 +259,16 @@ export function buildContextItems(params: BuildContextItemsParams): ContextItem[
     });
   }
 
+  const previewFeedback = params.previewFeedback ?? [];
+  if (previewFeedback.length > 0) {
+    items.push({
+      kind: "preview-feedback",
+      id: "preview-feedback",
+      label: t("task:previewFeedbackCount", { count: previewFeedback.length }),
+      items: previewFeedback,
+      onOpen: params.onOpenPreviewFeedback,
+    });
+  }
+
   return items.sort(contextItemSortFn);
 }
diff --git a/apps/web/components/task/chat/chat-input-area-preview-feedback.test.ts b/apps/web/components/task/chat/chat-input-area-preview-feedback.test.ts
new file mode 100644
index 0000000000..4d07f66cd7
--- /dev/null
+++ b/apps/web/components/task/chat/chat-input-area-preview-feedback.test.ts
@@ -0,0 +1,37 @@
+import { describe, expect, it } from "vitest";
+import { shouldShowPreviewFeedbackFallback } from "./chat-input-area";
+
+describe("shouldShowPreviewFeedbackFallback", () => {
+  it.each([
+    ["without a selected session", { resolvedSessionId: null }],
+    ["with a stopped session", { resolvedSessionId: "session-1", isCompleted: true }],
+    [
+      "with a launch error",
+      { resolvedSessionId: "session-1", isFailed: true, launchErrorOwned: true },
+    ],
+  ])("returns true %s", (_label, state) => {
+    expect(
+      shouldShowPreviewFeedbackFallback({
+        taskId: "task-1",
+        itemCount: 1,
+        isFailed: false,
+        isCompleted: false,
+        executorUnavailable: false,
+        ...state,
+      }),
+    ).toBe(true);
+  });
+
+  it("returns false while an active session can accept input", () => {
+    expect(
+      shouldShowPreviewFeedbackFallback({
+        taskId: "task-1",
+        resolvedSessionId: "session-1",
+        itemCount: 1,
+        isFailed: false,
+        isCompleted: false,
+        executorUnavailable: false,
+      }),
+    ).toBe(false);
+  });
+});
diff --git a/apps/web/components/task/chat/chat-input-area.test.tsx b/apps/web/components/task/chat/chat-input-area.test.tsx
index 4ccc704f54..48da686b01 100644
--- a/apps/web/components/task/chat/chat-input-area.test.tsx
+++ b/apps/web/components/task/chat/chat-input-area.test.tsx
@@ -166,6 +166,7 @@ function panelState(overrides = {}) {
     isAgentBusy: false,
     activeDocument: null,
     planComments: [],
+    previewFeedback: [],
     pendingPRFeedback: [],
     walkthroughComments: [],
     messageComments: [],
@@ -456,7 +457,9 @@ describe("useSubmitHandler task plan comments", () => {
       });
     },
   );
+});
 
+describe("useSubmitHandler task feedback references", () => {
   it("submits displayed IDs and versions without clearing the shared snapshot locally", async () => {
     const clearSessionPlanComments = vi.fn();
     const comment = {
@@ -490,6 +493,32 @@ describe("useSubmitHandler task plan comments", () => {
     });
     expect(clearSessionPlanComments).not.toHaveBeenCalled();
   });
+
+  it("freezes the displayed preview feedback versions for the shared send", async () => {
+    const { result } = renderHook(() =>
+      useSubmitHandler(
+        panelState({
+          previewFeedback: [
+            {
+              id: "preview-1",
+              version: 6,
+              kind: "text",
+              comment: "Keep this runtime text",
+            },
+          ],
+        }),
+      ),
+    );
+
+    await act(async () => {
+      await result.current.handleSubmit({ message: "" });
+    });
+
+    expect(handleSendMessageMock).toHaveBeenCalledWith({
+      message: "",
+      previewFeedbackRefs: [{ id: "preview-1", version: 6 }],
+    });
+  });
 });
 
 describe("useSubmitHandler deterministic failures", () => {
diff --git a/apps/web/components/task/chat/chat-input-area.tsx b/apps/web/components/task/chat/chat-input-area.tsx
index 279136eaa5..2d151d9f93 100644
--- a/apps/web/components/task/chat/chat-input-area.tsx
+++ b/apps/web/components/task/chat/chat-input-area.tsx
@@ -34,9 +34,15 @@ import { resolveComposerWorkspaceId } from "./composer-workspace";
 import { t } from "@/lib/i18n";
 import { ChatStatusBar, ComposerCIStatus, resolveStatusRowTaskId } from "./chat-status-bar";
 import { DynamicRouteRecovery } from "./dynamic-route-recovery";
-import { hasPendingClarification } from "./types";
+import {
+  hasPendingClarification,
+  shouldHideChatInputForLaunchError,
+  shouldRenderStoppedSessionBanner,
+} from "./types";
 import { toTaskPlanCommentRefs } from "@/lib/plan-comment-refs";
+import { toTaskPreviewFeedbackRefs } from "@/lib/preview-feedback-refs";
 import { PlanCommentMigrationNotice } from "@/components/task/plan-comment-migration-notice";
+import { PreviewFeedbackCollectionSurface } from "@/components/task/inspector/preview-feedback-collection";
 import {
   ComposerCollapseButton,
   ComposerDisclosureRegion,
@@ -176,6 +182,7 @@ function usePanelMessageHandler(panelState: ChatPanelState) {
     pendingClarification,
     activeDocument,
     planComments,
+    previewFeedback,
     contextFiles,
     prompts,
   } = panelState;
@@ -188,11 +195,37 @@ function usePanelMessageHandler(panelState: ChatPanelState) {
     hasPendingClarification: !!pendingClarification,
     activeDocument,
     planComments,
+    previewFeedback,
     contextFiles,
     prompts,
   });
 }
 
+function completeChatSubmission(payload: ChatSubmitPayload, panelState: ChatPanelState) {
+  const {
+    resolvedSessionId,
+    pendingPRFeedback,
+    walkthroughComments,
+    messageComments,
+    markCommentsSent,
+    handleClearPRFeedback,
+    handleClearWalkthroughComments,
+    clearEphemeral,
+    addContextFile,
+    planModeEnabled,
+  } = panelState;
+  if (payload.reviewComments?.length) markCommentsSent(payload.reviewComments.map((c) => c.id));
+  if (messageComments.length > 0) markCommentsSent(messageComments.map((c) => c.id));
+  if (pendingPRFeedback.length > 0) handleClearPRFeedback();
+  if (walkthroughComments.length > 0) handleClearWalkthroughComments();
+  if (!resolvedSessionId) return true;
+  clearEphemeral(resolvedSessionId);
+  if (planModeEnabled) {
+    addContextFile(resolvedSessionId, { path: PLAN_CONTEXT_PATH, name: "Plan" });
+  }
+  return true;
+}
+
 async function submitChatPayload({
   payload,
   panelState,
@@ -207,17 +240,11 @@ async function submitChatPayload({
   handleSendMessage: (payload: ChatSubmitPayload) => Promise<void | boolean>;
 }) {
   const {
-    resolvedSessionId,
     planComments,
+    previewFeedback,
     pendingPRFeedback,
     walkthroughComments,
     messageComments,
-    markCommentsSent,
-    handleClearPRFeedback,
-    handleClearWalkthroughComments,
-    clearEphemeral,
-    addContextFile,
-    planModeEnabled,
     pendingClarification,
   } = panelState;
   const finalMessage = buildSubmitMessage({
@@ -229,10 +256,12 @@ async function submitChatPayload({
     messageComments,
   });
   const planCommentRefs = toTaskPlanCommentRefs(planComments);
+  const previewFeedbackRefs = toTaskPreviewFeedbackRefs(previewFeedback ?? []);
   const outbound = {
     ...payload,
     message: finalMessage,
     ...(planCommentRefs.length > 0 ? { planCommentRefs } : {}),
+    ...(previewFeedbackRefs.length > 0 ? { previewFeedbackRefs } : {}),
   };
   let submissionResult: void | boolean;
   if (onSend && !pendingClarification) {
@@ -244,16 +273,7 @@ async function submitChatPayload({
     submissionResult = await handleSendMessage(outbound);
   }
   if (submissionResult === false) return false;
-  if (payload.reviewComments?.length) markCommentsSent(payload.reviewComments.map((c) => c.id));
-  if (messageComments.length > 0) markCommentsSent(messageComments.map((c) => c.id));
-  if (pendingPRFeedback.length > 0) handleClearPRFeedback();
-  if (walkthroughComments.length > 0) handleClearWalkthroughComments();
-  if (!resolvedSessionId) return true;
-  clearEphemeral(resolvedSessionId);
-  if (planModeEnabled) {
-    addContextFile(resolvedSessionId, { path: PLAN_CONTEXT_PATH, name: "Plan" });
-  }
-  return true;
+  return completeChatSubmission(payload, panelState);
 }
 
 /** Builds the composer's submit handler, tracking in-flight sends and
@@ -455,6 +475,65 @@ function useChatInputDerived(
   return { planActions, executor, placeholder };
 }
 
+export function shouldShowPreviewFeedbackFallback(args: {
+  taskId: string | null;
+  resolvedSessionId: string | null;
+  itemCount: number;
+  isFailed: boolean;
+  isCompleted: boolean;
+  executorUnavailable: boolean;
+  launchErrorOwned?: boolean;
+}) {
+  if (!args.taskId || args.itemCount === 0) return false;
+  return (
+    !args.resolvedSessionId ||
+    shouldHideChatInputForLaunchError({
+      isFailed: args.isFailed,
+      launchErrorOwned: args.launchErrorOwned,
+    }) ||
+    shouldRenderStoppedSessionBanner({
+      isFailed: args.isFailed,
+      isCompleted: args.isCompleted,
+      executorUnavailable: args.executorUnavailable,
+      launchErrorOwned: args.launchErrorOwned,
+    })
+  );
+}
+
+function PreviewFeedbackFallbackSurface({
+  panelState,
+  taskId,
+  executorUnavailable,
+  launchErrorOwned,
+}: {
+  panelState: ChatPanelState;
+  taskId: string | null;
+  executorUnavailable: boolean;
+  launchErrorOwned?: boolean;
+}) {
+  const [fallbackOpen, setFallbackOpen] = useState(false);
+  const collection = panelState.previewFeedbackState;
+  const showTrigger = shouldShowPreviewFeedbackFallback({
+    taskId,
+    resolvedSessionId: panelState.resolvedSessionId,
+    itemCount: panelState.previewFeedback?.length ?? 0,
+    isFailed: panelState.isFailed,
+    isCompleted: panelState.isCompleted,
+    executorUnavailable,
+    launchErrorOwned,
+  });
+  if (!collection || !taskId || (panelState.previewFeedback?.length ?? 0) === 0) return null;
+  return (
+    <PreviewFeedbackCollectionSurface
+      taskId={taskId}
+      collection={collection}
+      open={panelState.previewFeedbackOpen ?? fallbackOpen}
+      onOpenChange={panelState.setPreviewFeedbackOpen ?? setFallbackOpen}
+      showTrigger={showTrigger}
+    />
+  );
+}
+
 /**
  * The chat composer: input box, submit/cancel handling, plan-mode toggle,
  * clarification banner, and the {@link ChatStatusBar} above it.
@@ -547,6 +626,12 @@ export function ChatInputArea(props: ChatInputAreaProps) {
         </QueueAffordance>
         <ComposerCollapseButton />
       </ComposerDisclosureRegion>
+      <PreviewFeedbackFallbackSurface
+        panelState={panelState}
+        taskId={taskId}
+        executorUnavailable={executor.unavailable}
+        launchErrorOwned={props.launchErrorOwned}
+      />
     </div>
   );
 }
diff --git a/apps/web/components/task/chat/chat-input-container.tsx b/apps/web/components/task/chat/chat-input-container.tsx
index 35f58238fd..79c57d76aa 100644
--- a/apps/web/components/task/chat/chat-input-container.tsx
+++ b/apps/web/components/task/chat/chat-input-container.tsx
@@ -7,7 +7,7 @@ import type { ReviewComment } from "@/lib/state/slices/comments";
 import type { TaskMentionData } from "@/hooks/use-inline-mention";
 import type { MCPAttachmentHistory } from "@/lib/state/slices/session-runtime/types";
 import type { EntityReference } from "@/lib/types/entity-reference";
-import type { TaskPlanCommentRef } from "@/lib/types/http";
+import type { TaskPlanCommentRef, TaskPreviewFeedbackRef } from "@/lib/types/http";
 import { useChatInputContainer } from "./use-chat-input-container";
 import { SessionStoppedBanner } from "./session-stopped-banner";
 import { useSessionRecoveryActions } from "@/hooks/domains/session/use-session-recovery-actions";
@@ -64,6 +64,7 @@ export type ChatSubmitPayload = {
   inlineTaskMentions?: TaskMentionData[];
   entityReferences?: EntityReference[];
   planCommentRefs?: TaskPlanCommentRef[];
+  previewFeedbackRefs?: TaskPreviewFeedbackRef[];
 };
 
 type ChatInputContainerProps = {
diff --git a/apps/web/components/task/chat/context-items/context-chip.test.tsx b/apps/web/components/task/chat/context-items/context-chip.test.tsx
index 06a653784a..a427081664 100644
--- a/apps/web/components/task/chat/context-items/context-chip.test.tsx
+++ b/apps/web/components/task/chat/context-items/context-chip.test.tsx
@@ -1,14 +1,15 @@
 import React from "react";
-import { fireEvent, render, screen } from "@testing-library/react";
-import { describe, expect, it, vi } from "vitest";
+import { cleanup, fireEvent, render, screen } from "@testing-library/react";
+import { afterEach, beforeEach, describe, expect, it, vi } from "vitest";
 
 const touchState = vi.hoisted(() => ({ enabled: true }));
+const pointerState = vi.hoisted(() => ({ isFinePointer: false }));
 
 vi.mock("@/hooks/use-compact-task-chrome", () => ({
   useTouchDrawer: () => touchState.enabled,
 }));
 vi.mock("@/hooks/use-responsive-breakpoint", () => ({
-  useResponsiveBreakpoint: () => ({ isFinePointer: false }),
+  useResponsiveBreakpoint: () => pointerState,
 }));
 vi.mock("react-i18next", () => ({
   useTranslation: () => ({ t: (key: string) => (key === "common:open" ? "Open" : key) }),
@@ -66,6 +67,13 @@ vi.mock("@kandev/ui/drawer", () => {
 
 import { ContextChip } from "./context-chip";
 
+beforeEach(() => {
+  touchState.enabled = true;
+  pointerState.isFinePointer = false;
+});
+
+afterEach(cleanup);
+
 describe("ContextChip coarse-pointer actions", () => {
   it("opens the preview drawer and exposes the open action", () => {
     const onClick = vi.fn();
@@ -79,4 +87,37 @@ describe("ContextChip coarse-pointer actions", () => {
 
     expect(onClick).toHaveBeenCalledOnce();
   });
+
+  it("opens a source-independent collection without a navigation action", () => {
+    render(
+      <ContextChip
+        kind="preview-feedback"
+        label="3 preview feedback items"
+        preview={<div>Shared feedback</div>}
+      />,
+    );
+
+    fireEvent.click(screen.getByRole("button", { name: "3 preview feedback items" }));
+
+    expect(screen.getByText("Shared feedback")).toBeTruthy();
+    expect(screen.queryByRole("button", { name: "Open" })).toBeNull();
+  });
+});
+
+describe("ContextChip fine-pointer previews", () => {
+  it("opens an actionable collection on click when no navigation action exists", () => {
+    touchState.enabled = false;
+    pointerState.isFinePointer = true;
+    render(
+      <ContextChip
+        kind="preview-feedback"
+        label="3 preview feedback items"
+        preview={<div>Shared feedback</div>}
+      />,
+    );
+
+    fireEvent.click(screen.getByRole("button", { name: "3 preview feedback items" }));
+
+    expect(screen.getByText("Shared feedback")).toBeTruthy();
+  });
 });
diff --git a/apps/web/components/task/chat/context-items/context-chip.tsx b/apps/web/components/task/chat/context-items/context-chip.tsx
index d5ee483f13..c241ea9a58 100644
--- a/apps/web/components/task/chat/context-items/context-chip.tsx
+++ b/apps/web/components/task/chat/context-items/context-chip.tsx
@@ -32,6 +32,7 @@ const ICON_BY_KIND: Record<ContextItemKind, TablerIcon> = {
   file: IconFile,
   comment: IconMessageDots,
   "plan-comment": IconMessageDots,
+  "preview-feedback": IconMessageDots,
   "walkthrough-comment": IconRoute,
   image: IconPhoto,
   "file-attachment": IconFile,
@@ -75,6 +76,7 @@ export const ContextChip = memo(function ContextChip({
   const { t } = useTranslation();
   const Icon = ICON_BY_KIND[kind];
   const labelSizingClass = isFinePointer ? "min-h-0" : "min-h-11";
+  const isInteractive = !!preview || !!onClick;
   let iconNode: ReactNode;
   if (leadingIcon) {
     iconNode = leadingIcon;
@@ -160,7 +162,7 @@ export const ContextChip = memo(function ContextChip({
       data-testid={dataTestId}
       data-path={dataPath}
       data-is-directory={dataIsDirectory ? "true" : "false"}
-      className={`group flex items-center gap-1 px-2 py-0.5 text-xs text-muted-foreground bg-muted/50 rounded border border-border/50 ${onClick ? "cursor-pointer hover:bg-muted/80" : ""}`}
+      className={`group flex items-center gap-1 px-2 py-0.5 text-xs text-muted-foreground bg-muted/50 rounded border border-border/50 ${isInteractive ? "cursor-pointer hover:bg-muted/80" : ""}`}
     >
       {labelElement}
       {controls}
@@ -227,6 +229,10 @@ function ControlledHoverChip({
       <HoverCardTrigger
         asChild
         onClick={() => {
+          if (!onClick) {
+            setOpen((current) => !current);
+            return;
+          }
           suppressRef.current = true;
           setOpen(false);
           setTimeout(() => {
diff --git a/apps/web/components/task/chat/context-items/context-item-renderer.tsx b/apps/web/components/task/chat/context-items/context-item-renderer.tsx
index c78a884782..a0426ec5e0 100644
--- a/apps/web/components/task/chat/context-items/context-item-renderer.tsx
+++ b/apps/web/components/task/chat/context-items/context-item-renderer.tsx
@@ -11,6 +11,7 @@ import { FileAttachmentItem } from "./file-attachment-item";
 import { PRFeedbackItem } from "./pr-feedback-item";
 import { WalkthroughCommentItem } from "./walkthrough-comment-item";
 import { AgentMessageCommentItem } from "./agent-message-comment-item";
+import { PreviewFeedbackItem } from "./preview-feedback-item";
 
 export function ContextItemRenderer({
   item,
@@ -30,6 +31,8 @@ export function ContextItemRenderer({
       return <CommentItem item={item} />;
     case "plan-comment":
       return <PlanCommentItem item={item} />;
+    case "preview-feedback":
+      return <PreviewFeedbackItem item={item} />;
     case "image":
       return <ImageItem item={item} />;
     case "file-attachment":
diff --git a/apps/web/components/task/chat/context-items/index.ts b/apps/web/components/task/chat/context-items/index.ts
index 43d0c45785..59094f7807 100644
--- a/apps/web/components/task/chat/context-items/index.ts
+++ b/apps/web/components/task/chat/context-items/index.ts
@@ -6,6 +6,7 @@ export { FileItem } from "./file-item";
 export { PromptItem } from "./prompt-item";
 export { CommentItem } from "./comment-item";
 export { PlanCommentItem } from "./plan-comment-item";
+export { PreviewFeedbackItem } from "./preview-feedback-item";
 export { PRFeedbackItem } from "./pr-feedback-item";
 export { WalkthroughCommentItem } from "./walkthrough-comment-item";
 export { ImageItem } from "./image-item";
diff --git a/apps/web/components/task/chat/context-items/preview-feedback-item.tsx b/apps/web/components/task/chat/context-items/preview-feedback-item.tsx
new file mode 100644
index 0000000000..4b4606be29
--- /dev/null
+++ b/apps/web/components/task/chat/context-items/preview-feedback-item.tsx
@@ -0,0 +1,13 @@
+"use client";
+
+import { memo } from "react";
+import type { PreviewFeedbackContextItem } from "@/lib/types/context";
+import { ContextChip } from "./context-chip";
+
+export const PreviewFeedbackItem = memo(function PreviewFeedbackItem({
+  item,
+}: {
+  item: PreviewFeedbackContextItem;
+}) {
+  return <ContextChip kind="preview-feedback" label={item.label} onClick={item.onOpen} />;
+});
diff --git a/apps/web/components/task/chat/use-chat-context-items.ts b/apps/web/components/task/chat/use-chat-context-items.ts
new file mode 100644
index 0000000000..e49918d01d
--- /dev/null
+++ b/apps/web/components/task/chat/use-chat-context-items.ts
@@ -0,0 +1,106 @@
+import { useMemo } from "react";
+import { useCustomPrompts } from "@/hooks/domains/settings/use-custom-prompts";
+import { usePanelActions } from "@/hooks/use-panel-actions";
+import type { ContextFile } from "@/lib/state/context-files-store";
+import type { ContextItem } from "@/lib/types/context";
+import type { TaskPreviewFeedback } from "@/lib/types/http";
+import { buildContextItems } from "../chat-context-items";
+import type { CommentsState } from "./use-chat-panel-state";
+
+type ChatContextItemsOptions = {
+  planContextEnabled: boolean;
+  contextFiles: ContextFile[];
+  resolvedSessionId: string | null;
+  removeContextFile: (sid: string, path: string) => void;
+  unpinFile: (sid: string, path: string) => void;
+  comments: CommentsState;
+  previewFeedback: TaskPreviewFeedback[];
+  taskId: string | null;
+  onOpenFile?: (path: string, repo?: string) => void;
+  onOpenFileAtLine?: (filePath: string, repositoryName?: string) => void;
+  onOpenPreviewFeedback: () => void;
+};
+
+export function useChatContextItems(opts: ChatContextItemsOptions) {
+  const {
+    planContextEnabled,
+    contextFiles,
+    resolvedSessionId,
+    removeContextFile,
+    unpinFile,
+    comments,
+    previewFeedback,
+    taskId,
+    onOpenFile,
+    onOpenFileAtLine,
+    onOpenPreviewFeedback,
+  } = opts;
+  const { addPlan } = usePanelActions();
+  const { prompts } = useCustomPrompts();
+
+  const promptsMap = useMemo(() => {
+    const map = new Map<string, { content: string }>();
+    for (const p of prompts) map.set(p.id, { content: p.content });
+    return map;
+  }, [prompts]);
+
+  const contextItems = useMemo<ContextItem[]>(
+    () =>
+      buildContextItems({
+        planContextEnabled,
+        contextFiles,
+        resolvedSessionId,
+        removeContextFile,
+        unpinFile,
+        addPlan,
+        promptsMap,
+        onOpenFile,
+        pendingCommentsByFile: comments.pendingCommentsByFile,
+        handleRemoveCommentFile: comments.handleRemoveCommentFile,
+        handleRemoveComment: comments.handleRemoveComment,
+        onOpenFileAtLine,
+        planComments: comments.planComments,
+        handleClearPlanComments: comments.clearSessionPlanComments,
+        previewFeedback,
+        pendingPRFeedback: comments.pendingPRFeedback,
+        handleRemovePRFeedback: comments.handleRemovePRFeedback,
+        handleClearPRFeedback: comments.handleClearPRFeedback,
+        walkthroughComments: comments.walkthroughComments,
+        handleRemoveWalkthroughComment: comments.handleRemoveWalkthroughComment,
+        handleClearWalkthroughComments: comments.handleClearWalkthroughComments,
+        messageComments: comments.messageComments,
+        handleClearMessageComments: comments.handleClearMessageComments,
+        taskId,
+        onOpenPreviewFeedback,
+      }),
+    [
+      planContextEnabled,
+      contextFiles,
+      resolvedSessionId,
+      removeContextFile,
+      unpinFile,
+      addPlan,
+      promptsMap,
+      onOpenFile,
+      comments.pendingCommentsByFile,
+      comments.handleRemoveCommentFile,
+      comments.handleRemoveComment,
+      onOpenFileAtLine,
+      comments.planComments,
+      comments.clearSessionPlanComments,
+      previewFeedback,
+      comments.pendingPRFeedback,
+      comments.handleRemovePRFeedback,
+      comments.handleClearPRFeedback,
+      comments.walkthroughComments,
+      comments.handleRemoveWalkthroughComment,
+      comments.handleClearWalkthroughComments,
+      comments.messageComments,
+      comments.handleClearMessageComments,
+      taskId,
+      onOpenPreviewFeedback,
+    ],
+  );
+
+  return { contextItems, prompts };
+}
diff --git a/apps/web/components/task/chat/use-chat-input-state.ts b/apps/web/components/task/chat/use-chat-input-state.ts
index 853c3b85e7..b4d02e0bc5 100644
--- a/apps/web/components/task/chat/use-chat-input-state.ts
+++ b/apps/web/components/task/chat/use-chat-input-state.ts
@@ -162,7 +162,7 @@ type SubmitDraftArgs = {
 };
 
 type DraftChatSubmitPayload = Required<
-  Omit<ChatSubmitPayload, "planCommentRefs" | "clientMessageId">
+  Omit<ChatSubmitPayload, "planCommentRefs" | "previewFeedbackRefs" | "clientMessageId">
 >;
 
 function buildChatSubmitPayload(payload: DraftChatSubmitPayload): ChatSubmitPayload {
diff --git a/apps/web/components/task/chat/use-chat-panel-state.ts b/apps/web/components/task/chat/use-chat-panel-state.ts
index 713126c441..37bd63797a 100644
--- a/apps/web/components/task/chat/use-chat-panel-state.ts
+++ b/apps/web/components/task/chat/use-chat-panel-state.ts
@@ -1,12 +1,10 @@
 "use client";
 
-import { useCallback, useEffect, useMemo } from "react";
+import { useCallback, useEffect, useMemo, useState } from "react";
 import { useAppStore } from "@/components/state-provider";
 import { useLayoutStore } from "@/lib/state/layout-store";
 import { useDockviewStore } from "@/lib/state/dockview-store";
-import { usePanelActions } from "@/hooks/use-panel-actions";
 import { useSessionMessages } from "@/hooks/domains/session/use-session-messages";
-import { useCustomPrompts } from "@/hooks/domains/settings/use-custom-prompts";
 import { useSessionState } from "@/hooks/domains/session/use-session-state";
 import {
   deriveSessionInputMode,
@@ -25,13 +23,12 @@ import {
   usePendingWalkthroughComments,
   usePendingAgentMessageComments,
 } from "@/hooks/domains/comments/use-pending-comments";
-import { buildContextItems } from "../chat-context-items";
+import { useChatContextItems } from "./use-chat-context-items";
 import {
   useAutoDisablePlanMode,
   useAutoDisableUnsupportedPlanMode,
   usePlanLayoutHandlers,
 } from "./use-plan-mode-helpers";
-import type { ContextItem } from "@/lib/types/context";
 import type { ReviewComment } from "@/lib/state/slices/comments";
 import type {
   AgentMessageComment,
@@ -44,6 +41,7 @@ import type { BuiltInPreset } from "@/lib/state/layout-manager/presets";
 import { readLastAgentError } from "@/lib/session-last-agent-error";
 import { clarificationTurnIdForSession } from "@/lib/utils/pending-clarification";
 import { usePlanCommentMigration } from "@/hooks/domains/comments/use-plan-comment-migration";
+import { usePreviewFeedback } from "@/hooks/domains/comments/use-preview-feedback";
 
 const EMPTY_CONTEXT_FILES: ContextFile[] = [];
 const PLAN_CONTEXT_PATH = "plan:context";
@@ -351,96 +349,6 @@ export function useCommentsState(
   };
 }
 
-type ChatContextItemsOptions = {
-  planContextEnabled: boolean;
-  contextFiles: ContextFile[];
-  resolvedSessionId: string | null;
-  removeContextFile: (sid: string, path: string) => void;
-  unpinFile: (sid: string, path: string) => void;
-  comments: CommentsState;
-  taskId: string | null;
-  onOpenFile?: (path: string, repo?: string) => void;
-  onOpenFileAtLine?: (filePath: string, repositoryName?: string) => void;
-};
-
-function useChatContextItems(opts: ChatContextItemsOptions) {
-  const {
-    planContextEnabled,
-    contextFiles,
-    resolvedSessionId,
-    removeContextFile,
-    unpinFile,
-    comments,
-    taskId,
-    onOpenFile,
-    onOpenFileAtLine,
-  } = opts;
-  const { addPlan } = usePanelActions();
-  const { prompts } = useCustomPrompts();
-
-  const promptsMap = useMemo(() => {
-    const map = new Map<string, { content: string }>();
-    for (const p of prompts) map.set(p.id, { content: p.content });
-    return map;
-  }, [prompts]);
-
-  const contextItems = useMemo<ContextItem[]>(
-    () =>
-      buildContextItems({
-        planContextEnabled,
-        contextFiles,
-        resolvedSessionId,
-        removeContextFile,
-        unpinFile,
-        addPlan,
-        promptsMap,
-        onOpenFile,
-        pendingCommentsByFile: comments.pendingCommentsByFile,
-        handleRemoveCommentFile: comments.handleRemoveCommentFile,
-        handleRemoveComment: comments.handleRemoveComment,
-        onOpenFileAtLine,
-        planComments: comments.planComments,
-        handleClearPlanComments: comments.clearSessionPlanComments,
-        pendingPRFeedback: comments.pendingPRFeedback,
-        handleRemovePRFeedback: comments.handleRemovePRFeedback,
-        handleClearPRFeedback: comments.handleClearPRFeedback,
-        walkthroughComments: comments.walkthroughComments,
-        handleRemoveWalkthroughComment: comments.handleRemoveWalkthroughComment,
-        handleClearWalkthroughComments: comments.handleClearWalkthroughComments,
-        messageComments: comments.messageComments,
-        handleClearMessageComments: comments.handleClearMessageComments,
-        taskId,
-      }),
-    [
-      planContextEnabled,
-      contextFiles,
-      resolvedSessionId,
-      removeContextFile,
-      unpinFile,
-      addPlan,
-      promptsMap,
-      onOpenFile,
-      comments.pendingCommentsByFile,
-      comments.handleRemoveCommentFile,
-      comments.handleRemoveComment,
-      onOpenFileAtLine,
-      comments.planComments,
-      comments.clearSessionPlanComments,
-      comments.pendingPRFeedback,
-      comments.handleRemovePRFeedback,
-      comments.handleClearPRFeedback,
-      comments.walkthroughComments,
-      comments.handleRemoveWalkthroughComment,
-      comments.handleClearWalkthroughComments,
-      comments.messageComments,
-      comments.handleClearMessageComments,
-      taskId,
-    ],
-  );
-
-  return { contextItems, prompts };
-}
-
 function useSessionData(
   resolvedSessionId: string | null,
   session: ReturnType<typeof useSessionState>["session"],
@@ -605,7 +513,10 @@ export function useChatPanelState({
     sessionState.taskDescription,
   );
   const comments = useCommentsState(resolvedSessionId, taskId);
+  const previewFeedbackState = usePreviewFeedback(taskId);
   const planCommentMigration = usePlanCommentMigration(taskId);
+  const [previewFeedbackOpen, setPreviewFeedbackOpen] = useState(false);
+  const onOpenPreviewFeedback = useCallback(() => setPreviewFeedbackOpen(true), []);
 
   const planContextEnabled = useMemo(
     () => contextFiles.some((f) => f.path === PLAN_CONTEXT_PATH),
@@ -619,9 +530,11 @@ export function useChatPanelState({
     removeContextFile,
     unpinFile,
     comments,
+    previewFeedback: previewFeedbackState.items,
     taskId,
     onOpenFile,
     onOpenFileAtLine,
+    onOpenPreviewFeedback,
   });
 
   const todoItems = useSessionTodoItems(resolvedSessionId, sessionData.todoItems);
@@ -633,6 +546,10 @@ export function useChatPanelState({
     ...contextFilesState,
     ...sessionData,
     ...comments,
+    previewFeedback: previewFeedbackState.items,
+    previewFeedbackState,
+    previewFeedbackOpen,
+    setPreviewFeedbackOpen,
     planCommentMigration,
     contextItems,
     planContextEnabled,
diff --git a/apps/web/components/task/chat/use-composer-props.ts b/apps/web/components/task/chat/use-composer-props.ts
index b57a293803..d38dfae0a7 100644
--- a/apps/web/components/task/chat/use-composer-props.ts
+++ b/apps/web/components/task/chat/use-composer-props.ts
@@ -57,6 +57,7 @@ export function useComposerProps(args: ComposerPropsArgs) {
   const supportsSteering = panelState.supportsSteering;
   const hasContextComments =
     panelState.planComments.length > 0 ||
+    (panelState.previewFeedback?.length ?? 0) > 0 ||
     panelState.pendingPRFeedback.length > 0 ||
     panelState.walkthroughComments.length > 0 ||
     panelState.messageComments.length > 0;
diff --git a/apps/web/components/task/html-preview-content.test.tsx b/apps/web/components/task/html-preview-content.test.tsx
index 3f9d28913a..e97b4e459f 100644
--- a/apps/web/components/task/html-preview-content.test.tsx
+++ b/apps/web/components/task/html-preview-content.test.tsx
@@ -1,8 +1,11 @@
 import { cleanup, render, screen } from "@testing-library/react";
 import { TooltipProvider } from "@kandev/ui/tooltip";
-import { afterEach, describe, expect, it, vi } from "vitest";
+import { afterEach, beforeEach, describe, expect, it, vi } from "vitest";
 import { HtmlPreviewContent } from "./html-preview-content";
 
+const usePreviewCapture = vi.hoisted(() => vi.fn());
+vi.mock("@/hooks/use-preview-capture", () => ({ usePreviewCapture }));
+
 vi.mock("@/components/editors/external-vcs-file-link", () => ({
   ExternalVcsFileLink: () => null,
   useExternalVcsFileStatus: () => null,
@@ -12,6 +15,29 @@ afterEach(() => {
   cleanup();
 });
 
+const capture = {
+  items: [],
+  snapshot: { task_id: "task-1", revision: 0, items: [] },
+  mode: null,
+  draft: null,
+  draftComment: "",
+  setDraftComment: vi.fn(),
+  candidateLabel: null,
+  captureError: null,
+  isRasterizing: false,
+  isUploading: false,
+  isMutating: false,
+  mutationError: null,
+  startCapture: vi.fn(),
+  cancelCapture: vi.fn(),
+  discardDraft: vi.fn(),
+  saveDraft: vi.fn(),
+  update: vi.fn(),
+  remove: vi.fn(),
+  clear: vi.fn(),
+  handleIframeLoad: vi.fn(),
+};
+
 function renderPreview(onTogglePreview = vi.fn(), overrides: Record<string, unknown> = {}) {
   return {
     onTogglePreview,
@@ -20,6 +46,8 @@ function renderPreview(onTogglePreview = vi.fn(), overrides: Record<string, unkn
         <HtmlPreviewContent
           path="reports/index.html"
           previewUrl="http://api.test/port-proxy/session-1/43127/reports/index.html?v=4"
+          taskId="task-1"
+          sessionId="session-1"
           showExternalVcsLink={false}
           onTogglePreview={onTogglePreview}
           {...overrides}
@@ -30,6 +58,8 @@ function renderPreview(onTogglePreview = vi.fn(), overrides: Record<string, unkn
 }
 
 describe("HtmlPreviewContent", () => {
+  beforeEach(() => usePreviewCapture.mockReturnValue(capture));
+
   it("renders a native iframe for the published preview URL", () => {
     const { onTogglePreview } = renderPreview();
 
@@ -80,4 +110,22 @@ describe("HtmlPreviewContent", () => {
     screen.getByRole("button", { name: /Open in browser panel/i }).click();
     expect(onOpenInBrowser).toHaveBeenCalledOnce();
   });
+
+  it("uses the same task-backed annotation controls as the Browser panel", () => {
+    renderPreview();
+
+    expect(screen.getByRole("button", { name: "Annotate (0)" })).toBeTruthy();
+    expect(usePreviewCapture).toHaveBeenCalledWith(
+      expect.objectContaining({
+        taskId: "task-1",
+        enabled: true,
+        source: {
+          kind: "html_file",
+          sessionId: "session-1",
+          label: "reports/index.html",
+          path: "reports/index.html",
+        },
+      }),
+    );
+  });
 });
diff --git a/apps/web/components/task/html-preview-content.tsx b/apps/web/components/task/html-preview-content.tsx
index b99e61077a..fb7fe0ec2d 100644
--- a/apps/web/components/task/html-preview-content.tsx
+++ b/apps/web/components/task/html-preview-content.tsx
@@ -2,7 +2,7 @@
 
 import { SymlinkIndicator } from "@/components/shared/symlink-indicator";
 
-import { memo } from "react";
+import { memo, useRef } from "react";
 import { IconBrowser, IconCode, IconRefresh } from "@tabler/icons-react";
 import { Button } from "@kandev/ui/button";
 import { Tooltip, TooltipContent, TooltipTrigger } from "@kandev/ui/tooltip";
@@ -18,6 +18,9 @@ import {
 } from "@/hooks/use-html-preview-publisher";
 import { toRelativePath } from "@/lib/utils";
 import { useTranslation } from "react-i18next";
+import { usePreviewCapture } from "@/hooks/use-preview-capture";
+import { PreviewFeedbackControls } from "./inspector/preview-feedback-controls";
+import type { PreviewFeedbackController } from "./inspector/preview-feedback-controls";
 
 type HtmlPreviewContentProps = {
   path: string;
@@ -52,13 +55,17 @@ function HtmlPreviewContentToolbar({
   onRefresh,
   onOpenInBrowser,
   onTogglePreview,
-}: Omit<HtmlPreviewContentProps, "previewUrl" | "error" | "onRetry">) {
+  capture,
+}: Omit<HtmlPreviewContentProps, "previewUrl" | "error" | "onRetry"> & {
+  capture: PreviewFeedbackController;
+}) {
   const { t } = useTranslation();
   const fileStatus = useExternalVcsFileStatus(path, sessionId, repositoryName);
   const trustWarning = t("task:htmlPreviewTrustedCode");
 
   return (
     <PanelHeaderBarSplit
+      className="h-auto min-h-[52px] py-1 sm:h-[30px] sm:min-h-[30px] sm:py-0"
       left={
         <div className="flex min-w-0 items-center gap-2 text-xs text-muted-foreground">
           <span className="truncate font-mono">{toRelativePath(path, worktreePath)}</span>
@@ -104,6 +111,7 @@ function HtmlPreviewContentToolbar({
               <IconBrowser className="h-4 w-4" />
             </Button>
           )}
+          <PreviewFeedbackControls capture={capture} enabled={!!taskId && !!sessionId} />
           <Tooltip>
             <TooltipTrigger asChild>
               <Button
@@ -125,6 +133,7 @@ function HtmlPreviewContentToolbar({
           </Tooltip>
         </div>
       }
+      rightClassName="overflow-visible"
     />
   );
 }
@@ -148,7 +157,20 @@ export const HtmlPreviewContent = memo(function HtmlPreviewContent({
   onTogglePreview,
 }: HtmlPreviewContentProps) {
   const { t } = useTranslation();
+  const iframeRef = useRef<HTMLIFrameElement>(null);
   const errorKey = error ? getHtmlPreviewPublishErrorKey(error) : null;
+  const sourcePath = toRelativePath(path, worktreePath);
+  const capture = usePreviewCapture({
+    taskId,
+    iframeRef,
+    enabled: !!previewUrl && !!taskId && !!sessionId,
+    source: {
+      kind: "html_file",
+      sessionId,
+      label: sourcePath,
+      path: sourcePath,
+    },
+  });
 
   return (
     <div className="relative flex h-full min-h-0 flex-col" data-testid="html-preview">
@@ -166,6 +188,7 @@ export const HtmlPreviewContent = memo(function HtmlPreviewContent({
         onRefresh={onRefresh}
         onOpenInBrowser={onOpenInBrowser}
         onTogglePreview={onTogglePreview}
+        capture={capture}
       />
       <p
         data-testid="html-preview-trust-warning"
@@ -198,12 +221,14 @@ export const HtmlPreviewContent = memo(function HtmlPreviewContent({
         )}
         {!isLoading && !errorKey && previewUrl && (
           <iframe
+            ref={iframeRef}
             data-testid="html-preview-frame"
             src={previewUrl}
             title={t("task:browserPreview")}
             className="h-full w-full border-0"
             sandbox="allow-scripts allow-same-origin allow-forms allow-popups allow-modals"
             referrerPolicy="no-referrer"
+            onLoad={capture.handleIframeLoad}
           />
         )}
       </div>
diff --git a/apps/web/components/task/inspector/annotations-panel.tsx b/apps/web/components/task/inspector/annotations-panel.tsx
deleted file mode 100644
index 5238e7977d..0000000000
--- a/apps/web/components/task/inspector/annotations-panel.tsx
+++ /dev/null
@@ -1,112 +0,0 @@
-"use client";
-
-import { useState } from "react";
-import { IconCheck, IconCopy, IconTrash, IconX } from "@tabler/icons-react";
-import { Button } from "@kandev/ui/button";
-import type { Annotation } from "@/lib/preview-inspect-bridge";
-import { formatAnnotations } from "@/lib/preview-inspect-bridge";
-import { copyToClipboard } from "@/lib/utils/copy-to-clipboard";
-import { useTranslation } from "react-i18next";
-import { t } from "@/lib/i18n";
-
-interface AnnotationsPanelProps {
-  annotations: Annotation[];
-  onRemove: (id: string) => void;
-  onClear: () => void;
-}
-
-// Module-level `t` rather than a hook: this runs from render, after a locale is
-// active. The `tag`/`#id`/`.class` suffix is inspected DOM data, never copy.
-function describeAnnotation(a: Annotation): string {
-  if (a.kind === "pin") {
-    const el = a.element;
-    if (!el) return t("task:annotationPin");
-    let suffix = "";
-    if (el.id) suffix = `#${el.id}`;
-    else if (el.classes) suffix = `.${el.classes.split(/\s+/)[0]}`;
-    return `${el.tag}${suffix}`;
-  }
-  const r = a.rect;
-  return r
-    ? t("task:annotationAreaSized", { w: Math.round(r.w), h: Math.round(r.h) })
-    : t("task:annotationArea");
-}
-
-export function AnnotationsPanel({ annotations, onRemove, onClear }: AnnotationsPanelProps) {
-  const { t } = useTranslation();
-  const [copied, setCopied] = useState(false);
-  if (annotations.length === 0) return null;
-
-  async function handleCopy() {
-    if (await copyToClipboard(formatAnnotations(annotations))) {
-      setCopied(true);
-      setTimeout(() => setCopied(false), 2000);
-    } else {
-      console.error("AnnotationsPanel: clipboard write failed");
-    }
-  }
-
-  return (
-    <div
-      className="flex flex-col gap-1.5 px-3 py-2 rounded-md border bg-muted text-sm"
-      data-testid="preview-annotations-panel"
-    >
-      <div className="flex items-center justify-between gap-2">
-        <span className="text-xs text-muted-foreground">
-          {t("task:annotationCount", { count: annotations.length })}
-        </span>
-        <div className="flex items-center gap-1">
-          <Button
-            size="sm"
-            variant="outline"
-            className="h-6 px-2 cursor-pointer"
-            onClick={handleCopy}
-            data-testid="preview-annotations-copy"
-            aria-label={copied ? t("task:copied2") : t("task:copyAnnotations")}
-            title={copied ? t("task:copied2") : t("task:copyAnnotationsToClipboard")}
-          >
-            {copied ? <IconCheck className="h-3 w-3" /> : <IconCopy className="h-3 w-3" />}
-          </Button>
-          <Button
-            size="sm"
-            variant="ghost"
-            className="h-6 px-2 cursor-pointer"
-            onClick={onClear}
-            data-testid="preview-annotations-clear"
-            aria-label={t("task:clearAllAnnotations")}
-            title={t("task:clearAllAnnotations")}
-          >
-            <IconTrash className="h-3 w-3" />
-          </Button>
-        </div>
-      </div>
-      <ul className="flex flex-col gap-1">
-        {annotations.map((a) => (
-          <li key={a.id} className="flex items-start gap-2" data-testid="preview-annotation-item">
-            <span className="shrink-0 w-5 h-5 rounded-full bg-primary text-primary-foreground text-xs font-mono flex items-center justify-center">
-              {a.number}
-            </span>
-            <div className="flex-1 min-w-0">
-              <code className="text-xs font-mono">{describeAnnotation(a)}</code>
-              {a.comment && (
-                <p className="text-xs text-muted-foreground truncate" title={a.comment}>
-                  {a.comment}
-                </p>
-              )}
-            </div>
-            <Button
-              size="sm"
-              variant="ghost"
-              className="h-5 w-5 p-0 cursor-pointer shrink-0"
-              onClick={() => onRemove(a.id)}
-              aria-label={t("task:removeAnnotation", { number: a.number })}
-              data-testid="preview-annotation-remove"
-            >
-              <IconX className="h-3 w-3" />
-            </Button>
-          </li>
-        ))}
-      </ul>
-    </div>
-  );
-}
diff --git a/apps/web/components/task/inspector/inspect-button.tsx b/apps/web/components/task/inspector/inspect-button.tsx
deleted file mode 100644
index 258012d871..0000000000
--- a/apps/web/components/task/inspector/inspect-button.tsx
+++ /dev/null
@@ -1,37 +0,0 @@
-"use client";
-
-import { IconClick } from "@tabler/icons-react";
-import { Button } from "@kandev/ui/button";
-import { useTranslation } from "react-i18next";
-
-interface InspectButtonProps {
-  active: boolean;
-  disabled?: boolean;
-  count?: number;
-  onToggle: () => void;
-}
-
-export function InspectButton({ active, disabled, count = 0, onToggle }: InspectButtonProps) {
-  const { t } = useTranslation();
-  const title = active ? t("task:inspectingClickToPin") : t("task:inspectClickToPinOrDrag");
-  return (
-    <Button
-      size="sm"
-      variant={active ? "default" : "outline"}
-      onClick={onToggle}
-      disabled={disabled}
-      className="cursor-pointer relative"
-      data-testid="preview-inspect-button"
-      aria-pressed={active}
-      aria-label={active ? t("task:exitInspectMode") : t("task:enterInspectMode")}
-      title={title}
-    >
-      <IconClick className="h-4 w-4" />
-      {count > 0 && (
-        <span data-testid="preview-inspect-count" className="ml-1 text-xs font-mono">
-          {count}
-        </span>
-      )}
-    </Button>
-  );
-}
diff --git a/apps/web/components/task/inspector/preview-feedback-collection.test.tsx b/apps/web/components/task/inspector/preview-feedback-collection.test.tsx
new file mode 100644
index 0000000000..0c98357f17
--- /dev/null
+++ b/apps/web/components/task/inspector/preview-feedback-collection.test.tsx
@@ -0,0 +1,265 @@
+import { cleanup, fireEvent, render, screen, waitFor } from "@testing-library/react";
+import { afterEach, beforeEach, describe, expect, it, vi } from "vitest";
+import type { TaskPreviewFeedback, TaskPreviewFeedbackSnapshot } from "@/lib/types/http";
+
+const touchState = vi.hoisted(() => ({ enabled: false }));
+
+vi.mock("@/hooks/use-compact-task-chrome", () => ({
+  useTouchDrawer: () => touchState.enabled,
+}));
+
+vi.mock("@/components/task/mobile/mobile-picker-sheet", () => ({
+  MobilePickerSheet: ({
+    open,
+    title,
+    headerAction,
+    children,
+  }: {
+    open: boolean;
+    title: string;
+    headerAction?: React.ReactNode;
+    children: React.ReactNode;
+  }) =>
+    open ? (
+      <div data-testid="preview-feedback-collection-drawer">
+        <h2>{title}</h2>
+        {headerAction}
+        {children}
+      </div>
+    ) : null,
+}));
+
+vi.mock("@kandev/ui/popover", async () => {
+  const React = await import("react");
+  const Context = React.createContext<{
+    open: boolean;
+    onOpenChange: (open: boolean) => void;
+  } | null>(null);
+  return {
+    Popover: ({
+      open,
+      onOpenChange,
+      children,
+    }: React.PropsWithChildren<{
+      open: boolean;
+      onOpenChange: (open: boolean) => void;
+    }>) => <Context.Provider value={{ open, onOpenChange }}>{children}</Context.Provider>,
+    PopoverAnchor: ({ children }: React.PropsWithChildren) => <>{children}</>,
+    PopoverContent: ({ children, ...props }: React.HTMLAttributes<HTMLDivElement>) => {
+      const value = React.useContext(Context)!;
+      return value.open ? <div {...props}>{children}</div> : null;
+    },
+  };
+});
+
+vi.mock("@kandev/ui/drawer", () => ({
+  DrawerClose: ({ children }: { children: React.ReactNode }) => children,
+}));
+
+vi.mock("@/lib/api/domains/attachment-api", () => ({
+  attachmentContentUrl: (attachmentId: string) => `/api/v1/attachments/${attachmentId}/content`,
+}));
+
+vi.mock("react-i18next", () => ({
+  useTranslation: () => ({
+    t: (key: string, values?: { count?: number }) => {
+      const editCommentLabel = "Edit comment";
+      const copy: Record<string, string> = {
+        "task:previewPendingFeedback": "Pending feedback",
+        "task:previewClearAll": "Clear all",
+        "task:previewConfirmClearDescription":
+          "Remove all pending preview feedback from this task?",
+        "task:previewCancel": "Cancel",
+        "task:previewDeleteFeedback": "Delete feedback",
+        "task:previewEditFeedback": "Edit feedback",
+        "task:previewEditComment": editCommentLabel,
+        "task:previewSaveChanges": "Save changes",
+        "task:previewPendingEmpty": "No pending preview feedback.",
+        "task:previewFeedbackTitle": "Preview feedback",
+        "task:previewScreenshotAlt": "Screenshot preview",
+        "task:previewLoadFailed": "The pending preview feedback could not be loaded. Try again.",
+        "task:previewMutationFailed": "The feedback could not be saved. Try again.",
+        "common:close": "Close",
+      };
+      if (key === "task:previewFeedbackCount")
+        return `${values?.count ?? 0} preview feedback items`;
+      return copy[key] ?? key;
+    },
+  }),
+}));
+
+const editCommentLabel = "Edit comment";
+
+import {
+  PreviewFeedbackCollection,
+  PreviewFeedbackCollectionSurface,
+  type PreviewFeedbackCollectionController,
+} from "./preview-feedback-collection";
+
+const item: TaskPreviewFeedback = {
+  id: "feedback-1",
+  task_id: "task-1",
+  kind: "element",
+  comment: "Align this with the price",
+  source_kind: "browser",
+  source_session_id: "session-1",
+  source_label: "Local app",
+  page_route: "/products",
+  page_title: "Products",
+  element_snapshot: {
+    tag: "button",
+    id: "checkout",
+    classes: ["primary"],
+    outer_html: '<button id="checkout">Buy</button>',
+  },
+  version: 2,
+  created_at: "2026-09-15T00:00:00Z",
+  updated_at: "2026-09-15T00:00:00Z",
+};
+
+const snapshot: TaskPreviewFeedbackSnapshot = {
+  task_id: "task-1",
+  revision: 3,
+  items: [item],
+};
+
+function controller(
+  overrides: Partial<PreviewFeedbackCollectionController> = {},
+): PreviewFeedbackCollectionController {
+  return {
+    items: [item],
+    snapshot,
+    isLoading: false,
+    loadError: null,
+    isMutating: false,
+    mutationError: null,
+    update: vi.fn().mockResolvedValue(snapshot),
+    remove: vi.fn().mockResolvedValue(snapshot),
+    clear: vi.fn().mockResolvedValue({ task_id: "task-1", revision: 4, items: [] }),
+    ...overrides,
+  };
+}
+
+afterEach(cleanup);
+
+describe("PreviewFeedbackCollection", () => {
+  beforeEach(() => {
+    touchState.enabled = false;
+  });
+
+  it("edits, deletes, and clears with the displayed item versions and revision", async () => {
+    const collection = controller();
+    render(<PreviewFeedbackCollection collection={collection} touch={false} />);
+
+    fireEvent.click(screen.getByRole("button", { name: "Edit feedback" }));
+    const editor = screen.getByRole("textbox", { name: editCommentLabel });
+    fireEvent.change(editor, { target: { value: "Use a stronger contrast" } });
+    fireEvent.click(screen.getByRole("button", { name: "Save changes" }));
+    await waitFor(() =>
+      expect(collection.update).toHaveBeenCalledWith("feedback-1", "Use a stronger contrast", 2),
+    );
+
+    fireEvent.click(screen.getByRole("button", { name: "Delete feedback" }));
+    expect(collection.remove).toHaveBeenCalledWith("feedback-1", 2);
+
+    fireEvent.click(screen.getByRole("button", { name: "Clear all" }));
+    expect(screen.getByText("Remove all pending preview feedback from this task?")).toBeTruthy();
+    fireEvent.click(screen.getByRole("button", { name: "Clear all" }));
+    await waitFor(() => expect(collection.clear).toHaveBeenCalledWith(3));
+  });
+
+  it("retains an edit when the server reports a conflict", async () => {
+    const collection = controller({
+      update: vi.fn().mockResolvedValue(null),
+      mutationError: "The feedback changed.",
+    });
+    render(<PreviewFeedbackCollection collection={collection} touch={false} />);
+
+    fireEvent.click(screen.getByRole("button", { name: "Edit feedback" }));
+    const editor = screen.getByRole("textbox", { name: editCommentLabel });
+    fireEvent.change(editor, { target: { value: "Keep my typed change" } });
+    fireEvent.click(screen.getByRole("button", { name: "Save changes" }));
+
+    await waitFor(() => expect(collection.update).toHaveBeenCalled());
+    expect(
+      (screen.getByRole("textbox", { name: editCommentLabel }) as HTMLTextAreaElement).value,
+    ).toBe("Keep my typed change");
+    expect(screen.getByRole("alert").textContent).toContain("The feedback could not be saved.");
+  });
+
+  it("renders the authorized screenshot content for a persisted item", () => {
+    const screenshotItem: TaskPreviewFeedback = {
+      ...item,
+      id: "feedback-screenshot-1",
+      kind: "screenshot",
+      screenshot_attachment_id: "attachment-screenshot-1",
+      screenshot_attachment: {
+        attachment_id: "attachment-screenshot-1",
+        name: "preview.png",
+        mime_type: "image/png",
+        kind: "image",
+        delivery_mode: "prompt",
+        size_bytes: 128,
+        state: "claimed",
+      },
+    };
+    const collection = controller({
+      items: [screenshotItem],
+      snapshot: { ...snapshot, items: [screenshotItem] },
+    });
+    render(<PreviewFeedbackCollection collection={collection} touch={false} />);
+
+    expect(screen.getByRole("img", { name: "Screenshot preview" }).getAttribute("src")).toBe(
+      "/api/v1/attachments/attachment-screenshot-1/content",
+    );
+  });
+
+  it("shows loading errors and the empty collection state", () => {
+    const collection = controller({
+      items: [],
+      snapshot: { task_id: "task-1", revision: 4, items: [] },
+      loadError: "Could not load feedback.",
+    });
+    render(<PreviewFeedbackCollection collection={collection} touch={true} />);
+
+    expect(screen.getByRole("alert").textContent).toContain(
+      "The pending preview feedback could not be loaded.",
+    );
+    expect(screen.getByText("No pending preview feedback.")).toBeTruthy();
+  });
+});
+
+describe("PreviewFeedbackCollectionSurface", () => {
+  it("opens the desktop Popover from its task-scoped trigger", () => {
+    const collection = controller();
+    render(
+      <PreviewFeedbackCollectionSurface
+        taskId="task-1"
+        collection={collection}
+        open={false}
+        onOpenChange={vi.fn()}
+        showTrigger
+      />,
+    );
+
+    expect(screen.getByRole("button", { name: "1 preview feedback items" })).toBeTruthy();
+  });
+
+  it("uses the touch Drawer and keeps the trigger at a touch-sized target", () => {
+    touchState.enabled = true;
+    const collection = controller();
+    render(
+      <PreviewFeedbackCollectionSurface
+        taskId="task-1"
+        collection={collection}
+        open
+        onOpenChange={vi.fn()}
+        showTrigger
+      />,
+    );
+
+    const trigger = screen.getByRole("button", { name: "1 preview feedback items" });
+    expect(trigger.className).toContain("h-11");
+    expect(screen.getByTestId("preview-feedback-collection-drawer")).toBeTruthy();
+  });
+});
diff --git a/apps/web/components/task/inspector/preview-feedback-collection.tsx b/apps/web/components/task/inspector/preview-feedback-collection.tsx
new file mode 100644
index 0000000000..7f6bbc7b7d
--- /dev/null
+++ b/apps/web/components/task/inspector/preview-feedback-collection.tsx
@@ -0,0 +1,492 @@
+"use client";
+
+import { useEffect, useRef, useState, type MutableRefObject, type ReactNode } from "react";
+import { IconEdit, IconMessageDots, IconTrash, IconX } from "@tabler/icons-react";
+import { Button } from "@kandev/ui/button";
+import { DrawerClose } from "@kandev/ui/drawer";
+import { Popover, PopoverAnchor, PopoverContent } from "@kandev/ui/popover";
+import { Textarea } from "@kandev/ui/textarea";
+import { useTranslation } from "react-i18next";
+import { createFocusReturnHandler } from "@/lib/dialog-focus-return";
+import { useTouchDrawer } from "@/hooks/use-compact-task-chrome";
+import { MobilePickerSheet } from "@/components/task/mobile/mobile-picker-sheet";
+import { attachmentContentUrl } from "@/lib/api/domains/attachment-api";
+import type { TaskPreviewFeedback, TaskPreviewFeedbackSnapshot } from "@/lib/types/http";
+
+export type PreviewFeedbackCollectionController = {
+  items: TaskPreviewFeedback[];
+  snapshot?: TaskPreviewFeedbackSnapshot;
+  isLoading?: boolean;
+  loadError?: string | null;
+  isMutating: boolean;
+  mutationError: string | null;
+  update: (
+    id: string,
+    comment: string,
+    expectedVersion: number,
+  ) => Promise<TaskPreviewFeedbackSnapshot | null>;
+  remove: (id: string, expectedVersion: number) => Promise<TaskPreviewFeedbackSnapshot | null>;
+  clear: (expectedRevision: number) => Promise<TaskPreviewFeedbackSnapshot | null>;
+};
+
+export function previewFeedbackElementLabel(
+  item: Pick<TaskPreviewFeedback, "kind" | "element_snapshot">,
+) {
+  const element = item.element_snapshot;
+  if (!element) return "";
+  let label = element.tag;
+  if (element.id) label += `#${element.id}`;
+  else if (element.classes[0]) label += `.${element.classes[0]}`;
+  return `<${label}>`;
+}
+
+function feedbackEvidence(item: TaskPreviewFeedback) {
+  if (item.kind === "text") return item.selected_text ?? "";
+  if (item.kind === "element") return previewFeedbackElementLabel(item);
+  return item.screenshot_attachment?.name ?? "";
+}
+
+function FeedbackEvidence({ item }: { item: TaskPreviewFeedback }) {
+  const { t } = useTranslation();
+  if (item.kind === "screenshot" && item.screenshot_attachment) {
+    return (
+      <div className="mt-1 space-y-1">
+        <img
+          src={attachmentContentUrl(item.screenshot_attachment.attachment_id)}
+          alt={t("task:previewScreenshotAlt")}
+          className="max-h-40 w-full rounded border bg-background object-contain"
+        />
+        <p className="truncate font-mono text-xs">{item.screenshot_attachment.name}</p>
+      </div>
+    );
+  }
+  return <p className="line-clamp-2 break-words font-mono text-xs">{feedbackEvidence(item)}</p>;
+}
+
+function PendingFeedbackItem({
+  item,
+  collection,
+  touch,
+}: {
+  item: TaskPreviewFeedback;
+  collection: PreviewFeedbackCollectionController;
+  touch: boolean;
+}) {
+  const { t } = useTranslation();
+  const [editing, setEditing] = useState(false);
+  const [editComment, setEditComment] = useState("");
+  const actionClass = touch ? "h-11 min-w-11" : "h-7 min-w-7";
+
+  function startEditing() {
+    if (collection.isMutating) return;
+    setEditing(true);
+    setEditComment(item.comment);
+  }
+
+  async function saveEditing() {
+    const comment = editComment.trim();
+    if (!comment || collection.isMutating) return;
+    const result = await collection.update(item.id, comment, item.version);
+    if (result) setEditing(false);
+  }
+
+  return (
+    <li className="rounded-md border p-3" data-testid="preview-feedback-item">
+      <div className="flex items-start gap-2">
+        <div className="min-w-0 flex-1">
+          <p className="truncate text-xs text-muted-foreground">
+            {item.source_label} · {item.page_route}
+          </p>
+          <FeedbackEvidence item={item} />
+        </div>
+        <Button
+          type="button"
+          size="sm"
+          variant="ghost"
+          className={actionClass}
+          onClick={startEditing}
+          disabled={collection.isMutating}
+          aria-label={t("task:previewEditFeedback")}
+        >
+          <IconEdit className="h-4 w-4" />
+        </Button>
+        <Button
+          type="button"
+          size="sm"
+          variant="ghost"
+          className={actionClass}
+          onClick={() => void collection.remove(item.id, item.version)}
+          disabled={collection.isMutating}
+          aria-label={t("task:previewDeleteFeedback")}
+        >
+          <IconX className="h-4 w-4" />
+        </Button>
+      </div>
+      {editing ? (
+        <div className="mt-2 space-y-2">
+          <Textarea
+            value={editComment}
+            onChange={(event) => setEditComment(event.target.value)}
+            aria-label={t("task:previewEditComment")}
+            className="min-h-20"
+          />
+          <div className="flex justify-end gap-2">
+            <Button
+              type="button"
+              variant="ghost"
+              className={actionClass}
+              onClick={() => setEditing(false)}
+              disabled={collection.isMutating}
+            >
+              {t("task:previewCancel")}
+            </Button>
+            <Button
+              type="button"
+              className={actionClass}
+              onClick={() => void saveEditing()}
+              disabled={!editComment.trim() || collection.isMutating}
+            >
+              {t("task:previewSaveChanges")}
+            </Button>
+          </div>
+        </div>
+      ) : (
+        <p className="mt-2 break-words text-xs">{item.comment}</p>
+      )}
+    </li>
+  );
+}
+
+function CollectionHeader({
+  collection,
+  touch,
+}: {
+  collection: PreviewFeedbackCollectionController;
+  touch: boolean;
+}) {
+  const { t } = useTranslation();
+  const [confirmClear, setConfirmClear] = useState(false);
+  const actionClass = touch ? "h-11 min-w-11" : "h-7 min-w-7";
+
+  async function confirmClearCollection() {
+    if (collection.isMutating) return;
+    const result = await collection.clear(collection.snapshot?.revision ?? 0);
+    if (result) setConfirmClear(false);
+  }
+
+  return (
+    <>
+      <div className="flex items-center justify-between gap-2">
+        <h3 className="text-sm font-medium">{t("task:previewPendingFeedback")}</h3>
+        {collection.items.length > 0 && !confirmClear && (
+          <Button
+            type="button"
+            size="sm"
+            variant="ghost"
+            className={actionClass}
+            onClick={() => setConfirmClear(true)}
+            disabled={collection.isMutating}
+            aria-label={t("task:previewClearAll")}
+          >
+            <IconTrash className="h-4 w-4" />
+          </Button>
+        )}
+      </div>
+      {confirmClear && (
+        <div className="rounded-md border border-destructive/30 p-3">
+          <p className="text-xs text-muted-foreground">
+            {t("task:previewConfirmClearDescription")}
+          </p>
+          <div className="mt-2 flex justify-end gap-2">
+            <Button
+              type="button"
+              variant="ghost"
+              className={actionClass}
+              onClick={() => setConfirmClear(false)}
+              disabled={collection.isMutating}
+            >
+              {t("task:previewCancel")}
+            </Button>
+            <Button
+              type="button"
+              variant="destructive"
+              className={actionClass}
+              onClick={() => void confirmClearCollection()}
+              disabled={collection.isMutating}
+            >
+              {t("task:previewClearAll")}
+            </Button>
+          </div>
+        </div>
+      )}
+    </>
+  );
+}
+
+function CollectionStatus({
+  collection,
+  showEmpty,
+  showErrors,
+}: {
+  collection: PreviewFeedbackCollectionController;
+  showEmpty: boolean;
+  showErrors: boolean;
+}) {
+  const { t } = useTranslation();
+  return (
+    <>
+      {collection.isLoading && collection.items.length === 0 && (
+        <p role="status" className="py-4 text-center text-xs text-muted-foreground">
+          {t("task:previewLoadingFeedback")}
+        </p>
+      )}
+      {showErrors && collection.loadError && (
+        <p role="alert" className="text-xs text-destructive">
+          {t("task:previewLoadFailed")}
+        </p>
+      )}
+      {showErrors && collection.mutationError && (
+        <p role="alert" className="text-xs text-destructive">
+          {t("task:previewMutationFailed")}
+        </p>
+      )}
+      {showEmpty && !collection.isLoading && collection.items.length === 0 && (
+        <p className="py-4 text-center text-xs text-muted-foreground">
+          {t("task:previewPendingEmpty")}
+        </p>
+      )}
+    </>
+  );
+}
+
+export function PreviewFeedbackCollection({
+  collection,
+  touch,
+  showEmpty = true,
+  showErrors = true,
+}: {
+  collection: PreviewFeedbackCollectionController;
+  touch: boolean;
+  showEmpty?: boolean;
+  showErrors?: boolean;
+}) {
+  return (
+    <section className="space-y-2" data-testid="preview-feedback-collection">
+      <CollectionHeader collection={collection} touch={touch} />
+      <CollectionStatus collection={collection} showEmpty={showEmpty} showErrors={showErrors} />
+      <ul className="space-y-2">
+        {collection.items.map((item) => (
+          <PendingFeedbackItem key={item.id} item={item} collection={collection} touch={touch} />
+        ))}
+      </ul>
+    </section>
+  );
+}
+
+type CollectionSurfaceProps = {
+  taskId: string | null | undefined;
+  collection: PreviewFeedbackCollectionController;
+  open: boolean;
+  onOpenChange: (open: boolean) => void;
+  showTrigger?: boolean;
+};
+
+function CollectionTrigger({
+  collection,
+  touch,
+  title,
+  countLabel,
+  showTrigger,
+  focusReturnRef,
+  onOpen,
+}: {
+  collection: PreviewFeedbackCollectionController;
+  touch: boolean;
+  title: string;
+  countLabel: string;
+  showTrigger: boolean;
+  focusReturnRef: MutableRefObject<HTMLElement | null>;
+  onOpen: () => void;
+}) {
+  if (!showTrigger) return null;
+  return (
+    <Button
+      ref={(element) => {
+        if (element && !focusReturnRef.current) focusReturnRef.current = element;
+      }}
+      type="button"
+      variant="outline"
+      onClick={onOpen}
+      className={touch ? "h-11 min-w-11 gap-1 px-2 text-xs" : "h-8 gap-1 px-2 text-xs"}
+      aria-label={countLabel}
+      title={title}
+      data-testid="preview-feedback-collection-trigger"
+    >
+      <IconMessageDots className="h-4 w-4 shrink-0" aria-hidden="true" />
+      <span>{title}</span>
+      <span className="font-medium tabular-nums">{collection.items.length}</span>
+    </Button>
+  );
+}
+
+function TouchCollectionSurface({
+  collection,
+  open,
+  onOpenChange,
+  title,
+  closeFocus,
+}: {
+  collection: PreviewFeedbackCollectionController;
+  open: boolean;
+  onOpenChange: (open: boolean) => void;
+  title: string;
+  closeFocus: (event: Event) => void;
+}) {
+  const { t } = useTranslation();
+  return (
+    <MobilePickerSheet
+      open={open}
+      onOpenChange={onOpenChange}
+      title={title}
+      contentTestId="preview-feedback-collection-body"
+      confirmationHost
+      onCloseAutoFocus={closeFocus}
+      headerAction={
+        <DrawerClose asChild>
+          <Button
+            type="button"
+            variant="ghost"
+            className="h-11 min-w-11"
+            aria-label={t("common:close")}
+          >
+            <IconX className="h-4 w-4" />
+          </Button>
+        </DrawerClose>
+      }
+    >
+      <PreviewFeedbackCollection collection={collection} touch />
+    </MobilePickerSheet>
+  );
+}
+
+function DesktopCollectionSurface({
+  collection,
+  open,
+  onOpenChange,
+  title,
+  closeFocus,
+  trigger,
+}: {
+  collection: PreviewFeedbackCollectionController;
+  open: boolean;
+  onOpenChange: (open: boolean) => void;
+  title: string;
+  closeFocus: (event: Event) => void;
+  trigger: ReactNode;
+}) {
+  const { t } = useTranslation();
+  return (
+    <Popover open={open} onOpenChange={onOpenChange}>
+      <div className="relative">
+        {trigger}
+        <PopoverAnchor asChild>
+          <span aria-hidden="true" className="absolute bottom-0 right-0 h-px w-px" />
+        </PopoverAnchor>
+        <PopoverContent
+          side="top"
+          align="end"
+          portal={false}
+          onCloseAutoFocus={closeFocus}
+          className="w-96 max-w-[calc(100vw-1rem)] overflow-hidden p-0"
+          data-testid="preview-feedback-collection-popover"
+        >
+          <div className="flex items-center justify-between gap-2 border-b px-3 py-2">
+            <h2 className="text-sm font-medium">{title}</h2>
+            <Button
+              type="button"
+              variant="ghost"
+              className="h-7 min-w-7"
+              onClick={() => onOpenChange(false)}
+              aria-label={t("common:close")}
+            >
+              <IconX className="h-4 w-4" />
+            </Button>
+          </div>
+          <div className="max-h-[min(36rem,calc(100dvh-1rem))] overflow-y-auto p-3">
+            <PreviewFeedbackCollection collection={collection} touch={false} />
+          </div>
+        </PopoverContent>
+      </div>
+    </Popover>
+  );
+}
+
+export function PreviewFeedbackCollectionSurface({
+  taskId,
+  collection,
+  open,
+  onOpenChange,
+  showTrigger = false,
+}: CollectionSurfaceProps) {
+  const { t } = useTranslation();
+  const touch = useTouchDrawer();
+  const focusReturnRef = useRef<HTMLElement | null>(null);
+  const title = t("task:previewFeedbackTitle");
+  const countLabel = t("task:previewFeedbackCount", { count: collection.items.length });
+
+  useEffect(() => {
+    if (!open) return;
+    if (document.activeElement instanceof HTMLElement) {
+      focusReturnRef.current = document.activeElement;
+    }
+  }, [open]);
+
+  if (!taskId) return null;
+
+  const rememberFocusAndOpen = () => {
+    if (document.activeElement instanceof HTMLElement) {
+      focusReturnRef.current = document.activeElement;
+    }
+    onOpenChange(true);
+  };
+  const trigger = (
+    <CollectionTrigger
+      collection={collection}
+      touch={touch}
+      title={title}
+      countLabel={countLabel}
+      showTrigger={showTrigger}
+      focusReturnRef={focusReturnRef}
+      onOpen={rememberFocusAndOpen}
+    />
+  );
+  const closeFocus = createFocusReturnHandler(focusReturnRef);
+
+  if (touch) {
+    return (
+      <>
+        {trigger}
+        <TouchCollectionSurface
+          collection={collection}
+          open={open}
+          onOpenChange={onOpenChange}
+          title={title}
+          closeFocus={closeFocus}
+        />
+      </>
+    );
+  }
+
+  return (
+    <>
+      <DesktopCollectionSurface
+        collection={collection}
+        open={open}
+        onOpenChange={onOpenChange}
+        title={title}
+        closeFocus={closeFocus}
+        trigger={trigger}
+      />
+    </>
+  );
+}
diff --git a/apps/web/components/task/inspector/preview-feedback-controls.integration.test.tsx b/apps/web/components/task/inspector/preview-feedback-controls.integration.test.tsx
new file mode 100644
index 0000000000..9836511eb5
--- /dev/null
+++ b/apps/web/components/task/inspector/preview-feedback-controls.integration.test.tsx
@@ -0,0 +1,159 @@
+import { act, fireEvent, render, screen, waitFor } from "@testing-library/react";
+import { afterEach, beforeEach, describe, expect, it, vi } from "vitest";
+import { INSPECTOR_PROTOCOL_VERSION } from "@/lib/preview-inspect-bridge";
+import type { TaskPreviewFeedback } from "@/lib/types/http";
+
+const screenshotComment = "Keep this screenshot";
+
+const feedback = vi.hoisted(() => ({
+  items: [] as TaskPreviewFeedback[],
+  snapshot: { task_id: "task-1", revision: 0, items: [] as TaskPreviewFeedback[] },
+  create: vi.fn(),
+  update: vi.fn(),
+  remove: vi.fn(),
+  clear: vi.fn(),
+  isMutating: false,
+  mutationError: null as string | null,
+}));
+vi.mock("@/hooks/domains/comments/use-preview-feedback", () => ({
+  usePreviewFeedback: () => feedback,
+}));
+vi.mock("@/components/state-provider", () => ({
+  useAppStore: (selector: (state: unknown) => unknown) =>
+    selector({
+      kanban: { tasks: [{ id: "task-1", workspaceId: "workspace-1" }] },
+      kanbanMulti: { snapshots: {} },
+      workspaces: { activeId: "workspace-1" },
+    }),
+}));
+
+const attachments = vi.hoisted(() => ({
+  uploadAttachment: vi.fn(),
+  deleteAttachment: vi.fn(),
+}));
+vi.mock("@/lib/api/domains/attachment-api", () => attachments);
+
+const html2canvas = vi.hoisted(() => vi.fn());
+vi.mock("html2canvas-pro", () => ({ default: html2canvas }));
+
+const bridge = vi.hoisted(() => ({
+  sendSetPreviewCaptureMode: vi.fn(),
+  sendProjectPreviewMarkers: vi.fn(),
+}));
+vi.mock("@/lib/preview-inspect-bridge", async () => {
+  const actual = await vi.importActual<typeof import("@/lib/preview-inspect-bridge")>(
+    "@/lib/preview-inspect-bridge",
+  );
+  return { ...actual, ...bridge };
+});
+
+vi.mock("@/hooks/use-compact-task-chrome", () => ({
+  useTouchDrawer: () => false,
+}));
+
+import { PreviewFeedbackControls } from "./preview-feedback-controls";
+import { usePreviewCapture } from "@/hooks/use-preview-capture";
+
+function Harness({ iframeRef }: { iframeRef: React.RefObject<HTMLIFrameElement | null> }) {
+  const capture = usePreviewCapture({
+    taskId: "task-1",
+    iframeRef,
+    source: { kind: "browser", sessionId: "session-1", label: "Local app" },
+    enabled: true,
+  });
+  return <PreviewFeedbackControls capture={capture} enabled />;
+}
+
+function dispatch(iframe: HTMLIFrameElement, data: unknown) {
+  window.dispatchEvent(new MessageEvent("message", { source: iframe.contentWindow, data }));
+}
+
+describe("PreviewFeedbackControls with the capture controller", () => {
+  beforeEach(() => {
+    document.body.innerHTML = "";
+    vi.clearAllMocks();
+    feedback.items = [];
+    feedback.snapshot = { task_id: "task-1", revision: 0, items: [] };
+    feedback.create.mockResolvedValue(null);
+    attachments.uploadAttachment.mockResolvedValue({ attachment_id: "attachment-1" });
+    attachments.deleteAttachment.mockResolvedValue(undefined);
+    html2canvas.mockResolvedValue({
+      width: 320,
+      height: 180,
+      toBlob: (callback: BlobCallback) =>
+        callback(
+          new Blob([new Uint8Array([137, 80, 78, 71, 13, 10, 26, 10])], { type: "image/png" }),
+        ),
+    });
+    Object.defineProperty(URL, "createObjectURL", {
+      configurable: true,
+      value: vi.fn(() => "blob:preview"),
+    });
+    Object.defineProperty(URL, "revokeObjectURL", {
+      configurable: true,
+      value: vi.fn(),
+    });
+  });
+
+  afterEach(() => {
+    document.body.innerHTML = "";
+  });
+
+  it("retains the comment and uploaded PNG after create fails, then retries without upload", async () => {
+    const iframe = document.createElement("iframe");
+    document.body.appendChild(iframe);
+    const iframeRef = { current: iframe };
+    render(<Harness iframeRef={iframeRef} />);
+
+    let resolveCreate: ((value: null) => void) | undefined;
+    feedback.create.mockImplementation(
+      () => new Promise<null>((resolve) => (resolveCreate = resolve)),
+    );
+
+    act(() =>
+      dispatch(iframe, {
+        source: "kandev-inspector",
+        version: INSPECTOR_PROTOCOL_VERSION,
+        type: "screenshot-region-selected",
+        payload: {
+          page_route: "/checkout",
+          page_title: "Checkout",
+          capture_rect: { x: 0, y: 0, width: 320, height: 180 },
+        },
+      }),
+    );
+    await waitFor(() => expect(screen.getByTestId("preview-feedback-draft")).toBeTruthy());
+
+    const comment = screen.getByLabelText("Comment on selection");
+    fireEvent.change(comment, { target: { value: screenshotComment } });
+    fireEvent.click(screen.getByRole("button", { name: "Save feedback" }));
+
+    await waitFor(() =>
+      expect(feedback.create).toHaveBeenCalledWith(
+        expect.objectContaining({
+          comment: screenshotComment,
+          screenshotAttachmentId: "attachment-1",
+        }),
+      ),
+    );
+    await waitFor(() => expect(resolveCreate).toBeDefined());
+    await act(async () => resolveCreate?.(null));
+    expect((screen.getByLabelText("Comment on selection") as HTMLTextAreaElement).value).toBe(
+      screenshotComment,
+    );
+    expect(screen.getByRole("img", { name: "Screenshot preview" }).getAttribute("src")).toBe(
+      "blob:preview",
+    );
+
+    feedback.create.mockResolvedValue(null);
+    fireEvent.click(screen.getByRole("button", { name: "Save feedback" }));
+    await waitFor(() => expect(feedback.create).toHaveBeenCalledTimes(2));
+    expect(attachments.uploadAttachment).toHaveBeenCalledTimes(1);
+    expect(feedback.create).toHaveBeenLastCalledWith(
+      expect.objectContaining({
+        comment: screenshotComment,
+        screenshotAttachmentId: "attachment-1",
+      }),
+    );
+  });
+});
diff --git a/apps/web/components/task/inspector/preview-feedback-controls.test.tsx b/apps/web/components/task/inspector/preview-feedback-controls.test.tsx
new file mode 100644
index 0000000000..5594ebdcef
--- /dev/null
+++ b/apps/web/components/task/inspector/preview-feedback-controls.test.tsx
@@ -0,0 +1,210 @@
+import { cleanup, fireEvent, render, screen } from "@testing-library/react";
+import { afterEach, beforeEach, describe, expect, it, vi } from "vitest";
+import type { TaskPreviewFeedback } from "@/lib/types/http";
+
+const drawerMode = vi.hoisted(() => ({ value: false }));
+vi.mock("@/hooks/use-compact-task-chrome", () => ({
+  useTouchDrawer: () => drawerMode.value,
+}));
+
+vi.mock("@kandev/ui/popover", async () => {
+  const React = await import("react");
+  const Context = React.createContext<{ open: boolean; setOpen: (open: boolean) => void } | null>(
+    null,
+  );
+  return {
+    Popover: ({
+      open,
+      onOpenChange,
+      children,
+    }: React.PropsWithChildren<{ open: boolean; onOpenChange: (open: boolean) => void }>) => (
+      <Context.Provider value={{ open, setOpen: onOpenChange }}>{children}</Context.Provider>
+    ),
+    PopoverTrigger: ({ children }: React.PropsWithChildren) => {
+      const value = React.useContext(Context)!;
+      return React.cloneElement(children as React.ReactElement<{ onClick?: () => void }>, {
+        onClick: () => value.setOpen(!value.open),
+      });
+    },
+    PopoverContent: ({ children, ...props }: React.HTMLAttributes<HTMLDivElement>) => {
+      const value = React.useContext(Context)!;
+      return value.open ? <div {...props}>{children}</div> : null;
+    },
+  };
+});
+
+vi.mock("@kandev/ui/drawer", async () => {
+  const React = await import("react");
+  const Context = React.createContext<{ open: boolean; setOpen: (open: boolean) => void } | null>(
+    null,
+  );
+  return {
+    Drawer: ({
+      open,
+      onOpenChange,
+      children,
+    }: React.PropsWithChildren<{ open: boolean; onOpenChange: (open: boolean) => void }>) => (
+      <Context.Provider value={{ open, setOpen: onOpenChange }}>{children}</Context.Provider>
+    ),
+    DrawerContent: ({ children, ...props }: React.HTMLAttributes<HTMLDivElement>) => {
+      const value = React.useContext(Context)!;
+      return value.open ? <div {...props}>{children}</div> : null;
+    },
+    DrawerHeader: (props: React.HTMLAttributes<HTMLDivElement>) => <div {...props} />,
+    DrawerTitle: (props: React.HTMLAttributes<HTMLHeadingElement>) => <h2 {...props} />,
+  };
+});
+
+import {
+  PreviewFeedbackControls,
+  type PreviewFeedbackController,
+} from "./preview-feedback-controls";
+
+const item: TaskPreviewFeedback = {
+  id: "feedback-1",
+  task_id: "task-1",
+  kind: "element",
+  comment: "Align this with the price",
+  source_kind: "browser",
+  source_session_id: "session-1",
+  source_label: "Local app",
+  page_route: "/products",
+  page_title: "Products",
+  element_snapshot: {
+    tag: "button",
+    id: "checkout",
+    classes: ["primary"],
+    outer_html: '<button id="checkout">Buy</button>',
+  },
+  version: 2,
+  created_at: "2026-09-15T00:00:00Z",
+  updated_at: "2026-09-15T00:00:00Z",
+};
+
+function controller(overrides: Partial<PreviewFeedbackController> = {}): PreviewFeedbackController {
+  const value: PreviewFeedbackController = {
+    items: [item],
+    snapshot: { task_id: "task-1", revision: 3, items: [item] },
+    mode: null,
+    draft: null,
+    draftComment: "",
+    setDraftComment: vi.fn(),
+    candidateLabel: null,
+    captureError: null,
+    isRasterizing: false,
+    isUploading: false,
+    isMutating: false,
+    mutationError: null,
+    startCapture: vi.fn(),
+    cancelCapture: vi.fn(),
+    discardDraft: vi.fn(),
+    saveDraft: vi.fn(),
+    update: vi.fn(),
+    remove: vi.fn(),
+    clear: vi.fn(),
+    ...overrides,
+  };
+  if (!overrides.setDraftComment) {
+    value.setDraftComment = vi.fn((comment: string) => {
+      value.draftComment = comment;
+    });
+  }
+  return value;
+}
+
+describe("PreviewFeedbackControls", () => {
+  afterEach(cleanup);
+
+  beforeEach(() => {
+    drawerMode.value = false;
+  });
+
+  it("offers text and visually hinted element selection from a desktop review popover", () => {
+    const capture = controller();
+    render(<PreviewFeedbackControls capture={capture} enabled />);
+
+    fireEvent.click(screen.getByRole("button", { name: /Annotate.*1/i }));
+    expect(screen.getByTestId("preview-feedback-popover")).toBeTruthy();
+    fireEvent.click(screen.getByRole("button", { name: "Select element" }));
+    expect(capture.startCapture).toHaveBeenCalledWith("element");
+  });
+
+  it("offers screenshot-region mode and shows the actual PNG before saving", () => {
+    const capture = controller({
+      items: [],
+      snapshot: { task_id: "task-1", revision: 0, items: [] },
+      draft: {
+        kind: "screenshot",
+        page_route: "/checkout",
+        page_title: "Checkout",
+        capture_rect: { x: 20, y: 40, width: 300, height: 180 },
+        screenshot: {
+          blob: new Blob([], { type: "image/png" }),
+          width: 600,
+          height: 360,
+          previewUrl: "blob:preview-screenshot",
+          fileName: "preview.png",
+        },
+      },
+    });
+    render(<PreviewFeedbackControls capture={capture} enabled />);
+
+    const preview = screen.getByRole("img", { name: "Screenshot preview" });
+    expect(preview.getAttribute("src")).toBe("blob:preview-screenshot");
+    expect(screen.getByText("600 × 360 · PNG")).toBeTruthy();
+  });
+
+  it("keeps the captured evidence while collecting the required comment", async () => {
+    const capture = controller({
+      items: [],
+      snapshot: { task_id: "task-1", revision: 0, items: [] },
+      draft: {
+        kind: "text",
+        page_route: "/checkout",
+        page_title: "Checkout",
+        selected_text: "$42.00",
+        text_anchor: {
+          start: { node_path: [0], offset: 0 },
+          end: { node_path: [0], offset: 6 },
+        },
+      },
+    });
+    const { rerender } = render(<PreviewFeedbackControls capture={capture} enabled />);
+
+    expect(screen.getByText("$42.00")).toBeTruthy();
+    const comment = screen.getByLabelText("Comment on selection");
+    fireEvent.change(comment, { target: { value: "Keep the generated total visible" } });
+    rerender(<PreviewFeedbackControls capture={capture} enabled />);
+    fireEvent.click(screen.getByRole("button", { name: "Save feedback" }));
+    expect(capture.saveDraft).toHaveBeenCalledWith("Keep the generated total visible");
+  });
+
+  it("reuses the saved collection editor for item management", () => {
+    const capture = controller();
+    render(<PreviewFeedbackControls capture={capture} enabled />);
+
+    fireEvent.click(screen.getByRole("button", { name: /Annotate.*1/i }));
+    fireEvent.click(screen.getByRole("button", { name: "Edit feedback" }));
+    const editor = screen.getByRole("textbox", { name: "Edit comment" });
+    fireEvent.change(editor, { target: { value: "Keep the button aligned" } });
+    fireEvent.click(screen.getByRole("button", { name: "Save changes" }));
+
+    expect(capture.update).toHaveBeenCalledWith("feedback-1", "Keep the button aligned", 2);
+  });
+
+  it("uses a touch-sized drawer entry and exposes the same capture choices", () => {
+    drawerMode.value = true;
+    const capture = controller();
+    render(<PreviewFeedbackControls capture={capture} enabled />);
+
+    const trigger = screen.getByRole("button", { name: /Annotate.*1/i });
+    expect(trigger.className).toContain("h-11");
+    fireEvent.click(trigger);
+    expect(screen.getByTestId("preview-feedback-drawer")).toBeTruthy();
+    fireEvent.click(screen.getByRole("button", { name: "Select text" }));
+    expect(capture.startCapture).toHaveBeenCalledWith("text");
+    fireEvent.click(screen.getByRole("button", { name: /Annotate.*1/i }));
+    fireEvent.click(screen.getByRole("button", { name: "Select screenshot region" }));
+    expect(capture.startCapture).toHaveBeenCalledWith("screenshot");
+  });
+});
diff --git a/apps/web/components/task/inspector/preview-feedback-controls.tsx b/apps/web/components/task/inspector/preview-feedback-controls.tsx
new file mode 100644
index 0000000000..19c7b3782c
--- /dev/null
+++ b/apps/web/components/task/inspector/preview-feedback-controls.tsx
@@ -0,0 +1,337 @@
+"use client";
+
+import { useEffect, useRef, useState } from "react";
+import {
+  IconClick,
+  IconMessagePlus,
+  IconScreenshot,
+  IconTextScan2,
+  IconX,
+} from "@tabler/icons-react";
+import { Button } from "@kandev/ui/button";
+import { Drawer, DrawerContent, DrawerHeader, DrawerTitle } from "@kandev/ui/drawer";
+import { Textarea } from "@kandev/ui/textarea";
+import { useTranslation } from "react-i18next";
+import { useTouchDrawer } from "@/hooks/use-compact-task-chrome";
+import type { PreviewCaptureMode } from "@/lib/preview-inspect-bridge";
+import type { PreviewFeedbackDraft } from "@/hooks/use-preview-capture";
+import {
+  PreviewFeedbackCollection,
+  previewFeedbackElementLabel,
+  type PreviewFeedbackCollectionController,
+} from "./preview-feedback-collection";
+
+export type PreviewFeedbackController = PreviewFeedbackCollectionController & {
+  mode: PreviewCaptureMode | null;
+  draft: PreviewFeedbackDraft | null;
+  draftComment: string;
+  setDraftComment: (comment: string) => void;
+  candidateLabel: string | null;
+  captureError: "raster" | "upload" | "workspace" | null;
+  isRasterizing: boolean;
+  isUploading: boolean;
+  isMutating: boolean;
+  mutationError: string | null;
+  startCapture: (mode: PreviewCaptureMode) => void;
+  cancelCapture: () => void;
+  discardDraft: () => void;
+  saveDraft: (comment: string) => Promise<boolean>;
+};
+
+type PreviewFeedbackControlsProps = {
+  capture: PreviewFeedbackController;
+  enabled: boolean;
+};
+
+function draftEvidence(draft: PreviewFeedbackDraft) {
+  if (draft.kind === "text") return draft.selected_text ?? "";
+  if (draft.kind === "screenshot") return "";
+  const element = draft.element_snapshot;
+  if (!element) return "";
+  return previewFeedbackElementLabel({ kind: "element", element_snapshot: element });
+}
+
+function CaptureChoices({
+  capture,
+  onChoose,
+  touch,
+}: {
+  capture: PreviewFeedbackController;
+  onChoose: (mode: PreviewCaptureMode) => void;
+  touch: boolean;
+}) {
+  const { t } = useTranslation();
+  const buttonClass = touch ? "h-11 min-w-0 gap-1 px-2 text-xs" : "h-8 min-w-0 gap-1 px-2 text-xs";
+  return (
+    <div className="grid grid-cols-3 gap-1.5">
+      <Button
+        type="button"
+        variant="outline"
+        className={buttonClass}
+        onClick={() => onChoose("text")}
+        aria-label={t("task:previewSelectText")}
+      >
+        <IconTextScan2 className="h-4 w-4 shrink-0" aria-hidden="true" />
+        <span className="truncate">{t("task:previewCaptureText")}</span>
+      </Button>
+      <Button
+        type="button"
+        variant="outline"
+        className={buttonClass}
+        onClick={() => onChoose("element")}
+        aria-label={t("task:previewSelectElement")}
+      >
+        <IconClick className="h-4 w-4 shrink-0" aria-hidden="true" />
+        <span className="truncate">{t("task:previewCaptureElement")}</span>
+      </Button>
+      <Button
+        type="button"
+        variant="outline"
+        className={buttonClass}
+        onClick={() => onChoose("screenshot")}
+        aria-label={t("task:previewSelectScreenshot")}
+      >
+        <IconScreenshot className="h-4 w-4 shrink-0" aria-hidden="true" />
+        <span className="truncate">{t("task:previewCaptureScreenshot")}</span>
+      </Button>
+      {capture.mode && (
+        <Button
+          type="button"
+          variant="ghost"
+          className={`${buttonClass} col-span-3`}
+          onClick={capture.cancelCapture}
+        >
+          <IconX className="h-4 w-4" />
+          {t("task:previewCancelSelection")}
+        </Button>
+      )}
+    </div>
+  );
+}
+
+function DraftEditor({ capture, touch }: { capture: PreviewFeedbackController; touch: boolean }) {
+  const { t } = useTranslation();
+  if (!capture.draft) return null;
+
+  return (
+    <section
+      className="space-y-2 rounded-md border bg-muted/30 p-3"
+      data-testid="preview-feedback-draft"
+    >
+      <div className="min-w-0">
+        <p className="truncate text-xs text-muted-foreground">{capture.draft.page_route}</p>
+        {capture.draft.kind === "screenshot" ? (
+          <div className="mt-2 space-y-1">
+            <img
+              src={capture.draft.screenshot.previewUrl}
+              alt={t("task:previewScreenshotAlt")}
+              className="max-h-56 w-full rounded border bg-background object-contain"
+            />
+            <p className="text-xs text-muted-foreground">
+              {t("task:previewScreenshotDimensions", {
+                width: capture.draft.screenshot.width,
+                height: capture.draft.screenshot.height,
+              })}
+            </p>
+          </div>
+        ) : (
+          <p className="line-clamp-3 break-words font-mono text-xs">
+            {draftEvidence(capture.draft)}
+          </p>
+        )}
+      </div>
+      <Textarea
+        value={capture.draftComment}
+        onChange={(event) => capture.setDraftComment(event.target.value)}
+        aria-label={t("task:previewCommentSelection")}
+        placeholder={t("task:previewCommentPlaceholder")}
+        className="min-h-20 resize-y"
+      />
+      <div className="flex justify-end gap-2">
+        <Button
+          type="button"
+          variant="ghost"
+          className={touch ? "h-11" : "h-8"}
+          onClick={capture.discardDraft}
+          disabled={capture.isMutating}
+        >
+          {t("task:previewDiscardSelection")}
+        </Button>
+        <Button
+          type="button"
+          className={touch ? "h-11" : "h-8"}
+          onClick={() => void capture.saveDraft(capture.draftComment)}
+          disabled={!capture.draftComment.trim() || capture.isMutating || capture.isUploading}
+        >
+          {capture.isUploading
+            ? t("task:previewUploadingScreenshot")
+            : t("task:previewSaveFeedback")}
+        </Button>
+      </div>
+    </section>
+  );
+}
+
+function FeedbackSurface({
+  capture,
+  touch,
+  onChoose,
+}: {
+  capture: PreviewFeedbackController;
+  touch: boolean;
+  onChoose: (mode: PreviewCaptureMode) => void;
+}) {
+  const { t } = useTranslation();
+  return (
+    <div
+      className="min-h-0 space-y-4 overflow-y-auto p-3"
+      data-vaul-no-drag={touch ? "" : undefined}
+    >
+      <CaptureChoices capture={capture} onChoose={onChoose} touch={touch} />
+      {capture.isRasterizing && (
+        <p role="status" className="text-xs text-muted-foreground">
+          {t("task:previewRasterizing")}
+        </p>
+      )}
+      <DraftEditor capture={capture} touch={touch} />
+      {(capture.mutationError || capture.captureError) && (
+        <p role="alert" className="text-xs text-destructive">
+          {capture.captureError
+            ? t("task:previewScreenshotFailed")
+            : t("task:previewMutationFailed")}
+        </p>
+      )}
+      <PreviewFeedbackCollection
+        collection={capture}
+        touch={touch}
+        showEmpty={!capture.draft}
+        showErrors={false}
+      />
+    </div>
+  );
+}
+
+function Trigger({
+  capture,
+  enabled,
+  touch,
+  onClick,
+}: PreviewFeedbackControlsProps & { touch: boolean; onClick?: () => void }) {
+  const { t } = useTranslation();
+  const label = t("task:previewAnnotateWithCount", { count: capture.items.length });
+  return (
+    <Button
+      type="button"
+      size="sm"
+      variant={capture.mode ? "default" : "ghost"}
+      disabled={!enabled}
+      onClick={onClick}
+      className={
+        touch
+          ? "h-11 min-w-11 cursor-pointer gap-1 px-2 text-xs"
+          : "h-7 min-w-7 cursor-pointer gap-1 px-1.5 text-xs"
+      }
+      aria-label={label}
+      title={label}
+      data-testid="preview-feedback-trigger"
+    >
+      <IconMessagePlus className="h-4 w-4 shrink-0" aria-hidden="true" />
+      {capture.items.length > 0 && (
+        <span className="font-medium tabular-nums">{capture.items.length}</span>
+      )}
+    </Button>
+  );
+}
+
+export function PreviewFeedbackControls({ capture, enabled }: PreviewFeedbackControlsProps) {
+  const { t } = useTranslation();
+  const touch = useTouchDrawer();
+  const [open, setOpen] = useState(false);
+  const desktopRootRef = useRef<HTMLDivElement>(null);
+  const [desktopMaxHeight, setDesktopMaxHeight] = useState(576);
+
+  useEffect(() => {
+    if (capture.draft || capture.isRasterizing || capture.captureError) setOpen(true);
+  }, [capture.captureError, capture.draft, capture.isRasterizing]);
+
+  useEffect(() => {
+    if (!open || touch) return;
+    const root = desktopRootRef.current;
+    const updateHeight = () => {
+      const bottom = root?.getBoundingClientRect().bottom ?? 0;
+      setDesktopMaxHeight(Math.max(96, window.innerHeight - bottom - 8));
+    };
+    const closeOnEscape = (event: KeyboardEvent) => {
+      if (event.key === "Escape") setOpen(false);
+    };
+    const closeOnOutsidePointer = (event: PointerEvent) => {
+      if (root && !event.composedPath().includes(root)) setOpen(false);
+    };
+    updateHeight();
+    window.addEventListener("resize", updateHeight);
+    document.addEventListener("keydown", closeOnEscape);
+    document.addEventListener("pointerdown", closeOnOutsidePointer);
+    return () => {
+      window.removeEventListener("resize", updateHeight);
+      document.removeEventListener("keydown", closeOnEscape);
+      document.removeEventListener("pointerdown", closeOnOutsidePointer);
+    };
+  }, [open, touch]);
+
+  function choose(mode: PreviewCaptureMode) {
+    capture.startCapture(mode);
+    setOpen(false);
+  }
+
+  const candidateStatus = (
+    <span className="sr-only" role="status" aria-live="polite">
+      {capture.candidateLabel
+        ? t("task:previewCandidate", { candidate: capture.candidateLabel })
+        : ""}
+    </span>
+  );
+
+  if (touch) {
+    return (
+      <Drawer open={open} onOpenChange={setOpen}>
+        <Trigger capture={capture} enabled={enabled} touch onClick={() => setOpen(true)} />
+        <DrawerContent
+          className="max-h-[80dvh] overflow-hidden pb-[env(safe-area-inset-bottom)]"
+          data-testid="preview-feedback-drawer"
+        >
+          <DrawerHeader className="border-b text-left">
+            <DrawerTitle>{t("task:previewFeedbackTitle")}</DrawerTitle>
+          </DrawerHeader>
+          <FeedbackSurface capture={capture} touch onChoose={choose} />
+        </DrawerContent>
+        {candidateStatus}
+      </Drawer>
+    );
+  }
+
+  return (
+    <div ref={desktopRootRef} className="relative">
+      <Trigger
+        capture={capture}
+        enabled={enabled}
+        touch={false}
+        onClick={() => setOpen((current) => !current)}
+      />
+      {open && (
+        <div
+          role="dialog"
+          aria-label={t("task:previewFeedbackTitle")}
+          className="absolute right-0 top-[calc(100%+0.25rem)] z-50 flex w-96 max-w-[calc(100vw-1rem)] flex-col overflow-hidden rounded-lg bg-popover text-xs text-popover-foreground shadow-md ring-1 ring-foreground/10"
+          style={{ maxHeight: Math.min(desktopMaxHeight, 576) }}
+          data-testid="preview-feedback-popover"
+        >
+          <div className="border-b px-3 py-2">
+            <h2 className="text-sm font-medium">{t("task:previewFeedbackTitle")}</h2>
+          </div>
+          <FeedbackSurface capture={capture} touch={false} onChoose={choose} />
+        </div>
+      )}
+      {candidateStatus}
+    </div>
+  );
+}
diff --git a/apps/web/components/task/mobile/mobile-file-viewer-panel.test.tsx b/apps/web/components/task/mobile/mobile-file-viewer-panel.test.tsx
index d0a9ff9fee..b9015615d0 100644
--- a/apps/web/components/task/mobile/mobile-file-viewer-panel.test.tsx
+++ b/apps/web/components/task/mobile/mobile-file-viewer-panel.test.tsx
@@ -25,7 +25,18 @@ const state = {
     },
   },
   tasks: { activeTaskId: "task-1" },
+  kanban: { tasks: [] },
+  kanbanMulti: { snapshots: {} },
+  workspaces: { activeId: null },
+  previewFeedback: {
+    byTaskId: {},
+    loadedByTaskId: {},
+    loadingByTaskId: {},
+    errorByTaskId: {},
+  },
+  connection: { status: "disconnected" },
 };
+const storeApi = { getState: () => state };
 const README_CONTENT = "# README";
 const REPORT_CONTENT = "<h1>Report</h1>";
 const README_PATH = "README.md";
@@ -34,6 +45,7 @@ const FILE_CONTENT_TEST_ID = "file-content";
 
 vi.mock("@/components/state-provider", () => ({
   useAppStore: (selector: (value: typeof state) => unknown) => selector(state),
+  useAppStoreApi: () => storeApi,
 }));
 
 vi.mock("@/components/editors/external-vcs-file-link", () => ({
diff --git a/apps/web/components/task/passthrough-chat-composer.tsx b/apps/web/components/task/passthrough-chat-composer.tsx
index dfe4cf6440..bcdc1cd163 100644
--- a/apps/web/components/task/passthrough-chat-composer.tsx
+++ b/apps/web/components/task/passthrough-chat-composer.tsx
@@ -31,6 +31,7 @@ import type { TaskPlanCommentRef } from "@/lib/types/http";
 import { isMessageSendError, MessageSendError } from "@/lib/chat/message-send-error";
 import { t as translate } from "@/lib/i18n";
 import { PlanCommentMigrationNotice } from "@/components/task/plan-comment-migration-notice";
+import { PreviewFeedbackCollectionSurface } from "@/components/task/inspector/preview-feedback-collection";
 
 const PLAN_CONTEXT_PATH = "plan:context";
 
@@ -80,6 +81,18 @@ export function PassthroughComposerPanel({
       }}
     >
       <PlanCommentMigrationNotice {...panelState.planCommentMigration} />
+      {panelState.previewFeedbackState && (
+        <PreviewFeedbackCollectionSurface
+          taskId={taskId}
+          collection={panelState.previewFeedbackState}
+          open={panelState.previewFeedbackOpen ?? false}
+          onOpenChange={panelState.setPreviewFeedbackOpen ?? (() => undefined)}
+          showTrigger={Boolean(
+            panelState.previewFeedback.length > 0 &&
+            (!panelState.resolvedSessionId || panelState.isCompleted),
+          )}
+        />
+      )}
       <ChatInputContainer
         ref={refHandle}
         onSubmit={onSubmit}
diff --git a/apps/web/e2e/helpers/http-git-server.ts b/apps/web/e2e/helpers/http-git-server.ts
index 8f68e01ffa..285aa76a9e 100644
--- a/apps/web/e2e/helpers/http-git-server.ts
+++ b/apps/web/e2e/helpers/http-git-server.ts
@@ -39,14 +39,24 @@ export async function startHTTPGitFixture(
 ): Promise<HTTPGitFixture> {
   const remoteDir = path.join(root, "fixture", `${name}.git`);
   const checkout = path.join(root, `${name}-checkout`);
+  const emptyHooksDir = path.join(root, ".empty-git-hooks");
   fs.mkdirSync(checkout, { recursive: true });
+  fs.mkdirSync(emptyHooksDir, { recursive: true });
   execFileSync("git", ["init", "--bare", "-b", "main", remoteDir]);
   // The fixture is served as static (dumb) HTTP. Keep its advertised refs in
   // sync when E2E tests push additional commits before launching a task.
   const postUpdateHook = path.join(remoteDir, "hooks", "post-update");
   fs.writeFileSync(postUpdateHook, "#!/bin/sh\nexec git update-server-info\n");
   fs.chmodSync(postUpdateHook, 0o755);
+  execFileSync("git", [
+    "--git-dir",
+    remoteDir,
+    "config",
+    "core.hooksPath",
+    path.dirname(postUpdateHook),
+  ]);
   execFileSync("git", ["init", "-b", "main"], { cwd: checkout });
+  execFileSync("git", ["config", "core.hooksPath", emptyHooksDir], { cwd: checkout });
   fs.writeFileSync(path.join(checkout, "remote-source.txt"), `${name} fixture\n`);
   execFileSync("git", ["add", "."], { cwd: checkout });
   execFileSync(
diff --git a/apps/web/e2e/helpers/session-entry-recovery.ts b/apps/web/e2e/helpers/session-entry-recovery.ts
index 14a50ec46f..cac0651afd 100644
--- a/apps/web/e2e/helpers/session-entry-recovery.ts
+++ b/apps/web/e2e/helpers/session-entry-recovery.ts
@@ -15,8 +15,10 @@ type DelayRule = {
 
 export type SessionEntryRecoveryProxy = {
   delayNextResponses: (action: string, count: number, delayMs: number, reason: string) => void;
+  dropNextResponses: (action: string, count: number) => void;
   requestCount: (action: string) => number;
   delayedResponseCount: (action: string) => number;
+  droppedResponseCount: (action: string) => number;
 };
 
 function parseFrame(value: string): WireFrame | null {
@@ -41,16 +43,59 @@ function responseAction(
   return undefined;
 }
 
+function takeResponseAction(
+  frame: WireFrame | null,
+  requestActions: Map<string, string>,
+): string | undefined {
+  const action = responseAction(frame, requestActions);
+  if (typeof frame?.id === "string") requestActions.delete(frame.id);
+  return action;
+}
+
+function consumeDropRule(
+  action: string | undefined,
+  dropRules: Map<string, number>,
+  droppedCounts: Map<string, number>,
+): boolean {
+  if (!action) return false;
+  const remaining = dropRules.get(action) ?? 0;
+  if (remaining < 1) return false;
+  dropRules.set(action, remaining - 1);
+  droppedCounts.set(action, (droppedCounts.get(action) ?? 0) + 1);
+  return true;
+}
+
+function consumeDelayRule(
+  action: string | undefined,
+  message: string,
+  rules: Map<string, DelayRule>,
+  delayedCounts: Map<string, number>,
+  send: (message: string) => void,
+): boolean {
+  if (!action) return false;
+  const rule = rules.get(action);
+  if (!rule || rule.remaining < 1) return false;
+  rule.remaining -= 1;
+  delayedCounts.set(action, (delayedCounts.get(action) ?? 0) + 1);
+  void (async () => {
+    await injectLatency(rule.delayMs, rule.reason);
+    send(message);
+  })();
+  return true;
+}
+
 /**
- * Delay selected gateway responses while forwarding every other frame. Rules
- * correlate replies by request id, so the test never relies on action-only or
- * payload timing and does not inspect message contents.
+ * Delay or drop selected gateway responses while forwarding every other frame.
+ * Rules correlate replies by request id, so the test never relies on
+ * action-only or payload timing and does not inspect message contents.
  */
 export async function routeSessionEntryRecovery(page: Page): Promise<SessionEntryRecoveryProxy> {
   const requestActions = new Map<string, string>();
   const requestCounts = new Map<string, number>();
   const delayedCounts = new Map<string, number>();
+  const droppedCounts = new Map<string, number>();
   const rules = new Map<string, DelayRule>();
+  const dropRules = new Map<string, number>();
 
   await page.routeWebSocket(/\/ws$/, (ws) => {
     const server = ws.connectToServer();
@@ -82,18 +127,10 @@ export async function routeSessionEntryRecovery(page: Page): Promise<SessionEntr
         const trimmed = part.trim();
         if (!trimmed) continue;
         const frame = parseFrame(trimmed);
-        const action = responseAction(frame, requestActions);
-        if (typeof frame?.id === "string") requestActions.delete(frame.id);
-        const rule = isResponseFrame(frame) && action ? rules.get(action) : null;
-
-        if (rule && rule.remaining > 0 && action) {
-          rule.remaining -= 1;
-          delayedCounts.set(action, (delayedCounts.get(action) ?? 0) + 1);
-          void (async () => {
-            await injectLatency(rule.delayMs, rule.reason);
-            ws.send(trimmed);
-          })();
-          continue;
+        const action = takeResponseAction(frame, requestActions);
+        if (isResponseFrame(frame)) {
+          if (consumeDropRule(action, dropRules, droppedCounts)) continue;
+          if (consumeDelayRule(action, trimmed, rules, delayedCounts, ws.send.bind(ws))) continue;
         }
 
         ws.send(trimmed);
@@ -107,7 +144,12 @@ export async function routeSessionEntryRecovery(page: Page): Promise<SessionEntr
       if (delayMs < 0) throw new Error("delayNextResponses requires a non-negative delay");
       rules.set(action, { remaining: count, delayMs, reason });
     },
+    dropNextResponses: (action, count) => {
+      if (count < 1) throw new Error("dropNextResponses requires a positive response count");
+      dropRules.set(action, count);
+    },
     requestCount: (action) => requestCounts.get(action) ?? 0,
     delayedResponseCount: (action) => delayedCounts.get(action) ?? 0,
+    droppedResponseCount: (action) => droppedCounts.get(action) ?? 0,
   };
 }
diff --git a/apps/web/e2e/helpers/ws-drop.ts b/apps/web/e2e/helpers/ws-drop.ts
index 703943feed..8145c09b67 100644
--- a/apps/web/e2e/helpers/ws-drop.ts
+++ b/apps/web/e2e/helpers/ws-drop.ts
@@ -16,6 +16,17 @@ type MessageAddResponseDropController = {
   droppedCount: () => number;
 };
 
+type PreviewFeedbackCreateFailureController = {
+  failNextCreate: () => void;
+  failedCount: () => number;
+};
+
+type ExpiredPluginSnapshotController = {
+  expireNextPluginSnapshot: () => void;
+  modifiedCount: () => number;
+  pluginSubscribeCount: () => number;
+};
+
 type ConversationChangeDropController = {
   dropChange: (content: string) => void;
   droppedCount: () => number;
@@ -280,6 +291,64 @@ export async function routeMainWebSocketWithMessageAddResponseDrop(
   };
 }
 
+/**
+ * Rejects one preview-feedback create request before it reaches the backend.
+ * The next request is forwarded normally, so a screenshot draft can exercise
+ * create failure and retry without leaving a server-side row behind.
+ */
+export async function routeMainWebSocketWithPreviewFeedbackCreateFailure(
+  page: Page,
+): Promise<PreviewFeedbackCreateFailureController> {
+  const state = { armed: false, failed: 0 };
+
+  await page.routeWebSocket(/\/ws$/, (ws) => {
+    const server = ws.connectToServer();
+    ws.onMessage((message) => {
+      if (typeof message !== "string") {
+        server.send(message);
+        return;
+      }
+
+      const forwarded: string[] = [];
+      for (const part of message.split("\n")) {
+        const frame = parseQueueAdmissionFrame(part);
+        if (
+          state.armed &&
+          frame?.type === "request" &&
+          frame.action === "task.preview_feedback.create" &&
+          typeof frame.id === "string"
+        ) {
+          state.armed = false;
+          state.failed += 1;
+          ws.send(
+            JSON.stringify({
+              type: "error",
+              id: frame.id,
+              action: frame.action,
+              payload: {
+                code: "INTERNAL_ERROR",
+                message: "Injected preview feedback create failure",
+              },
+            }),
+          );
+          continue;
+        }
+        forwarded.push(part);
+      }
+      const next = forwarded.join("\n");
+      if (next.trim()) server.send(next);
+    });
+    server.onMessage((message) => ws.send(message));
+  });
+
+  return {
+    failNextCreate: () => {
+      state.armed = true;
+    },
+    failedCount: () => state.failed,
+  };
+}
+
 /**
  * Injects one pre-server request loss or one post-admission response loss for
  * `message.queue.add`. Every other gateway frame continues through the proxy.
@@ -413,6 +482,88 @@ export async function routeMainWebSocketWithQueueAdmissionDrops(
   };
 }
 
+/**
+ * Rewrites one plugin subscription expiry in the browser transport. The
+ * signed token remains server-valid, so the panel must exercise its normal
+ * fresh rebind path instead of relying on a relaxed backend validation rule.
+ */
+export async function routeMainWebSocketWithExpiredPluginSnapshot(
+  page: Page,
+): Promise<ExpiredPluginSnapshotController> {
+  const requestIDs = new Set<string>();
+  let armed = false;
+  let modified = 0;
+  let pluginSubscribeRequests = 0;
+
+  await page.routeWebSocket(/\/ws$/, (ws) => {
+    const server = ws.connectToServer();
+    ws.onMessage((message) => {
+      for (const frame of parseJSONFrames(message)) {
+        const payload = asRecord(frame.payload);
+        if (
+          frame.type === "request" &&
+          frame.action === "session.subscribe" &&
+          typeof frame.id === "string" &&
+          payload?.consumer_kind === "plugin"
+        ) {
+          pluginSubscribeRequests += 1;
+          if (armed) requestIDs.add(frame.id);
+        }
+      }
+      server.send(message);
+    });
+    server.onMessage((message) => {
+      if (typeof message !== "string") {
+        ws.send(message);
+        return;
+      }
+      const rewritten: string[] = [];
+      let didRewrite = false;
+      for (const part of message.split("\n")) {
+        const trimmed = part.trim();
+        if (!trimmed) {
+          rewritten.push(part);
+          continue;
+        }
+        let frame: Record<string, unknown> | null = null;
+        try {
+          frame = asRecord(JSON.parse(trimmed));
+        } catch {
+          // Preserve non-JSON frames.
+        }
+        if (
+          armed &&
+          frame?.type === "response" &&
+          frame.action === "session.subscribe" &&
+          typeof frame.id === "string" &&
+          requestIDs.delete(frame.id)
+        ) {
+          const payload = asRecord(frame.payload);
+          if (payload?.success === true) {
+            frame.payload = { ...payload, expires_at: "2000-01-01T00:00:00Z" };
+            rewritten.push(JSON.stringify(frame));
+            armed = false;
+            modified += 1;
+            didRewrite = true;
+            continue;
+          }
+        }
+        rewritten.push(part);
+      }
+      ws.send(didRewrite ? rewritten.join("\n") : message);
+    });
+  });
+
+  return {
+    expireNextPluginSnapshot: () => {
+      requestIDs.clear();
+      armed = true;
+    },
+    modifiedCount: () => modified,
+    pluginSubscribeCount: () => pluginSubscribeRequests,
+  };
+}
+
 function hasConversationChangeContent(message: unknown, content: string): boolean {
   const envelope = asRecord(message);
   if (envelope?.action !== "session.conversation.changed") {
diff --git a/apps/web/e2e/scripts/run-e2e.test.ts b/apps/web/e2e/scripts/run-e2e.test.ts
index 0f1c832079..420d0e1f7a 100644
--- a/apps/web/e2e/scripts/run-e2e.test.ts
+++ b/apps/web/e2e/scripts/run-e2e.test.ts
@@ -25,6 +25,7 @@ function runnerEnv(binDir: string, extra: Record<string, string> = {}): NodeJS.P
   delete env.KANDEV_E2E_CONTAINERS;
   delete env.KANDEV_E2E_DOCKER;
   delete env.CAPTURE_PR_ASSETS;
+  delete env.BASH_ENV;
   return env;
 }
 
@@ -206,11 +207,7 @@ describe("run-e2e.sh", () => {
 
     const result = spawnSync("bash", [rawScriptPath, "--project=docker", "--help"], {
       encoding: "utf8",
-      env: {
-        ...process.env,
-        KANDEV_E2E_ALLOW_UNSAFE_PARALLELISM: "",
-        PATH: `${binDir}:${process.env.PATH ?? ""}`,
-      },
+      env: runnerEnv(binDir),
     });
 
     expect(result.status).toBe(0);
@@ -229,17 +226,15 @@ describe("run-e2e.sh", () => {
     );
     fs.chmodSync(pnpmPath, 0o755);
 
+    const env = runnerEnv(binDir);
+    env.KANDEV_E2E_CONTAINERS = "1";
+    env.KANDEV_E2E_DOCKER = "1";
     const result = spawnSync(
       "bash",
       [scriptPath, "--host", "--no-build", "--project", "chromium", "--", "--help"],
       {
         encoding: "utf8",
-        env: {
-          ...process.env,
-          PATH: `${binDir}:${process.env.PATH ?? ""}`,
-          KANDEV_E2E_CONTAINERS: "1",
-          KANDEV_E2E_DOCKER: "1",
-        },
+        env,
       },
     );
 
diff --git a/apps/web/e2e/tests/chat/html-preview.spec.ts b/apps/web/e2e/tests/chat/html-preview.spec.ts
index 17cdcf020a..555492d722 100644
--- a/apps/web/e2e/tests/chat/html-preview.spec.ts
+++ b/apps/web/e2e/tests/chat/html-preview.spec.ts
@@ -6,6 +6,7 @@ import type { ApiClient } from "../../helpers/api-client";
 import type { BackendContext } from "../../fixtures/backend";
 import { GitHelper, makeGitEnv } from "../../helpers/git-helper";
 import { SessionPage } from "../../pages/session-page";
+import { chooseCapture, saveDraft } from "../preview/preview-feedback-helpers";
 
 const SAVED_HTML = "<!doctype html><html><body><p>Saved source</p></body></html>";
 const SVG_ASSET =
@@ -205,6 +206,36 @@ test.describe("HTML preview", () => {
     ).toContainText("Republished native preview");
   });
 
+  test("opens HTML preview feedback in its shared collection", async ({
+    testPage,
+    apiClient,
+    seedData,
+    backend,
+  }) => {
+    const { session } = await setupDesktopHtmlPreviewTest({
+      testPage,
+      apiClient,
+      seedData,
+      backend,
+      title: "HTML Preview Feedback Collection",
+    });
+
+    await testPage.getByTestId("html-preview-toggle").first().click();
+    const preview = testPage.getByTestId("html-preview").first();
+    const frame = preview.frameLocator("iframe");
+    await expect(frame.locator("#increment")).toBeVisible({ timeout: 15_000 });
+
+    await chooseCapture(testPage, "Select element");
+    await frame.locator("#increment").click();
+    await saveDraft(testPage, "Keep this HTML preview action visible");
+
+    await session.clickSessionChatTab();
+    await session.activeChat().getByRole("button", { name: "1 preview feedback item" }).click();
+
+    await expect(session.browserPanel).toHaveCount(0);
+    await expect(testPage.getByText("Keep this HTML preview action visible")).toBeVisible();
+  });
+
   test("shows a retryable error when the session publish endpoint fails", async ({
     testPage,
     apiClient,
diff --git a/apps/web/e2e/tests/docker/preview-feedback.spec.ts b/apps/web/e2e/tests/docker/preview-feedback.spec.ts
new file mode 100644
index 0000000000..23b51870f4
--- /dev/null
+++ b/apps/web/e2e/tests/docker/preview-feedback.spec.ts
@@ -0,0 +1,78 @@
+import { test, expect } from "../../fixtures/docker-test-base";
+import { waitForLatestSessionDone } from "../../helpers/session";
+import { SessionPage } from "../../pages/session-page";
+import { chooseCapture, saveDraft } from "../preview/preview-feedback-helpers";
+
+const PREVIEW_PORT = 4173;
+const PREVIEW_HTML = `<!doctype html>
+<html>
+  <head><meta charset="utf-8"><title>Docker preview fixture</title></head>
+  <body><main><h1>Container preview</h1><button id="deploy">Deploy preview</button></main></body>
+</html>`;
+
+function dockerPreviewScript(): string {
+  const source = [
+    'const http = require("node:http")',
+    `const html = ${JSON.stringify(PREVIEW_HTML)}`,
+    'const server = http.createServer((_request, response) => { response.setHeader("content-type", "text/html; charset=utf-8"); response.end(html) })',
+    `server.listen(${PREVIEW_PORT}, "0.0.0.0", () => console.log("http://localhost:${PREVIEW_PORT}"))`,
+  ].join(";");
+  return `node -e '${source}'`;
+}
+
+test.describe("Docker web preview feedback", () => {
+  test.describe.configure({ retries: 1, timeout: 180_000 });
+
+  test("annotates a container-served page and delivers the feedback", async ({
+    testPage,
+    apiClient,
+    seedData,
+  }) => {
+    await apiClient.updateRepository(seedData.repositoryId, {
+      dev_script: dockerPreviewScript(),
+    });
+
+    try {
+      const task = await apiClient.createTaskWithAgent(
+        seedData.workspaceId,
+        "Docker Preview Feedback",
+        seedData.agentProfileId,
+        {
+          description: "/e2e:simple-message",
+          workflow_id: seedData.workflowId,
+          workflow_step_id: seedData.startStepId,
+          repository_ids: [seedData.repositoryId],
+          executor_profile_id: seedData.dockerExecutorProfileId,
+        },
+      );
+      await waitForLatestSessionDone(apiClient, task.id, 1, "Wait for Docker preview task");
+
+      await testPage.goto(`/t/${task.id}`);
+      const session = new SessionPage(testPage);
+      await session.waitForLoad();
+      await session.waitForChatIdle({ timeout: 60_000 });
+      await testPage.getByTestId("dev-server-preview-toggle-center").click();
+      await expect(session.browserPanel).toBeVisible({ timeout: 30_000 });
+      await session.browserAddressInput.fill(`http://localhost:${PREVIEW_PORT}`);
+      await session.browserAddressInput.press("Enter");
+
+      const frame = session.browserPanel.frameLocator("iframe");
+      await expect(frame.locator("#deploy")).toBeVisible({ timeout: 60_000 });
+      await chooseCapture(testPage, "Select element");
+      await frame.locator("#deploy").click();
+      await saveDraft(testPage, "Clarify the result of this container action");
+
+      await session.clickSessionChatTab();
+      await session.sendMessageViaButton("Apply the container preview feedback");
+      const message = session
+        .activeChat()
+        .getByTestId("user-message-bubble")
+        .filter({ hasText: "Apply the container preview feedback" });
+      await expect(message).toContainText("Web Preview Feedback", { timeout: 30_000 });
+      await expect(message).toContainText("Clarify the result of this container action");
+      await expect(message).toContainText("http://localhost:4173");
+    } finally {
+      await apiClient.updateRepository(seedData.repositoryId, { dev_script: "" });
+    }
+  });
+});
diff --git a/apps/web/e2e/tests/preview/inspector-submission.spec.ts b/apps/web/e2e/tests/preview/inspector-submission.spec.ts
deleted file mode 100644
index 8276dae9f6..0000000000
--- a/apps/web/e2e/tests/preview/inspector-submission.spec.ts
+++ /dev/null
@@ -1,124 +0,0 @@
-import http from "node:http";
-import type { AddressInfo } from "node:net";
-import { expect } from "@playwright/test";
-import { test } from "../../fixtures/test-base";
-import { openTaskSession, createStandardProfile } from "../../helpers/git-helper";
-
-const MOCK_HTML = `<!DOCTYPE html>
-<html>
-<head><title>Mock Dev Server</title></head>
-<body>
-  <button id="submit-btn" role="button" aria-label="Submit form">Submit</button>
-</body>
-</html>`;
-
-async function startMockDevServer(): Promise<{ port: number; close: () => Promise<void> }> {
-  const server = http.createServer((_req, res) => {
-    res.writeHead(200, { "Content-Type": "text/html; charset=utf-8" });
-    res.end(MOCK_HTML);
-  });
-  await new Promise<void>((resolve) => server.listen(0, "127.0.0.1", resolve));
-  const { port } = server.address() as AddressInfo;
-  return {
-    port,
-    close: () =>
-      new Promise<void>((resolve, reject) =>
-        server.close((err) => (err ? reject(err) : resolve())),
-      ),
-  };
-}
-
-async function openPreview(
-  testPage: import("@playwright/test").Page,
-  apiClient: import("../../helpers/api-client").ApiClient,
-  seedData: { workspaceId: string; workflowId: string; startStepId: string; repositoryId: string },
-  title: string,
-  port: number,
-) {
-  await apiClient.updateRepository(seedData.repositoryId, { dev_script: "echo preview" });
-  const profile = await createStandardProfile(apiClient, `inspector-${title.toLowerCase()}`);
-  await apiClient.createTaskWithAgent(seedData.workspaceId, title, profile.id, {
-    description: "preview inspector submission",
-    workflow_id: seedData.workflowId,
-    workflow_step_id: seedData.startStepId,
-    repository_ids: [seedData.repositoryId],
-  });
-
-  const session = await openTaskSession(testPage, title);
-  await session.waitForChatIdle({ timeout: 30_000 });
-  const startDevPreview = testPage.getByTestId("dev-server-preview-toggle-center");
-  await expect(startDevPreview).toBeVisible();
-  await startDevPreview.click();
-
-  const urlInput = testPage.locator('[placeholder*="localhost"], [placeholder*="3000"]').first();
-  await expect(urlInput).toBeVisible();
-  await urlInput.fill(`http://localhost:${port}`);
-  await urlInput.press("Enter");
-
-  const iframe = testPage.locator('iframe[title*="preview" i]');
-  await expect(iframe).toBeVisible({ timeout: 15_000 });
-  const preview = testPage.frameLocator('iframe[title*="preview" i]');
-  await expect(preview.locator("#submit-btn")).toBeVisible();
-
-  await testPage.getByTestId("preview-inspect-button").click();
-  await expect(preview.locator("#submit-btn")).toBeVisible();
-  return preview;
-}
-
-test.describe("Browser inspect annotation submission", () => {
-  test("Save submits a pin annotation", async ({ testPage, apiClient, seedData }) => {
-    const devServer = await startMockDevServer();
-    try {
-      const preview = await openPreview(
-        testPage,
-        apiClient,
-        seedData,
-        "Inspector Save",
-        devServer.port,
-      );
-
-      await preview.locator("#submit-btn").click();
-      const comment = preview.locator("textarea");
-      await expect(comment).toBeVisible();
-      await comment.fill("make this primary color");
-      await preview.getByRole("button", { name: "Save" }).click();
-
-      await expect(preview.locator("textarea")).toHaveCount(0);
-      await expect(preview.locator('[data-kandev-marker="1"]')).toBeVisible();
-      await expect(testPage.getByTestId("preview-annotation-item")).toContainText(
-        "make this primary color",
-      );
-    } finally {
-      await apiClient.updateRepository(seedData.repositoryId, { dev_script: "" });
-      await devServer.close();
-    }
-  });
-
-  test("Enter submits a pin annotation", async ({ testPage, apiClient, seedData }) => {
-    const devServer = await startMockDevServer();
-    try {
-      const preview = await openPreview(
-        testPage,
-        apiClient,
-        seedData,
-        "Inspector Enter",
-        devServer.port,
-      );
-
-      await preview.locator("#submit-btn").click();
-      const comment = preview.locator("textarea");
-      await expect(comment).toBeVisible();
-      await comment.fill("increase font size");
-      await comment.press("Enter");
-
-      await expect(preview.locator("textarea")).toHaveCount(0);
-      await expect(preview.locator('[data-kandev-marker="1"]')).toBeVisible();
-      await expect(testPage.getByTestId("preview-annotation-item")).toContainText(
-        "increase font size",
-      );
-    } finally {
-      await apiClient.updateRepository(seedData.repositoryId, { dev_script: "" });
-      await devServer.close();
-    }
-  });
-});
diff --git a/apps/web/e2e/tests/preview/preview-annotations.spec.ts b/apps/web/e2e/tests/preview/preview-annotations.spec.ts
deleted file mode 100644
index e16de1935b..0000000000
--- a/apps/web/e2e/tests/preview/preview-annotations.spec.ts
+++ /dev/null
@@ -1,282 +0,0 @@
-import http from "node:http";
-import type { AddressInfo } from "node:net";
-import { expect } from "@playwright/test";
-import { test } from "../../fixtures/test-base";
-import { openTaskSession, createStandardProfile } from "../../helpers/git-helper";
-
-const MOCK_HTML = `<!DOCTYPE html>
-<html>
-<head><title>Mock Dev Server</title></head>
-<body>
-  <div id="app">
-    <button id="submit-btn" role="button" aria-label="Submit form">Submit</button>
-    <p class="description">A test paragraph</p>
-  </div>
-</body>
-</html>`;
-
-async function startMockDevServer(): Promise<{ port: number; close: () => Promise<void> }> {
-  const server = http.createServer((_req, res) => {
-    res.writeHead(200, { "Content-Type": "text/html; charset=utf-8" });
-    res.end(MOCK_HTML);
-  });
-  await new Promise<void>((resolve) => server.listen(0, "127.0.0.1", resolve));
-  const { port } = server.address() as AddressInfo;
-  return {
-    port,
-    close: () =>
-      new Promise<void>((resolve, reject) =>
-        server.close((err) => (err ? reject(err) : resolve())),
-      ),
-  };
-}
-
-async function attachPreview(testPage: import("@playwright/test").Page, port: number) {
-  const urlInput = testPage.locator('[placeholder*="localhost"], [placeholder*="3000"]').first();
-  await urlInput.fill(`http://localhost:${port}`);
-  await urlInput.press("Enter");
-  await expect(testPage.locator('iframe[title="Preview"]')).toBeVisible({ timeout: 15_000 });
-}
-
-async function simulatePin(
-  testPage: import("@playwright/test").Page,
-  overrides: Record<string, unknown> = {},
-) {
-  await testPage.evaluate((data) => {
-    window.postMessage(
-      {
-        source: "kandev-inspector",
-        type: "annotation-added",
-        payload: {
-          id: `a-${Date.now()}`,
-          number: 1,
-          kind: "pin",
-          pagePath: "/",
-          comment: "make this primary color",
-          element: {
-            tag: "button",
-            id: "submit-btn",
-            role: "button",
-            ariaLabel: "Submit form",
-            text: "Submit",
-            selector: "div#app > button#submit-btn",
-          },
-          ...data,
-        },
-      },
-      "*",
-    );
-  }, overrides);
-}
-
-// TODO(preview-annotations): the seed repo has no dev_script, so the preview
-// panel renders a placeholder instead of the toolbar URL input — every test
-// here hangs on attachPreview waiting for an iframe that will never appear.
-// Wiring this up needs apiClient.updateRepository({ dev_script: "..." }),
-// opening the Preview dockview tab, and likely waiting for the dev server
-// process to spawn before the iframe is mountable. Skipping for now; the
-// proxy-injection contract is covered by port_proxy_test.go::
-// TestCreatePortProxy_StripsAcceptEncodingAndInjectsHTML, and the bridge +
-// formatter are covered by preview-inspect-bridge.test.ts.
-test.describe.skip("Preview annotations", () => {
-  test("inspect button is hidden when preview has no URL", async ({
-    testPage,
-    apiClient,
-    seedData,
-  }) => {
-    const profile = await createStandardProfile(apiClient, "annot-no-url");
-    await apiClient.createTaskWithAgent(seedData.workspaceId, "Annot no URL", profile.id, {
-      description: "no url",
-      workflow_id: seedData.workflowId,
-      workflow_step_id: seedData.startStepId,
-      repository_ids: [seedData.repositoryId],
-    });
-    await openTaskSession(testPage, "Annot no URL");
-    await expect(testPage.getByTestId("preview-inspect-button")).not.toBeVisible();
-  });
-
-  test("inspect button toggles and shows count badge as pins accumulate", async ({
-    testPage,
-    apiClient,
-    seedData,
-  }) => {
-    const devServer = await startMockDevServer();
-    try {
-      const profile = await createStandardProfile(apiClient, "annot-toggle");
-      await apiClient.createTaskWithAgent(seedData.workspaceId, "Annot toggle", profile.id, {
-        description: "toggle",
-        workflow_id: seedData.workflowId,
-        workflow_step_id: seedData.startStepId,
-        repository_ids: [seedData.repositoryId],
-      });
-      await openTaskSession(testPage, "Annot toggle");
-      await attachPreview(testPage, devServer.port);
-
-      const btn = testPage.getByTestId("preview-inspect-button");
-      await expect(btn).toBeVisible({ timeout: 5_000 });
-      await expect(btn).toHaveAttribute("aria-pressed", "false");
-
-      await btn.click();
-      await expect(btn).toHaveAttribute("aria-pressed", "true");
-
-      await simulatePin(testPage);
-      await expect(testPage.getByTestId("preview-annotations-panel")).toBeVisible();
-      await expect(testPage.getByTestId("preview-inspect-count")).toHaveText("1");
-
-      await simulatePin(testPage, {
-        id: "a-second",
-        number: 2,
-        element: {
-          tag: "p",
-          classes: "description",
-          text: "A test paragraph",
-          selector: "div#app > p.description",
-        },
-        comment: "increase font size",
-      });
-      await expect(testPage.getByTestId("preview-inspect-count")).toHaveText("2");
-      await expect(testPage.getByTestId("preview-annotation-item")).toHaveCount(2);
-    } finally {
-      await devServer.close();
-    }
-  });
-
-  test("copy writes formatted markdown of all annotations to clipboard", async ({
-    testPage,
-    apiClient,
-    seedData,
-  }) => {
-    const devServer = await startMockDevServer();
-    try {
-      const profile = await createStandardProfile(apiClient, "annot-copy");
-      await apiClient.createTaskWithAgent(seedData.workspaceId, "Annot copy", profile.id, {
-        description: "copy",
-        workflow_id: seedData.workflowId,
-        workflow_step_id: seedData.startStepId,
-        repository_ids: [seedData.repositoryId],
-      });
-      await openTaskSession(testPage, "Annot copy");
-      await attachPreview(testPage, devServer.port);
-
-      await testPage.context().grantPermissions(["clipboard-read", "clipboard-write"]);
-      await testPage.getByTestId("preview-inspect-button").click();
-      await simulatePin(testPage);
-      await expect(testPage.getByTestId("preview-annotations-panel")).toBeVisible();
-
-      await testPage.getByTestId("preview-annotations-copy").click();
-      const text = await testPage.evaluate(() => navigator.clipboard.readText());
-      expect(text).toContain("Preview annotations on `/`");
-      expect(text).toContain("[Pin]");
-      expect(text).toContain("Comment: make this primary color");
-      expect(text).toContain("Selector: `div#app > button#submit-btn`");
-    } finally {
-      await devServer.close();
-    }
-  });
-
-  test("per-item remove and clear all work", async ({ testPage, apiClient, seedData }) => {
-    const devServer = await startMockDevServer();
-    try {
-      const profile = await createStandardProfile(apiClient, "annot-remove");
-      await apiClient.createTaskWithAgent(seedData.workspaceId, "Annot remove", profile.id, {
-        description: "remove",
-        workflow_id: seedData.workflowId,
-        workflow_step_id: seedData.startStepId,
-        repository_ids: [seedData.repositoryId],
-      });
-      await openTaskSession(testPage, "Annot remove");
-      await attachPreview(testPage, devServer.port);
-
-      await testPage.getByTestId("preview-inspect-button").click();
-      await simulatePin(testPage);
-      await simulatePin(testPage, { id: "a-two", number: 2 });
-      await expect(testPage.getByTestId("preview-annotation-item")).toHaveCount(2);
-
-      await testPage.getByTestId("preview-annotation-remove").first().click();
-      await expect(testPage.getByTestId("preview-annotation-item")).toHaveCount(1);
-
-      await testPage.getByTestId("preview-annotations-clear").click();
-      await expect(testPage.getByTestId("preview-annotations-panel")).not.toBeVisible();
-      await expect(testPage.getByTestId("preview-inspect-count")).not.toBeVisible();
-    } finally {
-      await devServer.close();
-    }
-  });
-
-  test("inspect mode is preserved across logs-view round trip; annotations persist", async ({
-    testPage,
-    apiClient,
-    seedData,
-  }) => {
-    const devServer = await startMockDevServer();
-    try {
-      const profile = await createStandardProfile(apiClient, "annot-logs");
-      await apiClient.createTaskWithAgent(seedData.workspaceId, "Annot logs", profile.id, {
-        description: "logs",
-        workflow_id: seedData.workflowId,
-        workflow_step_id: seedData.startStepId,
-        repository_ids: [seedData.repositoryId],
-      });
-      await openTaskSession(testPage, "Annot logs");
-      await attachPreview(testPage, devServer.port);
-
-      await testPage.getByTestId("preview-inspect-button").click();
-      await simulatePin(testPage);
-      const btn = testPage.getByTestId("preview-inspect-button");
-      await expect(btn).toHaveAttribute("aria-pressed", "true");
-
-      await testPage.getByRole("button", { name: "Logs" }).click();
-      await testPage.getByRole("button", { name: "Preview" }).click();
-
-      // Implementation derives effectiveIsInspectMode = isInspectMode && previewView !== "output",
-      // so the underlying inspect state survives the logs round-trip and the button re-activates.
-      await expect(btn).toHaveAttribute("aria-pressed", "true");
-      await expect(testPage.getByTestId("preview-inspect-count")).toHaveText("1");
-    } finally {
-      await devServer.close();
-    }
-  });
-
-  test("port proxy response body contains the inspector script", async ({
-    testPage,
-    apiClient,
-    seedData,
-    backend,
-  }) => {
-    const devServer = await startMockDevServer();
-    try {
-      const profile = await createStandardProfile(apiClient, "annot-inject");
-      const created = await apiClient.createTaskWithAgent(
-        seedData.workspaceId,
-        "Annot inject",
-        profile.id,
-        {
-          description: "inject",
-          workflow_id: seedData.workflowId,
-          workflow_step_id: seedData.startStepId,
-          repository_ids: [seedData.repositoryId],
-        },
-      );
-      await openTaskSession(testPage, "Annot inject");
-      await attachPreview(testPage, devServer.port);
-
-      // The port-proxy backend route expects a session ID, not the task ID
-      // that appears in the URL.
-      const sessionId = created.session_id;
-      expect(sessionId).toBeTruthy();
-
-      // page.request shares cookies with the page context; sufficient for the
-      // current no-auth local backend.
-      const proxyResp = await testPage.request.get(
-        `${backend.baseUrl}/port-proxy/${sessionId}/${devServer.port}/`,
-      );
-      expect(proxyResp.status()).toBe(200);
-      const body = await proxyResp.text();
-      expect(body).toContain("kandev-inspector");
-      expect(proxyResp.headers()["content-security-policy"]).toBeUndefined();
-      expect(proxyResp.headers()["x-frame-options"]).toBeUndefined();
-    } finally {
-      await devServer.close();
-    }
-  });
-});
diff --git a/apps/web/e2e/tests/preview/preview-feedback-helpers.ts b/apps/web/e2e/tests/preview/preview-feedback-helpers.ts
new file mode 100644
index 0000000000..0da0611320
--- /dev/null
+++ b/apps/web/e2e/tests/preview/preview-feedback-helpers.ts
@@ -0,0 +1,143 @@
+import http from "node:http";
+import type { AddressInfo } from "node:net";
+import { expect, type FrameLocator, type Locator, type Page } from "@playwright/test";
+import type { ApiClient } from "../../helpers/api-client";
+import type { SeedData } from "../../fixtures/test-base";
+import { SessionPage } from "../../pages/session-page";
+
+const PREVIEW_HTML = `<!doctype html>
+<html>
+  <head>
+    <meta charset="utf-8">
+    <title>Preview feedback fixture</title>
+    <style>
+      body { font-family: sans-serif; margin: 24px; min-height: 900px; }
+      #save {
+        margin-top: 32px;
+        padding: 14px 28px;
+        background: oklch(0.59 0.2 277);
+        color: oklch(0.96 0.02 272);
+      }
+      #runtime-total { display: block; margin-top: 360px; font-size: 24px; }
+      #route-content { padding-top: 24px; }
+    </style>
+  </head>
+  <body>
+    <nav><button id="details-route">Open details</button></nav>
+    <main id="route-content">
+      <h1>Checkout</h1>
+      <button id="save" class="primary" aria-label="Save order">Save order</button>
+      <span id="runtime-total" role="status" aria-label="Cart total"></span>
+    </main>
+    <script>
+      const total = document.querySelector('#runtime-total');
+      total.textContent = 'Generated total $42.00';
+      document.querySelector('#details-route').addEventListener('click', () => {
+        history.pushState({}, '', '/details?tab=summary');
+        document.title = 'Order details';
+        document.querySelector('h1').textContent = 'Order details';
+      });
+    </script>
+  </body>
+</html>`;
+
+export type PreviewServer = { url: string; close: () => Promise<void> };
+
+export async function startPreviewServer(): Promise<PreviewServer> {
+  const server = http.createServer((_request, response) => {
+    response.writeHead(200, { "Content-Type": "text/html; charset=utf-8" });
+    response.end(PREVIEW_HTML);
+  });
+  await new Promise<void>((resolve) => server.listen(0, "127.0.0.1", resolve));
+  const { port } = server.address() as AddressInfo;
+  return {
+    url: `http://localhost:${port}`,
+    close: () =>
+      new Promise<void>((resolve, reject) =>
+        server.close((error) => (error ? reject(error) : resolve())),
+      ),
+  };
+}
+
+export async function openBrowserPreview(
+  page: Page,
+  apiClient: ApiClient,
+  seedData: SeedData,
+  title: string,
+  url: string,
+): Promise<{ session: SessionPage; frame: FrameLocator }> {
+  await apiClient.updateRepository(seedData.repositoryId, { dev_script: "echo preview" });
+  const task = await apiClient.createTaskWithAgent(
+    seedData.workspaceId,
+    title,
+    seedData.agentProfileId,
+    {
+      description: "/e2e:simple-message",
+      workflow_id: seedData.workflowId,
+      workflow_step_id: seedData.startStepId,
+      repository_ids: [seedData.repositoryId],
+    },
+  );
+  await page.goto(`/t/${task.id}`);
+  const session = new SessionPage(page);
+  await session.waitForLoad();
+  await session.waitForChatIdle({ timeout: 45_000 });
+  await page.getByTestId("dev-server-preview-toggle-center").click();
+  await expect(session.browserPanel).toBeVisible();
+  await session.browserAddressInput.fill(url);
+  await session.browserAddressInput.press("Enter");
+  const iframe = session.browserPanel.locator("iframe");
+  await expect(iframe).toBeVisible({ timeout: 15_000 });
+  const frame = session.browserPanel.frameLocator("iframe");
+  await expect(frame.locator("#save")).toBeVisible({ timeout: 15_000 });
+  return { session, frame };
+}
+
+export async function chooseCapture(page: Page, name: string): Promise<void> {
+  const popover = page.getByTestId("preview-feedback-popover");
+  if (!(await popover.isVisible())) {
+    await page.getByTestId("preview-feedback-trigger").click();
+  }
+  await expect(popover).toBeVisible();
+  const choice = popover.getByRole("button", { name, exact: true });
+  await expect(choice).toBeVisible({ timeout: 5_000 });
+  const box = await choice.boundingBox();
+  const viewport = page.viewportSize();
+  if (!box || !viewport || box.y < 0 || box.y + box.height > viewport.height) {
+    throw new Error(`capture choice is outside viewport: ${JSON.stringify({ box, viewport })}`);
+  }
+  await choice.click();
+}
+
+export async function saveDraft(page: Page, comment: string): Promise<void> {
+  const draft = page.getByTestId("preview-feedback-draft");
+  await expect(draft).toBeVisible({ timeout: 15_000 });
+  await draft.getByRole("textbox", { name: "Comment on selection" }).fill(comment);
+  await draft.getByRole("button", { name: "Save feedback" }).click();
+  await expect(draft).toBeHidden({ timeout: 15_000 });
+}
+
+export async function selectGeneratedText(frame: FrameLocator): Promise<void> {
+  await frame.locator("#runtime-total").evaluate((element) => {
+    const text = element.firstChild;
+    if (!text) throw new Error("generated text node missing");
+    const value = text.textContent ?? "";
+    const start = value.indexOf("$42.00");
+    const range = document.createRange();
+    range.setStart(text, start);
+    range.setEnd(text, start + "$42.00".length);
+    const selection = window.getSelection();
+    selection?.removeAllRanges();
+    selection?.addRange(range);
+    element.dispatchEvent(new MouseEvent("mouseup", { bubbles: true }));
+  });
+}
+
+export async function dragScreenshotRegion(page: Page, target: Locator): Promise<void> {
+  const box = await target.boundingBox();
+  if (!box) throw new Error("screenshot target did not have a bounding box");
+  await page.mouse.move(box.x + 4, box.y + 4);
+  await page.mouse.down();
+  await page.mouse.move(box.x + box.width - 4, box.y + box.height - 4);
+  await page.mouse.up();
+}
diff --git a/apps/web/e2e/tests/preview/preview-feedback.spec.ts b/apps/web/e2e/tests/preview/preview-feedback.spec.ts
new file mode 100644
index 0000000000..801ca1ddcf
--- /dev/null
+++ b/apps/web/e2e/tests/preview/preview-feedback.spec.ts
@@ -0,0 +1,213 @@
+import { expect } from "@playwright/test";
+import { test } from "../../fixtures/test-base";
+import { typeWhileBusy, waitForComposerQueueMode } from "../../helpers/type-while-busy";
+import { routeMainWebSocketWithPreviewFeedbackCreateFailure } from "../../helpers/ws-drop";
+import {
+  chooseCapture,
+  dragScreenshotRegion,
+  openBrowserPreview,
+  saveDraft,
+  selectGeneratedText,
+  startPreviewServer,
+} from "./preview-feedback-helpers";
+
+test.describe("Web preview feedback", () => {
+  test.describe.configure({ retries: 1, timeout: 180_000 });
+
+  test("persists multi-route captures and sends them directly or through the queue", async ({
+    testPage,
+    apiClient,
+    seedData,
+  }) => {
+    const server = await startPreviewServer();
+    const createFailure = await routeMainWebSocketWithPreviewFeedbackCreateFailure(testPage);
+    try {
+      const { session, frame } = await openBrowserPreview(
+        testPage,
+        apiClient,
+        seedData,
+        "Web Preview Feedback",
+        server.url,
+      );
+
+      const trigger = testPage.getByTestId("preview-feedback-trigger");
+      const triggerBox = await trigger.boundingBox();
+      expect(triggerBox?.height).toBeLessThanOrEqual(30);
+      expect(triggerBox?.width).toBeLessThanOrEqual(48);
+      await trigger.click();
+      const choices = [
+        { name: "Select text", label: "Text" },
+        { name: "Select element", label: "Element" },
+        { name: "Select screenshot region", label: "Screenshot" },
+      ];
+      const choiceBoxes = [];
+      for (const choice of choices) {
+        const button = testPage.getByRole("button", { name: choice.name, exact: true });
+        await expect(button).toHaveText(choice.label);
+        choiceBoxes.push(await button.boundingBox());
+      }
+      expect(new Set(choiceBoxes.map((box) => Math.round(box?.y ?? -1))).size).toBe(1);
+
+      await chooseCapture(testPage, "Select element");
+      await frame.locator("#save").hover();
+      const candidate = frame.locator('[data-kandev-inspector-ui="candidate"]');
+      await expect(candidate).toBeVisible();
+      await expect(candidate).toContainText("button#save.primary");
+      await frame.locator("#save").click();
+      await saveDraft(testPage, "Make the primary action more prominent");
+
+      await frame.locator("#details-route").click();
+      await expect(frame.locator("h1")).toHaveText("Order details");
+      await chooseCapture(testPage, "Select text");
+      await selectGeneratedText(frame);
+      await expect(testPage.getByTestId("preview-feedback-draft")).toContainText("$42.00");
+      await saveDraft(testPage, "Explain how this generated total was calculated");
+
+      await chooseCapture(testPage, "Select screenshot region");
+      await dragScreenshotRegion(testPage, frame.locator("#save"));
+      const screenshotDraft = testPage.getByTestId("preview-feedback-draft");
+      await expect(screenshotDraft.getByRole("img", { name: "Screenshot preview" })).toBeVisible();
+      await expect(screenshotDraft).toContainText(/\d+ × \d+ · PNG/);
+      await saveDraft(testPage, "Tighten the spacing in this region");
+
+      const failedScreenshotComment = "Keep this screenshot comment after create fails";
+      createFailure.failNextCreate();
+      await chooseCapture(testPage, "Select screenshot region");
+      await dragScreenshotRegion(testPage, frame.locator("#save"));
+      const failedDraft = testPage.getByTestId("preview-feedback-draft");
+      await expect(failedDraft.getByRole("img", { name: "Screenshot preview" })).toBeVisible();
+      await failedDraft
+        .getByRole("textbox", { name: "Comment on selection" })
+        .fill(failedScreenshotComment);
+      await failedDraft.getByRole("button", { name: "Save feedback" }).click();
+      await expect.poll(() => createFailure.failedCount()).toBe(1);
+      await expect(failedDraft).toBeVisible();
+      await expect(failedDraft.getByRole("textbox", { name: "Comment on selection" })).toHaveValue(
+        failedScreenshotComment,
+      );
+      await expect(failedDraft.getByRole("img", { name: "Screenshot preview" })).toBeVisible();
+      await expect(
+        testPage.getByTestId("preview-feedback-popover").getByRole("alert"),
+      ).toContainText("feedback could not be saved");
+
+      await failedDraft.getByRole("button", { name: "Save feedback" }).click();
+      await expect(failedDraft).toBeHidden({ timeout: 15_000 });
+      await expect(testPage.getByTestId("preview-feedback-trigger")).toContainText("4");
+
+      await session.clickSessionChatTab();
+      const userMessageCount = await session
+        .activeChat()
+        .getByTestId("user-message-bubble")
+        .count();
+      await expect(session.activeChat()).toContainText("4 preview feedback items");
+
+      await testPage.evaluate(() => {
+        type Panel = { id: string; api: { close: () => void } };
+        type DockviewApi = { panels: Panel[] };
+        const api = (window as unknown as { __dockviewApi__?: DockviewApi }).__dockviewApi__;
+        for (const panel of [...(api?.panels ?? [])]) {
+          if (panel.id.startsWith("browser:")) panel.api.close();
+        }
+      });
+      await expect(session.browserPanel).toHaveCount(0);
+
+      const feedbackChip = session
+        .activeChat()
+        .getByRole("button", { name: "4 preview feedback items", exact: true });
+      await feedbackChip.click();
+      const collection = testPage.getByTestId("preview-feedback-collection-popover");
+      await expect(collection).toBeVisible();
+      const collectionItems = collection.getByTestId("preview-feedback-item");
+      await expect(collectionItems).toHaveCount(4);
+      await expect(
+        collectionItems.nth(2).getByRole("img", { name: "Screenshot preview" }),
+      ).toBeVisible();
+
+      const firstItem = collectionItems.nth(0);
+      await firstItem.getByRole("button", { name: "Edit feedback" }).click();
+      await firstItem
+        .getByRole("textbox", { name: "Edit comment" })
+        .fill("Make the action clearer");
+      await firstItem.getByRole("button", { name: "Save changes" }).click();
+      await expect(firstItem).toContainText("Make the action clearer");
+
+      await collectionItems.nth(1).getByRole("button", { name: "Delete feedback" }).click();
+      await expect(collectionItems).toHaveCount(3);
+      await expect(collection).toContainText(failedScreenshotComment);
+      await expect(collection).not.toContainText("Explain how this generated total was calculated");
+      expect(await session.activeChat().getByTestId("user-message-bubble").count()).toBe(
+        userMessageCount,
+      );
+      await testPage.keyboard.press("Escape");
+
+      await testPage.reload();
+      await session.waitForLoad();
+      await expect(session.activeChat()).toContainText("3 preview feedback items", {
+        timeout: 15_000,
+      });
+      const restoredFeedbackChip = session
+        .activeChat()
+        .getByRole("button", { name: "3 preview feedback items", exact: true });
+      await restoredFeedbackChip.click();
+      await expect(collection).toBeVisible();
+      await expect(collection).toContainText("Make the action clearer");
+      await expect(collection).not.toContainText("Explain how this generated total was calculated");
+      await testPage.keyboard.press("Escape");
+
+      await session.sendMessageViaButton("Apply the pending preview feedback");
+      const directMessage = session
+        .activeChat()
+        .getByTestId("user-message-bubble")
+        .filter({ hasText: "Apply the pending preview feedback" });
+      await expect(directMessage).toContainText("Web Preview Feedback", { timeout: 20_000 });
+      await expect(directMessage).toContainText("Make the action clearer");
+      await expect(directMessage).not.toContainText(
+        "Explain how this generated total was calculated",
+      );
+      await expect(directMessage).toContainText("Rendered element snapshot");
+      await expect(directMessage).toContainText('"selector": "button#save"');
+      await expect(directMessage).toContainText("viewport_width");
+      const screenshotAttachment = directMessage.getByRole("button", {
+        name: "Open Attachment 1",
+        exact: true,
+      });
+      await expect(screenshotAttachment).toBeVisible();
+      await screenshotAttachment.click();
+      await expect(testPage.getByRole("dialog", { name: "Image preview" })).toBeVisible();
+      await testPage.keyboard.press("Escape");
+      await session.waitForChatIdle({ timeout: 45_000 });
+
+      await session.sendMessage("/slow 5s");
+      await waitForComposerQueueMode(testPage);
+      await session.addBrowserPanel();
+      await session.clickTab("Browser");
+      await session.browserAddressInput.fill(server.url);
+      await session.browserAddressInput.press("Enter");
+      const queuedFrame = session.browserPanel.frameLocator("iframe");
+      await expect(queuedFrame.locator("#save")).toBeVisible({ timeout: 15_000 });
+      await chooseCapture(testPage, "Select element");
+      await queuedFrame.locator("#save").click();
+      await saveDraft(testPage, "Queue this button adjustment while the agent is busy");
+
+      await session.clickSessionChatTab();
+      const editor = session.activeChat().locator(".tiptap.ProseMirror");
+      await typeWhileBusy(testPage, editor, "Apply the queued preview feedback");
+      await session.submitButton().click();
+      await expect(testPage.getByTestId("queue-chip")).toBeVisible({ timeout: 15_000 });
+
+      const queuedMessage = session
+        .activeChat()
+        .getByTestId("user-message-bubble")
+        .filter({ hasText: "Apply the queued preview feedback" });
+      await expect(queuedMessage).toContainText(
+        "Queue this button adjustment while the agent is busy",
+        { timeout: 45_000 },
+      );
+      await session.waitForChatIdle({ timeout: 45_000 });
+      await expect(session.activeChat()).not.toContainText("1 preview feedback item");
+    } finally {
+      await apiClient.updateRepository(seedData.repositoryId, { dev_script: "" });
+      await server.close();
+    }
+  });
+});
diff --git a/apps/web/e2e/tests/session/mobile-session-entry-recovery.spec.ts b/apps/web/e2e/tests/session/mobile-session-entry-recovery.spec.ts
index 3061198d3a..320ddeb4c8 100644
--- a/apps/web/e2e/tests/session/mobile-session-entry-recovery.spec.ts
+++ b/apps/web/e2e/tests/session/mobile-session-entry-recovery.spec.ts
@@ -30,12 +30,7 @@ test.describe("mobile session entry recovery", () => {
       `Mobile history recovery ${Date.now()}`,
     );
 
-    proxy.delayNextResponses(
-      "message.list",
-      2,
-      11_000,
-      "force both bounded history attempts to expose the mobile unavailable state",
-    );
+    proxy.dropNextResponses("message.list", 2);
 
     const session = await openTaskSession(testPage, task.id);
     const chat = session.activeChat();
@@ -53,6 +48,6 @@ test.describe("mobile session entry recovery", () => {
     await retry.click();
     await expect(historyNotice).toHaveCount(0);
     await expect(chat).toContainText("simple mock response", { timeout: 30_000 });
-    expect(proxy.delayedResponseCount("message.list")).toBe(2);
+    expect(proxy.droppedResponseCount("message.list")).toBe(2);
   });
 });
diff --git a/apps/web/e2e/tests/session/session-entry-recovery.spec.ts b/apps/web/e2e/tests/session/session-entry-recovery.spec.ts
index 2c8647dbc1..430034d6a8 100644
--- a/apps/web/e2e/tests/session/session-entry-recovery.spec.ts
+++ b/apps/web/e2e/tests/session/session-entry-recovery.spec.ts
@@ -54,12 +54,7 @@ test.describe("session entry recovery", () => {
     const proxy = await routeSessionEntryRecovery(testPage);
     const task = await createEntryTask(apiClient, seedData, `Retry entry ${Date.now()}`);
 
-    proxy.delayNextResponses(
-      "session.subscribe",
-      1,
-      11_000,
-      "force the first subscription acknowledgement past the ten-second deadline",
-    );
+    proxy.dropNextResponses("session.subscribe", 1);
 
     const session = await openTaskSession(testPage, task.id);
     await expect
@@ -70,7 +65,7 @@ test.describe("session entry recovery", () => {
       .toBeGreaterThan(1);
     await expect(session.activeChat()).toContainText("simple mock response", { timeout: 60_000 });
     await expect(testPage.getByTestId("ensure-session-error-banner")).toHaveCount(0);
-    expect(proxy.delayedResponseCount("session.subscribe")).toBe(1);
+    expect(proxy.droppedResponseCount("session.subscribe")).toBe(1);
   });
 
   test("shows one recoverable history notice and restores it with Retry", async ({
@@ -82,12 +77,7 @@ test.describe("session entry recovery", () => {
     const proxy = await routeSessionEntryRecovery(testPage);
     const task = await createEntryTask(apiClient, seedData, `History recovery ${Date.now()}`);
 
-    proxy.delayNextResponses(
-      "message.list",
-      2,
-      11_000,
-      "force both bounded history attempts to expose the unavailable state",
-    );
+    proxy.dropNextResponses("message.list", 2);
 
     const session = await openTaskSession(testPage, task.id);
     const historyNotice = session.activeChat().getByTestId("session-history-unavailable");
@@ -106,7 +96,7 @@ test.describe("session entry recovery", () => {
     await historyNotice.getByTestId("session-history-retry").click();
     await expect(historyNotice).toHaveCount(0);
     await expect(session.activeChat()).toContainText("simple mock response", { timeout: 30_000 });
-    expect(proxy.delayedResponseCount("message.list")).toBe(2);
+    expect(proxy.droppedResponseCount("message.list")).toBe(2);
   });
 
   test("labels exhausted status checks accurately and retries only the status read", async ({
@@ -118,12 +108,7 @@ test.describe("session entry recovery", () => {
     const proxy = await routeSessionEntryRecovery(testPage);
     const task = await createEntryTask(apiClient, seedData, `Status recovery ${Date.now()}`);
 
-    proxy.delayNextResponses(
-      "task.session.status",
-      2,
-      11_000,
-      "force both bounded status attempts to expose the compact status notice",
-    );
+    proxy.dropNextResponses("task.session.status", 2);
 
     await openTaskSession(testPage, task.id);
     const statusNotice = testPage.getByTestId("session-status-unavailable");
@@ -140,6 +125,6 @@ test.describe("session entry recovery", () => {
     await expect(statusNotice).toHaveCount(0);
     expect(proxy.requestCount("task.session.status")).toBeGreaterThanOrEqual(3);
     expect(proxy.requestCount("session.launch")).toBe(launchRequestCountBeforeRetry);
-    expect(proxy.delayedResponseCount("task.session.status")).toBe(2);
+    expect(proxy.droppedResponseCount("task.session.status")).toBe(2);
   });
 });
diff --git a/apps/web/e2e/tests/task/mobile-html-preview.spec.ts b/apps/web/e2e/tests/task/mobile-html-preview.spec.ts
index 181e86d2b7..0d8ff93de9 100644
--- a/apps/web/e2e/tests/task/mobile-html-preview.spec.ts
+++ b/apps/web/e2e/tests/task/mobile-html-preview.spec.ts
@@ -6,6 +6,7 @@ import type { ApiClient } from "../../helpers/api-client";
 import type { BackendContext } from "../../fixtures/backend";
 import { assertNoDocumentHorizontalOverflow } from "../../helpers/layout-assertions";
 import { GitHelper, makeGitEnv, createStandardProfile } from "../../helpers/git-helper";
+import { routeMainWebSocketWithPreviewFeedbackCreateFailure } from "../../helpers/ws-drop";
 import { SessionPage } from "../../pages/session-page";
 
 const SVG_ASSET =
@@ -22,6 +23,8 @@ function mobilePreviewHtml(assetDirectory: string): string {
     <h1>Mobile native preview</h1>
     <p id="css-status">CSS asset pending</p>
     <img id="asset-image" src="./${assetDirectory}/logo.svg" alt="asset">
+    <button id="capture-button">Review order</button>
+    <section id="capture-card">Generated order summary</section>
     <p id="native-status">Browser script pending</p>
     <script src="./${assetDirectory}/preview.js"></script>
   </body>
@@ -54,7 +57,7 @@ async function setupMobileHtmlPreviewTest({
   apiClient: ApiClient;
   seedData: SeedData;
   backend: BackendContext;
-}): Promise<{ session: SessionPage; filePath: string }> {
+}): Promise<{ session: SessionPage; filePath: string; taskId: string; sessionId: string }> {
   const suffix = `${Date.now()}-${Math.random().toString(36).slice(2, 8)}`;
   const filePath = `mobile-preview-${suffix}.html`;
   const assetDirectory = `mobile-preview-assets-${suffix}`;
@@ -86,7 +89,8 @@ async function setupMobileHtmlPreviewTest({
   const session = new SessionPage(testPage);
   await session.waitForLoad();
   await session.waitForChatIdle({ timeout: 45_000 });
-  return { session, filePath };
+  if (!task.session_id) throw new Error("Mobile HTML preview task has no session");
+  return { session, filePath, taskId: task.id, sessionId: task.session_id };
 }
 
 test.describe("Mobile HTML preview", () => {
@@ -144,6 +148,216 @@ test.describe("Mobile HTML preview", () => {
     await expect(preview).toBeHidden();
   });
 
+  test("captures touch feedback in the native HTML preview drawer", async ({
+    testPage,
+    apiClient,
+    seedData,
+    backend,
+  }) => {
+    const createFailure = await routeMainWebSocketWithPreviewFeedbackCreateFailure(testPage);
+    const { filePath, session, taskId, sessionId } = await setupMobileHtmlPreviewTest({
+      testPage,
+      apiClient,
+      seedData,
+      backend,
+    });
+
+    await testPage.getByRole("button", { name: "Files" }).tap();
+    const fileNode = testPage.locator(`[data-testid="file-tree-node"][data-path="${filePath}"]`);
+    await expect(fileNode).toBeVisible({ timeout: 15_000 });
+    await fileNode.tap();
+
+    const viewer = testPage.getByTestId("mobile-file-viewer-panel");
+    await expect(viewer).toBeVisible({ timeout: 5_000 });
+    await viewer.getByTestId("html-preview-toggle").tap();
+    const preview = viewer.getByTestId("html-preview");
+    const frame = preview.frameLocator("iframe");
+    await expect(frame.locator("#capture-button")).toBeVisible({ timeout: 15_000 });
+
+    const trigger = preview.getByTestId("preview-feedback-trigger");
+    const triggerBox = await trigger.boundingBox();
+    expect(triggerBox?.width).toBeGreaterThanOrEqual(44);
+    expect(triggerBox?.height).toBeGreaterThanOrEqual(44);
+    await trigger.tap();
+
+    const drawer = testPage.getByTestId("preview-feedback-drawer");
+    await expect(drawer).toBeVisible();
+    const viewport = testPage.viewportSize();
+    expect(viewport).not.toBeNull();
+    await expect
+      .poll(async () => {
+        const box = await drawer.boundingBox();
+        return box ? box.y + box.height : Number.POSITIVE_INFINITY;
+      })
+      .toBeLessThanOrEqual(viewport!.height);
+    const drawerBox = await drawer.boundingBox();
+    expect(drawerBox).not.toBeNull();
+    expect(drawerBox!.x).toBeGreaterThanOrEqual(0);
+    expect(drawerBox!.x + drawerBox!.width).toBeLessThanOrEqual(viewport!.width);
+    expect(drawerBox!.y + drawerBox!.height).toBeLessThanOrEqual(viewport!.height);
+
+    const captureChoices = [
+      { name: "Select text", label: "Text" },
+      { name: "Select element", label: "Element" },
+      { name: "Select screenshot region", label: "Screenshot" },
+    ];
+    const captureChoiceBoxes = [];
+    for (const choice of captureChoices) {
+      const button = drawer.getByRole("button", { name: choice.name, exact: true });
+      await expect(button).toHaveText(choice.label);
+      captureChoiceBoxes.push(await button.boundingBox());
+    }
+    expect(new Set(captureChoiceBoxes.map((box) => Math.round(box?.y ?? -1))).size).toBe(1);
+
+    const elementChoice = drawer.getByRole("button", { name: "Select element", exact: true });
+    const elementChoiceBox = await elementChoice.boundingBox();
+    expect(elementChoiceBox?.height).toBeGreaterThanOrEqual(44);
+    await elementChoice.tap();
+    await frame.locator("#capture-button").tap();
+
+    const elementDraft = testPage.getByTestId("preview-feedback-draft");
+    await expect(elementDraft).toContainText("<button#capture-button>");
+    await elementDraft
+      .getByRole("textbox", { name: "Comment on selection" })
+      .fill("Increase this touch target contrast");
+    await elementDraft.getByRole("button", { name: "Save feedback" }).tap();
+    await expect(elementDraft).toBeHidden({ timeout: 15_000 });
+
+    await drawer.getByRole("button", { name: "Select screenshot region", exact: true }).tap();
+    const screenshotTarget = frame.locator("#capture-card");
+    const region = await screenshotTarget.evaluate((element) => {
+      const rect = element.getBoundingClientRect();
+      return { left: rect.left, top: rect.top, right: rect.right, bottom: rect.bottom };
+    });
+    const pointer = { pointerId: 7, pointerType: "touch", isPrimary: true, buttons: 1 };
+    await screenshotTarget.dispatchEvent("pointerdown", {
+      ...pointer,
+      clientX: region.left + 2,
+      clientY: region.top + 2,
+    });
+    await screenshotTarget.dispatchEvent("pointermove", {
+      ...pointer,
+      clientX: region.right - 2,
+      clientY: region.bottom - 2,
+    });
+    await screenshotTarget.dispatchEvent("pointerup", {
+      ...pointer,
+      buttons: 0,
+      clientX: region.right - 2,
+      clientY: region.bottom - 2,
+    });
+
+    const screenshotDraft = testPage.getByTestId("preview-feedback-draft");
+    await expect(screenshotDraft.getByRole("img", { name: "Screenshot preview" })).toBeVisible({
+      timeout: 15_000,
+    });
+    await screenshotDraft
+      .getByRole("textbox", { name: "Comment on selection" })
+      .fill("Reduce the vertical space in this card");
+    createFailure.failNextCreate();
+    await screenshotDraft.getByRole("button", { name: "Save feedback" }).tap();
+    await expect.poll(() => createFailure.failedCount()).toBe(1);
+    await expect(screenshotDraft).toBeVisible();
+    await expect(
+      screenshotDraft.getByRole("textbox", { name: "Comment on selection" }),
+    ).toHaveValue("Reduce the vertical space in this card");
+    await expect(screenshotDraft.getByRole("img", { name: "Screenshot preview" })).toBeVisible();
+    await expect(testPage.getByTestId("preview-feedback-drawer").getByRole("alert")).toContainText(
+      "feedback could not be saved",
+    );
+    await screenshotDraft.getByRole("button", { name: "Save feedback" }).tap();
+    await expect(screenshotDraft).toBeHidden({ timeout: 15_000 });
+    await expect(preview.getByTestId("preview-feedback-trigger")).toContainText("2");
+    await assertNoDocumentHorizontalOverflow(testPage, "mobile preview feedback drawer");
+
+    await testPage.keyboard.press("Escape");
+    await expect(drawer).toBeHidden();
+    await preview.getByRole("button", { name: "Show code" }).tap();
+    await expect(viewer.locator(".cm-content")).toContainText("Generated order summary");
+    await expect(preview).toBeHidden();
+
+    await testPage.getByRole("navigation").getByRole("button", { name: "Chat", exact: true }).tap();
+    await apiClient.seedTaskSession(taskId, {
+      state: "COMPLETED",
+      sessionId,
+      completedAt: new Date().toISOString(),
+    });
+    await testPage.reload();
+    await session.waitForLoad();
+    await testPage.getByRole("navigation").getByRole("button", { name: "Chat", exact: true }).tap();
+    await expect(testPage.getByTestId("completed-session-banner")).toBeVisible({ timeout: 15_000 });
+
+    const fallbackTrigger = testPage.getByTestId("preview-feedback-collection-trigger");
+    await expect(fallbackTrigger).toBeVisible();
+    const fallbackTriggerBox = await fallbackTrigger.boundingBox();
+    expect(fallbackTriggerBox?.width).toBeGreaterThanOrEqual(44);
+    expect(fallbackTriggerBox?.height).toBeGreaterThanOrEqual(44);
+    const userMessageCount = await session.activeChat().getByTestId("user-message-bubble").count();
+    await fallbackTrigger.tap();
+
+    const collectionBody = testPage.getByTestId("preview-feedback-collection-body");
+    const collectionDrawer = testPage.getByRole("dialog").filter({ has: collectionBody });
+    await expect(collectionDrawer).toBeVisible();
+    const collectionViewport = testPage.viewportSize();
+    expect(collectionViewport).not.toBeNull();
+    await expect
+      .poll(async () => {
+        const box = await collectionDrawer.boundingBox();
+        return box ? box.y + box.height : Number.POSITIVE_INFINITY;
+      })
+      .toBeLessThanOrEqual(collectionViewport!.height);
+    const collectionBox = await collectionDrawer.boundingBox();
+    expect(collectionBox).not.toBeNull();
+    expect(collectionBox!.y + collectionBox!.height).toBeLessThanOrEqual(
+      collectionViewport!.height,
+    );
+    expect(
+      parseFloat(
+        await collectionBody.evaluate((element) => getComputedStyle(element).paddingBottom),
+      ),
+    ).toBeGreaterThanOrEqual(16);
+    const collectionItems = collectionBody.getByTestId("preview-feedback-item");
+    await expect(collectionItems).toHaveCount(2);
+    await expect(
+      collectionItems.nth(1).getByRole("img", { name: "Screenshot preview" }),
+    ).toBeVisible();
+
+    const firstItem = collectionItems.nth(0);
+    await firstItem.getByRole("button", { name: "Edit feedback" }).tap();
+    await firstItem
+      .getByRole("textbox", { name: "Edit comment" })
+      .fill("Keep this touch action clear");
+    await firstItem.getByRole("button", { name: "Save changes" }).tap();
+    await expect(firstItem).toContainText("Keep this touch action clear");
+
+    await collectionItems.nth(1).getByRole("button", { name: "Delete feedback" }).tap();
+    await expect(collectionItems).toHaveCount(1);
+    expect(await session.activeChat().getByTestId("user-message-bubble").count()).toBe(
+      userMessageCount,
+    );
+    await assertNoDocumentHorizontalOverflow(testPage, "mobile task feedback collection");
+
+    await testPage.keyboard.press("Escape");
+    await expect(collectionDrawer).toBeHidden();
+    await expect
+      .poll(() =>
+        testPage.evaluate(() => document.activeElement?.getAttribute("data-testid") ?? ""),
+      )
+      .toBe("preview-feedback-collection-trigger");
+
+    await testPage.reload();
+    await expect(
+      testPage.getByRole("navigation").getByRole("button", { name: "Chat", exact: true }),
+    ).toBeVisible();
+    await testPage.getByRole("navigation").getByRole("button", { name: "Chat", exact: true }).tap();
+    const restoredTrigger = testPage.getByTestId("preview-feedback-collection-trigger");
+    await expect(restoredTrigger).toContainText("1");
+    await restoredTrigger.tap();
+    await expect(testPage.getByTestId("preview-feedback-collection-body")).toContainText(
+      "Keep this touch action clear",
+    );
+  });
+
   test("recovers from a failed publish without losing the source viewer", async ({
     testPage,
     apiClient,
diff --git a/apps/web/generated/licenses.json b/apps/web/generated/licenses.json
index 0c1bbb6687..2b6569e740 100644
--- a/apps/web/generated/licenses.json
+++ b/apps/web/generated/licenses.json
@@ -1,30 +1,19 @@
 [
   {
     "name": "github.com/Masterminds/semver",
-    "version": "v3.2.1",
+    "version": "v3.4.0",
     "license": "MIT",
     "repository": "https://github.com/Masterminds/semver",
     "license_text": "Copyright (C) 2014-2019, Matt Butcher and Matt Farina\n\nPermission is hereby granted, free of charge, to any person obtaining a copy\nof this software and associated documentation files (the \"Software\"), to deal\nin the Software without restriction, including without limitation the rights\nto use, copy, modify, merge, publish, distribute, sublicense, and/or sell\ncopies of the Software, and to permit persons to whom the Software is\nfurnished to do so, subject to the following conditions:\n\nThe above copyright notice and this permission notice shall be included in\nall copies or substantial portions of the Software.\n\nTHE SOFTWARE IS PROVIDED \"AS IS\", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR\nIMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,\nFITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE\nAUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER\nLIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,\nOUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN\nTHE SOFTWARE.\n",
-    "ecosystem": "go",
-    "stale": true
+    "ecosystem": "go"
   },
   {
-    "name": "github.com/bahlo/generic-list-go",
-    "version": "v0.2.0",
-    "license": "BSD-3-Clause",
-    "repository": "https://github.com/bahlo/generic-list-go",
-    "license_text": "Copyright (c) 2009 The Go Authors. All rights reserved.\n\nRedistribution and use in source and binary forms, with or without\nmodification, are permitted provided that the following conditions are\nmet:\n\n   * Redistributions of source code must retain the above copyright\nnotice, this list of conditions and the following disclaimer.\n   * Redistributions in binary form must reproduce the above\ncopyright notice, this list of conditions and the following disclaimer\nin the documentation and/or other materials provided with the\ndistribution.\n   * Neither the name of Google Inc. nor the names of its\ncontributors may be used to endorse or promote products derived from\nthis software without specific prior written permission.\n\nTHIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS\n\"AS IS\" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT\nLIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR\nA PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT\nOWNER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,\nSPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT\nLIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,\nDATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY\nTHEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT\n(INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE\nOF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.\n",
-    "ecosystem": "go",
-    "stale": true
-  },
-  {
-    "name": "github.com/buger/jsonparser",
-    "version": "v1.1.2",
+    "name": "github.com/bmatcuk/doublestar",
+    "version": "v4.10.0",
     "license": "MIT",
-    "repository": "https://github.com/buger/jsonparser",
-    "license_text": "MIT License\n\nCopyright (c) 2016 Leonid Bugaev\n\nPermission is hereby granted, free of charge, to any person obtaining a copy\nof this software and associated documentation files (the \"Software\"), to deal\nin the Software without restriction, including without limitation the rights\nto use, copy, modify, merge, publish, distribute, sublicense, and/or sell\ncopies of the Software, and to permit persons to whom the Software is\nfurnished to do so, subject to the following conditions:\n\nThe above copyright notice and this permission notice shall be included in all\ncopies or substantial portions of the Software.\n\nTHE SOFTWARE IS PROVIDED \"AS IS\", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR\nIMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,\nFITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE\nAUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER\nLIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,\nOUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE\nSOFTWARE.\n",
-    "ecosystem": "go",
-    "stale": true
+    "repository": "https://github.com/bmatcuk/doublestar",
+    "license_text": "The MIT License (MIT)\n\nCopyright (c) 2014 Bob Matcuk\n\nPermission is hereby granted, free of charge, to any person obtaining a copy\nof this software and associated documentation files (the \"Software\"), to deal\nin the Software without restriction, including without limitation the rights\nto use, copy, modify, merge, publish, distribute, sublicense, and/or sell\ncopies of the Software, and to permit persons to whom the Software is\nfurnished to do so, subject to the following conditions:\n\nThe above copyright notice and this permission notice shall be included in all\ncopies or substantial portions of the Software.\n\nTHE SOFTWARE IS PROVIDED \"AS IS\", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR\nIMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,\nFITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE\nAUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER\nLIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,\nOUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE\nSOFTWARE.\n\n",
+    "ecosystem": "go"
   },
   {
     "name": "github.com/cenkalti/backoff",
@@ -32,8 +21,7 @@
     "license": "MIT",
     "repository": "https://github.com/cenkalti/backoff",
     "license_text": "The MIT License (MIT)\n\nCopyright (c) 2014 Cenk Altı\n\nPermission is hereby granted, free of charge, to any person obtaining a copy of\nthis software and associated documentation files (the \"Software\"), to deal in\nthe Software without restriction, including without limitation the rights to\nuse, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of\nthe Software, and to permit persons to whom the Software is furnished to do so,\nsubject to the following conditions:\n\nThe above copyright notice and this permission notice shall be included in all\ncopies or substantial portions of the Software.\n\nTHE SOFTWARE IS PROVIDED \"AS IS\", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR\nIMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS\nFOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR\nCOPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER\nIN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN\nCONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.\n",
-    "ecosystem": "go",
-    "stale": true
+    "ecosystem": "go"
   },
   {
     "name": "github.com/cespare/xxhash",
@@ -41,17 +29,7 @@
     "license": "MIT",
     "repository": "https://github.com/cespare/xxhash",
     "license_text": "Copyright (c) 2016 Caleb Spare\n\nMIT License\n\nPermission is hereby granted, free of charge, to any person obtaining\na copy of this software and associated documentation files (the\n\"Software\"), to deal in the Software without restriction, including\nwithout limitation the rights to use, copy, modify, merge, publish,\ndistribute, sublicense, and/or sell copies of the Software, and to\npermit persons to whom the Software is furnished to do so, subject to\nthe following conditions:\n\nThe above copyright notice and this permission notice shall be\nincluded in all copies or substantial portions of the Software.\n\nTHE SOFTWARE IS PROVIDED \"AS IS\", WITHOUT WARRANTY OF ANY KIND,\nEXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF\nMERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND\nNONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE\nLIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION\nOF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION\nWITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.\n",
-    "ecosystem": "go",
-    "stale": true
-  },
-  {
-    "name": "github.com/coder/acp-go-sdk",
-    "version": "v0.13.0",
-    "license": "Apache-2.0",
-    "repository": "https://github.com/coder/acp-go-sdk",
-    "license_text": "                                 Apache License\n                           Version 2.0, January 2004\n                        http://www.apache.org/licenses/\n\n   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION\n\n   1. Definitions.\n\n      \"License\" shall mean the terms and conditions for use, reproduction,\n      and distribution as defined by Sections 1 through 9 of this document.\n\n      \"Licensor\" shall mean the copyright owner or entity authorized by\n      the copyright owner that is granting the License.\n\n      \"Legal Entity\" shall mean the union of the acting entity and all\n      other entities that control, are controlled by, or are under common\n      control with that entity. For the purposes of this definition,\n      \"control\" means (i) the power, direct or indirect, to cause the\n      direction or management of such entity, whether by contract or\n      otherwise, or (ii) ownership of fifty percent (50%) or more of the\n      outstanding shares, or (iii) beneficial ownership of such entity.\n\n      \"You\" (or \"Your\") shall mean an individual or Legal Entity\n      exercising permissions granted by this License.\n\n      \"Source\" form shall mean the preferred form for making modifications,\n      including but not limited to software source code, documentation\n      source, and configuration files.\n\n      \"Object\" form shall mean any form resulting from mechanical\n      transformation or translation of a Source form, including but\n      not limited to compiled object code, generated documentation,\n      and conversions to other media types.\n\n      \"Work\" shall mean the work of authorship, whether in Source or\n      Object form, made available under the License, as indicated by a\n      copyright notice that is included in or attached to the work\n      (an example is provided in the Appendix below).\n\n      \"Derivative Works\" shall mean any work, whether in Source or Object\n      form, that is based on (or derived from) the Work and for which the\n      editorial revisions, annotations, elaborations, or other modifications\n      represent, as a whole, an original work of authorship. For the purposes\n      of this License, Derivative Works shall not include works that remain\n      separable from, or merely link (or bind by name) to the interfaces of,\n      the Work and Derivative Works thereof.\n\n      \"Contribution\" shall mean any work of authorship, including\n      the original version of the Work and any modifications or additions\n      to that Work or Derivative Works thereof, that is intentionally\n      submitted to Licensor for inclusion in the Work by the copyright owner\n      or by an individual or Legal Entity authorized to submit on behalf of\n      the copyright owner. For the purposes of this definition, \"submitted\"\n      means any form of electronic, verbal, or written communication sent\n      to the Licensor or its representatives, including but not limited to\n      communication on electronic mailing lists, source code control systems,\n      and issue tracking systems that are managed by, or on behalf of, the\n      Licensor for the purpose of discussing and improving the Work, but\n      excluding communication that is conspicuously marked or otherwise\n      designated in writing by the copyright owner as \"Not a Contribution.\"\n\n      \"Contributor\" shall mean Licensor and any individual or Legal Entity\n      on behalf of whom a Contribution has been received by Licensor and\n      subsequently incorporated within the Work.\n\n   2. Grant of Copyright License. Subject to the terms and conditions of\n      this License, each Contributor hereby grants to You a perpetual,\n      worldwide, non-exclusive, no-charge, royalty-free, irrevocable\n      copyright license to reproduce, prepare Derivative Works of,\n      publicly display, publicly perform, sublicense, and distribute the\n      Work and such Derivative Works in Source or Object form.\n\n   3. Grant of Patent License. Subject to the terms and conditions of\n      this License, each Contributor hereby grants to You a perpetual,\n      worldwide, non-exclusive, no-charge, royalty-free, irrevocable\n      (except as stated in this section) patent license to make, have made,\n      use, offer to sell, sell, import, and otherwise transfer the Work,\n      where such license applies only to those patent claims licensable\n      by such Contributor that are necessarily infringed by their\n      Contribution(s) alone or by combination of their Contribution(s)\n      with the Work to which such Contribution(s) was submitted. If You\n      institute patent litigation against any entity (including a\n      cross-claim or counterclaim in a lawsuit) alleging that the Work\n      or a Contribution incorporated within the Work constitutes direct\n      or contributory patent infringement, then any patent licenses\n      granted to You under this License for that Work shall terminate\n      as of the date such litigation is filed.\n\n   4. Redistribution. You may reproduce and distribute copies of the\n      Work or Derivative Works thereof in any medium, with or without\n      modifications, and in Source or Object form, provided that You\n      meet the following conditions:\n\n      (a) You must give any other recipients of the Work or\n          Derivative Works a copy of this License; and\n\n      (b) You must cause any modified files to carry prominent notices\n          stating that You changed the files; and\n\n      (c) You must retain, in the Source form of any Derivative Works\n          that You distribute, all copyright, patent, trademark, and\n          attribution notices from the Source form of the Work,\n          excluding those notices that do not pertain to any part of\n          the Derivative Works; and\n\n      (d) If the Work includes a \"NOTICE\" text file as part of its\n          distribution, then any Derivative Works that You distribute must\n          include a readable copy of the attribution notices contained\n          within such NOTICE file, excluding those notices that do not\n          pertain to any part of the Derivative Works, in at least one\n          of the following places: within a NOTICE text file distributed\n          as part of the Derivative Works; within the Source form or\n          documentation, if provided along with the Derivative Works; or,\n          within a display generated by the Derivative Works, if and\n          wherever such third-party notices normally appear. The contents\n          of the NOTICE file are for informational purposes only and\n          do not modify the License. You may add Your own attribution\n          notices within Derivative Works that You distribute, alongside\n          or as an addendum to the NOTICE text from the Work, provided\n          that such additional attribution notices cannot be construed\n          as modifying the License.\n\n      You may add Your own copyright statement to Your modifications and\n      may provide additional or different license terms and conditions\n      for use, reproduction, or distribution of Your modifications, or\n      for any such Derivative Works as a whole, provided Your use,\n      reproduction, and distribution of the Work otherwise complies with\n      the conditions stated in this License.\n\n   5. Submission of Contributions. Unless You explicitly state otherwise,\n      any Contribution intentionally submitted for inclusion in the Work\n      by You to the Licensor shall be under the terms and conditions of\n      this License, without any additional terms or conditions.\n      Notwithstanding the above, nothing herein shall supersede or modify\n      the terms of any separate license agreement you may have executed\n      with Licensor regarding such Contributions.\n\n   6. Trademarks. This License does not grant permission to use the trade\n      names, trademarks, service marks, or product names of the Licensor,\n      except as required for reasonable and customary use in describing the\n      origin of the Work and reproducing the content of the NOTICE file.\n\n   7. Disclaimer of Warranty. Unless required by applicable law or\n      agreed to in writing, Licensor provides the Work (and each\n      Contributor provides its Contributions) on an \"AS IS\" BASIS,\n      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or\n      implied, including, without limitation, any warranties or conditions\n      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A\n      PARTICULAR PURPOSE. You are solely responsible for determining the\n      appropriateness of using or redistributing the Work and assume any\n      risks associated with Your exercise of permissions under this License.\n\n   8. Limitation of Liability. In no event and under no legal theory,\n      whether in tort (including negligence), contract, or otherwise,\n      unless required by applicable law (such as deliberate and grossly\n      negligent acts) or agreed to in writing, shall any Contributor be\n      liable to You for damages, including any direct, indirect, special,\n      incidental, or consequential damages of any character arising as a\n      result of this License or out of the use or inability to use the\n      Work (including but not limited to damages for loss of goodwill,\n      work stoppage, computer failure or malfunction, or any and all\n      other commercial damages or losses), even if such Contributor\n      has been advised of the possibility of such damages.\n\n   9. Accepting Warranty or Additional Liability. While redistributing\n      the Work or Derivative Works thereof, You may choose to offer,\n      and charge a fee for, acceptance of support, warranty, indemnity,\n      or other liability obligations and/or rights consistent with this\n      License. However, in accepting such obligations, You may act only\n      on Your own behalf and on Your sole responsibility, not on behalf\n      of any other Contributor, and only if You agree to indemnify,\n      defend, and hold each Contributor harmless for any liability\n      incurred by, or claims asserted against, such Contributor by reason\n      of your accepting any such warranty or additional liability.\n\n   END OF TERMS AND CONDITIONS\n\n   APPENDIX: How to apply the Apache License to your work.\n\n      To apply the Apache License to your work, attach the following\n      boilerplate notice, with the fields enclosed by brackets \"[]\"\n      replaced with your own identifying information. (Don't include\n      the brackets!)  The text should be enclosed in the appropriate\n      comment syntax for the file format. We also recommend that a\n      file or class name and description of purpose be included on the\n      same \"printed page\" as the copyright notice for easier\n      identification within third-party archives.\n\n   Copyright 2025 Coder Technologies, Inc.\n\n   Licensed under the Apache License, Version 2.0 (the \"License\");\n   you may not use this file except in compliance with the License.\n   You may obtain a copy of the License at\n\n       http://www.apache.org/licenses/LICENSE-2.0\n\n   Unless required by applicable law or agreed to in writing, software\n   distributed under the License is distributed on an \"AS IS\" BASIS,\n   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n   See the License for the specific language governing permissions and\n   limitations under the License.\n",
-    "ecosystem": "go",
-    "stale": true
+    "ecosystem": "go"
   },
   {
     "name": "github.com/containerd/errdefs",
@@ -59,8 +37,7 @@
     "license": "Apache-2.0",
     "repository": "https://github.com/containerd/errdefs",
     "license_text": "\n                                 Apache License\n                           Version 2.0, January 2004\n                        https://www.apache.org/licenses/\n\n   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION\n\n   1. Definitions.\n\n      \"License\" shall mean the terms and conditions for use, reproduction,\n      and distribution as defined by Sections 1 through 9 of this document.\n\n      \"Licensor\" shall mean the copyright owner or entity authorized by\n      the copyright owner that is granting the License.\n\n      \"Legal Entity\" shall mean the union of the acting entity and all\n      other entities that control, are controlled by, or are under common\n      control with that entity. For the purposes of this definition,\n      \"control\" means (i) the power, direct or indirect, to cause the\n      direction or management of such entity, whether by contract or\n      otherwise, or (ii) ownership of fifty percent (50%) or more of the\n      outstanding shares, or (iii) beneficial ownership of such entity.\n\n      \"You\" (or \"Your\") shall mean an individual or Legal Entity\n      exercising permissions granted by this License.\n\n      \"Source\" form shall mean the preferred form for making modifications,\n      including but not limited to software source code, documentation\n      source, and configuration files.\n\n      \"Object\" form shall mean any form resulting from mechanical\n      transformation or translation of a Source form, including but\n      not limited to compiled object code, generated documentation,\n      and conversions to other media types.\n\n      \"Work\" shall mean the work of authorship, whether in Source or\n      Object form, made available under the License, as indicated by a\n      copyright notice that is included in or attached to the work\n      (an example is provided in the Appendix below).\n\n      \"Derivative Works\" shall mean any work, whether in Source or Object\n      form, that is based on (or derived from) the Work and for which the\n      editorial revisions, annotations, elaborations, or other modifications\n      represent, as a whole, an original work of authorship. For the purposes\n      of this License, Derivative Works shall not include works that remain\n      separable from, or merely link (or bind by name) to the interfaces of,\n      the Work and Derivative Works thereof.\n\n      \"Contribution\" shall mean any work of authorship, including\n      the original version of the Work and any modifications or additions\n      to that Work or Derivative Works thereof, that is intentionally\n      submitted to Licensor for inclusion in the Work by the copyright owner\n      or by an individual or Legal Entity authorized to submit on behalf of\n      the copyright owner. For the purposes of this definition, \"submitted\"\n      means any form of electronic, verbal, or written communication sent\n      to the Licensor or its representatives, including but not limited to\n      communication on electronic mailing lists, source code control systems,\n      and issue tracking systems that are managed by, or on behalf of, the\n      Licensor for the purpose of discussing and improving the Work, but\n      excluding communication that is conspicuously marked or otherwise\n      designated in writing by the copyright owner as \"Not a Contribution.\"\n\n      \"Contributor\" shall mean Licensor and any individual or Legal Entity\n      on behalf of whom a Contribution has been received by Licensor and\n      subsequently incorporated within the Work.\n\n   2. Grant of Copyright License. Subject to the terms and conditions of\n      this License, each Contributor hereby grants to You a perpetual,\n      worldwide, non-exclusive, no-charge, royalty-free, irrevocable\n      copyright license to reproduce, prepare Derivative Works of,\n      publicly display, publicly perform, sublicense, and distribute the\n      Work and such Derivative Works in Source or Object form.\n\n   3. Grant of Patent License. Subject to the terms and conditions of\n      this License, each Contributor hereby grants to You a perpetual,\n      worldwide, non-exclusive, no-charge, royalty-free, irrevocable\n      (except as stated in this section) patent license to make, have made,\n      use, offer to sell, sell, import, and otherwise transfer the Work,\n      where such license applies only to those patent claims licensable\n      by such Contributor that are necessarily infringed by their\n      Contribution(s) alone or by combination of their Contribution(s)\n      with the Work to which such Contribution(s) was submitted. If You\n      institute patent litigation against any entity (including a\n      cross-claim or counterclaim in a lawsuit) alleging that the Work\n      or a Contribution incorporated within the Work constitutes direct\n      or contributory patent infringement, then any patent licenses\n      granted to You under this License for that Work shall terminate\n      as of the date such litigation is filed.\n\n   4. Redistribution. You may reproduce and distribute copies of the\n      Work or Derivative Works thereof in any medium, with or without\n      modifications, and in Source or Object form, provided that You\n      meet the following conditions:\n\n      (a) You must give any other recipients of the Work or\n          Derivative Works a copy of this License; and\n\n      (b) You must cause any modified files to carry prominent notices\n          stating that You changed the files; and\n\n      (c) You must retain, in the Source form of any Derivative Works\n          that You distribute, all copyright, patent, trademark, and\n          attribution notices from the Source form of the Work,\n          excluding those notices that do not pertain to any part of\n          the Derivative Works; and\n\n      (d) If the Work includes a \"NOTICE\" text file as part of its\n          distribution, then any Derivative Works that You distribute must\n          include a readable copy of the attribution notices contained\n          within such NOTICE file, excluding those notices that do not\n          pertain to any part of the Derivative Works, in at least one\n          of the following places: within a NOTICE text file distributed\n          as part of the Derivative Works; within the Source form or\n          documentation, if provided along with the Derivative Works; or,\n          within a display generated by the Derivative Works, if and\n          wherever such third-party notices normally appear. The contents\n          of the NOTICE file are for informational purposes only and\n          do not modify the License. You may add Your own attribution\n          notices within Derivative Works that You distribute, alongside\n          or as an addendum to the NOTICE text from the Work, provided\n          that such additional attribution notices cannot be construed\n          as modifying the License.\n\n      You may add Your own copyright statement to Your modifications and\n      may provide additional or different license terms and conditions\n      for use, reproduction, or distribution of Your modifications, or\n      for any such Derivative Works as a whole, provided Your use,\n      reproduction, and distribution of the Work otherwise complies with\n      the conditions stated in this License.\n\n   5. Submission of Contributions. Unless You explicitly state otherwise,\n      any Contribution intentionally submitted for inclusion in the Work\n      by You to the Licensor shall be under the terms and conditions of\n      this License, without any additional terms or conditions.\n      Notwithstanding the above, nothing herein shall supersede or modify\n      the terms of any separate license agreement you may have executed\n      with Licensor regarding such Contributions.\n\n   6. Trademarks. This License does not grant permission to use the trade\n      names, trademarks, service marks, or product names of the Licensor,\n      except as required for reasonable and customary use in describing the\n      origin of the Work and reproducing the content of the NOTICE file.\n\n   7. Disclaimer of Warranty. Unless required by applicable law or\n      agreed to in writing, Licensor provides the Work (and each\n      Contributor provides its Contributions) on an \"AS IS\" BASIS,\n      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or\n      implied, including, without limitation, any warranties or conditions\n      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A\n      PARTICULAR PURPOSE. You are solely responsible for determining the\n      appropriateness of using or redistributing the Work and assume any\n      risks associated with Your exercise of permissions under this License.\n\n   8. Limitation of Liability. In no event and under no legal theory,\n      whether in tort (including negligence), contract, or otherwise,\n      unless required by applicable law (such as deliberate and grossly\n      negligent acts) or agreed to in writing, shall any Contributor be\n      liable to You for damages, including any direct, indirect, special,\n      incidental, or consequential damages of any character arising as a\n      result of this License or out of the use or inability to use the\n      Work (including but not limited to damages for loss of goodwill,\n      work stoppage, computer failure or malfunction, or any and all\n      other commercial damages or losses), even if such Contributor\n      has been advised of the possibility of such damages.\n\n   9. Accepting Warranty or Additional Liability. While redistributing\n      the Work or Derivative Works thereof, You may choose to offer,\n      and charge a fee for, acceptance of support, warranty, indemnity,\n      or other liability obligations and/or rights consistent with this\n      License. However, in accepting such obligations, You may act only\n      on Your own behalf and on Your sole responsibility, not on behalf\n      of any other Contributor, and only if You agree to indemnify,\n      defend, and hold each Contributor harmless for any liability\n      incurred by, or claims asserted against, such Contributor by reason\n      of your accepting any such warranty or additional liability.\n\n   END OF TERMS AND CONDITIONS\n\n   Copyright The containerd Authors\n\n   Licensed under the Apache License, Version 2.0 (the \"License\");\n   you may not use this file except in compliance with the License.\n   You may obtain a copy of the License at\n\n       https://www.apache.org/licenses/LICENSE-2.0\n\n   Unless required by applicable law or agreed to in writing, software\n   distributed under the License is distributed on an \"AS IS\" BASIS,\n   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n   See the License for the specific language governing permissions and\n   limitations under the License.\n",
-    "ecosystem": "go",
-    "stale": true
+    "ecosystem": "go"
   },
   {
     "name": "github.com/containerd/errdefs",
@@ -68,17 +45,23 @@
     "license": "Apache-2.0",
     "repository": "https://github.com/containerd/errdefs",
     "license_text": "\n                                 Apache License\n                           Version 2.0, January 2004\n                        https://www.apache.org/licenses/\n\n   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION\n\n   1. Definitions.\n\n      \"License\" shall mean the terms and conditions for use, reproduction,\n      and distribution as defined by Sections 1 through 9 of this document.\n\n      \"Licensor\" shall mean the copyright owner or entity authorized by\n      the copyright owner that is granting the License.\n\n      \"Legal Entity\" shall mean the union of the acting entity and all\n      other entities that control, are controlled by, or are under common\n      control with that entity. For the purposes of this definition,\n      \"control\" means (i) the power, direct or indirect, to cause the\n      direction or management of such entity, whether by contract or\n      otherwise, or (ii) ownership of fifty percent (50%) or more of the\n      outstanding shares, or (iii) beneficial ownership of such entity.\n\n      \"You\" (or \"Your\") shall mean an individual or Legal Entity\n      exercising permissions granted by this License.\n\n      \"Source\" form shall mean the preferred form for making modifications,\n      including but not limited to software source code, documentation\n      source, and configuration files.\n\n      \"Object\" form shall mean any form resulting from mechanical\n      transformation or translation of a Source form, including but\n      not limited to compiled object code, generated documentation,\n      and conversions to other media types.\n\n      \"Work\" shall mean the work of authorship, whether in Source or\n      Object form, made available under the License, as indicated by a\n      copyright notice that is included in or attached to the work\n      (an example is provided in the Appendix below).\n\n      \"Derivative Works\" shall mean any work, whether in Source or Object\n      form, that is based on (or derived from) the Work and for which the\n      editorial revisions, annotations, elaborations, or other modifications\n      represent, as a whole, an original work of authorship. For the purposes\n      of this License, Derivative Works shall not include works that remain\n      separable from, or merely link (or bind by name) to the interfaces of,\n      the Work and Derivative Works thereof.\n\n      \"Contribution\" shall mean any work of authorship, including\n      the original version of the Work and any modifications or additions\n      to that Work or Derivative Works thereof, that is intentionally\n      submitted to Licensor for inclusion in the Work by the copyright owner\n      or by an individual or Legal Entity authorized to submit on behalf of\n      the copyright owner. For the purposes of this definition, \"submitted\"\n      means any form of electronic, verbal, or written communication sent\n      to the Licensor or its representatives, including but not limited to\n      communication on electronic mailing lists, source code control systems,\n      and issue tracking systems that are managed by, or on behalf of, the\n      Licensor for the purpose of discussing and improving the Work, but\n      excluding communication that is conspicuously marked or otherwise\n      designated in writing by the copyright owner as \"Not a Contribution.\"\n\n      \"Contributor\" shall mean Licensor and any individual or Legal Entity\n      on behalf of whom a Contribution has been received by Licensor and\n      subsequently incorporated within the Work.\n\n   2. Grant of Copyright License. Subject to the terms and conditions of\n      this License, each Contributor hereby grants to You a perpetual,\n      worldwide, non-exclusive, no-charge, royalty-free, irrevocable\n      copyright license to reproduce, prepare Derivative Works of,\n      publicly display, publicly perform, sublicense, and distribute the\n      Work and such Derivative Works in Source or Object form.\n\n   3. Grant of Patent License. Subject to the terms and conditions of\n      this License, each Contributor hereby grants to You a perpetual,\n      worldwide, non-exclusive, no-charge, royalty-free, irrevocable\n      (except as stated in this section) patent license to make, have made,\n      use, offer to sell, sell, import, and otherwise transfer the Work,\n      where such license applies only to those patent claims licensable\n      by such Contributor that are necessarily infringed by their\n      Contribution(s) alone or by combination of their Contribution(s)\n      with the Work to which such Contribution(s) was submitted. If You\n      institute patent litigation against any entity (including a\n      cross-claim or counterclaim in a lawsuit) alleging that the Work\n      or a Contribution incorporated within the Work constitutes direct\n      or contributory patent infringement, then any patent licenses\n      granted to You under this License for that Work shall terminate\n      as of the date such litigation is filed.\n\n   4. Redistribution. You may reproduce and distribute copies of the\n      Work or Derivative Works thereof in any medium, with or without\n      modifications, and in Source or Object form, provided that You\n      meet the following conditions:\n\n      (a) You must give any other recipients of the Work or\n          Derivative Works a copy of this License; and\n\n      (b) You must cause any modified files to carry prominent notices\n          stating that You changed the files; and\n\n      (c) You must retain, in the Source form of any Derivative Works\n          that You distribute, all copyright, patent, trademark, and\n          attribution notices from the Source form of the Work,\n          excluding those notices that do not pertain to any part of\n          the Derivative Works; and\n\n      (d) If the Work includes a \"NOTICE\" text file as part of its\n          distribution, then any Derivative Works that You distribute must\n          include a readable copy of the attribution notices contained\n          within such NOTICE file, excluding those notices that do not\n          pertain to any part of the Derivative Works, in at least one\n          of the following places: within a NOTICE text file distributed\n          as part of the Derivative Works; within the Source form or\n          documentation, if provided along with the Derivative Works; or,\n          within a display generated by the Derivative Works, if and\n          wherever such third-party notices normally appear. The contents\n          of the NOTICE file are for informational purposes only and\n          do not modify the License. You may add Your own attribution\n          notices within Derivative Works that You distribute, alongside\n          or as an addendum to the NOTICE text from the Work, provided\n          that such additional attribution notices cannot be construed\n          as modifying the License.\n\n      You may add Your own copyright statement to Your modifications and\n      may provide additional or different license terms and conditions\n      for use, reproduction, or distribution of Your modifications, or\n      for any such Derivative Works as a whole, provided Your use,\n      reproduction, and distribution of the Work otherwise complies with\n      the conditions stated in this License.\n\n   5. Submission of Contributions. Unless You explicitly state otherwise,\n      any Contribution intentionally submitted for inclusion in the Work\n      by You to the Licensor shall be under the terms and conditions of\n      this License, without any additional terms or conditions.\n      Notwithstanding the above, nothing herein shall supersede or modify\n      the terms of any separate license agreement you may have executed\n      with Licensor regarding such Contributions.\n\n   6. Trademarks. This License does not grant permission to use the trade\n      names, trademarks, service marks, or product names of the Licensor,\n      except as required for reasonable and customary use in describing the\n      origin of the Work and reproducing the content of the NOTICE file.\n\n   7. Disclaimer of Warranty. Unless required by applicable law or\n      agreed to in writing, Licensor provides the Work (and each\n      Contributor provides its Contributions) on an \"AS IS\" BASIS,\n      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or\n      implied, including, without limitation, any warranties or conditions\n      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A\n      PARTICULAR PURPOSE. You are solely responsible for determining the\n      appropriateness of using or redistributing the Work and assume any\n      risks associated with Your exercise of permissions under this License.\n\n   8. Limitation of Liability. In no event and under no legal theory,\n      whether in tort (including negligence), contract, or otherwise,\n      unless required by applicable law (such as deliberate and grossly\n      negligent acts) or agreed to in writing, shall any Contributor be\n      liable to You for damages, including any direct, indirect, special,\n      incidental, or consequential damages of any character arising as a\n      result of this License or out of the use or inability to use the\n      Work (including but not limited to damages for loss of goodwill,\n      work stoppage, computer failure or malfunction, or any and all\n      other commercial damages or losses), even if such Contributor\n      has been advised of the possibility of such damages.\n\n   9. Accepting Warranty or Additional Liability. While redistributing\n      the Work or Derivative Works thereof, You may choose to offer,\n      and charge a fee for, acceptance of support, warranty, indemnity,\n      or other liability obligations and/or rights consistent with this\n      License. However, in accepting such obligations, You may act only\n      on Your own behalf and on Your sole responsibility, not on behalf\n      of any other Contributor, and only if You agree to indemnify,\n      defend, and hold each Contributor harmless for any liability\n      incurred by, or claims asserted against, such Contributor by reason\n      of your accepting any such warranty or additional liability.\n\n   END OF TERMS AND CONDITIONS\n\n   Copyright The containerd Authors\n\n   Licensed under the Apache License, Version 2.0 (the \"License\");\n   you may not use this file except in compliance with the License.\n   You may obtain a copy of the License at\n\n       https://www.apache.org/licenses/LICENSE-2.0\n\n   Unless required by applicable law or agreed to in writing, software\n   distributed under the License is distributed on an \"AS IS\" BASIS,\n   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n   See the License for the specific language governing permissions and\n   limitations under the License.\n",
-    "ecosystem": "go",
-    "stale": true
+    "ecosystem": "go"
   },
   {
     "name": "github.com/creack/pty",
-    "version": "v1.1.21",
+    "version": "v1.1.24",
     "license": "MIT",
     "repository": "https://github.com/creack/pty",
     "license_text": "Copyright (c) 2011 Keith Rarick\n\nPermission is hereby granted, free of charge, to any person\nobtaining a copy of this software and associated\ndocumentation files (the \"Software\"), to deal in the\nSoftware without restriction, including without limitation\nthe rights to use, copy, modify, merge, publish, distribute,\nsublicense, and/or sell copies of the Software, and to\npermit persons to whom the Software is furnished to do so,\nsubject to the following conditions:\n\nThe above copyright notice and this permission notice shall\nbe included in all copies or substantial portions of the\nSoftware.\n\nTHE SOFTWARE IS PROVIDED \"AS IS\", WITHOUT WARRANTY OF ANY\nKIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE\nWARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR\nPURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS\nOR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR\nOTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR\nOTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE\nSOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.\n",
-    "ecosystem": "go",
-    "stale": true
+    "ecosystem": "go"
+  },
+  {
+    "name": "github.com/davecgh/go-spew",
+    "version": "v1.1.1",
+    "license": "ISC",
+    "repository": "https://github.com/davecgh/go-spew",
+    "license_text": "ISC License\n\nCopyright (c) 2012-2016 Dave Collins <dave@davec.name>\n\nPermission to use, copy, modify, and/or distribute this software for any\npurpose with or without fee is hereby granted, provided that the above\ncopyright notice and this permission notice appear in all copies.\n\nTHE SOFTWARE IS PROVIDED \"AS IS\" AND THE AUTHOR DISCLAIMS ALL WARRANTIES\nWITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF\nMERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR\nANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES\nWHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN\nACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF\nOR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.\n",
+    "ecosystem": "go"
   },
   {
     "name": "github.com/distribution/reference",
@@ -86,26 +69,23 @@
     "license": "Apache-2.0",
     "repository": "https://github.com/distribution/reference",
     "license_text": "Apache License\n                           Version 2.0, January 2004\n                        http://www.apache.org/licenses/\n\n   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION\n\n   1. Definitions.\n\n      \"License\" shall mean the terms and conditions for use, reproduction,\n      and distribution as defined by Sections 1 through 9 of this document.\n\n      \"Licensor\" shall mean the copyright owner or entity authorized by\n      the copyright owner that is granting the License.\n\n      \"Legal Entity\" shall mean the union of the acting entity and all\n      other entities that control, are controlled by, or are under common\n      control with that entity. For the purposes of this definition,\n      \"control\" means (i) the power, direct or indirect, to cause the\n      direction or management of such entity, whether by contract or\n      otherwise, or (ii) ownership of fifty percent (50%) or more of the\n      outstanding shares, or (iii) beneficial ownership of such entity.\n\n      \"You\" (or \"Your\") shall mean an individual or Legal Entity\n      exercising permissions granted by this License.\n\n      \"Source\" form shall mean the preferred form for making modifications,\n      including but not limited to software source code, documentation\n      source, and configuration files.\n\n      \"Object\" form shall mean any form resulting from mechanical\n      transformation or translation of a Source form, including but\n      not limited to compiled object code, generated documentation,\n      and conversions to other media types.\n\n      \"Work\" shall mean the work of authorship, whether in Source or\n      Object form, made available under the License, as indicated by a\n      copyright notice that is included in or attached to the work\n      (an example is provided in the Appendix below).\n\n      \"Derivative Works\" shall mean any work, whether in Source or Object\n      form, that is based on (or derived from) the Work and for which the\n      editorial revisions, annotations, elaborations, or other modifications\n      represent, as a whole, an original work of authorship. For the purposes\n      of this License, Derivative Works shall not include works that remain\n      separable from, or merely link (or bind by name) to the interfaces of,\n      the Work and Derivative Works thereof.\n\n      \"Contribution\" shall mean any work of authorship, including\n      the original version of the Work and any modifications or additions\n      to that Work or Derivative Works thereof, that is intentionally\n      submitted to Licensor for inclusion in the Work by the copyright owner\n      or by an individual or Legal Entity authorized to submit on behalf of\n      the copyright owner. For the purposes of this definition, \"submitted\"\n      means any form of electronic, verbal, or written communication sent\n      to the Licensor or its representatives, including but not limited to\n      communication on electronic mailing lists, source code control systems,\n      and issue tracking systems that are managed by, or on behalf of, the\n      Licensor for the purpose of discussing and improving the Work, but\n      excluding communication that is conspicuously marked or otherwise\n      designated in writing by the copyright owner as \"Not a Contribution.\"\n\n      \"Contributor\" shall mean Licensor and any individual or Legal Entity\n      on behalf of whom a Contribution has been received by Licensor and\n      subsequently incorporated within the Work.\n\n   2. Grant of Copyright License. Subject to the terms and conditions of\n      this License, each Contributor hereby grants to You a perpetual,\n      worldwide, non-exclusive, no-charge, royalty-free, irrevocable\n      copyright license to reproduce, prepare Derivative Works of,\n      publicly display, publicly perform, sublicense, and distribute the\n      Work and such Derivative Works in Source or Object form.\n\n   3. Grant of Patent License. Subject to the terms and conditions of\n      this License, each Contributor hereby grants to You a perpetual,\n      worldwide, non-exclusive, no-charge, royalty-free, irrevocable\n      (except as stated in this section) patent license to make, have made,\n      use, offer to sell, sell, import, and otherwise transfer the Work,\n      where such license applies only to those patent claims licensable\n      by such Contributor that are necessarily infringed by their\n      Contribution(s) alone or by combination of their Contribution(s)\n      with the Work to which such Contribution(s) was submitted. If You\n      institute patent litigation against any entity (including a\n      cross-claim or counterclaim in a lawsuit) alleging that the Work\n      or a Contribution incorporated within the Work constitutes direct\n      or contributory patent infringement, then any patent licenses\n      granted to You under this License for that Work shall terminate\n      as of the date such litigation is filed.\n\n   4. Redistribution. You may reproduce and distribute copies of the\n      Work or Derivative Works thereof in any medium, with or without\n      modifications, and in Source or Object form, provided that You\n      meet the following conditions:\n\n      (a) You must give any other recipients of the Work or\n          Derivative Works a copy of this License; and\n\n      (b) You must cause any modified files to carry prominent notices\n          stating that You changed the files; and\n\n      (c) You must retain, in the Source form of any Derivative Works\n          that You distribute, all copyright, patent, trademark, and\n          attribution notices from the Source form of the Work,\n          excluding those notices that do not pertain to any part of\n          the Derivative Works; and\n\n      (d) If the Work includes a \"NOTICE\" text file as part of its\n          distribution, then any Derivative Works that You distribute must\n          include a readable copy of the attribution notices contained\n          within such NOTICE file, excluding those notices that do not\n          pertain to any part of the Derivative Works, in at least one\n          of the following places: within a NOTICE text file distributed\n          as part of the Derivative Works; within the Source form or\n          documentation, if provided along with the Derivative Works; or,\n          within a display generated by the Derivative Works, if and\n          wherever such third-party notices normally appear. The contents\n          of the NOTICE file are for informational purposes only and\n          do not modify the License. You may add Your own attribution\n          notices within Derivative Works that You distribute, alongside\n          or as an addendum to the NOTICE text from the Work, provided\n          that such additional attribution notices cannot be construed\n          as modifying the License.\n\n      You may add Your own copyright statement to Your modifications and\n      may provide additional or different license terms and conditions\n      for use, reproduction, or distribution of Your modifications, or\n      for any such Derivative Works as a whole, provided Your use,\n      reproduction, and distribution of the Work otherwise complies with\n      the conditions stated in this License.\n\n   5. Submission of Contributions. Unless You explicitly state otherwise,\n      any Contribution intentionally submitted for inclusion in the Work\n      by You to the Licensor shall be under the terms and conditions of\n      this License, without any additional terms or conditions.\n      Notwithstanding the above, nothing herein shall supersede or modify\n      the terms of any separate license agreement you may have executed\n      with Licensor regarding such Contributions.\n\n   6. Trademarks. This License does not grant permission to use the trade\n      names, trademarks, service marks, or product names of the Licensor,\n      except as required for reasonable and customary use in describing the\n      origin of the Work and reproducing the content of the NOTICE file.\n\n   7. Disclaimer of Warranty. Unless required by applicable law or\n      agreed to in writing, Licensor provides the Work (and each\n      Contributor provides its Contributions) on an \"AS IS\" BASIS,\n      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or\n      implied, including, without limitation, any warranties or conditions\n      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A\n      PARTICULAR PURPOSE. You are solely responsible for determining the\n      appropriateness of using or redistributing the Work and assume any\n      risks associated with Your exercise of permissions under this License.\n\n   8. Limitation of Liability. In no event and under no legal theory,\n      whether in tort (including negligence), contract, or otherwise,\n      unless required by applicable law (such as deliberate and grossly\n      negligent acts) or agreed to in writing, shall any Contributor be\n      liable to You for damages, including any direct, indirect, special,\n      incidental, or consequential damages of any character arising as a\n      result of this License or out of the use or inability to use the\n      Work (including but not limited to damages for loss of goodwill,\n      work stoppage, computer failure or malfunction, or any and all\n      other commercial damages or losses), even if such Contributor\n      has been advised of the possibility of such damages.\n\n   9. Accepting Warranty or Additional Liability. While redistributing\n      the Work or Derivative Works thereof, You may choose to offer,\n      and charge a fee for, acceptance of support, warranty, indemnity,\n      or other liability obligations and/or rights consistent with this\n      License. However, in accepting such obligations, You may act only\n      on Your own behalf and on Your sole responsibility, not on behalf\n      of any other Contributor, and only if You agree to indemnify,\n      defend, and hold each Contributor harmless for any liability\n      incurred by, or claims asserted against, such Contributor by reason\n      of your accepting any such warranty or additional liability.\n\n   END OF TERMS AND CONDITIONS\n\n   APPENDIX: How to apply the Apache License to your work.\n\n      To apply the Apache License to your work, attach the following\n      boilerplate notice, with the fields enclosed by brackets \"{}\"\n      replaced with your own identifying information. (Don't include\n      the brackets!)  The text should be enclosed in the appropriate\n      comment syntax for the file format. We also recommend that a\n      file or class name and description of purpose be included on the\n      same \"printed page\" as the copyright notice for easier\n      identification within third-party archives.\n\n   Copyright {yyyy} {name of copyright owner}\n\n   Licensed under the Apache License, Version 2.0 (the \"License\");\n   you may not use this file except in compliance with the License.\n   You may obtain a copy of the License at\n\n       http://www.apache.org/licenses/LICENSE-2.0\n\n   Unless required by applicable law or agreed to in writing, software\n   distributed under the License is distributed on an \"AS IS\" BASIS,\n   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n   See the License for the specific language governing permissions and\n   limitations under the License.\n\n",
-    "ecosystem": "go",
-    "stale": true
+    "ecosystem": "go"
   },
   {
-    "name": "github.com/docker/docker",
-    "version": "v28.5.2",
-    "license": "Apache-2.0",
-    "repository": "https://github.com/docker/docker",
-    "license_text": "\n                                 Apache License\n                           Version 2.0, January 2004\n                        https://www.apache.org/licenses/\n\n   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION\n\n   1. Definitions.\n\n      \"License\" shall mean the terms and conditions for use, reproduction,\n      and distribution as defined by Sections 1 through 9 of this document.\n\n      \"Licensor\" shall mean the copyright owner or entity authorized by\n      the copyright owner that is granting the License.\n\n      \"Legal Entity\" shall mean the union of the acting entity and all\n      other entities that control, are controlled by, or are under common\n      control with that entity. For the purposes of this definition,\n      \"control\" means (i) the power, direct or indirect, to cause the\n      direction or management of such entity, whether by contract or\n      otherwise, or (ii) ownership of fifty percent (50%) or more of the\n      outstanding shares, or (iii) beneficial ownership of such entity.\n\n      \"You\" (or \"Your\") shall mean an individual or Legal Entity\n      exercising permissions granted by this License.\n\n      \"Source\" form shall mean the preferred form for making modifications,\n      including but not limited to software source code, documentation\n      source, and configuration files.\n\n      \"Object\" form shall mean any form resulting from mechanical\n      transformation or translation of a Source form, including but\n      not limited to compiled object code, generated documentation,\n      and conversions to other media types.\n\n      \"Work\" shall mean the work of authorship, whether in Source or\n      Object form, made available under the License, as indicated by a\n      copyright notice that is included in or attached to the work\n      (an example is provided in the Appendix below).\n\n      \"Derivative Works\" shall mean any work, whether in Source or Object\n      form, that is based on (or derived from) the Work and for which the\n      editorial revisions, annotations, elaborations, or other modifications\n      represent, as a whole, an original work of authorship. For the purposes\n      of this License, Derivative Works shall not include works that remain\n      separable from, or merely link (or bind by name) to the interfaces of,\n      the Work and Derivative Works thereof.\n\n      \"Contribution\" shall mean any work of authorship, including\n      the original version of the Work and any modifications or additions\n      to that Work or Derivative Works thereof, that is intentionally\n      submitted to Licensor for inclusion in the Work by the copyright owner\n      or by an individual or Legal Entity authorized to submit on behalf of\n      the copyright owner. For the purposes of this definition, \"submitted\"\n      means any form of electronic, verbal, or written communication sent\n      to the Licensor or its representatives, including but not limited to\n      communication on electronic mailing lists, source code control systems,\n      and issue tracking systems that are managed by, or on behalf of, the\n      Licensor for the purpose of discussing and improving the Work, but\n      excluding communication that is conspicuously marked or otherwise\n      designated in writing by the copyright owner as \"Not a Contribution.\"\n\n      \"Contributor\" shall mean Licensor and any individual or Legal Entity\n      on behalf of whom a Contribution has been received by Licensor and\n      subsequently incorporated within the Work.\n\n   2. Grant of Copyright License. Subject to the terms and conditions of\n      this License, each Contributor hereby grants to You a perpetual,\n      worldwide, non-exclusive, no-charge, royalty-free, irrevocable\n      copyright license to reproduce, prepare Derivative Works of,\n      publicly display, publicly perform, sublicense, and distribute the\n      Work and such Derivative Works in Source or Object form.\n\n   3. Grant of Patent License. Subject to the terms and conditions of\n      this License, each Contributor hereby grants to You a perpetual,\n      worldwide, non-exclusive, no-charge, royalty-free, irrevocable\n      (except as stated in this section) patent license to make, have made,\n      use, offer to sell, sell, import, and otherwise transfer the Work,\n      where such license applies only to those patent claims licensable\n      by such Contributor that are necessarily infringed by their\n      Contribution(s) alone or by combination of their Contribution(s)\n      with the Work to which such Contribution(s) was submitted. If You\n      institute patent litigation against any entity (including a\n      cross-claim or counterclaim in a lawsuit) alleging that the Work\n      or a Contribution incorporated within the Work constitutes direct\n      or contributory patent infringement, then any patent licenses\n      granted to You under this License for that Work shall terminate\n      as of the date such litigation is filed.\n\n   4. Redistribution. You may reproduce and distribute copies of the\n      Work or Derivative Works thereof in any medium, with or without\n      modifications, and in Source or Object form, provided that You\n      meet the following conditions:\n\n      (a) You must give any other recipients of the Work or\n          Derivative Works a copy of this License; and\n\n      (b) You must cause any modified files to carry prominent notices\n          stating that You changed the files; and\n\n      (c) You must retain, in the Source form of any Derivative Works\n          that You distribute, all copyright, patent, trademark, and\n          attribution notices from the Source form of the Work,\n          excluding those notices that do not pertain to any part of\n          the Derivative Works; and\n\n      (d) If the Work includes a \"NOTICE\" text file as part of its\n          distribution, then any Derivative Works that You distribute must\n          include a readable copy of the attribution notices contained\n          within such NOTICE file, excluding those notices that do not\n          pertain to any part of the Derivative Works, in at least one\n          of the following places: within a NOTICE text file distributed\n          as part of the Derivative Works; within the Source form or\n          documentation, if provided along with the Derivative Works; or,\n          within a display generated by the Derivative Works, if and\n          wherever such third-party notices normally appear. The contents\n          of the NOTICE file are for informational purposes only and\n          do not modify the License. You may add Your own attribution\n          notices within Derivative Works that You distribute, alongside\n          or as an addendum to the NOTICE text from the Work, provided\n          that such additional attribution notices cannot be construed\n          as modifying the License.\n\n      You may add Your own copyright statement to Your modifications and\n      may provide additional or different license terms and conditions\n      for use, reproduction, or distribution of Your modifications, or\n      for any such Derivative Works as a whole, provided Your use,\n      reproduction, and distribution of the Work otherwise complies with\n      the conditions stated in this License.\n\n   5. Submission of Contributions. Unless You explicitly state otherwise,\n      any Contribution intentionally submitted for inclusion in the Work\n      by You to the Licensor shall be under the terms and conditions of\n      this License, without any additional terms or conditions.\n      Notwithstanding the above, nothing herein shall supersede or modify\n      the terms of any separate license agreement you may have executed\n      with Licensor regarding such Contributions.\n\n   6. Trademarks. This License does not grant permission to use the trade\n      names, trademarks, service marks, or product names of the Licensor,\n      except as required for reasonable and customary use in describing the\n      origin of the Work and reproducing the content of the NOTICE file.\n\n   7. Disclaimer of Warranty. Unless required by applicable law or\n      agreed to in writing, Licensor provides the Work (and each\n      Contributor provides its Contributions) on an \"AS IS\" BASIS,\n      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or\n      implied, including, without limitation, any warranties or conditions\n      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A\n      PARTICULAR PURPOSE. You are solely responsible for determining the\n      appropriateness of using or redistributing the Work and assume any\n      risks associated with Your exercise of permissions under this License.\n\n   8. Limitation of Liability. In no event and under no legal theory,\n      whether in tort (including negligence), contract, or otherwise,\n      unless required by applicable law (such as deliberate and grossly\n      negligent acts) or agreed to in writing, shall any Contributor be\n      liable to You for damages, including any direct, indirect, special,\n      incidental, or consequential damages of any character arising as a\n      result of this License or out of the use or inability to use the\n      Work (including but not limited to damages for loss of goodwill,\n      work stoppage, computer failure or malfunction, or any and all\n      other commercial damages or losses), even if such Contributor\n      has been advised of the possibility of such damages.\n\n   9. Accepting Warranty or Additional Liability. While redistributing\n      the Work or Derivative Works thereof, You may choose to offer,\n      and charge a fee for, acceptance of support, warranty, indemnity,\n      or other liability obligations and/or rights consistent with this\n      License. However, in accepting such obligations, You may act only\n      on Your own behalf and on Your sole responsibility, not on behalf\n      of any other Contributor, and only if You agree to indemnify,\n      defend, and hold each Contributor harmless for any liability\n      incurred by, or claims asserted against, such Contributor by reason\n      of your accepting any such warranty or additional liability.\n\n   END OF TERMS AND CONDITIONS\n\n   Copyright 2013-2018 Docker, Inc.\n\n   Licensed under the Apache License, Version 2.0 (the \"License\");\n   you may not use this file except in compliance with the License.\n   You may obtain a copy of the License at\n\n       https://www.apache.org/licenses/LICENSE-2.0\n\n   Unless required by applicable law or agreed to in writing, software\n   distributed under the License is distributed on an \"AS IS\" BASIS,\n   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n   See the License for the specific language governing permissions and\n   limitations under the License.\n",
-    "ecosystem": "go",
-    "stale": true
+    "name": "github.com/dlclark/regexp2",
+    "version": "v2.5.1",
+    "license": "MIT",
+    "repository": "https://github.com/dlclark/regexp2",
+    "license_text": "The MIT License (MIT)\n\nCopyright (c) Doug Clark\n\nPermission is hereby granted, free of charge, to any person obtaining a copy\nof this software and associated documentation files (the \"Software\"), to deal\nin the Software without restriction, including without limitation the rights\nto use, copy, modify, merge, publish, distribute, sublicense, and/or sell\ncopies of the Software, and to permit persons to whom the Software is\nfurnished to do so, subject to the following conditions:\n\nThe above copyright notice and this permission notice shall be included in all\ncopies or substantial portions of the Software.\n\nTHE SOFTWARE IS PROVIDED \"AS IS\", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR\nIMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,\nFITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE\nAUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER\nLIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,\nOUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE\nSOFTWARE.\n",
+    "ecosystem": "go"
   },
   {
     "name": "github.com/docker/go-connections",
-    "version": "v0.6.0",
+    "version": "v0.7.0",
     "license": "Apache-2.0",
     "repository": "https://github.com/docker/go-connections",
     "license_text": "\n                                 Apache License\n                           Version 2.0, January 2004\n                        https://www.apache.org/licenses/\n\n   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION\n\n   1. Definitions.\n\n      \"License\" shall mean the terms and conditions for use, reproduction,\n      and distribution as defined by Sections 1 through 9 of this document.\n\n      \"Licensor\" shall mean the copyright owner or entity authorized by\n      the copyright owner that is granting the License.\n\n      \"Legal Entity\" shall mean the union of the acting entity and all\n      other entities that control, are controlled by, or are under common\n      control with that entity. For the purposes of this definition,\n      \"control\" means (i) the power, direct or indirect, to cause the\n      direction or management of such entity, whether by contract or\n      otherwise, or (ii) ownership of fifty percent (50%) or more of the\n      outstanding shares, or (iii) beneficial ownership of such entity.\n\n      \"You\" (or \"Your\") shall mean an individual or Legal Entity\n      exercising permissions granted by this License.\n\n      \"Source\" form shall mean the preferred form for making modifications,\n      including but not limited to software source code, documentation\n      source, and configuration files.\n\n      \"Object\" form shall mean any form resulting from mechanical\n      transformation or translation of a Source form, including but\n      not limited to compiled object code, generated documentation,\n      and conversions to other media types.\n\n      \"Work\" shall mean the work of authorship, whether in Source or\n      Object form, made available under the License, as indicated by a\n      copyright notice that is included in or attached to the work\n      (an example is provided in the Appendix below).\n\n      \"Derivative Works\" shall mean any work, whether in Source or Object\n      form, that is based on (or derived from) the Work and for which the\n      editorial revisions, annotations, elaborations, or other modifications\n      represent, as a whole, an original work of authorship. For the purposes\n      of this License, Derivative Works shall not include works that remain\n      separable from, or merely link (or bind by name) to the interfaces of,\n      the Work and Derivative Works thereof.\n\n      \"Contribution\" shall mean any work of authorship, including\n      the original version of the Work and any modifications or additions\n      to that Work or Derivative Works thereof, that is intentionally\n      submitted to Licensor for inclusion in the Work by the copyright owner\n      or by an individual or Legal Entity authorized to submit on behalf of\n      the copyright owner. For the purposes of this definition, \"submitted\"\n      means any form of electronic, verbal, or written communication sent\n      to the Licensor or its representatives, including but not limited to\n      communication on electronic mailing lists, source code control systems,\n      and issue tracking systems that are managed by, or on behalf of, the\n      Licensor for the purpose of discussing and improving the Work, but\n      excluding communication that is conspicuously marked or otherwise\n      designated in writing by the copyright owner as \"Not a Contribution.\"\n\n      \"Contributor\" shall mean Licensor and any individual or Legal Entity\n      on behalf of whom a Contribution has been received by Licensor and\n      subsequently incorporated within the Work.\n\n   2. Grant of Copyright License. Subject to the terms and conditions of\n      this License, each Contributor hereby grants to You a perpetual,\n      worldwide, non-exclusive, no-charge, royalty-free, irrevocable\n      copyright license to reproduce, prepare Derivative Works of,\n      publicly display, publicly perform, sublicense, and distribute the\n      Work and such Derivative Works in Source or Object form.\n\n   3. Grant of Patent License. Subject to the terms and conditions of\n      this License, each Contributor hereby grants to You a perpetual,\n      worldwide, non-exclusive, no-charge, royalty-free, irrevocable\n      (except as stated in this section) patent license to make, have made,\n      use, offer to sell, sell, import, and otherwise transfer the Work,\n      where such license applies only to those patent claims licensable\n      by such Contributor that are necessarily infringed by their\n      Contribution(s) alone or by combination of their Contribution(s)\n      with the Work to which such Contribution(s) was submitted. If You\n      institute patent litigation against any entity (including a\n      cross-claim or counterclaim in a lawsuit) alleging that the Work\n      or a Contribution incorporated within the Work constitutes direct\n      or contributory patent infringement, then any patent licenses\n      granted to You under this License for that Work shall terminate\n      as of the date such litigation is filed.\n\n   4. Redistribution. You may reproduce and distribute copies of the\n      Work or Derivative Works thereof in any medium, with or without\n      modifications, and in Source or Object form, provided that You\n      meet the following conditions:\n\n      (a) You must give any other recipients of the Work or\n          Derivative Works a copy of this License; and\n\n      (b) You must cause any modified files to carry prominent notices\n          stating that You changed the files; and\n\n      (c) You must retain, in the Source form of any Derivative Works\n          that You distribute, all copyright, patent, trademark, and\n          attribution notices from the Source form of the Work,\n          excluding those notices that do not pertain to any part of\n          the Derivative Works; and\n\n      (d) If the Work includes a \"NOTICE\" text file as part of its\n          distribution, then any Derivative Works that You distribute must\n          include a readable copy of the attribution notices contained\n          within such NOTICE file, excluding those notices that do not\n          pertain to any part of the Derivative Works, in at least one\n          of the following places: within a NOTICE text file distributed\n          as part of the Derivative Works; within the Source form or\n          documentation, if provided along with the Derivative Works; or,\n          within a display generated by the Derivative Works, if and\n          wherever such third-party notices normally appear. The contents\n          of the NOTICE file are for informational purposes only and\n          do not modify the License. You may add Your own attribution\n          notices within Derivative Works that You distribute, alongside\n          or as an addendum to the NOTICE text from the Work, provided\n          that such additional attribution notices cannot be construed\n          as modifying the License.\n\n      You may add Your own copyright statement to Your modifications and\n      may provide additional or different license terms and conditions\n      for use, reproduction, or distribution of Your modifications, or\n      for any such Derivative Works as a whole, provided Your use,\n      reproduction, and distribution of the Work otherwise complies with\n      the conditions stated in this License.\n\n   5. Submission of Contributions. Unless You explicitly state otherwise,\n      any Contribution intentionally submitted for inclusion in the Work\n      by You to the Licensor shall be under the terms and conditions of\n      this License, without any additional terms or conditions.\n      Notwithstanding the above, nothing herein shall supersede or modify\n      the terms of any separate license agreement you may have executed\n      with Licensor regarding such Contributions.\n\n   6. Trademarks. This License does not grant permission to use the trade\n      names, trademarks, service marks, or product names of the Licensor,\n      except as required for reasonable and customary use in describing the\n      origin of the Work and reproducing the content of the NOTICE file.\n\n   7. Disclaimer of Warranty. Unless required by applicable law or\n      agreed to in writing, Licensor provides the Work (and each\n      Contributor provides its Contributions) on an \"AS IS\" BASIS,\n      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or\n      implied, including, without limitation, any warranties or conditions\n      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A\n      PARTICULAR PURPOSE. You are solely responsible for determining the\n      appropriateness of using or redistributing the Work and assume any\n      risks associated with Your exercise of permissions under this License.\n\n   8. Limitation of Liability. In no event and under no legal theory,\n      whether in tort (including negligence), contract, or otherwise,\n      unless required by applicable law (such as deliberate and grossly\n      negligent acts) or agreed to in writing, shall any Contributor be\n      liable to You for damages, including any direct, indirect, special,\n      incidental, or consequential damages of any character arising as a\n      result of this License or out of the use or inability to use the\n      Work (including but not limited to damages for loss of goodwill,\n      work stoppage, computer failure or malfunction, or any and all\n      other commercial damages or losses), even if such Contributor\n      has been advised of the possibility of such damages.\n\n   9. Accepting Warranty or Additional Liability. While redistributing\n      the Work or Derivative Works thereof, You may choose to offer,\n      and charge a fee for, acceptance of support, warranty, indemnity,\n      or other liability obligations and/or rights consistent with this\n      License. However, in accepting such obligations, You may act only\n      on Your own behalf and on Your sole responsibility, not on behalf\n      of any other Contributor, and only if You agree to indemnify,\n      defend, and hold each Contributor harmless for any liability\n      incurred by, or claims asserted against, such Contributor by reason\n      of your accepting any such warranty or additional liability.\n\n   END OF TERMS AND CONDITIONS\n\n   Copyright 2015 Docker, Inc.\n\n   Licensed under the Apache License, Version 2.0 (the \"License\");\n   you may not use this file except in compliance with the License.\n   You may obtain a copy of the License at\n\n       https://www.apache.org/licenses/LICENSE-2.0\n\n   Unless required by applicable law or agreed to in writing, software\n   distributed under the License is distributed on an \"AS IS\" BASIS,\n   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n   See the License for the specific language governing permissions and\n   limitations under the License.\n",
-    "ecosystem": "go",
-    "stale": true
+    "ecosystem": "go"
   },
   {
     "name": "github.com/docker/go-units",
@@ -113,8 +93,31 @@
     "license": "Apache-2.0",
     "repository": "https://github.com/docker/go-units",
     "license_text": "\n                                 Apache License\n                           Version 2.0, January 2004\n                        https://www.apache.org/licenses/\n\n   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION\n\n   1. Definitions.\n\n      \"License\" shall mean the terms and conditions for use, reproduction,\n      and distribution as defined by Sections 1 through 9 of this document.\n\n      \"Licensor\" shall mean the copyright owner or entity authorized by\n      the copyright owner that is granting the License.\n\n      \"Legal Entity\" shall mean the union of the acting entity and all\n      other entities that control, are controlled by, or are under common\n      control with that entity. For the purposes of this definition,\n      \"control\" means (i) the power, direct or indirect, to cause the\n      direction or management of such entity, whether by contract or\n      otherwise, or (ii) ownership of fifty percent (50%) or more of the\n      outstanding shares, or (iii) beneficial ownership of such entity.\n\n      \"You\" (or \"Your\") shall mean an individual or Legal Entity\n      exercising permissions granted by this License.\n\n      \"Source\" form shall mean the preferred form for making modifications,\n      including but not limited to software source code, documentation\n      source, and configuration files.\n\n      \"Object\" form shall mean any form resulting from mechanical\n      transformation or translation of a Source form, including but\n      not limited to compiled object code, generated documentation,\n      and conversions to other media types.\n\n      \"Work\" shall mean the work of authorship, whether in Source or\n      Object form, made available under the License, as indicated by a\n      copyright notice that is included in or attached to the work\n      (an example is provided in the Appendix below).\n\n      \"Derivative Works\" shall mean any work, whether in Source or Object\n      form, that is based on (or derived from) the Work and for which the\n      editorial revisions, annotations, elaborations, or other modifications\n      represent, as a whole, an original work of authorship. For the purposes\n      of this License, Derivative Works shall not include works that remain\n      separable from, or merely link (or bind by name) to the interfaces of,\n      the Work and Derivative Works thereof.\n\n      \"Contribution\" shall mean any work of authorship, including\n      the original version of the Work and any modifications or additions\n      to that Work or Derivative Works thereof, that is intentionally\n      submitted to Licensor for inclusion in the Work by the copyright owner\n      or by an individual or Legal Entity authorized to submit on behalf of\n      the copyright owner. For the purposes of this definition, \"submitted\"\n      means any form of electronic, verbal, or written communication sent\n      to the Licensor or its representatives, including but not limited to\n      communication on electronic mailing lists, source code control systems,\n      and issue tracking systems that are managed by, or on behalf of, the\n      Licensor for the purpose of discussing and improving the Work, but\n      excluding communication that is conspicuously marked or otherwise\n      designated in writing by the copyright owner as \"Not a Contribution.\"\n\n      \"Contributor\" shall mean Licensor and any individual or Legal Entity\n      on behalf of whom a Contribution has been received by Licensor and\n      subsequently incorporated within the Work.\n\n   2. Grant of Copyright License. Subject to the terms and conditions of\n      this License, each Contributor hereby grants to You a perpetual,\n      worldwide, non-exclusive, no-charge, royalty-free, irrevocable\n      copyright license to reproduce, prepare Derivative Works of,\n      publicly display, publicly perform, sublicense, and distribute the\n      Work and such Derivative Works in Source or Object form.\n\n   3. Grant of Patent License. Subject to the terms and conditions of\n      this License, each Contributor hereby grants to You a perpetual,\n      worldwide, non-exclusive, no-charge, royalty-free, irrevocable\n      (except as stated in this section) patent license to make, have made,\n      use, offer to sell, sell, import, and otherwise transfer the Work,\n      where such license applies only to those patent claims licensable\n      by such Contributor that are necessarily infringed by their\n      Contribution(s) alone or by combination of their Contribution(s)\n      with the Work to which such Contribution(s) was submitted. If You\n      institute patent litigation against any entity (including a\n      cross-claim or counterclaim in a lawsuit) alleging that the Work\n      or a Contribution incorporated within the Work constitutes direct\n      or contributory patent infringement, then any patent licenses\n      granted to You under this License for that Work shall terminate\n      as of the date such litigation is filed.\n\n   4. Redistribution. You may reproduce and distribute copies of the\n      Work or Derivative Works thereof in any medium, with or without\n      modifications, and in Source or Object form, provided that You\n      meet the following conditions:\n\n      (a) You must give any other recipients of the Work or\n          Derivative Works a copy of this License; and\n\n      (b) You must cause any modified files to carry prominent notices\n          stating that You changed the files; and\n\n      (c) You must retain, in the Source form of any Derivative Works\n          that You distribute, all copyright, patent, trademark, and\n          attribution notices from the Source form of the Work,\n          excluding those notices that do not pertain to any part of\n          the Derivative Works; and\n\n      (d) If the Work includes a \"NOTICE\" text file as part of its\n          distribution, then any Derivative Works that You distribute must\n          include a readable copy of the attribution notices contained\n          within such NOTICE file, excluding those notices that do not\n          pertain to any part of the Derivative Works, in at least one\n          of the following places: within a NOTICE text file distributed\n          as part of the Derivative Works; within the Source form or\n          documentation, if provided along with the Derivative Works; or,\n          within a display generated by the Derivative Works, if and\n          wherever such third-party notices normally appear. The contents\n          of the NOTICE file are for informational purposes only and\n          do not modify the License. You may add Your own attribution\n          notices within Derivative Works that You distribute, alongside\n          or as an addendum to the NOTICE text from the Work, provided\n          that such additional attribution notices cannot be construed\n          as modifying the License.\n\n      You may add Your own copyright statement to Your modifications and\n      may provide additional or different license terms and conditions\n      for use, reproduction, or distribution of Your modifications, or\n      for any such Derivative Works as a whole, provided Your use,\n      reproduction, and distribution of the Work otherwise complies with\n      the conditions stated in this License.\n\n   5. Submission of Contributions. Unless You explicitly state otherwise,\n      any Contribution intentionally submitted for inclusion in the Work\n      by You to the Licensor shall be under the terms and conditions of\n      this License, without any additional terms or conditions.\n      Notwithstanding the above, nothing herein shall supersede or modify\n      the terms of any separate license agreement you may have executed\n      with Licensor regarding such Contributions.\n\n   6. Trademarks. This License does not grant permission to use the trade\n      names, trademarks, service marks, or product names of the Licensor,\n      except as required for reasonable and customary use in describing the\n      origin of the Work and reproducing the content of the NOTICE file.\n\n   7. Disclaimer of Warranty. Unless required by applicable law or\n      agreed to in writing, Licensor provides the Work (and each\n      Contributor provides its Contributions) on an \"AS IS\" BASIS,\n      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or\n      implied, including, without limitation, any warranties or conditions\n      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A\n      PARTICULAR PURPOSE. You are solely responsible for determining the\n      appropriateness of using or redistributing the Work and assume any\n      risks associated with Your exercise of permissions under this License.\n\n   8. Limitation of Liability. In no event and under no legal theory,\n      whether in tort (including negligence), contract, or otherwise,\n      unless required by applicable law (such as deliberate and grossly\n      negligent acts) or agreed to in writing, shall any Contributor be\n      liable to You for damages, including any direct, indirect, special,\n      incidental, or consequential damages of any character arising as a\n      result of this License or out of the use or inability to use the\n      Work (including but not limited to damages for loss of goodwill,\n      work stoppage, computer failure or malfunction, or any and all\n      other commercial damages or losses), even if such Contributor\n      has been advised of the possibility of such damages.\n\n   9. Accepting Warranty or Additional Liability. While redistributing\n      the Work or Derivative Works thereof, You may choose to offer,\n      and charge a fee for, acceptance of support, warranty, indemnity,\n      or other liability obligations and/or rights consistent with this\n      License. However, in accepting such obligations, You may act only\n      on Your own behalf and on Your sole responsibility, not on behalf\n      of any other Contributor, and only if You agree to indemnify,\n      defend, and hold each Contributor harmless for any liability\n      incurred by, or claims asserted against, such Contributor by reason\n      of your accepting any such warranty or additional liability.\n\n   END OF TERMS AND CONDITIONS\n\n   Copyright 2015 Docker, Inc.\n\n   Licensed under the Apache License, Version 2.0 (the \"License\");\n   you may not use this file except in compliance with the License.\n   You may obtain a copy of the License at\n\n       https://www.apache.org/licenses/LICENSE-2.0\n\n   Unless required by applicable law or agreed to in writing, software\n   distributed under the License is distributed on an \"AS IS\" BASIS,\n   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n   See the License for the specific language governing permissions and\n   limitations under the License.\n",
-    "ecosystem": "go",
-    "stale": true
+    "ecosystem": "go"
+  },
+  {
+    "name": "github.com/emicklei/go-restful",
+    "version": "v3.13.0",
+    "license": "MIT",
+    "repository": "https://github.com/emicklei/go-restful",
+    "license_text": "Copyright (c) 2012,2013 Ernest Micklei\n\nMIT License\n\nPermission is hereby granted, free of charge, to any person obtaining\na copy of this software and associated documentation files (the\n\"Software\"), to deal in the Software without restriction, including\nwithout limitation the rights to use, copy, modify, merge, publish,\ndistribute, sublicense, and/or sell copies of the Software, and to\npermit persons to whom the Software is furnished to do so, subject to\nthe following conditions:\n\nThe above copyright notice and this permission notice shall be\nincluded in all copies or substantial portions of the Software.\n\nTHE SOFTWARE IS PROVIDED \"AS IS\", WITHOUT WARRANTY OF ANY KIND,\nEXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF\nMERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND\nNONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE\nLIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION\nOF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION\nWITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.",
+    "ecosystem": "go"
+  },
+  {
+    "name": "github.com/evanphx/json-patch",
+    "version": "v4.13.0",
+    "license": "BSD-3-Clause",
+    "repository": "https://github.com/evanphx/json-patch",
+    "license_text": "Copyright (c) 2014, Evan Phoenix\nAll rights reserved.\n\nRedistribution and use in source and binary forms, with or without \nmodification, are permitted provided that the following conditions are met:\n\n* Redistributions of source code must retain the above copyright notice, this\n  list of conditions and the following disclaimer.\n* Redistributions in binary form must reproduce the above copyright notice,\n  this list of conditions and the following disclaimer in the documentation\n  and/or other materials provided with the distribution.\n* Neither the name of the Evan Phoenix nor the names of its contributors \n  may be used to endorse or promote products derived from this software \n  without specific prior written permission.\n\nTHIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS \"AS IS\" \nAND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE \nIMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE \nDISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT OWNER OR CONTRIBUTORS BE LIABLE \nFOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL \nDAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR \nSERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER \nCAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, \nOR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE \nOF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.\n",
+    "ecosystem": "go"
+  },
+  {
+    "name": "github.com/fatih/color",
+    "version": "v1.13.0",
+    "license": "MIT",
+    "repository": "https://github.com/fatih/color",
+    "license_text": "The MIT License (MIT)\n\nCopyright (c) 2013 Fatih Arslan\n\nPermission is hereby granted, free of charge, to any person obtaining a copy of\nthis software and associated documentation files (the \"Software\"), to deal in\nthe Software without restriction, including without limitation the rights to\nuse, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of\nthe Software, and to permit persons to whom the Software is furnished to do so,\nsubject to the following conditions:\n\nThe above copyright notice and this permission notice shall be included in all\ncopies or substantial portions of the Software.\n\nTHE SOFTWARE IS PROVIDED \"AS IS\", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR\nIMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS\nFOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR\nCOPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER\nIN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN\nCONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.\n",
+    "ecosystem": "go"
   },
   {
     "name": "github.com/felixge/httpsnoop",
@@ -122,8 +125,7 @@
     "license": "MIT",
     "repository": "https://github.com/felixge/httpsnoop",
     "license_text": "Copyright (c) 2016 Felix Geisendörfer (felix@debuggable.com)\n\n Permission is hereby granted, free of charge, to any person obtaining a copy\n of this software and associated documentation files (the \"Software\"), to deal\n in the Software without restriction, including without limitation the rights\n to use, copy, modify, merge, publish, distribute, sublicense, and/or sell\n copies of the Software, and to permit persons to whom the Software is\n furnished to do so, subject to the following conditions:\n\n The above copyright notice and this permission notice shall be included in\n all copies or substantial portions of the Software.\n\n THE SOFTWARE IS PROVIDED \"AS IS\", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR\n IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,\n FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE\n AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER\n LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,\n OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN\n THE SOFTWARE.\n",
-    "ecosystem": "go",
-    "stale": true
+    "ecosystem": "go"
   },
   {
     "name": "github.com/fsnotify/fsnotify",
@@ -131,8 +133,15 @@
     "license": "BSD-3-Clause",
     "repository": "https://github.com/fsnotify/fsnotify",
     "license_text": "Copyright © 2012 The Go Authors. All rights reserved.\nCopyright © fsnotify Authors. All rights reserved.\n\nRedistribution and use in source and binary forms, with or without modification,\nare permitted provided that the following conditions are met:\n\n* Redistributions of source code must retain the above copyright notice, this\n  list of conditions and the following disclaimer.\n* Redistributions in binary form must reproduce the above copyright notice, this\n  list of conditions and the following disclaimer in the documentation and/or\n  other materials provided with the distribution.\n* Neither the name of Google Inc. nor the names of its contributors may be used\n  to endorse or promote products derived from this software without specific\n  prior written permission.\n\nTHIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS \"AS IS\" AND\nANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED\nWARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE\nDISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT OWNER OR CONTRIBUTORS BE LIABLE FOR\nANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES\n(INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES;\nLOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON\nANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT\n(INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS\nSOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.\n",
-    "ecosystem": "go",
-    "stale": true
+    "ecosystem": "go"
+  },
+  {
+    "name": "github.com/fxamacker/cbor",
+    "version": "v2.9.0",
+    "license": "MIT",
+    "repository": "https://github.com/fxamacker/cbor",
+    "license_text": "MIT License\n\nCopyright (c) 2019-present Faye Amacker\n\nPermission is hereby granted, free of charge, to any person obtaining a copy\nof this software and associated documentation files (the \"Software\"), to deal\nin the Software without restriction, including without limitation the rights\nto use, copy, modify, merge, publish, distribute, sublicense, and/or sell\ncopies of the Software, and to permit persons to whom the Software is\nfurnished to do so, subject to the following conditions:\n\nThe above copyright notice and this permission notice shall be included in all\ncopies or substantial portions of the Software.\n\nTHE SOFTWARE IS PROVIDED \"AS IS\", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR\nIMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,\nFITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE\nAUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER\nLIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,\nOUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE\nSOFTWARE.",
+    "ecosystem": "go"
   },
   {
     "name": "github.com/gabriel-vasile/mimetype",
@@ -140,8 +149,7 @@
     "license": "MIT",
     "repository": "https://github.com/gabriel-vasile/mimetype",
     "license_text": "MIT License\n\nCopyright (c) 2018-2020 Gabriel Vasile\n\nPermission is hereby granted, free of charge, to any person obtaining a copy\nof this software and associated documentation files (the \"Software\"), to deal\nin the Software without restriction, including without limitation the rights\nto use, copy, modify, merge, publish, distribute, sublicense, and/or sell\ncopies of the Software, and to permit persons to whom the Software is\nfurnished to do so, subject to the following conditions:\n\nThe above copyright notice and this permission notice shall be included in all\ncopies or substantial portions of the Software.\n\nTHE SOFTWARE IS PROVIDED \"AS IS\", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR\nIMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,\nFITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE\nAUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER\nLIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,\nOUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE\nSOFTWARE.\n",
-    "ecosystem": "go",
-    "stale": true
+    "ecosystem": "go"
   },
   {
     "name": "github.com/gin-contrib/sse",
@@ -149,8 +157,7 @@
     "license": "MIT",
     "repository": "https://github.com/gin-contrib/sse",
     "license_text": "The MIT License (MIT)\n\nCopyright (c) 2014 Manuel Martínez-Almeida\n\nPermission is hereby granted, free of charge, to any person obtaining a copy\nof this software and associated documentation files (the \"Software\"), to deal\nin the Software without restriction, including without limitation the rights\nto use, copy, modify, merge, publish, distribute, sublicense, and/or sell\ncopies of the Software, and to permit persons to whom the Software is\nfurnished to do so, subject to the following conditions:\n\nThe above copyright notice and this permission notice shall be included in\nall copies or substantial portions of the Software.\n\nTHE SOFTWARE IS PROVIDED \"AS IS\", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR\nIMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,\nFITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE\nAUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER\nLIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,\nOUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN\nTHE SOFTWARE.\n",
-    "ecosystem": "go",
-    "stale": true
+    "ecosystem": "go"
   },
   {
     "name": "github.com/gin-gonic/gin",
@@ -158,17 +165,15 @@
     "license": "MIT",
     "repository": "https://github.com/gin-gonic/gin",
     "license_text": "The MIT License (MIT)\n\nCopyright (c) 2014 Manuel Martínez-Almeida\n\nPermission is hereby granted, free of charge, to any person obtaining a copy\nof this software and associated documentation files (the \"Software\"), to deal\nin the Software without restriction, including without limitation the rights\nto use, copy, modify, merge, publish, distribute, sublicense, and/or sell\ncopies of the Software, and to permit persons to whom the Software is\nfurnished to do so, subject to the following conditions:\n\nThe above copyright notice and this permission notice shall be included in\nall copies or substantial portions of the Software.\n\nTHE SOFTWARE IS PROVIDED \"AS IS\", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR\nIMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,\nFITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE\nAUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER\nLIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,\nOUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN\nTHE SOFTWARE.\n",
-    "ecosystem": "go",
-    "stale": true
+    "ecosystem": "go"
   },
   {
-    "name": "github.com/github/copilot-sdk",
-    "version": "go",
-    "license": "MIT",
-    "repository": "https://github.com/github/copilot-sdk",
-    "license_text": "MIT License\n\nCopyright GitHub, Inc.\n\nPermission is hereby granted, free of charge, to any person obtaining a copy\nof this software and associated documentation files (the \"Software\"), to deal\nin the Software without restriction, including without limitation the rights\nto use, copy, modify, merge, publish, distribute, sublicense, and/or sell\ncopies of the Software, and to permit persons to whom the Software is\nfurnished to do so, subject to the following conditions:\n\nThe above copyright notice and this permission notice shall be included in all\ncopies or substantial portions of the Software.\n\nTHE SOFTWARE IS PROVIDED \"AS IS\", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR\nIMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,\nFITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE\nAUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER\nLIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,\nOUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE\nSOFTWARE.\n",
-    "ecosystem": "go",
-    "stale": true
+    "name": "github.com/go-inf/inf",
+    "version": "v0.9.1",
+    "license": "BSD-3-Clause",
+    "repository": "https://github.com/go-inf/inf",
+    "license_text": "Copyright (c) 2012 Péter Surányi. Portions Copyright (c) 2009 The Go\nAuthors. All rights reserved.\n\nRedistribution and use in source and binary forms, with or without\nmodification, are permitted provided that the following conditions are\nmet:\n\n   * Redistributions of source code must retain the above copyright\nnotice, this list of conditions and the following disclaimer.\n   * Redistributions in binary form must reproduce the above\ncopyright notice, this list of conditions and the following disclaimer\nin the documentation and/or other materials provided with the\ndistribution.\n   * Neither the name of Google Inc. nor the names of its\ncontributors may be used to endorse or promote products derived from\nthis software without specific prior written permission.\n\nTHIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS\n\"AS IS\" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT\nLIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR\nA PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT\nOWNER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,\nSPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT\nLIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,\nDATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY\nTHEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT\n(INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE\nOF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.\n",
+    "ecosystem": "go"
   },
   {
     "name": "github.com/go-ini/ini",
@@ -176,8 +181,7 @@
     "license": "Apache-2.0",
     "repository": "https://github.com/go-ini/ini",
     "license_text": "Apache License\nVersion 2.0, January 2004\nhttp://www.apache.org/licenses/\n\nTERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION\n\n1. Definitions.\n\n\"License\" shall mean the terms and conditions for use, reproduction, and\ndistribution as defined by Sections 1 through 9 of this document.\n\n\"Licensor\" shall mean the copyright owner or entity authorized by the copyright\nowner that is granting the License.\n\n\"Legal Entity\" shall mean the union of the acting entity and all other entities\nthat control, are controlled by, or are under common control with that entity.\nFor the purposes of this definition, \"control\" means (i) the power, direct or\nindirect, to cause the direction or management of such entity, whether by\ncontract or otherwise, or (ii) ownership of fifty percent (50%) or more of the\noutstanding shares, or (iii) beneficial ownership of such entity.\n\n\"You\" (or \"Your\") shall mean an individual or Legal Entity exercising\npermissions granted by this License.\n\n\"Source\" form shall mean the preferred form for making modifications, including\nbut not limited to software source code, documentation source, and configuration\nfiles.\n\n\"Object\" form shall mean any form resulting from mechanical transformation or\ntranslation of a Source form, including but not limited to compiled object code,\ngenerated documentation, and conversions to other media types.\n\n\"Work\" shall mean the work of authorship, whether in Source or Object form, made\navailable under the License, as indicated by a copyright notice that is included\nin or attached to the work (an example is provided in the Appendix below).\n\n\"Derivative Works\" shall mean any work, whether in Source or Object form, that\nis based on (or derived from) the Work and for which the editorial revisions,\nannotations, elaborations, or other modifications represent, as a whole, an\noriginal work of authorship. For the purposes of this License, Derivative Works\nshall not include works that remain separable from, or merely link (or bind by\nname) to the interfaces of, the Work and Derivative Works thereof.\n\n\"Contribution\" shall mean any work of authorship, including the original version\nof the Work and any modifications or additions to that Work or Derivative Works\nthereof, that is intentionally submitted to Licensor for inclusion in the Work\nby the copyright owner or by an individual or Legal Entity authorized to submit\non behalf of the copyright owner. For the purposes of this definition,\n\"submitted\" means any form of electronic, verbal, or written communication sent\nto the Licensor or its representatives, including but not limited to\ncommunication on electronic mailing lists, source code control systems, and\nissue tracking systems that are managed by, or on behalf of, the Licensor for\nthe purpose of discussing and improving the Work, but excluding communication\nthat is conspicuously marked or otherwise designated in writing by the copyright\nowner as \"Not a Contribution.\"\n\n\"Contributor\" shall mean Licensor and any individual or Legal Entity on behalf\nof whom a Contribution has been received by Licensor and subsequently\nincorporated within the Work.\n\n2. Grant of Copyright License.\n\nSubject to the terms and conditions of this License, each Contributor hereby\ngrants to You a perpetual, worldwide, non-exclusive, no-charge, royalty-free,\nirrevocable copyright license to reproduce, prepare Derivative Works of,\npublicly display, publicly perform, sublicense, and distribute the Work and such\nDerivative Works in Source or Object form.\n\n3. Grant of Patent License.\n\nSubject to the terms and conditions of this License, each Contributor hereby\ngrants to You a perpetual, worldwide, non-exclusive, no-charge, royalty-free,\nirrevocable (except as stated in this section) patent license to make, have\nmade, use, offer to sell, sell, import, and otherwise transfer the Work, where\nsuch license applies only to those patent claims licensable by such Contributor\nthat are necessarily infringed by their Contribution(s) alone or by combination\nof their Contribution(s) with the Work to which such Contribution(s) was\nsubmitted. If You institute patent litigation against any entity (including a\ncross-claim or counterclaim in a lawsuit) alleging that the Work or a\nContribution incorporated within the Work constitutes direct or contributory\npatent infringement, then any patent licenses granted to You under this License\nfor that Work shall terminate as of the date such litigation is filed.\n\n4. Redistribution.\n\nYou may reproduce and distribute copies of the Work or Derivative Works thereof\nin any medium, with or without modifications, and in Source or Object form,\nprovided that You meet the following conditions:\n\nYou must give any other recipients of the Work or Derivative Works a copy of\nthis License; and\nYou must cause any modified files to carry prominent notices stating that You\nchanged the files; and\nYou must retain, in the Source form of any Derivative Works that You distribute,\nall copyright, patent, trademark, and attribution notices from the Source form\nof the Work, excluding those notices that do not pertain to any part of the\nDerivative Works; and\nIf the Work includes a \"NOTICE\" text file as part of its distribution, then any\nDerivative Works that You distribute must include a readable copy of the\nattribution notices contained within such NOTICE file, excluding those notices\nthat do not pertain to any part of the Derivative Works, in at least one of the\nfollowing places: within a NOTICE text file distributed as part of the\nDerivative Works; within the Source form or documentation, if provided along\nwith the Derivative Works; or, within a display generated by the Derivative\nWorks, if and wherever such third-party notices normally appear. The contents of\nthe NOTICE file are for informational purposes only and do not modify the\nLicense. You may add Your own attribution notices within Derivative Works that\nYou distribute, alongside or as an addendum to the NOTICE text from the Work,\nprovided that such additional attribution notices cannot be construed as\nmodifying the License.\nYou may add Your own copyright statement to Your modifications and may provide\nadditional or different license terms and conditions for use, reproduction, or\ndistribution of Your modifications, or for any such Derivative Works as a whole,\nprovided Your use, reproduction, and distribution of the Work otherwise complies\nwith the conditions stated in this License.\n\n5. Submission of Contributions.\n\nUnless You explicitly state otherwise, any Contribution intentionally submitted\nfor inclusion in the Work by You to the Licensor shall be under the terms and\nconditions of this License, without any additional terms or conditions.\nNotwithstanding the above, nothing herein shall supersede or modify the terms of\nany separate license agreement you may have executed with Licensor regarding\nsuch Contributions.\n\n6. Trademarks.\n\nThis License does not grant permission to use the trade names, trademarks,\nservice marks, or product names of the Licensor, except as required for\nreasonable and customary use in describing the origin of the Work and\nreproducing the content of the NOTICE file.\n\n7. Disclaimer of Warranty.\n\nUnless required by applicable law or agreed to in writing, Licensor provides the\nWork (and each Contributor provides its Contributions) on an \"AS IS\" BASIS,\nWITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied,\nincluding, without limitation, any warranties or conditions of TITLE,\nNON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A PARTICULAR PURPOSE. You are\nsolely responsible for determining the appropriateness of using or\nredistributing the Work and assume any risks associated with Your exercise of\npermissions under this License.\n\n8. Limitation of Liability.\n\nIn no event and under no legal theory, whether in tort (including negligence),\ncontract, or otherwise, unless required by applicable law (such as deliberate\nand grossly negligent acts) or agreed to in writing, shall any Contributor be\nliable to You for damages, including any direct, indirect, special, incidental,\nor consequential damages of any character arising as a result of this License or\nout of the use or inability to use the Work (including but not limited to\ndamages for loss of goodwill, work stoppage, computer failure or malfunction, or\nany and all other commercial damages or losses), even if such Contributor has\nbeen advised of the possibility of such damages.\n\n9. Accepting Warranty or Additional Liability.\n\nWhile redistributing the Work or Derivative Works thereof, You may choose to\noffer, and charge a fee for, acceptance of support, warranty, indemnity, or\nother liability obligations and/or rights consistent with this License. However,\nin accepting such obligations, You may act only on Your own behalf and on Your\nsole responsibility, not on behalf of any other Contributor, and only if You\nagree to indemnify, defend, and hold each Contributor harmless for any liability\nincurred by, or claims asserted against, such Contributor by reason of your\naccepting any such warranty or additional liability.\n\nEND OF TERMS AND CONDITIONS\n\nAPPENDIX: How to apply the Apache License to your work\n\nTo apply the Apache License to your work, attach the following boilerplate\nnotice, with the fields enclosed by brackets \"[]\" replaced with your own\nidentifying information. (Don't include the brackets!) The text should be\nenclosed in the appropriate comment syntax for the file format. We also\nrecommend that a file or class name and description of purpose be included on\nthe same \"printed page\" as the copyright notice for easier identification within\nthird-party archives.\n\n   Copyright 2014 Unknwon\n\n   Licensed under the Apache License, Version 2.0 (the \"License\");\n   you may not use this file except in compliance with the License.\n   You may obtain a copy of the License at\n\n     http://www.apache.org/licenses/LICENSE-2.0\n\n   Unless required by applicable law or agreed to in writing, software\n   distributed under the License is distributed on an \"AS IS\" BASIS,\n   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n   See the License for the specific language governing permissions and\n   limitations under the License.\n",
-    "ecosystem": "go",
-    "stale": true
+    "ecosystem": "go"
   },
   {
     "name": "github.com/go-logr/logr",
@@ -185,8 +189,7 @@
     "license": "Apache-2.0",
     "repository": "https://github.com/go-logr/logr",
     "license_text": "                                 Apache License\n                           Version 2.0, January 2004\n                        http://www.apache.org/licenses/\n\n   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION\n\n   1. Definitions.\n\n      \"License\" shall mean the terms and conditions for use, reproduction,\n      and distribution as defined by Sections 1 through 9 of this document.\n\n      \"Licensor\" shall mean the copyright owner or entity authorized by\n      the copyright owner that is granting the License.\n\n      \"Legal Entity\" shall mean the union of the acting entity and all\n      other entities that control, are controlled by, or are under common\n      control with that entity. For the purposes of this definition,\n      \"control\" means (i) the power, direct or indirect, to cause the\n      direction or management of such entity, whether by contract or\n      otherwise, or (ii) ownership of fifty percent (50%) or more of the\n      outstanding shares, or (iii) beneficial ownership of such entity.\n\n      \"You\" (or \"Your\") shall mean an individual or Legal Entity\n      exercising permissions granted by this License.\n\n      \"Source\" form shall mean the preferred form for making modifications,\n      including but not limited to software source code, documentation\n      source, and configuration files.\n\n      \"Object\" form shall mean any form resulting from mechanical\n      transformation or translation of a Source form, including but\n      not limited to compiled object code, generated documentation,\n      and conversions to other media types.\n\n      \"Work\" shall mean the work of authorship, whether in Source or\n      Object form, made available under the License, as indicated by a\n      copyright notice that is included in or attached to the work\n      (an example is provided in the Appendix below).\n\n      \"Derivative Works\" shall mean any work, whether in Source or Object\n      form, that is based on (or derived from) the Work and for which the\n      editorial revisions, annotations, elaborations, or other modifications\n      represent, as a whole, an original work of authorship. For the purposes\n      of this License, Derivative Works shall not include works that remain\n      separable from, or merely link (or bind by name) to the interfaces of,\n      the Work and Derivative Works thereof.\n\n      \"Contribution\" shall mean any work of authorship, including\n      the original version of the Work and any modifications or additions\n      to that Work or Derivative Works thereof, that is intentionally\n      submitted to Licensor for inclusion in the Work by the copyright owner\n      or by an individual or Legal Entity authorized to submit on behalf of\n      the copyright owner. For the purposes of this definition, \"submitted\"\n      means any form of electronic, verbal, or written communication sent\n      to the Licensor or its representatives, including but not limited to\n      communication on electronic mailing lists, source code control systems,\n      and issue tracking systems that are managed by, or on behalf of, the\n      Licensor for the purpose of discussing and improving the Work, but\n      excluding communication that is conspicuously marked or otherwise\n      designated in writing by the copyright owner as \"Not a Contribution.\"\n\n      \"Contributor\" shall mean Licensor and any individual or Legal Entity\n      on behalf of whom a Contribution has been received by Licensor and\n      subsequently incorporated within the Work.\n\n   2. Grant of Copyright License. Subject to the terms and conditions of\n      this License, each Contributor hereby grants to You a perpetual,\n      worldwide, non-exclusive, no-charge, royalty-free, irrevocable\n      copyright license to reproduce, prepare Derivative Works of,\n      publicly display, publicly perform, sublicense, and distribute the\n      Work and such Derivative Works in Source or Object form.\n\n   3. Grant of Patent License. Subject to the terms and conditions of\n      this License, each Contributor hereby grants to You a perpetual,\n      worldwide, non-exclusive, no-charge, royalty-free, irrevocable\n      (except as stated in this section) patent license to make, have made,\n      use, offer to sell, sell, import, and otherwise transfer the Work,\n      where such license applies only to those patent claims licensable\n      by such Contributor that are necessarily infringed by their\n      Contribution(s) alone or by combination of their Contribution(s)\n      with the Work to which such Contribution(s) was submitted. If You\n      institute patent litigation against any entity (including a\n      cross-claim or counterclaim in a lawsuit) alleging that the Work\n      or a Contribution incorporated within the Work constitutes direct\n      or contributory patent infringement, then any patent licenses\n      granted to You under this License for that Work shall terminate\n      as of the date such litigation is filed.\n\n   4. Redistribution. You may reproduce and distribute copies of the\n      Work or Derivative Works thereof in any medium, with or without\n      modifications, and in Source or Object form, provided that You\n      meet the following conditions:\n\n      (a) You must give any other recipients of the Work or\n          Derivative Works a copy of this License; and\n\n      (b) You must cause any modified files to carry prominent notices\n          stating that You changed the files; and\n\n      (c) You must retain, in the Source form of any Derivative Works\n          that You distribute, all copyright, patent, trademark, and\n          attribution notices from the Source form of the Work,\n          excluding those notices that do not pertain to any part of\n          the Derivative Works; and\n\n      (d) If the Work includes a \"NOTICE\" text file as part of its\n          distribution, then any Derivative Works that You distribute must\n          include a readable copy of the attribution notices contained\n          within such NOTICE file, excluding those notices that do not\n          pertain to any part of the Derivative Works, in at least one\n          of the following places: within a NOTICE text file distributed\n          as part of the Derivative Works; within the Source form or\n          documentation, if provided along with the Derivative Works; or,\n          within a display generated by the Derivative Works, if and\n          wherever such third-party notices normally appear. The contents\n          of the NOTICE file are for informational purposes only and\n          do not modify the License. You may add Your own attribution\n          notices within Derivative Works that You distribute, alongside\n          or as an addendum to the NOTICE text from the Work, provided\n          that such additional attribution notices cannot be construed\n          as modifying the License.\n\n      You may add Your own copyright statement to Your modifications and\n      may provide additional or different license terms and conditions\n      for use, reproduction, or distribution of Your modifications, or\n      for any such Derivative Works as a whole, provided Your use,\n      reproduction, and distribution of the Work otherwise complies with\n      the conditions stated in this License.\n\n   5. Submission of Contributions. Unless You explicitly state otherwise,\n      any Contribution intentionally submitted for inclusion in the Work\n      by You to the Licensor shall be under the terms and conditions of\n      this License, without any additional terms or conditions.\n      Notwithstanding the above, nothing herein shall supersede or modify\n      the terms of any separate license agreement you may have executed\n      with Licensor regarding such Contributions.\n\n   6. Trademarks. This License does not grant permission to use the trade\n      names, trademarks, service marks, or product names of the Licensor,\n      except as required for reasonable and customary use in describing the\n      origin of the Work and reproducing the content of the NOTICE file.\n\n   7. Disclaimer of Warranty. Unless required by applicable law or\n      agreed to in writing, Licensor provides the Work (and each\n      Contributor provides its Contributions) on an \"AS IS\" BASIS,\n      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or\n      implied, including, without limitation, any warranties or conditions\n      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A\n      PARTICULAR PURPOSE. You are solely responsible for determining the\n      appropriateness of using or redistributing the Work and assume any\n      risks associated with Your exercise of permissions under this License.\n\n   8. Limitation of Liability. In no event and under no legal theory,\n      whether in tort (including negligence), contract, or otherwise,\n      unless required by applicable law (such as deliberate and grossly\n      negligent acts) or agreed to in writing, shall any Contributor be\n      liable to You for damages, including any direct, indirect, special,\n      incidental, or consequential damages of any character arising as a\n      result of this License or out of the use or inability to use the\n      Work (including but not limited to damages for loss of goodwill,\n      work stoppage, computer failure or malfunction, or any and all\n      other commercial damages or losses), even if such Contributor\n      has been advised of the possibility of such damages.\n\n   9. Accepting Warranty or Additional Liability. While redistributing\n      the Work or Derivative Works thereof, You may choose to offer,\n      and charge a fee for, acceptance of support, warranty, indemnity,\n      or other liability obligations and/or rights consistent with this\n      License. However, in accepting such obligations, You may act only\n      on Your own behalf and on Your sole responsibility, not on behalf\n      of any other Contributor, and only if You agree to indemnify,\n      defend, and hold each Contributor harmless for any liability\n      incurred by, or claims asserted against, such Contributor by reason\n      of your accepting any such warranty or additional liability.\n\n   END OF TERMS AND CONDITIONS\n\n   APPENDIX: How to apply the Apache License to your work.\n\n      To apply the Apache License to your work, attach the following\n      boilerplate notice, with the fields enclosed by brackets \"{}\"\n      replaced with your own identifying information. (Don't include\n      the brackets!)  The text should be enclosed in the appropriate\n      comment syntax for the file format. We also recommend that a\n      file or class name and description of purpose be included on the\n      same \"printed page\" as the copyright notice for easier\n      identification within third-party archives.\n\n   Copyright {yyyy} {name of copyright owner}\n\n   Licensed under the Apache License, Version 2.0 (the \"License\");\n   you may not use this file except in compliance with the License.\n   You may obtain a copy of the License at\n\n       http://www.apache.org/licenses/LICENSE-2.0\n\n   Unless required by applicable law or agreed to in writing, software\n   distributed under the License is distributed on an \"AS IS\" BASIS,\n   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n   See the License for the specific language governing permissions and\n   limitations under the License.\n",
-    "ecosystem": "go",
-    "stale": true
+    "ecosystem": "go"
   },
   {
     "name": "github.com/go-logr/stdr",
@@ -194,8 +197,31 @@
     "license": "Apache-2.0",
     "repository": "https://github.com/go-logr/stdr",
     "license_text": "                                 Apache License\n                           Version 2.0, January 2004\n                        http://www.apache.org/licenses/\n\n   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION\n\n   1. Definitions.\n\n      \"License\" shall mean the terms and conditions for use, reproduction,\n      and distribution as defined by Sections 1 through 9 of this document.\n\n      \"Licensor\" shall mean the copyright owner or entity authorized by\n      the copyright owner that is granting the License.\n\n      \"Legal Entity\" shall mean the union of the acting entity and all\n      other entities that control, are controlled by, or are under common\n      control with that entity. For the purposes of this definition,\n      \"control\" means (i) the power, direct or indirect, to cause the\n      direction or management of such entity, whether by contract or\n      otherwise, or (ii) ownership of fifty percent (50%) or more of the\n      outstanding shares, or (iii) beneficial ownership of such entity.\n\n      \"You\" (or \"Your\") shall mean an individual or Legal Entity\n      exercising permissions granted by this License.\n\n      \"Source\" form shall mean the preferred form for making modifications,\n      including but not limited to software source code, documentation\n      source, and configuration files.\n\n      \"Object\" form shall mean any form resulting from mechanical\n      transformation or translation of a Source form, including but\n      not limited to compiled object code, generated documentation,\n      and conversions to other media types.\n\n      \"Work\" shall mean the work of authorship, whether in Source or\n      Object form, made available under the License, as indicated by a\n      copyright notice that is included in or attached to the work\n      (an example is provided in the Appendix below).\n\n      \"Derivative Works\" shall mean any work, whether in Source or Object\n      form, that is based on (or derived from) the Work and for which the\n      editorial revisions, annotations, elaborations, or other modifications\n      represent, as a whole, an original work of authorship. For the purposes\n      of this License, Derivative Works shall not include works that remain\n      separable from, or merely link (or bind by name) to the interfaces of,\n      the Work and Derivative Works thereof.\n\n      \"Contribution\" shall mean any work of authorship, including\n      the original version of the Work and any modifications or additions\n      to that Work or Derivative Works thereof, that is intentionally\n      submitted to Licensor for inclusion in the Work by the copyright owner\n      or by an individual or Legal Entity authorized to submit on behalf of\n      the copyright owner. For the purposes of this definition, \"submitted\"\n      means any form of electronic, verbal, or written communication sent\n      to the Licensor or its representatives, including but not limited to\n      communication on electronic mailing lists, source code control systems,\n      and issue tracking systems that are managed by, or on behalf of, the\n      Licensor for the purpose of discussing and improving the Work, but\n      excluding communication that is conspicuously marked or otherwise\n      designated in writing by the copyright owner as \"Not a Contribution.\"\n\n      \"Contributor\" shall mean Licensor and any individual or Legal Entity\n      on behalf of whom a Contribution has been received by Licensor and\n      subsequently incorporated within the Work.\n\n   2. Grant of Copyright License. Subject to the terms and conditions of\n      this License, each Contributor hereby grants to You a perpetual,\n      worldwide, non-exclusive, no-charge, royalty-free, irrevocable\n      copyright license to reproduce, prepare Derivative Works of,\n      publicly display, publicly perform, sublicense, and distribute the\n      Work and such Derivative Works in Source or Object form.\n\n   3. Grant of Patent License. Subject to the terms and conditions of\n      this License, each Contributor hereby grants to You a perpetual,\n      worldwide, non-exclusive, no-charge, royalty-free, irrevocable\n      (except as stated in this section) patent license to make, have made,\n      use, offer to sell, sell, import, and otherwise transfer the Work,\n      where such license applies only to those patent claims licensable\n      by such Contributor that are necessarily infringed by their\n      Contribution(s) alone or by combination of their Contribution(s)\n      with the Work to which such Contribution(s) was submitted. If You\n      institute patent litigation against any entity (including a\n      cross-claim or counterclaim in a lawsuit) alleging that the Work\n      or a Contribution incorporated within the Work constitutes direct\n      or contributory patent infringement, then any patent licenses\n      granted to You under this License for that Work shall terminate\n      as of the date such litigation is filed.\n\n   4. Redistribution. You may reproduce and distribute copies of the\n      Work or Derivative Works thereof in any medium, with or without\n      modifications, and in Source or Object form, provided that You\n      meet the following conditions:\n\n      (a) You must give any other recipients of the Work or\n          Derivative Works a copy of this License; and\n\n      (b) You must cause any modified files to carry prominent notices\n          stating that You changed the files; and\n\n      (c) You must retain, in the Source form of any Derivative Works\n          that You distribute, all copyright, patent, trademark, and\n          attribution notices from the Source form of the Work,\n          excluding those notices that do not pertain to any part of\n          the Derivative Works; and\n\n      (d) If the Work includes a \"NOTICE\" text file as part of its\n          distribution, then any Derivative Works that You distribute must\n          include a readable copy of the attribution notices contained\n          within such NOTICE file, excluding those notices that do not\n          pertain to any part of the Derivative Works, in at least one\n          of the following places: within a NOTICE text file distributed\n          as part of the Derivative Works; within the Source form or\n          documentation, if provided along with the Derivative Works; or,\n          within a display generated by the Derivative Works, if and\n          wherever such third-party notices normally appear. The contents\n          of the NOTICE file are for informational purposes only and\n          do not modify the License. You may add Your own attribution\n          notices within Derivative Works that You distribute, alongside\n          or as an addendum to the NOTICE text from the Work, provided\n          that such additional attribution notices cannot be construed\n          as modifying the License.\n\n      You may add Your own copyright statement to Your modifications and\n      may provide additional or different license terms and conditions\n      for use, reproduction, or distribution of Your modifications, or\n      for any such Derivative Works as a whole, provided Your use,\n      reproduction, and distribution of the Work otherwise complies with\n      the conditions stated in this License.\n\n   5. Submission of Contributions. Unless You explicitly state otherwise,\n      any Contribution intentionally submitted for inclusion in the Work\n      by You to the Licensor shall be under the terms and conditions of\n      this License, without any additional terms or conditions.\n      Notwithstanding the above, nothing herein shall supersede or modify\n      the terms of any separate license agreement you may have executed\n      with Licensor regarding such Contributions.\n\n   6. Trademarks. This License does not grant permission to use the trade\n      names, trademarks, service marks, or product names of the Licensor,\n      except as required for reasonable and customary use in describing the\n      origin of the Work and reproducing the content of the NOTICE file.\n\n   7. Disclaimer of Warranty. Unless required by applicable law or\n      agreed to in writing, Licensor provides the Work (and each\n      Contributor provides its Contributions) on an \"AS IS\" BASIS,\n      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or\n      implied, including, without limitation, any warranties or conditions\n      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A\n      PARTICULAR PURPOSE. You are solely responsible for determining the\n      appropriateness of using or redistributing the Work and assume any\n      risks associated with Your exercise of permissions under this License.\n\n   8. Limitation of Liability. In no event and under no legal theory,\n      whether in tort (including negligence), contract, or otherwise,\n      unless required by applicable law (such as deliberate and grossly\n      negligent acts) or agreed to in writing, shall any Contributor be\n      liable to You for damages, including any direct, indirect, special,\n      incidental, or consequential damages of any character arising as a\n      result of this License or out of the use or inability to use the\n      Work (including but not limited to damages for loss of goodwill,\n      work stoppage, computer failure or malfunction, or any and all\n      other commercial damages or losses), even if such Contributor\n      has been advised of the possibility of such damages.\n\n   9. Accepting Warranty or Additional Liability. While redistributing\n      the Work or Derivative Works thereof, You may choose to offer,\n      and charge a fee for, acceptance of support, warranty, indemnity,\n      or other liability obligations and/or rights consistent with this\n      License. However, in accepting such obligations, You may act only\n      on Your own behalf and on Your sole responsibility, not on behalf\n      of any other Contributor, and only if You agree to indemnify,\n      defend, and hold each Contributor harmless for any liability\n      incurred by, or claims asserted against, such Contributor by reason\n      of your accepting any such warranty or additional liability.\n\n   END OF TERMS AND CONDITIONS\n\n   APPENDIX: How to apply the Apache License to your work.\n\n      To apply the Apache License to your work, attach the following\n      boilerplate notice, with the fields enclosed by brackets \"[]\"\n      replaced with your own identifying information. (Don't include\n      the brackets!)  The text should be enclosed in the appropriate\n      comment syntax for the file format. We also recommend that a\n      file or class name and description of purpose be included on the\n      same \"printed page\" as the copyright notice for easier\n      identification within third-party archives.\n\n   Copyright [yyyy] [name of copyright owner]\n\n   Licensed under the Apache License, Version 2.0 (the \"License\");\n   you may not use this file except in compliance with the License.\n   You may obtain a copy of the License at\n\n       http://www.apache.org/licenses/LICENSE-2.0\n\n   Unless required by applicable law or agreed to in writing, software\n   distributed under the License is distributed on an \"AS IS\" BASIS,\n   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n   See the License for the specific language governing permissions and\n   limitations under the License.\n",
-    "ecosystem": "go",
-    "stale": true
+    "ecosystem": "go"
+  },
+  {
+    "name": "github.com/go-openapi/jsonpointer",
+    "version": "v0.21.0",
+    "license": "Apache-2.0",
+    "repository": "https://github.com/go-openapi/jsonpointer",
+    "license_text": "\n                                 Apache License\n                           Version 2.0, January 2004\n                        http://www.apache.org/licenses/\n\n   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION\n\n   1. Definitions.\n\n      \"License\" shall mean the terms and conditions for use, reproduction,\n      and distribution as defined by Sections 1 through 9 of this document.\n\n      \"Licensor\" shall mean the copyright owner or entity authorized by\n      the copyright owner that is granting the License.\n\n      \"Legal Entity\" shall mean the union of the acting entity and all\n      other entities that control, are controlled by, or are under common\n      control with that entity. For the purposes of this definition,\n      \"control\" means (i) the power, direct or indirect, to cause the\n      direction or management of such entity, whether by contract or\n      otherwise, or (ii) ownership of fifty percent (50%) or more of the\n      outstanding shares, or (iii) beneficial ownership of such entity.\n\n      \"You\" (or \"Your\") shall mean an individual or Legal Entity\n      exercising permissions granted by this License.\n\n      \"Source\" form shall mean the preferred form for making modifications,\n      including but not limited to software source code, documentation\n      source, and configuration files.\n\n      \"Object\" form shall mean any form resulting from mechanical\n      transformation or translation of a Source form, including but\n      not limited to compiled object code, generated documentation,\n      and conversions to other media types.\n\n      \"Work\" shall mean the work of authorship, whether in Source or\n      Object form, made available under the License, as indicated by a\n      copyright notice that is included in or attached to the work\n      (an example is provided in the Appendix below).\n\n      \"Derivative Works\" shall mean any work, whether in Source or Object\n      form, that is based on (or derived from) the Work and for which the\n      editorial revisions, annotations, elaborations, or other modifications\n      represent, as a whole, an original work of authorship. For the purposes\n      of this License, Derivative Works shall not include works that remain\n      separable from, or merely link (or bind by name) to the interfaces of,\n      the Work and Derivative Works thereof.\n\n      \"Contribution\" shall mean any work of authorship, including\n      the original version of the Work and any modifications or additions\n      to that Work or Derivative Works thereof, that is intentionally\n      submitted to Licensor for inclusion in the Work by the copyright owner\n      or by an individual or Legal Entity authorized to submit on behalf of\n      the copyright owner. For the purposes of this definition, \"submitted\"\n      means any form of electronic, verbal, or written communication sent\n      to the Licensor or its representatives, including but not limited to\n      communication on electronic mailing lists, source code control systems,\n      and issue tracking systems that are managed by, or on behalf of, the\n      Licensor for the purpose of discussing and improving the Work, but\n      excluding communication that is conspicuously marked or otherwise\n      designated in writing by the copyright owner as \"Not a Contribution.\"\n\n      \"Contributor\" shall mean Licensor and any individual or Legal Entity\n      on behalf of whom a Contribution has been received by Licensor and\n      subsequently incorporated within the Work.\n\n   2. Grant of Copyright License. Subject to the terms and conditions of\n      this License, each Contributor hereby grants to You a perpetual,\n      worldwide, non-exclusive, no-charge, royalty-free, irrevocable\n      copyright license to reproduce, prepare Derivative Works of,\n      publicly display, publicly perform, sublicense, and distribute the\n      Work and such Derivative Works in Source or Object form.\n\n   3. Grant of Patent License. Subject to the terms and conditions of\n      this License, each Contributor hereby grants to You a perpetual,\n      worldwide, non-exclusive, no-charge, royalty-free, irrevocable\n      (except as stated in this section) patent license to make, have made,\n      use, offer to sell, sell, import, and otherwise transfer the Work,\n      where such license applies only to those patent claims licensable\n      by such Contributor that are necessarily infringed by their\n      Contribution(s) alone or by combination of their Contribution(s)\n      with the Work to which such Contribution(s) was submitted. If You\n      institute patent litigation against any entity (including a\n      cross-claim or counterclaim in a lawsuit) alleging that the Work\n      or a Contribution incorporated within the Work constitutes direct\n      or contributory patent infringement, then any patent licenses\n      granted to You under this License for that Work shall terminate\n      as of the date such litigation is filed.\n\n   4. Redistribution. You may reproduce and distribute copies of the\n      Work or Derivative Works thereof in any medium, with or without\n      modifications, and in Source or Object form, provided that You\n      meet the following conditions:\n\n      (a) You must give any other recipients of the Work or\n          Derivative Works a copy of this License; and\n\n      (b) You must cause any modified files to carry prominent notices\n          stating that You changed the files; and\n\n      (c) You must retain, in the Source form of any Derivative Works\n          that You distribute, all copyright, patent, trademark, and\n          attribution notices from the Source form of the Work,\n          excluding those notices that do not pertain to any part of\n          the Derivative Works; and\n\n      (d) If the Work includes a \"NOTICE\" text file as part of its\n          distribution, then any Derivative Works that You distribute must\n          include a readable copy of the attribution notices contained\n          within such NOTICE file, excluding those notices that do not\n          pertain to any part of the Derivative Works, in at least one\n          of the following places: within a NOTICE text file distributed\n          as part of the Derivative Works; within the Source form or\n          documentation, if provided along with the Derivative Works; or,\n          within a display generated by the Derivative Works, if and\n          wherever such third-party notices normally appear. The contents\n          of the NOTICE file are for informational purposes only and\n          do not modify the License. You may add Your own attribution\n          notices within Derivative Works that You distribute, alongside\n          or as an addendum to the NOTICE text from the Work, provided\n          that such additional attribution notices cannot be construed\n          as modifying the License.\n\n      You may add Your own copyright statement to Your modifications and\n      may provide additional or different license terms and conditions\n      for use, reproduction, or distribution of Your modifications, or\n      for any such Derivative Works as a whole, provided Your use,\n      reproduction, and distribution of the Work otherwise complies with\n      the conditions stated in this License.\n\n   5. Submission of Contributions. Unless You explicitly state otherwise,\n      any Contribution intentionally submitted for inclusion in the Work\n      by You to the Licensor shall be under the terms and conditions of\n      this License, without any additional terms or conditions.\n      Notwithstanding the above, nothing herein shall supersede or modify\n      the terms of any separate license agreement you may have executed\n      with Licensor regarding such Contributions.\n\n   6. Trademarks. This License does not grant permission to use the trade\n      names, trademarks, service marks, or product names of the Licensor,\n      except as required for reasonable and customary use in describing the\n      origin of the Work and reproducing the content of the NOTICE file.\n\n   7. Disclaimer of Warranty. Unless required by applicable law or\n      agreed to in writing, Licensor provides the Work (and each\n      Contributor provides its Contributions) on an \"AS IS\" BASIS,\n      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or\n      implied, including, without limitation, any warranties or conditions\n      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A\n      PARTICULAR PURPOSE. You are solely responsible for determining the\n      appropriateness of using or redistributing the Work and assume any\n      risks associated with Your exercise of permissions under this License.\n\n   8. Limitation of Liability. In no event and under no legal theory,\n      whether in tort (including negligence), contract, or otherwise,\n      unless required by applicable law (such as deliberate and grossly\n      negligent acts) or agreed to in writing, shall any Contributor be\n      liable to You for damages, including any direct, indirect, special,\n      incidental, or consequential damages of any character arising as a\n      result of this License or out of the use or inability to use the\n      Work (including but not limited to damages for loss of goodwill,\n      work stoppage, computer failure or malfunction, or any and all\n      other commercial damages or losses), even if such Contributor\n      has been advised of the possibility of such damages.\n\n   9. Accepting Warranty or Additional Liability. While redistributing\n      the Work or Derivative Works thereof, You may choose to offer,\n      and charge a fee for, acceptance of support, warranty, indemnity,\n      or other liability obligations and/or rights consistent with this\n      License. However, in accepting such obligations, You may act only\n      on Your own behalf and on Your sole responsibility, not on behalf\n      of any other Contributor, and only if You agree to indemnify,\n      defend, and hold each Contributor harmless for any liability\n      incurred by, or claims asserted against, such Contributor by reason\n      of your accepting any such warranty or additional liability.\n\n   END OF TERMS AND CONDITIONS\n\n   APPENDIX: How to apply the Apache License to your work.\n\n      To apply the Apache License to your work, attach the following\n      boilerplate notice, with the fields enclosed by brackets \"[]\"\n      replaced with your own identifying information. (Don't include\n      the brackets!)  The text should be enclosed in the appropriate\n      comment syntax for the file format. We also recommend that a\n      file or class name and description of purpose be included on the\n      same \"printed page\" as the copyright notice for easier\n      identification within third-party archives.\n\n   Copyright [yyyy] [name of copyright owner]\n\n   Licensed under the Apache License, Version 2.0 (the \"License\");\n   you may not use this file except in compliance with the License.\n   You may obtain a copy of the License at\n\n       http://www.apache.org/licenses/LICENSE-2.0\n\n   Unless required by applicable law or agreed to in writing, software\n   distributed under the License is distributed on an \"AS IS\" BASIS,\n   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n   See the License for the specific language governing permissions and\n   limitations under the License.\n",
+    "ecosystem": "go"
+  },
+  {
+    "name": "github.com/go-openapi/jsonreference",
+    "version": "v0.20.2",
+    "license": "Apache-2.0",
+    "repository": "https://github.com/go-openapi/jsonreference",
+    "license_text": "\n                                 Apache License\n                           Version 2.0, January 2004\n                        http://www.apache.org/licenses/\n\n   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION\n\n   1. Definitions.\n\n      \"License\" shall mean the terms and conditions for use, reproduction,\n      and distribution as defined by Sections 1 through 9 of this document.\n\n      \"Licensor\" shall mean the copyright owner or entity authorized by\n      the copyright owner that is granting the License.\n\n      \"Legal Entity\" shall mean the union of the acting entity and all\n      other entities that control, are controlled by, or are under common\n      control with that entity. For the purposes of this definition,\n      \"control\" means (i) the power, direct or indirect, to cause the\n      direction or management of such entity, whether by contract or\n      otherwise, or (ii) ownership of fifty percent (50%) or more of the\n      outstanding shares, or (iii) beneficial ownership of such entity.\n\n      \"You\" (or \"Your\") shall mean an individual or Legal Entity\n      exercising permissions granted by this License.\n\n      \"Source\" form shall mean the preferred form for making modifications,\n      including but not limited to software source code, documentation\n      source, and configuration files.\n\n      \"Object\" form shall mean any form resulting from mechanical\n      transformation or translation of a Source form, including but\n      not limited to compiled object code, generated documentation,\n      and conversions to other media types.\n\n      \"Work\" shall mean the work of authorship, whether in Source or\n      Object form, made available under the License, as indicated by a\n      copyright notice that is included in or attached to the work\n      (an example is provided in the Appendix below).\n\n      \"Derivative Works\" shall mean any work, whether in Source or Object\n      form, that is based on (or derived from) the Work and for which the\n      editorial revisions, annotations, elaborations, or other modifications\n      represent, as a whole, an original work of authorship. For the purposes\n      of this License, Derivative Works shall not include works that remain\n      separable from, or merely link (or bind by name) to the interfaces of,\n      the Work and Derivative Works thereof.\n\n      \"Contribution\" shall mean any work of authorship, including\n      the original version of the Work and any modifications or additions\n      to that Work or Derivative Works thereof, that is intentionally\n      submitted to Licensor for inclusion in the Work by the copyright owner\n      or by an individual or Legal Entity authorized to submit on behalf of\n      the copyright owner. For the purposes of this definition, \"submitted\"\n      means any form of electronic, verbal, or written communication sent\n      to the Licensor or its representatives, including but not limited to\n      communication on electronic mailing lists, source code control systems,\n      and issue tracking systems that are managed by, or on behalf of, the\n      Licensor for the purpose of discussing and improving the Work, but\n      excluding communication that is conspicuously marked or otherwise\n      designated in writing by the copyright owner as \"Not a Contribution.\"\n\n      \"Contributor\" shall mean Licensor and any individual or Legal Entity\n      on behalf of whom a Contribution has been received by Licensor and\n      subsequently incorporated within the Work.\n\n   2. Grant of Copyright License. Subject to the terms and conditions of\n      this License, each Contributor hereby grants to You a perpetual,\n      worldwide, non-exclusive, no-charge, royalty-free, irrevocable\n      copyright license to reproduce, prepare Derivative Works of,\n      publicly display, publicly perform, sublicense, and distribute the\n      Work and such Derivative Works in Source or Object form.\n\n   3. Grant of Patent License. Subject to the terms and conditions of\n      this License, each Contributor hereby grants to You a perpetual,\n      worldwide, non-exclusive, no-charge, royalty-free, irrevocable\n      (except as stated in this section) patent license to make, have made,\n      use, offer to sell, sell, import, and otherwise transfer the Work,\n      where such license applies only to those patent claims licensable\n      by such Contributor that are necessarily infringed by their\n      Contribution(s) alone or by combination of their Contribution(s)\n      with the Work to which such Contribution(s) was submitted. If You\n      institute patent litigation against any entity (including a\n      cross-claim or counterclaim in a lawsuit) alleging that the Work\n      or a Contribution incorporated within the Work constitutes direct\n      or contributory patent infringement, then any patent licenses\n      granted to You under this License for that Work shall terminate\n      as of the date such litigation is filed.\n\n   4. Redistribution. You may reproduce and distribute copies of the\n      Work or Derivative Works thereof in any medium, with or without\n      modifications, and in Source or Object form, provided that You\n      meet the following conditions:\n\n      (a) You must give any other recipients of the Work or\n          Derivative Works a copy of this License; and\n\n      (b) You must cause any modified files to carry prominent notices\n          stating that You changed the files; and\n\n      (c) You must retain, in the Source form of any Derivative Works\n          that You distribute, all copyright, patent, trademark, and\n          attribution notices from the Source form of the Work,\n          excluding those notices that do not pertain to any part of\n          the Derivative Works; and\n\n      (d) If the Work includes a \"NOTICE\" text file as part of its\n          distribution, then any Derivative Works that You distribute must\n          include a readable copy of the attribution notices contained\n          within such NOTICE file, excluding those notices that do not\n          pertain to any part of the Derivative Works, in at least one\n          of the following places: within a NOTICE text file distributed\n          as part of the Derivative Works; within the Source form or\n          documentation, if provided along with the Derivative Works; or,\n          within a display generated by the Derivative Works, if and\n          wherever such third-party notices normally appear. The contents\n          of the NOTICE file are for informational purposes only and\n          do not modify the License. You may add Your own attribution\n          notices within Derivative Works that You distribute, alongside\n          or as an addendum to the NOTICE text from the Work, provided\n          that such additional attribution notices cannot be construed\n          as modifying the License.\n\n      You may add Your own copyright statement to Your modifications and\n      may provide additional or different license terms and conditions\n      for use, reproduction, or distribution of Your modifications, or\n      for any such Derivative Works as a whole, provided Your use,\n      reproduction, and distribution of the Work otherwise complies with\n      the conditions stated in this License.\n\n   5. Submission of Contributions. Unless You explicitly state otherwise,\n      any Contribution intentionally submitted for inclusion in the Work\n      by You to the Licensor shall be under the terms and conditions of\n      this License, without any additional terms or conditions.\n      Notwithstanding the above, nothing herein shall supersede or modify\n      the terms of any separate license agreement you may have executed\n      with Licensor regarding such Contributions.\n\n   6. Trademarks. This License does not grant permission to use the trade\n      names, trademarks, service marks, or product names of the Licensor,\n      except as required for reasonable and customary use in describing the\n      origin of the Work and reproducing the content of the NOTICE file.\n\n   7. Disclaimer of Warranty. Unless required by applicable law or\n      agreed to in writing, Licensor provides the Work (and each\n      Contributor provides its Contributions) on an \"AS IS\" BASIS,\n      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or\n      implied, including, without limitation, any warranties or conditions\n      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A\n      PARTICULAR PURPOSE. You are solely responsible for determining the\n      appropriateness of using or redistributing the Work and assume any\n      risks associated with Your exercise of permissions under this License.\n\n   8. Limitation of Liability. In no event and under no legal theory,\n      whether in tort (including negligence), contract, or otherwise,\n      unless required by applicable law (such as deliberate and grossly\n      negligent acts) or agreed to in writing, shall any Contributor be\n      liable to You for damages, including any direct, indirect, special,\n      incidental, or consequential damages of any character arising as a\n      result of this License or out of the use or inability to use the\n      Work (including but not limited to damages for loss of goodwill,\n      work stoppage, computer failure or malfunction, or any and all\n      other commercial damages or losses), even if such Contributor\n      has been advised of the possibility of such damages.\n\n   9. Accepting Warranty or Additional Liability. While redistributing\n      the Work or Derivative Works thereof, You may choose to offer,\n      and charge a fee for, acceptance of support, warranty, indemnity,\n      or other liability obligations and/or rights consistent with this\n      License. However, in accepting such obligations, You may act only\n      on Your own behalf and on Your sole responsibility, not on behalf\n      of any other Contributor, and only if You agree to indemnify,\n      defend, and hold each Contributor harmless for any liability\n      incurred by, or claims asserted against, such Contributor by reason\n      of your accepting any such warranty or additional liability.\n\n   END OF TERMS AND CONDITIONS\n\n   APPENDIX: How to apply the Apache License to your work.\n\n      To apply the Apache License to your work, attach the following\n      boilerplate notice, with the fields enclosed by brackets \"[]\"\n      replaced with your own identifying information. (Don't include\n      the brackets!)  The text should be enclosed in the appropriate\n      comment syntax for the file format. We also recommend that a\n      file or class name and description of purpose be included on the\n      same \"printed page\" as the copyright notice for easier\n      identification within third-party archives.\n\n   Copyright [yyyy] [name of copyright owner]\n\n   Licensed under the Apache License, Version 2.0 (the \"License\");\n   you may not use this file except in compliance with the License.\n   You may obtain a copy of the License at\n\n       http://www.apache.org/licenses/LICENSE-2.0\n\n   Unless required by applicable law or agreed to in writing, software\n   distributed under the License is distributed on an \"AS IS\" BASIS,\n   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n   See the License for the specific language governing permissions and\n   limitations under the License.\n",
+    "ecosystem": "go"
+  },
+  {
+    "name": "github.com/go-openapi/swag",
+    "version": "v0.23.0",
+    "license": "Apache-2.0",
+    "repository": "https://github.com/go-openapi/swag",
+    "license_text": "\n                                 Apache License\n                           Version 2.0, January 2004\n                        http://www.apache.org/licenses/\n\n   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION\n\n   1. Definitions.\n\n      \"License\" shall mean the terms and conditions for use, reproduction,\n      and distribution as defined by Sections 1 through 9 of this document.\n\n      \"Licensor\" shall mean the copyright owner or entity authorized by\n      the copyright owner that is granting the License.\n\n      \"Legal Entity\" shall mean the union of the acting entity and all\n      other entities that control, are controlled by, or are under common\n      control with that entity. For the purposes of this definition,\n      \"control\" means (i) the power, direct or indirect, to cause the\n      direction or management of such entity, whether by contract or\n      otherwise, or (ii) ownership of fifty percent (50%) or more of the\n      outstanding shares, or (iii) beneficial ownership of such entity.\n\n      \"You\" (or \"Your\") shall mean an individual or Legal Entity\n      exercising permissions granted by this License.\n\n      \"Source\" form shall mean the preferred form for making modifications,\n      including but not limited to software source code, documentation\n      source, and configuration files.\n\n      \"Object\" form shall mean any form resulting from mechanical\n      transformation or translation of a Source form, including but\n      not limited to compiled object code, generated documentation,\n      and conversions to other media types.\n\n      \"Work\" shall mean the work of authorship, whether in Source or\n      Object form, made available under the License, as indicated by a\n      copyright notice that is included in or attached to the work\n      (an example is provided in the Appendix below).\n\n      \"Derivative Works\" shall mean any work, whether in Source or Object\n      form, that is based on (or derived from) the Work and for which the\n      editorial revisions, annotations, elaborations, or other modifications\n      represent, as a whole, an original work of authorship. For the purposes\n      of this License, Derivative Works shall not include works that remain\n      separable from, or merely link (or bind by name) to the interfaces of,\n      the Work and Derivative Works thereof.\n\n      \"Contribution\" shall mean any work of authorship, including\n      the original version of the Work and any modifications or additions\n      to that Work or Derivative Works thereof, that is intentionally\n      submitted to Licensor for inclusion in the Work by the copyright owner\n      or by an individual or Legal Entity authorized to submit on behalf of\n      the copyright owner. For the purposes of this definition, \"submitted\"\n      means any form of electronic, verbal, or written communication sent\n      to the Licensor or its representatives, including but not limited to\n      communication on electronic mailing lists, source code control systems,\n      and issue tracking systems that are managed by, or on behalf of, the\n      Licensor for the purpose of discussing and improving the Work, but\n      excluding communication that is conspicuously marked or otherwise\n      designated in writing by the copyright owner as \"Not a Contribution.\"\n\n      \"Contributor\" shall mean Licensor and any individual or Legal Entity\n      on behalf of whom a Contribution has been received by Licensor and\n      subsequently incorporated within the Work.\n\n   2. Grant of Copyright License. Subject to the terms and conditions of\n      this License, each Contributor hereby grants to You a perpetual,\n      worldwide, non-exclusive, no-charge, royalty-free, irrevocable\n      copyright license to reproduce, prepare Derivative Works of,\n      publicly display, publicly perform, sublicense, and distribute the\n      Work and such Derivative Works in Source or Object form.\n\n   3. Grant of Patent License. Subject to the terms and conditions of\n      this License, each Contributor hereby grants to You a perpetual,\n      worldwide, non-exclusive, no-charge, royalty-free, irrevocable\n      (except as stated in this section) patent license to make, have made,\n      use, offer to sell, sell, import, and otherwise transfer the Work,\n      where such license applies only to those patent claims licensable\n      by such Contributor that are necessarily infringed by their\n      Contribution(s) alone or by combination of their Contribution(s)\n      with the Work to which such Contribution(s) was submitted. If You\n      institute patent litigation against any entity (including a\n      cross-claim or counterclaim in a lawsuit) alleging that the Work\n      or a Contribution incorporated within the Work constitutes direct\n      or contributory patent infringement, then any patent licenses\n      granted to You under this License for that Work shall terminate\n      as of the date such litigation is filed.\n\n   4. Redistribution. You may reproduce and distribute copies of the\n      Work or Derivative Works thereof in any medium, with or without\n      modifications, and in Source or Object form, provided that You\n      meet the following conditions:\n\n      (a) You must give any other recipients of the Work or\n          Derivative Works a copy of this License; and\n\n      (b) You must cause any modified files to carry prominent notices\n          stating that You changed the files; and\n\n      (c) You must retain, in the Source form of any Derivative Works\n          that You distribute, all copyright, patent, trademark, and\n          attribution notices from the Source form of the Work,\n          excluding those notices that do not pertain to any part of\n          the Derivative Works; and\n\n      (d) If the Work includes a \"NOTICE\" text file as part of its\n          distribution, then any Derivative Works that You distribute must\n          include a readable copy of the attribution notices contained\n          within such NOTICE file, excluding those notices that do not\n          pertain to any part of the Derivative Works, in at least one\n          of the following places: within a NOTICE text file distributed\n          as part of the Derivative Works; within the Source form or\n          documentation, if provided along with the Derivative Works; or,\n          within a display generated by the Derivative Works, if and\n          wherever such third-party notices normally appear. The contents\n          of the NOTICE file are for informational purposes only and\n          do not modify the License. You may add Your own attribution\n          notices within Derivative Works that You distribute, alongside\n          or as an addendum to the NOTICE text from the Work, provided\n          that such additional attribution notices cannot be construed\n          as modifying the License.\n\n      You may add Your own copyright statement to Your modifications and\n      may provide additional or different license terms and conditions\n      for use, reproduction, or distribution of Your modifications, or\n      for any such Derivative Works as a whole, provided Your use,\n      reproduction, and distribution of the Work otherwise complies with\n      the conditions stated in this License.\n\n   5. Submission of Contributions. Unless You explicitly state otherwise,\n      any Contribution intentionally submitted for inclusion in the Work\n      by You to the Licensor shall be under the terms and conditions of\n      this License, without any additional terms or conditions.\n      Notwithstanding the above, nothing herein shall supersede or modify\n      the terms of any separate license agreement you may have executed\n      with Licensor regarding such Contributions.\n\n   6. Trademarks. This License does not grant permission to use the trade\n      names, trademarks, service marks, or product names of the Licensor,\n      except as required for reasonable and customary use in describing the\n      origin of the Work and reproducing the content of the NOTICE file.\n\n   7. Disclaimer of Warranty. Unless required by applicable law or\n      agreed to in writing, Licensor provides the Work (and each\n      Contributor provides its Contributions) on an \"AS IS\" BASIS,\n      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or\n      implied, including, without limitation, any warranties or conditions\n      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A\n      PARTICULAR PURPOSE. You are solely responsible for determining the\n      appropriateness of using or redistributing the Work and assume any\n      risks associated with Your exercise of permissions under this License.\n\n   8. Limitation of Liability. In no event and under no legal theory,\n      whether in tort (including negligence), contract, or otherwise,\n      unless required by applicable law (such as deliberate and grossly\n      negligent acts) or agreed to in writing, shall any Contributor be\n      liable to You for damages, including any direct, indirect, special,\n      incidental, or consequential damages of any character arising as a\n      result of this License or out of the use or inability to use the\n      Work (including but not limited to damages for loss of goodwill,\n      work stoppage, computer failure or malfunction, or any and all\n      other commercial damages or losses), even if such Contributor\n      has been advised of the possibility of such damages.\n\n   9. Accepting Warranty or Additional Liability. While redistributing\n      the Work or Derivative Works thereof, You may choose to offer,\n      and charge a fee for, acceptance of support, warranty, indemnity,\n      or other liability obligations and/or rights consistent with this\n      License. However, in accepting such obligations, You may act only\n      on Your own behalf and on Your sole responsibility, not on behalf\n      of any other Contributor, and only if You agree to indemnify,\n      defend, and hold each Contributor harmless for any liability\n      incurred by, or claims asserted against, such Contributor by reason\n      of your accepting any such warranty or additional liability.\n\n   END OF TERMS AND CONDITIONS\n\n   APPENDIX: How to apply the Apache License to your work.\n\n      To apply the Apache License to your work, attach the following\n      boilerplate notice, with the fields enclosed by brackets \"[]\"\n      replaced with your own identifying information. (Don't include\n      the brackets!)  The text should be enclosed in the appropriate\n      comment syntax for the file format. We also recommend that a\n      file or class name and description of purpose be included on the\n      same \"printed page\" as the copyright notice for easier\n      identification within third-party archives.\n\n   Copyright [yyyy] [name of copyright owner]\n\n   Licensed under the Apache License, Version 2.0 (the \"License\");\n   you may not use this file except in compliance with the License.\n   You may obtain a copy of the License at\n\n       http://www.apache.org/licenses/LICENSE-2.0\n\n   Unless required by applicable law or agreed to in writing, software\n   distributed under the License is distributed on an \"AS IS\" BASIS,\n   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n   See the License for the specific language governing permissions and\n   limitations under the License.\n",
+    "ecosystem": "go"
   },
   {
     "name": "github.com/go-playground/locales",
@@ -203,8 +229,7 @@
     "license": "MIT",
     "repository": "https://github.com/go-playground/locales",
     "license_text": "The MIT License (MIT)\n\nCopyright (c) 2016 Go Playground\n\nPermission is hereby granted, free of charge, to any person obtaining a copy\nof this software and associated documentation files (the \"Software\"), to deal\nin the Software without restriction, including without limitation the rights\nto use, copy, modify, merge, publish, distribute, sublicense, and/or sell\ncopies of the Software, and to permit persons to whom the Software is\nfurnished to do so, subject to the following conditions:\n\nThe above copyright notice and this permission notice shall be included in all\ncopies or substantial portions of the Software.\n\nTHE SOFTWARE IS PROVIDED \"AS IS\", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR\nIMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,\nFITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE\nAUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER\nLIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,\nOUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE\nSOFTWARE.",
-    "ecosystem": "go",
-    "stale": true
+    "ecosystem": "go"
   },
   {
     "name": "github.com/go-playground/universal-translator",
@@ -212,8 +237,7 @@
     "license": "MIT",
     "repository": "https://github.com/go-playground/universal-translator",
     "license_text": "The MIT License (MIT)\n\nCopyright (c) 2016 Go Playground\n\nPermission is hereby granted, free of charge, to any person obtaining a copy\nof this software and associated documentation files (the \"Software\"), to deal\nin the Software without restriction, including without limitation the rights\nto use, copy, modify, merge, publish, distribute, sublicense, and/or sell\ncopies of the Software, and to permit persons to whom the Software is\nfurnished to do so, subject to the following conditions:\n\nThe above copyright notice and this permission notice shall be included in all\ncopies or substantial portions of the Software.\n\nTHE SOFTWARE IS PROVIDED \"AS IS\", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR\nIMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,\nFITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE\nAUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER\nLIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,\nOUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE\nSOFTWARE.\n",
-    "ecosystem": "go",
-    "stale": true
+    "ecosystem": "go"
   },
   {
     "name": "github.com/go-playground/validator",
@@ -221,8 +245,7 @@
     "license": "MIT",
     "repository": "https://github.com/go-playground/validator",
     "license_text": "The MIT License (MIT)\n\nCopyright (c) 2015 Dean Karn\n\nPermission is hereby granted, free of charge, to any person obtaining a copy\nof this software and associated documentation files (the \"Software\"), to deal\nin the Software without restriction, including without limitation the rights\nto use, copy, modify, merge, publish, distribute, sublicense, and/or sell\ncopies of the Software, and to permit persons to whom the Software is\nfurnished to do so, subject to the following conditions:\n\nThe above copyright notice and this permission notice shall be included in all\ncopies or substantial portions of the Software.\n\nTHE SOFTWARE IS PROVIDED \"AS IS\", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR\nIMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,\nFITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE\nAUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER\nLIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,\nOUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE\nSOFTWARE.\n\n",
-    "ecosystem": "go",
-    "stale": true
+    "ecosystem": "go"
   },
   {
     "name": "github.com/go-yaml/yaml",
@@ -230,8 +253,31 @@
     "license": "MIT",
     "repository": "https://github.com/go-yaml/yaml",
     "license_text": "\nThis project is covered by two different licenses: MIT and Apache.\n\n#### MIT License ####\n\nThe following files were ported to Go from C files of libyaml, and thus\nare still covered by their original MIT license, with the additional\ncopyright staring in 2011 when the project was ported over:\n\n    apic.go emitterc.go parserc.go readerc.go scannerc.go\n    writerc.go yamlh.go yamlprivateh.go\n\nCopyright (c) 2006-2010 Kirill Simonov\nCopyright (c) 2006-2011 Kirill Simonov\n\nPermission is hereby granted, free of charge, to any person obtaining a copy of\nthis software and associated documentation files (the \"Software\"), to deal in\nthe Software without restriction, including without limitation the rights to\nuse, copy, modify, merge, publish, distribute, sublicense, and/or sell copies\nof the Software, and to permit persons to whom the Software is furnished to do\nso, subject to the following conditions:\n\nThe above copyright notice and this permission notice shall be included in all\ncopies or substantial portions of the Software.\n\nTHE SOFTWARE IS PROVIDED \"AS IS\", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR\nIMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,\nFITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE\nAUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER\nLIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,\nOUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE\nSOFTWARE.\n\n### Apache License ###\n\nAll the remaining project files are covered by the Apache license:\n\nCopyright (c) 2011-2019 Canonical Ltd\n\nLicensed under the Apache License, Version 2.0 (the \"License\");\nyou may not use this file except in compliance with the License.\nYou may obtain a copy of the License at\n\n    http://www.apache.org/licenses/LICENSE-2.0\n\nUnless required by applicable law or agreed to in writing, software\ndistributed under the License is distributed on an \"AS IS\" BASIS,\nWITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\nSee the License for the specific language governing permissions and\nlimitations under the License.\n",
-    "ecosystem": "go",
-    "stale": true
+    "ecosystem": "go"
+  },
+  {
+    "name": "github.com/godbus/dbus",
+    "version": "v5.1.0",
+    "license": "BSD-2-Clause",
+    "repository": "https://github.com/godbus/dbus",
+    "license_text": "Copyright (c) 2013, Georg Reinke (<guelfey at gmail dot com>), Google\nAll rights reserved.\n\nRedistribution and use in source and binary forms, with or without\nmodification, are permitted provided that the following conditions\nare met:\n\n1. Redistributions of source code must retain the above copyright notice,\nthis list of conditions and the following disclaimer.\n\n2. Redistributions in binary form must reproduce the above copyright\nnotice, this list of conditions and the following disclaimer in the\ndocumentation and/or other materials provided with the distribution.\n\nTHIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS\n\"AS IS\" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT\nLIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR\nA PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT\nHOLDER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,\nSPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED\nTO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR\nPROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF\nLIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING\nNEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS\nSOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.\n",
+    "ecosystem": "go"
+  },
+  {
+    "name": "github.com/golang/protobuf",
+    "version": "v1.5.4",
+    "license": "BSD-3-Clause",
+    "repository": "https://github.com/golang/protobuf",
+    "license_text": "Copyright 2010 The Go Authors.  All rights reserved.\n\nRedistribution and use in source and binary forms, with or without\nmodification, are permitted provided that the following conditions are\nmet:\n\n    * Redistributions of source code must retain the above copyright\nnotice, this list of conditions and the following disclaimer.\n    * Redistributions in binary form must reproduce the above\ncopyright notice, this list of conditions and the following disclaimer\nin the documentation and/or other materials provided with the\ndistribution.\n    * Neither the name of Google Inc. nor the names of its\ncontributors may be used to endorse or promote products derived from\nthis software without specific prior written permission.\n\nTHIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS\n\"AS IS\" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT\nLIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR\nA PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT\nOWNER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,\nSPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT\nLIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,\nDATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY\nTHEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT\n(INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE\nOF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.\n\n",
+    "ecosystem": "go"
+  },
+  {
+    "name": "github.com/google/gnostic-models",
+    "version": "v0.7.0",
+    "license": "Apache-2.0",
+    "repository": "https://github.com/google/gnostic-models",
+    "license_text": "\n                                 Apache License\n                           Version 2.0, January 2004\n                        http://www.apache.org/licenses/\n\n   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION\n\n   1. Definitions.\n\n      \"License\" shall mean the terms and conditions for use, reproduction,\n      and distribution as defined by Sections 1 through 9 of this document.\n\n      \"Licensor\" shall mean the copyright owner or entity authorized by\n      the copyright owner that is granting the License.\n\n      \"Legal Entity\" shall mean the union of the acting entity and all\n      other entities that control, are controlled by, or are under common\n      control with that entity. For the purposes of this definition,\n      \"control\" means (i) the power, direct or indirect, to cause the\n      direction or management of such entity, whether by contract or\n      otherwise, or (ii) ownership of fifty percent (50%) or more of the\n      outstanding shares, or (iii) beneficial ownership of such entity.\n\n      \"You\" (or \"Your\") shall mean an individual or Legal Entity\n      exercising permissions granted by this License.\n\n      \"Source\" form shall mean the preferred form for making modifications,\n      including but not limited to software source code, documentation\n      source, and configuration files.\n\n      \"Object\" form shall mean any form resulting from mechanical\n      transformation or translation of a Source form, including but\n      not limited to compiled object code, generated documentation,\n      and conversions to other media types.\n\n      \"Work\" shall mean the work of authorship, whether in Source or\n      Object form, made available under the License, as indicated by a\n      copyright notice that is included in or attached to the work\n      (an example is provided in the Appendix below).\n\n      \"Derivative Works\" shall mean any work, whether in Source or Object\n      form, that is based on (or derived from) the Work and for which the\n      editorial revisions, annotations, elaborations, or other modifications\n      represent, as a whole, an original work of authorship. For the purposes\n      of this License, Derivative Works shall not include works that remain\n      separable from, or merely link (or bind by name) to the interfaces of,\n      the Work and Derivative Works thereof.\n\n      \"Contribution\" shall mean any work of authorship, including\n      the original version of the Work and any modifications or additions\n      to that Work or Derivative Works thereof, that is intentionally\n      submitted to Licensor for inclusion in the Work by the copyright owner\n      or by an individual or Legal Entity authorized to submit on behalf of\n      the copyright owner. For the purposes of this definition, \"submitted\"\n      means any form of electronic, verbal, or written communication sent\n      to the Licensor or its representatives, including but not limited to\n      communication on electronic mailing lists, source code control systems,\n      and issue tracking systems that are managed by, or on behalf of, the\n      Licensor for the purpose of discussing and improving the Work, but\n      excluding communication that is conspicuously marked or otherwise\n      designated in writing by the copyright owner as \"Not a Contribution.\"\n\n      \"Contributor\" shall mean Licensor and any individual or Legal Entity\n      on behalf of whom a Contribution has been received by Licensor and\n      subsequently incorporated within the Work.\n\n   2. Grant of Copyright License. Subject to the terms and conditions of\n      this License, each Contributor hereby grants to You a perpetual,\n      worldwide, non-exclusive, no-charge, royalty-free, irrevocable\n      copyright license to reproduce, prepare Derivative Works of,\n      publicly display, publicly perform, sublicense, and distribute the\n      Work and such Derivative Works in Source or Object form.\n\n   3. Grant of Patent License. Subject to the terms and conditions of\n      this License, each Contributor hereby grants to You a perpetual,\n      worldwide, non-exclusive, no-charge, royalty-free, irrevocable\n      (except as stated in this section) patent license to make, have made,\n      use, offer to sell, sell, import, and otherwise transfer the Work,\n      where such license applies only to those patent claims licensable\n      by such Contributor that are necessarily infringed by their\n      Contribution(s) alone or by combination of their Contribution(s)\n      with the Work to which such Contribution(s) was submitted. If You\n      institute patent litigation against any entity (including a\n      cross-claim or counterclaim in a lawsuit) alleging that the Work\n      or a Contribution incorporated within the Work constitutes direct\n      or contributory patent infringement, then any patent licenses\n      granted to You under this License for that Work shall terminate\n      as of the date such litigation is filed.\n\n   4. Redistribution. You may reproduce and distribute copies of the\n      Work or Derivative Works thereof in any medium, with or without\n      modifications, and in Source or Object form, provided that You\n      meet the following conditions:\n\n      (a) You must give any other recipients of the Work or\n          Derivative Works a copy of this License; and\n\n      (b) You must cause any modified files to carry prominent notices\n          stating that You changed the files; and\n\n      (c) You must retain, in the Source form of any Derivative Works\n          that You distribute, all copyright, patent, trademark, and\n          attribution notices from the Source form of the Work,\n          excluding those notices that do not pertain to any part of\n          the Derivative Works; and\n\n      (d) If the Work includes a \"NOTICE\" text file as part of its\n          distribution, then any Derivative Works that You distribute must\n          include a readable copy of the attribution notices contained\n          within such NOTICE file, excluding those notices that do not\n          pertain to any part of the Derivative Works, in at least one\n          of the following places: within a NOTICE text file distributed\n          as part of the Derivative Works; within the Source form or\n          documentation, if provided along with the Derivative Works; or,\n          within a display generated by the Derivative Works, if and\n          wherever such third-party notices normally appear. The contents\n          of the NOTICE file are for informational purposes only and\n          do not modify the License. You may add Your own attribution\n          notices within Derivative Works that You distribute, alongside\n          or as an addendum to the NOTICE text from the Work, provided\n          that such additional attribution notices cannot be construed\n          as modifying the License.\n\n      You may add Your own copyright statement to Your modifications and\n      may provide additional or different license terms and conditions\n      for use, reproduction, or distribution of Your modifications, or\n      for any such Derivative Works as a whole, provided Your use,\n      reproduction, and distribution of the Work otherwise complies with\n      the conditions stated in this License.\n\n   5. Submission of Contributions. Unless You explicitly state otherwise,\n      any Contribution intentionally submitted for inclusion in the Work\n      by You to the Licensor shall be under the terms and conditions of\n      this License, without any additional terms or conditions.\n      Notwithstanding the above, nothing herein shall supersede or modify\n      the terms of any separate license agreement you may have executed\n      with Licensor regarding such Contributions.\n\n   6. Trademarks. This License does not grant permission to use the trade\n      names, trademarks, service marks, or product names of the Licensor,\n      except as required for reasonable and customary use in describing the\n      origin of the Work and reproducing the content of the NOTICE file.\n\n   7. Disclaimer of Warranty. Unless required by applicable law or\n      agreed to in writing, Licensor provides the Work (and each\n      Contributor provides its Contributions) on an \"AS IS\" BASIS,\n      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or\n      implied, including, without limitation, any warranties or conditions\n      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A\n      PARTICULAR PURPOSE. You are solely responsible for determining the\n      appropriateness of using or redistributing the Work and assume any\n      risks associated with Your exercise of permissions under this License.\n\n   8. Limitation of Liability. In no event and under no legal theory,\n      whether in tort (including negligence), contract, or otherwise,\n      unless required by applicable law (such as deliberate and grossly\n      negligent acts) or agreed to in writing, shall any Contributor be\n      liable to You for damages, including any direct, indirect, special,\n      incidental, or consequential damages of any character arising as a\n      result of this License or out of the use or inability to use the\n      Work (including but not limited to damages for loss of goodwill,\n      work stoppage, computer failure or malfunction, or any and all\n      other commercial damages or losses), even if such Contributor\n      has been advised of the possibility of such damages.\n\n   9. Accepting Warranty or Additional Liability. While redistributing\n      the Work or Derivative Works thereof, You may choose to offer,\n      and charge a fee for, acceptance of support, warranty, indemnity,\n      or other liability obligations and/or rights consistent with this\n      License. However, in accepting such obligations, You may act only\n      on Your own behalf and on Your sole responsibility, not on behalf\n      of any other Contributor, and only if You agree to indemnify,\n      defend, and hold each Contributor harmless for any liability\n      incurred by, or claims asserted against, such Contributor by reason\n      of your accepting any such warranty or additional liability.\n\n   END OF TERMS AND CONDITIONS\n\n   APPENDIX: How to apply the Apache License to your work.\n\n      To apply the Apache License to your work, attach the following\n      boilerplate notice, with the fields enclosed by brackets \"[]\"\n      replaced with your own identifying information. (Don't include\n      the brackets!)  The text should be enclosed in the appropriate\n      comment syntax for the file format. We also recommend that a\n      file or class name and description of purpose be included on the\n      same \"printed page\" as the copyright notice for easier\n      identification within third-party archives.\n\n   Copyright [yyyy] [name of copyright owner]\n\n   Licensed under the Apache License, Version 2.0 (the \"License\");\n   you may not use this file except in compliance with the License.\n   You may obtain a copy of the License at\n\n       http://www.apache.org/licenses/LICENSE-2.0\n\n   Unless required by applicable law or agreed to in writing, software\n   distributed under the License is distributed on an \"AS IS\" BASIS,\n   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n   See the License for the specific language governing permissions and\n   limitations under the License.\n\n",
+    "ecosystem": "go"
   },
   {
     "name": "github.com/google/jsonschema-go",
@@ -239,8 +285,7 @@
     "license": "MIT",
     "repository": "https://github.com/google/jsonschema-go",
     "license_text": "MIT License\n\nCopyright (c) 2025 JSON Schema Go Project Authors\n\nPermission is hereby granted, free of charge, to any person obtaining a copy\nof this software and associated documentation files (the \"Software\"), to deal\nin the Software without restriction, including without limitation the rights\nto use, copy, modify, merge, publish, distribute, sublicense, and/or sell\ncopies of the Software, and to permit persons to whom the Software is\nfurnished to do so, subject to the following conditions:\n\nThe above copyright notice and this permission notice shall be included in all\ncopies or substantial portions of the Software.\n\nTHE SOFTWARE IS PROVIDED \"AS IS\", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR\nIMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,\nFITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE\nAUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER\nLIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,\nOUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE\nSOFTWARE.\n",
-    "ecosystem": "go",
-    "stale": true
+    "ecosystem": "go"
   },
   {
     "name": "github.com/google/uuid",
@@ -248,44 +293,55 @@
     "license": "BSD-3-Clause",
     "repository": "https://github.com/google/uuid",
     "license_text": "Copyright (c) 2009,2014 Google Inc. All rights reserved.\n\nRedistribution and use in source and binary forms, with or without\nmodification, are permitted provided that the following conditions are\nmet:\n\n   * Redistributions of source code must retain the above copyright\nnotice, this list of conditions and the following disclaimer.\n   * Redistributions in binary form must reproduce the above\ncopyright notice, this list of conditions and the following disclaimer\nin the documentation and/or other materials provided with the\ndistribution.\n   * Neither the name of Google Inc. nor the names of its\ncontributors may be used to endorse or promote products derived from\nthis software without specific prior written permission.\n\nTHIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS\n\"AS IS\" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT\nLIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR\nA PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT\nOWNER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,\nSPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT\nLIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,\nDATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY\nTHEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT\n(INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE\nOF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.\n",
-    "ecosystem": "go",
-    "stale": true
+    "ecosystem": "go"
   },
   {
     "name": "github.com/googleapis/go-genproto",
-    "version": "9d38bb4040a9",
+    "version": "3dc84a4a5aaa",
     "license": "Apache-2.0",
     "repository": "https://github.com/googleapis/go-genproto",
     "license_text": "\n                                 Apache License\n                           Version 2.0, January 2004\n                        http://www.apache.org/licenses/\n\n   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION\n\n   1. Definitions.\n\n      \"License\" shall mean the terms and conditions for use, reproduction,\n      and distribution as defined by Sections 1 through 9 of this document.\n\n      \"Licensor\" shall mean the copyright owner or entity authorized by\n      the copyright owner that is granting the License.\n\n      \"Legal Entity\" shall mean the union of the acting entity and all\n      other entities that control, are controlled by, or are under common\n      control with that entity. For the purposes of this definition,\n      \"control\" means (i) the power, direct or indirect, to cause the\n      direction or management of such entity, whether by contract or\n      otherwise, or (ii) ownership of fifty percent (50%) or more of the\n      outstanding shares, or (iii) beneficial ownership of such entity.\n\n      \"You\" (or \"Your\") shall mean an individual or Legal Entity\n      exercising permissions granted by this License.\n\n      \"Source\" form shall mean the preferred form for making modifications,\n      including but not limited to software source code, documentation\n      source, and configuration files.\n\n      \"Object\" form shall mean any form resulting from mechanical\n      transformation or translation of a Source form, including but\n      not limited to compiled object code, generated documentation,\n      and conversions to other media types.\n\n      \"Work\" shall mean the work of authorship, whether in Source or\n      Object form, made available under the License, as indicated by a\n      copyright notice that is included in or attached to the work\n      (an example is provided in the Appendix below).\n\n      \"Derivative Works\" shall mean any work, whether in Source or Object\n      form, that is based on (or derived from) the Work and for which the\n      editorial revisions, annotations, elaborations, or other modifications\n      represent, as a whole, an original work of authorship. For the purposes\n      of this License, Derivative Works shall not include works that remain\n      separable from, or merely link (or bind by name) to the interfaces of,\n      the Work and Derivative Works thereof.\n\n      \"Contribution\" shall mean any work of authorship, including\n      the original version of the Work and any modifications or additions\n      to that Work or Derivative Works thereof, that is intentionally\n      submitted to Licensor for inclusion in the Work by the copyright owner\n      or by an individual or Legal Entity authorized to submit on behalf of\n      the copyright owner. For the purposes of this definition, \"submitted\"\n      means any form of electronic, verbal, or written communication sent\n      to the Licensor or its representatives, including but not limited to\n      communication on electronic mailing lists, source code control systems,\n      and issue tracking systems that are managed by, or on behalf of, the\n      Licensor for the purpose of discussing and improving the Work, but\n      excluding communication that is conspicuously marked or otherwise\n      designated in writing by the copyright owner as \"Not a Contribution.\"\n\n      \"Contributor\" shall mean Licensor and any individual or Legal Entity\n      on behalf of whom a Contribution has been received by Licensor and\n      subsequently incorporated within the Work.\n\n   2. Grant of Copyright License. Subject to the terms and conditions of\n      this License, each Contributor hereby grants to You a perpetual,\n      worldwide, non-exclusive, no-charge, royalty-free, irrevocable\n      copyright license to reproduce, prepare Derivative Works of,\n      publicly display, publicly perform, sublicense, and distribute the\n      Work and such Derivative Works in Source or Object form.\n\n   3. Grant of Patent License. Subject to the terms and conditions of\n      this License, each Contributor hereby grants to You a perpetual,\n      worldwide, non-exclusive, no-charge, royalty-free, irrevocable\n      (except as stated in this section) patent license to make, have made,\n      use, offer to sell, sell, import, and otherwise transfer the Work,\n      where such license applies only to those patent claims licensable\n      by such Contributor that are necessarily infringed by their\n      Contribution(s) alone or by combination of their Contribution(s)\n      with the Work to which such Contribution(s) was submitted. If You\n      institute patent litigation against any entity (including a\n      cross-claim or counterclaim in a lawsuit) alleging that the Work\n      or a Contribution incorporated within the Work constitutes direct\n      or contributory patent infringement, then any patent licenses\n      granted to You under this License for that Work shall terminate\n      as of the date such litigation is filed.\n\n   4. Redistribution. You may reproduce and distribute copies of the\n      Work or Derivative Works thereof in any medium, with or without\n      modifications, and in Source or Object form, provided that You\n      meet the following conditions:\n\n      (a) You must give any other recipients of the Work or\n          Derivative Works a copy of this License; and\n\n      (b) You must cause any modified files to carry prominent notices\n          stating that You changed the files; and\n\n      (c) You must retain, in the Source form of any Derivative Works\n          that You distribute, all copyright, patent, trademark, and\n          attribution notices from the Source form of the Work,\n          excluding those notices that do not pertain to any part of\n          the Derivative Works; and\n\n      (d) If the Work includes a \"NOTICE\" text file as part of its\n          distribution, then any Derivative Works that You distribute must\n          include a readable copy of the attribution notices contained\n          within such NOTICE file, excluding those notices that do not\n          pertain to any part of the Derivative Works, in at least one\n          of the following places: within a NOTICE text file distributed\n          as part of the Derivative Works; within the Source form or\n          documentation, if provided along with the Derivative Works; or,\n          within a display generated by the Derivative Works, if and\n          wherever such third-party notices normally appear. The contents\n          of the NOTICE file are for informational purposes only and\n          do not modify the License. You may add Your own attribution\n          notices within Derivative Works that You distribute, alongside\n          or as an addendum to the NOTICE text from the Work, provided\n          that such additional attribution notices cannot be construed\n          as modifying the License.\n\n      You may add Your own copyright statement to Your modifications and\n      may provide additional or different license terms and conditions\n      for use, reproduction, or distribution of Your modifications, or\n      for any such Derivative Works as a whole, provided Your use,\n      reproduction, and distribution of the Work otherwise complies with\n      the conditions stated in this License.\n\n   5. Submission of Contributions. Unless You explicitly state otherwise,\n      any Contribution intentionally submitted for inclusion in the Work\n      by You to the Licensor shall be under the terms and conditions of\n      this License, without any additional terms or conditions.\n      Notwithstanding the above, nothing herein shall supersede or modify\n      the terms of any separate license agreement you may have executed\n      with Licensor regarding such Contributions.\n\n   6. Trademarks. This License does not grant permission to use the trade\n      names, trademarks, service marks, or product names of the Licensor,\n      except as required for reasonable and customary use in describing the\n      origin of the Work and reproducing the content of the NOTICE file.\n\n   7. Disclaimer of Warranty. Unless required by applicable law or\n      agreed to in writing, Licensor provides the Work (and each\n      Contributor provides its Contributions) on an \"AS IS\" BASIS,\n      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or\n      implied, including, without limitation, any warranties or conditions\n      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A\n      PARTICULAR PURPOSE. You are solely responsible for determining the\n      appropriateness of using or redistributing the Work and assume any\n      risks associated with Your exercise of permissions under this License.\n\n   8. Limitation of Liability. In no event and under no legal theory,\n      whether in tort (including negligence), contract, or otherwise,\n      unless required by applicable law (such as deliberate and grossly\n      negligent acts) or agreed to in writing, shall any Contributor be\n      liable to You for damages, including any direct, indirect, special,\n      incidental, or consequential damages of any character arising as a\n      result of this License or out of the use or inability to use the\n      Work (including but not limited to damages for loss of goodwill,\n      work stoppage, computer failure or malfunction, or any and all\n      other commercial damages or losses), even if such Contributor\n      has been advised of the possibility of such damages.\n\n   9. Accepting Warranty or Additional Liability. While redistributing\n      the Work or Derivative Works thereof, You may choose to offer,\n      and charge a fee for, acceptance of support, warranty, indemnity,\n      or other liability obligations and/or rights consistent with this\n      License. However, in accepting such obligations, You may act only\n      on Your own behalf and on Your sole responsibility, not on behalf\n      of any other Contributor, and only if You agree to indemnify,\n      defend, and hold each Contributor harmless for any liability\n      incurred by, or claims asserted against, such Contributor by reason\n      of your accepting any such warranty or additional liability.\n\n   END OF TERMS AND CONDITIONS\n\n   APPENDIX: How to apply the Apache License to your work.\n\n      To apply the Apache License to your work, attach the following\n      boilerplate notice, with the fields enclosed by brackets \"[]\"\n      replaced with your own identifying information. (Don't include\n      the brackets!)  The text should be enclosed in the appropriate\n      comment syntax for the file format. We also recommend that a\n      file or class name and description of purpose be included on the\n      same \"printed page\" as the copyright notice for easier\n      identification within third-party archives.\n\n   Copyright [yyyy] [name of copyright owner]\n\n   Licensed under the Apache License, Version 2.0 (the \"License\");\n   you may not use this file except in compliance with the License.\n   You may obtain a copy of the License at\n\n       http://www.apache.org/licenses/LICENSE-2.0\n\n   Unless required by applicable law or agreed to in writing, software\n   distributed under the License is distributed on an \"AS IS\" BASIS,\n   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n   See the License for the specific language governing permissions and\n   limitations under the License.\n",
-    "ecosystem": "go",
-    "stale": true
+    "ecosystem": "go"
   },
   {
     "name": "github.com/gorilla/websocket",
-    "version": "v1.5.3",
+    "version": "e064f32e3674",
     "license": "BSD-2-Clause",
     "repository": "https://github.com/gorilla/websocket",
     "license_text": "Copyright (c) 2013 The Gorilla WebSocket Authors. All rights reserved.\n\nRedistribution and use in source and binary forms, with or without\nmodification, are permitted provided that the following conditions are met:\n\n  Redistributions of source code must retain the above copyright notice, this\n  list of conditions and the following disclaimer.\n\n  Redistributions in binary form must reproduce the above copyright notice,\n  this list of conditions and the following disclaimer in the documentation\n  and/or other materials provided with the distribution.\n\nTHIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS \"AS IS\" AND\nANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED\nWARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE\nDISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT HOLDER OR CONTRIBUTORS BE LIABLE\nFOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL\nDAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR\nSERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER\nCAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY,\nOR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE\nOF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.\n",
-    "ecosystem": "go",
-    "stale": true
+    "ecosystem": "go"
   },
   {
     "name": "github.com/grpc-ecosystem/grpc-gateway",
-    "version": "v2.28.0",
+    "version": "v2.29.0",
     "license": "BSD-3-Clause",
     "repository": "https://github.com/grpc-ecosystem/grpc-gateway",
     "license_text": "Copyright (c) 2015, Gengo, Inc.\nAll rights reserved.\n\nRedistribution and use in source and binary forms, with or without modification,\nare permitted provided that the following conditions are met:\n\n    * Redistributions of source code must retain the above copyright notice,\n      this list of conditions and the following disclaimer.\n\n    * Redistributions in binary form must reproduce the above copyright notice,\n      this list of conditions and the following disclaimer in the documentation\n      and/or other materials provided with the distribution.\n\n    * Neither the name of Gengo, Inc. nor the names of its\n      contributors may be used to endorse or promote products derived from this\n      software without specific prior written permission.\n\nTHIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS \"AS IS\" AND\nANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED\nWARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE\nDISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT OWNER OR CONTRIBUTORS BE LIABLE FOR\nANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES\n(INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES;\nLOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON\nANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT\n(INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS\nSOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.\n",
-    "ecosystem": "go",
-    "stale": true
+    "ecosystem": "go"
   },
   {
     "name": "github.com/grpc/grpc-go",
-    "version": "v1.80.0",
+    "version": "v1.83.1",
     "license": "Apache-2.0",
     "repository": "https://github.com/grpc/grpc-go",
     "license_text": "\n                                 Apache License\n                           Version 2.0, January 2004\n                        http://www.apache.org/licenses/\n\n   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION\n\n   1. Definitions.\n\n      \"License\" shall mean the terms and conditions for use, reproduction,\n      and distribution as defined by Sections 1 through 9 of this document.\n\n      \"Licensor\" shall mean the copyright owner or entity authorized by\n      the copyright owner that is granting the License.\n\n      \"Legal Entity\" shall mean the union of the acting entity and all\n      other entities that control, are controlled by, or are under common\n      control with that entity. For the purposes of this definition,\n      \"control\" means (i) the power, direct or indirect, to cause the\n      direction or management of such entity, whether by contract or\n      otherwise, or (ii) ownership of fifty percent (50%) or more of the\n      outstanding shares, or (iii) beneficial ownership of such entity.\n\n      \"You\" (or \"Your\") shall mean an individual or Legal Entity\n      exercising permissions granted by this License.\n\n      \"Source\" form shall mean the preferred form for making modifications,\n      including but not limited to software source code, documentation\n      source, and configuration files.\n\n      \"Object\" form shall mean any form resulting from mechanical\n      transformation or translation of a Source form, including but\n      not limited to compiled object code, generated documentation,\n      and conversions to other media types.\n\n      \"Work\" shall mean the work of authorship, whether in Source or\n      Object form, made available under the License, as indicated by a\n      copyright notice that is included in or attached to the work\n      (an example is provided in the Appendix below).\n\n      \"Derivative Works\" shall mean any work, whether in Source or Object\n      form, that is based on (or derived from) the Work and for which the\n      editorial revisions, annotations, elaborations, or other modifications\n      represent, as a whole, an original work of authorship. For the purposes\n      of this License, Derivative Works shall not include works that remain\n      separable from, or merely link (or bind by name) to the interfaces of,\n      the Work and Derivative Works thereof.\n\n      \"Contribution\" shall mean any work of authorship, including\n      the original version of the Work and any modifications or additions\n      to that Work or Derivative Works thereof, that is intentionally\n      submitted to Licensor for inclusion in the Work by the copyright owner\n      or by an individual or Legal Entity authorized to submit on behalf of\n      the copyright owner. For the purposes of this definition, \"submitted\"\n      means any form of electronic, verbal, or written communication sent\n      to the Licensor or its representatives, including but not limited to\n      communication on electronic mailing lists, source code control systems,\n      and issue tracking systems that are managed by, or on behalf of, the\n      Licensor for the purpose of discussing and improving the Work, but\n      excluding communication that is conspicuously marked or otherwise\n      designated in writing by the copyright owner as \"Not a Contribution.\"\n\n      \"Contributor\" shall mean Licensor and any individual or Legal Entity\n      on behalf of whom a Contribution has been received by Licensor and\n      subsequently incorporated within the Work.\n\n   2. Grant of Copyright License. Subject to the terms and conditions of\n      this License, each Contributor hereby grants to You a perpetual,\n      worldwide, non-exclusive, no-charge, royalty-free, irrevocable\n      copyright license to reproduce, prepare Derivative Works of,\n      publicly display, publicly perform, sublicense, and distribute the\n      Work and such Derivative Works in Source or Object form.\n\n   3. Grant of Patent License. Subject to the terms and conditions of\n      this License, each Contributor hereby grants to You a perpetual,\n      worldwide, non-exclusive, no-charge, royalty-free, irrevocable\n      (except as stated in this section) patent license to make, have made,\n      use, offer to sell, sell, import, and otherwise transfer the Work,\n      where such license applies only to those patent claims licensable\n      by such Contributor that are necessarily infringed by their\n      Contribution(s) alone or by combination of their Contribution(s)\n      with the Work to which such Contribution(s) was submitted. If You\n      institute patent litigation against any entity (including a\n      cross-claim or counterclaim in a lawsuit) alleging that the Work\n      or a Contribution incorporated within the Work constitutes direct\n      or contributory patent infringement, then any patent licenses\n      granted to You under this License for that Work shall terminate\n      as of the date such litigation is filed.\n\n   4. Redistribution. You may reproduce and distribute copies of the\n      Work or Derivative Works thereof in any medium, with or without\n      modifications, and in Source or Object form, provided that You\n      meet the following conditions:\n\n      (a) You must give any other recipients of the Work or\n          Derivative Works a copy of this License; and\n\n      (b) You must cause any modified files to carry prominent notices\n          stating that You changed the files; and\n\n      (c) You must retain, in the Source form of any Derivative Works\n          that You distribute, all copyright, patent, trademark, and\n          attribution notices from the Source form of the Work,\n          excluding those notices that do not pertain to any part of\n          the Derivative Works; and\n\n      (d) If the Work includes a \"NOTICE\" text file as part of its\n          distribution, then any Derivative Works that You distribute must\n          include a readable copy of the attribution notices contained\n          within such NOTICE file, excluding those notices that do not\n          pertain to any part of the Derivative Works, in at least one\n          of the following places: within a NOTICE text file distributed\n          as part of the Derivative Works; within the Source form or\n          documentation, if provided along with the Derivative Works; or,\n          within a display generated by the Derivative Works, if and\n          wherever such third-party notices normally appear. The contents\n          of the NOTICE file are for informational purposes only and\n          do not modify the License. You may add Your own attribution\n          notices within Derivative Works that You distribute, alongside\n          or as an addendum to the NOTICE text from the Work, provided\n          that such additional attribution notices cannot be construed\n          as modifying the License.\n\n      You may add Your own copyright statement to Your modifications and\n      may provide additional or different license terms and conditions\n      for use, reproduction, or distribution of Your modifications, or\n      for any such Derivative Works as a whole, provided Your use,\n      reproduction, and distribution of the Work otherwise complies with\n      the conditions stated in this License.\n\n   5. Submission of Contributions. Unless You explicitly state otherwise,\n      any Contribution intentionally submitted for inclusion in the Work\n      by You to the Licensor shall be under the terms and conditions of\n      this License, without any additional terms or conditions.\n      Notwithstanding the above, nothing herein shall supersede or modify\n      the terms of any separate license agreement you may have executed\n      with Licensor regarding such Contributions.\n\n   6. Trademarks. This License does not grant permission to use the trade\n      names, trademarks, service marks, or product names of the Licensor,\n      except as required for reasonable and customary use in describing the\n      origin of the Work and reproducing the content of the NOTICE file.\n\n   7. Disclaimer of Warranty. Unless required by applicable law or\n      agreed to in writing, Licensor provides the Work (and each\n      Contributor provides its Contributions) on an \"AS IS\" BASIS,\n      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or\n      implied, including, without limitation, any warranties or conditions\n      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A\n      PARTICULAR PURPOSE. You are solely responsible for determining the\n      appropriateness of using or redistributing the Work and assume any\n      risks associated with Your exercise of permissions under this License.\n\n   8. Limitation of Liability. In no event and under no legal theory,\n      whether in tort (including negligence), contract, or otherwise,\n      unless required by applicable law (such as deliberate and grossly\n      negligent acts) or agreed to in writing, shall any Contributor be\n      liable to You for damages, including any direct, indirect, special,\n      incidental, or consequential damages of any character arising as a\n      result of this License or out of the use or inability to use the\n      Work (including but not limited to damages for loss of goodwill,\n      work stoppage, computer failure or malfunction, or any and all\n      other commercial damages or losses), even if such Contributor\n      has been advised of the possibility of such damages.\n\n   9. Accepting Warranty or Additional Liability. While redistributing\n      the Work or Derivative Works thereof, You may choose to offer,\n      and charge a fee for, acceptance of support, warranty, indemnity,\n      or other liability obligations and/or rights consistent with this\n      License. However, in accepting such obligations, You may act only\n      on Your own behalf and on Your sole responsibility, not on behalf\n      of any other Contributor, and only if You agree to indemnify,\n      defend, and hold each Contributor harmless for any liability\n      incurred by, or claims asserted against, such Contributor by reason\n      of your accepting any such warranty or additional liability.\n\n   END OF TERMS AND CONDITIONS\n\n   APPENDIX: How to apply the Apache License to your work.\n\n      To apply the Apache License to your work, attach the following\n      boilerplate notice, with the fields enclosed by brackets \"[]\"\n      replaced with your own identifying information. (Don't include\n      the brackets!)  The text should be enclosed in the appropriate\n      comment syntax for the file format. We also recommend that a\n      file or class name and description of purpose be included on the\n      same \"printed page\" as the copyright notice for easier\n      identification within third-party archives.\n\n   Copyright [yyyy] [name of copyright owner]\n\n   Licensed under the Apache License, Version 2.0 (the \"License\");\n   you may not use this file except in compliance with the License.\n   You may obtain a copy of the License at\n\n       http://www.apache.org/licenses/LICENSE-2.0\n\n   Unless required by applicable law or agreed to in writing, software\n   distributed under the License is distributed on an \"AS IS\" BASIS,\n   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n   See the License for the specific language governing permissions and\n   limitations under the License.\n",
-    "ecosystem": "go",
-    "stale": true
+    "ecosystem": "go"
+  },
+  {
+    "name": "github.com/hashicorp/go-hclog",
+    "version": "v1.6.3",
+    "license": "MIT",
+    "repository": "https://github.com/hashicorp/go-hclog",
+    "license_text": "Copyright (c) 2017 HashiCorp, Inc.\n\nPermission is hereby granted, free of charge, to any person obtaining a copy\nof this software and associated documentation files (the \"Software\"), to deal\nin the Software without restriction, including without limitation the rights\nto use, copy, modify, merge, publish, distribute, sublicense, and/or sell\ncopies of the Software, and to permit persons to whom the Software is\nfurnished to do so, subject to the following conditions:\n\nThe above copyright notice and this permission notice shall be included in all\ncopies or substantial portions of the Software.\n\nTHE SOFTWARE IS PROVIDED \"AS IS\", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR\nIMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,\nFITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE\nAUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER\nLIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,\nOUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE\nSOFTWARE.\n",
+    "ecosystem": "go"
+  },
+  {
+    "name": "github.com/hashicorp/go-plugin",
+    "version": "v1.8.0",
+    "license": "MPL-2.0",
+    "repository": "https://github.com/hashicorp/go-plugin",
+    "license_text": "Copyright IBM Corp. 2016, 2025\n\nMozilla Public License, version 2.0\n\n1. Definitions\n\n1.1. “Contributor”\n\n     means each individual or legal entity that creates, contributes to the\n     creation of, or owns Covered Software.\n\n1.2. “Contributor Version”\n\n     means the combination of the Contributions of others (if any) used by a\n     Contributor and that particular Contributor’s Contribution.\n\n1.3. “Contribution”\n\n     means Covered Software of a particular Contributor.\n\n1.4. “Covered Software”\n\n     means Source Code Form to which the initial Contributor has attached the\n     notice in Exhibit A, the Executable Form of such Source Code Form, and\n     Modifications of such Source Code Form, in each case including portions\n     thereof.\n\n1.5. “Incompatible With Secondary Licenses”\n     means\n\n     a. that the initial Contributor has attached the notice described in\n        Exhibit B to the Covered Software; or\n\n     b. that the Covered Software was made available under the terms of version\n        1.1 or earlier of the License, but not also under the terms of a\n        Secondary License.\n\n1.6. “Executable Form”\n\n     means any form of the work other than Source Code Form.\n\n1.7. “Larger Work”\n\n     means a work that combines Covered Software with other material, in a separate\n     file or files, that is not Covered Software.\n\n1.8. “License”\n\n     means this document.\n\n1.9. “Licensable”\n\n     means having the right to grant, to the maximum extent possible, whether at the\n     time of the initial grant or subsequently, any and all of the rights conveyed by\n     this License.\n\n1.10. “Modifications”\n\n     means any of the following:\n\n     a. any file in Source Code Form that results from an addition to, deletion\n        from, or modification of the contents of Covered Software; or\n\n     b. any new file in Source Code Form that contains any Covered Software.\n\n1.11. “Patent Claims” of a Contributor\n\n      means any patent claim(s), including without limitation, method, process,\n      and apparatus claims, in any patent Licensable by such Contributor that\n      would be infringed, but for the grant of the License, by the making,\n      using, selling, offering for sale, having made, import, or transfer of\n      either its Contributions or its Contributor Version.\n\n1.12. “Secondary License”\n\n      means either the GNU General Public License, Version 2.0, the GNU Lesser\n      General Public License, Version 2.1, the GNU Affero General Public\n      License, Version 3.0, or any later versions of those licenses.\n\n1.13. “Source Code Form”\n\n      means the form of the work preferred for making modifications.\n\n1.14. “You” (or “Your”)\n\n      means an individual or a legal entity exercising rights under this\n      License. For legal entities, “You” includes any entity that controls, is\n      controlled by, or is under common control with You. For purposes of this\n      definition, “control” means (a) the power, direct or indirect, to cause\n      the direction or management of such entity, whether by contract or\n      otherwise, or (b) ownership of more than fifty percent (50%) of the\n      outstanding shares or beneficial ownership of such entity.\n\n\n2. License Grants and Conditions\n\n2.1. Grants\n\n     Each Contributor hereby grants You a world-wide, royalty-free,\n     non-exclusive license:\n\n     a. under intellectual property rights (other than patent or trademark)\n        Licensable by such Contributor to use, reproduce, make available,\n        modify, display, perform, distribute, and otherwise exploit its\n        Contributions, either on an unmodified basis, with Modifications, or as\n        part of a Larger Work; and\n\n     b. under Patent Claims of such Contributor to make, use, sell, offer for\n        sale, have made, import, and otherwise transfer either its Contributions\n        or its Contributor Version.\n\n2.2. Effective Date\n\n     The licenses granted in Section 2.1 with respect to any Contribution become\n     effective for each Contribution on the date the Contributor first distributes\n     such Contribution.\n\n2.3. Limitations on Grant Scope\n\n     The licenses granted in this Section 2 are the only rights granted under this\n     License. No additional rights or licenses will be implied from the distribution\n     or licensing of Covered Software under this License. Notwithstanding Section\n     2.1(b) above, no patent license is granted by a Contributor:\n\n     a. for any code that a Contributor has removed from Covered Software; or\n\n     b. for infringements caused by: (i) Your and any other third party’s\n        modifications of Covered Software, or (ii) the combination of its\n        Contributions with other software (except as part of its Contributor\n        Version); or\n\n     c. under Patent Claims infringed by Covered Software in the absence of its\n        Contributions.\n\n     This License does not grant any rights in the trademarks, service marks, or\n     logos of any Contributor (except as may be necessary to comply with the\n     notice requirements in Section 3.4).\n\n2.4. Subsequent Licenses\n\n     No Contributor makes additional grants as a result of Your choice to\n     distribute the Covered Software under a subsequent version of this License\n     (see Section 10.2) or under the terms of a Secondary License (if permitted\n     under the terms of Section 3.3).\n\n2.5. Representation\n\n     Each Contributor represents that the Contributor believes its Contributions\n     are its original creation(s) or it has sufficient rights to grant the\n     rights to its Contributions conveyed by this License.\n\n2.6. Fair Use\n\n     This License is not intended to limit any rights You have under applicable\n     copyright doctrines of fair use, fair dealing, or other equivalents.\n\n2.7. Conditions\n\n     Sections 3.1, 3.2, 3.3, and 3.4 are conditions of the licenses granted in\n     Section 2.1.\n\n\n3. Responsibilities\n\n3.1. Distribution of Source Form\n\n     All distribution of Covered Software in Source Code Form, including any\n     Modifications that You create or to which You contribute, must be under the\n     terms of this License. You must inform recipients that the Source Code Form\n     of the Covered Software is governed by the terms of this License, and how\n     they can obtain a copy of this License. You may not attempt to alter or\n     restrict the recipients’ rights in the Source Code Form.\n\n3.2. Distribution of Executable Form\n\n     If You distribute Covered Software in Executable Form then:\n\n     a. such Covered Software must also be made available in Source Code Form,\n        as described in Section 3.1, and You must inform recipients of the\n        Executable Form how they can obtain a copy of such Source Code Form by\n        reasonable means in a timely manner, at a charge no more than the cost\n        of distribution to the recipient; and\n\n     b. You may distribute such Executable Form under the terms of this License,\n        or sublicense it under different terms, provided that the license for\n        the Executable Form does not attempt to limit or alter the recipients’\n        rights in the Source Code Form under this License.\n\n3.3. Distribution of a Larger Work\n\n     You may create and distribute a Larger Work under terms of Your choice,\n     provided that You also comply with the requirements of this License for the\n     Covered Software. If the Larger Work is a combination of Covered Software\n     with a work governed by one or more Secondary Licenses, and the Covered\n     Software is not Incompatible With Secondary Licenses, this License permits\n     You to additionally distribute such Covered Software under the terms of\n     such Secondary License(s), so that the recipient of the Larger Work may, at\n     their option, further distribute the Covered Software under the terms of\n     either this License or such Secondary License(s).\n\n3.4. Notices\n\n     You may not remove or alter the substance of any license notices (including\n     copyright notices, patent notices, disclaimers of warranty, or limitations\n     of liability) contained within the Source Code Form of the Covered\n     Software, except that You may alter any license notices to the extent\n     required to remedy known factual inaccuracies.\n\n3.5. Application of Additional Terms\n\n     You may choose to offer, and to charge a fee for, warranty, support,\n     indemnity or liability obligations to one or more recipients of Covered\n     Software. However, You may do so only on Your own behalf, and not on behalf\n     of any Contributor. You must make it absolutely clear that any such\n     warranty, support, indemnity, or liability obligation is offered by You\n     alone, and You hereby agree to indemnify every Contributor for any\n     liability incurred by such Contributor as a result of warranty, support,\n     indemnity or liability terms You offer. You may include additional\n     disclaimers of warranty and limitations of liability specific to any\n     jurisdiction.\n\n4. Inability to Comply Due to Statute or Regulation\n\n   If it is impossible for You to comply with any of the terms of this License\n   with respect to some or all of the Covered Software due to statute, judicial\n   order, or regulation then You must: (a) comply with the terms of this License\n   to the maximum extent possible; and (b) describe the limitations and the code\n   they affect. Such description must be placed in a text file included with all\n   distributions of the Covered Software under this License. Except to the\n   extent prohibited by statute or regulation, such description must be\n   sufficiently detailed for a recipient of ordinary skill to be able to\n   understand it.\n\n5. Termination\n\n5.1. The rights granted under this License will terminate automatically if You\n     fail to comply with any of its terms. However, if You become compliant,\n     then the rights granted under this License from a particular Contributor\n     are reinstated (a) provisionally, unless and until such Contributor\n     explicitly and finally terminates Your grants, and (b) on an ongoing basis,\n     if such Contributor fails to notify You of the non-compliance by some\n     reasonable means prior to 60 days after You have come back into compliance.\n     Moreover, Your grants from a particular Contributor are reinstated on an\n     ongoing basis if such Contributor notifies You of the non-compliance by\n     some reasonable means, this is the first time You have received notice of\n     non-compliance with this License from such Contributor, and You become\n     compliant prior to 30 days after Your receipt of the notice.\n\n5.2. If You initiate litigation against any entity by asserting a patent\n     infringement claim (excluding declaratory judgment actions, counter-claims,\n     and cross-claims) alleging that a Contributor Version directly or\n     indirectly infringes any patent, then the rights granted to You by any and\n     all Contributors for the Covered Software under Section 2.1 of this License\n     shall terminate.\n\n5.3. In the event of termination under Sections 5.1 or 5.2 above, all end user\n     license agreements (excluding distributors and resellers) which have been\n     validly granted by You or Your distributors under this License prior to\n     termination shall survive termination.\n\n6. Disclaimer of Warranty\n\n   Covered Software is provided under this License on an “as is” basis, without\n   warranty of any kind, either expressed, implied, or statutory, including,\n   without limitation, warranties that the Covered Software is free of defects,\n   merchantable, fit for a particular purpose or non-infringing. The entire\n   risk as to the quality and performance of the Covered Software is with You.\n   Should any Covered Software prove defective in any respect, You (not any\n   Contributor) assume the cost of any necessary servicing, repair, or\n   correction. This disclaimer of warranty constitutes an essential part of this\n   License. No use of  any Covered Software is authorized under this License\n   except under this disclaimer.\n\n7. Limitation of Liability\n\n   Under no circumstances and under no legal theory, whether tort (including\n   negligence), contract, or otherwise, shall any Contributor, or anyone who\n   distributes Covered Software as permitted above, be liable to You for any\n   direct, indirect, special, incidental, or consequential damages of any\n   character including, without limitation, damages for lost profits, loss of\n   goodwill, work stoppage, computer failure or malfunction, or any and all\n   other commercial damages or losses, even if such party shall have been\n   informed of the possibility of such damages. This limitation of liability\n   shall not apply to liability for death or personal injury resulting from such\n   party’s negligence to the extent applicable law prohibits such limitation.\n   Some jurisdictions do not allow the exclusion or limitation of incidental or\n   consequential damages, so this exclusion and limitation may not apply to You.\n\n8. Litigation\n\n   Any litigation relating to this License may be brought only in the courts of\n   a jurisdiction where the defendant maintains its principal place of business\n   and such litigation shall be governed by laws of that jurisdiction, without\n   reference to its conflict-of-law provisions. Nothing in this Section shall\n   prevent a party’s ability to bring cross-claims or counter-claims.\n\n9. Miscellaneous\n\n   This License represents the complete agreement concerning the subject matter\n   hereof. If any provision of this License is held to be unenforceable, such\n   provision shall be reformed only to the extent necessary to make it\n   enforceable. Any law or regulation which provides that the language of a\n   contract shall be construed against the drafter shall not be used to construe\n   this License against a Contributor.\n\n\n10. Versions of the License\n\n10.1. New Versions\n\n      Mozilla Foundation is the license steward. Except as provided in Section\n      10.3, no one other than the license steward has the right to modify or\n      publish new versions of this License. Each version will be given a\n      distinguishing version number.\n\n10.2. Effect of New Versions\n\n      You may distribute the Covered Software under the terms of the version of\n      the License under which You originally received the Covered Software, or\n      under the terms of any subsequent version published by the license\n      steward.\n\n10.3. Modified Versions\n\n      If you create software not governed by this License, and you want to\n      create a new license for such software, you may create and use a modified\n      version of this License if you rename the license and remove any\n      references to the name of the license steward (except to note that such\n      modified license differs from this License).\n\n10.4. Distributing Source Code Form that is Incompatible With Secondary Licenses\n      If You choose to distribute Source Code Form that is Incompatible With\n      Secondary Licenses under the terms of this version of the License, the\n      notice described in Exhibit B of this License must be attached.\n\nExhibit A - Source Code Form License Notice\n\n      This Source Code Form is subject to the\n      terms of the Mozilla Public License, v.\n      2.0. If a copy of the MPL was not\n      distributed with this file, You can\n      obtain one at\n      http://mozilla.org/MPL/2.0/.\n\nIf it is not possible or desirable to put the notice in a particular file, then\nYou may include the notice in a location (such as a LICENSE file in a relevant\ndirectory) where a recipient would be likely to look for such a notice.\n\nYou may add additional accurate notices of copyright ownership.\n\nExhibit B - “Incompatible With Secondary Licenses” Notice\n\n      This Source Code Form is “Incompatible\n      With Secondary Licenses”, as defined by\n      the Mozilla Public License, v. 2.0.\n",
+    "ecosystem": "go"
   },
   {
     "name": "github.com/hashicorp/hcl",
@@ -293,17 +349,15 @@
     "license": "MPL-2.0",
     "repository": "https://github.com/hashicorp/hcl",
     "license_text": "Mozilla Public License, version 2.0\n\n1. Definitions\n\n1.1. “Contributor”\n\n     means each individual or legal entity that creates, contributes to the\n     creation of, or owns Covered Software.\n\n1.2. “Contributor Version”\n\n     means the combination of the Contributions of others (if any) used by a\n     Contributor and that particular Contributor’s Contribution.\n\n1.3. “Contribution”\n\n     means Covered Software of a particular Contributor.\n\n1.4. “Covered Software”\n\n     means Source Code Form to which the initial Contributor has attached the\n     notice in Exhibit A, the Executable Form of such Source Code Form, and\n     Modifications of such Source Code Form, in each case including portions\n     thereof.\n\n1.5. “Incompatible With Secondary Licenses”\n     means\n\n     a. that the initial Contributor has attached the notice described in\n        Exhibit B to the Covered Software; or\n\n     b. that the Covered Software was made available under the terms of version\n        1.1 or earlier of the License, but not also under the terms of a\n        Secondary License.\n\n1.6. “Executable Form”\n\n     means any form of the work other than Source Code Form.\n\n1.7. “Larger Work”\n\n     means a work that combines Covered Software with other material, in a separate\n     file or files, that is not Covered Software.\n\n1.8. “License”\n\n     means this document.\n\n1.9. “Licensable”\n\n     means having the right to grant, to the maximum extent possible, whether at the\n     time of the initial grant or subsequently, any and all of the rights conveyed by\n     this License.\n\n1.10. “Modifications”\n\n     means any of the following:\n\n     a. any file in Source Code Form that results from an addition to, deletion\n        from, or modification of the contents of Covered Software; or\n\n     b. any new file in Source Code Form that contains any Covered Software.\n\n1.11. “Patent Claims” of a Contributor\n\n      means any patent claim(s), including without limitation, method, process,\n      and apparatus claims, in any patent Licensable by such Contributor that\n      would be infringed, but for the grant of the License, by the making,\n      using, selling, offering for sale, having made, import, or transfer of\n      either its Contributions or its Contributor Version.\n\n1.12. “Secondary License”\n\n      means either the GNU General Public License, Version 2.0, the GNU Lesser\n      General Public License, Version 2.1, the GNU Affero General Public\n      License, Version 3.0, or any later versions of those licenses.\n\n1.13. “Source Code Form”\n\n      means the form of the work preferred for making modifications.\n\n1.14. “You” (or “Your”)\n\n      means an individual or a legal entity exercising rights under this\n      License. For legal entities, “You” includes any entity that controls, is\n      controlled by, or is under common control with You. For purposes of this\n      definition, “control” means (a) the power, direct or indirect, to cause\n      the direction or management of such entity, whether by contract or\n      otherwise, or (b) ownership of more than fifty percent (50%) of the\n      outstanding shares or beneficial ownership of such entity.\n\n\n2. License Grants and Conditions\n\n2.1. Grants\n\n     Each Contributor hereby grants You a world-wide, royalty-free,\n     non-exclusive license:\n\n     a. under intellectual property rights (other than patent or trademark)\n        Licensable by such Contributor to use, reproduce, make available,\n        modify, display, perform, distribute, and otherwise exploit its\n        Contributions, either on an unmodified basis, with Modifications, or as\n        part of a Larger Work; and\n\n     b. under Patent Claims of such Contributor to make, use, sell, offer for\n        sale, have made, import, and otherwise transfer either its Contributions\n        or its Contributor Version.\n\n2.2. Effective Date\n\n     The licenses granted in Section 2.1 with respect to any Contribution become\n     effective for each Contribution on the date the Contributor first distributes\n     such Contribution.\n\n2.3. Limitations on Grant Scope\n\n     The licenses granted in this Section 2 are the only rights granted under this\n     License. No additional rights or licenses will be implied from the distribution\n     or licensing of Covered Software under this License. Notwithstanding Section\n     2.1(b) above, no patent license is granted by a Contributor:\n\n     a. for any code that a Contributor has removed from Covered Software; or\n\n     b. for infringements caused by: (i) Your and any other third party’s\n        modifications of Covered Software, or (ii) the combination of its\n        Contributions with other software (except as part of its Contributor\n        Version); or\n\n     c. under Patent Claims infringed by Covered Software in the absence of its\n        Contributions.\n\n     This License does not grant any rights in the trademarks, service marks, or\n     logos of any Contributor (except as may be necessary to comply with the\n     notice requirements in Section 3.4).\n\n2.4. Subsequent Licenses\n\n     No Contributor makes additional grants as a result of Your choice to\n     distribute the Covered Software under a subsequent version of this License\n     (see Section 10.2) or under the terms of a Secondary License (if permitted\n     under the terms of Section 3.3).\n\n2.5. Representation\n\n     Each Contributor represents that the Contributor believes its Contributions\n     are its original creation(s) or it has sufficient rights to grant the\n     rights to its Contributions conveyed by this License.\n\n2.6. Fair Use\n\n     This License is not intended to limit any rights You have under applicable\n     copyright doctrines of fair use, fair dealing, or other equivalents.\n\n2.7. Conditions\n\n     Sections 3.1, 3.2, 3.3, and 3.4 are conditions of the licenses granted in\n     Section 2.1.\n\n\n3. Responsibilities\n\n3.1. Distribution of Source Form\n\n     All distribution of Covered Software in Source Code Form, including any\n     Modifications that You create or to which You contribute, must be under the\n     terms of this License. You must inform recipients that the Source Code Form\n     of the Covered Software is governed by the terms of this License, and how\n     they can obtain a copy of this License. You may not attempt to alter or\n     restrict the recipients’ rights in the Source Code Form.\n\n3.2. Distribution of Executable Form\n\n     If You distribute Covered Software in Executable Form then:\n\n     a. such Covered Software must also be made available in Source Code Form,\n        as described in Section 3.1, and You must inform recipients of the\n        Executable Form how they can obtain a copy of such Source Code Form by\n        reasonable means in a timely manner, at a charge no more than the cost\n        of distribution to the recipient; and\n\n     b. You may distribute such Executable Form under the terms of this License,\n        or sublicense it under different terms, provided that the license for\n        the Executable Form does not attempt to limit or alter the recipients’\n        rights in the Source Code Form under this License.\n\n3.3. Distribution of a Larger Work\n\n     You may create and distribute a Larger Work under terms of Your choice,\n     provided that You also comply with the requirements of this License for the\n     Covered Software. If the Larger Work is a combination of Covered Software\n     with a work governed by one or more Secondary Licenses, and the Covered\n     Software is not Incompatible With Secondary Licenses, this License permits\n     You to additionally distribute such Covered Software under the terms of\n     such Secondary License(s), so that the recipient of the Larger Work may, at\n     their option, further distribute the Covered Software under the terms of\n     either this License or such Secondary License(s).\n\n3.4. Notices\n\n     You may not remove or alter the substance of any license notices (including\n     copyright notices, patent notices, disclaimers of warranty, or limitations\n     of liability) contained within the Source Code Form of the Covered\n     Software, except that You may alter any license notices to the extent\n     required to remedy known factual inaccuracies.\n\n3.5. Application of Additional Terms\n\n     You may choose to offer, and to charge a fee for, warranty, support,\n     indemnity or liability obligations to one or more recipients of Covered\n     Software. However, You may do so only on Your own behalf, and not on behalf\n     of any Contributor. You must make it absolutely clear that any such\n     warranty, support, indemnity, or liability obligation is offered by You\n     alone, and You hereby agree to indemnify every Contributor for any\n     liability incurred by such Contributor as a result of warranty, support,\n     indemnity or liability terms You offer. You may include additional\n     disclaimers of warranty and limitations of liability specific to any\n     jurisdiction.\n\n4. Inability to Comply Due to Statute or Regulation\n\n   If it is impossible for You to comply with any of the terms of this License\n   with respect to some or all of the Covered Software due to statute, judicial\n   order, or regulation then You must: (a) comply with the terms of this License\n   to the maximum extent possible; and (b) describe the limitations and the code\n   they affect. Such description must be placed in a text file included with all\n   distributions of the Covered Software under this License. Except to the\n   extent prohibited by statute or regulation, such description must be\n   sufficiently detailed for a recipient of ordinary skill to be able to\n   understand it.\n\n5. Termination\n\n5.1. The rights granted under this License will terminate automatically if You\n     fail to comply with any of its terms. However, if You become compliant,\n     then the rights granted under this License from a particular Contributor\n     are reinstated (a) provisionally, unless and until such Contributor\n     explicitly and finally terminates Your grants, and (b) on an ongoing basis,\n     if such Contributor fails to notify You of the non-compliance by some\n     reasonable means prior to 60 days after You have come back into compliance.\n     Moreover, Your grants from a particular Contributor are reinstated on an\n     ongoing basis if such Contributor notifies You of the non-compliance by\n     some reasonable means, this is the first time You have received notice of\n     non-compliance with this License from such Contributor, and You become\n     compliant prior to 30 days after Your receipt of the notice.\n\n5.2. If You initiate litigation against any entity by asserting a patent\n     infringement claim (excluding declaratory judgment actions, counter-claims,\n     and cross-claims) alleging that a Contributor Version directly or\n     indirectly infringes any patent, then the rights granted to You by any and\n     all Contributors for the Covered Software under Section 2.1 of this License\n     shall terminate.\n\n5.3. In the event of termination under Sections 5.1 or 5.2 above, all end user\n     license agreements (excluding distributors and resellers) which have been\n     validly granted by You or Your distributors under this License prior to\n     termination shall survive termination.\n\n6. Disclaimer of Warranty\n\n   Covered Software is provided under this License on an “as is” basis, without\n   warranty of any kind, either expressed, implied, or statutory, including,\n   without limitation, warranties that the Covered Software is free of defects,\n   merchantable, fit for a particular purpose or non-infringing. The entire\n   risk as to the quality and performance of the Covered Software is with You.\n   Should any Covered Software prove defective in any respect, You (not any\n   Contributor) assume the cost of any necessary servicing, repair, or\n   correction. This disclaimer of warranty constitutes an essential part of this\n   License. No use of  any Covered Software is authorized under this License\n   except under this disclaimer.\n\n7. Limitation of Liability\n\n   Under no circumstances and under no legal theory, whether tort (including\n   negligence), contract, or otherwise, shall any Contributor, or anyone who\n   distributes Covered Software as permitted above, be liable to You for any\n   direct, indirect, special, incidental, or consequential damages of any\n   character including, without limitation, damages for lost profits, loss of\n   goodwill, work stoppage, computer failure or malfunction, or any and all\n   other commercial damages or losses, even if such party shall have been\n   informed of the possibility of such damages. This limitation of liability\n   shall not apply to liability for death or personal injury resulting from such\n   party’s negligence to the extent applicable law prohibits such limitation.\n   Some jurisdictions do not allow the exclusion or limitation of incidental or\n   consequential damages, so this exclusion and limitation may not apply to You.\n\n8. Litigation\n\n   Any litigation relating to this License may be brought only in the courts of\n   a jurisdiction where the defendant maintains its principal place of business\n   and such litigation shall be governed by laws of that jurisdiction, without\n   reference to its conflict-of-law provisions. Nothing in this Section shall\n   prevent a party’s ability to bring cross-claims or counter-claims.\n\n9. Miscellaneous\n\n   This License represents the complete agreement concerning the subject matter\n   hereof. If any provision of this License is held to be unenforceable, such\n   provision shall be reformed only to the extent necessary to make it\n   enforceable. Any law or regulation which provides that the language of a\n   contract shall be construed against the drafter shall not be used to construe\n   this License against a Contributor.\n\n\n10. Versions of the License\n\n10.1. New Versions\n\n      Mozilla Foundation is the license steward. Except as provided in Section\n      10.3, no one other than the license steward has the right to modify or\n      publish new versions of this License. Each version will be given a\n      distinguishing version number.\n\n10.2. Effect of New Versions\n\n      You may distribute the Covered Software under the terms of the version of\n      the License under which You originally received the Covered Software, or\n      under the terms of any subsequent version published by the license\n      steward.\n\n10.3. Modified Versions\n\n      If you create software not governed by this License, and you want to\n      create a new license for such software, you may create and use a modified\n      version of this License if you rename the license and remove any\n      references to the name of the license steward (except to note that such\n      modified license differs from this License).\n\n10.4. Distributing Source Code Form that is Incompatible With Secondary Licenses\n      If You choose to distribute Source Code Form that is Incompatible With\n      Secondary Licenses under the terms of this version of the License, the\n      notice described in Exhibit B of this License must be attached.\n\nExhibit A - Source Code Form License Notice\n\n      This Source Code Form is subject to the\n      terms of the Mozilla Public License, v.\n      2.0. If a copy of the MPL was not\n      distributed with this file, You can\n      obtain one at\n      http://mozilla.org/MPL/2.0/.\n\nIf it is not possible or desirable to put the notice in a particular file, then\nYou may include the notice in a location (such as a LICENSE file in a relevant\ndirectory) where a recipient would be likely to look for such a notice.\n\nYou may add additional accurate notices of copyright ownership.\n\nExhibit B - “Incompatible With Secondary Licenses” Notice\n\n      This Source Code Form is “Incompatible\n      With Secondary Licenses”, as defined by\n      the Mozilla Public License, v. 2.0.\n\n",
-    "ecosystem": "go",
-    "stale": true
+    "ecosystem": "go"
   },
   {
-    "name": "github.com/invopop/jsonschema",
-    "version": "v0.13.0",
-    "license": "MIT",
-    "repository": "https://github.com/invopop/jsonschema",
-    "license_text": "Copyright (C) 2014 Alec Thomas\n\nPermission is hereby granted, free of charge, to any person obtaining a copy of\nthis software and associated documentation files (the \"Software\"), to deal in\nthe Software without restriction, including without limitation the rights to\nuse, copy, modify, merge, publish, distribute, sublicense, and/or sell copies\nof the Software, and to permit persons to whom the Software is furnished to do\nso, subject to the following conditions:\n\nThe above copyright notice and this permission notice shall be included in all\ncopies or substantial portions of the Software.\n\nTHE SOFTWARE IS PROVIDED \"AS IS\", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR\nIMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,\nFITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE\nAUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER\nLIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,\nOUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE\nSOFTWARE.\n",
-    "ecosystem": "go",
-    "stale": true
+    "name": "github.com/hashicorp/yamux",
+    "version": "v0.1.2",
+    "license": "MPL-2.0",
+    "repository": "https://github.com/hashicorp/yamux",
+    "license_text": "Copyright (c) 2014 HashiCorp, Inc.\n\nMozilla Public License, version 2.0\n\n1. Definitions\n\n1.1. \"Contributor\"\n\n     means each individual or legal entity that creates, contributes to the\n     creation of, or owns Covered Software.\n\n1.2. \"Contributor Version\"\n\n     means the combination of the Contributions of others (if any) used by a\n     Contributor and that particular Contributor's Contribution.\n\n1.3. \"Contribution\"\n\n     means Covered Software of a particular Contributor.\n\n1.4. \"Covered Software\"\n\n     means Source Code Form to which the initial Contributor has attached the\n     notice in Exhibit A, the Executable Form of such Source Code Form, and\n     Modifications of such Source Code Form, in each case including portions\n     thereof.\n\n1.5. \"Incompatible With Secondary Licenses\"\n     means\n\n     a. that the initial Contributor has attached the notice described in\n        Exhibit B to the Covered Software; or\n\n     b. that the Covered Software was made available under the terms of\n        version 1.1 or earlier of the License, but not also under the terms of\n        a Secondary License.\n\n1.6. \"Executable Form\"\n\n     means any form of the work other than Source Code Form.\n\n1.7. \"Larger Work\"\n\n     means a work that combines Covered Software with other material, in a\n     separate file or files, that is not Covered Software.\n\n1.8. \"License\"\n\n     means this document.\n\n1.9. \"Licensable\"\n\n     means having the right to grant, to the maximum extent possible, whether\n     at the time of the initial grant or subsequently, any and all of the\n     rights conveyed by this License.\n\n1.10. \"Modifications\"\n\n     means any of the following:\n\n     a. any file in Source Code Form that results from an addition to,\n        deletion from, or modification of the contents of Covered Software; or\n\n     b. any new file in Source Code Form that contains any Covered Software.\n\n1.11. \"Patent Claims\" of a Contributor\n\n      means any patent claim(s), including without limitation, method,\n      process, and apparatus claims, in any patent Licensable by such\n      Contributor that would be infringed, but for the grant of the License,\n      by the making, using, selling, offering for sale, having made, import,\n      or transfer of either its Contributions or its Contributor Version.\n\n1.12. \"Secondary License\"\n\n      means either the GNU General Public License, Version 2.0, the GNU Lesser\n      General Public License, Version 2.1, the GNU Affero General Public\n      License, Version 3.0, or any later versions of those licenses.\n\n1.13. \"Source Code Form\"\n\n      means the form of the work preferred for making modifications.\n\n1.14. \"You\" (or \"Your\")\n\n      means an individual or a legal entity exercising rights under this\n      License. For legal entities, \"You\" includes any entity that controls, is\n      controlled by, or is under common control with You. For purposes of this\n      definition, \"control\" means (a) the power, direct or indirect, to cause\n      the direction or management of such entity, whether by contract or\n      otherwise, or (b) ownership of more than fifty percent (50%) of the\n      outstanding shares or beneficial ownership of such entity.\n\n\n2. License Grants and Conditions\n\n2.1. Grants\n\n     Each Contributor hereby grants You a world-wide, royalty-free,\n     non-exclusive license:\n\n     a. under intellectual property rights (other than patent or trademark)\n        Licensable by such Contributor to use, reproduce, make available,\n        modify, display, perform, distribute, and otherwise exploit its\n        Contributions, either on an unmodified basis, with Modifications, or\n        as part of a Larger Work; and\n\n     b. under Patent Claims of such Contributor to make, use, sell, offer for\n        sale, have made, import, and otherwise transfer either its\n        Contributions or its Contributor Version.\n\n2.2. Effective Date\n\n     The licenses granted in Section 2.1 with respect to any Contribution\n     become effective for each Contribution on the date the Contributor first\n     distributes such Contribution.\n\n2.3. Limitations on Grant Scope\n\n     The licenses granted in this Section 2 are the only rights granted under\n     this License. No additional rights or licenses will be implied from the\n     distribution or licensing of Covered Software under this License.\n     Notwithstanding Section 2.1(b) above, no patent license is granted by a\n     Contributor:\n\n     a. for any code that a Contributor has removed from Covered Software; or\n\n     b. for infringements caused by: (i) Your and any other third party's\n        modifications of Covered Software, or (ii) the combination of its\n        Contributions with other software (except as part of its Contributor\n        Version); or\n\n     c. under Patent Claims infringed by Covered Software in the absence of\n        its Contributions.\n\n     This License does not grant any rights in the trademarks, service marks,\n     or logos of any Contributor (except as may be necessary to comply with\n     the notice requirements in Section 3.4).\n\n2.4. Subsequent Licenses\n\n     No Contributor makes additional grants as a result of Your choice to\n     distribute the Covered Software under a subsequent version of this\n     License (see Section 10.2) or under the terms of a Secondary License (if\n     permitted under the terms of Section 3.3).\n\n2.5. Representation\n\n     Each Contributor represents that the Contributor believes its\n     Contributions are its original creation(s) or it has sufficient rights to\n     grant the rights to its Contributions conveyed by this License.\n\n2.6. Fair Use\n\n     This License is not intended to limit any rights You have under\n     applicable copyright doctrines of fair use, fair dealing, or other\n     equivalents.\n\n2.7. Conditions\n\n     Sections 3.1, 3.2, 3.3, and 3.4 are conditions of the licenses granted in\n     Section 2.1.\n\n\n3. Responsibilities\n\n3.1. Distribution of Source Form\n\n     All distribution of Covered Software in Source Code Form, including any\n     Modifications that You create or to which You contribute, must be under\n     the terms of this License. You must inform recipients that the Source\n     Code Form of the Covered Software is governed by the terms of this\n     License, and how they can obtain a copy of this License. You may not\n     attempt to alter or restrict the recipients' rights in the Source Code\n     Form.\n\n3.2. Distribution of Executable Form\n\n     If You distribute Covered Software in Executable Form then:\n\n     a. such Covered Software must also be made available in Source Code Form,\n        as described in Section 3.1, and You must inform recipients of the\n        Executable Form how they can obtain a copy of such Source Code Form by\n        reasonable means in a timely manner, at a charge no more than the cost\n        of distribution to the recipient; and\n\n     b. You may distribute such Executable Form under the terms of this\n        License, or sublicense it under different terms, provided that the\n        license for the Executable Form does not attempt to limit or alter the\n        recipients' rights in the Source Code Form under this License.\n\n3.3. Distribution of a Larger Work\n\n     You may create and distribute a Larger Work under terms of Your choice,\n     provided that You also comply with the requirements of this License for\n     the Covered Software. If the Larger Work is a combination of Covered\n     Software with a work governed by one or more Secondary Licenses, and the\n     Covered Software is not Incompatible With Secondary Licenses, this\n     License permits You to additionally distribute such Covered Software\n     under the terms of such Secondary License(s), so that the recipient of\n     the Larger Work may, at their option, further distribute the Covered\n     Software under the terms of either this License or such Secondary\n     License(s).\n\n3.4. Notices\n\n     You may not remove or alter the substance of any license notices\n     (including copyright notices, patent notices, disclaimers of warranty, or\n     limitations of liability) contained within the Source Code Form of the\n     Covered Software, except that You may alter any license notices to the\n     extent required to remedy known factual inaccuracies.\n\n3.5. Application of Additional Terms\n\n     You may choose to offer, and to charge a fee for, warranty, support,\n     indemnity or liability obligations to one or more recipients of Covered\n     Software. However, You may do so only on Your own behalf, and not on\n     behalf of any Contributor. You must make it absolutely clear that any\n     such warranty, support, indemnity, or liability obligation is offered by\n     You alone, and You hereby agree to indemnify every Contributor for any\n     liability incurred by such Contributor as a result of warranty, support,\n     indemnity or liability terms You offer. You may include additional\n     disclaimers of warranty and limitations of liability specific to any\n     jurisdiction.\n\n4. Inability to Comply Due to Statute or Regulation\n\n   If it is impossible for You to comply with any of the terms of this License\n   with respect to some or all of the Covered Software due to statute,\n   judicial order, or regulation then You must: (a) comply with the terms of\n   this License to the maximum extent possible; and (b) describe the\n   limitations and the code they affect. Such description must be placed in a\n   text file included with all distributions of the Covered Software under\n   this License. Except to the extent prohibited by statute or regulation,\n   such description must be sufficiently detailed for a recipient of ordinary\n   skill to be able to understand it.\n\n5. Termination\n\n5.1. The rights granted under this License will terminate automatically if You\n     fail to comply with any of its terms. However, if You become compliant,\n     then the rights granted under this License from a particular Contributor\n     are reinstated (a) provisionally, unless and until such Contributor\n     explicitly and finally terminates Your grants, and (b) on an ongoing\n     basis, if such Contributor fails to notify You of the non-compliance by\n     some reasonable means prior to 60 days after You have come back into\n     compliance. Moreover, Your grants from a particular Contributor are\n     reinstated on an ongoing basis if such Contributor notifies You of the\n     non-compliance by some reasonable means, this is the first time You have\n     received notice of non-compliance with this License from such\n     Contributor, and You become compliant prior to 30 days after Your receipt\n     of the notice.\n\n5.2. If You initiate litigation against any entity by asserting a patent\n     infringement claim (excluding declaratory judgment actions,\n     counter-claims, and cross-claims) alleging that a Contributor Version\n     directly or indirectly infringes any patent, then the rights granted to\n     You by any and all Contributors for the Covered Software under Section\n     2.1 of this License shall terminate.\n\n5.3. In the event of termination under Sections 5.1 or 5.2 above, all end user\n     license agreements (excluding distributors and resellers) which have been\n     validly granted by You or Your distributors under this License prior to\n     termination shall survive termination.\n\n6. Disclaimer of Warranty\n\n   Covered Software is provided under this License on an \"as is\" basis,\n   without warranty of any kind, either expressed, implied, or statutory,\n   including, without limitation, warranties that the Covered Software is free\n   of defects, merchantable, fit for a particular purpose or non-infringing.\n   The entire risk as to the quality and performance of the Covered Software\n   is with You. Should any Covered Software prove defective in any respect,\n   You (not any Contributor) assume the cost of any necessary servicing,\n   repair, or correction. This disclaimer of warranty constitutes an essential\n   part of this License. No use of  any Covered Software is authorized under\n   this License except under this disclaimer.\n\n7. Limitation of Liability\n\n   Under no circumstances and under no legal theory, whether tort (including\n   negligence), contract, or otherwise, shall any Contributor, or anyone who\n   distributes Covered Software as permitted above, be liable to You for any\n   direct, indirect, special, incidental, or consequential damages of any\n   character including, without limitation, damages for lost profits, loss of\n   goodwill, work stoppage, computer failure or malfunction, or any and all\n   other commercial damages or losses, even if such party shall have been\n   informed of the possibility of such damages. This limitation of liability\n   shall not apply to liability for death or personal injury resulting from\n   such party's negligence to the extent applicable law prohibits such\n   limitation. Some jurisdictions do not allow the exclusion or limitation of\n   incidental or consequential damages, so this exclusion and limitation may\n   not apply to You.\n\n8. Litigation\n\n   Any litigation relating to this License may be brought only in the courts\n   of a jurisdiction where the defendant maintains its principal place of\n   business and such litigation shall be governed by laws of that\n   jurisdiction, without reference to its conflict-of-law provisions. Nothing\n   in this Section shall prevent a party's ability to bring cross-claims or\n   counter-claims.\n\n9. Miscellaneous\n\n   This License represents the complete agreement concerning the subject\n   matter hereof. If any provision of this License is held to be\n   unenforceable, such provision shall be reformed only to the extent\n   necessary to make it enforceable. Any law or regulation which provides that\n   the language of a contract shall be construed against the drafter shall not\n   be used to construe this License against a Contributor.\n\n\n10. Versions of the License\n\n10.1. New Versions\n\n      Mozilla Foundation is the license steward. Except as provided in Section\n      10.3, no one other than the license steward has the right to modify or\n      publish new versions of this License. Each version will be given a\n      distinguishing version number.\n\n10.2. Effect of New Versions\n\n      You may distribute the Covered Software under the terms of the version\n      of the License under which You originally received the Covered Software,\n      or under the terms of any subsequent version published by the license\n      steward.\n\n10.3. Modified Versions\n\n      If you create software not governed by this License, and you want to\n      create a new license for such software, you may create and use a\n      modified version of this License if you rename the license and remove\n      any references to the name of the license steward (except to note that\n      such modified license differs from this License).\n\n10.4. Distributing Source Code Form that is Incompatible With Secondary\n      Licenses If You choose to distribute Source Code Form that is\n      Incompatible With Secondary Licenses under the terms of this version of\n      the License, the notice described in Exhibit B of this License must be\n      attached.\n\nExhibit A - Source Code Form License Notice\n\n      This Source Code Form is subject to the\n      terms of the Mozilla Public License, v.\n      2.0. If a copy of the MPL was not\n      distributed with this file, You can\n      obtain one at\n      http://mozilla.org/MPL/2.0/.\n\nIf it is not possible or desirable to put the notice in a particular file,\nthen You may include the notice in a location (such as a LICENSE file in a\nrelevant directory) where a recipient would be likely to look for such a\nnotice.\n\nYou may add additional accurate notices of copyright ownership.\n\nExhibit B - \"Incompatible With Secondary Licenses\" Notice\n\n      This Source Code Form is \"Incompatible\n      With Secondary Licenses\", as defined by\n      the Mozilla Public License, v. 2.0.",
+    "ecosystem": "go"
   },
   {
     "name": "github.com/jackc/pgpassfile",
@@ -311,8 +365,7 @@
     "license": "MIT",
     "repository": "https://github.com/jackc/pgpassfile",
     "license_text": "Copyright (c) 2019 Jack Christensen\n\nMIT License\n\nPermission is hereby granted, free of charge, to any person obtaining\na copy of this software and associated documentation files (the\n\"Software\"), to deal in the Software without restriction, including\nwithout limitation the rights to use, copy, modify, merge, publish,\ndistribute, sublicense, and/or sell copies of the Software, and to\npermit persons to whom the Software is furnished to do so, subject to\nthe following conditions:\n\nThe above copyright notice and this permission notice shall be\nincluded in all copies or substantial portions of the Software.\n\nTHE SOFTWARE IS PROVIDED \"AS IS\", WITHOUT WARRANTY OF ANY KIND,\nEXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF\nMERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND\nNONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE\nLIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION\nOF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION\nWITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.\n",
-    "ecosystem": "go",
-    "stale": true
+    "ecosystem": "go"
   },
   {
     "name": "github.com/jackc/pgservicefile",
@@ -320,17 +373,15 @@
     "license": "MIT",
     "repository": "https://github.com/jackc/pgservicefile",
     "license_text": "Copyright (c) 2020 Jack Christensen\n\nMIT License\n\nPermission is hereby granted, free of charge, to any person obtaining\na copy of this software and associated documentation files (the\n\"Software\"), to deal in the Software without restriction, including\nwithout limitation the rights to use, copy, modify, merge, publish,\ndistribute, sublicense, and/or sell copies of the Software, and to\npermit persons to whom the Software is furnished to do so, subject to\nthe following conditions:\n\nThe above copyright notice and this permission notice shall be\nincluded in all copies or substantial portions of the Software.\n\nTHE SOFTWARE IS PROVIDED \"AS IS\", WITHOUT WARRANTY OF ANY KIND,\nEXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF\nMERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND\nNONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE\nLIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION\nOF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION\nWITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.\n",
-    "ecosystem": "go",
-    "stale": true
+    "ecosystem": "go"
   },
   {
     "name": "github.com/jackc/pgx",
-    "version": "v5.9.0",
+    "version": "v5.9.2",
     "license": "MIT",
     "repository": "https://github.com/jackc/pgx",
     "license_text": "Copyright (c) 2013-2021 Jack Christensen\n\nMIT License\n\nPermission is hereby granted, free of charge, to any person obtaining\na copy of this software and associated documentation files (the\n\"Software\"), to deal in the Software without restriction, including\nwithout limitation the rights to use, copy, modify, merge, publish,\ndistribute, sublicense, and/or sell copies of the Software, and to\npermit persons to whom the Software is furnished to do so, subject to\nthe following conditions:\n\nThe above copyright notice and this permission notice shall be\nincluded in all copies or substantial portions of the Software.\n\nTHE SOFTWARE IS PROVIDED \"AS IS\", WITHOUT WARRANTY OF ANY KIND,\nEXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF\nMERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND\nNONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE\nLIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION\nOF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION\nWITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.\n",
-    "ecosystem": "go",
-    "stale": true
+    "ecosystem": "go"
   },
   {
     "name": "github.com/jackc/puddle",
@@ -338,8 +389,7 @@
     "license": "MIT",
     "repository": "https://github.com/jackc/puddle",
     "license_text": "Copyright (c) 2018 Jack Christensen\n\nMIT License\n\nPermission is hereby granted, free of charge, to any person obtaining\na copy of this software and associated documentation files (the\n\"Software\"), to deal in the Software without restriction, including\nwithout limitation the rights to use, copy, modify, merge, publish,\ndistribute, sublicense, and/or sell copies of the Software, and to\npermit persons to whom the Software is furnished to do so, subject to\nthe following conditions:\n\nThe above copyright notice and this permission notice shall be\nincluded in all copies or substantial portions of the Software.\n\nTHE SOFTWARE IS PROVIDED \"AS IS\", WITHOUT WARRANTY OF ANY KIND,\nEXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF\nMERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND\nNONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE\nLIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION\nOF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION\nWITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.\n",
-    "ecosystem": "go",
-    "stale": true
+    "ecosystem": "go"
   },
   {
     "name": "github.com/jmoiron/sqlx",
@@ -347,8 +397,39 @@
     "license": "MIT",
     "repository": "https://github.com/jmoiron/sqlx",
     "license_text": " Copyright (c) 2013, Jason Moiron\n\n Permission is hereby granted, free of charge, to any person\n obtaining a copy of this software and associated documentation\n files (the \"Software\"), to deal in the Software without\n restriction, including without limitation the rights to use,\n copy, modify, merge, publish, distribute, sublicense, and/or sell\n copies of the Software, and to permit persons to whom the\n Software is furnished to do so, subject to the following\n conditions:\n\n The above copyright notice and this permission notice shall be\n included in all copies or substantial portions of the Software.\n\n THE SOFTWARE IS PROVIDED \"AS IS\", WITHOUT WARRANTY OF ANY KIND,\n EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES\n OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND\n NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT\n HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY,\n WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING\n FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR\n OTHER DEALINGS IN THE SOFTWARE.\n\n",
-    "ecosystem": "go",
-    "stale": true
+    "ecosystem": "go"
+  },
+  {
+    "name": "github.com/josharian/intern",
+    "version": "v1.0.0",
+    "license": "MIT",
+    "repository": "https://github.com/josharian/intern",
+    "license_text": "MIT License\n\nCopyright (c) 2019 Josh Bleecher Snyder\n\nPermission is hereby granted, free of charge, to any person obtaining a copy\nof this software and associated documentation files (the \"Software\"), to deal\nin the Software without restriction, including without limitation the rights\nto use, copy, modify, merge, publish, distribute, sublicense, and/or sell\ncopies of the Software, and to permit persons to whom the Software is\nfurnished to do so, subject to the following conditions:\n\nThe above copyright notice and this permission notice shall be included in all\ncopies or substantial portions of the Software.\n\nTHE SOFTWARE IS PROVIDED \"AS IS\", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR\nIMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,\nFITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE\nAUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER\nLIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,\nOUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE\nSOFTWARE.\n",
+    "ecosystem": "go"
+  },
+  {
+    "name": "github.com/json-iterator/go",
+    "version": "v1.1.12",
+    "license": "MIT",
+    "repository": "https://github.com/json-iterator/go",
+    "license_text": "MIT License\n\nCopyright (c) 2016 json-iterator\n\nPermission is hereby granted, free of charge, to any person obtaining a copy\nof this software and associated documentation files (the \"Software\"), to deal\nin the Software without restriction, including without limitation the rights\nto use, copy, modify, merge, publish, distribute, sublicense, and/or sell\ncopies of the Software, and to permit persons to whom the Software is\nfurnished to do so, subject to the following conditions:\n\nThe above copyright notice and this permission notice shall be included in all\ncopies or substantial portions of the Software.\n\nTHE SOFTWARE IS PROVIDED \"AS IS\", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR\nIMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,\nFITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE\nAUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER\nLIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,\nOUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE\nSOFTWARE.\n",
+    "ecosystem": "go"
+  },
+  {
+    "name": "github.com/kdlbs/acp-go-sdk",
+    "version": "13e3f4dc12c2",
+    "license": "Apache-2.0",
+    "repository": "https://github.com/kdlbs/acp-go-sdk",
+    "license_text": "                                 Apache License\n                           Version 2.0, January 2004\n                        http://www.apache.org/licenses/\n\n   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION\n\n   1. Definitions.\n\n      \"License\" shall mean the terms and conditions for use, reproduction,\n      and distribution as defined by Sections 1 through 9 of this document.\n\n      \"Licensor\" shall mean the copyright owner or entity authorized by\n      the copyright owner that is granting the License.\n\n      \"Legal Entity\" shall mean the union of the acting entity and all\n      other entities that control, are controlled by, or are under common\n      control with that entity. For the purposes of this definition,\n      \"control\" means (i) the power, direct or indirect, to cause the\n      direction or management of such entity, whether by contract or\n      otherwise, or (ii) ownership of fifty percent (50%) or more of the\n      outstanding shares, or (iii) beneficial ownership of such entity.\n\n      \"You\" (or \"Your\") shall mean an individual or Legal Entity\n      exercising permissions granted by this License.\n\n      \"Source\" form shall mean the preferred form for making modifications,\n      including but not limited to software source code, documentation\n      source, and configuration files.\n\n      \"Object\" form shall mean any form resulting from mechanical\n      transformation or translation of a Source form, including but\n      not limited to compiled object code, generated documentation,\n      and conversions to other media types.\n\n      \"Work\" shall mean the work of authorship, whether in Source or\n      Object form, made available under the License, as indicated by a\n      copyright notice that is included in or attached to the work\n      (an example is provided in the Appendix below).\n\n      \"Derivative Works\" shall mean any work, whether in Source or Object\n      form, that is based on (or derived from) the Work and for which the\n      editorial revisions, annotations, elaborations, or other modifications\n      represent, as a whole, an original work of authorship. For the purposes\n      of this License, Derivative Works shall not include works that remain\n      separable from, or merely link (or bind by name) to the interfaces of,\n      the Work and Derivative Works thereof.\n\n      \"Contribution\" shall mean any work of authorship, including\n      the original version of the Work and any modifications or additions\n      to that Work or Derivative Works thereof, that is intentionally\n      submitted to Licensor for inclusion in the Work by the copyright owner\n      or by an individual or Legal Entity authorized to submit on behalf of\n      the copyright owner. For the purposes of this definition, \"submitted\"\n      means any form of electronic, verbal, or written communication sent\n      to the Licensor or its representatives, including but not limited to\n      communication on electronic mailing lists, source code control systems,\n      and issue tracking systems that are managed by, or on behalf of, the\n      Licensor for the purpose of discussing and improving the Work, but\n      excluding communication that is conspicuously marked or otherwise\n      designated in writing by the copyright owner as \"Not a Contribution.\"\n\n      \"Contributor\" shall mean Licensor and any individual or Legal Entity\n      on behalf of whom a Contribution has been received by Licensor and\n      subsequently incorporated within the Work.\n\n   2. Grant of Copyright License. Subject to the terms and conditions of\n      this License, each Contributor hereby grants to You a perpetual,\n      worldwide, non-exclusive, no-charge, royalty-free, irrevocable\n      copyright license to reproduce, prepare Derivative Works of,\n      publicly display, publicly perform, sublicense, and distribute the\n      Work and such Derivative Works in Source or Object form.\n\n   3. Grant of Patent License. Subject to the terms and conditions of\n      this License, each Contributor hereby grants to You a perpetual,\n      worldwide, non-exclusive, no-charge, royalty-free, irrevocable\n      (except as stated in this section) patent license to make, have made,\n      use, offer to sell, sell, import, and otherwise transfer the Work,\n      where such license applies only to those patent claims licensable\n      by such Contributor that are necessarily infringed by their\n      Contribution(s) alone or by combination of their Contribution(s)\n      with the Work to which such Contribution(s) was submitted. If You\n      institute patent litigation against any entity (including a\n      cross-claim or counterclaim in a lawsuit) alleging that the Work\n      or a Contribution incorporated within the Work constitutes direct\n      or contributory patent infringement, then any patent licenses\n      granted to You under this License for that Work shall terminate\n      as of the date such litigation is filed.\n\n   4. Redistribution. You may reproduce and distribute copies of the\n      Work or Derivative Works thereof in any medium, with or without\n      modifications, and in Source or Object form, provided that You\n      meet the following conditions:\n\n      (a) You must give any other recipients of the Work or\n          Derivative Works a copy of this License; and\n\n      (b) You must cause any modified files to carry prominent notices\n          stating that You changed the files; and\n\n      (c) You must retain, in the Source form of any Derivative Works\n          that You distribute, all copyright, patent, trademark, and\n          attribution notices from the Source form of the Work,\n          excluding those notices that do not pertain to any part of\n          the Derivative Works; and\n\n      (d) If the Work includes a \"NOTICE\" text file as part of its\n          distribution, then any Derivative Works that You distribute must\n          include a readable copy of the attribution notices contained\n          within such NOTICE file, excluding those notices that do not\n          pertain to any part of the Derivative Works, in at least one\n          of the following places: within a NOTICE text file distributed\n          as part of the Derivative Works; within the Source form or\n          documentation, if provided along with the Derivative Works; or,\n          within a display generated by the Derivative Works, if and\n          wherever such third-party notices normally appear. The contents\n          of the NOTICE file are for informational purposes only and\n          do not modify the License. You may add Your own attribution\n          notices within Derivative Works that You distribute, alongside\n          or as an addendum to the NOTICE text from the Work, provided\n          that such additional attribution notices cannot be construed\n          as modifying the License.\n\n      You may add Your own copyright statement to Your modifications and\n      may provide additional or different license terms and conditions\n      for use, reproduction, or distribution of Your modifications, or\n      for any such Derivative Works as a whole, provided Your use,\n      reproduction, and distribution of the Work otherwise complies with\n      the conditions stated in this License.\n\n   5. Submission of Contributions. Unless You explicitly state otherwise,\n      any Contribution intentionally submitted for inclusion in the Work\n      by You to the Licensor shall be under the terms and conditions of\n      this License, without any additional terms or conditions.\n      Notwithstanding the above, nothing herein shall supersede or modify\n      the terms of any separate license agreement you may have executed\n      with Licensor regarding such Contributions.\n\n   6. Trademarks. This License does not grant permission to use the trade\n      names, trademarks, service marks, or product names of the Licensor,\n      except as required for reasonable and customary use in describing the\n      origin of the Work and reproducing the content of the NOTICE file.\n\n   7. Disclaimer of Warranty. Unless required by applicable law or\n      agreed to in writing, Licensor provides the Work (and each\n      Contributor provides its Contributions) on an \"AS IS\" BASIS,\n      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or\n      implied, including, without limitation, any warranties or conditions\n      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A\n      PARTICULAR PURPOSE. You are solely responsible for determining the\n      appropriateness of using or redistributing the Work and assume any\n      risks associated with Your exercise of permissions under this License.\n\n   8. Limitation of Liability. In no event and under no legal theory,\n      whether in tort (including negligence), contract, or otherwise,\n      unless required by applicable law (such as deliberate and grossly\n      negligent acts) or agreed to in writing, shall any Contributor be\n      liable to You for damages, including any direct, indirect, special,\n      incidental, or consequential damages of any character arising as a\n      result of this License or out of the use or inability to use the\n      Work (including but not limited to damages for loss of goodwill,\n      work stoppage, computer failure or malfunction, or any and all\n      other commercial damages or losses), even if such Contributor\n      has been advised of the possibility of such damages.\n\n   9. Accepting Warranty or Additional Liability. While redistributing\n      the Work or Derivative Works thereof, You may choose to offer,\n      and charge a fee for, acceptance of support, warranty, indemnity,\n      or other liability obligations and/or rights consistent with this\n      License. However, in accepting such obligations, You may act only\n      on Your own behalf and on Your sole responsibility, not on behalf\n      of any other Contributor, and only if You agree to indemnify,\n      defend, and hold each Contributor harmless for any liability\n      incurred by, or claims asserted against, such Contributor by reason\n      of your accepting any such warranty or additional liability.\n\n   END OF TERMS AND CONDITIONS\n\n   APPENDIX: How to apply the Apache License to your work.\n\n      To apply the Apache License to your work, attach the following\n      boilerplate notice, with the fields enclosed by brackets \"[]\"\n      replaced with your own identifying information. (Don't include\n      the brackets!)  The text should be enclosed in the appropriate\n      comment syntax for the file format. We also recommend that a\n      file or class name and description of purpose be included on the\n      same \"printed page\" as the copyright notice for easier\n      identification within third-party archives.\n\n   Copyright 2025 Coder Technologies, Inc.\n\n   Licensed under the Apache License, Version 2.0 (the \"License\");\n   you may not use this file except in compliance with the License.\n   You may obtain a copy of the License at\n\n       http://www.apache.org/licenses/LICENSE-2.0\n\n   Unless required by applicable law or agreed to in writing, software\n   distributed under the License is distributed on an \"AS IS\" BASIS,\n   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n   See the License for the specific language governing permissions and\n   limitations under the License.\n",
+    "ecosystem": "go"
+  },
+  {
+    "name": "github.com/kevinburke/ssh_config",
+    "version": "v1.6.0",
+    "license": "MIT",
+    "repository": "https://github.com/kevinburke/ssh_config",
+    "license_text": "Copyright (c) 2017 Kevin Burke.\n\nPermission is hereby granted, free of charge, to any person\nobtaining a copy of this software and associated documentation\nfiles (the \"Software\"), to deal in the Software without\nrestriction, including without limitation the rights to use,\ncopy, modify, merge, publish, distribute, sublicense, and/or sell\ncopies of the Software, and to permit persons to whom the\nSoftware is furnished to do so, subject to the following\nconditions:\n\nThe above copyright notice and this permission notice shall be\nincluded in all copies or substantial portions of the Software.\n\nTHE SOFTWARE IS PROVIDED \"AS IS\", WITHOUT WARRANTY OF ANY KIND,\nEXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES\nOF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND\nNONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT\nHOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY,\nWHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING\nFROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR\nOTHER DEALINGS IN THE SOFTWARE.\n\n===================\n\nThe lexer and parser borrow heavily from github.com/pelletier/go-toml. The\nlicense for that project is copied below.\n\nThe MIT License (MIT)\n\nCopyright (c) 2013 - 2017 Thomas Pelletier, Eric Anderton\n\nPermission is hereby granted, free of charge, to any person obtaining a copy\nof this software and associated documentation files (the \"Software\"), to deal\nin the Software without restriction, including without limitation the rights\nto use, copy, modify, merge, publish, distribute, sublicense, and/or sell\ncopies of the Software, and to permit persons to whom the Software is\nfurnished to do so, subject to the following conditions:\n\nThe above copyright notice and this permission notice shall be included in all\ncopies or substantial portions of the Software.\n\nTHE SOFTWARE IS PROVIDED \"AS IS\", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR\nIMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,\nFITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE\nAUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER\nLIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,\nOUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE\nSOFTWARE.\n",
+    "ecosystem": "go"
   },
   {
     "name": "github.com/klauspost/compress",
@@ -356,8 +437,95 @@
     "license": "Apache-2.0",
     "repository": "https://github.com/klauspost/compress",
     "license_text": "Copyright (c) 2012 The Go Authors. All rights reserved.\nCopyright (c) 2019 Klaus Post. All rights reserved.\n\nRedistribution and use in source and binary forms, with or without\nmodification, are permitted provided that the following conditions are\nmet:\n\n   * Redistributions of source code must retain the above copyright\nnotice, this list of conditions and the following disclaimer.\n   * Redistributions in binary form must reproduce the above\ncopyright notice, this list of conditions and the following disclaimer\nin the documentation and/or other materials provided with the\ndistribution.\n   * Neither the name of Google Inc. nor the names of its\ncontributors may be used to endorse or promote products derived from\nthis software without specific prior written permission.\n\nTHIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS\n\"AS IS\" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT\nLIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR\nA PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT\nOWNER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,\nSPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT\nLIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,\nDATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY\nTHEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT\n(INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE\nOF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.\n\n------------------\n\nFiles: gzhttp/*\n\n                                 Apache License\n                           Version 2.0, January 2004\n                        http://www.apache.org/licenses/\n\n   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION\n\n   1. Definitions.\n\n      \"License\" shall mean the terms and conditions for use, reproduction,\n      and distribution as defined by Sections 1 through 9 of this document.\n\n      \"Licensor\" shall mean the copyright owner or entity authorized by\n      the copyright owner that is granting the License.\n\n      \"Legal Entity\" shall mean the union of the acting entity and all\n      other entities that control, are controlled by, or are under common\n      control with that entity. For the purposes of this definition,\n      \"control\" means (i) the power, direct or indirect, to cause the\n      direction or management of such entity, whether by contract or\n      otherwise, or (ii) ownership of fifty percent (50%) or more of the\n      outstanding shares, or (iii) beneficial ownership of such entity.\n\n      \"You\" (or \"Your\") shall mean an individual or Legal Entity\n      exercising permissions granted by this License.\n\n      \"Source\" form shall mean the preferred form for making modifications,\n      including but not limited to software source code, documentation\n      source, and configuration files.\n\n      \"Object\" form shall mean any form resulting from mechanical\n      transformation or translation of a Source form, including but\n      not limited to compiled object code, generated documentation,\n      and conversions to other media types.\n\n      \"Work\" shall mean the work of authorship, whether in Source or\n      Object form, made available under the License, as indicated by a\n      copyright notice that is included in or attached to the work\n      (an example is provided in the Appendix below).\n\n      \"Derivative Works\" shall mean any work, whether in Source or Object\n      form, that is based on (or derived from) the Work and for which the\n      editorial revisions, annotations, elaborations, or other modifications\n      represent, as a whole, an original work of authorship. For the purposes\n      of this License, Derivative Works shall not include works that remain\n      separable from, or merely link (or bind by name) to the interfaces of,\n      the Work and Derivative Works thereof.\n\n      \"Contribution\" shall mean any work of authorship, including\n      the original version of the Work and any modifications or additions\n      to that Work or Derivative Works thereof, that is intentionally\n      submitted to Licensor for inclusion in the Work by the copyright owner\n      or by an individual or Legal Entity authorized to submit on behalf of\n      the copyright owner. For the purposes of this definition, \"submitted\"\n      means any form of electronic, verbal, or written communication sent\n      to the Licensor or its representatives, including but not limited to\n      communication on electronic mailing lists, source code control systems,\n      and issue tracking systems that are managed by, or on behalf of, the\n      Licensor for the purpose of discussing and improving the Work, but\n      excluding communication that is conspicuously marked or otherwise\n      designated in writing by the copyright owner as \"Not a Contribution.\"\n\n      \"Contributor\" shall mean Licensor and any individual or Legal Entity\n      on behalf of whom a Contribution has been received by Licensor and\n      subsequently incorporated within the Work.\n\n   2. Grant of Copyright License. Subject to the terms and conditions of\n      this License, each Contributor hereby grants to You a perpetual,\n      worldwide, non-exclusive, no-charge, royalty-free, irrevocable\n      copyright license to reproduce, prepare Derivative Works of,\n      publicly display, publicly perform, sublicense, and distribute the\n      Work and such Derivative Works in Source or Object form.\n\n   3. Grant of Patent License. Subject to the terms and conditions of\n      this License, each Contributor hereby grants to You a perpetual,\n      worldwide, non-exclusive, no-charge, royalty-free, irrevocable\n      (except as stated in this section) patent license to make, have made,\n      use, offer to sell, sell, import, and otherwise transfer the Work,\n      where such license applies only to those patent claims licensable\n      by such Contributor that are necessarily infringed by their\n      Contribution(s) alone or by combination of their Contribution(s)\n      with the Work to which such Contribution(s) was submitted. If You\n      institute patent litigation against any entity (including a\n      cross-claim or counterclaim in a lawsuit) alleging that the Work\n      or a Contribution incorporated within the Work constitutes direct\n      or contributory patent infringement, then any patent licenses\n      granted to You under this License for that Work shall terminate\n      as of the date such litigation is filed.\n\n   4. Redistribution. You may reproduce and distribute copies of the\n      Work or Derivative Works thereof in any medium, with or without\n      modifications, and in Source or Object form, provided that You\n      meet the following conditions:\n\n      (a) You must give any other recipients of the Work or\n          Derivative Works a copy of this License; and\n\n      (b) You must cause any modified files to carry prominent notices\n          stating that You changed the files; and\n\n      (c) You must retain, in the Source form of any Derivative Works\n          that You distribute, all copyright, patent, trademark, and\n          attribution notices from the Source form of the Work,\n          excluding those notices that do not pertain to any part of\n          the Derivative Works; and\n\n      (d) If the Work includes a \"NOTICE\" text file as part of its\n          distribution, then any Derivative Works that You distribute must\n          include a readable copy of the attribution notices contained\n          within such NOTICE file, excluding those notices that do not\n          pertain to any part of the Derivative Works, in at least one\n          of the following places: within a NOTICE text file distributed\n          as part of the Derivative Works; within the Source form or\n          documentation, if provided along with the Derivative Works; or,\n          within a display generated by the Derivative Works, if and\n          wherever such third-party notices normally appear. The contents\n          of the NOTICE file are for informational purposes only and\n          do not modify the License. You may add Your own attribution\n          notices within Derivative Works that You distribute, alongside\n          or as an addendum to the NOTICE text from the Work, provided\n          that such additional attribution notices cannot be construed\n          as modifying the License.\n\n      You may add Your own copyright statement to Your modifications and\n      may provide additional or different license terms and conditions\n      for use, reproduction, or distribution of Your modifications, or\n      for any such Derivative Works as a whole, provided Your use,\n      reproduction, and distribution of the Work otherwise complies with\n      the conditions stated in this License.\n\n   5. Submission of Contributions. Unless You explicitly state otherwise,\n      any Contribution intentionally submitted for inclusion in the Work\n      by You to the Licensor shall be under the terms and conditions of\n      this License, without any additional terms or conditions.\n      Notwithstanding the above, nothing herein shall supersede or modify\n      the terms of any separate license agreement you may have executed\n      with Licensor regarding such Contributions.\n\n   6. Trademarks. This License does not grant permission to use the trade\n      names, trademarks, service marks, or product names of the Licensor,\n      except as required for reasonable and customary use in describing the\n      origin of the Work and reproducing the content of the NOTICE file.\n\n   7. Disclaimer of Warranty. Unless required by applicable law or\n      agreed to in writing, Licensor provides the Work (and each\n      Contributor provides its Contributions) on an \"AS IS\" BASIS,\n      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or\n      implied, including, without limitation, any warranties or conditions\n      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A\n      PARTICULAR PURPOSE. You are solely responsible for determining the\n      appropriateness of using or redistributing the Work and assume any\n      risks associated with Your exercise of permissions under this License.\n\n   8. Limitation of Liability. In no event and under no legal theory,\n      whether in tort (including negligence), contract, or otherwise,\n      unless required by applicable law (such as deliberate and grossly\n      negligent acts) or agreed to in writing, shall any Contributor be\n      liable to You for damages, including any direct, indirect, special,\n      incidental, or consequential damages of any character arising as a\n      result of this License or out of the use or inability to use the\n      Work (including but not limited to damages for loss of goodwill,\n      work stoppage, computer failure or malfunction, or any and all\n      other commercial damages or losses), even if such Contributor\n      has been advised of the possibility of such damages.\n\n   9. Accepting Warranty or Additional Liability. While redistributing\n      the Work or Derivative Works thereof, You may choose to offer,\n      and charge a fee for, acceptance of support, warranty, indemnity,\n      or other liability obligations and/or rights consistent with this\n      License. However, in accepting such obligations, You may act only\n      on Your own behalf and on Your sole responsibility, not on behalf\n      of any other Contributor, and only if You agree to indemnify,\n      defend, and hold each Contributor harmless for any liability\n      incurred by, or claims asserted against, such Contributor by reason\n      of your accepting any such warranty or additional liability.\n\n   END OF TERMS AND CONDITIONS\n\n   APPENDIX: How to apply the Apache License to your work.\n\n      To apply the Apache License to your work, attach the following\n      boilerplate notice, with the fields enclosed by brackets \"[]\"\n      replaced with your own identifying information. (Don't include\n      the brackets!)  The text should be enclosed in the appropriate\n      comment syntax for the file format. We also recommend that a\n      file or class name and description of purpose be included on the\n      same \"printed page\" as the copyright notice for easier\n      identification within third-party archives.\n\n   Copyright 2016-2017 The New York Times Company\n\n   Licensed under the Apache License, Version 2.0 (the \"License\");\n   you may not use this file except in compliance with the License.\n   You may obtain a copy of the License at\n\n       http://www.apache.org/licenses/LICENSE-2.0\n\n   Unless required by applicable law or agreed to in writing, software\n   distributed under the License is distributed on an \"AS IS\" BASIS,\n   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n   See the License for the specific language governing permissions and\n   limitations under the License.\n\n------------------\n\nFiles: s2/cmd/internal/readahead/*\n\nThe MIT License (MIT)\n\nCopyright (c) 2015 Klaus Post\n\nPermission is hereby granted, free of charge, to any person obtaining a copy\nof this software and associated documentation files (the \"Software\"), to deal\nin the Software without restriction, including without limitation the rights\nto use, copy, modify, merge, publish, distribute, sublicense, and/or sell\ncopies of the Software, and to permit persons to whom the Software is\nfurnished to do so, subject to the following conditions:\n\nThe above copyright notice and this permission notice shall be included in all\ncopies or substantial portions of the Software.\n\nTHE SOFTWARE IS PROVIDED \"AS IS\", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR\nIMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,\nFITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE\nAUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER\nLIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,\nOUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE\nSOFTWARE.\n\n---------------------\nFiles: snappy/*\nFiles: internal/snapref/*\n\nCopyright (c) 2011 The Snappy-Go Authors. All rights reserved.\n\nRedistribution and use in source and binary forms, with or without\nmodification, are permitted provided that the following conditions are\nmet:\n\n   * Redistributions of source code must retain the above copyright\nnotice, this list of conditions and the following disclaimer.\n   * Redistributions in binary form must reproduce the above\ncopyright notice, this list of conditions and the following disclaimer\nin the documentation and/or other materials provided with the\ndistribution.\n   * Neither the name of Google Inc. nor the names of its\ncontributors may be used to endorse or promote products derived from\nthis software without specific prior written permission.\n\nTHIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS\n\"AS IS\" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT\nLIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR\nA PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT\nOWNER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,\nSPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT\nLIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,\nDATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY\nTHEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT\n(INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE\nOF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.\n\n-----------------\n\nFiles: s2/cmd/internal/filepathx/*\n\nCopyright 2016 The filepathx Authors\n\nPermission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files (the \"Software\"), to deal in the Software without restriction, including without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the Software, and to permit persons to whom the Software is furnished to do so, subject to the following conditions:\n\nThe above copyright notice and this permission notice shall be included in all copies or substantial portions of the Software.\n\nTHE SOFTWARE IS PROVIDED \"AS IS\", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.\n",
-    "ecosystem": "go",
-    "stale": true
+    "ecosystem": "go"
+  },
+  {
+    "name": "github.com/kr/fs",
+    "version": "v0.1.0",
+    "license": "BSD-3-Clause",
+    "repository": "https://github.com/kr/fs",
+    "license_text": "Copyright (c) 2012 The Go Authors. All rights reserved.\n\nRedistribution and use in source and binary forms, with or without\nmodification, are permitted provided that the following conditions are\nmet:\n\n   * Redistributions of source code must retain the above copyright\nnotice, this list of conditions and the following disclaimer.\n   * Redistributions in binary form must reproduce the above\ncopyright notice, this list of conditions and the following disclaimer\nin the documentation and/or other materials provided with the\ndistribution.\n   * Neither the name of Google Inc. nor the names of its\ncontributors may be used to endorse or promote products derived from\nthis software without specific prior written permission.\n\nTHIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS\n\"AS IS\" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT\nLIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR\nA PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT\nOWNER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,\nSPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT\nLIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,\nDATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY\nTHEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT\n(INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE\nOF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.\n",
+    "ecosystem": "go"
+  },
+  {
+    "name": "github.com/kubernetes-sigs/json",
+    "version": "2d320260d730",
+    "license": "Apache-2.0",
+    "repository": "https://github.com/kubernetes-sigs/json",
+    "license_text": "Files other than internal/golang/* licensed under:\n\n\n                                 Apache License\n                           Version 2.0, January 2004\n                        http://www.apache.org/licenses/\n\n   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION\n\n   1. Definitions.\n\n      \"License\" shall mean the terms and conditions for use, reproduction,\n      and distribution as defined by Sections 1 through 9 of this document.\n\n      \"Licensor\" shall mean the copyright owner or entity authorized by\n      the copyright owner that is granting the License.\n\n      \"Legal Entity\" shall mean the union of the acting entity and all\n      other entities that control, are controlled by, or are under common\n      control with that entity. For the purposes of this definition,\n      \"control\" means (i) the power, direct or indirect, to cause the\n      direction or management of such entity, whether by contract or\n      otherwise, or (ii) ownership of fifty percent (50%) or more of the\n      outstanding shares, or (iii) beneficial ownership of such entity.\n\n      \"You\" (or \"Your\") shall mean an individual or Legal Entity\n      exercising permissions granted by this License.\n\n      \"Source\" form shall mean the preferred form for making modifications,\n      including but not limited to software source code, documentation\n      source, and configuration files.\n\n      \"Object\" form shall mean any form resulting from mechanical\n      transformation or translation of a Source form, including but\n      not limited to compiled object code, generated documentation,\n      and conversions to other media types.\n\n      \"Work\" shall mean the work of authorship, whether in Source or\n      Object form, made available under the License, as indicated by a\n      copyright notice that is included in or attached to the work\n      (an example is provided in the Appendix below).\n\n      \"Derivative Works\" shall mean any work, whether in Source or Object\n      form, that is based on (or derived from) the Work and for which the\n      editorial revisions, annotations, elaborations, or other modifications\n      represent, as a whole, an original work of authorship. For the purposes\n      of this License, Derivative Works shall not include works that remain\n      separable from, or merely link (or bind by name) to the interfaces of,\n      the Work and Derivative Works thereof.\n\n      \"Contribution\" shall mean any work of authorship, including\n      the original version of the Work and any modifications or additions\n      to that Work or Derivative Works thereof, that is intentionally\n      submitted to Licensor for inclusion in the Work by the copyright owner\n      or by an individual or Legal Entity authorized to submit on behalf of\n      the copyright owner. For the purposes of this definition, \"submitted\"\n      means any form of electronic, verbal, or written communication sent\n      to the Licensor or its representatives, including but not limited to\n      communication on electronic mailing lists, source code control systems,\n      and issue tracking systems that are managed by, or on behalf of, the\n      Licensor for the purpose of discussing and improving the Work, but\n      excluding communication that is conspicuously marked or otherwise\n      designated in writing by the copyright owner as \"Not a Contribution.\"\n\n      \"Contributor\" shall mean Licensor and any individual or Legal Entity\n      on behalf of whom a Contribution has been received by Licensor and\n      subsequently incorporated within the Work.\n\n   2. Grant of Copyright License. Subject to the terms and conditions of\n      this License, each Contributor hereby grants to You a perpetual,\n      worldwide, non-exclusive, no-charge, royalty-free, irrevocable\n      copyright license to reproduce, prepare Derivative Works of,\n      publicly display, publicly perform, sublicense, and distribute the\n      Work and such Derivative Works in Source or Object form.\n\n   3. Grant of Patent License. Subject to the terms and conditions of\n      this License, each Contributor hereby grants to You a perpetual,\n      worldwide, non-exclusive, no-charge, royalty-free, irrevocable\n      (except as stated in this section) patent license to make, have made,\n      use, offer to sell, sell, import, and otherwise transfer the Work,\n      where such license applies only to those patent claims licensable\n      by such Contributor that are necessarily infringed by their\n      Contribution(s) alone or by combination of their Contribution(s)\n      with the Work to which such Contribution(s) was submitted. If You\n      institute patent litigation against any entity (including a\n      cross-claim or counterclaim in a lawsuit) alleging that the Work\n      or a Contribution incorporated within the Work constitutes direct\n      or contributory patent infringement, then any patent licenses\n      granted to You under this License for that Work shall terminate\n      as of the date such litigation is filed.\n\n   4. Redistribution. You may reproduce and distribute copies of the\n      Work or Derivative Works thereof in any medium, with or without\n      modifications, and in Source or Object form, provided that You\n      meet the following conditions:\n\n      (a) You must give any other recipients of the Work or\n          Derivative Works a copy of this License; and\n\n      (b) You must cause any modified files to carry prominent notices\n          stating that You changed the files; and\n\n      (c) You must retain, in the Source form of any Derivative Works\n          that You distribute, all copyright, patent, trademark, and\n          attribution notices from the Source form of the Work,\n          excluding those notices that do not pertain to any part of\n          the Derivative Works; and\n\n      (d) If the Work includes a \"NOTICE\" text file as part of its\n          distribution, then any Derivative Works that You distribute must\n          include a readable copy of the attribution notices contained\n          within such NOTICE file, excluding those notices that do not\n          pertain to any part of the Derivative Works, in at least one\n          of the following places: within a NOTICE text file distributed\n          as part of the Derivative Works; within the Source form or\n          documentation, if provided along with the Derivative Works; or,\n          within a display generated by the Derivative Works, if and\n          wherever such third-party notices normally appear. The contents\n          of the NOTICE file are for informational purposes only and\n          do not modify the License. You may add Your own attribution\n          notices within Derivative Works that You distribute, alongside\n          or as an addendum to the NOTICE text from the Work, provided\n          that such additional attribution notices cannot be construed\n          as modifying the License.\n\n      You may add Your own copyright statement to Your modifications and\n      may provide additional or different license terms and conditions\n      for use, reproduction, or distribution of Your modifications, or\n      for any such Derivative Works as a whole, provided Your use,\n      reproduction, and distribution of the Work otherwise complies with\n      the conditions stated in this License.\n\n   5. Submission of Contributions. Unless You explicitly state otherwise,\n      any Contribution intentionally submitted for inclusion in the Work\n      by You to the Licensor shall be under the terms and conditions of\n      this License, without any additional terms or conditions.\n      Notwithstanding the above, nothing herein shall supersede or modify\n      the terms of any separate license agreement you may have executed\n      with Licensor regarding such Contributions.\n\n   6. Trademarks. This License does not grant permission to use the trade\n      names, trademarks, service marks, or product names of the Licensor,\n      except as required for reasonable and customary use in describing the\n      origin of the Work and reproducing the content of the NOTICE file.\n\n   7. Disclaimer of Warranty. Unless required by applicable law or\n      agreed to in writing, Licensor provides the Work (and each\n      Contributor provides its Contributions) on an \"AS IS\" BASIS,\n      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or\n      implied, including, without limitation, any warranties or conditions\n      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A\n      PARTICULAR PURPOSE. You are solely responsible for determining the\n      appropriateness of using or redistributing the Work and assume any\n      risks associated with Your exercise of permissions under this License.\n\n   8. Limitation of Liability. In no event and under no legal theory,\n      whether in tort (including negligence), contract, or otherwise,\n      unless required by applicable law (such as deliberate and grossly\n      negligent acts) or agreed to in writing, shall any Contributor be\n      liable to You for damages, including any direct, indirect, special,\n      incidental, or consequential damages of any character arising as a\n      result of this License or out of the use or inability to use the\n      Work (including but not limited to damages for loss of goodwill,\n      work stoppage, computer failure or malfunction, or any and all\n      other commercial damages or losses), even if such Contributor\n      has been advised of the possibility of such damages.\n\n   9. Accepting Warranty or Additional Liability. While redistributing\n      the Work or Derivative Works thereof, You may choose to offer,\n      and charge a fee for, acceptance of support, warranty, indemnity,\n      or other liability obligations and/or rights consistent with this\n      License. However, in accepting such obligations, You may act only\n      on Your own behalf and on Your sole responsibility, not on behalf\n      of any other Contributor, and only if You agree to indemnify,\n      defend, and hold each Contributor harmless for any liability\n      incurred by, or claims asserted against, such Contributor by reason\n      of your accepting any such warranty or additional liability.\n\n   END OF TERMS AND CONDITIONS\n\n   APPENDIX: How to apply the Apache License to your work.\n\n      To apply the Apache License to your work, attach the following\n      boilerplate notice, with the fields enclosed by brackets \"{}\"\n      replaced with your own identifying information. (Don't include\n      the brackets!)  The text should be enclosed in the appropriate\n      comment syntax for the file format. We also recommend that a\n      file or class name and description of purpose be included on the\n      same \"printed page\" as the copyright notice for easier\n      identification within third-party archives.\n\n   Copyright {yyyy} {name of copyright owner}\n\n   Licensed under the Apache License, Version 2.0 (the \"License\");\n   you may not use this file except in compliance with the License.\n   You may obtain a copy of the License at\n\n       http://www.apache.org/licenses/LICENSE-2.0\n\n   Unless required by applicable law or agreed to in writing, software\n   distributed under the License is distributed on an \"AS IS\" BASIS,\n   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n   See the License for the specific language governing permissions and\n   limitations under the License.\n\n\n------------------\n\ninternal/golang/* files licensed under:\n\n\nCopyright (c) 2009 The Go Authors. All rights reserved.\n\nRedistribution and use in source and binary forms, with or without\nmodification, are permitted provided that the following conditions are\nmet:\n\n   * Redistributions of source code must retain the above copyright\nnotice, this list of conditions and the following disclaimer.\n   * Redistributions in binary form must reproduce the above\ncopyright notice, this list of conditions and the following disclaimer\nin the documentation and/or other materials provided with the\ndistribution.\n   * Neither the name of Google Inc. nor the names of its\ncontributors may be used to endorse or promote products derived from\nthis software without specific prior written permission.\n\nTHIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS\n\"AS IS\" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT\nLIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR\nA PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT\nOWNER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,\nSPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT\nLIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,\nDATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY\nTHEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT\n(INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE\nOF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.\n",
+    "ecosystem": "go"
+  },
+  {
+    "name": "github.com/kubernetes-sigs/randfill",
+    "version": "v1.0.0",
+    "license": "Apache-2.0",
+    "repository": "https://github.com/kubernetes-sigs/randfill",
+    "license_text": "                                 Apache License\n                           Version 2.0, January 2004\n                        http://www.apache.org/licenses/\n\n   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION\n\n   1. Definitions.\n\n      \"License\" shall mean the terms and conditions for use, reproduction,\n      and distribution as defined by Sections 1 through 9 of this document.\n\n      \"Licensor\" shall mean the copyright owner or entity authorized by\n      the copyright owner that is granting the License.\n\n      \"Legal Entity\" shall mean the union of the acting entity and all\n      other entities that control, are controlled by, or are under common\n      control with that entity. For the purposes of this definition,\n      \"control\" means (i) the power, direct or indirect, to cause the\n      direction or management of such entity, whether by contract or\n      otherwise, or (ii) ownership of fifty percent (50%) or more of the\n      outstanding shares, or (iii) beneficial ownership of such entity.\n\n      \"You\" (or \"Your\") shall mean an individual or Legal Entity\n      exercising permissions granted by this License.\n\n      \"Source\" form shall mean the preferred form for making modifications,\n      including but not limited to software source code, documentation\n      source, and configuration files.\n\n      \"Object\" form shall mean any form resulting from mechanical\n      transformation or translation of a Source form, including but\n      not limited to compiled object code, generated documentation,\n      and conversions to other media types.\n\n      \"Work\" shall mean the work of authorship, whether in Source or\n      Object form, made available under the License, as indicated by a\n      copyright notice that is included in or attached to the work\n      (an example is provided in the Appendix below).\n\n      \"Derivative Works\" shall mean any work, whether in Source or Object\n      form, that is based on (or derived from) the Work and for which the\n      editorial revisions, annotations, elaborations, or other modifications\n      represent, as a whole, an original work of authorship. For the purposes\n      of this License, Derivative Works shall not include works that remain\n      separable from, or merely link (or bind by name) to the interfaces of,\n      the Work and Derivative Works thereof.\n\n      \"Contribution\" shall mean any work of authorship, including\n      the original version of the Work and any modifications or additions\n      to that Work or Derivative Works thereof, that is intentionally\n      submitted to Licensor for inclusion in the Work by the copyright owner\n      or by an individual or Legal Entity authorized to submit on behalf of\n      the copyright owner. For the purposes of this definition, \"submitted\"\n      means any form of electronic, verbal, or written communication sent\n      to the Licensor or its representatives, including but not limited to\n      communication on electronic mailing lists, source code control systems,\n      and issue tracking systems that are managed by, or on behalf of, the\n      Licensor for the purpose of discussing and improving the Work, but\n      excluding communication that is conspicuously marked or otherwise\n      designated in writing by the copyright owner as \"Not a Contribution.\"\n\n      \"Contributor\" shall mean Licensor and any individual or Legal Entity\n      on behalf of whom a Contribution has been received by Licensor and\n      subsequently incorporated within the Work.\n\n   2. Grant of Copyright License. Subject to the terms and conditions of\n      this License, each Contributor hereby grants to You a perpetual,\n      worldwide, non-exclusive, no-charge, royalty-free, irrevocable\n      copyright license to reproduce, prepare Derivative Works of,\n      publicly display, publicly perform, sublicense, and distribute the\n      Work and such Derivative Works in Source or Object form.\n\n   3. Grant of Patent License. Subject to the terms and conditions of\n      this License, each Contributor hereby grants to You a perpetual,\n      worldwide, non-exclusive, no-charge, royalty-free, irrevocable\n      (except as stated in this section) patent license to make, have made,\n      use, offer to sell, sell, import, and otherwise transfer the Work,\n      where such license applies only to those patent claims licensable\n      by such Contributor that are necessarily infringed by their\n      Contribution(s) alone or by combination of their Contribution(s)\n      with the Work to which such Contribution(s) was submitted. If You\n      institute patent litigation against any entity (including a\n      cross-claim or counterclaim in a lawsuit) alleging that the Work\n      or a Contribution incorporated within the Work constitutes direct\n      or contributory patent infringement, then any patent licenses\n      granted to You under this License for that Work shall terminate\n      as of the date such litigation is filed.\n\n   4. Redistribution. You may reproduce and distribute copies of the\n      Work or Derivative Works thereof in any medium, with or without\n      modifications, and in Source or Object form, provided that You\n      meet the following conditions:\n\n      (a) You must give any other recipients of the Work or\n          Derivative Works a copy of this License; and\n\n      (b) You must cause any modified files to carry prominent notices\n          stating that You changed the files; and\n\n      (c) You must retain, in the Source form of any Derivative Works\n          that You distribute, all copyright, patent, trademark, and\n          attribution notices from the Source form of the Work,\n          excluding those notices that do not pertain to any part of\n          the Derivative Works; and\n\n      (d) If the Work includes a \"NOTICE\" text file as part of its\n          distribution, then any Derivative Works that You distribute must\n          include a readable copy of the attribution notices contained\n          within such NOTICE file, excluding those notices that do not\n          pertain to any part of the Derivative Works, in at least one\n          of the following places: within a NOTICE text file distributed\n          as part of the Derivative Works; within the Source form or\n          documentation, if provided along with the Derivative Works; or,\n          within a display generated by the Derivative Works, if and\n          wherever such third-party notices normally appear. The contents\n          of the NOTICE file are for informational purposes only and\n          do not modify the License. You may add Your own attribution\n          notices within Derivative Works that You distribute, alongside\n          or as an addendum to the NOTICE text from the Work, provided\n          that such additional attribution notices cannot be construed\n          as modifying the License.\n\n      You may add Your own copyright statement to Your modifications and\n      may provide additional or different license terms and conditions\n      for use, reproduction, or distribution of Your modifications, or\n      for any such Derivative Works as a whole, provided Your use,\n      reproduction, and distribution of the Work otherwise complies with\n      the conditions stated in this License.\n\n   5. Submission of Contributions. Unless You explicitly state otherwise,\n      any Contribution intentionally submitted for inclusion in the Work\n      by You to the Licensor shall be under the terms and conditions of\n      this License, without any additional terms or conditions.\n      Notwithstanding the above, nothing herein shall supersede or modify\n      the terms of any separate license agreement you may have executed\n      with Licensor regarding such Contributions.\n\n   6. Trademarks. This License does not grant permission to use the trade\n      names, trademarks, service marks, or product names of the Licensor,\n      except as required for reasonable and customary use in describing the\n      origin of the Work and reproducing the content of the NOTICE file.\n\n   7. Disclaimer of Warranty. Unless required by applicable law or\n      agreed to in writing, Licensor provides the Work (and each\n      Contributor provides its Contributions) on an \"AS IS\" BASIS,\n      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or\n      implied, including, without limitation, any warranties or conditions\n      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A\n      PARTICULAR PURPOSE. You are solely responsible for determining the\n      appropriateness of using or redistributing the Work and assume any\n      risks associated with Your exercise of permissions under this License.\n\n   8. Limitation of Liability. In no event and under no legal theory,\n      whether in tort (including negligence), contract, or otherwise,\n      unless required by applicable law (such as deliberate and grossly\n      negligent acts) or agreed to in writing, shall any Contributor be\n      liable to You for damages, including any direct, indirect, special,\n      incidental, or consequential damages of any character arising as a\n      result of this License or out of the use or inability to use the\n      Work (including but not limited to damages for loss of goodwill,\n      work stoppage, computer failure or malfunction, or any and all\n      other commercial damages or losses), even if such Contributor\n      has been advised of the possibility of such damages.\n\n   9. Accepting Warranty or Additional Liability. While redistributing\n      the Work or Derivative Works thereof, You may choose to offer,\n      and charge a fee for, acceptance of support, warranty, indemnity,\n      or other liability obligations and/or rights consistent with this\n      License. However, in accepting such obligations, You may act only\n      on Your own behalf and on Your sole responsibility, not on behalf\n      of any other Contributor, and only if You agree to indemnify,\n      defend, and hold each Contributor harmless for any liability\n      incurred by, or claims asserted against, such Contributor by reason\n      of your accepting any such warranty or additional liability.\n\n   END OF TERMS AND CONDITIONS\n\n   APPENDIX: How to apply the Apache License to your work.\n\n      To apply the Apache License to your work, attach the following\n      boilerplate notice, with the fields enclosed by brackets \"{}\"\n      replaced with your own identifying information. (Don't include\n      the brackets!)  The text should be enclosed in the appropriate\n      comment syntax for the file format. We also recommend that a\n      file or class name and description of purpose be included on the\n      same \"printed page\" as the copyright notice for easier\n      identification within third-party archives.\n\n   Copyright 2014 The gofuzz Authors\n   Copyright 2025 The Kubernetes Authors\n\n   Licensed under the Apache License, Version 2.0 (the \"License\");\n   you may not use this file except in compliance with the License.\n   You may obtain a copy of the License at\n\n       http://www.apache.org/licenses/LICENSE-2.0\n\n   Unless required by applicable law or agreed to in writing, software\n   distributed under the License is distributed on an \"AS IS\" BASIS,\n   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n   See the License for the specific language governing permissions and\n   limitations under the License.\n",
+    "ecosystem": "go"
+  },
+  {
+    "name": "github.com/kubernetes-sigs/structured-merge-diff",
+    "version": "v6.3.3",
+    "license": "Apache-2.0",
+    "repository": "https://github.com/kubernetes-sigs/structured-merge-diff",
+    "license_text": "                                 Apache License\n                           Version 2.0, January 2004\n                        http://www.apache.org/licenses/\n\n   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION\n\n   1. Definitions.\n\n      \"License\" shall mean the terms and conditions for use, reproduction,\n      and distribution as defined by Sections 1 through 9 of this document.\n\n      \"Licensor\" shall mean the copyright owner or entity authorized by\n      the copyright owner that is granting the License.\n\n      \"Legal Entity\" shall mean the union of the acting entity and all\n      other entities that control, are controlled by, or are under common\n      control with that entity. For the purposes of this definition,\n      \"control\" means (i) the power, direct or indirect, to cause the\n      direction or management of such entity, whether by contract or\n      otherwise, or (ii) ownership of fifty percent (50%) or more of the\n      outstanding shares, or (iii) beneficial ownership of such entity.\n\n      \"You\" (or \"Your\") shall mean an individual or Legal Entity\n      exercising permissions granted by this License.\n\n      \"Source\" form shall mean the preferred form for making modifications,\n      including but not limited to software source code, documentation\n      source, and configuration files.\n\n      \"Object\" form shall mean any form resulting from mechanical\n      transformation or translation of a Source form, including but\n      not limited to compiled object code, generated documentation,\n      and conversions to other media types.\n\n      \"Work\" shall mean the work of authorship, whether in Source or\n      Object form, made available under the License, as indicated by a\n      copyright notice that is included in or attached to the work\n      (an example is provided in the Appendix below).\n\n      \"Derivative Works\" shall mean any work, whether in Source or Object\n      form, that is based on (or derived from) the Work and for which the\n      editorial revisions, annotations, elaborations, or other modifications\n      represent, as a whole, an original work of authorship. For the purposes\n      of this License, Derivative Works shall not include works that remain\n      separable from, or merely link (or bind by name) to the interfaces of,\n      the Work and Derivative Works thereof.\n\n      \"Contribution\" shall mean any work of authorship, including\n      the original version of the Work and any modifications or additions\n      to that Work or Derivative Works thereof, that is intentionally\n      submitted to Licensor for inclusion in the Work by the copyright owner\n      or by an individual or Legal Entity authorized to submit on behalf of\n      the copyright owner. For the purposes of this definition, \"submitted\"\n      means any form of electronic, verbal, or written communication sent\n      to the Licensor or its representatives, including but not limited to\n      communication on electronic mailing lists, source code control systems,\n      and issue tracking systems that are managed by, or on behalf of, the\n      Licensor for the purpose of discussing and improving the Work, but\n      excluding communication that is conspicuously marked or otherwise\n      designated in writing by the copyright owner as \"Not a Contribution.\"\n\n      \"Contributor\" shall mean Licensor and any individual or Legal Entity\n      on behalf of whom a Contribution has been received by Licensor and\n      subsequently incorporated within the Work.\n\n   2. Grant of Copyright License. Subject to the terms and conditions of\n      this License, each Contributor hereby grants to You a perpetual,\n      worldwide, non-exclusive, no-charge, royalty-free, irrevocable\n      copyright license to reproduce, prepare Derivative Works of,\n      publicly display, publicly perform, sublicense, and distribute the\n      Work and such Derivative Works in Source or Object form.\n\n   3. Grant of Patent License. Subject to the terms and conditions of\n      this License, each Contributor hereby grants to You a perpetual,\n      worldwide, non-exclusive, no-charge, royalty-free, irrevocable\n      (except as stated in this section) patent license to make, have made,\n      use, offer to sell, sell, import, and otherwise transfer the Work,\n      where such license applies only to those patent claims licensable\n      by such Contributor that are necessarily infringed by their\n      Contribution(s) alone or by combination of their Contribution(s)\n      with the Work to which such Contribution(s) was submitted. If You\n      institute patent litigation against any entity (including a\n      cross-claim or counterclaim in a lawsuit) alleging that the Work\n      or a Contribution incorporated within the Work constitutes direct\n      or contributory patent infringement, then any patent licenses\n      granted to You under this License for that Work shall terminate\n      as of the date such litigation is filed.\n\n   4. Redistribution. You may reproduce and distribute copies of the\n      Work or Derivative Works thereof in any medium, with or without\n      modifications, and in Source or Object form, provided that You\n      meet the following conditions:\n\n      (a) You must give any other recipients of the Work or\n          Derivative Works a copy of this License; and\n\n      (b) You must cause any modified files to carry prominent notices\n          stating that You changed the files; and\n\n      (c) You must retain, in the Source form of any Derivative Works\n          that You distribute, all copyright, patent, trademark, and\n          attribution notices from the Source form of the Work,\n          excluding those notices that do not pertain to any part of\n          the Derivative Works; and\n\n      (d) If the Work includes a \"NOTICE\" text file as part of its\n          distribution, then any Derivative Works that You distribute must\n          include a readable copy of the attribution notices contained\n          within such NOTICE file, excluding those notices that do not\n          pertain to any part of the Derivative Works, in at least one\n          of the following places: within a NOTICE text file distributed\n          as part of the Derivative Works; within the Source form or\n          documentation, if provided along with the Derivative Works; or,\n          within a display generated by the Derivative Works, if and\n          wherever such third-party notices normally appear. The contents\n          of the NOTICE file are for informational purposes only and\n          do not modify the License. You may add Your own attribution\n          notices within Derivative Works that You distribute, alongside\n          or as an addendum to the NOTICE text from the Work, provided\n          that such additional attribution notices cannot be construed\n          as modifying the License.\n\n      You may add Your own copyright statement to Your modifications and\n      may provide additional or different license terms and conditions\n      for use, reproduction, or distribution of Your modifications, or\n      for any such Derivative Works as a whole, provided Your use,\n      reproduction, and distribution of the Work otherwise complies with\n      the conditions stated in this License.\n\n   5. Submission of Contributions. Unless You explicitly state otherwise,\n      any Contribution intentionally submitted for inclusion in the Work\n      by You to the Licensor shall be under the terms and conditions of\n      this License, without any additional terms or conditions.\n      Notwithstanding the above, nothing herein shall supersede or modify\n      the terms of any separate license agreement you may have executed\n      with Licensor regarding such Contributions.\n\n   6. Trademarks. This License does not grant permission to use the trade\n      names, trademarks, service marks, or product names of the Licensor,\n      except as required for reasonable and customary use in describing the\n      origin of the Work and reproducing the content of the NOTICE file.\n\n   7. Disclaimer of Warranty. Unless required by applicable law or\n      agreed to in writing, Licensor provides the Work (and each\n      Contributor provides its Contributions) on an \"AS IS\" BASIS,\n      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or\n      implied, including, without limitation, any warranties or conditions\n      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A\n      PARTICULAR PURPOSE. You are solely responsible for determining the\n      appropriateness of using or redistributing the Work and assume any\n      risks associated with Your exercise of permissions under this License.\n\n   8. Limitation of Liability. In no event and under no legal theory,\n      whether in tort (including negligence), contract, or otherwise,\n      unless required by applicable law (such as deliberate and grossly\n      negligent acts) or agreed to in writing, shall any Contributor be\n      liable to You for damages, including any direct, indirect, special,\n      incidental, or consequential damages of any character arising as a\n      result of this License or out of the use or inability to use the\n      Work (including but not limited to damages for loss of goodwill,\n      work stoppage, computer failure or malfunction, or any and all\n      other commercial damages or losses), even if such Contributor\n      has been advised of the possibility of such damages.\n\n   9. Accepting Warranty or Additional Liability. While redistributing\n      the Work or Derivative Works thereof, You may choose to offer,\n      and charge a fee for, acceptance of support, warranty, indemnity,\n      or other liability obligations and/or rights consistent with this\n      License. However, in accepting such obligations, You may act only\n      on Your own behalf and on Your sole responsibility, not on behalf\n      of any other Contributor, and only if You agree to indemnify,\n      defend, and hold each Contributor harmless for any liability\n      incurred by, or claims asserted against, such Contributor by reason\n      of your accepting any such warranty or additional liability.\n\n   END OF TERMS AND CONDITIONS\n\n   APPENDIX: How to apply the Apache License to your work.\n\n      To apply the Apache License to your work, attach the following\n      boilerplate notice, with the fields enclosed by brackets \"{}\"\n      replaced with your own identifying information. (Don't include\n      the brackets!)  The text should be enclosed in the appropriate\n      comment syntax for the file format. We also recommend that a\n      file or class name and description of purpose be included on the\n      same \"printed page\" as the copyright notice for easier\n      identification within third-party archives.\n\n   Copyright {yyyy} {name of copyright owner}\n\n   Licensed under the Apache License, Version 2.0 (the \"License\");\n   you may not use this file except in compliance with the License.\n   You may obtain a copy of the License at\n\n       http://www.apache.org/licenses/LICENSE-2.0\n\n   Unless required by applicable law or agreed to in writing, software\n   distributed under the License is distributed on an \"AS IS\" BASIS,\n   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n   See the License for the specific language governing permissions and\n   limitations under the License.\n",
+    "ecosystem": "go"
+  },
+  {
+    "name": "github.com/kubernetes-sigs/yaml",
+    "version": "v1.6.0",
+    "license": "Apache-2.0",
+    "repository": "https://github.com/kubernetes-sigs/yaml",
+    "license_text": "The MIT License (MIT)\n\nCopyright (c) 2014 Sam Ghods\n\nPermission is hereby granted, free of charge, to any person obtaining a copy\nof this software and associated documentation files (the \"Software\"), to deal\nin the Software without restriction, including without limitation the rights\nto use, copy, modify, merge, publish, distribute, sublicense, and/or sell\ncopies of the Software, and to permit persons to whom the Software is\nfurnished to do so, subject to the following conditions:\n\nThe above copyright notice and this permission notice shall be included in all\ncopies or substantial portions of the Software.\n\nTHE SOFTWARE IS PROVIDED \"AS IS\", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR\nIMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,\nFITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE\nAUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER\nLIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,\nOUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE\nSOFTWARE.\n\n\nCopyright (c) 2012 The Go Authors. All rights reserved.\n\nRedistribution and use in source and binary forms, with or without\nmodification, are permitted provided that the following conditions are\nmet:\n\n   * Redistributions of source code must retain the above copyright\nnotice, this list of conditions and the following disclaimer.\n   * Redistributions in binary form must reproduce the above\ncopyright notice, this list of conditions and the following disclaimer\nin the documentation and/or other materials provided with the\ndistribution.\n   * Neither the name of Google Inc. nor the names of its\ncontributors may be used to endorse or promote products derived from\nthis software without specific prior written permission.\n\nTHIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS\n\"AS IS\" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT\nLIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR\nA PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT\nOWNER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,\nSPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT\nLIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,\nDATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY\nTHEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT\n(INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE\nOF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.\n\n# The forked go-yaml.v3 library under this project is covered by two\ndifferent licenses (MIT and Apache):\n\n#### MIT License ####\n\nThe following files were ported to Go from C files of libyaml, and thus\nare still covered by their original MIT license, with the additional\ncopyright staring in 2011 when the project was ported over:\n\n    apic.go emitterc.go parserc.go readerc.go scannerc.go\n    writerc.go yamlh.go yamlprivateh.go\n\nCopyright (c) 2006-2010 Kirill Simonov\nCopyright (c) 2006-2011 Kirill Simonov\n\nPermission is hereby granted, free of charge, to any person obtaining a copy of\nthis software and associated documentation files (the \"Software\"), to deal in\nthe Software without restriction, including without limitation the rights to\nuse, copy, modify, merge, publish, distribute, sublicense, and/or sell copies\nof the Software, and to permit persons to whom the Software is furnished to do\nso, subject to the following conditions:\n\nThe above copyright notice and this permission notice shall be included in all\ncopies or substantial portions of the Software.\n\nTHE SOFTWARE IS PROVIDED \"AS IS\", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR\nIMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,\nFITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE\nAUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER\nLIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,\nOUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE\nSOFTWARE.\n\n### Apache License ###\n\nAll the remaining project files are covered by the Apache license:\n\nCopyright (c) 2011-2019 Canonical Ltd\n\nLicensed under the Apache License, Version 2.0 (the \"License\");\nyou may not use this file except in compliance with the License.\nYou may obtain a copy of the License at\n\n    http://www.apache.org/licenses/LICENSE-2.0\n\nUnless required by applicable law or agreed to in writing, software\ndistributed under the License is distributed on an \"AS IS\" BASIS,\nWITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\nSee the License for the specific language governing permissions and\nlimitations under the License.\n\n# The forked go-yaml.v2 library under the project is covered by an\nApache license:\n\n                                 Apache License\n                           Version 2.0, January 2004\n                        http://www.apache.org/licenses/\n\n   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION\n\n   1. Definitions.\n\n      \"License\" shall mean the terms and conditions for use, reproduction,\n      and distribution as defined by Sections 1 through 9 of this document.\n\n      \"Licensor\" shall mean the copyright owner or entity authorized by\n      the copyright owner that is granting the License.\n\n      \"Legal Entity\" shall mean the union of the acting entity and all\n      other entities that control, are controlled by, or are under common\n      control with that entity. For the purposes of this definition,\n      \"control\" means (i) the power, direct or indirect, to cause the\n      direction or management of such entity, whether by contract or\n      otherwise, or (ii) ownership of fifty percent (50%) or more of the\n      outstanding shares, or (iii) beneficial ownership of such entity.\n\n      \"You\" (or \"Your\") shall mean an individual or Legal Entity\n      exercising permissions granted by this License.\n\n      \"Source\" form shall mean the preferred form for making modifications,\n      including but not limited to software source code, documentation\n      source, and configuration files.\n\n      \"Object\" form shall mean any form resulting from mechanical\n      transformation or translation of a Source form, including but\n      not limited to compiled object code, generated documentation,\n      and conversions to other media types.\n\n      \"Work\" shall mean the work of authorship, whether in Source or\n      Object form, made available under the License, as indicated by a\n      copyright notice that is included in or attached to the work\n      (an example is provided in the Appendix below).\n\n      \"Derivative Works\" shall mean any work, whether in Source or Object\n      form, that is based on (or derived from) the Work and for which the\n      editorial revisions, annotations, elaborations, or other modifications\n      represent, as a whole, an original work of authorship. For the purposes\n      of this License, Derivative Works shall not include works that remain\n      separable from, or merely link (or bind by name) to the interfaces of,\n      the Work and Derivative Works thereof.\n\n      \"Contribution\" shall mean any work of authorship, including\n      the original version of the Work and any modifications or additions\n      to that Work or Derivative Works thereof, that is intentionally\n      submitted to Licensor for inclusion in the Work by the copyright owner\n      or by an individual or Legal Entity authorized to submit on behalf of\n      the copyright owner. For the purposes of this definition, \"submitted\"\n      means any form of electronic, verbal, or written communication sent\n      to the Licensor or its representatives, including but not limited to\n      communication on electronic mailing lists, source code control systems,\n      and issue tracking systems that are managed by, or on behalf of, the\n      Licensor for the purpose of discussing and improving the Work, but\n      excluding communication that is conspicuously marked or otherwise\n      designated in writing by the copyright owner as \"Not a Contribution.\"\n\n      \"Contributor\" shall mean Licensor and any individual or Legal Entity\n      on behalf of whom a Contribution has been received by Licensor and\n      subsequently incorporated within the Work.\n\n   2. Grant of Copyright License. Subject to the terms and conditions of\n      this License, each Contributor hereby grants to You a perpetual,\n      worldwide, non-exclusive, no-charge, royalty-free, irrevocable\n      copyright license to reproduce, prepare Derivative Works of,\n      publicly display, publicly perform, sublicense, and distribute the\n      Work and such Derivative Works in Source or Object form.\n\n   3. Grant of Patent License. Subject to the terms and conditions of\n      this License, each Contributor hereby grants to You a perpetual,\n      worldwide, non-exclusive, no-charge, royalty-free, irrevocable\n      (except as stated in this section) patent license to make, have made,\n      use, offer to sell, sell, import, and otherwise transfer the Work,\n      where such license applies only to those patent claims licensable\n      by such Contributor that are necessarily infringed by their\n      Contribution(s) alone or by combination of their Contribution(s)\n      with the Work to which such Contribution(s) was submitted. If You\n      institute patent litigation against any entity (including a\n      cross-claim or counterclaim in a lawsuit) alleging that the Work\n      or a Contribution incorporated within the Work constitutes direct\n      or contributory patent infringement, then any patent licenses\n      granted to You under this License for that Work shall terminate\n      as of the date such litigation is filed.\n\n   4. Redistribution. You may reproduce and distribute copies of the\n      Work or Derivative Works thereof in any medium, with or without\n      modifications, and in Source or Object form, provided that You\n      meet the following conditions:\n\n      (a) You must give any other recipients of the Work or\n          Derivative Works a copy of this License; and\n\n      (b) You must cause any modified files to carry prominent notices\n          stating that You changed the files; and\n\n      (c) You must retain, in the Source form of any Derivative Works\n          that You distribute, all copyright, patent, trademark, and\n          attribution notices from the Source form of the Work,\n          excluding those notices that do not pertain to any part of\n          the Derivative Works; and\n\n      (d) If the Work includes a \"NOTICE\" text file as part of its\n          distribution, then any Derivative Works that You distribute must\n          include a readable copy of the attribution notices contained\n          within such NOTICE file, excluding those notices that do not\n          pertain to any part of the Derivative Works, in at least one\n          of the following places: within a NOTICE text file distributed\n          as part of the Derivative Works; within the Source form or\n          documentation, if provided along with the Derivative Works; or,\n          within a display generated by the Derivative Works, if and\n          wherever such third-party notices normally appear. The contents\n          of the NOTICE file are for informational purposes only and\n          do not modify the License. You may add Your own attribution\n          notices within Derivative Works that You distribute, alongside\n          or as an addendum to the NOTICE text from the Work, provided\n          that such additional attribution notices cannot be construed\n          as modifying the License.\n\n      You may add Your own copyright statement to Your modifications and\n      may provide additional or different license terms and conditions\n      for use, reproduction, or distribution of Your modifications, or\n      for any such Derivative Works as a whole, provided Your use,\n      reproduction, and distribution of the Work otherwise complies with\n      the conditions stated in this License.\n\n   5. Submission of Contributions. Unless You explicitly state otherwise,\n      any Contribution intentionally submitted for inclusion in the Work\n      by You to the Licensor shall be under the terms and conditions of\n      this License, without any additional terms or conditions.\n      Notwithstanding the above, nothing herein shall supersede or modify\n      the terms of any separate license agreement you may have executed\n      with Licensor regarding such Contributions.\n\n   6. Trademarks. This License does not grant permission to use the trade\n      names, trademarks, service marks, or product names of the Licensor,\n      except as required for reasonable and customary use in describing the\n      origin of the Work and reproducing the content of the NOTICE file.\n\n   7. Disclaimer of Warranty. Unless required by applicable law or\n      agreed to in writing, Licensor provides the Work (and each\n      Contributor provides its Contributions) on an \"AS IS\" BASIS,\n      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or\n      implied, including, without limitation, any warranties or conditions\n      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A\n      PARTICULAR PURPOSE. You are solely responsible for determining the\n      appropriateness of using or redistributing the Work and assume any\n      risks associated with Your exercise of permissions under this License.\n\n   8. Limitation of Liability. In no event and under no legal theory,\n      whether in tort (including negligence), contract, or otherwise,\n      unless required by applicable law (such as deliberate and grossly\n      negligent acts) or agreed to in writing, shall any Contributor be\n      liable to You for damages, including any direct, indirect, special,\n      incidental, or consequential damages of any character arising as a\n      result of this License or out of the use or inability to use the\n      Work (including but not limited to damages for loss of goodwill,\n      work stoppage, computer failure or malfunction, or any and all\n      other commercial damages or losses), even if such Contributor\n      has been advised of the possibility of such damages.\n\n   9. Accepting Warranty or Additional Liability. While redistributing\n      the Work or Derivative Works thereof, You may choose to offer,\n      and charge a fee for, acceptance of support, warranty, indemnity,\n      or other liability obligations and/or rights consistent with this\n      License. However, in accepting such obligations, You may act only\n      on Your own behalf and on Your sole responsibility, not on behalf\n      of any other Contributor, and only if You agree to indemnify,\n      defend, and hold each Contributor harmless for any liability\n      incurred by, or claims asserted against, such Contributor by reason\n      of your accepting any such warranty or additional liability.\n\n   END OF TERMS AND CONDITIONS\n\n   APPENDIX: How to apply the Apache License to your work.\n\n      To apply the Apache License to your work, attach the following\n      boilerplate notice, with the fields enclosed by brackets \"{}\"\n      replaced with your own identifying information. (Don't include\n      the brackets!)  The text should be enclosed in the appropriate\n      comment syntax for the file format. We also recommend that a\n      file or class name and description of purpose be included on the\n      same \"printed page\" as the copyright notice for easier\n      identification within third-party archives.\n\n   Copyright {yyyy} {name of copyright owner}\n\n   Licensed under the Apache License, Version 2.0 (the \"License\");\n   you may not use this file except in compliance with the License.\n   You may obtain a copy of the License at\n\n       http://www.apache.org/licenses/LICENSE-2.0\n\n   Unless required by applicable law or agreed to in writing, software\n   distributed under the License is distributed on an \"AS IS\" BASIS,\n   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n   See the License for the specific language governing permissions and\n   limitations under the License.\n",
+    "ecosystem": "go"
+  },
+  {
+    "name": "github.com/kubernetes/api",
+    "version": "v0.35.5",
+    "license": "Apache-2.0",
+    "repository": "https://github.com/kubernetes/api",
+    "license_text": "\n                                 Apache License\n                           Version 2.0, January 2004\n                        http://www.apache.org/licenses/\n\n   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION\n\n   1. Definitions.\n\n      \"License\" shall mean the terms and conditions for use, reproduction,\n      and distribution as defined by Sections 1 through 9 of this document.\n\n      \"Licensor\" shall mean the copyright owner or entity authorized by\n      the copyright owner that is granting the License.\n\n      \"Legal Entity\" shall mean the union of the acting entity and all\n      other entities that control, are controlled by, or are under common\n      control with that entity. For the purposes of this definition,\n      \"control\" means (i) the power, direct or indirect, to cause the\n      direction or management of such entity, whether by contract or\n      otherwise, or (ii) ownership of fifty percent (50%) or more of the\n      outstanding shares, or (iii) beneficial ownership of such entity.\n\n      \"You\" (or \"Your\") shall mean an individual or Legal Entity\n      exercising permissions granted by this License.\n\n      \"Source\" form shall mean the preferred form for making modifications,\n      including but not limited to software source code, documentation\n      source, and configuration files.\n\n      \"Object\" form shall mean any form resulting from mechanical\n      transformation or translation of a Source form, including but\n      not limited to compiled object code, generated documentation,\n      and conversions to other media types.\n\n      \"Work\" shall mean the work of authorship, whether in Source or\n      Object form, made available under the License, as indicated by a\n      copyright notice that is included in or attached to the work\n      (an example is provided in the Appendix below).\n\n      \"Derivative Works\" shall mean any work, whether in Source or Object\n      form, that is based on (or derived from) the Work and for which the\n      editorial revisions, annotations, elaborations, or other modifications\n      represent, as a whole, an original work of authorship. For the purposes\n      of this License, Derivative Works shall not include works that remain\n      separable from, or merely link (or bind by name) to the interfaces of,\n      the Work and Derivative Works thereof.\n\n      \"Contribution\" shall mean any work of authorship, including\n      the original version of the Work and any modifications or additions\n      to that Work or Derivative Works thereof, that is intentionally\n      submitted to Licensor for inclusion in the Work by the copyright owner\n      or by an individual or Legal Entity authorized to submit on behalf of\n      the copyright owner. For the purposes of this definition, \"submitted\"\n      means any form of electronic, verbal, or written communication sent\n      to the Licensor or its representatives, including but not limited to\n      communication on electronic mailing lists, source code control systems,\n      and issue tracking systems that are managed by, or on behalf of, the\n      Licensor for the purpose of discussing and improving the Work, but\n      excluding communication that is conspicuously marked or otherwise\n      designated in writing by the copyright owner as \"Not a Contribution.\"\n\n      \"Contributor\" shall mean Licensor and any individual or Legal Entity\n      on behalf of whom a Contribution has been received by Licensor and\n      subsequently incorporated within the Work.\n\n   2. Grant of Copyright License. Subject to the terms and conditions of\n      this License, each Contributor hereby grants to You a perpetual,\n      worldwide, non-exclusive, no-charge, royalty-free, irrevocable\n      copyright license to reproduce, prepare Derivative Works of,\n      publicly display, publicly perform, sublicense, and distribute the\n      Work and such Derivative Works in Source or Object form.\n\n   3. Grant of Patent License. Subject to the terms and conditions of\n      this License, each Contributor hereby grants to You a perpetual,\n      worldwide, non-exclusive, no-charge, royalty-free, irrevocable\n      (except as stated in this section) patent license to make, have made,\n      use, offer to sell, sell, import, and otherwise transfer the Work,\n      where such license applies only to those patent claims licensable\n      by such Contributor that are necessarily infringed by their\n      Contribution(s) alone or by combination of their Contribution(s)\n      with the Work to which such Contribution(s) was submitted. If You\n      institute patent litigation against any entity (including a\n      cross-claim or counterclaim in a lawsuit) alleging that the Work\n      or a Contribution incorporated within the Work constitutes direct\n      or contributory patent infringement, then any patent licenses\n      granted to You under this License for that Work shall terminate\n      as of the date such litigation is filed.\n\n   4. Redistribution. You may reproduce and distribute copies of the\n      Work or Derivative Works thereof in any medium, with or without\n      modifications, and in Source or Object form, provided that You\n      meet the following conditions:\n\n      (a) You must give any other recipients of the Work or\n          Derivative Works a copy of this License; and\n\n      (b) You must cause any modified files to carry prominent notices\n          stating that You changed the files; and\n\n      (c) You must retain, in the Source form of any Derivative Works\n          that You distribute, all copyright, patent, trademark, and\n          attribution notices from the Source form of the Work,\n          excluding those notices that do not pertain to any part of\n          the Derivative Works; and\n\n      (d) If the Work includes a \"NOTICE\" text file as part of its\n          distribution, then any Derivative Works that You distribute must\n          include a readable copy of the attribution notices contained\n          within such NOTICE file, excluding those notices that do not\n          pertain to any part of the Derivative Works, in at least one\n          of the following places: within a NOTICE text file distributed\n          as part of the Derivative Works; within the Source form or\n          documentation, if provided along with the Derivative Works; or,\n          within a display generated by the Derivative Works, if and\n          wherever such third-party notices normally appear. The contents\n          of the NOTICE file are for informational purposes only and\n          do not modify the License. You may add Your own attribution\n          notices within Derivative Works that You distribute, alongside\n          or as an addendum to the NOTICE text from the Work, provided\n          that such additional attribution notices cannot be construed\n          as modifying the License.\n\n      You may add Your own copyright statement to Your modifications and\n      may provide additional or different license terms and conditions\n      for use, reproduction, or distribution of Your modifications, or\n      for any such Derivative Works as a whole, provided Your use,\n      reproduction, and distribution of the Work otherwise complies with\n      the conditions stated in this License.\n\n   5. Submission of Contributions. Unless You explicitly state otherwise,\n      any Contribution intentionally submitted for inclusion in the Work\n      by You to the Licensor shall be under the terms and conditions of\n      this License, without any additional terms or conditions.\n      Notwithstanding the above, nothing herein shall supersede or modify\n      the terms of any separate license agreement you may have executed\n      with Licensor regarding such Contributions.\n\n   6. Trademarks. This License does not grant permission to use the trade\n      names, trademarks, service marks, or product names of the Licensor,\n      except as required for reasonable and customary use in describing the\n      origin of the Work and reproducing the content of the NOTICE file.\n\n   7. Disclaimer of Warranty. Unless required by applicable law or\n      agreed to in writing, Licensor provides the Work (and each\n      Contributor provides its Contributions) on an \"AS IS\" BASIS,\n      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or\n      implied, including, without limitation, any warranties or conditions\n      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A\n      PARTICULAR PURPOSE. You are solely responsible for determining the\n      appropriateness of using or redistributing the Work and assume any\n      risks associated with Your exercise of permissions under this License.\n\n   8. Limitation of Liability. In no event and under no legal theory,\n      whether in tort (including negligence), contract, or otherwise,\n      unless required by applicable law (such as deliberate and grossly\n      negligent acts) or agreed to in writing, shall any Contributor be\n      liable to You for damages, including any direct, indirect, special,\n      incidental, or consequential damages of any character arising as a\n      result of this License or out of the use or inability to use the\n      Work (including but not limited to damages for loss of goodwill,\n      work stoppage, computer failure or malfunction, or any and all\n      other commercial damages or losses), even if such Contributor\n      has been advised of the possibility of such damages.\n\n   9. Accepting Warranty or Additional Liability. While redistributing\n      the Work or Derivative Works thereof, You may choose to offer,\n      and charge a fee for, acceptance of support, warranty, indemnity,\n      or other liability obligations and/or rights consistent with this\n      License. However, in accepting such obligations, You may act only\n      on Your own behalf and on Your sole responsibility, not on behalf\n      of any other Contributor, and only if You agree to indemnify,\n      defend, and hold each Contributor harmless for any liability\n      incurred by, or claims asserted against, such Contributor by reason\n      of your accepting any such warranty or additional liability.\n\n   END OF TERMS AND CONDITIONS\n\n   APPENDIX: How to apply the Apache License to your work.\n\n      To apply the Apache License to your work, attach the following\n      boilerplate notice, with the fields enclosed by brackets \"[]\"\n      replaced with your own identifying information. (Don't include\n      the brackets!)  The text should be enclosed in the appropriate\n      comment syntax for the file format. We also recommend that a\n      file or class name and description of purpose be included on the\n      same \"printed page\" as the copyright notice for easier\n      identification within third-party archives.\n\n   Copyright [yyyy] [name of copyright owner]\n\n   Licensed under the Apache License, Version 2.0 (the \"License\");\n   you may not use this file except in compliance with the License.\n   You may obtain a copy of the License at\n\n       http://www.apache.org/licenses/LICENSE-2.0\n\n   Unless required by applicable law or agreed to in writing, software\n   distributed under the License is distributed on an \"AS IS\" BASIS,\n   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n   See the License for the specific language governing permissions and\n   limitations under the License.\n",
+    "ecosystem": "go"
+  },
+  {
+    "name": "github.com/kubernetes/apimachinery",
+    "version": "v0.35.5",
+    "license": "Apache-2.0",
+    "repository": "https://github.com/kubernetes/apimachinery",
+    "license_text": "\n                                 Apache License\n                           Version 2.0, January 2004\n                        http://www.apache.org/licenses/\n\n   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION\n\n   1. Definitions.\n\n      \"License\" shall mean the terms and conditions for use, reproduction,\n      and distribution as defined by Sections 1 through 9 of this document.\n\n      \"Licensor\" shall mean the copyright owner or entity authorized by\n      the copyright owner that is granting the License.\n\n      \"Legal Entity\" shall mean the union of the acting entity and all\n      other entities that control, are controlled by, or are under common\n      control with that entity. For the purposes of this definition,\n      \"control\" means (i) the power, direct or indirect, to cause the\n      direction or management of such entity, whether by contract or\n      otherwise, or (ii) ownership of fifty percent (50%) or more of the\n      outstanding shares, or (iii) beneficial ownership of such entity.\n\n      \"You\" (or \"Your\") shall mean an individual or Legal Entity\n      exercising permissions granted by this License.\n\n      \"Source\" form shall mean the preferred form for making modifications,\n      including but not limited to software source code, documentation\n      source, and configuration files.\n\n      \"Object\" form shall mean any form resulting from mechanical\n      transformation or translation of a Source form, including but\n      not limited to compiled object code, generated documentation,\n      and conversions to other media types.\n\n      \"Work\" shall mean the work of authorship, whether in Source or\n      Object form, made available under the License, as indicated by a\n      copyright notice that is included in or attached to the work\n      (an example is provided in the Appendix below).\n\n      \"Derivative Works\" shall mean any work, whether in Source or Object\n      form, that is based on (or derived from) the Work and for which the\n      editorial revisions, annotations, elaborations, or other modifications\n      represent, as a whole, an original work of authorship. For the purposes\n      of this License, Derivative Works shall not include works that remain\n      separable from, or merely link (or bind by name) to the interfaces of,\n      the Work and Derivative Works thereof.\n\n      \"Contribution\" shall mean any work of authorship, including\n      the original version of the Work and any modifications or additions\n      to that Work or Derivative Works thereof, that is intentionally\n      submitted to Licensor for inclusion in the Work by the copyright owner\n      or by an individual or Legal Entity authorized to submit on behalf of\n      the copyright owner. For the purposes of this definition, \"submitted\"\n      means any form of electronic, verbal, or written communication sent\n      to the Licensor or its representatives, including but not limited to\n      communication on electronic mailing lists, source code control systems,\n      and issue tracking systems that are managed by, or on behalf of, the\n      Licensor for the purpose of discussing and improving the Work, but\n      excluding communication that is conspicuously marked or otherwise\n      designated in writing by the copyright owner as \"Not a Contribution.\"\n\n      \"Contributor\" shall mean Licensor and any individual or Legal Entity\n      on behalf of whom a Contribution has been received by Licensor and\n      subsequently incorporated within the Work.\n\n   2. Grant of Copyright License. Subject to the terms and conditions of\n      this License, each Contributor hereby grants to You a perpetual,\n      worldwide, non-exclusive, no-charge, royalty-free, irrevocable\n      copyright license to reproduce, prepare Derivative Works of,\n      publicly display, publicly perform, sublicense, and distribute the\n      Work and such Derivative Works in Source or Object form.\n\n   3. Grant of Patent License. Subject to the terms and conditions of\n      this License, each Contributor hereby grants to You a perpetual,\n      worldwide, non-exclusive, no-charge, royalty-free, irrevocable\n      (except as stated in this section) patent license to make, have made,\n      use, offer to sell, sell, import, and otherwise transfer the Work,\n      where such license applies only to those patent claims licensable\n      by such Contributor that are necessarily infringed by their\n      Contribution(s) alone or by combination of their Contribution(s)\n      with the Work to which such Contribution(s) was submitted. If You\n      institute patent litigation against any entity (including a\n      cross-claim or counterclaim in a lawsuit) alleging that the Work\n      or a Contribution incorporated within the Work constitutes direct\n      or contributory patent infringement, then any patent licenses\n      granted to You under this License for that Work shall terminate\n      as of the date such litigation is filed.\n\n   4. Redistribution. You may reproduce and distribute copies of the\n      Work or Derivative Works thereof in any medium, with or without\n      modifications, and in Source or Object form, provided that You\n      meet the following conditions:\n\n      (a) You must give any other recipients of the Work or\n          Derivative Works a copy of this License; and\n\n      (b) You must cause any modified files to carry prominent notices\n          stating that You changed the files; and\n\n      (c) You must retain, in the Source form of any Derivative Works\n          that You distribute, all copyright, patent, trademark, and\n          attribution notices from the Source form of the Work,\n          excluding those notices that do not pertain to any part of\n          the Derivative Works; and\n\n      (d) If the Work includes a \"NOTICE\" text file as part of its\n          distribution, then any Derivative Works that You distribute must\n          include a readable copy of the attribution notices contained\n          within such NOTICE file, excluding those notices that do not\n          pertain to any part of the Derivative Works, in at least one\n          of the following places: within a NOTICE text file distributed\n          as part of the Derivative Works; within the Source form or\n          documentation, if provided along with the Derivative Works; or,\n          within a display generated by the Derivative Works, if and\n          wherever such third-party notices normally appear. The contents\n          of the NOTICE file are for informational purposes only and\n          do not modify the License. You may add Your own attribution\n          notices within Derivative Works that You distribute, alongside\n          or as an addendum to the NOTICE text from the Work, provided\n          that such additional attribution notices cannot be construed\n          as modifying the License.\n\n      You may add Your own copyright statement to Your modifications and\n      may provide additional or different license terms and conditions\n      for use, reproduction, or distribution of Your modifications, or\n      for any such Derivative Works as a whole, provided Your use,\n      reproduction, and distribution of the Work otherwise complies with\n      the conditions stated in this License.\n\n   5. Submission of Contributions. Unless You explicitly state otherwise,\n      any Contribution intentionally submitted for inclusion in the Work\n      by You to the Licensor shall be under the terms and conditions of\n      this License, without any additional terms or conditions.\n      Notwithstanding the above, nothing herein shall supersede or modify\n      the terms of any separate license agreement you may have executed\n      with Licensor regarding such Contributions.\n\n   6. Trademarks. This License does not grant permission to use the trade\n      names, trademarks, service marks, or product names of the Licensor,\n      except as required for reasonable and customary use in describing the\n      origin of the Work and reproducing the content of the NOTICE file.\n\n   7. Disclaimer of Warranty. Unless required by applicable law or\n      agreed to in writing, Licensor provides the Work (and each\n      Contributor provides its Contributions) on an \"AS IS\" BASIS,\n      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or\n      implied, including, without limitation, any warranties or conditions\n      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A\n      PARTICULAR PURPOSE. You are solely responsible for determining the\n      appropriateness of using or redistributing the Work and assume any\n      risks associated with Your exercise of permissions under this License.\n\n   8. Limitation of Liability. In no event and under no legal theory,\n      whether in tort (including negligence), contract, or otherwise,\n      unless required by applicable law (such as deliberate and grossly\n      negligent acts) or agreed to in writing, shall any Contributor be\n      liable to You for damages, including any direct, indirect, special,\n      incidental, or consequential damages of any character arising as a\n      result of this License or out of the use or inability to use the\n      Work (including but not limited to damages for loss of goodwill,\n      work stoppage, computer failure or malfunction, or any and all\n      other commercial damages or losses), even if such Contributor\n      has been advised of the possibility of such damages.\n\n   9. Accepting Warranty or Additional Liability. While redistributing\n      the Work or Derivative Works thereof, You may choose to offer,\n      and charge a fee for, acceptance of support, warranty, indemnity,\n      or other liability obligations and/or rights consistent with this\n      License. However, in accepting such obligations, You may act only\n      on Your own behalf and on Your sole responsibility, not on behalf\n      of any other Contributor, and only if You agree to indemnify,\n      defend, and hold each Contributor harmless for any liability\n      incurred by, or claims asserted against, such Contributor by reason\n      of your accepting any such warranty or additional liability.\n\n   END OF TERMS AND CONDITIONS\n\n   APPENDIX: How to apply the Apache License to your work.\n\n      To apply the Apache License to your work, attach the following\n      boilerplate notice, with the fields enclosed by brackets \"[]\"\n      replaced with your own identifying information. (Don't include\n      the brackets!)  The text should be enclosed in the appropriate\n      comment syntax for the file format. We also recommend that a\n      file or class name and description of purpose be included on the\n      same \"printed page\" as the copyright notice for easier\n      identification within third-party archives.\n\n   Copyright [yyyy] [name of copyright owner]\n\n   Licensed under the Apache License, Version 2.0 (the \"License\");\n   you may not use this file except in compliance with the License.\n   You may obtain a copy of the License at\n\n       http://www.apache.org/licenses/LICENSE-2.0\n\n   Unless required by applicable law or agreed to in writing, software\n   distributed under the License is distributed on an \"AS IS\" BASIS,\n   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n   See the License for the specific language governing permissions and\n   limitations under the License.\n",
+    "ecosystem": "go"
+  },
+  {
+    "name": "github.com/kubernetes/client-go",
+    "version": "v0.35.5",
+    "license": "Apache-2.0",
+    "repository": "https://github.com/kubernetes/client-go",
+    "license_text": "\n                                 Apache License\n                           Version 2.0, January 2004\n                        http://www.apache.org/licenses/\n\n   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION\n\n   1. Definitions.\n\n      \"License\" shall mean the terms and conditions for use, reproduction,\n      and distribution as defined by Sections 1 through 9 of this document.\n\n      \"Licensor\" shall mean the copyright owner or entity authorized by\n      the copyright owner that is granting the License.\n\n      \"Legal Entity\" shall mean the union of the acting entity and all\n      other entities that control, are controlled by, or are under common\n      control with that entity. For the purposes of this definition,\n      \"control\" means (i) the power, direct or indirect, to cause the\n      direction or management of such entity, whether by contract or\n      otherwise, or (ii) ownership of fifty percent (50%) or more of the\n      outstanding shares, or (iii) beneficial ownership of such entity.\n\n      \"You\" (or \"Your\") shall mean an individual or Legal Entity\n      exercising permissions granted by this License.\n\n      \"Source\" form shall mean the preferred form for making modifications,\n      including but not limited to software source code, documentation\n      source, and configuration files.\n\n      \"Object\" form shall mean any form resulting from mechanical\n      transformation or translation of a Source form, including but\n      not limited to compiled object code, generated documentation,\n      and conversions to other media types.\n\n      \"Work\" shall mean the work of authorship, whether in Source or\n      Object form, made available under the License, as indicated by a\n      copyright notice that is included in or attached to the work\n      (an example is provided in the Appendix below).\n\n      \"Derivative Works\" shall mean any work, whether in Source or Object\n      form, that is based on (or derived from) the Work and for which the\n      editorial revisions, annotations, elaborations, or other modifications\n      represent, as a whole, an original work of authorship. For the purposes\n      of this License, Derivative Works shall not include works that remain\n      separable from, or merely link (or bind by name) to the interfaces of,\n      the Work and Derivative Works thereof.\n\n      \"Contribution\" shall mean any work of authorship, including\n      the original version of the Work and any modifications or additions\n      to that Work or Derivative Works thereof, that is intentionally\n      submitted to Licensor for inclusion in the Work by the copyright owner\n      or by an individual or Legal Entity authorized to submit on behalf of\n      the copyright owner. For the purposes of this definition, \"submitted\"\n      means any form of electronic, verbal, or written communication sent\n      to the Licensor or its representatives, including but not limited to\n      communication on electronic mailing lists, source code control systems,\n      and issue tracking systems that are managed by, or on behalf of, the\n      Licensor for the purpose of discussing and improving the Work, but\n      excluding communication that is conspicuously marked or otherwise\n      designated in writing by the copyright owner as \"Not a Contribution.\"\n\n      \"Contributor\" shall mean Licensor and any individual or Legal Entity\n      on behalf of whom a Contribution has been received by Licensor and\n      subsequently incorporated within the Work.\n\n   2. Grant of Copyright License. Subject to the terms and conditions of\n      this License, each Contributor hereby grants to You a perpetual,\n      worldwide, non-exclusive, no-charge, royalty-free, irrevocable\n      copyright license to reproduce, prepare Derivative Works of,\n      publicly display, publicly perform, sublicense, and distribute the\n      Work and such Derivative Works in Source or Object form.\n\n   3. Grant of Patent License. Subject to the terms and conditions of\n      this License, each Contributor hereby grants to You a perpetual,\n      worldwide, non-exclusive, no-charge, royalty-free, irrevocable\n      (except as stated in this section) patent license to make, have made,\n      use, offer to sell, sell, import, and otherwise transfer the Work,\n      where such license applies only to those patent claims licensable\n      by such Contributor that are necessarily infringed by their\n      Contribution(s) alone or by combination of their Contribution(s)\n      with the Work to which such Contribution(s) was submitted. If You\n      institute patent litigation against any entity (including a\n      cross-claim or counterclaim in a lawsuit) alleging that the Work\n      or a Contribution incorporated within the Work constitutes direct\n      or contributory patent infringement, then any patent licenses\n      granted to You under this License for that Work shall terminate\n      as of the date such litigation is filed.\n\n   4. Redistribution. You may reproduce and distribute copies of the\n      Work or Derivative Works thereof in any medium, with or without\n      modifications, and in Source or Object form, provided that You\n      meet the following conditions:\n\n      (a) You must give any other recipients of the Work or\n          Derivative Works a copy of this License; and\n\n      (b) You must cause any modified files to carry prominent notices\n          stating that You changed the files; and\n\n      (c) You must retain, in the Source form of any Derivative Works\n          that You distribute, all copyright, patent, trademark, and\n          attribution notices from the Source form of the Work,\n          excluding those notices that do not pertain to any part of\n          the Derivative Works; and\n\n      (d) If the Work includes a \"NOTICE\" text file as part of its\n          distribution, then any Derivative Works that You distribute must\n          include a readable copy of the attribution notices contained\n          within such NOTICE file, excluding those notices that do not\n          pertain to any part of the Derivative Works, in at least one\n          of the following places: within a NOTICE text file distributed\n          as part of the Derivative Works; within the Source form or\n          documentation, if provided along with the Derivative Works; or,\n          within a display generated by the Derivative Works, if and\n          wherever such third-party notices normally appear. The contents\n          of the NOTICE file are for informational purposes only and\n          do not modify the License. You may add Your own attribution\n          notices within Derivative Works that You distribute, alongside\n          or as an addendum to the NOTICE text from the Work, provided\n          that such additional attribution notices cannot be construed\n          as modifying the License.\n\n      You may add Your own copyright statement to Your modifications and\n      may provide additional or different license terms and conditions\n      for use, reproduction, or distribution of Your modifications, or\n      for any such Derivative Works as a whole, provided Your use,\n      reproduction, and distribution of the Work otherwise complies with\n      the conditions stated in this License.\n\n   5. Submission of Contributions. Unless You explicitly state otherwise,\n      any Contribution intentionally submitted for inclusion in the Work\n      by You to the Licensor shall be under the terms and conditions of\n      this License, without any additional terms or conditions.\n      Notwithstanding the above, nothing herein shall supersede or modify\n      the terms of any separate license agreement you may have executed\n      with Licensor regarding such Contributions.\n\n   6. Trademarks. This License does not grant permission to use the trade\n      names, trademarks, service marks, or product names of the Licensor,\n      except as required for reasonable and customary use in describing the\n      origin of the Work and reproducing the content of the NOTICE file.\n\n   7. Disclaimer of Warranty. Unless required by applicable law or\n      agreed to in writing, Licensor provides the Work (and each\n      Contributor provides its Contributions) on an \"AS IS\" BASIS,\n      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or\n      implied, including, without limitation, any warranties or conditions\n      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A\n      PARTICULAR PURPOSE. You are solely responsible for determining the\n      appropriateness of using or redistributing the Work and assume any\n      risks associated with Your exercise of permissions under this License.\n\n   8. Limitation of Liability. In no event and under no legal theory,\n      whether in tort (including negligence), contract, or otherwise,\n      unless required by applicable law (such as deliberate and grossly\n      negligent acts) or agreed to in writing, shall any Contributor be\n      liable to You for damages, including any direct, indirect, special,\n      incidental, or consequential damages of any character arising as a\n      result of this License or out of the use or inability to use the\n      Work (including but not limited to damages for loss of goodwill,\n      work stoppage, computer failure or malfunction, or any and all\n      other commercial damages or losses), even if such Contributor\n      has been advised of the possibility of such damages.\n\n   9. Accepting Warranty or Additional Liability. While redistributing\n      the Work or Derivative Works thereof, You may choose to offer,\n      and charge a fee for, acceptance of support, warranty, indemnity,\n      or other liability obligations and/or rights consistent with this\n      License. However, in accepting such obligations, You may act only\n      on Your own behalf and on Your sole responsibility, not on behalf\n      of any other Contributor, and only if You agree to indemnify,\n      defend, and hold each Contributor harmless for any liability\n      incurred by, or claims asserted against, such Contributor by reason\n      of your accepting any such warranty or additional liability.\n\n   END OF TERMS AND CONDITIONS\n\n   APPENDIX: How to apply the Apache License to your work.\n\n      To apply the Apache License to your work, attach the following\n      boilerplate notice, with the fields enclosed by brackets \"[]\"\n      replaced with your own identifying information. (Don't include\n      the brackets!)  The text should be enclosed in the appropriate\n      comment syntax for the file format. We also recommend that a\n      file or class name and description of purpose be included on the\n      same \"printed page\" as the copyright notice for easier\n      identification within third-party archives.\n\n   Copyright [yyyy] [name of copyright owner]\n\n   Licensed under the Apache License, Version 2.0 (the \"License\");\n   you may not use this file except in compliance with the License.\n   You may obtain a copy of the License at\n\n       http://www.apache.org/licenses/LICENSE-2.0\n\n   Unless required by applicable law or agreed to in writing, software\n   distributed under the License is distributed on an \"AS IS\" BASIS,\n   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n   See the License for the specific language governing permissions and\n   limitations under the License.\n",
+    "ecosystem": "go"
+  },
+  {
+    "name": "github.com/kubernetes/klog",
+    "version": "v2.140.0",
+    "license": "Apache-2.0",
+    "repository": "https://github.com/kubernetes/klog",
+    "license_text": "Apache License\nVersion 2.0, January 2004\nhttp://www.apache.org/licenses/\n\nTERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION\n\n1. Definitions.\n\n\"License\" shall mean the terms and conditions for use, reproduction, and\ndistribution as defined by Sections 1 through 9 of this document.\n\n\"Licensor\" shall mean the copyright owner or entity authorized by the copyright\nowner that is granting the License.\n\n\"Legal Entity\" shall mean the union of the acting entity and all other entities\nthat control, are controlled by, or are under common control with that entity.\nFor the purposes of this definition, \"control\" means (i) the power, direct or\nindirect, to cause the direction or management of such entity, whether by\ncontract or otherwise, or (ii) ownership of fifty percent (50%) or more of the\noutstanding shares, or (iii) beneficial ownership of such entity.\n\n\"You\" (or \"Your\") shall mean an individual or Legal Entity exercising\npermissions granted by this License.\n\n\"Source\" form shall mean the preferred form for making modifications, including\nbut not limited to software source code, documentation source, and configuration\nfiles.\n\n\"Object\" form shall mean any form resulting from mechanical transformation or\ntranslation of a Source form, including but not limited to compiled object code,\ngenerated documentation, and conversions to other media types.\n\n\"Work\" shall mean the work of authorship, whether in Source or Object form, made\navailable under the License, as indicated by a copyright notice that is included\nin or attached to the work (an example is provided in the Appendix below).\n\n\"Derivative Works\" shall mean any work, whether in Source or Object form, that\nis based on (or derived from) the Work and for which the editorial revisions,\nannotations, elaborations, or other modifications represent, as a whole, an\noriginal work of authorship. For the purposes of this License, Derivative Works\nshall not include works that remain separable from, or merely link (or bind by\nname) to the interfaces of, the Work and Derivative Works thereof.\n\n\"Contribution\" shall mean any work of authorship, including the original version\nof the Work and any modifications or additions to that Work or Derivative Works\nthereof, that is intentionally submitted to Licensor for inclusion in the Work\nby the copyright owner or by an individual or Legal Entity authorized to submit\non behalf of the copyright owner. For the purposes of this definition,\n\"submitted\" means any form of electronic, verbal, or written communication sent\nto the Licensor or its representatives, including but not limited to\ncommunication on electronic mailing lists, source code control systems, and\nissue tracking systems that are managed by, or on behalf of, the Licensor for\nthe purpose of discussing and improving the Work, but excluding communication\nthat is conspicuously marked or otherwise designated in writing by the copyright\nowner as \"Not a Contribution.\"\n\n\"Contributor\" shall mean Licensor and any individual or Legal Entity on behalf\nof whom a Contribution has been received by Licensor and subsequently\nincorporated within the Work.\n\n2. Grant of Copyright License.\n\nSubject to the terms and conditions of this License, each Contributor hereby\ngrants to You a perpetual, worldwide, non-exclusive, no-charge, royalty-free,\nirrevocable copyright license to reproduce, prepare Derivative Works of,\npublicly display, publicly perform, sublicense, and distribute the Work and such\nDerivative Works in Source or Object form.\n\n3. Grant of Patent License.\n\nSubject to the terms and conditions of this License, each Contributor hereby\ngrants to You a perpetual, worldwide, non-exclusive, no-charge, royalty-free,\nirrevocable (except as stated in this section) patent license to make, have\nmade, use, offer to sell, sell, import, and otherwise transfer the Work, where\nsuch license applies only to those patent claims licensable by such Contributor\nthat are necessarily infringed by their Contribution(s) alone or by combination\nof their Contribution(s) with the Work to which such Contribution(s) was\nsubmitted. If You institute patent litigation against any entity (including a\ncross-claim or counterclaim in a lawsuit) alleging that the Work or a\nContribution incorporated within the Work constitutes direct or contributory\npatent infringement, then any patent licenses granted to You under this License\nfor that Work shall terminate as of the date such litigation is filed.\n\n4. Redistribution.\n\nYou may reproduce and distribute copies of the Work or Derivative Works thereof\nin any medium, with or without modifications, and in Source or Object form,\nprovided that You meet the following conditions:\n\nYou must give any other recipients of the Work or Derivative Works a copy of\nthis License; and\nYou must cause any modified files to carry prominent notices stating that You\nchanged the files; and\nYou must retain, in the Source form of any Derivative Works that You distribute,\nall copyright, patent, trademark, and attribution notices from the Source form\nof the Work, excluding those notices that do not pertain to any part of the\nDerivative Works; and\nIf the Work includes a \"NOTICE\" text file as part of its distribution, then any\nDerivative Works that You distribute must include a readable copy of the\nattribution notices contained within such NOTICE file, excluding those notices\nthat do not pertain to any part of the Derivative Works, in at least one of the\nfollowing places: within a NOTICE text file distributed as part of the\nDerivative Works; within the Source form or documentation, if provided along\nwith the Derivative Works; or, within a display generated by the Derivative\nWorks, if and wherever such third-party notices normally appear. The contents of\nthe NOTICE file are for informational purposes only and do not modify the\nLicense. You may add Your own attribution notices within Derivative Works that\nYou distribute, alongside or as an addendum to the NOTICE text from the Work,\nprovided that such additional attribution notices cannot be construed as\nmodifying the License.\nYou may add Your own copyright statement to Your modifications and may provide\nadditional or different license terms and conditions for use, reproduction, or\ndistribution of Your modifications, or for any such Derivative Works as a whole,\nprovided Your use, reproduction, and distribution of the Work otherwise complies\nwith the conditions stated in this License.\n\n5. Submission of Contributions.\n\nUnless You explicitly state otherwise, any Contribution intentionally submitted\nfor inclusion in the Work by You to the Licensor shall be under the terms and\nconditions of this License, without any additional terms or conditions.\nNotwithstanding the above, nothing herein shall supersede or modify the terms of\nany separate license agreement you may have executed with Licensor regarding\nsuch Contributions.\n\n6. Trademarks.\n\nThis License does not grant permission to use the trade names, trademarks,\nservice marks, or product names of the Licensor, except as required for\nreasonable and customary use in describing the origin of the Work and\nreproducing the content of the NOTICE file.\n\n7. Disclaimer of Warranty.\n\nUnless required by applicable law or agreed to in writing, Licensor provides the\nWork (and each Contributor provides its Contributions) on an \"AS IS\" BASIS,\nWITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied,\nincluding, without limitation, any warranties or conditions of TITLE,\nNON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A PARTICULAR PURPOSE. You are\nsolely responsible for determining the appropriateness of using or\nredistributing the Work and assume any risks associated with Your exercise of\npermissions under this License.\n\n8. Limitation of Liability.\n\nIn no event and under no legal theory, whether in tort (including negligence),\ncontract, or otherwise, unless required by applicable law (such as deliberate\nand grossly negligent acts) or agreed to in writing, shall any Contributor be\nliable to You for damages, including any direct, indirect, special, incidental,\nor consequential damages of any character arising as a result of this License or\nout of the use or inability to use the Work (including but not limited to\ndamages for loss of goodwill, work stoppage, computer failure or malfunction, or\nany and all other commercial damages or losses), even if such Contributor has\nbeen advised of the possibility of such damages.\n\n9. Accepting Warranty or Additional Liability.\n\nWhile redistributing the Work or Derivative Works thereof, You may choose to\noffer, and charge a fee for, acceptance of support, warranty, indemnity, or\nother liability obligations and/or rights consistent with this License. However,\nin accepting such obligations, You may act only on Your own behalf and on Your\nsole responsibility, not on behalf of any other Contributor, and only if You\nagree to indemnify, defend, and hold each Contributor harmless for any liability\nincurred by, or claims asserted against, such Contributor by reason of your\naccepting any such warranty or additional liability.\n\nEND OF TERMS AND CONDITIONS\n\nAPPENDIX: How to apply the Apache License to your work\n\nTo apply the Apache License to your work, attach the following boilerplate\nnotice, with the fields enclosed by brackets \"[]\" replaced with your own\nidentifying information. (Don't include the brackets!) The text should be\nenclosed in the appropriate comment syntax for the file format. We also\nrecommend that a file or class name and description of purpose be included on\nthe same \"printed page\" as the copyright notice for easier identification within\nthird-party archives.\n\n   Copyright [yyyy] [name of copyright owner]\n\n   Licensed under the Apache License, Version 2.0 (the \"License\");\n   you may not use this file except in compliance with the License.\n   You may obtain a copy of the License at\n\n     http://www.apache.org/licenses/LICENSE-2.0\n\n   Unless required by applicable law or agreed to in writing, software\n   distributed under the License is distributed on an \"AS IS\" BASIS,\n   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n   See the License for the specific language governing permissions and\n   limitations under the License.\n",
+    "ecosystem": "go"
+  },
+  {
+    "name": "github.com/kubernetes/kube-openapi",
+    "version": "43fb72c5454a",
+    "license": "Apache-2.0",
+    "repository": "https://github.com/kubernetes/kube-openapi",
+    "license_text": "\n                                 Apache License\n                           Version 2.0, January 2004\n                        http://www.apache.org/licenses/\n\n   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION\n\n   1. Definitions.\n\n      \"License\" shall mean the terms and conditions for use, reproduction,\n      and distribution as defined by Sections 1 through 9 of this document.\n\n      \"Licensor\" shall mean the copyright owner or entity authorized by\n      the copyright owner that is granting the License.\n\n      \"Legal Entity\" shall mean the union of the acting entity and all\n      other entities that control, are controlled by, or are under common\n      control with that entity. For the purposes of this definition,\n      \"control\" means (i) the power, direct or indirect, to cause the\n      direction or management of such entity, whether by contract or\n      otherwise, or (ii) ownership of fifty percent (50%) or more of the\n      outstanding shares, or (iii) beneficial ownership of such entity.\n\n      \"You\" (or \"Your\") shall mean an individual or Legal Entity\n      exercising permissions granted by this License.\n\n      \"Source\" form shall mean the preferred form for making modifications,\n      including but not limited to software source code, documentation\n      source, and configuration files.\n\n      \"Object\" form shall mean any form resulting from mechanical\n      transformation or translation of a Source form, including but\n      not limited to compiled object code, generated documentation,\n      and conversions to other media types.\n\n      \"Work\" shall mean the work of authorship, whether in Source or\n      Object form, made available under the License, as indicated by a\n      copyright notice that is included in or attached to the work\n      (an example is provided in the Appendix below).\n\n      \"Derivative Works\" shall mean any work, whether in Source or Object\n      form, that is based on (or derived from) the Work and for which the\n      editorial revisions, annotations, elaborations, or other modifications\n      represent, as a whole, an original work of authorship. For the purposes\n      of this License, Derivative Works shall not include works that remain\n      separable from, or merely link (or bind by name) to the interfaces of,\n      the Work and Derivative Works thereof.\n\n      \"Contribution\" shall mean any work of authorship, including\n      the original version of the Work and any modifications or additions\n      to that Work or Derivative Works thereof, that is intentionally\n      submitted to Licensor for inclusion in the Work by the copyright owner\n      or by an individual or Legal Entity authorized to submit on behalf of\n      the copyright owner. For the purposes of this definition, \"submitted\"\n      means any form of electronic, verbal, or written communication sent\n      to the Licensor or its representatives, including but not limited to\n      communication on electronic mailing lists, source code control systems,\n      and issue tracking systems that are managed by, or on behalf of, the\n      Licensor for the purpose of discussing and improving the Work, but\n      excluding communication that is conspicuously marked or otherwise\n      designated in writing by the copyright owner as \"Not a Contribution.\"\n\n      \"Contributor\" shall mean Licensor and any individual or Legal Entity\n      on behalf of whom a Contribution has been received by Licensor and\n      subsequently incorporated within the Work.\n\n   2. Grant of Copyright License. Subject to the terms and conditions of\n      this License, each Contributor hereby grants to You a perpetual,\n      worldwide, non-exclusive, no-charge, royalty-free, irrevocable\n      copyright license to reproduce, prepare Derivative Works of,\n      publicly display, publicly perform, sublicense, and distribute the\n      Work and such Derivative Works in Source or Object form.\n\n   3. Grant of Patent License. Subject to the terms and conditions of\n      this License, each Contributor hereby grants to You a perpetual,\n      worldwide, non-exclusive, no-charge, royalty-free, irrevocable\n      (except as stated in this section) patent license to make, have made,\n      use, offer to sell, sell, import, and otherwise transfer the Work,\n      where such license applies only to those patent claims licensable\n      by such Contributor that are necessarily infringed by their\n      Contribution(s) alone or by combination of their Contribution(s)\n      with the Work to which such Contribution(s) was submitted. If You\n      institute patent litigation against any entity (including a\n      cross-claim or counterclaim in a lawsuit) alleging that the Work\n      or a Contribution incorporated within the Work constitutes direct\n      or contributory patent infringement, then any patent licenses\n      granted to You under this License for that Work shall terminate\n      as of the date such litigation is filed.\n\n   4. Redistribution. You may reproduce and distribute copies of the\n      Work or Derivative Works thereof in any medium, with or without\n      modifications, and in Source or Object form, provided that You\n      meet the following conditions:\n\n      (a) You must give any other recipients of the Work or\n          Derivative Works a copy of this License; and\n\n      (b) You must cause any modified files to carry prominent notices\n          stating that You changed the files; and\n\n      (c) You must retain, in the Source form of any Derivative Works\n          that You distribute, all copyright, patent, trademark, and\n          attribution notices from the Source form of the Work,\n          excluding those notices that do not pertain to any part of\n          the Derivative Works; and\n\n      (d) If the Work includes a \"NOTICE\" text file as part of its\n          distribution, then any Derivative Works that You distribute must\n          include a readable copy of the attribution notices contained\n          within such NOTICE file, excluding those notices that do not\n          pertain to any part of the Derivative Works, in at least one\n          of the following places: within a NOTICE text file distributed\n          as part of the Derivative Works; within the Source form or\n          documentation, if provided along with the Derivative Works; or,\n          within a display generated by the Derivative Works, if and\n          wherever such third-party notices normally appear. The contents\n          of the NOTICE file are for informational purposes only and\n          do not modify the License. You may add Your own attribution\n          notices within Derivative Works that You distribute, alongside\n          or as an addendum to the NOTICE text from the Work, provided\n          that such additional attribution notices cannot be construed\n          as modifying the License.\n\n      You may add Your own copyright statement to Your modifications and\n      may provide additional or different license terms and conditions\n      for use, reproduction, or distribution of Your modifications, or\n      for any such Derivative Works as a whole, provided Your use,\n      reproduction, and distribution of the Work otherwise complies with\n      the conditions stated in this License.\n\n   5. Submission of Contributions. Unless You explicitly state otherwise,\n      any Contribution intentionally submitted for inclusion in the Work\n      by You to the Licensor shall be under the terms and conditions of\n      this License, without any additional terms or conditions.\n      Notwithstanding the above, nothing herein shall supersede or modify\n      the terms of any separate license agreement you may have executed\n      with Licensor regarding such Contributions.\n\n   6. Trademarks. This License does not grant permission to use the trade\n      names, trademarks, service marks, or product names of the Licensor,\n      except as required for reasonable and customary use in describing the\n      origin of the Work and reproducing the content of the NOTICE file.\n\n   7. Disclaimer of Warranty. Unless required by applicable law or\n      agreed to in writing, Licensor provides the Work (and each\n      Contributor provides its Contributions) on an \"AS IS\" BASIS,\n      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or\n      implied, including, without limitation, any warranties or conditions\n      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A\n      PARTICULAR PURPOSE. You are solely responsible for determining the\n      appropriateness of using or redistributing the Work and assume any\n      risks associated with Your exercise of permissions under this License.\n\n   8. Limitation of Liability. In no event and under no legal theory,\n      whether in tort (including negligence), contract, or otherwise,\n      unless required by applicable law (such as deliberate and grossly\n      negligent acts) or agreed to in writing, shall any Contributor be\n      liable to You for damages, including any direct, indirect, special,\n      incidental, or consequential damages of any character arising as a\n      result of this License or out of the use or inability to use the\n      Work (including but not limited to damages for loss of goodwill,\n      work stoppage, computer failure or malfunction, or any and all\n      other commercial damages or losses), even if such Contributor\n      has been advised of the possibility of such damages.\n\n   9. Accepting Warranty or Additional Liability. While redistributing\n      the Work or Derivative Works thereof, You may choose to offer,\n      and charge a fee for, acceptance of support, warranty, indemnity,\n      or other liability obligations and/or rights consistent with this\n      License. However, in accepting such obligations, You may act only\n      on Your own behalf and on Your sole responsibility, not on behalf\n      of any other Contributor, and only if You agree to indemnify,\n      defend, and hold each Contributor harmless for any liability\n      incurred by, or claims asserted against, such Contributor by reason\n      of your accepting any such warranty or additional liability.\n\n   END OF TERMS AND CONDITIONS\n\n   APPENDIX: How to apply the Apache License to your work.\n\n      To apply the Apache License to your work, attach the following\n      boilerplate notice, with the fields enclosed by brackets \"[]\"\n      replaced with your own identifying information. (Don't include\n      the brackets!)  The text should be enclosed in the appropriate\n      comment syntax for the file format. We also recommend that a\n      file or class name and description of purpose be included on the\n      same \"printed page\" as the copyright notice for easier\n      identification within third-party archives.\n\n   Copyright [yyyy] [name of copyright owner]\n\n   Licensed under the Apache License, Version 2.0 (the \"License\");\n   you may not use this file except in compliance with the License.\n   You may obtain a copy of the License at\n\n       http://www.apache.org/licenses/LICENSE-2.0\n\n   Unless required by applicable law or agreed to in writing, software\n   distributed under the License is distributed on an \"AS IS\" BASIS,\n   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n   See the License for the specific language governing permissions and\n   limitations under the License.\n",
+    "ecosystem": "go"
+  },
+  {
+    "name": "github.com/kubernetes/utils",
+    "version": "b8788abfbbc2",
+    "license": "Apache-2.0",
+    "repository": "https://github.com/kubernetes/utils",
+    "license_text": "\n                                 Apache License\n                           Version 2.0, January 2004\n                        http://www.apache.org/licenses/\n\n   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION\n\n   1. Definitions.\n\n      \"License\" shall mean the terms and conditions for use, reproduction,\n      and distribution as defined by Sections 1 through 9 of this document.\n\n      \"Licensor\" shall mean the copyright owner or entity authorized by\n      the copyright owner that is granting the License.\n\n      \"Legal Entity\" shall mean the union of the acting entity and all\n      other entities that control, are controlled by, or are under common\n      control with that entity. For the purposes of this definition,\n      \"control\" means (i) the power, direct or indirect, to cause the\n      direction or management of such entity, whether by contract or\n      otherwise, or (ii) ownership of fifty percent (50%) or more of the\n      outstanding shares, or (iii) beneficial ownership of such entity.\n\n      \"You\" (or \"Your\") shall mean an individual or Legal Entity\n      exercising permissions granted by this License.\n\n      \"Source\" form shall mean the preferred form for making modifications,\n      including but not limited to software source code, documentation\n      source, and configuration files.\n\n      \"Object\" form shall mean any form resulting from mechanical\n      transformation or translation of a Source form, including but\n      not limited to compiled object code, generated documentation,\n      and conversions to other media types.\n\n      \"Work\" shall mean the work of authorship, whether in Source or\n      Object form, made available under the License, as indicated by a\n      copyright notice that is included in or attached to the work\n      (an example is provided in the Appendix below).\n\n      \"Derivative Works\" shall mean any work, whether in Source or Object\n      form, that is based on (or derived from) the Work and for which the\n      editorial revisions, annotations, elaborations, or other modifications\n      represent, as a whole, an original work of authorship. For the purposes\n      of this License, Derivative Works shall not include works that remain\n      separable from, or merely link (or bind by name) to the interfaces of,\n      the Work and Derivative Works thereof.\n\n      \"Contribution\" shall mean any work of authorship, including\n      the original version of the Work and any modifications or additions\n      to that Work or Derivative Works thereof, that is intentionally\n      submitted to Licensor for inclusion in the Work by the copyright owner\n      or by an individual or Legal Entity authorized to submit on behalf of\n      the copyright owner. For the purposes of this definition, \"submitted\"\n      means any form of electronic, verbal, or written communication sent\n      to the Licensor or its representatives, including but not limited to\n      communication on electronic mailing lists, source code control systems,\n      and issue tracking systems that are managed by, or on behalf of, the\n      Licensor for the purpose of discussing and improving the Work, but\n      excluding communication that is conspicuously marked or otherwise\n      designated in writing by the copyright owner as \"Not a Contribution.\"\n\n      \"Contributor\" shall mean Licensor and any individual or Legal Entity\n      on behalf of whom a Contribution has been received by Licensor and\n      subsequently incorporated within the Work.\n\n   2. Grant of Copyright License. Subject to the terms and conditions of\n      this License, each Contributor hereby grants to You a perpetual,\n      worldwide, non-exclusive, no-charge, royalty-free, irrevocable\n      copyright license to reproduce, prepare Derivative Works of,\n      publicly display, publicly perform, sublicense, and distribute the\n      Work and such Derivative Works in Source or Object form.\n\n   3. Grant of Patent License. Subject to the terms and conditions of\n      this License, each Contributor hereby grants to You a perpetual,\n      worldwide, non-exclusive, no-charge, royalty-free, irrevocable\n      (except as stated in this section) patent license to make, have made,\n      use, offer to sell, sell, import, and otherwise transfer the Work,\n      where such license applies only to those patent claims licensable\n      by such Contributor that are necessarily infringed by their\n      Contribution(s) alone or by combination of their Contribution(s)\n      with the Work to which such Contribution(s) was submitted. If You\n      institute patent litigation against any entity (including a\n      cross-claim or counterclaim in a lawsuit) alleging that the Work\n      or a Contribution incorporated within the Work constitutes direct\n      or contributory patent infringement, then any patent licenses\n      granted to You under this License for that Work shall terminate\n      as of the date such litigation is filed.\n\n   4. Redistribution. You may reproduce and distribute copies of the\n      Work or Derivative Works thereof in any medium, with or without\n      modifications, and in Source or Object form, provided that You\n      meet the following conditions:\n\n      (a) You must give any other recipients of the Work or\n          Derivative Works a copy of this License; and\n\n      (b) You must cause any modified files to carry prominent notices\n          stating that You changed the files; and\n\n      (c) You must retain, in the Source form of any Derivative Works\n          that You distribute, all copyright, patent, trademark, and\n          attribution notices from the Source form of the Work,\n          excluding those notices that do not pertain to any part of\n          the Derivative Works; and\n\n      (d) If the Work includes a \"NOTICE\" text file as part of its\n          distribution, then any Derivative Works that You distribute must\n          include a readable copy of the attribution notices contained\n          within such NOTICE file, excluding those notices that do not\n          pertain to any part of the Derivative Works, in at least one\n          of the following places: within a NOTICE text file distributed\n          as part of the Derivative Works; within the Source form or\n          documentation, if provided along with the Derivative Works; or,\n          within a display generated by the Derivative Works, if and\n          wherever such third-party notices normally appear. The contents\n          of the NOTICE file are for informational purposes only and\n          do not modify the License. You may add Your own attribution\n          notices within Derivative Works that You distribute, alongside\n          or as an addendum to the NOTICE text from the Work, provided\n          that such additional attribution notices cannot be construed\n          as modifying the License.\n\n      You may add Your own copyright statement to Your modifications and\n      may provide additional or different license terms and conditions\n      for use, reproduction, or distribution of Your modifications, or\n      for any such Derivative Works as a whole, provided Your use,\n      reproduction, and distribution of the Work otherwise complies with\n      the conditions stated in this License.\n\n   5. Submission of Contributions. Unless You explicitly state otherwise,\n      any Contribution intentionally submitted for inclusion in the Work\n      by You to the Licensor shall be under the terms and conditions of\n      this License, without any additional terms or conditions.\n      Notwithstanding the above, nothing herein shall supersede or modify\n      the terms of any separate license agreement you may have executed\n      with Licensor regarding such Contributions.\n\n   6. Trademarks. This License does not grant permission to use the trade\n      names, trademarks, service marks, or product names of the Licensor,\n      except as required for reasonable and customary use in describing the\n      origin of the Work and reproducing the content of the NOTICE file.\n\n   7. Disclaimer of Warranty. Unless required by applicable law or\n      agreed to in writing, Licensor provides the Work (and each\n      Contributor provides its Contributions) on an \"AS IS\" BASIS,\n      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or\n      implied, including, without limitation, any warranties or conditions\n      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A\n      PARTICULAR PURPOSE. You are solely responsible for determining the\n      appropriateness of using or redistributing the Work and assume any\n      risks associated with Your exercise of permissions under this License.\n\n   8. Limitation of Liability. In no event and under no legal theory,\n      whether in tort (including negligence), contract, or otherwise,\n      unless required by applicable law (such as deliberate and grossly\n      negligent acts) or agreed to in writing, shall any Contributor be\n      liable to You for damages, including any direct, indirect, special,\n      incidental, or consequential damages of any character arising as a\n      result of this License or out of the use or inability to use the\n      Work (including but not limited to damages for loss of goodwill,\n      work stoppage, computer failure or malfunction, or any and all\n      other commercial damages or losses), even if such Contributor\n      has been advised of the possibility of such damages.\n\n   9. Accepting Warranty or Additional Liability. While redistributing\n      the Work or Derivative Works thereof, You may choose to offer,\n      and charge a fee for, acceptance of support, warranty, indemnity,\n      or other liability obligations and/or rights consistent with this\n      License. However, in accepting such obligations, You may act only\n      on Your own behalf and on Your sole responsibility, not on behalf\n      of any other Contributor, and only if You agree to indemnify,\n      defend, and hold each Contributor harmless for any liability\n      incurred by, or claims asserted against, such Contributor by reason\n      of your accepting any such warranty or additional liability.\n\n   END OF TERMS AND CONDITIONS\n\n   APPENDIX: How to apply the Apache License to your work.\n\n      To apply the Apache License to your work, attach the following\n      boilerplate notice, with the fields enclosed by brackets \"[]\"\n      replaced with your own identifying information. (Don't include\n      the brackets!)  The text should be enclosed in the appropriate\n      comment syntax for the file format. We also recommend that a\n      file or class name and description of purpose be included on the\n      same \"printed page\" as the copyright notice for easier\n      identification within third-party archives.\n\n   Copyright [yyyy] [name of copyright owner]\n\n   Licensed under the Apache License, Version 2.0 (the \"License\");\n   you may not use this file except in compliance with the License.\n   You may obtain a copy of the License at\n\n       http://www.apache.org/licenses/LICENSE-2.0\n\n   Unless required by applicable law or agreed to in writing, software\n   distributed under the License is distributed on an \"AS IS\" BASIS,\n   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n   See the License for the specific language governing permissions and\n   limitations under the License.\n",
+    "ecosystem": "go"
   },
   {
     "name": "github.com/leodido/go-urn",
@@ -365,8 +533,7 @@
     "license": "MIT",
     "repository": "https://github.com/leodido/go-urn",
     "license_text": "MIT License\n\nCopyright (c) 2018 Leonardo Di Donato\n\nPermission is hereby granted, free of charge, to any person obtaining a copy\nof this software and associated documentation files (the \"Software\"), to deal\nin the Software without restriction, including without limitation the rights\nto use, copy, modify, merge, publish, distribute, sublicense, and/or sell\ncopies of the Software, and to permit persons to whom the Software is\nfurnished to do so, subject to the following conditions:\n\nThe above copyright notice and this permission notice shall be included in all\ncopies or substantial portions of the Software.\n\nTHE SOFTWARE IS PROVIDED \"AS IS\", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR\nIMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,\nFITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE\nAUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER\nLIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,\nOUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE\nSOFTWARE.\n",
-    "ecosystem": "go",
-    "stale": true
+    "ecosystem": "go"
   },
   {
     "name": "github.com/magiconair/properties",
@@ -374,8 +541,7 @@
     "license": "BSD-2-Clause",
     "repository": "https://github.com/magiconair/properties",
     "license_text": "Copyright (c) 2013-2020, Frank Schroeder\n\nAll rights reserved.\n\nRedistribution and use in source and binary forms, with or without\nmodification, are permitted provided that the following conditions are met:\n\n * Redistributions of source code must retain the above copyright notice, this\n   list of conditions and the following disclaimer.\n\n * Redistributions in binary form must reproduce the above copyright notice,\n   this list of conditions and the following disclaimer in the documentation\n   and/or other materials provided with the distribution.\n\nTHIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS \"AS IS\" AND\nANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED\nWARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE\nDISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT OWNER OR CONTRIBUTORS BE LIABLE FOR\nANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES\n(INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES;\nLOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND\nON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT\n(INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS\nSOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.\n",
-    "ecosystem": "go",
-    "stale": true
+    "ecosystem": "go"
   },
   {
     "name": "github.com/mailru/easyjson",
@@ -383,17 +549,23 @@
     "license": "MIT",
     "repository": "https://github.com/mailru/easyjson",
     "license_text": "Copyright (c) 2016 Mail.Ru Group\n\nPermission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files (the \"Software\"), to deal in the Software without restriction, including without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the Software, and to permit persons to whom the Software is furnished to do so, subject to the following conditions:\n\nThe above copyright notice and this permission notice shall be included in all copies or substantial portions of the Software.\n\nTHE SOFTWARE IS PROVIDED \"AS IS\", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.\n",
-    "ecosystem": "go",
-    "stale": true
+    "ecosystem": "go"
   },
   {
     "name": "github.com/mark3labs/mcp-go",
-    "version": "v0.43.2",
+    "version": "v1.0.0-beta.1",
     "license": "MIT",
     "repository": "https://github.com/mark3labs/mcp-go",
     "license_text": "MIT License\n\nCopyright (c) 2024 Anthropic, PBC\n\nPermission is hereby granted, free of charge, to any person obtaining a copy\nof this software and associated documentation files (the \"Software\"), to deal\nin the Software without restriction, including without limitation the rights\nto use, copy, modify, merge, publish, distribute, sublicense, and/or sell\ncopies of the Software, and to permit persons to whom the Software is\nfurnished to do so, subject to the following conditions:\n\nThe above copyright notice and this permission notice shall be included in all\ncopies or substantial portions of the Software.\n\nTHE SOFTWARE IS PROVIDED \"AS IS\", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR\nIMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,\nFITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE\nAUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER\nLIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,\nOUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE\nSOFTWARE.\n",
-    "ecosystem": "go",
-    "stale": true
+    "ecosystem": "go"
+  },
+  {
+    "name": "github.com/mattn/go-colorable",
+    "version": "v0.1.12",
+    "license": "MIT",
+    "repository": "https://github.com/mattn/go-colorable",
+    "license_text": "The MIT License (MIT)\n\nCopyright (c) 2016 Yasuhiro Matsumoto\n\nPermission is hereby granted, free of charge, to any person obtaining a copy\nof this software and associated documentation files (the \"Software\"), to deal\nin the Software without restriction, including without limitation the rights\nto use, copy, modify, merge, publish, distribute, sublicense, and/or sell\ncopies of the Software, and to permit persons to whom the Software is\nfurnished to do so, subject to the following conditions:\n\nThe above copyright notice and this permission notice shall be included in all\ncopies or substantial portions of the Software.\n\nTHE SOFTWARE IS PROVIDED \"AS IS\", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR\nIMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,\nFITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE\nAUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER\nLIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,\nOUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE\nSOFTWARE.\n",
+    "ecosystem": "go"
   },
   {
     "name": "github.com/mattn/go-isatty",
@@ -401,8 +573,7 @@
     "license": "MIT",
     "repository": "https://github.com/mattn/go-isatty",
     "license_text": "Copyright (c) Yasuhiro MATSUMOTO <mattn.jp@gmail.com>\n\nMIT License (Expat)\n\nPermission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files (the \"Software\"), to deal in the Software without restriction, including without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the Software, and to permit persons to whom the Software is furnished to do so, subject to the following conditions:\n\nThe above copyright notice and this permission notice shall be included in all copies or substantial portions of the Software.\n\nTHE SOFTWARE IS PROVIDED \"AS IS\", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.\n",
-    "ecosystem": "go",
-    "stale": true
+    "ecosystem": "go"
   },
   {
     "name": "github.com/mattn/go-sqlite3",
@@ -410,8 +581,7 @@
     "license": "MIT",
     "repository": "https://github.com/mattn/go-sqlite3",
     "license_text": "The MIT License (MIT)\n\nCopyright (c) 2014 Yasuhiro Matsumoto\n\nPermission is hereby granted, free of charge, to any person obtaining a copy\nof this software and associated documentation files (the \"Software\"), to deal\nin the Software without restriction, including without limitation the rights\nto use, copy, modify, merge, publish, distribute, sublicense, and/or sell\ncopies of the Software, and to permit persons to whom the Software is\nfurnished to do so, subject to the following conditions:\n\nThe above copyright notice and this permission notice shall be included in all\ncopies or substantial portions of the Software.\n\nTHE SOFTWARE IS PROVIDED \"AS IS\", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR\nIMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,\nFITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE\nAUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER\nLIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,\nOUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE\nSOFTWARE.\n",
-    "ecosystem": "go",
-    "stale": true
+    "ecosystem": "go"
   },
   {
     "name": "github.com/mitchellh/mapstructure",
@@ -419,8 +589,7 @@
     "license": "MIT",
     "repository": "https://github.com/mitchellh/mapstructure",
     "license_text": "The MIT License (MIT)\n\nCopyright (c) 2013 Mitchell Hashimoto\n\nPermission is hereby granted, free of charge, to any person obtaining a copy\nof this software and associated documentation files (the \"Software\"), to deal\nin the Software without restriction, including without limitation the rights\nto use, copy, modify, merge, publish, distribute, sublicense, and/or sell\ncopies of the Software, and to permit persons to whom the Software is\nfurnished to do so, subject to the following conditions:\n\nThe above copyright notice and this permission notice shall be included in\nall copies or substantial portions of the Software.\n\nTHE SOFTWARE IS PROVIDED \"AS IS\", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR\nIMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,\nFITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE\nAUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER\nLIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,\nOUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN\nTHE SOFTWARE.\n",
-    "ecosystem": "go",
-    "stale": true
+    "ecosystem": "go"
   },
   {
     "name": "github.com/moby/docker-image-spec",
@@ -428,8 +597,63 @@
     "license": "Apache-2.0",
     "repository": "https://github.com/moby/docker-image-spec",
     "license_text": "                                 Apache License\n                           Version 2.0, January 2004\n                        http://www.apache.org/licenses/\n\n   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION\n\n   1. Definitions.\n\n      \"License\" shall mean the terms and conditions for use, reproduction,\n      and distribution as defined by Sections 1 through 9 of this document.\n\n      \"Licensor\" shall mean the copyright owner or entity authorized by\n      the copyright owner that is granting the License.\n\n      \"Legal Entity\" shall mean the union of the acting entity and all\n      other entities that control, are controlled by, or are under common\n      control with that entity. For the purposes of this definition,\n      \"control\" means (i) the power, direct or indirect, to cause the\n      direction or management of such entity, whether by contract or\n      otherwise, or (ii) ownership of fifty percent (50%) or more of the\n      outstanding shares, or (iii) beneficial ownership of such entity.\n\n      \"You\" (or \"Your\") shall mean an individual or Legal Entity\n      exercising permissions granted by this License.\n\n      \"Source\" form shall mean the preferred form for making modifications,\n      including but not limited to software source code, documentation\n      source, and configuration files.\n\n      \"Object\" form shall mean any form resulting from mechanical\n      transformation or translation of a Source form, including but\n      not limited to compiled object code, generated documentation,\n      and conversions to other media types.\n\n      \"Work\" shall mean the work of authorship, whether in Source or\n      Object form, made available under the License, as indicated by a\n      copyright notice that is included in or attached to the work\n      (an example is provided in the Appendix below).\n\n      \"Derivative Works\" shall mean any work, whether in Source or Object\n      form, that is based on (or derived from) the Work and for which the\n      editorial revisions, annotations, elaborations, or other modifications\n      represent, as a whole, an original work of authorship. For the purposes\n      of this License, Derivative Works shall not include works that remain\n      separable from, or merely link (or bind by name) to the interfaces of,\n      the Work and Derivative Works thereof.\n\n      \"Contribution\" shall mean any work of authorship, including\n      the original version of the Work and any modifications or additions\n      to that Work or Derivative Works thereof, that is intentionally\n      submitted to Licensor for inclusion in the Work by the copyright owner\n      or by an individual or Legal Entity authorized to submit on behalf of\n      the copyright owner. For the purposes of this definition, \"submitted\"\n      means any form of electronic, verbal, or written communication sent\n      to the Licensor or its representatives, including but not limited to\n      communication on electronic mailing lists, source code control systems,\n      and issue tracking systems that are managed by, or on behalf of, the\n      Licensor for the purpose of discussing and improving the Work, but\n      excluding communication that is conspicuously marked or otherwise\n      designated in writing by the copyright owner as \"Not a Contribution.\"\n\n      \"Contributor\" shall mean Licensor and any individual or Legal Entity\n      on behalf of whom a Contribution has been received by Licensor and\n      subsequently incorporated within the Work.\n\n   2. Grant of Copyright License. Subject to the terms and conditions of\n      this License, each Contributor hereby grants to You a perpetual,\n      worldwide, non-exclusive, no-charge, royalty-free, irrevocable\n      copyright license to reproduce, prepare Derivative Works of,\n      publicly display, publicly perform, sublicense, and distribute the\n      Work and such Derivative Works in Source or Object form.\n\n   3. Grant of Patent License. Subject to the terms and conditions of\n      this License, each Contributor hereby grants to You a perpetual,\n      worldwide, non-exclusive, no-charge, royalty-free, irrevocable\n      (except as stated in this section) patent license to make, have made,\n      use, offer to sell, sell, import, and otherwise transfer the Work,\n      where such license applies only to those patent claims licensable\n      by such Contributor that are necessarily infringed by their\n      Contribution(s) alone or by combination of their Contribution(s)\n      with the Work to which such Contribution(s) was submitted. If You\n      institute patent litigation against any entity (including a\n      cross-claim or counterclaim in a lawsuit) alleging that the Work\n      or a Contribution incorporated within the Work constitutes direct\n      or contributory patent infringement, then any patent licenses\n      granted to You under this License for that Work shall terminate\n      as of the date such litigation is filed.\n\n   4. Redistribution. You may reproduce and distribute copies of the\n      Work or Derivative Works thereof in any medium, with or without\n      modifications, and in Source or Object form, provided that You\n      meet the following conditions:\n\n      (a) You must give any other recipients of the Work or\n          Derivative Works a copy of this License; and\n\n      (b) You must cause any modified files to carry prominent notices\n          stating that You changed the files; and\n\n      (c) You must retain, in the Source form of any Derivative Works\n          that You distribute, all copyright, patent, trademark, and\n          attribution notices from the Source form of the Work,\n          excluding those notices that do not pertain to any part of\n          the Derivative Works; and\n\n      (d) If the Work includes a \"NOTICE\" text file as part of its\n          distribution, then any Derivative Works that You distribute must\n          include a readable copy of the attribution notices contained\n          within such NOTICE file, excluding those notices that do not\n          pertain to any part of the Derivative Works, in at least one\n          of the following places: within a NOTICE text file distributed\n          as part of the Derivative Works; within the Source form or\n          documentation, if provided along with the Derivative Works; or,\n          within a display generated by the Derivative Works, if and\n          wherever such third-party notices normally appear. The contents\n          of the NOTICE file are for informational purposes only and\n          do not modify the License. You may add Your own attribution\n          notices within Derivative Works that You distribute, alongside\n          or as an addendum to the NOTICE text from the Work, provided\n          that such additional attribution notices cannot be construed\n          as modifying the License.\n\n      You may add Your own copyright statement to Your modifications and\n      may provide additional or different license terms and conditions\n      for use, reproduction, or distribution of Your modifications, or\n      for any such Derivative Works as a whole, provided Your use,\n      reproduction, and distribution of the Work otherwise complies with\n      the conditions stated in this License.\n\n   5. Submission of Contributions. Unless You explicitly state otherwise,\n      any Contribution intentionally submitted for inclusion in the Work\n      by You to the Licensor shall be under the terms and conditions of\n      this License, without any additional terms or conditions.\n      Notwithstanding the above, nothing herein shall supersede or modify\n      the terms of any separate license agreement you may have executed\n      with Licensor regarding such Contributions.\n\n   6. Trademarks. This License does not grant permission to use the trade\n      names, trademarks, service marks, or product names of the Licensor,\n      except as required for reasonable and customary use in describing the\n      origin of the Work and reproducing the content of the NOTICE file.\n\n   7. Disclaimer of Warranty. Unless required by applicable law or\n      agreed to in writing, Licensor provides the Work (and each\n      Contributor provides its Contributions) on an \"AS IS\" BASIS,\n      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or\n      implied, including, without limitation, any warranties or conditions\n      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A\n      PARTICULAR PURPOSE. You are solely responsible for determining the\n      appropriateness of using or redistributing the Work and assume any\n      risks associated with Your exercise of permissions under this License.\n\n   8. Limitation of Liability. In no event and under no legal theory,\n      whether in tort (including negligence), contract, or otherwise,\n      unless required by applicable law (such as deliberate and grossly\n      negligent acts) or agreed to in writing, shall any Contributor be\n      liable to You for damages, including any direct, indirect, special,\n      incidental, or consequential damages of any character arising as a\n      result of this License or out of the use or inability to use the\n      Work (including but not limited to damages for loss of goodwill,\n      work stoppage, computer failure or malfunction, or any and all\n      other commercial damages or losses), even if such Contributor\n      has been advised of the possibility of such damages.\n\n   9. Accepting Warranty or Additional Liability. While redistributing\n      the Work or Derivative Works thereof, You may choose to offer,\n      and charge a fee for, acceptance of support, warranty, indemnity,\n      or other liability obligations and/or rights consistent with this\n      License. However, in accepting such obligations, You may act only\n      on Your own behalf and on Your sole responsibility, not on behalf\n      of any other Contributor, and only if You agree to indemnify,\n      defend, and hold each Contributor harmless for any liability\n      incurred by, or claims asserted against, such Contributor by reason\n      of your accepting any such warranty or additional liability.\n\n   END OF TERMS AND CONDITIONS\n\n   APPENDIX: How to apply the Apache License to your work.\n\n      To apply the Apache License to your work, attach the following\n      boilerplate notice, with the fields enclosed by brackets \"[]\"\n      replaced with your own identifying information. (Don't include\n      the brackets!)  The text should be enclosed in the appropriate\n      comment syntax for the file format. We also recommend that a\n      file or class name and description of purpose be included on the\n      same \"printed page\" as the copyright notice for easier\n      identification within third-party archives.\n\n   Copyright [yyyy] [name of copyright owner]\n\n   Licensed under the Apache License, Version 2.0 (the \"License\");\n   you may not use this file except in compliance with the License.\n   You may obtain a copy of the License at\n\n       http://www.apache.org/licenses/LICENSE-2.0\n\n   Unless required by applicable law or agreed to in writing, software\n   distributed under the License is distributed on an \"AS IS\" BASIS,\n   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n   See the License for the specific language governing permissions and\n   limitations under the License.\n",
-    "ecosystem": "go",
-    "stale": true
+    "ecosystem": "go"
+  },
+  {
+    "name": "github.com/moby/moby",
+    "version": "api",
+    "license": "Apache-2.0",
+    "repository": "https://github.com/moby/moby",
+    "license_text": "\n                                 Apache License\n                           Version 2.0, January 2004\n                        http://www.apache.org/licenses/\n\n   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION\n\n   1. Definitions.\n\n      \"License\" shall mean the terms and conditions for use, reproduction,\n      and distribution as defined by Sections 1 through 9 of this document.\n\n      \"Licensor\" shall mean the copyright owner or entity authorized by\n      the copyright owner that is granting the License.\n\n      \"Legal Entity\" shall mean the union of the acting entity and all\n      other entities that control, are controlled by, or are under common\n      control with that entity. For the purposes of this definition,\n      \"control\" means (i) the power, direct or indirect, to cause the\n      direction or management of such entity, whether by contract or\n      otherwise, or (ii) ownership of fifty percent (50%) or more of the\n      outstanding shares, or (iii) beneficial ownership of such entity.\n\n      \"You\" (or \"Your\") shall mean an individual or Legal Entity\n      exercising permissions granted by this License.\n\n      \"Source\" form shall mean the preferred form for making modifications,\n      including but not limited to software source code, documentation\n      source, and configuration files.\n\n      \"Object\" form shall mean any form resulting from mechanical\n      transformation or translation of a Source form, including but\n      not limited to compiled object code, generated documentation,\n      and conversions to other media types.\n\n      \"Work\" shall mean the work of authorship, whether in Source or\n      Object form, made available under the License, as indicated by a\n      copyright notice that is included in or attached to the work\n      (an example is provided in the Appendix below).\n\n      \"Derivative Works\" shall mean any work, whether in Source or Object\n      form, that is based on (or derived from) the Work and for which the\n      editorial revisions, annotations, elaborations, or other modifications\n      represent, as a whole, an original work of authorship. For the purposes\n      of this License, Derivative Works shall not include works that remain\n      separable from, or merely link (or bind by name) to the interfaces of,\n      the Work and Derivative Works thereof.\n\n      \"Contribution\" shall mean any work of authorship, including\n      the original version of the Work and any modifications or additions\n      to that Work or Derivative Works thereof, that is intentionally\n      submitted to Licensor for inclusion in the Work by the copyright owner\n      or by an individual or Legal Entity authorized to submit on behalf of\n      the copyright owner. For the purposes of this definition, \"submitted\"\n      means any form of electronic, verbal, or written communication sent\n      to the Licensor or its representatives, including but not limited to\n      communication on electronic mailing lists, source code control systems,\n      and issue tracking systems that are managed by, or on behalf of, the\n      Licensor for the purpose of discussing and improving the Work, but\n      excluding communication that is conspicuously marked or otherwise\n      designated in writing by the copyright owner as \"Not a Contribution.\"\n\n      \"Contributor\" shall mean Licensor and any individual or Legal Entity\n      on behalf of whom a Contribution has been received by Licensor and\n      subsequently incorporated within the Work.\n\n   2. Grant of Copyright License. Subject to the terms and conditions of\n      this License, each Contributor hereby grants to You a perpetual,\n      worldwide, non-exclusive, no-charge, royalty-free, irrevocable\n      copyright license to reproduce, prepare Derivative Works of,\n      publicly display, publicly perform, sublicense, and distribute the\n      Work and such Derivative Works in Source or Object form.\n\n   3. Grant of Patent License. Subject to the terms and conditions of\n      this License, each Contributor hereby grants to You a perpetual,\n      worldwide, non-exclusive, no-charge, royalty-free, irrevocable\n      (except as stated in this section) patent license to make, have made,\n      use, offer to sell, sell, import, and otherwise transfer the Work,\n      where such license applies only to those patent claims licensable\n      by such Contributor that are necessarily infringed by their\n      Contribution(s) alone or by combination of their Contribution(s)\n      with the Work to which such Contribution(s) was submitted. If You\n      institute patent litigation against any entity (including a\n      cross-claim or counterclaim in a lawsuit) alleging that the Work\n      or a Contribution incorporated within the Work constitutes direct\n      or contributory patent infringement, then any patent licenses\n      granted to You under this License for that Work shall terminate\n      as of the date such litigation is filed.\n\n   4. Redistribution. You may reproduce and distribute copies of the\n      Work or Derivative Works thereof in any medium, with or without\n      modifications, and in Source or Object form, provided that You\n      meet the following conditions:\n\n      (a) You must give any other recipients of the Work or\n          Derivative Works a copy of this License; and\n\n      (b) You must cause any modified files to carry prominent notices\n          stating that You changed the files; and\n\n      (c) You must retain, in the Source form of any Derivative Works\n          that You distribute, all copyright, patent, trademark, and\n          attribution notices from the Source form of the Work,\n          excluding those notices that do not pertain to any part of\n          the Derivative Works; and\n\n      (d) If the Work includes a \"NOTICE\" text file as part of its\n          distribution, then any Derivative Works that You distribute must\n          include a readable copy of the attribution notices contained\n          within such NOTICE file, excluding those notices that do not\n          pertain to any part of the Derivative Works, in at least one\n          of the following places: within a NOTICE text file distributed\n          as part of the Derivative Works; within the Source form or\n          documentation, if provided along with the Derivative Works; or,\n          within a display generated by the Derivative Works, if and\n          wherever such third-party notices normally appear. The contents\n          of the NOTICE file are for informational purposes only and\n          do not modify the License. You may add Your own attribution\n          notices within Derivative Works that You distribute, alongside\n          or as an addendum to the NOTICE text from the Work, provided\n          that such additional attribution notices cannot be construed\n          as modifying the License.\n\n      You may add Your own copyright statement to Your modifications and\n      may provide additional or different license terms and conditions\n      for use, reproduction, or distribution of Your modifications, or\n      for any such Derivative Works as a whole, provided Your use,\n      reproduction, and distribution of the Work otherwise complies with\n      the conditions stated in this License.\n\n   5. Submission of Contributions. Unless You explicitly state otherwise,\n      any Contribution intentionally submitted for inclusion in the Work\n      by You to the Licensor shall be under the terms and conditions of\n      this License, without any additional terms or conditions.\n      Notwithstanding the above, nothing herein shall supersede or modify\n      the terms of any separate license agreement you may have executed\n      with Licensor regarding such Contributions.\n\n   6. Trademarks. This License does not grant permission to use the trade\n      names, trademarks, service marks, or product names of the Licensor,\n      except as required for reasonable and customary use in describing the\n      origin of the Work and reproducing the content of the NOTICE file.\n\n   7. Disclaimer of Warranty. Unless required by applicable law or\n      agreed to in writing, Licensor provides the Work (and each\n      Contributor provides its Contributions) on an \"AS IS\" BASIS,\n      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or\n      implied, including, without limitation, any warranties or conditions\n      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A\n      PARTICULAR PURPOSE. You are solely responsible for determining the\n      appropriateness of using or redistributing the Work and assume any\n      risks associated with Your exercise of permissions under this License.\n\n   8. Limitation of Liability. In no event and under no legal theory,\n      whether in tort (including negligence), contract, or otherwise,\n      unless required by applicable law (such as deliberate and grossly\n      negligent acts) or agreed to in writing, shall any Contributor be\n      liable to You for damages, including any direct, indirect, special,\n      incidental, or consequential damages of any character arising as a\n      result of this License or out of the use or inability to use the\n      Work (including but not limited to damages for loss of goodwill,\n      work stoppage, computer failure or malfunction, or any and all\n      other commercial damages or losses), even if such Contributor\n      has been advised of the possibility of such damages.\n\n   9. Accepting Warranty or Additional Liability. While redistributing\n      the Work or Derivative Works thereof, You may choose to offer,\n      and charge a fee for, acceptance of support, warranty, indemnity,\n      or other liability obligations and/or rights consistent with this\n      License. However, in accepting such obligations, You may act only\n      on Your own behalf and on Your sole responsibility, not on behalf\n      of any other Contributor, and only if You agree to indemnify,\n      defend, and hold each Contributor harmless for any liability\n      incurred by, or claims asserted against, such Contributor by reason\n      of your accepting any such warranty or additional liability.\n\n   END OF TERMS AND CONDITIONS\n\n   APPENDIX: How to apply the Apache License to your work.\n\n      To apply the Apache License to your work, attach the following\n      boilerplate notice, with the fields enclosed by brackets \"[]\"\n      replaced with your own identifying information. (Don't include\n      the brackets!)  The text should be enclosed in the appropriate\n      comment syntax for the file format. We also recommend that a\n      file or class name and description of purpose be included on the\n      same \"printed page\" as the copyright notice for easier\n      identification within third-party archives.\n\n   Copyright [yyyy] [name of copyright owner]\n\n   Licensed under the Apache License, Version 2.0 (the \"License\");\n   you may not use this file except in compliance with the License.\n   You may obtain a copy of the License at\n\n       http://www.apache.org/licenses/LICENSE-2.0\n\n   Unless required by applicable law or agreed to in writing, software\n   distributed under the License is distributed on an \"AS IS\" BASIS,\n   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n   See the License for the specific language governing permissions and\n   limitations under the License.\n",
+    "ecosystem": "go"
+  },
+  {
+    "name": "github.com/moby/moby",
+    "version": "client",
+    "license": "Apache-2.0",
+    "repository": "https://github.com/moby/moby",
+    "license_text": "\n                                 Apache License\n                           Version 2.0, January 2004\n                        http://www.apache.org/licenses/\n\n   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION\n\n   1. Definitions.\n\n      \"License\" shall mean the terms and conditions for use, reproduction,\n      and distribution as defined by Sections 1 through 9 of this document.\n\n      \"Licensor\" shall mean the copyright owner or entity authorized by\n      the copyright owner that is granting the License.\n\n      \"Legal Entity\" shall mean the union of the acting entity and all\n      other entities that control, are controlled by, or are under common\n      control with that entity. For the purposes of this definition,\n      \"control\" means (i) the power, direct or indirect, to cause the\n      direction or management of such entity, whether by contract or\n      otherwise, or (ii) ownership of fifty percent (50%) or more of the\n      outstanding shares, or (iii) beneficial ownership of such entity.\n\n      \"You\" (or \"Your\") shall mean an individual or Legal Entity\n      exercising permissions granted by this License.\n\n      \"Source\" form shall mean the preferred form for making modifications,\n      including but not limited to software source code, documentation\n      source, and configuration files.\n\n      \"Object\" form shall mean any form resulting from mechanical\n      transformation or translation of a Source form, including but\n      not limited to compiled object code, generated documentation,\n      and conversions to other media types.\n\n      \"Work\" shall mean the work of authorship, whether in Source or\n      Object form, made available under the License, as indicated by a\n      copyright notice that is included in or attached to the work\n      (an example is provided in the Appendix below).\n\n      \"Derivative Works\" shall mean any work, whether in Source or Object\n      form, that is based on (or derived from) the Work and for which the\n      editorial revisions, annotations, elaborations, or other modifications\n      represent, as a whole, an original work of authorship. For the purposes\n      of this License, Derivative Works shall not include works that remain\n      separable from, or merely link (or bind by name) to the interfaces of,\n      the Work and Derivative Works thereof.\n\n      \"Contribution\" shall mean any work of authorship, including\n      the original version of the Work and any modifications or additions\n      to that Work or Derivative Works thereof, that is intentionally\n      submitted to Licensor for inclusion in the Work by the copyright owner\n      or by an individual or Legal Entity authorized to submit on behalf of\n      the copyright owner. For the purposes of this definition, \"submitted\"\n      means any form of electronic, verbal, or written communication sent\n      to the Licensor or its representatives, including but not limited to\n      communication on electronic mailing lists, source code control systems,\n      and issue tracking systems that are managed by, or on behalf of, the\n      Licensor for the purpose of discussing and improving the Work, but\n      excluding communication that is conspicuously marked or otherwise\n      designated in writing by the copyright owner as \"Not a Contribution.\"\n\n      \"Contributor\" shall mean Licensor and any individual or Legal Entity\n      on behalf of whom a Contribution has been received by Licensor and\n      subsequently incorporated within the Work.\n\n   2. Grant of Copyright License. Subject to the terms and conditions of\n      this License, each Contributor hereby grants to You a perpetual,\n      worldwide, non-exclusive, no-charge, royalty-free, irrevocable\n      copyright license to reproduce, prepare Derivative Works of,\n      publicly display, publicly perform, sublicense, and distribute the\n      Work and such Derivative Works in Source or Object form.\n\n   3. Grant of Patent License. Subject to the terms and conditions of\n      this License, each Contributor hereby grants to You a perpetual,\n      worldwide, non-exclusive, no-charge, royalty-free, irrevocable\n      (except as stated in this section) patent license to make, have made,\n      use, offer to sell, sell, import, and otherwise transfer the Work,\n      where such license applies only to those patent claims licensable\n      by such Contributor that are necessarily infringed by their\n      Contribution(s) alone or by combination of their Contribution(s)\n      with the Work to which such Contribution(s) was submitted. If You\n      institute patent litigation against any entity (including a\n      cross-claim or counterclaim in a lawsuit) alleging that the Work\n      or a Contribution incorporated within the Work constitutes direct\n      or contributory patent infringement, then any patent licenses\n      granted to You under this License for that Work shall terminate\n      as of the date such litigation is filed.\n\n   4. Redistribution. You may reproduce and distribute copies of the\n      Work or Derivative Works thereof in any medium, with or without\n      modifications, and in Source or Object form, provided that You\n      meet the following conditions:\n\n      (a) You must give any other recipients of the Work or\n          Derivative Works a copy of this License; and\n\n      (b) You must cause any modified files to carry prominent notices\n          stating that You changed the files; and\n\n      (c) You must retain, in the Source form of any Derivative Works\n          that You distribute, all copyright, patent, trademark, and\n          attribution notices from the Source form of the Work,\n          excluding those notices that do not pertain to any part of\n          the Derivative Works; and\n\n      (d) If the Work includes a \"NOTICE\" text file as part of its\n          distribution, then any Derivative Works that You distribute must\n          include a readable copy of the attribution notices contained\n          within such NOTICE file, excluding those notices that do not\n          pertain to any part of the Derivative Works, in at least one\n          of the following places: within a NOTICE text file distributed\n          as part of the Derivative Works; within the Source form or\n          documentation, if provided along with the Derivative Works; or,\n          within a display generated by the Derivative Works, if and\n          wherever such third-party notices normally appear. The contents\n          of the NOTICE file are for informational purposes only and\n          do not modify the License. You may add Your own attribution\n          notices within Derivative Works that You distribute, alongside\n          or as an addendum to the NOTICE text from the Work, provided\n          that such additional attribution notices cannot be construed\n          as modifying the License.\n\n      You may add Your own copyright statement to Your modifications and\n      may provide additional or different license terms and conditions\n      for use, reproduction, or distribution of Your modifications, or\n      for any such Derivative Works as a whole, provided Your use,\n      reproduction, and distribution of the Work otherwise complies with\n      the conditions stated in this License.\n\n   5. Submission of Contributions. Unless You explicitly state otherwise,\n      any Contribution intentionally submitted for inclusion in the Work\n      by You to the Licensor shall be under the terms and conditions of\n      this License, without any additional terms or conditions.\n      Notwithstanding the above, nothing herein shall supersede or modify\n      the terms of any separate license agreement you may have executed\n      with Licensor regarding such Contributions.\n\n   6. Trademarks. This License does not grant permission to use the trade\n      names, trademarks, service marks, or product names of the Licensor,\n      except as required for reasonable and customary use in describing the\n      origin of the Work and reproducing the content of the NOTICE file.\n\n   7. Disclaimer of Warranty. Unless required by applicable law or\n      agreed to in writing, Licensor provides the Work (and each\n      Contributor provides its Contributions) on an \"AS IS\" BASIS,\n      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or\n      implied, including, without limitation, any warranties or conditions\n      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A\n      PARTICULAR PURPOSE. You are solely responsible for determining the\n      appropriateness of using or redistributing the Work and assume any\n      risks associated with Your exercise of permissions under this License.\n\n   8. Limitation of Liability. In no event and under no legal theory,\n      whether in tort (including negligence), contract, or otherwise,\n      unless required by applicable law (such as deliberate and grossly\n      negligent acts) or agreed to in writing, shall any Contributor be\n      liable to You for damages, including any direct, indirect, special,\n      incidental, or consequential damages of any character arising as a\n      result of this License or out of the use or inability to use the\n      Work (including but not limited to damages for loss of goodwill,\n      work stoppage, computer failure or malfunction, or any and all\n      other commercial damages or losses), even if such Contributor\n      has been advised of the possibility of such damages.\n\n   9. Accepting Warranty or Additional Liability. While redistributing\n      the Work or Derivative Works thereof, You may choose to offer,\n      and charge a fee for, acceptance of support, warranty, indemnity,\n      or other liability obligations and/or rights consistent with this\n      License. However, in accepting such obligations, You may act only\n      on Your own behalf and on Your sole responsibility, not on behalf\n      of any other Contributor, and only if You agree to indemnify,\n      defend, and hold each Contributor harmless for any liability\n      incurred by, or claims asserted against, such Contributor by reason\n      of your accepting any such warranty or additional liability.\n\n   END OF TERMS AND CONDITIONS\n\n   APPENDIX: How to apply the Apache License to your work.\n\n      To apply the Apache License to your work, attach the following\n      boilerplate notice, with the fields enclosed by brackets \"[]\"\n      replaced with your own identifying information. (Don't include\n      the brackets!)  The text should be enclosed in the appropriate\n      comment syntax for the file format. We also recommend that a\n      file or class name and description of purpose be included on the\n      same \"printed page\" as the copyright notice for easier\n      identification within third-party archives.\n\n   Copyright [yyyy] [name of copyright owner]\n\n   Licensed under the Apache License, Version 2.0 (the \"License\");\n   you may not use this file except in compliance with the License.\n   You may obtain a copy of the License at\n\n       http://www.apache.org/licenses/LICENSE-2.0\n\n   Unless required by applicable law or agreed to in writing, software\n   distributed under the License is distributed on an \"AS IS\" BASIS,\n   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n   See the License for the specific language governing permissions and\n   limitations under the License.\n",
+    "ecosystem": "go"
+  },
+  {
+    "name": "github.com/moby/spdystream",
+    "version": "v0.5.1",
+    "license": "Apache-2.0",
+    "repository": "https://github.com/moby/spdystream",
+    "license_text": "\n                                 Apache License\n                           Version 2.0, January 2004\n                        http://www.apache.org/licenses/\n\n   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION\n\n   1. Definitions.\n\n      \"License\" shall mean the terms and conditions for use, reproduction,\n      and distribution as defined by Sections 1 through 9 of this document.\n\n      \"Licensor\" shall mean the copyright owner or entity authorized by\n      the copyright owner that is granting the License.\n\n      \"Legal Entity\" shall mean the union of the acting entity and all\n      other entities that control, are controlled by, or are under common\n      control with that entity. For the purposes of this definition,\n      \"control\" means (i) the power, direct or indirect, to cause the\n      direction or management of such entity, whether by contract or\n      otherwise, or (ii) ownership of fifty percent (50%) or more of the\n      outstanding shares, or (iii) beneficial ownership of such entity.\n\n      \"You\" (or \"Your\") shall mean an individual or Legal Entity\n      exercising permissions granted by this License.\n\n      \"Source\" form shall mean the preferred form for making modifications,\n      including but not limited to software source code, documentation\n      source, and configuration files.\n\n      \"Object\" form shall mean any form resulting from mechanical\n      transformation or translation of a Source form, including but\n      not limited to compiled object code, generated documentation,\n      and conversions to other media types.\n\n      \"Work\" shall mean the work of authorship, whether in Source or\n      Object form, made available under the License, as indicated by a\n      copyright notice that is included in or attached to the work\n      (an example is provided in the Appendix below).\n\n      \"Derivative Works\" shall mean any work, whether in Source or Object\n      form, that is based on (or derived from) the Work and for which the\n      editorial revisions, annotations, elaborations, or other modifications\n      represent, as a whole, an original work of authorship. For the purposes\n      of this License, Derivative Works shall not include works that remain\n      separable from, or merely link (or bind by name) to the interfaces of,\n      the Work and Derivative Works thereof.\n\n      \"Contribution\" shall mean any work of authorship, including\n      the original version of the Work and any modifications or additions\n      to that Work or Derivative Works thereof, that is intentionally\n      submitted to Licensor for inclusion in the Work by the copyright owner\n      or by an individual or Legal Entity authorized to submit on behalf of\n      the copyright owner. For the purposes of this definition, \"submitted\"\n      means any form of electronic, verbal, or written communication sent\n      to the Licensor or its representatives, including but not limited to\n      communication on electronic mailing lists, source code control systems,\n      and issue tracking systems that are managed by, or on behalf of, the\n      Licensor for the purpose of discussing and improving the Work, but\n      excluding communication that is conspicuously marked or otherwise\n      designated in writing by the copyright owner as \"Not a Contribution.\"\n\n      \"Contributor\" shall mean Licensor and any individual or Legal Entity\n      on behalf of whom a Contribution has been received by Licensor and\n      subsequently incorporated within the Work.\n\n   2. Grant of Copyright License. Subject to the terms and conditions of\n      this License, each Contributor hereby grants to You a perpetual,\n      worldwide, non-exclusive, no-charge, royalty-free, irrevocable\n      copyright license to reproduce, prepare Derivative Works of,\n      publicly display, publicly perform, sublicense, and distribute the\n      Work and such Derivative Works in Source or Object form.\n\n   3. Grant of Patent License. Subject to the terms and conditions of\n      this License, each Contributor hereby grants to You a perpetual,\n      worldwide, non-exclusive, no-charge, royalty-free, irrevocable\n      (except as stated in this section) patent license to make, have made,\n      use, offer to sell, sell, import, and otherwise transfer the Work,\n      where such license applies only to those patent claims licensable\n      by such Contributor that are necessarily infringed by their\n      Contribution(s) alone or by combination of their Contribution(s)\n      with the Work to which such Contribution(s) was submitted. If You\n      institute patent litigation against any entity (including a\n      cross-claim or counterclaim in a lawsuit) alleging that the Work\n      or a Contribution incorporated within the Work constitutes direct\n      or contributory patent infringement, then any patent licenses\n      granted to You under this License for that Work shall terminate\n      as of the date such litigation is filed.\n\n   4. Redistribution. You may reproduce and distribute copies of the\n      Work or Derivative Works thereof in any medium, with or without\n      modifications, and in Source or Object form, provided that You\n      meet the following conditions:\n\n      (a) You must give any other recipients of the Work or\n          Derivative Works a copy of this License; and\n\n      (b) You must cause any modified files to carry prominent notices\n          stating that You changed the files; and\n\n      (c) You must retain, in the Source form of any Derivative Works\n          that You distribute, all copyright, patent, trademark, and\n          attribution notices from the Source form of the Work,\n          excluding those notices that do not pertain to any part of\n          the Derivative Works; and\n\n      (d) If the Work includes a \"NOTICE\" text file as part of its\n          distribution, then any Derivative Works that You distribute must\n          include a readable copy of the attribution notices contained\n          within such NOTICE file, excluding those notices that do not\n          pertain to any part of the Derivative Works, in at least one\n          of the following places: within a NOTICE text file distributed\n          as part of the Derivative Works; within the Source form or\n          documentation, if provided along with the Derivative Works; or,\n          within a display generated by the Derivative Works, if and\n          wherever such third-party notices normally appear. The contents\n          of the NOTICE file are for informational purposes only and\n          do not modify the License. You may add Your own attribution\n          notices within Derivative Works that You distribute, alongside\n          or as an addendum to the NOTICE text from the Work, provided\n          that such additional attribution notices cannot be construed\n          as modifying the License.\n\n      You may add Your own copyright statement to Your modifications and\n      may provide additional or different license terms and conditions\n      for use, reproduction, or distribution of Your modifications, or\n      for any such Derivative Works as a whole, provided Your use,\n      reproduction, and distribution of the Work otherwise complies with\n      the conditions stated in this License.\n\n   5. Submission of Contributions. Unless You explicitly state otherwise,\n      any Contribution intentionally submitted for inclusion in the Work\n      by You to the Licensor shall be under the terms and conditions of\n      this License, without any additional terms or conditions.\n      Notwithstanding the above, nothing herein shall supersede or modify\n      the terms of any separate license agreement you may have executed\n      with Licensor regarding such Contributions.\n\n   6. Trademarks. This License does not grant permission to use the trade\n      names, trademarks, service marks, or product names of the Licensor,\n      except as required for reasonable and customary use in describing the\n      origin of the Work and reproducing the content of the NOTICE file.\n\n   7. Disclaimer of Warranty. Unless required by applicable law or\n      agreed to in writing, Licensor provides the Work (and each\n      Contributor provides its Contributions) on an \"AS IS\" BASIS,\n      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or\n      implied, including, without limitation, any warranties or conditions\n      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A\n      PARTICULAR PURPOSE. You are solely responsible for determining the\n      appropriateness of using or redistributing the Work and assume any\n      risks associated with Your exercise of permissions under this License.\n\n   8. Limitation of Liability. In no event and under no legal theory,\n      whether in tort (including negligence), contract, or otherwise,\n      unless required by applicable law (such as deliberate and grossly\n      negligent acts) or agreed to in writing, shall any Contributor be\n      liable to You for damages, including any direct, indirect, special,\n      incidental, or consequential damages of any character arising as a\n      result of this License or out of the use or inability to use the\n      Work (including but not limited to damages for loss of goodwill,\n      work stoppage, computer failure or malfunction, or any and all\n      other commercial damages or losses), even if such Contributor\n      has been advised of the possibility of such damages.\n\n   9. Accepting Warranty or Additional Liability. While redistributing\n      the Work or Derivative Works thereof, You may choose to offer,\n      and charge a fee for, acceptance of support, warranty, indemnity,\n      or other liability obligations and/or rights consistent with this\n      License. However, in accepting such obligations, You may act only\n      on Your own behalf and on Your sole responsibility, not on behalf\n      of any other Contributor, and only if You agree to indemnify,\n      defend, and hold each Contributor harmless for any liability\n      incurred by, or claims asserted against, such Contributor by reason\n      of your accepting any such warranty or additional liability.\n\n   END OF TERMS AND CONDITIONS\n\n   APPENDIX: How to apply the Apache License to your work.\n\n      To apply the Apache License to your work, attach the following\n      boilerplate notice, with the fields enclosed by brackets \"[]\"\n      replaced with your own identifying information. (Don't include\n      the brackets!)  The text should be enclosed in the appropriate\n      comment syntax for the file format. We also recommend that a\n      file or class name and description of purpose be included on the\n      same \"printed page\" as the copyright notice for easier\n      identification within third-party archives.\n\n   Copyright [yyyy] [name of copyright owner]\n\n   Licensed under the Apache License, Version 2.0 (the \"License\");\n   you may not use this file except in compliance with the License.\n   You may obtain a copy of the License at\n\n       http://www.apache.org/licenses/LICENSE-2.0\n\n   Unless required by applicable law or agreed to in writing, software\n   distributed under the License is distributed on an \"AS IS\" BASIS,\n   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n   See the License for the specific language governing permissions and\n   limitations under the License.\n",
+    "ecosystem": "go"
+  },
+  {
+    "name": "github.com/modern-go/concurrent",
+    "version": "bacd9c7ef1dd",
+    "license": "Apache-2.0",
+    "repository": "https://github.com/modern-go/concurrent",
+    "license_text": "                                 Apache License\n                           Version 2.0, January 2004\n                        http://www.apache.org/licenses/\n\n   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION\n\n   1. Definitions.\n\n      \"License\" shall mean the terms and conditions for use, reproduction,\n      and distribution as defined by Sections 1 through 9 of this document.\n\n      \"Licensor\" shall mean the copyright owner or entity authorized by\n      the copyright owner that is granting the License.\n\n      \"Legal Entity\" shall mean the union of the acting entity and all\n      other entities that control, are controlled by, or are under common\n      control with that entity. For the purposes of this definition,\n      \"control\" means (i) the power, direct or indirect, to cause the\n      direction or management of such entity, whether by contract or\n      otherwise, or (ii) ownership of fifty percent (50%) or more of the\n      outstanding shares, or (iii) beneficial ownership of such entity.\n\n      \"You\" (or \"Your\") shall mean an individual or Legal Entity\n      exercising permissions granted by this License.\n\n      \"Source\" form shall mean the preferred form for making modifications,\n      including but not limited to software source code, documentation\n      source, and configuration files.\n\n      \"Object\" form shall mean any form resulting from mechanical\n      transformation or translation of a Source form, including but\n      not limited to compiled object code, generated documentation,\n      and conversions to other media types.\n\n      \"Work\" shall mean the work of authorship, whether in Source or\n      Object form, made available under the License, as indicated by a\n      copyright notice that is included in or attached to the work\n      (an example is provided in the Appendix below).\n\n      \"Derivative Works\" shall mean any work, whether in Source or Object\n      form, that is based on (or derived from) the Work and for which the\n      editorial revisions, annotations, elaborations, or other modifications\n      represent, as a whole, an original work of authorship. For the purposes\n      of this License, Derivative Works shall not include works that remain\n      separable from, or merely link (or bind by name) to the interfaces of,\n      the Work and Derivative Works thereof.\n\n      \"Contribution\" shall mean any work of authorship, including\n      the original version of the Work and any modifications or additions\n      to that Work or Derivative Works thereof, that is intentionally\n      submitted to Licensor for inclusion in the Work by the copyright owner\n      or by an individual or Legal Entity authorized to submit on behalf of\n      the copyright owner. For the purposes of this definition, \"submitted\"\n      means any form of electronic, verbal, or written communication sent\n      to the Licensor or its representatives, including but not limited to\n      communication on electronic mailing lists, source code control systems,\n      and issue tracking systems that are managed by, or on behalf of, the\n      Licensor for the purpose of discussing and improving the Work, but\n      excluding communication that is conspicuously marked or otherwise\n      designated in writing by the copyright owner as \"Not a Contribution.\"\n\n      \"Contributor\" shall mean Licensor and any individual or Legal Entity\n      on behalf of whom a Contribution has been received by Licensor and\n      subsequently incorporated within the Work.\n\n   2. Grant of Copyright License. Subject to the terms and conditions of\n      this License, each Contributor hereby grants to You a perpetual,\n      worldwide, non-exclusive, no-charge, royalty-free, irrevocable\n      copyright license to reproduce, prepare Derivative Works of,\n      publicly display, publicly perform, sublicense, and distribute the\n      Work and such Derivative Works in Source or Object form.\n\n   3. Grant of Patent License. Subject to the terms and conditions of\n      this License, each Contributor hereby grants to You a perpetual,\n      worldwide, non-exclusive, no-charge, royalty-free, irrevocable\n      (except as stated in this section) patent license to make, have made,\n      use, offer to sell, sell, import, and otherwise transfer the Work,\n      where such license applies only to those patent claims licensable\n      by such Contributor that are necessarily infringed by their\n      Contribution(s) alone or by combination of their Contribution(s)\n      with the Work to which such Contribution(s) was submitted. If You\n      institute patent litigation against any entity (including a\n      cross-claim or counterclaim in a lawsuit) alleging that the Work\n      or a Contribution incorporated within the Work constitutes direct\n      or contributory patent infringement, then any patent licenses\n      granted to You under this License for that Work shall terminate\n      as of the date such litigation is filed.\n\n   4. Redistribution. You may reproduce and distribute copies of the\n      Work or Derivative Works thereof in any medium, with or without\n      modifications, and in Source or Object form, provided that You\n      meet the following conditions:\n\n      (a) You must give any other recipients of the Work or\n          Derivative Works a copy of this License; and\n\n      (b) You must cause any modified files to carry prominent notices\n          stating that You changed the files; and\n\n      (c) You must retain, in the Source form of any Derivative Works\n          that You distribute, all copyright, patent, trademark, and\n          attribution notices from the Source form of the Work,\n          excluding those notices that do not pertain to any part of\n          the Derivative Works; and\n\n      (d) If the Work includes a \"NOTICE\" text file as part of its\n          distribution, then any Derivative Works that You distribute must\n          include a readable copy of the attribution notices contained\n          within such NOTICE file, excluding those notices that do not\n          pertain to any part of the Derivative Works, in at least one\n          of the following places: within a NOTICE text file distributed\n          as part of the Derivative Works; within the Source form or\n          documentation, if provided along with the Derivative Works; or,\n          within a display generated by the Derivative Works, if and\n          wherever such third-party notices normally appear. The contents\n          of the NOTICE file are for informational purposes only and\n          do not modify the License. You may add Your own attribution\n          notices within Derivative Works that You distribute, alongside\n          or as an addendum to the NOTICE text from the Work, provided\n          that such additional attribution notices cannot be construed\n          as modifying the License.\n\n      You may add Your own copyright statement to Your modifications and\n      may provide additional or different license terms and conditions\n      for use, reproduction, or distribution of Your modifications, or\n      for any such Derivative Works as a whole, provided Your use,\n      reproduction, and distribution of the Work otherwise complies with\n      the conditions stated in this License.\n\n   5. Submission of Contributions. Unless You explicitly state otherwise,\n      any Contribution intentionally submitted for inclusion in the Work\n      by You to the Licensor shall be under the terms and conditions of\n      this License, without any additional terms or conditions.\n      Notwithstanding the above, nothing herein shall supersede or modify\n      the terms of any separate license agreement you may have executed\n      with Licensor regarding such Contributions.\n\n   6. Trademarks. This License does not grant permission to use the trade\n      names, trademarks, service marks, or product names of the Licensor,\n      except as required for reasonable and customary use in describing the\n      origin of the Work and reproducing the content of the NOTICE file.\n\n   7. Disclaimer of Warranty. Unless required by applicable law or\n      agreed to in writing, Licensor provides the Work (and each\n      Contributor provides its Contributions) on an \"AS IS\" BASIS,\n      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or\n      implied, including, without limitation, any warranties or conditions\n      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A\n      PARTICULAR PURPOSE. You are solely responsible for determining the\n      appropriateness of using or redistributing the Work and assume any\n      risks associated with Your exercise of permissions under this License.\n\n   8. Limitation of Liability. In no event and under no legal theory,\n      whether in tort (including negligence), contract, or otherwise,\n      unless required by applicable law (such as deliberate and grossly\n      negligent acts) or agreed to in writing, shall any Contributor be\n      liable to You for damages, including any direct, indirect, special,\n      incidental, or consequential damages of any character arising as a\n      result of this License or out of the use or inability to use the\n      Work (including but not limited to damages for loss of goodwill,\n      work stoppage, computer failure or malfunction, or any and all\n      other commercial damages or losses), even if such Contributor\n      has been advised of the possibility of such damages.\n\n   9. Accepting Warranty or Additional Liability. While redistributing\n      the Work or Derivative Works thereof, You may choose to offer,\n      and charge a fee for, acceptance of support, warranty, indemnity,\n      or other liability obligations and/or rights consistent with this\n      License. However, in accepting such obligations, You may act only\n      on Your own behalf and on Your sole responsibility, not on behalf\n      of any other Contributor, and only if You agree to indemnify,\n      defend, and hold each Contributor harmless for any liability\n      incurred by, or claims asserted against, such Contributor by reason\n      of your accepting any such warranty or additional liability.\n\n   END OF TERMS AND CONDITIONS\n\n   APPENDIX: How to apply the Apache License to your work.\n\n      To apply the Apache License to your work, attach the following\n      boilerplate notice, with the fields enclosed by brackets \"[]\"\n      replaced with your own identifying information. (Don't include\n      the brackets!)  The text should be enclosed in the appropriate\n      comment syntax for the file format. We also recommend that a\n      file or class name and description of purpose be included on the\n      same \"printed page\" as the copyright notice for easier\n      identification within third-party archives.\n\n   Copyright [yyyy] [name of copyright owner]\n\n   Licensed under the Apache License, Version 2.0 (the \"License\");\n   you may not use this file except in compliance with the License.\n   You may obtain a copy of the License at\n\n       http://www.apache.org/licenses/LICENSE-2.0\n\n   Unless required by applicable law or agreed to in writing, software\n   distributed under the License is distributed on an \"AS IS\" BASIS,\n   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n   See the License for the specific language governing permissions and\n   limitations under the License.\n",
+    "ecosystem": "go"
+  },
+  {
+    "name": "github.com/modern-go/reflect2",
+    "version": "35a7c28c31ee",
+    "license": "Apache-2.0",
+    "repository": "https://github.com/modern-go/reflect2",
+    "license_text": "                                 Apache License\n                           Version 2.0, January 2004\n                        http://www.apache.org/licenses/\n\n   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION\n\n   1. Definitions.\n\n      \"License\" shall mean the terms and conditions for use, reproduction,\n      and distribution as defined by Sections 1 through 9 of this document.\n\n      \"Licensor\" shall mean the copyright owner or entity authorized by\n      the copyright owner that is granting the License.\n\n      \"Legal Entity\" shall mean the union of the acting entity and all\n      other entities that control, are controlled by, or are under common\n      control with that entity. For the purposes of this definition,\n      \"control\" means (i) the power, direct or indirect, to cause the\n      direction or management of such entity, whether by contract or\n      otherwise, or (ii) ownership of fifty percent (50%) or more of the\n      outstanding shares, or (iii) beneficial ownership of such entity.\n\n      \"You\" (or \"Your\") shall mean an individual or Legal Entity\n      exercising permissions granted by this License.\n\n      \"Source\" form shall mean the preferred form for making modifications,\n      including but not limited to software source code, documentation\n      source, and configuration files.\n\n      \"Object\" form shall mean any form resulting from mechanical\n      transformation or translation of a Source form, including but\n      not limited to compiled object code, generated documentation,\n      and conversions to other media types.\n\n      \"Work\" shall mean the work of authorship, whether in Source or\n      Object form, made available under the License, as indicated by a\n      copyright notice that is included in or attached to the work\n      (an example is provided in the Appendix below).\n\n      \"Derivative Works\" shall mean any work, whether in Source or Object\n      form, that is based on (or derived from) the Work and for which the\n      editorial revisions, annotations, elaborations, or other modifications\n      represent, as a whole, an original work of authorship. For the purposes\n      of this License, Derivative Works shall not include works that remain\n      separable from, or merely link (or bind by name) to the interfaces of,\n      the Work and Derivative Works thereof.\n\n      \"Contribution\" shall mean any work of authorship, including\n      the original version of the Work and any modifications or additions\n      to that Work or Derivative Works thereof, that is intentionally\n      submitted to Licensor for inclusion in the Work by the copyright owner\n      or by an individual or Legal Entity authorized to submit on behalf of\n      the copyright owner. For the purposes of this definition, \"submitted\"\n      means any form of electronic, verbal, or written communication sent\n      to the Licensor or its representatives, including but not limited to\n      communication on electronic mailing lists, source code control systems,\n      and issue tracking systems that are managed by, or on behalf of, the\n      Licensor for the purpose of discussing and improving the Work, but\n      excluding communication that is conspicuously marked or otherwise\n      designated in writing by the copyright owner as \"Not a Contribution.\"\n\n      \"Contributor\" shall mean Licensor and any individual or Legal Entity\n      on behalf of whom a Contribution has been received by Licensor and\n      subsequently incorporated within the Work.\n\n   2. Grant of Copyright License. Subject to the terms and conditions of\n      this License, each Contributor hereby grants to You a perpetual,\n      worldwide, non-exclusive, no-charge, royalty-free, irrevocable\n      copyright license to reproduce, prepare Derivative Works of,\n      publicly display, publicly perform, sublicense, and distribute the\n      Work and such Derivative Works in Source or Object form.\n\n   3. Grant of Patent License. Subject to the terms and conditions of\n      this License, each Contributor hereby grants to You a perpetual,\n      worldwide, non-exclusive, no-charge, royalty-free, irrevocable\n      (except as stated in this section) patent license to make, have made,\n      use, offer to sell, sell, import, and otherwise transfer the Work,\n      where such license applies only to those patent claims licensable\n      by such Contributor that are necessarily infringed by their\n      Contribution(s) alone or by combination of their Contribution(s)\n      with the Work to which such Contribution(s) was submitted. If You\n      institute patent litigation against any entity (including a\n      cross-claim or counterclaim in a lawsuit) alleging that the Work\n      or a Contribution incorporated within the Work constitutes direct\n      or contributory patent infringement, then any patent licenses\n      granted to You under this License for that Work shall terminate\n      as of the date such litigation is filed.\n\n   4. Redistribution. You may reproduce and distribute copies of the\n      Work or Derivative Works thereof in any medium, with or without\n      modifications, and in Source or Object form, provided that You\n      meet the following conditions:\n\n      (a) You must give any other recipients of the Work or\n          Derivative Works a copy of this License; and\n\n      (b) You must cause any modified files to carry prominent notices\n          stating that You changed the files; and\n\n      (c) You must retain, in the Source form of any Derivative Works\n          that You distribute, all copyright, patent, trademark, and\n          attribution notices from the Source form of the Work,\n          excluding those notices that do not pertain to any part of\n          the Derivative Works; and\n\n      (d) If the Work includes a \"NOTICE\" text file as part of its\n          distribution, then any Derivative Works that You distribute must\n          include a readable copy of the attribution notices contained\n          within such NOTICE file, excluding those notices that do not\n          pertain to any part of the Derivative Works, in at least one\n          of the following places: within a NOTICE text file distributed\n          as part of the Derivative Works; within the Source form or\n          documentation, if provided along with the Derivative Works; or,\n          within a display generated by the Derivative Works, if and\n          wherever such third-party notices normally appear. The contents\n          of the NOTICE file are for informational purposes only and\n          do not modify the License. You may add Your own attribution\n          notices within Derivative Works that You distribute, alongside\n          or as an addendum to the NOTICE text from the Work, provided\n          that such additional attribution notices cannot be construed\n          as modifying the License.\n\n      You may add Your own copyright statement to Your modifications and\n      may provide additional or different license terms and conditions\n      for use, reproduction, or distribution of Your modifications, or\n      for any such Derivative Works as a whole, provided Your use,\n      reproduction, and distribution of the Work otherwise complies with\n      the conditions stated in this License.\n\n   5. Submission of Contributions. Unless You explicitly state otherwise,\n      any Contribution intentionally submitted for inclusion in the Work\n      by You to the Licensor shall be under the terms and conditions of\n      this License, without any additional terms or conditions.\n      Notwithstanding the above, nothing herein shall supersede or modify\n      the terms of any separate license agreement you may have executed\n      with Licensor regarding such Contributions.\n\n   6. Trademarks. This License does not grant permission to use the trade\n      names, trademarks, service marks, or product names of the Licensor,\n      except as required for reasonable and customary use in describing the\n      origin of the Work and reproducing the content of the NOTICE file.\n\n   7. Disclaimer of Warranty. Unless required by applicable law or\n      agreed to in writing, Licensor provides the Work (and each\n      Contributor provides its Contributions) on an \"AS IS\" BASIS,\n      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or\n      implied, including, without limitation, any warranties or conditions\n      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A\n      PARTICULAR PURPOSE. You are solely responsible for determining the\n      appropriateness of using or redistributing the Work and assume any\n      risks associated with Your exercise of permissions under this License.\n\n   8. Limitation of Liability. In no event and under no legal theory,\n      whether in tort (including negligence), contract, or otherwise,\n      unless required by applicable law (such as deliberate and grossly\n      negligent acts) or agreed to in writing, shall any Contributor be\n      liable to You for damages, including any direct, indirect, special,\n      incidental, or consequential damages of any character arising as a\n      result of this License or out of the use or inability to use the\n      Work (including but not limited to damages for loss of goodwill,\n      work stoppage, computer failure or malfunction, or any and all\n      other commercial damages or losses), even if such Contributor\n      has been advised of the possibility of such damages.\n\n   9. Accepting Warranty or Additional Liability. While redistributing\n      the Work or Derivative Works thereof, You may choose to offer,\n      and charge a fee for, acceptance of support, warranty, indemnity,\n      or other liability obligations and/or rights consistent with this\n      License. However, in accepting such obligations, You may act only\n      on Your own behalf and on Your sole responsibility, not on behalf\n      of any other Contributor, and only if You agree to indemnify,\n      defend, and hold each Contributor harmless for any liability\n      incurred by, or claims asserted against, such Contributor by reason\n      of your accepting any such warranty or additional liability.\n\n   END OF TERMS AND CONDITIONS\n\n   APPENDIX: How to apply the Apache License to your work.\n\n      To apply the Apache License to your work, attach the following\n      boilerplate notice, with the fields enclosed by brackets \"[]\"\n      replaced with your own identifying information. (Don't include\n      the brackets!)  The text should be enclosed in the appropriate\n      comment syntax for the file format. We also recommend that a\n      file or class name and description of purpose be included on the\n      same \"printed page\" as the copyright notice for easier\n      identification within third-party archives.\n\n   Copyright [yyyy] [name of copyright owner]\n\n   Licensed under the Apache License, Version 2.0 (the \"License\");\n   you may not use this file except in compliance with the License.\n   You may obtain a copy of the License at\n\n       http://www.apache.org/licenses/LICENSE-2.0\n\n   Unless required by applicable law or agreed to in writing, software\n   distributed under the License is distributed on an \"AS IS\" BASIS,\n   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n   See the License for the specific language governing permissions and\n   limitations under the License.\n",
+    "ecosystem": "go"
+  },
+  {
+    "name": "github.com/munnerz/goautoneg",
+    "version": "a7dc8b61c822",
+    "license": "BSD-3-Clause",
+    "repository": "https://github.com/munnerz/goautoneg",
+    "license_text": "Copyright (c) 2011, Open Knowledge Foundation Ltd.\nAll rights reserved.\n\nRedistribution and use in source and binary forms, with or without\nmodification, are permitted provided that the following conditions are\nmet:\n\n    Redistributions of source code must retain the above copyright\n    notice, this list of conditions and the following disclaimer.\n\n    Redistributions in binary form must reproduce the above copyright\n    notice, this list of conditions and the following disclaimer in\n    the documentation and/or other materials provided with the\n    distribution.\n\n    Neither the name of the Open Knowledge Foundation Ltd. nor the\n    names of its contributors may be used to endorse or promote\n    products derived from this software without specific prior written\n    permission.\n\nTHIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS\n\"AS IS\" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT\nLIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR\nA PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT\nHOLDER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,\nSPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT\nLIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,\nDATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY\nTHEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT\n(INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE\nOF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.\n",
+    "ecosystem": "go"
+  },
+  {
+    "name": "github.com/mxk/go-flowrate",
+    "version": "cca7078d478f",
+    "license": "BSD-3-Clause",
+    "repository": "https://github.com/mxk/go-flowrate",
+    "license_text": "Copyright (c) 2014 The Go-FlowRate Authors. All rights reserved.\n\nRedistribution and use in source and binary forms, with or without\nmodification, are permitted provided that the following conditions are\nmet:\n\n * Redistributions of source code must retain the above copyright\n   notice, this list of conditions and the following disclaimer.\n\n * Redistributions in binary form must reproduce the above copyright\n   notice, this list of conditions and the following disclaimer in the\n   documentation and/or other materials provided with the\n   distribution.\n\n * Neither the name of the go-flowrate project nor the names of its\n   contributors may be used to endorse or promote products derived\n   from this software without specific prior written permission.\n\nTHIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS\n\"AS IS\" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT\nLIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR\nA PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT\nOWNER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,\nSPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT\nLIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,\nDATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY\nTHEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT\n(INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE\nOF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.\n",
+    "ecosystem": "go"
   },
   {
     "name": "github.com/natefinch/lumberjack",
@@ -437,8 +661,7 @@
     "license": "MIT",
     "repository": "https://github.com/natefinch/lumberjack",
     "license_text": "The MIT License (MIT)\n\nCopyright (c) 2014 Nate Finch \n\nPermission is hereby granted, free of charge, to any person obtaining a copy\nof this software and associated documentation files (the \"Software\"), to deal\nin the Software without restriction, including without limitation the rights\nto use, copy, modify, merge, publish, distribute, sublicense, and/or sell\ncopies of the Software, and to permit persons to whom the Software is\nfurnished to do so, subject to the following conditions:\n\nThe above copyright notice and this permission notice shall be included in all\ncopies or substantial portions of the Software.\n\nTHE SOFTWARE IS PROVIDED \"AS IS\", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR\nIMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,\nFITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE\nAUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER\nLIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,\nOUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE\nSOFTWARE.",
-    "ecosystem": "go",
-    "stale": true
+    "ecosystem": "go"
   },
   {
     "name": "github.com/nats-io/nats.go",
@@ -446,8 +669,7 @@
     "license": "Apache-2.0",
     "repository": "https://github.com/nats-io/nats.go",
     "license_text": "                                 Apache License\n                           Version 2.0, January 2004\n                        http://www.apache.org/licenses/\n\n   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION\n\n   1. Definitions.\n\n      \"License\" shall mean the terms and conditions for use, reproduction,\n      and distribution as defined by Sections 1 through 9 of this document.\n\n      \"Licensor\" shall mean the copyright owner or entity authorized by\n      the copyright owner that is granting the License.\n\n      \"Legal Entity\" shall mean the union of the acting entity and all\n      other entities that control, are controlled by, or are under common\n      control with that entity. For the purposes of this definition,\n      \"control\" means (i) the power, direct or indirect, to cause the\n      direction or management of such entity, whether by contract or\n      otherwise, or (ii) ownership of fifty percent (50%) or more of the\n      outstanding shares, or (iii) beneficial ownership of such entity.\n\n      \"You\" (or \"Your\") shall mean an individual or Legal Entity\n      exercising permissions granted by this License.\n\n      \"Source\" form shall mean the preferred form for making modifications,\n      including but not limited to software source code, documentation\n      source, and configuration files.\n\n      \"Object\" form shall mean any form resulting from mechanical\n      transformation or translation of a Source form, including but\n      not limited to compiled object code, generated documentation,\n      and conversions to other media types.\n\n      \"Work\" shall mean the work of authorship, whether in Source or\n      Object form, made available under the License, as indicated by a\n      copyright notice that is included in or attached to the work\n      (an example is provided in the Appendix below).\n\n      \"Derivative Works\" shall mean any work, whether in Source or Object\n      form, that is based on (or derived from) the Work and for which the\n      editorial revisions, annotations, elaborations, or other modifications\n      represent, as a whole, an original work of authorship. For the purposes\n      of this License, Derivative Works shall not include works that remain\n      separable from, or merely link (or bind by name) to the interfaces of,\n      the Work and Derivative Works thereof.\n\n      \"Contribution\" shall mean any work of authorship, including\n      the original version of the Work and any modifications or additions\n      to that Work or Derivative Works thereof, that is intentionally\n      submitted to Licensor for inclusion in the Work by the copyright owner\n      or by an individual or Legal Entity authorized to submit on behalf of\n      the copyright owner. For the purposes of this definition, \"submitted\"\n      means any form of electronic, verbal, or written communication sent\n      to the Licensor or its representatives, including but not limited to\n      communication on electronic mailing lists, source code control systems,\n      and issue tracking systems that are managed by, or on behalf of, the\n      Licensor for the purpose of discussing and improving the Work, but\n      excluding communication that is conspicuously marked or otherwise\n      designated in writing by the copyright owner as \"Not a Contribution.\"\n\n      \"Contributor\" shall mean Licensor and any individual or Legal Entity\n      on behalf of whom a Contribution has been received by Licensor and\n      subsequently incorporated within the Work.\n\n   2. Grant of Copyright License. Subject to the terms and conditions of\n      this License, each Contributor hereby grants to You a perpetual,\n      worldwide, non-exclusive, no-charge, royalty-free, irrevocable\n      copyright license to reproduce, prepare Derivative Works of,\n      publicly display, publicly perform, sublicense, and distribute the\n      Work and such Derivative Works in Source or Object form.\n\n   3. Grant of Patent License. Subject to the terms and conditions of\n      this License, each Contributor hereby grants to You a perpetual,\n      worldwide, non-exclusive, no-charge, royalty-free, irrevocable\n      (except as stated in this section) patent license to make, have made,\n      use, offer to sell, sell, import, and otherwise transfer the Work,\n      where such license applies only to those patent claims licensable\n      by such Contributor that are necessarily infringed by their\n      Contribution(s) alone or by combination of their Contribution(s)\n      with the Work to which such Contribution(s) was submitted. If You\n      institute patent litigation against any entity (including a\n      cross-claim or counterclaim in a lawsuit) alleging that the Work\n      or a Contribution incorporated within the Work constitutes direct\n      or contributory patent infringement, then any patent licenses\n      granted to You under this License for that Work shall terminate\n      as of the date such litigation is filed.\n\n   4. Redistribution. You may reproduce and distribute copies of the\n      Work or Derivative Works thereof in any medium, with or without\n      modifications, and in Source or Object form, provided that You\n      meet the following conditions:\n\n      (a) You must give any other recipients of the Work or\n          Derivative Works a copy of this License; and\n\n      (b) You must cause any modified files to carry prominent notices\n          stating that You changed the files; and\n\n      (c) You must retain, in the Source form of any Derivative Works\n          that You distribute, all copyright, patent, trademark, and\n          attribution notices from the Source form of the Work,\n          excluding those notices that do not pertain to any part of\n          the Derivative Works; and\n\n      (d) If the Work includes a \"NOTICE\" text file as part of its\n          distribution, then any Derivative Works that You distribute must\n          include a readable copy of the attribution notices contained\n          within such NOTICE file, excluding those notices that do not\n          pertain to any part of the Derivative Works, in at least one\n          of the following places: within a NOTICE text file distributed\n          as part of the Derivative Works; within the Source form or\n          documentation, if provided along with the Derivative Works; or,\n          within a display generated by the Derivative Works, if and\n          wherever such third-party notices normally appear. The contents\n          of the NOTICE file are for informational purposes only and\n          do not modify the License. You may add Your own attribution\n          notices within Derivative Works that You distribute, alongside\n          or as an addendum to the NOTICE text from the Work, provided\n          that such additional attribution notices cannot be construed\n          as modifying the License.\n\n      You may add Your own copyright statement to Your modifications and\n      may provide additional or different license terms and conditions\n      for use, reproduction, or distribution of Your modifications, or\n      for any such Derivative Works as a whole, provided Your use,\n      reproduction, and distribution of the Work otherwise complies with\n      the conditions stated in this License.\n\n   5. Submission of Contributions. Unless You explicitly state otherwise,\n      any Contribution intentionally submitted for inclusion in the Work\n      by You to the Licensor shall be under the terms and conditions of\n      this License, without any additional terms or conditions.\n      Notwithstanding the above, nothing herein shall supersede or modify\n      the terms of any separate license agreement you may have executed\n      with Licensor regarding such Contributions.\n\n   6. Trademarks. This License does not grant permission to use the trade\n      names, trademarks, service marks, or product names of the Licensor,\n      except as required for reasonable and customary use in describing the\n      origin of the Work and reproducing the content of the NOTICE file.\n\n   7. Disclaimer of Warranty. Unless required by applicable law or\n      agreed to in writing, Licensor provides the Work (and each\n      Contributor provides its Contributions) on an \"AS IS\" BASIS,\n      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or\n      implied, including, without limitation, any warranties or conditions\n      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A\n      PARTICULAR PURPOSE. You are solely responsible for determining the\n      appropriateness of using or redistributing the Work and assume any\n      risks associated with Your exercise of permissions under this License.\n\n   8. Limitation of Liability. In no event and under no legal theory,\n      whether in tort (including negligence), contract, or otherwise,\n      unless required by applicable law (such as deliberate and grossly\n      negligent acts) or agreed to in writing, shall any Contributor be\n      liable to You for damages, including any direct, indirect, special,\n      incidental, or consequential damages of any character arising as a\n      result of this License or out of the use or inability to use the\n      Work (including but not limited to damages for loss of goodwill,\n      work stoppage, computer failure or malfunction, or any and all\n      other commercial damages or losses), even if such Contributor\n      has been advised of the possibility of such damages.\n\n   9. Accepting Warranty or Additional Liability. While redistributing\n      the Work or Derivative Works thereof, You may choose to offer,\n      and charge a fee for, acceptance of support, warranty, indemnity,\n      or other liability obligations and/or rights consistent with this\n      License. However, in accepting such obligations, You may act only\n      on Your own behalf and on Your sole responsibility, not on behalf\n      of any other Contributor, and only if You agree to indemnify,\n      defend, and hold each Contributor harmless for any liability\n      incurred by, or claims asserted against, such Contributor by reason\n      of your accepting any such warranty or additional liability.\n\n   END OF TERMS AND CONDITIONS\n\n   APPENDIX: How to apply the Apache License to your work.\n\n      To apply the Apache License to your work, attach the following\n      boilerplate notice, with the fields enclosed by brackets \"[]\"\n      replaced with your own identifying information. (Don't include\n      the brackets!)  The text should be enclosed in the appropriate\n      comment syntax for the file format. We also recommend that a\n      file or class name and description of purpose be included on the\n      same \"printed page\" as the copyright notice for easier\n      identification within third-party archives.\n\n   Copyright [yyyy] [name of copyright owner]\n\n   Licensed under the Apache License, Version 2.0 (the \"License\");\n   you may not use this file except in compliance with the License.\n   You may obtain a copy of the License at\n\n       http://www.apache.org/licenses/LICENSE-2.0\n\n   Unless required by applicable law or agreed to in writing, software\n   distributed under the License is distributed on an \"AS IS\" BASIS,\n   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n   See the License for the specific language governing permissions and\n   limitations under the License.\n",
-    "ecosystem": "go",
-    "stale": true
+    "ecosystem": "go"
   },
   {
     "name": "github.com/nats-io/nkeys",
@@ -455,8 +677,7 @@
     "license": "Apache-2.0",
     "repository": "https://github.com/nats-io/nkeys",
     "license_text": "                                 Apache License\n                           Version 2.0, January 2004\n                        http://www.apache.org/licenses/\n\n   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION\n\n   1. Definitions.\n\n      \"License\" shall mean the terms and conditions for use, reproduction,\n      and distribution as defined by Sections 1 through 9 of this document.\n\n      \"Licensor\" shall mean the copyright owner or entity authorized by\n      the copyright owner that is granting the License.\n\n      \"Legal Entity\" shall mean the union of the acting entity and all\n      other entities that control, are controlled by, or are under common\n      control with that entity. For the purposes of this definition,\n      \"control\" means (i) the power, direct or indirect, to cause the\n      direction or management of such entity, whether by contract or\n      otherwise, or (ii) ownership of fifty percent (50%) or more of the\n      outstanding shares, or (iii) beneficial ownership of such entity.\n\n      \"You\" (or \"Your\") shall mean an individual or Legal Entity\n      exercising permissions granted by this License.\n\n      \"Source\" form shall mean the preferred form for making modifications,\n      including but not limited to software source code, documentation\n      source, and configuration files.\n\n      \"Object\" form shall mean any form resulting from mechanical\n      transformation or translation of a Source form, including but\n      not limited to compiled object code, generated documentation,\n      and conversions to other media types.\n\n      \"Work\" shall mean the work of authorship, whether in Source or\n      Object form, made available under the License, as indicated by a\n      copyright notice that is included in or attached to the work\n      (an example is provided in the Appendix below).\n\n      \"Derivative Works\" shall mean any work, whether in Source or Object\n      form, that is based on (or derived from) the Work and for which the\n      editorial revisions, annotations, elaborations, or other modifications\n      represent, as a whole, an original work of authorship. For the purposes\n      of this License, Derivative Works shall not include works that remain\n      separable from, or merely link (or bind by name) to the interfaces of,\n      the Work and Derivative Works thereof.\n\n      \"Contribution\" shall mean any work of authorship, including\n      the original version of the Work and any modifications or additions\n      to that Work or Derivative Works thereof, that is intentionally\n      submitted to Licensor for inclusion in the Work by the copyright owner\n      or by an individual or Legal Entity authorized to submit on behalf of\n      the copyright owner. For the purposes of this definition, \"submitted\"\n      means any form of electronic, verbal, or written communication sent\n      to the Licensor or its representatives, including but not limited to\n      communication on electronic mailing lists, source code control systems,\n      and issue tracking systems that are managed by, or on behalf of, the\n      Licensor for the purpose of discussing and improving the Work, but\n      excluding communication that is conspicuously marked or otherwise\n      designated in writing by the copyright owner as \"Not a Contribution.\"\n\n      \"Contributor\" shall mean Licensor and any individual or Legal Entity\n      on behalf of whom a Contribution has been received by Licensor and\n      subsequently incorporated within the Work.\n\n   2. Grant of Copyright License. Subject to the terms and conditions of\n      this License, each Contributor hereby grants to You a perpetual,\n      worldwide, non-exclusive, no-charge, royalty-free, irrevocable\n      copyright license to reproduce, prepare Derivative Works of,\n      publicly display, publicly perform, sublicense, and distribute the\n      Work and such Derivative Works in Source or Object form.\n\n   3. Grant of Patent License. Subject to the terms and conditions of\n      this License, each Contributor hereby grants to You a perpetual,\n      worldwide, non-exclusive, no-charge, royalty-free, irrevocable\n      (except as stated in this section) patent license to make, have made,\n      use, offer to sell, sell, import, and otherwise transfer the Work,\n      where such license applies only to those patent claims licensable\n      by such Contributor that are necessarily infringed by their\n      Contribution(s) alone or by combination of their Contribution(s)\n      with the Work to which such Contribution(s) was submitted. If You\n      institute patent litigation against any entity (including a\n      cross-claim or counterclaim in a lawsuit) alleging that the Work\n      or a Contribution incorporated within the Work constitutes direct\n      or contributory patent infringement, then any patent licenses\n      granted to You under this License for that Work shall terminate\n      as of the date such litigation is filed.\n\n   4. Redistribution. You may reproduce and distribute copies of the\n      Work or Derivative Works thereof in any medium, with or without\n      modifications, and in Source or Object form, provided that You\n      meet the following conditions:\n\n      (a) You must give any other recipients of the Work or\n          Derivative Works a copy of this License; and\n\n      (b) You must cause any modified files to carry prominent notices\n          stating that You changed the files; and\n\n      (c) You must retain, in the Source form of any Derivative Works\n          that You distribute, all copyright, patent, trademark, and\n          attribution notices from the Source form of the Work,\n          excluding those notices that do not pertain to any part of\n          the Derivative Works; and\n\n      (d) If the Work includes a \"NOTICE\" text file as part of its\n          distribution, then any Derivative Works that You distribute must\n          include a readable copy of the attribution notices contained\n          within such NOTICE file, excluding those notices that do not\n          pertain to any part of the Derivative Works, in at least one\n          of the following places: within a NOTICE text file distributed\n          as part of the Derivative Works; within the Source form or\n          documentation, if provided along with the Derivative Works; or,\n          within a display generated by the Derivative Works, if and\n          wherever such third-party notices normally appear. The contents\n          of the NOTICE file are for informational purposes only and\n          do not modify the License. You may add Your own attribution\n          notices within Derivative Works that You distribute, alongside\n          or as an addendum to the NOTICE text from the Work, provided\n          that such additional attribution notices cannot be construed\n          as modifying the License.\n\n      You may add Your own copyright statement to Your modifications and\n      may provide additional or different license terms and conditions\n      for use, reproduction, or distribution of Your modifications, or\n      for any such Derivative Works as a whole, provided Your use,\n      reproduction, and distribution of the Work otherwise complies with\n      the conditions stated in this License.\n\n   5. Submission of Contributions. Unless You explicitly state otherwise,\n      any Contribution intentionally submitted for inclusion in the Work\n      by You to the Licensor shall be under the terms and conditions of\n      this License, without any additional terms or conditions.\n      Notwithstanding the above, nothing herein shall supersede or modify\n      the terms of any separate license agreement you may have executed\n      with Licensor regarding such Contributions.\n\n   6. Trademarks. This License does not grant permission to use the trade\n      names, trademarks, service marks, or product names of the Licensor,\n      except as required for reasonable and customary use in describing the\n      origin of the Work and reproducing the content of the NOTICE file.\n\n   7. Disclaimer of Warranty. Unless required by applicable law or\n      agreed to in writing, Licensor provides the Work (and each\n      Contributor provides its Contributions) on an \"AS IS\" BASIS,\n      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or\n      implied, including, without limitation, any warranties or conditions\n      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A\n      PARTICULAR PURPOSE. You are solely responsible for determining the\n      appropriateness of using or redistributing the Work and assume any\n      risks associated with Your exercise of permissions under this License.\n\n   8. Limitation of Liability. In no event and under no legal theory,\n      whether in tort (including negligence), contract, or otherwise,\n      unless required by applicable law (such as deliberate and grossly\n      negligent acts) or agreed to in writing, shall any Contributor be\n      liable to You for damages, including any direct, indirect, special,\n      incidental, or consequential damages of any character arising as a\n      result of this License or out of the use or inability to use the\n      Work (including but not limited to damages for loss of goodwill,\n      work stoppage, computer failure or malfunction, or any and all\n      other commercial damages or losses), even if such Contributor\n      has been advised of the possibility of such damages.\n\n   9. Accepting Warranty or Additional Liability. While redistributing\n      the Work or Derivative Works thereof, You may choose to offer,\n      and charge a fee for, acceptance of support, warranty, indemnity,\n      or other liability obligations and/or rights consistent with this\n      License. However, in accepting such obligations, You may act only\n      on Your own behalf and on Your sole responsibility, not on behalf\n      of any other Contributor, and only if You agree to indemnify,\n      defend, and hold each Contributor harmless for any liability\n      incurred by, or claims asserted against, such Contributor by reason\n      of your accepting any such warranty or additional liability.\n\n   END OF TERMS AND CONDITIONS\n\n   APPENDIX: How to apply the Apache License to your work.\n\n      To apply the Apache License to your work, attach the following\n      boilerplate notice, with the fields enclosed by brackets \"[]\"\n      replaced with your own identifying information. (Don't include\n      the brackets!)  The text should be enclosed in the appropriate\n      comment syntax for the file format. We also recommend that a\n      file or class name and description of purpose be included on the\n      same \"printed page\" as the copyright notice for easier\n      identification within third-party archives.\n\n   Copyright [yyyy] [name of copyright owner]\n\n   Licensed under the Apache License, Version 2.0 (the \"License\");\n   you may not use this file except in compliance with the License.\n   You may obtain a copy of the License at\n\n       http://www.apache.org/licenses/LICENSE-2.0\n\n   Unless required by applicable law or agreed to in writing, software\n   distributed under the License is distributed on an \"AS IS\" BASIS,\n   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n   See the License for the specific language governing permissions and\n   limitations under the License.\n",
-    "ecosystem": "go",
-    "stale": true
+    "ecosystem": "go"
   },
   {
     "name": "github.com/nats-io/nuid",
@@ -464,8 +685,15 @@
     "license": "Apache-2.0",
     "repository": "https://github.com/nats-io/nuid",
     "license_text": "                                 Apache License\n                           Version 2.0, January 2004\n                        http://www.apache.org/licenses/\n\n   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION\n\n   1. Definitions.\n\n      \"License\" shall mean the terms and conditions for use, reproduction,\n      and distribution as defined by Sections 1 through 9 of this document.\n\n      \"Licensor\" shall mean the copyright owner or entity authorized by\n      the copyright owner that is granting the License.\n\n      \"Legal Entity\" shall mean the union of the acting entity and all\n      other entities that control, are controlled by, or are under common\n      control with that entity. For the purposes of this definition,\n      \"control\" means (i) the power, direct or indirect, to cause the\n      direction or management of such entity, whether by contract or\n      otherwise, or (ii) ownership of fifty percent (50%) or more of the\n      outstanding shares, or (iii) beneficial ownership of such entity.\n\n      \"You\" (or \"Your\") shall mean an individual or Legal Entity\n      exercising permissions granted by this License.\n\n      \"Source\" form shall mean the preferred form for making modifications,\n      including but not limited to software source code, documentation\n      source, and configuration files.\n\n      \"Object\" form shall mean any form resulting from mechanical\n      transformation or translation of a Source form, including but\n      not limited to compiled object code, generated documentation,\n      and conversions to other media types.\n\n      \"Work\" shall mean the work of authorship, whether in Source or\n      Object form, made available under the License, as indicated by a\n      copyright notice that is included in or attached to the work\n      (an example is provided in the Appendix below).\n\n      \"Derivative Works\" shall mean any work, whether in Source or Object\n      form, that is based on (or derived from) the Work and for which the\n      editorial revisions, annotations, elaborations, or other modifications\n      represent, as a whole, an original work of authorship. For the purposes\n      of this License, Derivative Works shall not include works that remain\n      separable from, or merely link (or bind by name) to the interfaces of,\n      the Work and Derivative Works thereof.\n\n      \"Contribution\" shall mean any work of authorship, including\n      the original version of the Work and any modifications or additions\n      to that Work or Derivative Works thereof, that is intentionally\n      submitted to Licensor for inclusion in the Work by the copyright owner\n      or by an individual or Legal Entity authorized to submit on behalf of\n      the copyright owner. For the purposes of this definition, \"submitted\"\n      means any form of electronic, verbal, or written communication sent\n      to the Licensor or its representatives, including but not limited to\n      communication on electronic mailing lists, source code control systems,\n      and issue tracking systems that are managed by, or on behalf of, the\n      Licensor for the purpose of discussing and improving the Work, but\n      excluding communication that is conspicuously marked or otherwise\n      designated in writing by the copyright owner as \"Not a Contribution.\"\n\n      \"Contributor\" shall mean Licensor and any individual or Legal Entity\n      on behalf of whom a Contribution has been received by Licensor and\n      subsequently incorporated within the Work.\n\n   2. Grant of Copyright License. Subject to the terms and conditions of\n      this License, each Contributor hereby grants to You a perpetual,\n      worldwide, non-exclusive, no-charge, royalty-free, irrevocable\n      copyright license to reproduce, prepare Derivative Works of,\n      publicly display, publicly perform, sublicense, and distribute the\n      Work and such Derivative Works in Source or Object form.\n\n   3. Grant of Patent License. Subject to the terms and conditions of\n      this License, each Contributor hereby grants to You a perpetual,\n      worldwide, non-exclusive, no-charge, royalty-free, irrevocable\n      (except as stated in this section) patent license to make, have made,\n      use, offer to sell, sell, import, and otherwise transfer the Work,\n      where such license applies only to those patent claims licensable\n      by such Contributor that are necessarily infringed by their\n      Contribution(s) alone or by combination of their Contribution(s)\n      with the Work to which such Contribution(s) was submitted. If You\n      institute patent litigation against any entity (including a\n      cross-claim or counterclaim in a lawsuit) alleging that the Work\n      or a Contribution incorporated within the Work constitutes direct\n      or contributory patent infringement, then any patent licenses\n      granted to You under this License for that Work shall terminate\n      as of the date such litigation is filed.\n\n   4. Redistribution. You may reproduce and distribute copies of the\n      Work or Derivative Works thereof in any medium, with or without\n      modifications, and in Source or Object form, provided that You\n      meet the following conditions:\n\n      (a) You must give any other recipients of the Work or\n          Derivative Works a copy of this License; and\n\n      (b) You must cause any modified files to carry prominent notices\n          stating that You changed the files; and\n\n      (c) You must retain, in the Source form of any Derivative Works\n          that You distribute, all copyright, patent, trademark, and\n          attribution notices from the Source form of the Work,\n          excluding those notices that do not pertain to any part of\n          the Derivative Works; and\n\n      (d) If the Work includes a \"NOTICE\" text file as part of its\n          distribution, then any Derivative Works that You distribute must\n          include a readable copy of the attribution notices contained\n          within such NOTICE file, excluding those notices that do not\n          pertain to any part of the Derivative Works, in at least one\n          of the following places: within a NOTICE text file distributed\n          as part of the Derivative Works; within the Source form or\n          documentation, if provided along with the Derivative Works; or,\n          within a display generated by the Derivative Works, if and\n          wherever such third-party notices normally appear. The contents\n          of the NOTICE file are for informational purposes only and\n          do not modify the License. You may add Your own attribution\n          notices within Derivative Works that You distribute, alongside\n          or as an addendum to the NOTICE text from the Work, provided\n          that such additional attribution notices cannot be construed\n          as modifying the License.\n\n      You may add Your own copyright statement to Your modifications and\n      may provide additional or different license terms and conditions\n      for use, reproduction, or distribution of Your modifications, or\n      for any such Derivative Works as a whole, provided Your use,\n      reproduction, and distribution of the Work otherwise complies with\n      the conditions stated in this License.\n\n   5. Submission of Contributions. Unless You explicitly state otherwise,\n      any Contribution intentionally submitted for inclusion in the Work\n      by You to the Licensor shall be under the terms and conditions of\n      this License, without any additional terms or conditions.\n      Notwithstanding the above, nothing herein shall supersede or modify\n      the terms of any separate license agreement you may have executed\n      with Licensor regarding such Contributions.\n\n   6. Trademarks. This License does not grant permission to use the trade\n      names, trademarks, service marks, or product names of the Licensor,\n      except as required for reasonable and customary use in describing the\n      origin of the Work and reproducing the content of the NOTICE file.\n\n   7. Disclaimer of Warranty. Unless required by applicable law or\n      agreed to in writing, Licensor provides the Work (and each\n      Contributor provides its Contributions) on an \"AS IS\" BASIS,\n      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or\n      implied, including, without limitation, any warranties or conditions\n      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A\n      PARTICULAR PURPOSE. You are solely responsible for determining the\n      appropriateness of using or redistributing the Work and assume any\n      risks associated with Your exercise of permissions under this License.\n\n   8. Limitation of Liability. In no event and under no legal theory,\n      whether in tort (including negligence), contract, or otherwise,\n      unless required by applicable law (such as deliberate and grossly\n      negligent acts) or agreed to in writing, shall any Contributor be\n      liable to You for damages, including any direct, indirect, special,\n      incidental, or consequential damages of any character arising as a\n      result of this License or out of the use or inability to use the\n      Work (including but not limited to damages for loss of goodwill,\n      work stoppage, computer failure or malfunction, or any and all\n      other commercial damages or losses), even if such Contributor\n      has been advised of the possibility of such damages.\n\n   9. Accepting Warranty or Additional Liability. While redistributing\n      the Work or Derivative Works thereof, You may choose to offer,\n      and charge a fee for, acceptance of support, warranty, indemnity,\n      or other liability obligations and/or rights consistent with this\n      License. However, in accepting such obligations, You may act only\n      on Your own behalf and on Your sole responsibility, not on behalf\n      of any other Contributor, and only if You agree to indemnify,\n      defend, and hold each Contributor harmless for any liability\n      incurred by, or claims asserted against, such Contributor by reason\n      of your accepting any such warranty or additional liability.\n\n   END OF TERMS AND CONDITIONS\n\n   APPENDIX: How to apply the Apache License to your work.\n\n      To apply the Apache License to your work, attach the following\n      boilerplate notice, with the fields enclosed by brackets \"[]\"\n      replaced with your own identifying information. (Don't include\n      the brackets!)  The text should be enclosed in the appropriate\n      comment syntax for the file format. We also recommend that a\n      file or class name and description of purpose be included on the\n      same \"printed page\" as the copyright notice for easier\n      identification within third-party archives.\n\n   Copyright [yyyy] [name of copyright owner]\n\n   Licensed under the Apache License, Version 2.0 (the \"License\");\n   you may not use this file except in compliance with the License.\n   You may obtain a copy of the License at\n\n       http://www.apache.org/licenses/LICENSE-2.0\n\n   Unless required by applicable law or agreed to in writing, software\n   distributed under the License is distributed on an \"AS IS\" BASIS,\n   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n   See the License for the specific language governing permissions and\n   limitations under the License.\n",
-    "ecosystem": "go",
-    "stale": true
+    "ecosystem": "go"
+  },
+  {
+    "name": "github.com/oklog/run",
+    "version": "v1.1.0",
+    "license": "Apache-2.0",
+    "repository": "https://github.com/oklog/run",
+    "license_text": "                                 Apache License\n                           Version 2.0, January 2004\n                        http://www.apache.org/licenses/\n\n   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION\n\n   1. Definitions.\n\n      \"License\" shall mean the terms and conditions for use, reproduction,\n      and distribution as defined by Sections 1 through 9 of this document.\n\n      \"Licensor\" shall mean the copyright owner or entity authorized by\n      the copyright owner that is granting the License.\n\n      \"Legal Entity\" shall mean the union of the acting entity and all\n      other entities that control, are controlled by, or are under common\n      control with that entity. For the purposes of this definition,\n      \"control\" means (i) the power, direct or indirect, to cause the\n      direction or management of such entity, whether by contract or\n      otherwise, or (ii) ownership of fifty percent (50%) or more of the\n      outstanding shares, or (iii) beneficial ownership of such entity.\n\n      \"You\" (or \"Your\") shall mean an individual or Legal Entity\n      exercising permissions granted by this License.\n\n      \"Source\" form shall mean the preferred form for making modifications,\n      including but not limited to software source code, documentation\n      source, and configuration files.\n\n      \"Object\" form shall mean any form resulting from mechanical\n      transformation or translation of a Source form, including but\n      not limited to compiled object code, generated documentation,\n      and conversions to other media types.\n\n      \"Work\" shall mean the work of authorship, whether in Source or\n      Object form, made available under the License, as indicated by a\n      copyright notice that is included in or attached to the work\n      (an example is provided in the Appendix below).\n\n      \"Derivative Works\" shall mean any work, whether in Source or Object\n      form, that is based on (or derived from) the Work and for which the\n      editorial revisions, annotations, elaborations, or other modifications\n      represent, as a whole, an original work of authorship. For the purposes\n      of this License, Derivative Works shall not include works that remain\n      separable from, or merely link (or bind by name) to the interfaces of,\n      the Work and Derivative Works thereof.\n\n      \"Contribution\" shall mean any work of authorship, including\n      the original version of the Work and any modifications or additions\n      to that Work or Derivative Works thereof, that is intentionally\n      submitted to Licensor for inclusion in the Work by the copyright owner\n      or by an individual or Legal Entity authorized to submit on behalf of\n      the copyright owner. For the purposes of this definition, \"submitted\"\n      means any form of electronic, verbal, or written communication sent\n      to the Licensor or its representatives, including but not limited to\n      communication on electronic mailing lists, source code control systems,\n      and issue tracking systems that are managed by, or on behalf of, the\n      Licensor for the purpose of discussing and improving the Work, but\n      excluding communication that is conspicuously marked or otherwise\n      designated in writing by the copyright owner as \"Not a Contribution.\"\n\n      \"Contributor\" shall mean Licensor and any individual or Legal Entity\n      on behalf of whom a Contribution has been received by Licensor and\n      subsequently incorporated within the Work.\n\n   2. Grant of Copyright License. Subject to the terms and conditions of\n      this License, each Contributor hereby grants to You a perpetual,\n      worldwide, non-exclusive, no-charge, royalty-free, irrevocable\n      copyright license to reproduce, prepare Derivative Works of,\n      publicly display, publicly perform, sublicense, and distribute the\n      Work and such Derivative Works in Source or Object form.\n\n   3. Grant of Patent License. Subject to the terms and conditions of\n      this License, each Contributor hereby grants to You a perpetual,\n      worldwide, non-exclusive, no-charge, royalty-free, irrevocable\n      (except as stated in this section) patent license to make, have made,\n      use, offer to sell, sell, import, and otherwise transfer the Work,\n      where such license applies only to those patent claims licensable\n      by such Contributor that are necessarily infringed by their\n      Contribution(s) alone or by combination of their Contribution(s)\n      with the Work to which such Contribution(s) was submitted. If You\n      institute patent litigation against any entity (including a\n      cross-claim or counterclaim in a lawsuit) alleging that the Work\n      or a Contribution incorporated within the Work constitutes direct\n      or contributory patent infringement, then any patent licenses\n      granted to You under this License for that Work shall terminate\n      as of the date such litigation is filed.\n\n   4. Redistribution. You may reproduce and distribute copies of the\n      Work or Derivative Works thereof in any medium, with or without\n      modifications, and in Source or Object form, provided that You\n      meet the following conditions:\n\n      (a) You must give any other recipients of the Work or\n          Derivative Works a copy of this License; and\n\n      (b) You must cause any modified files to carry prominent notices\n          stating that You changed the files; and\n\n      (c) You must retain, in the Source form of any Derivative Works\n          that You distribute, all copyright, patent, trademark, and\n          attribution notices from the Source form of the Work,\n          excluding those notices that do not pertain to any part of\n          the Derivative Works; and\n\n      (d) If the Work includes a \"NOTICE\" text file as part of its\n          distribution, then any Derivative Works that You distribute must\n          include a readable copy of the attribution notices contained\n          within such NOTICE file, excluding those notices that do not\n          pertain to any part of the Derivative Works, in at least one\n          of the following places: within a NOTICE text file distributed\n          as part of the Derivative Works; within the Source form or\n          documentation, if provided along with the Derivative Works; or,\n          within a display generated by the Derivative Works, if and\n          wherever such third-party notices normally appear. The contents\n          of the NOTICE file are for informational purposes only and\n          do not modify the License. You may add Your own attribution\n          notices within Derivative Works that You distribute, alongside\n          or as an addendum to the NOTICE text from the Work, provided\n          that such additional attribution notices cannot be construed\n          as modifying the License.\n\n      You may add Your own copyright statement to Your modifications and\n      may provide additional or different license terms and conditions\n      for use, reproduction, or distribution of Your modifications, or\n      for any such Derivative Works as a whole, provided Your use,\n      reproduction, and distribution of the Work otherwise complies with\n      the conditions stated in this License.\n\n   5. Submission of Contributions. Unless You explicitly state otherwise,\n      any Contribution intentionally submitted for inclusion in the Work\n      by You to the Licensor shall be under the terms and conditions of\n      this License, without any additional terms or conditions.\n      Notwithstanding the above, nothing herein shall supersede or modify\n      the terms of any separate license agreement you may have executed\n      with Licensor regarding such Contributions.\n\n   6. Trademarks. This License does not grant permission to use the trade\n      names, trademarks, service marks, or product names of the Licensor,\n      except as required for reasonable and customary use in describing the\n      origin of the Work and reproducing the content of the NOTICE file.\n\n   7. Disclaimer of Warranty. Unless required by applicable law or\n      agreed to in writing, Licensor provides the Work (and each\n      Contributor provides its Contributions) on an \"AS IS\" BASIS,\n      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or\n      implied, including, without limitation, any warranties or conditions\n      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A\n      PARTICULAR PURPOSE. You are solely responsible for determining the\n      appropriateness of using or redistributing the Work and assume any\n      risks associated with Your exercise of permissions under this License.\n\n   8. Limitation of Liability. In no event and under no legal theory,\n      whether in tort (including negligence), contract, or otherwise,\n      unless required by applicable law (such as deliberate and grossly\n      negligent acts) or agreed to in writing, shall any Contributor be\n      liable to You for damages, including any direct, indirect, special,\n      incidental, or consequential damages of any character arising as a\n      result of this License or out of the use or inability to use the\n      Work (including but not limited to damages for loss of goodwill,\n      work stoppage, computer failure or malfunction, or any and all\n      other commercial damages or losses), even if such Contributor\n      has been advised of the possibility of such damages.\n\n   9. Accepting Warranty or Additional Liability. While redistributing\n      the Work or Derivative Works thereof, You may choose to offer,\n      and charge a fee for, acceptance of support, warranty, indemnity,\n      or other liability obligations and/or rights consistent with this\n      License. However, in accepting such obligations, You may act only\n      on Your own behalf and on Your sole responsibility, not on behalf\n      of any other Contributor, and only if You agree to indemnify,\n      defend, and hold each Contributor harmless for any liability\n      incurred by, or claims asserted against, such Contributor by reason\n      of your accepting any such warranty or additional liability.\n\n   END OF TERMS AND CONDITIONS\n\n   APPENDIX: How to apply the Apache License to your work.\n\n      To apply the Apache License to your work, attach the following\n      boilerplate notice, with the fields enclosed by brackets \"[]\"\n      replaced with your own identifying information. (Don't include\n      the brackets!)  The text should be enclosed in the appropriate\n      comment syntax for the file format. We also recommend that a\n      file or class name and description of purpose be included on the\n      same \"printed page\" as the copyright notice for easier\n      identification within third-party archives.\n\n   Copyright [yyyy] [name of copyright owner]\n\n   Licensed under the Apache License, Version 2.0 (the \"License\");\n   you may not use this file except in compliance with the License.\n   You may obtain a copy of the License at\n\n       http://www.apache.org/licenses/LICENSE-2.0\n\n   Unless required by applicable law or agreed to in writing, software\n   distributed under the License is distributed on an \"AS IS\" BASIS,\n   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n   See the License for the specific language governing permissions and\n   limitations under the License.\n",
+    "ecosystem": "go"
   },
   {
     "name": "github.com/open-telemetry/opentelemetry-go",
@@ -473,8 +701,7 @@
     "license": "Apache-2.0",
     "repository": "https://github.com/open-telemetry/opentelemetry-go",
     "license_text": "                                 Apache License\n                           Version 2.0, January 2004\n                        http://www.apache.org/licenses/\n\n   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION\n\n   1. Definitions.\n\n      \"License\" shall mean the terms and conditions for use, reproduction,\n      and distribution as defined by Sections 1 through 9 of this document.\n\n      \"Licensor\" shall mean the copyright owner or entity authorized by\n      the copyright owner that is granting the License.\n\n      \"Legal Entity\" shall mean the union of the acting entity and all\n      other entities that control, are controlled by, or are under common\n      control with that entity. For the purposes of this definition,\n      \"control\" means (i) the power, direct or indirect, to cause the\n      direction or management of such entity, whether by contract or\n      otherwise, or (ii) ownership of fifty percent (50%) or more of the\n      outstanding shares, or (iii) beneficial ownership of such entity.\n\n      \"You\" (or \"Your\") shall mean an individual or Legal Entity\n      exercising permissions granted by this License.\n\n      \"Source\" form shall mean the preferred form for making modifications,\n      including but not limited to software source code, documentation\n      source, and configuration files.\n\n      \"Object\" form shall mean any form resulting from mechanical\n      transformation or translation of a Source form, including but\n      not limited to compiled object code, generated documentation,\n      and conversions to other media types.\n\n      \"Work\" shall mean the work of authorship, whether in Source or\n      Object form, made available under the License, as indicated by a\n      copyright notice that is included in or attached to the work\n      (an example is provided in the Appendix below).\n\n      \"Derivative Works\" shall mean any work, whether in Source or Object\n      form, that is based on (or derived from) the Work and for which the\n      editorial revisions, annotations, elaborations, or other modifications\n      represent, as a whole, an original work of authorship. For the purposes\n      of this License, Derivative Works shall not include works that remain\n      separable from, or merely link (or bind by name) to the interfaces of,\n      the Work and Derivative Works thereof.\n\n      \"Contribution\" shall mean any work of authorship, including\n      the original version of the Work and any modifications or additions\n      to that Work or Derivative Works thereof, that is intentionally\n      submitted to Licensor for inclusion in the Work by the copyright owner\n      or by an individual or Legal Entity authorized to submit on behalf of\n      the copyright owner. For the purposes of this definition, \"submitted\"\n      means any form of electronic, verbal, or written communication sent\n      to the Licensor or its representatives, including but not limited to\n      communication on electronic mailing lists, source code control systems,\n      and issue tracking systems that are managed by, or on behalf of, the\n      Licensor for the purpose of discussing and improving the Work, but\n      excluding communication that is conspicuously marked or otherwise\n      designated in writing by the copyright owner as \"Not a Contribution.\"\n\n      \"Contributor\" shall mean Licensor and any individual or Legal Entity\n      on behalf of whom a Contribution has been received by Licensor and\n      subsequently incorporated within the Work.\n\n   2. Grant of Copyright License. Subject to the terms and conditions of\n      this License, each Contributor hereby grants to You a perpetual,\n      worldwide, non-exclusive, no-charge, royalty-free, irrevocable\n      copyright license to reproduce, prepare Derivative Works of,\n      publicly display, publicly perform, sublicense, and distribute the\n      Work and such Derivative Works in Source or Object form.\n\n   3. Grant of Patent License. Subject to the terms and conditions of\n      this License, each Contributor hereby grants to You a perpetual,\n      worldwide, non-exclusive, no-charge, royalty-free, irrevocable\n      (except as stated in this section) patent license to make, have made,\n      use, offer to sell, sell, import, and otherwise transfer the Work,\n      where such license applies only to those patent claims licensable\n      by such Contributor that are necessarily infringed by their\n      Contribution(s) alone or by combination of their Contribution(s)\n      with the Work to which such Contribution(s) was submitted. If You\n      institute patent litigation against any entity (including a\n      cross-claim or counterclaim in a lawsuit) alleging that the Work\n      or a Contribution incorporated within the Work constitutes direct\n      or contributory patent infringement, then any patent licenses\n      granted to You under this License for that Work shall terminate\n      as of the date such litigation is filed.\n\n   4. Redistribution. You may reproduce and distribute copies of the\n      Work or Derivative Works thereof in any medium, with or without\n      modifications, and in Source or Object form, provided that You\n      meet the following conditions:\n\n      (a) You must give any other recipients of the Work or\n          Derivative Works a copy of this License; and\n\n      (b) You must cause any modified files to carry prominent notices\n          stating that You changed the files; and\n\n      (c) You must retain, in the Source form of any Derivative Works\n          that You distribute, all copyright, patent, trademark, and\n          attribution notices from the Source form of the Work,\n          excluding those notices that do not pertain to any part of\n          the Derivative Works; and\n\n      (d) If the Work includes a \"NOTICE\" text file as part of its\n          distribution, then any Derivative Works that You distribute must\n          include a readable copy of the attribution notices contained\n          within such NOTICE file, excluding those notices that do not\n          pertain to any part of the Derivative Works, in at least one\n          of the following places: within a NOTICE text file distributed\n          as part of the Derivative Works; within the Source form or\n          documentation, if provided along with the Derivative Works; or,\n          within a display generated by the Derivative Works, if and\n          wherever such third-party notices normally appear. The contents\n          of the NOTICE file are for informational purposes only and\n          do not modify the License. You may add Your own attribution\n          notices within Derivative Works that You distribute, alongside\n          or as an addendum to the NOTICE text from the Work, provided\n          that such additional attribution notices cannot be construed\n          as modifying the License.\n\n      You may add Your own copyright statement to Your modifications and\n      may provide additional or different license terms and conditions\n      for use, reproduction, or distribution of Your modifications, or\n      for any such Derivative Works as a whole, provided Your use,\n      reproduction, and distribution of the Work otherwise complies with\n      the conditions stated in this License.\n\n   5. Submission of Contributions. Unless You explicitly state otherwise,\n      any Contribution intentionally submitted for inclusion in the Work\n      by You to the Licensor shall be under the terms and conditions of\n      this License, without any additional terms or conditions.\n      Notwithstanding the above, nothing herein shall supersede or modify\n      the terms of any separate license agreement you may have executed\n      with Licensor regarding such Contributions.\n\n   6. Trademarks. This License does not grant permission to use the trade\n      names, trademarks, service marks, or product names of the Licensor,\n      except as required for reasonable and customary use in describing the\n      origin of the Work and reproducing the content of the NOTICE file.\n\n   7. Disclaimer of Warranty. Unless required by applicable law or\n      agreed to in writing, Licensor provides the Work (and each\n      Contributor provides its Contributions) on an \"AS IS\" BASIS,\n      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or\n      implied, including, without limitation, any warranties or conditions\n      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A\n      PARTICULAR PURPOSE. You are solely responsible for determining the\n      appropriateness of using or redistributing the Work and assume any\n      risks associated with Your exercise of permissions under this License.\n\n   8. Limitation of Liability. In no event and under no legal theory,\n      whether in tort (including negligence), contract, or otherwise,\n      unless required by applicable law (such as deliberate and grossly\n      negligent acts) or agreed to in writing, shall any Contributor be\n      liable to You for damages, including any direct, indirect, special,\n      incidental, or consequential damages of any character arising as a\n      result of this License or out of the use or inability to use the\n      Work (including but not limited to damages for loss of goodwill,\n      work stoppage, computer failure or malfunction, or any and all\n      other commercial damages or losses), even if such Contributor\n      has been advised of the possibility of such damages.\n\n   9. Accepting Warranty or Additional Liability. While redistributing\n      the Work or Derivative Works thereof, You may choose to offer,\n      and charge a fee for, acceptance of support, warranty, indemnity,\n      or other liability obligations and/or rights consistent with this\n      License. However, in accepting such obligations, You may act only\n      on Your own behalf and on Your sole responsibility, not on behalf\n      of any other Contributor, and only if You agree to indemnify,\n      defend, and hold each Contributor harmless for any liability\n      incurred by, or claims asserted against, such Contributor by reason\n      of your accepting any such warranty or additional liability.\n\n   END OF TERMS AND CONDITIONS\n\n   APPENDIX: How to apply the Apache License to your work.\n\n      To apply the Apache License to your work, attach the following\n      boilerplate notice, with the fields enclosed by brackets \"[]\"\n      replaced with your own identifying information. (Don't include\n      the brackets!)  The text should be enclosed in the appropriate\n      comment syntax for the file format. We also recommend that a\n      file or class name and description of purpose be included on the\n      same \"printed page\" as the copyright notice for easier\n      identification within third-party archives.\n\n   Copyright [yyyy] [name of copyright owner]\n\n   Licensed under the Apache License, Version 2.0 (the \"License\");\n   you may not use this file except in compliance with the License.\n   You may obtain a copy of the License at\n\n       http://www.apache.org/licenses/LICENSE-2.0\n\n   Unless required by applicable law or agreed to in writing, software\n   distributed under the License is distributed on an \"AS IS\" BASIS,\n   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n   See the License for the specific language governing permissions and\n   limitations under the License.\n\n--------------------------------------------------------------------------------\n\nCopyright 2009 The Go Authors.\n\nRedistribution and use in source and binary forms, with or without\nmodification, are permitted provided that the following conditions are\nmet:\n\n   * Redistributions of source code must retain the above copyright\nnotice, this list of conditions and the following disclaimer.\n   * Redistributions in binary form must reproduce the above\ncopyright notice, this list of conditions and the following disclaimer\nin the documentation and/or other materials provided with the\ndistribution.\n   * Neither the name of Google LLC nor the names of its\ncontributors may be used to endorse or promote products derived from\nthis software without specific prior written permission.\n\nTHIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS\n\"AS IS\" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT\nLIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR\nA PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT\nOWNER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,\nSPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT\nLIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,\nDATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY\nTHEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT\n(INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE\nOF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.",
-    "ecosystem": "go",
-    "stale": true
+    "ecosystem": "go"
   },
   {
     "name": "github.com/open-telemetry/opentelemetry-go",
@@ -482,8 +709,7 @@
     "license": "Apache-2.0",
     "repository": "https://github.com/open-telemetry/opentelemetry-go",
     "license_text": "                                 Apache License\n                           Version 2.0, January 2004\n                        http://www.apache.org/licenses/\n\n   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION\n\n   1. Definitions.\n\n      \"License\" shall mean the terms and conditions for use, reproduction,\n      and distribution as defined by Sections 1 through 9 of this document.\n\n      \"Licensor\" shall mean the copyright owner or entity authorized by\n      the copyright owner that is granting the License.\n\n      \"Legal Entity\" shall mean the union of the acting entity and all\n      other entities that control, are controlled by, or are under common\n      control with that entity. For the purposes of this definition,\n      \"control\" means (i) the power, direct or indirect, to cause the\n      direction or management of such entity, whether by contract or\n      otherwise, or (ii) ownership of fifty percent (50%) or more of the\n      outstanding shares, or (iii) beneficial ownership of such entity.\n\n      \"You\" (or \"Your\") shall mean an individual or Legal Entity\n      exercising permissions granted by this License.\n\n      \"Source\" form shall mean the preferred form for making modifications,\n      including but not limited to software source code, documentation\n      source, and configuration files.\n\n      \"Object\" form shall mean any form resulting from mechanical\n      transformation or translation of a Source form, including but\n      not limited to compiled object code, generated documentation,\n      and conversions to other media types.\n\n      \"Work\" shall mean the work of authorship, whether in Source or\n      Object form, made available under the License, as indicated by a\n      copyright notice that is included in or attached to the work\n      (an example is provided in the Appendix below).\n\n      \"Derivative Works\" shall mean any work, whether in Source or Object\n      form, that is based on (or derived from) the Work and for which the\n      editorial revisions, annotations, elaborations, or other modifications\n      represent, as a whole, an original work of authorship. For the purposes\n      of this License, Derivative Works shall not include works that remain\n      separable from, or merely link (or bind by name) to the interfaces of,\n      the Work and Derivative Works thereof.\n\n      \"Contribution\" shall mean any work of authorship, including\n      the original version of the Work and any modifications or additions\n      to that Work or Derivative Works thereof, that is intentionally\n      submitted to Licensor for inclusion in the Work by the copyright owner\n      or by an individual or Legal Entity authorized to submit on behalf of\n      the copyright owner. For the purposes of this definition, \"submitted\"\n      means any form of electronic, verbal, or written communication sent\n      to the Licensor or its representatives, including but not limited to\n      communication on electronic mailing lists, source code control systems,\n      and issue tracking systems that are managed by, or on behalf of, the\n      Licensor for the purpose of discussing and improving the Work, but\n      excluding communication that is conspicuously marked or otherwise\n      designated in writing by the copyright owner as \"Not a Contribution.\"\n\n      \"Contributor\" shall mean Licensor and any individual or Legal Entity\n      on behalf of whom a Contribution has been received by Licensor and\n      subsequently incorporated within the Work.\n\n   2. Grant of Copyright License. Subject to the terms and conditions of\n      this License, each Contributor hereby grants to You a perpetual,\n      worldwide, non-exclusive, no-charge, royalty-free, irrevocable\n      copyright license to reproduce, prepare Derivative Works of,\n      publicly display, publicly perform, sublicense, and distribute the\n      Work and such Derivative Works in Source or Object form.\n\n   3. Grant of Patent License. Subject to the terms and conditions of\n      this License, each Contributor hereby grants to You a perpetual,\n      worldwide, non-exclusive, no-charge, royalty-free, irrevocable\n      (except as stated in this section) patent license to make, have made,\n      use, offer to sell, sell, import, and otherwise transfer the Work,\n      where such license applies only to those patent claims licensable\n      by such Contributor that are necessarily infringed by their\n      Contribution(s) alone or by combination of their Contribution(s)\n      with the Work to which such Contribution(s) was submitted. If You\n      institute patent litigation against any entity (including a\n      cross-claim or counterclaim in a lawsuit) alleging that the Work\n      or a Contribution incorporated within the Work constitutes direct\n      or contributory patent infringement, then any patent licenses\n      granted to You under this License for that Work shall terminate\n      as of the date such litigation is filed.\n\n   4. Redistribution. You may reproduce and distribute copies of the\n      Work or Derivative Works thereof in any medium, with or without\n      modifications, and in Source or Object form, provided that You\n      meet the following conditions:\n\n      (a) You must give any other recipients of the Work or\n          Derivative Works a copy of this License; and\n\n      (b) You must cause any modified files to carry prominent notices\n          stating that You changed the files; and\n\n      (c) You must retain, in the Source form of any Derivative Works\n          that You distribute, all copyright, patent, trademark, and\n          attribution notices from the Source form of the Work,\n          excluding those notices that do not pertain to any part of\n          the Derivative Works; and\n\n      (d) If the Work includes a \"NOTICE\" text file as part of its\n          distribution, then any Derivative Works that You distribute must\n          include a readable copy of the attribution notices contained\n          within such NOTICE file, excluding those notices that do not\n          pertain to any part of the Derivative Works, in at least one\n          of the following places: within a NOTICE text file distributed\n          as part of the Derivative Works; within the Source form or\n          documentation, if provided along with the Derivative Works; or,\n          within a display generated by the Derivative Works, if and\n          wherever such third-party notices normally appear. The contents\n          of the NOTICE file are for informational purposes only and\n          do not modify the License. You may add Your own attribution\n          notices within Derivative Works that You distribute, alongside\n          or as an addendum to the NOTICE text from the Work, provided\n          that such additional attribution notices cannot be construed\n          as modifying the License.\n\n      You may add Your own copyright statement to Your modifications and\n      may provide additional or different license terms and conditions\n      for use, reproduction, or distribution of Your modifications, or\n      for any such Derivative Works as a whole, provided Your use,\n      reproduction, and distribution of the Work otherwise complies with\n      the conditions stated in this License.\n\n   5. Submission of Contributions. Unless You explicitly state otherwise,\n      any Contribution intentionally submitted for inclusion in the Work\n      by You to the Licensor shall be under the terms and conditions of\n      this License, without any additional terms or conditions.\n      Notwithstanding the above, nothing herein shall supersede or modify\n      the terms of any separate license agreement you may have executed\n      with Licensor regarding such Contributions.\n\n   6. Trademarks. This License does not grant permission to use the trade\n      names, trademarks, service marks, or product names of the Licensor,\n      except as required for reasonable and customary use in describing the\n      origin of the Work and reproducing the content of the NOTICE file.\n\n   7. Disclaimer of Warranty. Unless required by applicable law or\n      agreed to in writing, Licensor provides the Work (and each\n      Contributor provides its Contributions) on an \"AS IS\" BASIS,\n      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or\n      implied, including, without limitation, any warranties or conditions\n      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A\n      PARTICULAR PURPOSE. You are solely responsible for determining the\n      appropriateness of using or redistributing the Work and assume any\n      risks associated with Your exercise of permissions under this License.\n\n   8. Limitation of Liability. In no event and under no legal theory,\n      whether in tort (including negligence), contract, or otherwise,\n      unless required by applicable law (such as deliberate and grossly\n      negligent acts) or agreed to in writing, shall any Contributor be\n      liable to You for damages, including any direct, indirect, special,\n      incidental, or consequential damages of any character arising as a\n      result of this License or out of the use or inability to use the\n      Work (including but not limited to damages for loss of goodwill,\n      work stoppage, computer failure or malfunction, or any and all\n      other commercial damages or losses), even if such Contributor\n      has been advised of the possibility of such damages.\n\n   9. Accepting Warranty or Additional Liability. While redistributing\n      the Work or Derivative Works thereof, You may choose to offer,\n      and charge a fee for, acceptance of support, warranty, indemnity,\n      or other liability obligations and/or rights consistent with this\n      License. However, in accepting such obligations, You may act only\n      on Your own behalf and on Your sole responsibility, not on behalf\n      of any other Contributor, and only if You agree to indemnify,\n      defend, and hold each Contributor harmless for any liability\n      incurred by, or claims asserted against, such Contributor by reason\n      of your accepting any such warranty or additional liability.\n\n   END OF TERMS AND CONDITIONS\n\n   APPENDIX: How to apply the Apache License to your work.\n\n      To apply the Apache License to your work, attach the following\n      boilerplate notice, with the fields enclosed by brackets \"[]\"\n      replaced with your own identifying information. (Don't include\n      the brackets!)  The text should be enclosed in the appropriate\n      comment syntax for the file format. We also recommend that a\n      file or class name and description of purpose be included on the\n      same \"printed page\" as the copyright notice for easier\n      identification within third-party archives.\n\n   Copyright [yyyy] [name of copyright owner]\n\n   Licensed under the Apache License, Version 2.0 (the \"License\");\n   you may not use this file except in compliance with the License.\n   You may obtain a copy of the License at\n\n       http://www.apache.org/licenses/LICENSE-2.0\n\n   Unless required by applicable law or agreed to in writing, software\n   distributed under the License is distributed on an \"AS IS\" BASIS,\n   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n   See the License for the specific language governing permissions and\n   limitations under the License.\n\n--------------------------------------------------------------------------------\n\nCopyright 2009 The Go Authors.\n\nRedistribution and use in source and binary forms, with or without\nmodification, are permitted provided that the following conditions are\nmet:\n\n   * Redistributions of source code must retain the above copyright\nnotice, this list of conditions and the following disclaimer.\n   * Redistributions in binary form must reproduce the above\ncopyright notice, this list of conditions and the following disclaimer\nin the documentation and/or other materials provided with the\ndistribution.\n   * Neither the name of Google LLC nor the names of its\ncontributors may be used to endorse or promote products derived from\nthis software without specific prior written permission.\n\nTHIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS\n\"AS IS\" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT\nLIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR\nA PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT\nOWNER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,\nSPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT\nLIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,\nDATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY\nTHEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT\n(INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE\nOF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.",
-    "ecosystem": "go",
-    "stale": true
+    "ecosystem": "go"
   },
   {
     "name": "github.com/open-telemetry/opentelemetry-go",
@@ -491,8 +717,7 @@
     "license": "Apache-2.0",
     "repository": "https://github.com/open-telemetry/opentelemetry-go",
     "license_text": "                                 Apache License\n                           Version 2.0, January 2004\n                        http://www.apache.org/licenses/\n\n   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION\n\n   1. Definitions.\n\n      \"License\" shall mean the terms and conditions for use, reproduction,\n      and distribution as defined by Sections 1 through 9 of this document.\n\n      \"Licensor\" shall mean the copyright owner or entity authorized by\n      the copyright owner that is granting the License.\n\n      \"Legal Entity\" shall mean the union of the acting entity and all\n      other entities that control, are controlled by, or are under common\n      control with that entity. For the purposes of this definition,\n      \"control\" means (i) the power, direct or indirect, to cause the\n      direction or management of such entity, whether by contract or\n      otherwise, or (ii) ownership of fifty percent (50%) or more of the\n      outstanding shares, or (iii) beneficial ownership of such entity.\n\n      \"You\" (or \"Your\") shall mean an individual or Legal Entity\n      exercising permissions granted by this License.\n\n      \"Source\" form shall mean the preferred form for making modifications,\n      including but not limited to software source code, documentation\n      source, and configuration files.\n\n      \"Object\" form shall mean any form resulting from mechanical\n      transformation or translation of a Source form, including but\n      not limited to compiled object code, generated documentation,\n      and conversions to other media types.\n\n      \"Work\" shall mean the work of authorship, whether in Source or\n      Object form, made available under the License, as indicated by a\n      copyright notice that is included in or attached to the work\n      (an example is provided in the Appendix below).\n\n      \"Derivative Works\" shall mean any work, whether in Source or Object\n      form, that is based on (or derived from) the Work and for which the\n      editorial revisions, annotations, elaborations, or other modifications\n      represent, as a whole, an original work of authorship. For the purposes\n      of this License, Derivative Works shall not include works that remain\n      separable from, or merely link (or bind by name) to the interfaces of,\n      the Work and Derivative Works thereof.\n\n      \"Contribution\" shall mean any work of authorship, including\n      the original version of the Work and any modifications or additions\n      to that Work or Derivative Works thereof, that is intentionally\n      submitted to Licensor for inclusion in the Work by the copyright owner\n      or by an individual or Legal Entity authorized to submit on behalf of\n      the copyright owner. For the purposes of this definition, \"submitted\"\n      means any form of electronic, verbal, or written communication sent\n      to the Licensor or its representatives, including but not limited to\n      communication on electronic mailing lists, source code control systems,\n      and issue tracking systems that are managed by, or on behalf of, the\n      Licensor for the purpose of discussing and improving the Work, but\n      excluding communication that is conspicuously marked or otherwise\n      designated in writing by the copyright owner as \"Not a Contribution.\"\n\n      \"Contributor\" shall mean Licensor and any individual or Legal Entity\n      on behalf of whom a Contribution has been received by Licensor and\n      subsequently incorporated within the Work.\n\n   2. Grant of Copyright License. Subject to the terms and conditions of\n      this License, each Contributor hereby grants to You a perpetual,\n      worldwide, non-exclusive, no-charge, royalty-free, irrevocable\n      copyright license to reproduce, prepare Derivative Works of,\n      publicly display, publicly perform, sublicense, and distribute the\n      Work and such Derivative Works in Source or Object form.\n\n   3. Grant of Patent License. Subject to the terms and conditions of\n      this License, each Contributor hereby grants to You a perpetual,\n      worldwide, non-exclusive, no-charge, royalty-free, irrevocable\n      (except as stated in this section) patent license to make, have made,\n      use, offer to sell, sell, import, and otherwise transfer the Work,\n      where such license applies only to those patent claims licensable\n      by such Contributor that are necessarily infringed by their\n      Contribution(s) alone or by combination of their Contribution(s)\n      with the Work to which such Contribution(s) was submitted. If You\n      institute patent litigation against any entity (including a\n      cross-claim or counterclaim in a lawsuit) alleging that the Work\n      or a Contribution incorporated within the Work constitutes direct\n      or contributory patent infringement, then any patent licenses\n      granted to You under this License for that Work shall terminate\n      as of the date such litigation is filed.\n\n   4. Redistribution. You may reproduce and distribute copies of the\n      Work or Derivative Works thereof in any medium, with or without\n      modifications, and in Source or Object form, provided that You\n      meet the following conditions:\n\n      (a) You must give any other recipients of the Work or\n          Derivative Works a copy of this License; and\n\n      (b) You must cause any modified files to carry prominent notices\n          stating that You changed the files; and\n\n      (c) You must retain, in the Source form of any Derivative Works\n          that You distribute, all copyright, patent, trademark, and\n          attribution notices from the Source form of the Work,\n          excluding those notices that do not pertain to any part of\n          the Derivative Works; and\n\n      (d) If the Work includes a \"NOTICE\" text file as part of its\n          distribution, then any Derivative Works that You distribute must\n          include a readable copy of the attribution notices contained\n          within such NOTICE file, excluding those notices that do not\n          pertain to any part of the Derivative Works, in at least one\n          of the following places: within a NOTICE text file distributed\n          as part of the Derivative Works; within the Source form or\n          documentation, if provided along with the Derivative Works; or,\n          within a display generated by the Derivative Works, if and\n          wherever such third-party notices normally appear. The contents\n          of the NOTICE file are for informational purposes only and\n          do not modify the License. You may add Your own attribution\n          notices within Derivative Works that You distribute, alongside\n          or as an addendum to the NOTICE text from the Work, provided\n          that such additional attribution notices cannot be construed\n          as modifying the License.\n\n      You may add Your own copyright statement to Your modifications and\n      may provide additional or different license terms and conditions\n      for use, reproduction, or distribution of Your modifications, or\n      for any such Derivative Works as a whole, provided Your use,\n      reproduction, and distribution of the Work otherwise complies with\n      the conditions stated in this License.\n\n   5. Submission of Contributions. Unless You explicitly state otherwise,\n      any Contribution intentionally submitted for inclusion in the Work\n      by You to the Licensor shall be under the terms and conditions of\n      this License, without any additional terms or conditions.\n      Notwithstanding the above, nothing herein shall supersede or modify\n      the terms of any separate license agreement you may have executed\n      with Licensor regarding such Contributions.\n\n   6. Trademarks. This License does not grant permission to use the trade\n      names, trademarks, service marks, or product names of the Licensor,\n      except as required for reasonable and customary use in describing the\n      origin of the Work and reproducing the content of the NOTICE file.\n\n   7. Disclaimer of Warranty. Unless required by applicable law or\n      agreed to in writing, Licensor provides the Work (and each\n      Contributor provides its Contributions) on an \"AS IS\" BASIS,\n      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or\n      implied, including, without limitation, any warranties or conditions\n      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A\n      PARTICULAR PURPOSE. You are solely responsible for determining the\n      appropriateness of using or redistributing the Work and assume any\n      risks associated with Your exercise of permissions under this License.\n\n   8. Limitation of Liability. In no event and under no legal theory,\n      whether in tort (including negligence), contract, or otherwise,\n      unless required by applicable law (such as deliberate and grossly\n      negligent acts) or agreed to in writing, shall any Contributor be\n      liable to You for damages, including any direct, indirect, special,\n      incidental, or consequential damages of any character arising as a\n      result of this License or out of the use or inability to use the\n      Work (including but not limited to damages for loss of goodwill,\n      work stoppage, computer failure or malfunction, or any and all\n      other commercial damages or losses), even if such Contributor\n      has been advised of the possibility of such damages.\n\n   9. Accepting Warranty or Additional Liability. While redistributing\n      the Work or Derivative Works thereof, You may choose to offer,\n      and charge a fee for, acceptance of support, warranty, indemnity,\n      or other liability obligations and/or rights consistent with this\n      License. However, in accepting such obligations, You may act only\n      on Your own behalf and on Your sole responsibility, not on behalf\n      of any other Contributor, and only if You agree to indemnify,\n      defend, and hold each Contributor harmless for any liability\n      incurred by, or claims asserted against, such Contributor by reason\n      of your accepting any such warranty or additional liability.\n\n   END OF TERMS AND CONDITIONS\n\n   APPENDIX: How to apply the Apache License to your work.\n\n      To apply the Apache License to your work, attach the following\n      boilerplate notice, with the fields enclosed by brackets \"[]\"\n      replaced with your own identifying information. (Don't include\n      the brackets!)  The text should be enclosed in the appropriate\n      comment syntax for the file format. We also recommend that a\n      file or class name and description of purpose be included on the\n      same \"printed page\" as the copyright notice for easier\n      identification within third-party archives.\n\n   Copyright [yyyy] [name of copyright owner]\n\n   Licensed under the Apache License, Version 2.0 (the \"License\");\n   you may not use this file except in compliance with the License.\n   You may obtain a copy of the License at\n\n       http://www.apache.org/licenses/LICENSE-2.0\n\n   Unless required by applicable law or agreed to in writing, software\n   distributed under the License is distributed on an \"AS IS\" BASIS,\n   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n   See the License for the specific language governing permissions and\n   limitations under the License.\n\n--------------------------------------------------------------------------------\n\nCopyright 2009 The Go Authors.\n\nRedistribution and use in source and binary forms, with or without\nmodification, are permitted provided that the following conditions are\nmet:\n\n   * Redistributions of source code must retain the above copyright\nnotice, this list of conditions and the following disclaimer.\n   * Redistributions in binary form must reproduce the above\ncopyright notice, this list of conditions and the following disclaimer\nin the documentation and/or other materials provided with the\ndistribution.\n   * Neither the name of Google LLC nor the names of its\ncontributors may be used to endorse or promote products derived from\nthis software without specific prior written permission.\n\nTHIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS\n\"AS IS\" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT\nLIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR\nA PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT\nOWNER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,\nSPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT\nLIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,\nDATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY\nTHEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT\n(INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE\nOF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.",
-    "ecosystem": "go",
-    "stale": true
+    "ecosystem": "go"
   },
   {
     "name": "github.com/open-telemetry/opentelemetry-go",
@@ -500,8 +725,7 @@
     "license": "Apache-2.0",
     "repository": "https://github.com/open-telemetry/opentelemetry-go",
     "license_text": "                                 Apache License\n                           Version 2.0, January 2004\n                        http://www.apache.org/licenses/\n\n   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION\n\n   1. Definitions.\n\n      \"License\" shall mean the terms and conditions for use, reproduction,\n      and distribution as defined by Sections 1 through 9 of this document.\n\n      \"Licensor\" shall mean the copyright owner or entity authorized by\n      the copyright owner that is granting the License.\n\n      \"Legal Entity\" shall mean the union of the acting entity and all\n      other entities that control, are controlled by, or are under common\n      control with that entity. For the purposes of this definition,\n      \"control\" means (i) the power, direct or indirect, to cause the\n      direction or management of such entity, whether by contract or\n      otherwise, or (ii) ownership of fifty percent (50%) or more of the\n      outstanding shares, or (iii) beneficial ownership of such entity.\n\n      \"You\" (or \"Your\") shall mean an individual or Legal Entity\n      exercising permissions granted by this License.\n\n      \"Source\" form shall mean the preferred form for making modifications,\n      including but not limited to software source code, documentation\n      source, and configuration files.\n\n      \"Object\" form shall mean any form resulting from mechanical\n      transformation or translation of a Source form, including but\n      not limited to compiled object code, generated documentation,\n      and conversions to other media types.\n\n      \"Work\" shall mean the work of authorship, whether in Source or\n      Object form, made available under the License, as indicated by a\n      copyright notice that is included in or attached to the work\n      (an example is provided in the Appendix below).\n\n      \"Derivative Works\" shall mean any work, whether in Source or Object\n      form, that is based on (or derived from) the Work and for which the\n      editorial revisions, annotations, elaborations, or other modifications\n      represent, as a whole, an original work of authorship. For the purposes\n      of this License, Derivative Works shall not include works that remain\n      separable from, or merely link (or bind by name) to the interfaces of,\n      the Work and Derivative Works thereof.\n\n      \"Contribution\" shall mean any work of authorship, including\n      the original version of the Work and any modifications or additions\n      to that Work or Derivative Works thereof, that is intentionally\n      submitted to Licensor for inclusion in the Work by the copyright owner\n      or by an individual or Legal Entity authorized to submit on behalf of\n      the copyright owner. For the purposes of this definition, \"submitted\"\n      means any form of electronic, verbal, or written communication sent\n      to the Licensor or its representatives, including but not limited to\n      communication on electronic mailing lists, source code control systems,\n      and issue tracking systems that are managed by, or on behalf of, the\n      Licensor for the purpose of discussing and improving the Work, but\n      excluding communication that is conspicuously marked or otherwise\n      designated in writing by the copyright owner as \"Not a Contribution.\"\n\n      \"Contributor\" shall mean Licensor and any individual or Legal Entity\n      on behalf of whom a Contribution has been received by Licensor and\n      subsequently incorporated within the Work.\n\n   2. Grant of Copyright License. Subject to the terms and conditions of\n      this License, each Contributor hereby grants to You a perpetual,\n      worldwide, non-exclusive, no-charge, royalty-free, irrevocable\n      copyright license to reproduce, prepare Derivative Works of,\n      publicly display, publicly perform, sublicense, and distribute the\n      Work and such Derivative Works in Source or Object form.\n\n   3. Grant of Patent License. Subject to the terms and conditions of\n      this License, each Contributor hereby grants to You a perpetual,\n      worldwide, non-exclusive, no-charge, royalty-free, irrevocable\n      (except as stated in this section) patent license to make, have made,\n      use, offer to sell, sell, import, and otherwise transfer the Work,\n      where such license applies only to those patent claims licensable\n      by such Contributor that are necessarily infringed by their\n      Contribution(s) alone or by combination of their Contribution(s)\n      with the Work to which such Contribution(s) was submitted. If You\n      institute patent litigation against any entity (including a\n      cross-claim or counterclaim in a lawsuit) alleging that the Work\n      or a Contribution incorporated within the Work constitutes direct\n      or contributory patent infringement, then any patent licenses\n      granted to You under this License for that Work shall terminate\n      as of the date such litigation is filed.\n\n   4. Redistribution. You may reproduce and distribute copies of the\n      Work or Derivative Works thereof in any medium, with or without\n      modifications, and in Source or Object form, provided that You\n      meet the following conditions:\n\n      (a) You must give any other recipients of the Work or\n          Derivative Works a copy of this License; and\n\n      (b) You must cause any modified files to carry prominent notices\n          stating that You changed the files; and\n\n      (c) You must retain, in the Source form of any Derivative Works\n          that You distribute, all copyright, patent, trademark, and\n          attribution notices from the Source form of the Work,\n          excluding those notices that do not pertain to any part of\n          the Derivative Works; and\n\n      (d) If the Work includes a \"NOTICE\" text file as part of its\n          distribution, then any Derivative Works that You distribute must\n          include a readable copy of the attribution notices contained\n          within such NOTICE file, excluding those notices that do not\n          pertain to any part of the Derivative Works, in at least one\n          of the following places: within a NOTICE text file distributed\n          as part of the Derivative Works; within the Source form or\n          documentation, if provided along with the Derivative Works; or,\n          within a display generated by the Derivative Works, if and\n          wherever such third-party notices normally appear. The contents\n          of the NOTICE file are for informational purposes only and\n          do not modify the License. You may add Your own attribution\n          notices within Derivative Works that You distribute, alongside\n          or as an addendum to the NOTICE text from the Work, provided\n          that such additional attribution notices cannot be construed\n          as modifying the License.\n\n      You may add Your own copyright statement to Your modifications and\n      may provide additional or different license terms and conditions\n      for use, reproduction, or distribution of Your modifications, or\n      for any such Derivative Works as a whole, provided Your use,\n      reproduction, and distribution of the Work otherwise complies with\n      the conditions stated in this License.\n\n   5. Submission of Contributions. Unless You explicitly state otherwise,\n      any Contribution intentionally submitted for inclusion in the Work\n      by You to the Licensor shall be under the terms and conditions of\n      this License, without any additional terms or conditions.\n      Notwithstanding the above, nothing herein shall supersede or modify\n      the terms of any separate license agreement you may have executed\n      with Licensor regarding such Contributions.\n\n   6. Trademarks. This License does not grant permission to use the trade\n      names, trademarks, service marks, or product names of the Licensor,\n      except as required for reasonable and customary use in describing the\n      origin of the Work and reproducing the content of the NOTICE file.\n\n   7. Disclaimer of Warranty. Unless required by applicable law or\n      agreed to in writing, Licensor provides the Work (and each\n      Contributor provides its Contributions) on an \"AS IS\" BASIS,\n      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or\n      implied, including, without limitation, any warranties or conditions\n      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A\n      PARTICULAR PURPOSE. You are solely responsible for determining the\n      appropriateness of using or redistributing the Work and assume any\n      risks associated with Your exercise of permissions under this License.\n\n   8. Limitation of Liability. In no event and under no legal theory,\n      whether in tort (including negligence), contract, or otherwise,\n      unless required by applicable law (such as deliberate and grossly\n      negligent acts) or agreed to in writing, shall any Contributor be\n      liable to You for damages, including any direct, indirect, special,\n      incidental, or consequential damages of any character arising as a\n      result of this License or out of the use or inability to use the\n      Work (including but not limited to damages for loss of goodwill,\n      work stoppage, computer failure or malfunction, or any and all\n      other commercial damages or losses), even if such Contributor\n      has been advised of the possibility of such damages.\n\n   9. Accepting Warranty or Additional Liability. While redistributing\n      the Work or Derivative Works thereof, You may choose to offer,\n      and charge a fee for, acceptance of support, warranty, indemnity,\n      or other liability obligations and/or rights consistent with this\n      License. However, in accepting such obligations, You may act only\n      on Your own behalf and on Your sole responsibility, not on behalf\n      of any other Contributor, and only if You agree to indemnify,\n      defend, and hold each Contributor harmless for any liability\n      incurred by, or claims asserted against, such Contributor by reason\n      of your accepting any such warranty or additional liability.\n\n   END OF TERMS AND CONDITIONS\n\n   APPENDIX: How to apply the Apache License to your work.\n\n      To apply the Apache License to your work, attach the following\n      boilerplate notice, with the fields enclosed by brackets \"[]\"\n      replaced with your own identifying information. (Don't include\n      the brackets!)  The text should be enclosed in the appropriate\n      comment syntax for the file format. We also recommend that a\n      file or class name and description of purpose be included on the\n      same \"printed page\" as the copyright notice for easier\n      identification within third-party archives.\n\n   Copyright [yyyy] [name of copyright owner]\n\n   Licensed under the Apache License, Version 2.0 (the \"License\");\n   you may not use this file except in compliance with the License.\n   You may obtain a copy of the License at\n\n       http://www.apache.org/licenses/LICENSE-2.0\n\n   Unless required by applicable law or agreed to in writing, software\n   distributed under the License is distributed on an \"AS IS\" BASIS,\n   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n   See the License for the specific language governing permissions and\n   limitations under the License.\n\n--------------------------------------------------------------------------------\n\nCopyright 2009 The Go Authors.\n\nRedistribution and use in source and binary forms, with or without\nmodification, are permitted provided that the following conditions are\nmet:\n\n   * Redistributions of source code must retain the above copyright\nnotice, this list of conditions and the following disclaimer.\n   * Redistributions in binary form must reproduce the above\ncopyright notice, this list of conditions and the following disclaimer\nin the documentation and/or other materials provided with the\ndistribution.\n   * Neither the name of Google LLC nor the names of its\ncontributors may be used to endorse or promote products derived from\nthis software without specific prior written permission.\n\nTHIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS\n\"AS IS\" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT\nLIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR\nA PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT\nOWNER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,\nSPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT\nLIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,\nDATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY\nTHEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT\n(INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE\nOF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.",
-    "ecosystem": "go",
-    "stale": true
+    "ecosystem": "go"
   },
   {
     "name": "github.com/open-telemetry/opentelemetry-go",
@@ -509,8 +733,7 @@
     "license": "Apache-2.0",
     "repository": "https://github.com/open-telemetry/opentelemetry-go",
     "license_text": "                                 Apache License\n                           Version 2.0, January 2004\n                        http://www.apache.org/licenses/\n\n   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION\n\n   1. Definitions.\n\n      \"License\" shall mean the terms and conditions for use, reproduction,\n      and distribution as defined by Sections 1 through 9 of this document.\n\n      \"Licensor\" shall mean the copyright owner or entity authorized by\n      the copyright owner that is granting the License.\n\n      \"Legal Entity\" shall mean the union of the acting entity and all\n      other entities that control, are controlled by, or are under common\n      control with that entity. For the purposes of this definition,\n      \"control\" means (i) the power, direct or indirect, to cause the\n      direction or management of such entity, whether by contract or\n      otherwise, or (ii) ownership of fifty percent (50%) or more of the\n      outstanding shares, or (iii) beneficial ownership of such entity.\n\n      \"You\" (or \"Your\") shall mean an individual or Legal Entity\n      exercising permissions granted by this License.\n\n      \"Source\" form shall mean the preferred form for making modifications,\n      including but not limited to software source code, documentation\n      source, and configuration files.\n\n      \"Object\" form shall mean any form resulting from mechanical\n      transformation or translation of a Source form, including but\n      not limited to compiled object code, generated documentation,\n      and conversions to other media types.\n\n      \"Work\" shall mean the work of authorship, whether in Source or\n      Object form, made available under the License, as indicated by a\n      copyright notice that is included in or attached to the work\n      (an example is provided in the Appendix below).\n\n      \"Derivative Works\" shall mean any work, whether in Source or Object\n      form, that is based on (or derived from) the Work and for which the\n      editorial revisions, annotations, elaborations, or other modifications\n      represent, as a whole, an original work of authorship. For the purposes\n      of this License, Derivative Works shall not include works that remain\n      separable from, or merely link (or bind by name) to the interfaces of,\n      the Work and Derivative Works thereof.\n\n      \"Contribution\" shall mean any work of authorship, including\n      the original version of the Work and any modifications or additions\n      to that Work or Derivative Works thereof, that is intentionally\n      submitted to Licensor for inclusion in the Work by the copyright owner\n      or by an individual or Legal Entity authorized to submit on behalf of\n      the copyright owner. For the purposes of this definition, \"submitted\"\n      means any form of electronic, verbal, or written communication sent\n      to the Licensor or its representatives, including but not limited to\n      communication on electronic mailing lists, source code control systems,\n      and issue tracking systems that are managed by, or on behalf of, the\n      Licensor for the purpose of discussing and improving the Work, but\n      excluding communication that is conspicuously marked or otherwise\n      designated in writing by the copyright owner as \"Not a Contribution.\"\n\n      \"Contributor\" shall mean Licensor and any individual or Legal Entity\n      on behalf of whom a Contribution has been received by Licensor and\n      subsequently incorporated within the Work.\n\n   2. Grant of Copyright License. Subject to the terms and conditions of\n      this License, each Contributor hereby grants to You a perpetual,\n      worldwide, non-exclusive, no-charge, royalty-free, irrevocable\n      copyright license to reproduce, prepare Derivative Works of,\n      publicly display, publicly perform, sublicense, and distribute the\n      Work and such Derivative Works in Source or Object form.\n\n   3. Grant of Patent License. Subject to the terms and conditions of\n      this License, each Contributor hereby grants to You a perpetual,\n      worldwide, non-exclusive, no-charge, royalty-free, irrevocable\n      (except as stated in this section) patent license to make, have made,\n      use, offer to sell, sell, import, and otherwise transfer the Work,\n      where such license applies only to those patent claims licensable\n      by such Contributor that are necessarily infringed by their\n      Contribution(s) alone or by combination of their Contribution(s)\n      with the Work to which such Contribution(s) was submitted. If You\n      institute patent litigation against any entity (including a\n      cross-claim or counterclaim in a lawsuit) alleging that the Work\n      or a Contribution incorporated within the Work constitutes direct\n      or contributory patent infringement, then any patent licenses\n      granted to You under this License for that Work shall terminate\n      as of the date such litigation is filed.\n\n   4. Redistribution. You may reproduce and distribute copies of the\n      Work or Derivative Works thereof in any medium, with or without\n      modifications, and in Source or Object form, provided that You\n      meet the following conditions:\n\n      (a) You must give any other recipients of the Work or\n          Derivative Works a copy of this License; and\n\n      (b) You must cause any modified files to carry prominent notices\n          stating that You changed the files; and\n\n      (c) You must retain, in the Source form of any Derivative Works\n          that You distribute, all copyright, patent, trademark, and\n          attribution notices from the Source form of the Work,\n          excluding those notices that do not pertain to any part of\n          the Derivative Works; and\n\n      (d) If the Work includes a \"NOTICE\" text file as part of its\n          distribution, then any Derivative Works that You distribute must\n          include a readable copy of the attribution notices contained\n          within such NOTICE file, excluding those notices that do not\n          pertain to any part of the Derivative Works, in at least one\n          of the following places: within a NOTICE text file distributed\n          as part of the Derivative Works; within the Source form or\n          documentation, if provided along with the Derivative Works; or,\n          within a display generated by the Derivative Works, if and\n          wherever such third-party notices normally appear. The contents\n          of the NOTICE file are for informational purposes only and\n          do not modify the License. You may add Your own attribution\n          notices within Derivative Works that You distribute, alongside\n          or as an addendum to the NOTICE text from the Work, provided\n          that such additional attribution notices cannot be construed\n          as modifying the License.\n\n      You may add Your own copyright statement to Your modifications and\n      may provide additional or different license terms and conditions\n      for use, reproduction, or distribution of Your modifications, or\n      for any such Derivative Works as a whole, provided Your use,\n      reproduction, and distribution of the Work otherwise complies with\n      the conditions stated in this License.\n\n   5. Submission of Contributions. Unless You explicitly state otherwise,\n      any Contribution intentionally submitted for inclusion in the Work\n      by You to the Licensor shall be under the terms and conditions of\n      this License, without any additional terms or conditions.\n      Notwithstanding the above, nothing herein shall supersede or modify\n      the terms of any separate license agreement you may have executed\n      with Licensor regarding such Contributions.\n\n   6. Trademarks. This License does not grant permission to use the trade\n      names, trademarks, service marks, or product names of the Licensor,\n      except as required for reasonable and customary use in describing the\n      origin of the Work and reproducing the content of the NOTICE file.\n\n   7. Disclaimer of Warranty. Unless required by applicable law or\n      agreed to in writing, Licensor provides the Work (and each\n      Contributor provides its Contributions) on an \"AS IS\" BASIS,\n      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or\n      implied, including, without limitation, any warranties or conditions\n      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A\n      PARTICULAR PURPOSE. You are solely responsible for determining the\n      appropriateness of using or redistributing the Work and assume any\n      risks associated with Your exercise of permissions under this License.\n\n   8. Limitation of Liability. In no event and under no legal theory,\n      whether in tort (including negligence), contract, or otherwise,\n      unless required by applicable law (such as deliberate and grossly\n      negligent acts) or agreed to in writing, shall any Contributor be\n      liable to You for damages, including any direct, indirect, special,\n      incidental, or consequential damages of any character arising as a\n      result of this License or out of the use or inability to use the\n      Work (including but not limited to damages for loss of goodwill,\n      work stoppage, computer failure or malfunction, or any and all\n      other commercial damages or losses), even if such Contributor\n      has been advised of the possibility of such damages.\n\n   9. Accepting Warranty or Additional Liability. While redistributing\n      the Work or Derivative Works thereof, You may choose to offer,\n      and charge a fee for, acceptance of support, warranty, indemnity,\n      or other liability obligations and/or rights consistent with this\n      License. However, in accepting such obligations, You may act only\n      on Your own behalf and on Your sole responsibility, not on behalf\n      of any other Contributor, and only if You agree to indemnify,\n      defend, and hold each Contributor harmless for any liability\n      incurred by, or claims asserted against, such Contributor by reason\n      of your accepting any such warranty or additional liability.\n\n   END OF TERMS AND CONDITIONS\n\n   APPENDIX: How to apply the Apache License to your work.\n\n      To apply the Apache License to your work, attach the following\n      boilerplate notice, with the fields enclosed by brackets \"[]\"\n      replaced with your own identifying information. (Don't include\n      the brackets!)  The text should be enclosed in the appropriate\n      comment syntax for the file format. We also recommend that a\n      file or class name and description of purpose be included on the\n      same \"printed page\" as the copyright notice for easier\n      identification within third-party archives.\n\n   Copyright [yyyy] [name of copyright owner]\n\n   Licensed under the Apache License, Version 2.0 (the \"License\");\n   you may not use this file except in compliance with the License.\n   You may obtain a copy of the License at\n\n       http://www.apache.org/licenses/LICENSE-2.0\n\n   Unless required by applicable law or agreed to in writing, software\n   distributed under the License is distributed on an \"AS IS\" BASIS,\n   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n   See the License for the specific language governing permissions and\n   limitations under the License.\n\n--------------------------------------------------------------------------------\n\nCopyright 2009 The Go Authors.\n\nRedistribution and use in source and binary forms, with or without\nmodification, are permitted provided that the following conditions are\nmet:\n\n   * Redistributions of source code must retain the above copyright\nnotice, this list of conditions and the following disclaimer.\n   * Redistributions in binary form must reproduce the above\ncopyright notice, this list of conditions and the following disclaimer\nin the documentation and/or other materials provided with the\ndistribution.\n   * Neither the name of Google LLC nor the names of its\ncontributors may be used to endorse or promote products derived from\nthis software without specific prior written permission.\n\nTHIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS\n\"AS IS\" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT\nLIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR\nA PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT\nOWNER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,\nSPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT\nLIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,\nDATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY\nTHEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT\n(INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE\nOF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.",
-    "ecosystem": "go",
-    "stale": true
+    "ecosystem": "go"
   },
   {
     "name": "github.com/open-telemetry/opentelemetry-go-contrib",
@@ -518,8 +741,7 @@
     "license": "Apache-2.0",
     "repository": "https://github.com/open-telemetry/opentelemetry-go-contrib",
     "license_text": "                                 Apache License\n                           Version 2.0, January 2004\n                        http://www.apache.org/licenses/\n\n   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION\n\n   1. Definitions.\n\n      \"License\" shall mean the terms and conditions for use, reproduction,\n      and distribution as defined by Sections 1 through 9 of this document.\n\n      \"Licensor\" shall mean the copyright owner or entity authorized by\n      the copyright owner that is granting the License.\n\n      \"Legal Entity\" shall mean the union of the acting entity and all\n      other entities that control, are controlled by, or are under common\n      control with that entity. For the purposes of this definition,\n      \"control\" means (i) the power, direct or indirect, to cause the\n      direction or management of such entity, whether by contract or\n      otherwise, or (ii) ownership of fifty percent (50%) or more of the\n      outstanding shares, or (iii) beneficial ownership of such entity.\n\n      \"You\" (or \"Your\") shall mean an individual or Legal Entity\n      exercising permissions granted by this License.\n\n      \"Source\" form shall mean the preferred form for making modifications,\n      including but not limited to software source code, documentation\n      source, and configuration files.\n\n      \"Object\" form shall mean any form resulting from mechanical\n      transformation or translation of a Source form, including but\n      not limited to compiled object code, generated documentation,\n      and conversions to other media types.\n\n      \"Work\" shall mean the work of authorship, whether in Source or\n      Object form, made available under the License, as indicated by a\n      copyright notice that is included in or attached to the work\n      (an example is provided in the Appendix below).\n\n      \"Derivative Works\" shall mean any work, whether in Source or Object\n      form, that is based on (or derived from) the Work and for which the\n      editorial revisions, annotations, elaborations, or other modifications\n      represent, as a whole, an original work of authorship. For the purposes\n      of this License, Derivative Works shall not include works that remain\n      separable from, or merely link (or bind by name) to the interfaces of,\n      the Work and Derivative Works thereof.\n\n      \"Contribution\" shall mean any work of authorship, including\n      the original version of the Work and any modifications or additions\n      to that Work or Derivative Works thereof, that is intentionally\n      submitted to Licensor for inclusion in the Work by the copyright owner\n      or by an individual or Legal Entity authorized to submit on behalf of\n      the copyright owner. For the purposes of this definition, \"submitted\"\n      means any form of electronic, verbal, or written communication sent\n      to the Licensor or its representatives, including but not limited to\n      communication on electronic mailing lists, source code control systems,\n      and issue tracking systems that are managed by, or on behalf of, the\n      Licensor for the purpose of discussing and improving the Work, but\n      excluding communication that is conspicuously marked or otherwise\n      designated in writing by the copyright owner as \"Not a Contribution.\"\n\n      \"Contributor\" shall mean Licensor and any individual or Legal Entity\n      on behalf of whom a Contribution has been received by Licensor and\n      subsequently incorporated within the Work.\n\n   2. Grant of Copyright License. Subject to the terms and conditions of\n      this License, each Contributor hereby grants to You a perpetual,\n      worldwide, non-exclusive, no-charge, royalty-free, irrevocable\n      copyright license to reproduce, prepare Derivative Works of,\n      publicly display, publicly perform, sublicense, and distribute the\n      Work and such Derivative Works in Source or Object form.\n\n   3. Grant of Patent License. Subject to the terms and conditions of\n      this License, each Contributor hereby grants to You a perpetual,\n      worldwide, non-exclusive, no-charge, royalty-free, irrevocable\n      (except as stated in this section) patent license to make, have made,\n      use, offer to sell, sell, import, and otherwise transfer the Work,\n      where such license applies only to those patent claims licensable\n      by such Contributor that are necessarily infringed by their\n      Contribution(s) alone or by combination of their Contribution(s)\n      with the Work to which such Contribution(s) was submitted. If You\n      institute patent litigation against any entity (including a\n      cross-claim or counterclaim in a lawsuit) alleging that the Work\n      or a Contribution incorporated within the Work constitutes direct\n      or contributory patent infringement, then any patent licenses\n      granted to You under this License for that Work shall terminate\n      as of the date such litigation is filed.\n\n   4. Redistribution. You may reproduce and distribute copies of the\n      Work or Derivative Works thereof in any medium, with or without\n      modifications, and in Source or Object form, provided that You\n      meet the following conditions:\n\n      (a) You must give any other recipients of the Work or\n          Derivative Works a copy of this License; and\n\n      (b) You must cause any modified files to carry prominent notices\n          stating that You changed the files; and\n\n      (c) You must retain, in the Source form of any Derivative Works\n          that You distribute, all copyright, patent, trademark, and\n          attribution notices from the Source form of the Work,\n          excluding those notices that do not pertain to any part of\n          the Derivative Works; and\n\n      (d) If the Work includes a \"NOTICE\" text file as part of its\n          distribution, then any Derivative Works that You distribute must\n          include a readable copy of the attribution notices contained\n          within such NOTICE file, excluding those notices that do not\n          pertain to any part of the Derivative Works, in at least one\n          of the following places: within a NOTICE text file distributed\n          as part of the Derivative Works; within the Source form or\n          documentation, if provided along with the Derivative Works; or,\n          within a display generated by the Derivative Works, if and\n          wherever such third-party notices normally appear. The contents\n          of the NOTICE file are for informational purposes only and\n          do not modify the License. You may add Your own attribution\n          notices within Derivative Works that You distribute, alongside\n          or as an addendum to the NOTICE text from the Work, provided\n          that such additional attribution notices cannot be construed\n          as modifying the License.\n\n      You may add Your own copyright statement to Your modifications and\n      may provide additional or different license terms and conditions\n      for use, reproduction, or distribution of Your modifications, or\n      for any such Derivative Works as a whole, provided Your use,\n      reproduction, and distribution of the Work otherwise complies with\n      the conditions stated in this License.\n\n   5. Submission of Contributions. Unless You explicitly state otherwise,\n      any Contribution intentionally submitted for inclusion in the Work\n      by You to the Licensor shall be under the terms and conditions of\n      this License, without any additional terms or conditions.\n      Notwithstanding the above, nothing herein shall supersede or modify\n      the terms of any separate license agreement you may have executed\n      with Licensor regarding such Contributions.\n\n   6. Trademarks. This License does not grant permission to use the trade\n      names, trademarks, service marks, or product names of the Licensor,\n      except as required for reasonable and customary use in describing the\n      origin of the Work and reproducing the content of the NOTICE file.\n\n   7. Disclaimer of Warranty. Unless required by applicable law or\n      agreed to in writing, Licensor provides the Work (and each\n      Contributor provides its Contributions) on an \"AS IS\" BASIS,\n      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or\n      implied, including, without limitation, any warranties or conditions\n      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A\n      PARTICULAR PURPOSE. You are solely responsible for determining the\n      appropriateness of using or redistributing the Work and assume any\n      risks associated with Your exercise of permissions under this License.\n\n   8. Limitation of Liability. In no event and under no legal theory,\n      whether in tort (including negligence), contract, or otherwise,\n      unless required by applicable law (such as deliberate and grossly\n      negligent acts) or agreed to in writing, shall any Contributor be\n      liable to You for damages, including any direct, indirect, special,\n      incidental, or consequential damages of any character arising as a\n      result of this License or out of the use or inability to use the\n      Work (including but not limited to damages for loss of goodwill,\n      work stoppage, computer failure or malfunction, or any and all\n      other commercial damages or losses), even if such Contributor\n      has been advised of the possibility of such damages.\n\n   9. Accepting Warranty or Additional Liability. While redistributing\n      the Work or Derivative Works thereof, You may choose to offer,\n      and charge a fee for, acceptance of support, warranty, indemnity,\n      or other liability obligations and/or rights consistent with this\n      License. However, in accepting such obligations, You may act only\n      on Your own behalf and on Your sole responsibility, not on behalf\n      of any other Contributor, and only if You agree to indemnify,\n      defend, and hold each Contributor harmless for any liability\n      incurred by, or claims asserted against, such Contributor by reason\n      of your accepting any such warranty or additional liability.\n\n   END OF TERMS AND CONDITIONS\n\n   APPENDIX: How to apply the Apache License to your work.\n\n      To apply the Apache License to your work, attach the following\n      boilerplate notice, with the fields enclosed by brackets \"[]\"\n      replaced with your own identifying information. (Don't include\n      the brackets!)  The text should be enclosed in the appropriate\n      comment syntax for the file format. We also recommend that a\n      file or class name and description of purpose be included on the\n      same \"printed page\" as the copyright notice for easier\n      identification within third-party archives.\n\n   Copyright [yyyy] [name of copyright owner]\n\n   Licensed under the Apache License, Version 2.0 (the \"License\");\n   you may not use this file except in compliance with the License.\n   You may obtain a copy of the License at\n\n       http://www.apache.org/licenses/LICENSE-2.0\n\n   Unless required by applicable law or agreed to in writing, software\n   distributed under the License is distributed on an \"AS IS\" BASIS,\n   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n   See the License for the specific language governing permissions and\n   limitations under the License.\n\n--------------------------------------------------------------------------------\n\nCopyright 2009 The Go Authors.\n\nRedistribution and use in source and binary forms, with or without\nmodification, are permitted provided that the following conditions are\nmet:\n\n   * Redistributions of source code must retain the above copyright\nnotice, this list of conditions and the following disclaimer.\n   * Redistributions in binary form must reproduce the above\ncopyright notice, this list of conditions and the following disclaimer\nin the documentation and/or other materials provided with the\ndistribution.\n   * Neither the name of Google LLC nor the names of its\ncontributors may be used to endorse or promote products derived from\nthis software without specific prior written permission.\n\nTHIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS\n\"AS IS\" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT\nLIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR\nA PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT\nOWNER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,\nSPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT\nLIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,\nDATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY\nTHEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT\n(INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE\nOF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.",
-    "ecosystem": "go",
-    "stale": true
+    "ecosystem": "go"
   },
   {
     "name": "github.com/open-telemetry/opentelemetry-go-instrumentation",
@@ -527,8 +749,7 @@
     "license": "Apache-2.0",
     "repository": "https://github.com/open-telemetry/opentelemetry-go-instrumentation",
     "license_text": "                                 Apache License\n                           Version 2.0, January 2004\n                        http://www.apache.org/licenses/\n\n   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION\n\n   1. Definitions.\n\n      \"License\" shall mean the terms and conditions for use, reproduction,\n      and distribution as defined by Sections 1 through 9 of this document.\n\n      \"Licensor\" shall mean the copyright owner or entity authorized by\n      the copyright owner that is granting the License.\n\n      \"Legal Entity\" shall mean the union of the acting entity and all\n      other entities that control, are controlled by, or are under common\n      control with that entity. For the purposes of this definition,\n      \"control\" means (i) the power, direct or indirect, to cause the\n      direction or management of such entity, whether by contract or\n      otherwise, or (ii) ownership of fifty percent (50%) or more of the\n      outstanding shares, or (iii) beneficial ownership of such entity.\n\n      \"You\" (or \"Your\") shall mean an individual or Legal Entity\n      exercising permissions granted by this License.\n\n      \"Source\" form shall mean the preferred form for making modifications,\n      including but not limited to software source code, documentation\n      source, and configuration files.\n\n      \"Object\" form shall mean any form resulting from mechanical\n      transformation or translation of a Source form, including but\n      not limited to compiled object code, generated documentation,\n      and conversions to other media types.\n\n      \"Work\" shall mean the work of authorship, whether in Source or\n      Object form, made available under the License, as indicated by a\n      copyright notice that is included in or attached to the work\n      (an example is provided in the Appendix below).\n\n      \"Derivative Works\" shall mean any work, whether in Source or Object\n      form, that is based on (or derived from) the Work and for which the\n      editorial revisions, annotations, elaborations, or other modifications\n      represent, as a whole, an original work of authorship. For the purposes\n      of this License, Derivative Works shall not include works that remain\n      separable from, or merely link (or bind by name) to the interfaces of,\n      the Work and Derivative Works thereof.\n\n      \"Contribution\" shall mean any work of authorship, including\n      the original version of the Work and any modifications or additions\n      to that Work or Derivative Works thereof, that is intentionally\n      submitted to Licensor for inclusion in the Work by the copyright owner\n      or by an individual or Legal Entity authorized to submit on behalf of\n      the copyright owner. For the purposes of this definition, \"submitted\"\n      means any form of electronic, verbal, or written communication sent\n      to the Licensor or its representatives, including but not limited to\n      communication on electronic mailing lists, source code control systems,\n      and issue tracking systems that are managed by, or on behalf of, the\n      Licensor for the purpose of discussing and improving the Work, but\n      excluding communication that is conspicuously marked or otherwise\n      designated in writing by the copyright owner as \"Not a Contribution.\"\n\n      \"Contributor\" shall mean Licensor and any individual or Legal Entity\n      on behalf of whom a Contribution has been received by Licensor and\n      subsequently incorporated within the Work.\n\n   2. Grant of Copyright License. Subject to the terms and conditions of\n      this License, each Contributor hereby grants to You a perpetual,\n      worldwide, non-exclusive, no-charge, royalty-free, irrevocable\n      copyright license to reproduce, prepare Derivative Works of,\n      publicly display, publicly perform, sublicense, and distribute the\n      Work and such Derivative Works in Source or Object form.\n\n   3. Grant of Patent License. Subject to the terms and conditions of\n      this License, each Contributor hereby grants to You a perpetual,\n      worldwide, non-exclusive, no-charge, royalty-free, irrevocable\n      (except as stated in this section) patent license to make, have made,\n      use, offer to sell, sell, import, and otherwise transfer the Work,\n      where such license applies only to those patent claims licensable\n      by such Contributor that are necessarily infringed by their\n      Contribution(s) alone or by combination of their Contribution(s)\n      with the Work to which such Contribution(s) was submitted. If You\n      institute patent litigation against any entity (including a\n      cross-claim or counterclaim in a lawsuit) alleging that the Work\n      or a Contribution incorporated within the Work constitutes direct\n      or contributory patent infringement, then any patent licenses\n      granted to You under this License for that Work shall terminate\n      as of the date such litigation is filed.\n\n   4. Redistribution. You may reproduce and distribute copies of the\n      Work or Derivative Works thereof in any medium, with or without\n      modifications, and in Source or Object form, provided that You\n      meet the following conditions:\n\n      (a) You must give any other recipients of the Work or\n          Derivative Works a copy of this License; and\n\n      (b) You must cause any modified files to carry prominent notices\n          stating that You changed the files; and\n\n      (c) You must retain, in the Source form of any Derivative Works\n          that You distribute, all copyright, patent, trademark, and\n          attribution notices from the Source form of the Work,\n          excluding those notices that do not pertain to any part of\n          the Derivative Works; and\n\n      (d) If the Work includes a \"NOTICE\" text file as part of its\n          distribution, then any Derivative Works that You distribute must\n          include a readable copy of the attribution notices contained\n          within such NOTICE file, excluding those notices that do not\n          pertain to any part of the Derivative Works, in at least one\n          of the following places: within a NOTICE text file distributed\n          as part of the Derivative Works; within the Source form or\n          documentation, if provided along with the Derivative Works; or,\n          within a display generated by the Derivative Works, if and\n          wherever such third-party notices normally appear. The contents\n          of the NOTICE file are for informational purposes only and\n          do not modify the License. You may add Your own attribution\n          notices within Derivative Works that You distribute, alongside\n          or as an addendum to the NOTICE text from the Work, provided\n          that such additional attribution notices cannot be construed\n          as modifying the License.\n\n      You may add Your own copyright statement to Your modifications and\n      may provide additional or different license terms and conditions\n      for use, reproduction, or distribution of Your modifications, or\n      for any such Derivative Works as a whole, provided Your use,\n      reproduction, and distribution of the Work otherwise complies with\n      the conditions stated in this License.\n\n   5. Submission of Contributions. Unless You explicitly state otherwise,\n      any Contribution intentionally submitted for inclusion in the Work\n      by You to the Licensor shall be under the terms and conditions of\n      this License, without any additional terms or conditions.\n      Notwithstanding the above, nothing herein shall supersede or modify\n      the terms of any separate license agreement you may have executed\n      with Licensor regarding such Contributions.\n\n   6. Trademarks. This License does not grant permission to use the trade\n      names, trademarks, service marks, or product names of the Licensor,\n      except as required for reasonable and customary use in describing the\n      origin of the Work and reproducing the content of the NOTICE file.\n\n   7. Disclaimer of Warranty. Unless required by applicable law or\n      agreed to in writing, Licensor provides the Work (and each\n      Contributor provides its Contributions) on an \"AS IS\" BASIS,\n      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or\n      implied, including, without limitation, any warranties or conditions\n      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A\n      PARTICULAR PURPOSE. You are solely responsible for determining the\n      appropriateness of using or redistributing the Work and assume any\n      risks associated with Your exercise of permissions under this License.\n\n   8. Limitation of Liability. In no event and under no legal theory,\n      whether in tort (including negligence), contract, or otherwise,\n      unless required by applicable law (such as deliberate and grossly\n      negligent acts) or agreed to in writing, shall any Contributor be\n      liable to You for damages, including any direct, indirect, special,\n      incidental, or consequential damages of any character arising as a\n      result of this License or out of the use or inability to use the\n      Work (including but not limited to damages for loss of goodwill,\n      work stoppage, computer failure or malfunction, or any and all\n      other commercial damages or losses), even if such Contributor\n      has been advised of the possibility of such damages.\n\n   9. Accepting Warranty or Additional Liability. While redistributing\n      the Work or Derivative Works thereof, You may choose to offer,\n      and charge a fee for, acceptance of support, warranty, indemnity,\n      or other liability obligations and/or rights consistent with this\n      License. However, in accepting such obligations, You may act only\n      on Your own behalf and on Your sole responsibility, not on behalf\n      of any other Contributor, and only if You agree to indemnify,\n      defend, and hold each Contributor harmless for any liability\n      incurred by, or claims asserted against, such Contributor by reason\n      of your accepting any such warranty or additional liability.\n\n   END OF TERMS AND CONDITIONS\n\n   APPENDIX: How to apply the Apache License to your work.\n\n      To apply the Apache License to your work, attach the following\n      boilerplate notice, with the fields enclosed by brackets \"[]\"\n      replaced with your own identifying information. (Don't include\n      the brackets!)  The text should be enclosed in the appropriate\n      comment syntax for the file format. We also recommend that a\n      file or class name and description of purpose be included on the\n      same \"printed page\" as the copyright notice for easier\n      identification within third-party archives.\n\n   Copyright [yyyy] [name of copyright owner]\n\n   Licensed under the Apache License, Version 2.0 (the \"License\");\n   you may not use this file except in compliance with the License.\n   You may obtain a copy of the License at\n\n       http://www.apache.org/licenses/LICENSE-2.0\n\n   Unless required by applicable law or agreed to in writing, software\n   distributed under the License is distributed on an \"AS IS\" BASIS,\n   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n   See the License for the specific language governing permissions and\n   limitations under the License.\n",
-    "ecosystem": "go",
-    "stale": true
+    "ecosystem": "go"
   },
   {
     "name": "github.com/open-telemetry/opentelemetry-proto-go",
@@ -536,8 +757,7 @@
     "license": "Apache-2.0",
     "repository": "https://github.com/open-telemetry/opentelemetry-proto-go",
     "license_text": "                                 Apache License\n                           Version 2.0, January 2004\n                        http://www.apache.org/licenses/\n\n   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION\n\n   1. Definitions.\n\n      \"License\" shall mean the terms and conditions for use, reproduction,\n      and distribution as defined by Sections 1 through 9 of this document.\n\n      \"Licensor\" shall mean the copyright owner or entity authorized by\n      the copyright owner that is granting the License.\n\n      \"Legal Entity\" shall mean the union of the acting entity and all\n      other entities that control, are controlled by, or are under common\n      control with that entity. For the purposes of this definition,\n      \"control\" means (i) the power, direct or indirect, to cause the\n      direction or management of such entity, whether by contract or\n      otherwise, or (ii) ownership of fifty percent (50%) or more of the\n      outstanding shares, or (iii) beneficial ownership of such entity.\n\n      \"You\" (or \"Your\") shall mean an individual or Legal Entity\n      exercising permissions granted by this License.\n\n      \"Source\" form shall mean the preferred form for making modifications,\n      including but not limited to software source code, documentation\n      source, and configuration files.\n\n      \"Object\" form shall mean any form resulting from mechanical\n      transformation or translation of a Source form, including but\n      not limited to compiled object code, generated documentation,\n      and conversions to other media types.\n\n      \"Work\" shall mean the work of authorship, whether in Source or\n      Object form, made available under the License, as indicated by a\n      copyright notice that is included in or attached to the work\n      (an example is provided in the Appendix below).\n\n      \"Derivative Works\" shall mean any work, whether in Source or Object\n      form, that is based on (or derived from) the Work and for which the\n      editorial revisions, annotations, elaborations, or other modifications\n      represent, as a whole, an original work of authorship. For the purposes\n      of this License, Derivative Works shall not include works that remain\n      separable from, or merely link (or bind by name) to the interfaces of,\n      the Work and Derivative Works thereof.\n\n      \"Contribution\" shall mean any work of authorship, including\n      the original version of the Work and any modifications or additions\n      to that Work or Derivative Works thereof, that is intentionally\n      submitted to Licensor for inclusion in the Work by the copyright owner\n      or by an individual or Legal Entity authorized to submit on behalf of\n      the copyright owner. For the purposes of this definition, \"submitted\"\n      means any form of electronic, verbal, or written communication sent\n      to the Licensor or its representatives, including but not limited to\n      communication on electronic mailing lists, source code control systems,\n      and issue tracking systems that are managed by, or on behalf of, the\n      Licensor for the purpose of discussing and improving the Work, but\n      excluding communication that is conspicuously marked or otherwise\n      designated in writing by the copyright owner as \"Not a Contribution.\"\n\n      \"Contributor\" shall mean Licensor and any individual or Legal Entity\n      on behalf of whom a Contribution has been received by Licensor and\n      subsequently incorporated within the Work.\n\n   2. Grant of Copyright License. Subject to the terms and conditions of\n      this License, each Contributor hereby grants to You a perpetual,\n      worldwide, non-exclusive, no-charge, royalty-free, irrevocable\n      copyright license to reproduce, prepare Derivative Works of,\n      publicly display, publicly perform, sublicense, and distribute the\n      Work and such Derivative Works in Source or Object form.\n\n   3. Grant of Patent License. Subject to the terms and conditions of\n      this License, each Contributor hereby grants to You a perpetual,\n      worldwide, non-exclusive, no-charge, royalty-free, irrevocable\n      (except as stated in this section) patent license to make, have made,\n      use, offer to sell, sell, import, and otherwise transfer the Work,\n      where such license applies only to those patent claims licensable\n      by such Contributor that are necessarily infringed by their\n      Contribution(s) alone or by combination of their Contribution(s)\n      with the Work to which such Contribution(s) was submitted. If You\n      institute patent litigation against any entity (including a\n      cross-claim or counterclaim in a lawsuit) alleging that the Work\n      or a Contribution incorporated within the Work constitutes direct\n      or contributory patent infringement, then any patent licenses\n      granted to You under this License for that Work shall terminate\n      as of the date such litigation is filed.\n\n   4. Redistribution. You may reproduce and distribute copies of the\n      Work or Derivative Works thereof in any medium, with or without\n      modifications, and in Source or Object form, provided that You\n      meet the following conditions:\n\n      (a) You must give any other recipients of the Work or\n          Derivative Works a copy of this License; and\n\n      (b) You must cause any modified files to carry prominent notices\n          stating that You changed the files; and\n\n      (c) You must retain, in the Source form of any Derivative Works\n          that You distribute, all copyright, patent, trademark, and\n          attribution notices from the Source form of the Work,\n          excluding those notices that do not pertain to any part of\n          the Derivative Works; and\n\n      (d) If the Work includes a \"NOTICE\" text file as part of its\n          distribution, then any Derivative Works that You distribute must\n          include a readable copy of the attribution notices contained\n          within such NOTICE file, excluding those notices that do not\n          pertain to any part of the Derivative Works, in at least one\n          of the following places: within a NOTICE text file distributed\n          as part of the Derivative Works; within the Source form or\n          documentation, if provided along with the Derivative Works; or,\n          within a display generated by the Derivative Works, if and\n          wherever such third-party notices normally appear. The contents\n          of the NOTICE file are for informational purposes only and\n          do not modify the License. You may add Your own attribution\n          notices within Derivative Works that You distribute, alongside\n          or as an addendum to the NOTICE text from the Work, provided\n          that such additional attribution notices cannot be construed\n          as modifying the License.\n\n      You may add Your own copyright statement to Your modifications and\n      may provide additional or different license terms and conditions\n      for use, reproduction, or distribution of Your modifications, or\n      for any such Derivative Works as a whole, provided Your use,\n      reproduction, and distribution of the Work otherwise complies with\n      the conditions stated in this License.\n\n   5. Submission of Contributions. Unless You explicitly state otherwise,\n      any Contribution intentionally submitted for inclusion in the Work\n      by You to the Licensor shall be under the terms and conditions of\n      this License, without any additional terms or conditions.\n      Notwithstanding the above, nothing herein shall supersede or modify\n      the terms of any separate license agreement you may have executed\n      with Licensor regarding such Contributions.\n\n   6. Trademarks. This License does not grant permission to use the trade\n      names, trademarks, service marks, or product names of the Licensor,\n      except as required for reasonable and customary use in describing the\n      origin of the Work and reproducing the content of the NOTICE file.\n\n   7. Disclaimer of Warranty. Unless required by applicable law or\n      agreed to in writing, Licensor provides the Work (and each\n      Contributor provides its Contributions) on an \"AS IS\" BASIS,\n      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or\n      implied, including, without limitation, any warranties or conditions\n      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A\n      PARTICULAR PURPOSE. You are solely responsible for determining the\n      appropriateness of using or redistributing the Work and assume any\n      risks associated with Your exercise of permissions under this License.\n\n   8. Limitation of Liability. In no event and under no legal theory,\n      whether in tort (including negligence), contract, or otherwise,\n      unless required by applicable law (such as deliberate and grossly\n      negligent acts) or agreed to in writing, shall any Contributor be\n      liable to You for damages, including any direct, indirect, special,\n      incidental, or consequential damages of any character arising as a\n      result of this License or out of the use or inability to use the\n      Work (including but not limited to damages for loss of goodwill,\n      work stoppage, computer failure or malfunction, or any and all\n      other commercial damages or losses), even if such Contributor\n      has been advised of the possibility of such damages.\n\n   9. Accepting Warranty or Additional Liability. While redistributing\n      the Work or Derivative Works thereof, You may choose to offer,\n      and charge a fee for, acceptance of support, warranty, indemnity,\n      or other liability obligations and/or rights consistent with this\n      License. However, in accepting such obligations, You may act only\n      on Your own behalf and on Your sole responsibility, not on behalf\n      of any other Contributor, and only if You agree to indemnify,\n      defend, and hold each Contributor harmless for any liability\n      incurred by, or claims asserted against, such Contributor by reason\n      of your accepting any such warranty or additional liability.\n\n   END OF TERMS AND CONDITIONS\n\n   APPENDIX: How to apply the Apache License to your work.\n\n      To apply the Apache License to your work, attach the following\n      boilerplate notice, with the fields enclosed by brackets \"[]\"\n      replaced with your own identifying information. (Don't include\n      the brackets!)  The text should be enclosed in the appropriate\n      comment syntax for the file format. We also recommend that a\n      file or class name and description of purpose be included on the\n      same \"printed page\" as the copyright notice for easier\n      identification within third-party archives.\n\n   Copyright [yyyy] [name of copyright owner]\n\n   Licensed under the Apache License, Version 2.0 (the \"License\");\n   you may not use this file except in compliance with the License.\n   You may obtain a copy of the License at\n\n       http://www.apache.org/licenses/LICENSE-2.0\n\n   Unless required by applicable law or agreed to in writing, software\n   distributed under the License is distributed on an \"AS IS\" BASIS,\n   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n   See the License for the specific language governing permissions and\n   limitations under the License.\n",
-    "ecosystem": "go",
-    "stale": true
+    "ecosystem": "go"
   },
   {
     "name": "github.com/opencontainers/go-digest",
@@ -545,8 +765,7 @@
     "license": "Apache-2.0",
     "repository": "https://github.com/opencontainers/go-digest",
     "license_text": "\n                                 Apache License\n                           Version 2.0, January 2004\n                        https://www.apache.org/licenses/\n\n   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION\n\n   1. Definitions.\n\n      \"License\" shall mean the terms and conditions for use, reproduction,\n      and distribution as defined by Sections 1 through 9 of this document.\n\n      \"Licensor\" shall mean the copyright owner or entity authorized by\n      the copyright owner that is granting the License.\n\n      \"Legal Entity\" shall mean the union of the acting entity and all\n      other entities that control, are controlled by, or are under common\n      control with that entity. For the purposes of this definition,\n      \"control\" means (i) the power, direct or indirect, to cause the\n      direction or management of such entity, whether by contract or\n      otherwise, or (ii) ownership of fifty percent (50%) or more of the\n      outstanding shares, or (iii) beneficial ownership of such entity.\n\n      \"You\" (or \"Your\") shall mean an individual or Legal Entity\n      exercising permissions granted by this License.\n\n      \"Source\" form shall mean the preferred form for making modifications,\n      including but not limited to software source code, documentation\n      source, and configuration files.\n\n      \"Object\" form shall mean any form resulting from mechanical\n      transformation or translation of a Source form, including but\n      not limited to compiled object code, generated documentation,\n      and conversions to other media types.\n\n      \"Work\" shall mean the work of authorship, whether in Source or\n      Object form, made available under the License, as indicated by a\n      copyright notice that is included in or attached to the work\n      (an example is provided in the Appendix below).\n\n      \"Derivative Works\" shall mean any work, whether in Source or Object\n      form, that is based on (or derived from) the Work and for which the\n      editorial revisions, annotations, elaborations, or other modifications\n      represent, as a whole, an original work of authorship. For the purposes\n      of this License, Derivative Works shall not include works that remain\n      separable from, or merely link (or bind by name) to the interfaces of,\n      the Work and Derivative Works thereof.\n\n      \"Contribution\" shall mean any work of authorship, including\n      the original version of the Work and any modifications or additions\n      to that Work or Derivative Works thereof, that is intentionally\n      submitted to Licensor for inclusion in the Work by the copyright owner\n      or by an individual or Legal Entity authorized to submit on behalf of\n      the copyright owner. For the purposes of this definition, \"submitted\"\n      means any form of electronic, verbal, or written communication sent\n      to the Licensor or its representatives, including but not limited to\n      communication on electronic mailing lists, source code control systems,\n      and issue tracking systems that are managed by, or on behalf of, the\n      Licensor for the purpose of discussing and improving the Work, but\n      excluding communication that is conspicuously marked or otherwise\n      designated in writing by the copyright owner as \"Not a Contribution.\"\n\n      \"Contributor\" shall mean Licensor and any individual or Legal Entity\n      on behalf of whom a Contribution has been received by Licensor and\n      subsequently incorporated within the Work.\n\n   2. Grant of Copyright License. Subject to the terms and conditions of\n      this License, each Contributor hereby grants to You a perpetual,\n      worldwide, non-exclusive, no-charge, royalty-free, irrevocable\n      copyright license to reproduce, prepare Derivative Works of,\n      publicly display, publicly perform, sublicense, and distribute the\n      Work and such Derivative Works in Source or Object form.\n\n   3. Grant of Patent License. Subject to the terms and conditions of\n      this License, each Contributor hereby grants to You a perpetual,\n      worldwide, non-exclusive, no-charge, royalty-free, irrevocable\n      (except as stated in this section) patent license to make, have made,\n      use, offer to sell, sell, import, and otherwise transfer the Work,\n      where such license applies only to those patent claims licensable\n      by such Contributor that are necessarily infringed by their\n      Contribution(s) alone or by combination of their Contribution(s)\n      with the Work to which such Contribution(s) was submitted. If You\n      institute patent litigation against any entity (including a\n      cross-claim or counterclaim in a lawsuit) alleging that the Work\n      or a Contribution incorporated within the Work constitutes direct\n      or contributory patent infringement, then any patent licenses\n      granted to You under this License for that Work shall terminate\n      as of the date such litigation is filed.\n\n   4. Redistribution. You may reproduce and distribute copies of the\n      Work or Derivative Works thereof in any medium, with or without\n      modifications, and in Source or Object form, provided that You\n      meet the following conditions:\n\n      (a) You must give any other recipients of the Work or\n          Derivative Works a copy of this License; and\n\n      (b) You must cause any modified files to carry prominent notices\n          stating that You changed the files; and\n\n      (c) You must retain, in the Source form of any Derivative Works\n          that You distribute, all copyright, patent, trademark, and\n          attribution notices from the Source form of the Work,\n          excluding those notices that do not pertain to any part of\n          the Derivative Works; and\n\n      (d) If the Work includes a \"NOTICE\" text file as part of its\n          distribution, then any Derivative Works that You distribute must\n          include a readable copy of the attribution notices contained\n          within such NOTICE file, excluding those notices that do not\n          pertain to any part of the Derivative Works, in at least one\n          of the following places: within a NOTICE text file distributed\n          as part of the Derivative Works; within the Source form or\n          documentation, if provided along with the Derivative Works; or,\n          within a display generated by the Derivative Works, if and\n          wherever such third-party notices normally appear. The contents\n          of the NOTICE file are for informational purposes only and\n          do not modify the License. You may add Your own attribution\n          notices within Derivative Works that You distribute, alongside\n          or as an addendum to the NOTICE text from the Work, provided\n          that such additional attribution notices cannot be construed\n          as modifying the License.\n\n      You may add Your own copyright statement to Your modifications and\n      may provide additional or different license terms and conditions\n      for use, reproduction, or distribution of Your modifications, or\n      for any such Derivative Works as a whole, provided Your use,\n      reproduction, and distribution of the Work otherwise complies with\n      the conditions stated in this License.\n\n   5. Submission of Contributions. Unless You explicitly state otherwise,\n      any Contribution intentionally submitted for inclusion in the Work\n      by You to the Licensor shall be under the terms and conditions of\n      this License, without any additional terms or conditions.\n      Notwithstanding the above, nothing herein shall supersede or modify\n      the terms of any separate license agreement you may have executed\n      with Licensor regarding such Contributions.\n\n   6. Trademarks. This License does not grant permission to use the trade\n      names, trademarks, service marks, or product names of the Licensor,\n      except as required for reasonable and customary use in describing the\n      origin of the Work and reproducing the content of the NOTICE file.\n\n   7. Disclaimer of Warranty. Unless required by applicable law or\n      agreed to in writing, Licensor provides the Work (and each\n      Contributor provides its Contributions) on an \"AS IS\" BASIS,\n      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or\n      implied, including, without limitation, any warranties or conditions\n      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A\n      PARTICULAR PURPOSE. You are solely responsible for determining the\n      appropriateness of using or redistributing the Work and assume any\n      risks associated with Your exercise of permissions under this License.\n\n   8. Limitation of Liability. In no event and under no legal theory,\n      whether in tort (including negligence), contract, or otherwise,\n      unless required by applicable law (such as deliberate and grossly\n      negligent acts) or agreed to in writing, shall any Contributor be\n      liable to You for damages, including any direct, indirect, special,\n      incidental, or consequential damages of any character arising as a\n      result of this License or out of the use or inability to use the\n      Work (including but not limited to damages for loss of goodwill,\n      work stoppage, computer failure or malfunction, or any and all\n      other commercial damages or losses), even if such Contributor\n      has been advised of the possibility of such damages.\n\n   9. Accepting Warranty or Additional Liability. While redistributing\n      the Work or Derivative Works thereof, You may choose to offer,\n      and charge a fee for, acceptance of support, warranty, indemnity,\n      or other liability obligations and/or rights consistent with this\n      License. However, in accepting such obligations, You may act only\n      on Your own behalf and on Your sole responsibility, not on behalf\n      of any other Contributor, and only if You agree to indemnify,\n      defend, and hold each Contributor harmless for any liability\n      incurred by, or claims asserted against, such Contributor by reason\n      of your accepting any such warranty or additional liability.\n\n   END OF TERMS AND CONDITIONS\n\n   Copyright 2019, 2020 OCI Contributors\n   Copyright 2016 Docker, Inc.\n\n   Licensed under the Apache License, Version 2.0 (the \"License\");\n   you may not use this file except in compliance with the License.\n   You may obtain a copy of the License at\n\n       https://www.apache.org/licenses/LICENSE-2.0\n\n   Unless required by applicable law or agreed to in writing, software\n   distributed under the License is distributed on an \"AS IS\" BASIS,\n   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n   See the License for the specific language governing permissions and\n   limitations under the License.\n",
-    "ecosystem": "go",
-    "stale": true
+    "ecosystem": "go"
   },
   {
     "name": "github.com/opencontainers/image-spec",
@@ -554,8 +773,7 @@
     "license": "Apache-2.0",
     "repository": "https://github.com/opencontainers/image-spec",
     "license_text": "\n                                 Apache License\n                           Version 2.0, January 2004\n                        http://www.apache.org/licenses/\n\n   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION\n\n   1. Definitions.\n\n      \"License\" shall mean the terms and conditions for use, reproduction,\n      and distribution as defined by Sections 1 through 9 of this document.\n\n      \"Licensor\" shall mean the copyright owner or entity authorized by\n      the copyright owner that is granting the License.\n\n      \"Legal Entity\" shall mean the union of the acting entity and all\n      other entities that control, are controlled by, or are under common\n      control with that entity. For the purposes of this definition,\n      \"control\" means (i) the power, direct or indirect, to cause the\n      direction or management of such entity, whether by contract or\n      otherwise, or (ii) ownership of fifty percent (50%) or more of the\n      outstanding shares, or (iii) beneficial ownership of such entity.\n\n      \"You\" (or \"Your\") shall mean an individual or Legal Entity\n      exercising permissions granted by this License.\n\n      \"Source\" form shall mean the preferred form for making modifications,\n      including but not limited to software source code, documentation\n      source, and configuration files.\n\n      \"Object\" form shall mean any form resulting from mechanical\n      transformation or translation of a Source form, including but\n      not limited to compiled object code, generated documentation,\n      and conversions to other media types.\n\n      \"Work\" shall mean the work of authorship, whether in Source or\n      Object form, made available under the License, as indicated by a\n      copyright notice that is included in or attached to the work\n      (an example is provided in the Appendix below).\n\n      \"Derivative Works\" shall mean any work, whether in Source or Object\n      form, that is based on (or derived from) the Work and for which the\n      editorial revisions, annotations, elaborations, or other modifications\n      represent, as a whole, an original work of authorship. For the purposes\n      of this License, Derivative Works shall not include works that remain\n      separable from, or merely link (or bind by name) to the interfaces of,\n      the Work and Derivative Works thereof.\n\n      \"Contribution\" shall mean any work of authorship, including\n      the original version of the Work and any modifications or additions\n      to that Work or Derivative Works thereof, that is intentionally\n      submitted to Licensor for inclusion in the Work by the copyright owner\n      or by an individual or Legal Entity authorized to submit on behalf of\n      the copyright owner. For the purposes of this definition, \"submitted\"\n      means any form of electronic, verbal, or written communication sent\n      to the Licensor or its representatives, including but not limited to\n      communication on electronic mailing lists, source code control systems,\n      and issue tracking systems that are managed by, or on behalf of, the\n      Licensor for the purpose of discussing and improving the Work, but\n      excluding communication that is conspicuously marked or otherwise\n      designated in writing by the copyright owner as \"Not a Contribution.\"\n\n      \"Contributor\" shall mean Licensor and any individual or Legal Entity\n      on behalf of whom a Contribution has been received by Licensor and\n      subsequently incorporated within the Work.\n\n   2. Grant of Copyright License. Subject to the terms and conditions of\n      this License, each Contributor hereby grants to You a perpetual,\n      worldwide, non-exclusive, no-charge, royalty-free, irrevocable\n      copyright license to reproduce, prepare Derivative Works of,\n      publicly display, publicly perform, sublicense, and distribute the\n      Work and such Derivative Works in Source or Object form.\n\n   3. Grant of Patent License. Subject to the terms and conditions of\n      this License, each Contributor hereby grants to You a perpetual,\n      worldwide, non-exclusive, no-charge, royalty-free, irrevocable\n      (except as stated in this section) patent license to make, have made,\n      use, offer to sell, sell, import, and otherwise transfer the Work,\n      where such license applies only to those patent claims licensable\n      by such Contributor that are necessarily infringed by their\n      Contribution(s) alone or by combination of their Contribution(s)\n      with the Work to which such Contribution(s) was submitted. If You\n      institute patent litigation against any entity (including a\n      cross-claim or counterclaim in a lawsuit) alleging that the Work\n      or a Contribution incorporated within the Work constitutes direct\n      or contributory patent infringement, then any patent licenses\n      granted to You under this License for that Work shall terminate\n      as of the date such litigation is filed.\n\n   4. Redistribution. You may reproduce and distribute copies of the\n      Work or Derivative Works thereof in any medium, with or without\n      modifications, and in Source or Object form, provided that You\n      meet the following conditions:\n\n      (a) You must give any other recipients of the Work or\n          Derivative Works a copy of this License; and\n\n      (b) You must cause any modified files to carry prominent notices\n          stating that You changed the files; and\n\n      (c) You must retain, in the Source form of any Derivative Works\n          that You distribute, all copyright, patent, trademark, and\n          attribution notices from the Source form of the Work,\n          excluding those notices that do not pertain to any part of\n          the Derivative Works; and\n\n      (d) If the Work includes a \"NOTICE\" text file as part of its\n          distribution, then any Derivative Works that You distribute must\n          include a readable copy of the attribution notices contained\n          within such NOTICE file, excluding those notices that do not\n          pertain to any part of the Derivative Works, in at least one\n          of the following places: within a NOTICE text file distributed\n          as part of the Derivative Works; within the Source form or\n          documentation, if provided along with the Derivative Works; or,\n          within a display generated by the Derivative Works, if and\n          wherever such third-party notices normally appear. The contents\n          of the NOTICE file are for informational purposes only and\n          do not modify the License. You may add Your own attribution\n          notices within Derivative Works that You distribute, alongside\n          or as an addendum to the NOTICE text from the Work, provided\n          that such additional attribution notices cannot be construed\n          as modifying the License.\n\n      You may add Your own copyright statement to Your modifications and\n      may provide additional or different license terms and conditions\n      for use, reproduction, or distribution of Your modifications, or\n      for any such Derivative Works as a whole, provided Your use,\n      reproduction, and distribution of the Work otherwise complies with\n      the conditions stated in this License.\n\n   5. Submission of Contributions. Unless You explicitly state otherwise,\n      any Contribution intentionally submitted for inclusion in the Work\n      by You to the Licensor shall be under the terms and conditions of\n      this License, without any additional terms or conditions.\n      Notwithstanding the above, nothing herein shall supersede or modify\n      the terms of any separate license agreement you may have executed\n      with Licensor regarding such Contributions.\n\n   6. Trademarks. This License does not grant permission to use the trade\n      names, trademarks, service marks, or product names of the Licensor,\n      except as required for reasonable and customary use in describing the\n      origin of the Work and reproducing the content of the NOTICE file.\n\n   7. Disclaimer of Warranty. Unless required by applicable law or\n      agreed to in writing, Licensor provides the Work (and each\n      Contributor provides its Contributions) on an \"AS IS\" BASIS,\n      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or\n      implied, including, without limitation, any warranties or conditions\n      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A\n      PARTICULAR PURPOSE. You are solely responsible for determining the\n      appropriateness of using or redistributing the Work and assume any\n      risks associated with Your exercise of permissions under this License.\n\n   8. Limitation of Liability. In no event and under no legal theory,\n      whether in tort (including negligence), contract, or otherwise,\n      unless required by applicable law (such as deliberate and grossly\n      negligent acts) or agreed to in writing, shall any Contributor be\n      liable to You for damages, including any direct, indirect, special,\n      incidental, or consequential damages of any character arising as a\n      result of this License or out of the use or inability to use the\n      Work (including but not limited to damages for loss of goodwill,\n      work stoppage, computer failure or malfunction, or any and all\n      other commercial damages or losses), even if such Contributor\n      has been advised of the possibility of such damages.\n\n   9. Accepting Warranty or Additional Liability. While redistributing\n      the Work or Derivative Works thereof, You may choose to offer,\n      and charge a fee for, acceptance of support, warranty, indemnity,\n      or other liability obligations and/or rights consistent with this\n      License. However, in accepting such obligations, You may act only\n      on Your own behalf and on Your sole responsibility, not on behalf\n      of any other Contributor, and only if You agree to indemnify,\n      defend, and hold each Contributor harmless for any liability\n      incurred by, or claims asserted against, such Contributor by reason\n      of your accepting any such warranty or additional liability.\n\n   END OF TERMS AND CONDITIONS\n\n   Copyright 2016 The Linux Foundation.\n\n   Licensed under the Apache License, Version 2.0 (the \"License\");\n   you may not use this file except in compliance with the License.\n   You may obtain a copy of the License at\n\n       http://www.apache.org/licenses/LICENSE-2.0\n\n   Unless required by applicable law or agreed to in writing, software\n   distributed under the License is distributed on an \"AS IS\" BASIS,\n   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n   See the License for the specific language governing permissions and\n   limitations under the License.\n",
-    "ecosystem": "go",
-    "stale": true
+    "ecosystem": "go"
   },
   {
     "name": "github.com/pelletier/go-toml",
@@ -563,17 +781,15 @@
     "license": "MIT",
     "repository": "https://github.com/pelletier/go-toml",
     "license_text": "The MIT License (MIT)\n\nCopyright (c) 2013 - 2022 Thomas Pelletier, Eric Anderton\n\nPermission is hereby granted, free of charge, to any person obtaining a copy\nof this software and associated documentation files (the \"Software\"), to deal\nin the Software without restriction, including without limitation the rights\nto use, copy, modify, merge, publish, distribute, sublicense, and/or sell\ncopies of the Software, and to permit persons to whom the Software is\nfurnished to do so, subject to the following conditions:\n\nThe above copyright notice and this permission notice shall be included in all\ncopies or substantial portions of the Software.\n\nTHE SOFTWARE IS PROVIDED \"AS IS\", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR\nIMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,\nFITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE\nAUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER\nLIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,\nOUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE\nSOFTWARE.\n",
-    "ecosystem": "go",
-    "stale": true
+    "ecosystem": "go"
   },
   {
-    "name": "github.com/pkg/errors",
-    "version": "v0.9.1",
+    "name": "github.com/pkg/sftp",
+    "version": "v1.13.10",
     "license": "BSD-2-Clause",
-    "repository": "https://github.com/pkg/errors",
-    "license_text": "Copyright (c) 2015, Dave Cheney <dave@cheney.net>\nAll rights reserved.\n\nRedistribution and use in source and binary forms, with or without\nmodification, are permitted provided that the following conditions are met:\n\n* Redistributions of source code must retain the above copyright notice, this\n  list of conditions and the following disclaimer.\n\n* Redistributions in binary form must reproduce the above copyright notice,\n  this list of conditions and the following disclaimer in the documentation\n  and/or other materials provided with the distribution.\n\nTHIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS \"AS IS\"\nAND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE\nIMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE\nDISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT HOLDER OR CONTRIBUTORS BE LIABLE\nFOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL\nDAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR\nSERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER\nCAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY,\nOR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE\nOF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.\n",
-    "ecosystem": "go",
-    "stale": true
+    "repository": "https://github.com/pkg/sftp",
+    "license_text": "Copyright (c) 2013, Dave Cheney\nAll rights reserved.\n\nRedistribution and use in source and binary forms, with or without modification, are permitted provided that the following conditions are met:\n\n * Redistributions of source code must retain the above copyright notice, this list of conditions and the following disclaimer.\n * Redistributions in binary form must reproduce the above copyright notice, this list of conditions and the following disclaimer in the documentation and/or other materials provided with the distribution.\n\nTHIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS \"AS IS\" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT HOLDER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.\n",
+    "ecosystem": "go"
   },
   {
     "name": "github.com/protocolbuffers/protobuf-go",
@@ -581,8 +797,23 @@
     "license": "BSD-3-Clause",
     "repository": "https://github.com/protocolbuffers/protobuf-go",
     "license_text": "Copyright (c) 2018 The Go Authors. All rights reserved.\n\nRedistribution and use in source and binary forms, with or without\nmodification, are permitted provided that the following conditions are\nmet:\n\n   * Redistributions of source code must retain the above copyright\nnotice, this list of conditions and the following disclaimer.\n   * Redistributions in binary form must reproduce the above\ncopyright notice, this list of conditions and the following disclaimer\nin the documentation and/or other materials provided with the\ndistribution.\n   * Neither the name of Google Inc. nor the names of its\ncontributors may be used to endorse or promote products derived from\nthis software without specific prior written permission.\n\nTHIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS\n\"AS IS\" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT\nLIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR\nA PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT\nOWNER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,\nSPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT\nLIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,\nDATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY\nTHEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT\n(INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE\nOF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.\n",
-    "ecosystem": "go",
-    "stale": true
+    "ecosystem": "go"
+  },
+  {
+    "name": "github.com/robfig/cron",
+    "version": "v3.0.1",
+    "license": "MIT",
+    "repository": "https://github.com/robfig/cron",
+    "license_text": "Copyright (C) 2012 Rob Figueiredo\nAll Rights Reserved.\n\nMIT LICENSE\n\nPermission is hereby granted, free of charge, to any person obtaining a copy of\nthis software and associated documentation files (the \"Software\"), to deal in\nthe Software without restriction, including without limitation the rights to\nuse, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of\nthe Software, and to permit persons to whom the Software is furnished to do so,\nsubject to the following conditions:\n\nThe above copyright notice and this permission notice shall be included in all\ncopies or substantial portions of the Software.\n\nTHE SOFTWARE IS PROVIDED \"AS IS\", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR\nIMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS\nFOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR\nCOPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER\nIN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN\nCONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.\n",
+    "ecosystem": "go"
+  },
+  {
+    "name": "github.com/santhosh-tekuri/jsonschema",
+    "version": "v6.0.2",
+    "license": "Apache-2.0",
+    "repository": "https://github.com/santhosh-tekuri/jsonschema",
+    "license_text": "\n                                 Apache License\n                           Version 2.0, January 2004\n                        http://www.apache.org/licenses/\n\n   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION\n\n   1. Definitions.\n\n      \"License\" shall mean the terms and conditions for use, reproduction,\n      and distribution as defined by Sections 1 through 9 of this document.\n\n      \"Licensor\" shall mean the copyright owner or entity authorized by\n      the copyright owner that is granting the License.\n\n      \"Legal Entity\" shall mean the union of the acting entity and all\n      other entities that control, are controlled by, or are under common\n      control with that entity. For the purposes of this definition,\n      \"control\" means (i) the power, direct or indirect, to cause the\n      direction or management of such entity, whether by contract or\n      otherwise, or (ii) ownership of fifty percent (50%) or more of the\n      outstanding shares, or (iii) beneficial ownership of such entity.\n\n      \"You\" (or \"Your\") shall mean an individual or Legal Entity\n      exercising permissions granted by this License.\n\n      \"Source\" form shall mean the preferred form for making modifications,\n      including but not limited to software source code, documentation\n      source, and configuration files.\n\n      \"Object\" form shall mean any form resulting from mechanical\n      transformation or translation of a Source form, including but\n      not limited to compiled object code, generated documentation,\n      and conversions to other media types.\n\n      \"Work\" shall mean the work of authorship, whether in Source or\n      Object form, made available under the License, as indicated by a\n      copyright notice that is included in or attached to the work\n      (an example is provided in the Appendix below).\n\n      \"Derivative Works\" shall mean any work, whether in Source or Object\n      form, that is based on (or derived from) the Work and for which the\n      editorial revisions, annotations, elaborations, or other modifications\n      represent, as a whole, an original work of authorship. For the purposes\n      of this License, Derivative Works shall not include works that remain\n      separable from, or merely link (or bind by name) to the interfaces of,\n      the Work and Derivative Works thereof.\n\n      \"Contribution\" shall mean any work of authorship, including\n      the original version of the Work and any modifications or additions\n      to that Work or Derivative Works thereof, that is intentionally\n      submitted to Licensor for inclusion in the Work by the copyright owner\n      or by an individual or Legal Entity authorized to submit on behalf of\n      the copyright owner. For the purposes of this definition, \"submitted\"\n      means any form of electronic, verbal, or written communication sent\n      to the Licensor or its representatives, including but not limited to\n      communication on electronic mailing lists, source code control systems,\n      and issue tracking systems that are managed by, or on behalf of, the\n      Licensor for the purpose of discussing and improving the Work, but\n      excluding communication that is conspicuously marked or otherwise\n      designated in writing by the copyright owner as \"Not a Contribution.\"\n\n      \"Contributor\" shall mean Licensor and any individual or Legal Entity\n      on behalf of whom a Contribution has been received by Licensor and\n      subsequently incorporated within the Work.\n\n   2. Grant of Copyright License. Subject to the terms and conditions of\n      this License, each Contributor hereby grants to You a perpetual,\n      worldwide, non-exclusive, no-charge, royalty-free, irrevocable\n      copyright license to reproduce, prepare Derivative Works of,\n      publicly display, publicly perform, sublicense, and distribute the\n      Work and such Derivative Works in Source or Object form.\n\n   3. Grant of Patent License. Subject to the terms and conditions of\n      this License, each Contributor hereby grants to You a perpetual,\n      worldwide, non-exclusive, no-charge, royalty-free, irrevocable\n      (except as stated in this section) patent license to make, have made,\n      use, offer to sell, sell, import, and otherwise transfer the Work,\n      where such license applies only to those patent claims licensable\n      by such Contributor that are necessarily infringed by their\n      Contribution(s) alone or by combination of their Contribution(s)\n      with the Work to which such Contribution(s) was submitted. If You\n      institute patent litigation against any entity (including a\n      cross-claim or counterclaim in a lawsuit) alleging that the Work\n      or a Contribution incorporated within the Work constitutes direct\n      or contributory patent infringement, then any patent licenses\n      granted to You under this License for that Work shall terminate\n      as of the date such litigation is filed.\n\n   4. Redistribution. You may reproduce and distribute copies of the\n      Work or Derivative Works thereof in any medium, with or without\n      modifications, and in Source or Object form, provided that You\n      meet the following conditions:\n\n      (a) You must give any other recipients of the Work or\n          Derivative Works a copy of this License; and\n\n      (b) You must cause any modified files to carry prominent notices\n          stating that You changed the files; and\n\n      (c) You must retain, in the Source form of any Derivative Works\n          that You distribute, all copyright, patent, trademark, and\n          attribution notices from the Source form of the Work,\n          excluding those notices that do not pertain to any part of\n          the Derivative Works; and\n\n      (d) If the Work includes a \"NOTICE\" text file as part of its\n          distribution, then any Derivative Works that You distribute must\n          include a readable copy of the attribution notices contained\n          within such NOTICE file, excluding those notices that do not\n          pertain to any part of the Derivative Works, in at least one\n          of the following places: within a NOTICE text file distributed\n          as part of the Derivative Works; within the Source form or\n          documentation, if provided along with the Derivative Works; or,\n          within a display generated by the Derivative Works, if and\n          wherever such third-party notices normally appear. The contents\n          of the NOTICE file are for informational purposes only and\n          do not modify the License. You may add Your own attribution\n          notices within Derivative Works that You distribute, alongside\n          or as an addendum to the NOTICE text from the Work, provided\n          that such additional attribution notices cannot be construed\n          as modifying the License.\n\n      You may add Your own copyright statement to Your modifications and\n      may provide additional or different license terms and conditions\n      for use, reproduction, or distribution of Your modifications, or\n      for any such Derivative Works as a whole, provided Your use,\n      reproduction, and distribution of the Work otherwise complies with\n      the conditions stated in this License.\n\n   5. Submission of Contributions. Unless You explicitly state otherwise,\n      any Contribution intentionally submitted for inclusion in the Work\n      by You to the Licensor shall be under the terms and conditions of\n      this License, without any additional terms or conditions.\n      Notwithstanding the above, nothing herein shall supersede or modify\n      the terms of any separate license agreement you may have executed\n      with Licensor regarding such Contributions.\n\n   6. Trademarks. This License does not grant permission to use the trade\n      names, trademarks, service marks, or product names of the Licensor,\n      except as required for reasonable and customary use in describing the\n      origin of the Work and reproducing the content of the NOTICE file.\n\n   7. Disclaimer of Warranty. Unless required by applicable law or\n      agreed to in writing, Licensor provides the Work (and each\n      Contributor provides its Contributions) on an \"AS IS\" BASIS,\n      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or\n      implied, including, without limitation, any warranties or conditions\n      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A\n      PARTICULAR PURPOSE. You are solely responsible for determining the\n      appropriateness of using or redistributing the Work and assume any\n      risks associated with Your exercise of permissions under this License.\n\n   8. Limitation of Liability. In no event and under no legal theory,\n      whether in tort (including negligence), contract, or otherwise,\n      unless required by applicable law (such as deliberate and grossly\n      negligent acts) or agreed to in writing, shall any Contributor be\n      liable to You for damages, including any direct, indirect, special,\n      incidental, or consequential damages of any character arising as a\n      result of this License or out of the use or inability to use the\n      Work (including but not limited to damages for loss of goodwill,\n      work stoppage, computer failure or malfunction, or any and all\n      other commercial damages or losses), even if such Contributor\n      has been advised of the possibility of such damages.\n\n   9. Accepting Warranty or Additional Liability. While redistributing\n      the Work or Derivative Works thereof, You may choose to offer,\n      and charge a fee for, acceptance of support, warranty, indemnity,\n      or other liability obligations and/or rights consistent with this\n      License. However, in accepting such obligations, You may act only\n      on Your own behalf and on Your sole responsibility, not on behalf\n      of any other Contributor, and only if You agree to indemnify,\n      defend, and hold each Contributor harmless for any liability\n      incurred by, or claims asserted against, such Contributor by reason\n      of your accepting any such warranty or additional liability.",
+    "ecosystem": "go"
   },
   {
     "name": "github.com/spf13/afero",
@@ -590,8 +821,7 @@
     "license": "Apache-2.0",
     "repository": "https://github.com/spf13/afero",
     "license_text": "                                Apache License\n                           Version 2.0, January 2004\n                        http://www.apache.org/licenses/\n\n   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION\n\n   1. Definitions.\n\n      \"License\" shall mean the terms and conditions for use, reproduction,\n      and distribution as defined by Sections 1 through 9 of this document.\n\n      \"Licensor\" shall mean the copyright owner or entity authorized by\n      the copyright owner that is granting the License.\n\n      \"Legal Entity\" shall mean the union of the acting entity and all\n      other entities that control, are controlled by, or are under common\n      control with that entity. For the purposes of this definition,\n      \"control\" means (i) the power, direct or indirect, to cause the\n      direction or management of such entity, whether by contract or\n      otherwise, or (ii) ownership of fifty percent (50%) or more of the\n      outstanding shares, or (iii) beneficial ownership of such entity.\n\n      \"You\" (or \"Your\") shall mean an individual or Legal Entity\n      exercising permissions granted by this License.\n\n      \"Source\" form shall mean the preferred form for making modifications,\n      including but not limited to software source code, documentation\n      source, and configuration files.\n\n      \"Object\" form shall mean any form resulting from mechanical\n      transformation or translation of a Source form, including but\n      not limited to compiled object code, generated documentation,\n      and conversions to other media types.\n\n      \"Work\" shall mean the work of authorship, whether in Source or\n      Object form, made available under the License, as indicated by a\n      copyright notice that is included in or attached to the work\n      (an example is provided in the Appendix below).\n\n      \"Derivative Works\" shall mean any work, whether in Source or Object\n      form, that is based on (or derived from) the Work and for which the\n      editorial revisions, annotations, elaborations, or other modifications\n      represent, as a whole, an original work of authorship. For the purposes\n      of this License, Derivative Works shall not include works that remain\n      separable from, or merely link (or bind by name) to the interfaces of,\n      the Work and Derivative Works thereof.\n\n      \"Contribution\" shall mean any work of authorship, including\n      the original version of the Work and any modifications or additions\n      to that Work or Derivative Works thereof, that is intentionally\n      submitted to Licensor for inclusion in the Work by the copyright owner\n      or by an individual or Legal Entity authorized to submit on behalf of\n      the copyright owner. For the purposes of this definition, \"submitted\"\n      means any form of electronic, verbal, or written communication sent\n      to the Licensor or its representatives, including but not limited to\n      communication on electronic mailing lists, source code control systems,\n      and issue tracking systems that are managed by, or on behalf of, the\n      Licensor for the purpose of discussing and improving the Work, but\n      excluding communication that is conspicuously marked or otherwise\n      designated in writing by the copyright owner as \"Not a Contribution.\"\n\n      \"Contributor\" shall mean Licensor and any individual or Legal Entity\n      on behalf of whom a Contribution has been received by Licensor and\n      subsequently incorporated within the Work.\n\n   2. Grant of Copyright License. Subject to the terms and conditions of\n      this License, each Contributor hereby grants to You a perpetual,\n      worldwide, non-exclusive, no-charge, royalty-free, irrevocable\n      copyright license to reproduce, prepare Derivative Works of,\n      publicly display, publicly perform, sublicense, and distribute the\n      Work and such Derivative Works in Source or Object form.\n\n   3. Grant of Patent License. Subject to the terms and conditions of\n      this License, each Contributor hereby grants to You a perpetual,\n      worldwide, non-exclusive, no-charge, royalty-free, irrevocable\n      (except as stated in this section) patent license to make, have made,\n      use, offer to sell, sell, import, and otherwise transfer the Work,\n      where such license applies only to those patent claims licensable\n      by such Contributor that are necessarily infringed by their\n      Contribution(s) alone or by combination of their Contribution(s)\n      with the Work to which such Contribution(s) was submitted. If You\n      institute patent litigation against any entity (including a\n      cross-claim or counterclaim in a lawsuit) alleging that the Work\n      or a Contribution incorporated within the Work constitutes direct\n      or contributory patent infringement, then any patent licenses\n      granted to You under this License for that Work shall terminate\n      as of the date such litigation is filed.\n\n   4. Redistribution. You may reproduce and distribute copies of the\n      Work or Derivative Works thereof in any medium, with or without\n      modifications, and in Source or Object form, provided that You\n      meet the following conditions:\n\n      (a) You must give any other recipients of the Work or\n          Derivative Works a copy of this License; and\n\n      (b) You must cause any modified files to carry prominent notices\n          stating that You changed the files; and\n\n      (c) You must retain, in the Source form of any Derivative Works\n          that You distribute, all copyright, patent, trademark, and\n          attribution notices from the Source form of the Work,\n          excluding those notices that do not pertain to any part of\n          the Derivative Works; and\n\n      (d) If the Work includes a \"NOTICE\" text file as part of its\n          distribution, then any Derivative Works that You distribute must\n          include a readable copy of the attribution notices contained\n          within such NOTICE file, excluding those notices that do not\n          pertain to any part of the Derivative Works, in at least one\n          of the following places: within a NOTICE text file distributed\n          as part of the Derivative Works; within the Source form or\n          documentation, if provided along with the Derivative Works; or,\n          within a display generated by the Derivative Works, if and\n          wherever such third-party notices normally appear. The contents\n          of the NOTICE file are for informational purposes only and\n          do not modify the License. You may add Your own attribution\n          notices within Derivative Works that You distribute, alongside\n          or as an addendum to the NOTICE text from the Work, provided\n          that such additional attribution notices cannot be construed\n          as modifying the License.\n\n      You may add Your own copyright statement to Your modifications and\n      may provide additional or different license terms and conditions\n      for use, reproduction, or distribution of Your modifications, or\n      for any such Derivative Works as a whole, provided Your use,\n      reproduction, and distribution of the Work otherwise complies with\n      the conditions stated in this License.\n\n   5. Submission of Contributions. Unless You explicitly state otherwise,\n      any Contribution intentionally submitted for inclusion in the Work\n      by You to the Licensor shall be under the terms and conditions of\n      this License, without any additional terms or conditions.\n      Notwithstanding the above, nothing herein shall supersede or modify\n      the terms of any separate license agreement you may have executed\n      with Licensor regarding such Contributions.\n\n   6. Trademarks. This License does not grant permission to use the trade\n      names, trademarks, service marks, or product names of the Licensor,\n      except as required for reasonable and customary use in describing the\n      origin of the Work and reproducing the content of the NOTICE file.\n\n   7. Disclaimer of Warranty. Unless required by applicable law or\n      agreed to in writing, Licensor provides the Work (and each\n      Contributor provides its Contributions) on an \"AS IS\" BASIS,\n      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or\n      implied, including, without limitation, any warranties or conditions\n      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A\n      PARTICULAR PURPOSE. You are solely responsible for determining the\n      appropriateness of using or redistributing the Work and assume any\n      risks associated with Your exercise of permissions under this License.\n\n   8. Limitation of Liability. In no event and under no legal theory,\n      whether in tort (including negligence), contract, or otherwise,\n      unless required by applicable law (such as deliberate and grossly\n      negligent acts) or agreed to in writing, shall any Contributor be\n      liable to You for damages, including any direct, indirect, special,\n      incidental, or consequential damages of any character arising as a\n      result of this License or out of the use or inability to use the\n      Work (including but not limited to damages for loss of goodwill,\n      work stoppage, computer failure or malfunction, or any and all\n      other commercial damages or losses), even if such Contributor\n      has been advised of the possibility of such damages.\n\n   9. Accepting Warranty or Additional Liability. While redistributing\n      the Work or Derivative Works thereof, You may choose to offer,\n      and charge a fee for, acceptance of support, warranty, indemnity,\n      or other liability obligations and/or rights consistent with this\n      License. However, in accepting such obligations, You may act only\n      on Your own behalf and on Your sole responsibility, not on behalf\n      of any other Contributor, and only if You agree to indemnify,\n      defend, and hold each Contributor harmless for any liability\n      incurred by, or claims asserted against, such Contributor by reason\n      of your accepting any such warranty or additional liability.\n",
-    "ecosystem": "go",
-    "stale": true
+    "ecosystem": "go"
   },
   {
     "name": "github.com/spf13/cast",
@@ -599,8 +829,7 @@
     "license": "MIT",
     "repository": "https://github.com/spf13/cast",
     "license_text": "The MIT License (MIT)\n\nCopyright (c) 2014 Steve Francia\n\nPermission is hereby granted, free of charge, to any person obtaining a copy\nof this software and associated documentation files (the \"Software\"), to deal\nin the Software without restriction, including without limitation the rights\nto use, copy, modify, merge, publish, distribute, sublicense, and/or sell\ncopies of the Software, and to permit persons to whom the Software is\nfurnished to do so, subject to the following conditions:\n\nThe above copyright notice and this permission notice shall be included in all\ncopies or substantial portions of the Software.\n\nTHE SOFTWARE IS PROVIDED \"AS IS\", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR\nIMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,\nFITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE\nAUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER\nLIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,\nOUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE\nSOFTWARE.",
-    "ecosystem": "go",
-    "stale": true
+    "ecosystem": "go"
   },
   {
     "name": "github.com/spf13/jwalterweatherman",
@@ -608,17 +837,15 @@
     "license": "MIT",
     "repository": "https://github.com/spf13/jwalterweatherman",
     "license_text": "The MIT License (MIT)\n\nCopyright (c) 2014 Steve Francia\n\nPermission is hereby granted, free of charge, to any person obtaining a copy\nof this software and associated documentation files (the \"Software\"), to deal\nin the Software without restriction, including without limitation the rights\nto use, copy, modify, merge, publish, distribute, sublicense, and/or sell\ncopies of the Software, and to permit persons to whom the Software is\nfurnished to do so, subject to the following conditions:\n\nThe above copyright notice and this permission notice shall be included in all\ncopies or substantial portions of the Software.\n\nTHE SOFTWARE IS PROVIDED \"AS IS\", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR\nIMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,\nFITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE\nAUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER\nLIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,\nOUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE\nSOFTWARE.",
-    "ecosystem": "go",
-    "stale": true
+    "ecosystem": "go"
   },
   {
     "name": "github.com/spf13/pflag",
-    "version": "v1.0.5",
+    "version": "v1.0.9",
     "license": "BSD-3-Clause",
     "repository": "https://github.com/spf13/pflag",
     "license_text": "Copyright (c) 2012 Alex Ogier. All rights reserved.\nCopyright (c) 2012 The Go Authors. All rights reserved.\n\nRedistribution and use in source and binary forms, with or without\nmodification, are permitted provided that the following conditions are\nmet:\n\n   * Redistributions of source code must retain the above copyright\nnotice, this list of conditions and the following disclaimer.\n   * Redistributions in binary form must reproduce the above\ncopyright notice, this list of conditions and the following disclaimer\nin the documentation and/or other materials provided with the\ndistribution.\n   * Neither the name of Google Inc. nor the names of its\ncontributors may be used to endorse or promote products derived from\nthis software without specific prior written permission.\n\nTHIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS\n\"AS IS\" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT\nLIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR\nA PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT\nOWNER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,\nSPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT\nLIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,\nDATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY\nTHEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT\n(INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE\nOF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.\n",
-    "ecosystem": "go",
-    "stale": true
+    "ecosystem": "go"
   },
   {
     "name": "github.com/spf13/viper",
@@ -626,8 +853,7 @@
     "license": "MIT",
     "repository": "https://github.com/spf13/viper",
     "license_text": "The MIT License (MIT)\n\nCopyright (c) 2014 Steve Francia\n\nPermission is hereby granted, free of charge, to any person obtaining a copy\nof this software and associated documentation files (the \"Software\"), to deal\nin the Software without restriction, including without limitation the rights\nto use, copy, modify, merge, publish, distribute, sublicense, and/or sell\ncopies of the Software, and to permit persons to whom the Software is\nfurnished to do so, subject to the following conditions:\n\nThe above copyright notice and this permission notice shall be included in all\ncopies or substantial portions of the Software.\n\nTHE SOFTWARE IS PROVIDED \"AS IS\", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR\nIMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,\nFITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE\nAUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER\nLIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,\nOUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE\nSOFTWARE.",
-    "ecosystem": "go",
-    "stale": true
+    "ecosystem": "go"
   },
   {
     "name": "github.com/subosito/gotenv",
@@ -635,15 +861,21 @@
     "license": "MIT",
     "repository": "https://github.com/subosito/gotenv",
     "license_text": "The MIT License (MIT)\n\nCopyright (c) 2013 Alif Rachmawadi\n\nPermission is hereby granted, free of charge, to any person obtaining a copy\nof this software and associated documentation files (the \"Software\"), to deal\nin the Software without restriction, including without limitation the rights\nto use, copy, modify, merge, publish, distribute, sublicense, and/or sell\ncopies of the Software, and to permit persons to whom the Software is\nfurnished to do so, subject to the following conditions:\n\nThe above copyright notice and this permission notice shall be included in\nall copies or substantial portions of the Software.\n\nTHE SOFTWARE IS PROVIDED \"AS IS\", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR\nIMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,\nFITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE\nAUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER\nLIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,\nOUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN\nTHE SOFTWARE.\n",
-    "ecosystem": "go",
-    "stale": true
+    "ecosystem": "go"
   },
   {
     "name": "github.com/superfly/sprites-go",
     "version": "unknown",
     "license": "UNKNOWN",
-    "ecosystem": "go",
-    "stale": true
+    "ecosystem": "go"
+  },
+  {
+    "name": "github.com/tiktoken-go/tokenizer",
+    "version": "v0.8.1",
+    "license": "MIT",
+    "repository": "https://github.com/tiktoken-go/tokenizer",
+    "license_text": "MIT License\n\nCopyright (c) 2023 tiktoken-go\n\nPermission is hereby granted, free of charge, to any person obtaining a copy\nof this software and associated documentation files (the \"Software\"), to deal\nin the Software without restriction, including without limitation the rights\nto use, copy, modify, merge, publish, distribute, sublicense, and/or sell\ncopies of the Software, and to permit persons to whom the Software is\nfurnished to do so, subject to the following conditions:\n\nThe above copyright notice and this permission notice shall be included in all\ncopies or substantial portions of the Software.\n\nTHE SOFTWARE IS PROVIDED \"AS IS\", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR\nIMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,\nFITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE\nAUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER\nLIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,\nOUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE\nSOFTWARE.\n",
+    "ecosystem": "go"
   },
   {
     "name": "github.com/tuzig/vt10x",
@@ -651,8 +883,7 @@
     "license": "MIT",
     "repository": "https://github.com/tuzig/vt10x",
     "license_text": "Copyright (C) 2013 James Gray\n\nPermission is hereby granted, free of charge, to any person obtaining a copy\nof this software and associated documentation files (the \"Software\"), to deal\nin the Software without restriction, including without liitation the rights\nto use, copy, modify, merge, publish, distribute, sublicense, and/or sell\ncopies of the Software, and to permit persons to whom the Software is\nfurnished to do so, subject to the following conditions:\n\nThe above copyright notice and thismssion notice shall be included in all\ncopies or substantial portions of the Software.\n\nTHE SOFTWARE IS PROVIDED \"AS IS\", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR\nIMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,\nFITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE\nAUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER\nLIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,\nOUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE\nSOFTWARE.\n",
-    "ecosystem": "go",
-    "stale": true
+    "ecosystem": "go"
   },
   {
     "name": "github.com/uber-go/multierr",
@@ -660,8 +891,7 @@
     "license": "MIT",
     "repository": "https://github.com/uber-go/multierr",
     "license_text": "Copyright (c) 2017-2021 Uber Technologies, Inc.\n\nPermission is hereby granted, free of charge, to any person obtaining a copy\nof this software and associated documentation files (the \"Software\"), to deal\nin the Software without restriction, including without limitation the rights\nto use, copy, modify, merge, publish, distribute, sublicense, and/or sell\ncopies of the Software, and to permit persons to whom the Software is\nfurnished to do so, subject to the following conditions:\n\nThe above copyright notice and this permission notice shall be included in\nall copies or substantial portions of the Software.\n\nTHE SOFTWARE IS PROVIDED \"AS IS\", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR\nIMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,\nFITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE\nAUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER\nLIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,\nOUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN\nTHE SOFTWARE.\n",
-    "ecosystem": "go",
-    "stale": true
+    "ecosystem": "go"
   },
   {
     "name": "github.com/uber-go/zap",
@@ -669,8 +899,7 @@
     "license": "MIT",
     "repository": "https://github.com/uber-go/zap",
     "license_text": "Copyright (c) 2016-2017 Uber Technologies, Inc.\n\nPermission is hereby granted, free of charge, to any person obtaining a copy\nof this software and associated documentation files (the \"Software\"), to deal\nin the Software without restriction, including without limitation the rights\nto use, copy, modify, merge, publish, distribute, sublicense, and/or sell\ncopies of the Software, and to permit persons to whom the Software is\nfurnished to do so, subject to the following conditions:\n\nThe above copyright notice and this permission notice shall be included in\nall copies or substantial portions of the Software.\n\nTHE SOFTWARE IS PROVIDED \"AS IS\", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR\nIMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,\nFITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE\nAUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER\nLIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,\nOUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN\nTHE SOFTWARE.\n",
-    "ecosystem": "go",
-    "stale": true
+    "ecosystem": "go"
   },
   {
     "name": "github.com/ugorji/go",
@@ -678,17 +907,31 @@
     "license": "MIT",
     "repository": "https://github.com/ugorji/go",
     "license_text": "The MIT License (MIT)\n\nCopyright (c) 2012-2020 Ugorji Nwoke.\nAll rights reserved.\n\nPermission is hereby granted, free of charge, to any person obtaining a copy\nof this software and associated documentation files (the \"Software\"), to deal\nin the Software without restriction, including without limitation the rights\nto use, copy, modify, merge, publish, distribute, sublicense, and/or sell\ncopies of the Software, and to permit persons to whom the Software is\nfurnished to do so, subject to the following conditions:\n\nThe above copyright notice and this permission notice shall be included in all\ncopies or substantial portions of the Software.\n\nTHE SOFTWARE IS PROVIDED \"AS IS\", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR\nIMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,\nFITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE\nAUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER\nLIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,\nOUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE\nSOFTWARE.\n",
-    "ecosystem": "go",
-    "stale": true
+    "ecosystem": "go"
   },
   {
-    "name": "github.com/wk8/go-ordered-map",
-    "version": "v2.1.8",
+    "name": "github.com/x448/float16",
+    "version": "v0.8.4",
+    "license": "MIT",
+    "repository": "https://github.com/x448/float16",
+    "license_text": "MIT License\n\nCopyright (c) 2019 Montgomery Edwards⁴⁴⁸ and Faye Amacker\n\nPermission is hereby granted, free of charge, to any person obtaining a copy\nof this software and associated documentation files (the \"Software\"), to deal\nin the Software without restriction, including without limitation the rights\nto use, copy, modify, merge, publish, distribute, sublicense, and/or sell\ncopies of the Software, and to permit persons to whom the Software is\nfurnished to do so, subject to the following conditions:\n\nThe above copyright notice and this permission notice shall be included in all\ncopies or substantial portions of the Software.\n\nTHE SOFTWARE IS PROVIDED \"AS IS\", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR\nIMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,\nFITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE\nAUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER\nLIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,\nOUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE\nSOFTWARE.\n\n",
+    "ecosystem": "go"
+  },
+  {
+    "name": "github.com/yaml/go-yaml",
+    "version": "v2.4.3",
     "license": "Apache-2.0",
-    "repository": "https://github.com/wk8/go-ordered-map",
+    "repository": "https://github.com/yaml/go-yaml",
     "license_text": "                                 Apache License\n                           Version 2.0, January 2004\n                        http://www.apache.org/licenses/\n\n   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION\n\n   1. Definitions.\n\n      \"License\" shall mean the terms and conditions for use, reproduction,\n      and distribution as defined by Sections 1 through 9 of this document.\n\n      \"Licensor\" shall mean the copyright owner or entity authorized by\n      the copyright owner that is granting the License.\n\n      \"Legal Entity\" shall mean the union of the acting entity and all\n      other entities that control, are controlled by, or are under common\n      control with that entity. For the purposes of this definition,\n      \"control\" means (i) the power, direct or indirect, to cause the\n      direction or management of such entity, whether by contract or\n      otherwise, or (ii) ownership of fifty percent (50%) or more of the\n      outstanding shares, or (iii) beneficial ownership of such entity.\n\n      \"You\" (or \"Your\") shall mean an individual or Legal Entity\n      exercising permissions granted by this License.\n\n      \"Source\" form shall mean the preferred form for making modifications,\n      including but not limited to software source code, documentation\n      source, and configuration files.\n\n      \"Object\" form shall mean any form resulting from mechanical\n      transformation or translation of a Source form, including but\n      not limited to compiled object code, generated documentation,\n      and conversions to other media types.\n\n      \"Work\" shall mean the work of authorship, whether in Source or\n      Object form, made available under the License, as indicated by a\n      copyright notice that is included in or attached to the work\n      (an example is provided in the Appendix below).\n\n      \"Derivative Works\" shall mean any work, whether in Source or Object\n      form, that is based on (or derived from) the Work and for which the\n      editorial revisions, annotations, elaborations, or other modifications\n      represent, as a whole, an original work of authorship. For the purposes\n      of this License, Derivative Works shall not include works that remain\n      separable from, or merely link (or bind by name) to the interfaces of,\n      the Work and Derivative Works thereof.\n\n      \"Contribution\" shall mean any work of authorship, including\n      the original version of the Work and any modifications or additions\n      to that Work or Derivative Works thereof, that is intentionally\n      submitted to Licensor for inclusion in the Work by the copyright owner\n      or by an individual or Legal Entity authorized to submit on behalf of\n      the copyright owner. For the purposes of this definition, \"submitted\"\n      means any form of electronic, verbal, or written communication sent\n      to the Licensor or its representatives, including but not limited to\n      communication on electronic mailing lists, source code control systems,\n      and issue tracking systems that are managed by, or on behalf of, the\n      Licensor for the purpose of discussing and improving the Work, but\n      excluding communication that is conspicuously marked or otherwise\n      designated in writing by the copyright owner as \"Not a Contribution.\"\n\n      \"Contributor\" shall mean Licensor and any individual or Legal Entity\n      on behalf of whom a Contribution has been received by Licensor and\n      subsequently incorporated within the Work.\n\n   2. Grant of Copyright License. Subject to the terms and conditions of\n      this License, each Contributor hereby grants to You a perpetual,\n      worldwide, non-exclusive, no-charge, royalty-free, irrevocable\n      copyright license to reproduce, prepare Derivative Works of,\n      publicly display, publicly perform, sublicense, and distribute the\n      Work and such Derivative Works in Source or Object form.\n\n   3. Grant of Patent License. Subject to the terms and conditions of\n      this License, each Contributor hereby grants to You a perpetual,\n      worldwide, non-exclusive, no-charge, royalty-free, irrevocable\n      (except as stated in this section) patent license to make, have made,\n      use, offer to sell, sell, import, and otherwise transfer the Work,\n      where such license applies only to those patent claims licensable\n      by such Contributor that are necessarily infringed by their\n      Contribution(s) alone or by combination of their Contribution(s)\n      with the Work to which such Contribution(s) was submitted. If You\n      institute patent litigation against any entity (including a\n      cross-claim or counterclaim in a lawsuit) alleging that the Work\n      or a Contribution incorporated within the Work constitutes direct\n      or contributory patent infringement, then any patent licenses\n      granted to You under this License for that Work shall terminate\n      as of the date such litigation is filed.\n\n   4. Redistribution. You may reproduce and distribute copies of the\n      Work or Derivative Works thereof in any medium, with or without\n      modifications, and in Source or Object form, provided that You\n      meet the following conditions:\n\n      (a) You must give any other recipients of the Work or\n          Derivative Works a copy of this License; and\n\n      (b) You must cause any modified files to carry prominent notices\n          stating that You changed the files; and\n\n      (c) You must retain, in the Source form of any Derivative Works\n          that You distribute, all copyright, patent, trademark, and\n          attribution notices from the Source form of the Work,\n          excluding those notices that do not pertain to any part of\n          the Derivative Works; and\n\n      (d) If the Work includes a \"NOTICE\" text file as part of its\n          distribution, then any Derivative Works that You distribute must\n          include a readable copy of the attribution notices contained\n          within such NOTICE file, excluding those notices that do not\n          pertain to any part of the Derivative Works, in at least one\n          of the following places: within a NOTICE text file distributed\n          as part of the Derivative Works; within the Source form or\n          documentation, if provided along with the Derivative Works; or,\n          within a display generated by the Derivative Works, if and\n          wherever such third-party notices normally appear. The contents\n          of the NOTICE file are for informational purposes only and\n          do not modify the License. You may add Your own attribution\n          notices within Derivative Works that You distribute, alongside\n          or as an addendum to the NOTICE text from the Work, provided\n          that such additional attribution notices cannot be construed\n          as modifying the License.\n\n      You may add Your own copyright statement to Your modifications and\n      may provide additional or different license terms and conditions\n      for use, reproduction, or distribution of Your modifications, or\n      for any such Derivative Works as a whole, provided Your use,\n      reproduction, and distribution of the Work otherwise complies with\n      the conditions stated in this License.\n\n   5. Submission of Contributions. Unless You explicitly state otherwise,\n      any Contribution intentionally submitted for inclusion in the Work\n      by You to the Licensor shall be under the terms and conditions of\n      this License, without any additional terms or conditions.\n      Notwithstanding the above, nothing herein shall supersede or modify\n      the terms of any separate license agreement you may have executed\n      with Licensor regarding such Contributions.\n\n   6. Trademarks. This License does not grant permission to use the trade\n      names, trademarks, service marks, or product names of the Licensor,\n      except as required for reasonable and customary use in describing the\n      origin of the Work and reproducing the content of the NOTICE file.\n\n   7. Disclaimer of Warranty. Unless required by applicable law or\n      agreed to in writing, Licensor provides the Work (and each\n      Contributor provides its Contributions) on an \"AS IS\" BASIS,\n      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or\n      implied, including, without limitation, any warranties or conditions\n      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A\n      PARTICULAR PURPOSE. You are solely responsible for determining the\n      appropriateness of using or redistributing the Work and assume any\n      risks associated with Your exercise of permissions under this License.\n\n   8. Limitation of Liability. In no event and under no legal theory,\n      whether in tort (including negligence), contract, or otherwise,\n      unless required by applicable law (such as deliberate and grossly\n      negligent acts) or agreed to in writing, shall any Contributor be\n      liable to You for damages, including any direct, indirect, special,\n      incidental, or consequential damages of any character arising as a\n      result of this License or out of the use or inability to use the\n      Work (including but not limited to damages for loss of goodwill,\n      work stoppage, computer failure or malfunction, or any and all\n      other commercial damages or losses), even if such Contributor\n      has been advised of the possibility of such damages.\n\n   9. Accepting Warranty or Additional Liability. While redistributing\n      the Work or Derivative Works thereof, You may choose to offer,\n      and charge a fee for, acceptance of support, warranty, indemnity,\n      or other liability obligations and/or rights consistent with this\n      License. However, in accepting such obligations, You may act only\n      on Your own behalf and on Your sole responsibility, not on behalf\n      of any other Contributor, and only if You agree to indemnify,\n      defend, and hold each Contributor harmless for any liability\n      incurred by, or claims asserted against, such Contributor by reason\n      of your accepting any such warranty or additional liability.\n\n   END OF TERMS AND CONDITIONS\n\n   APPENDIX: How to apply the Apache License to your work.\n\n      To apply the Apache License to your work, attach the following\n      boilerplate notice, with the fields enclosed by brackets \"{}\"\n      replaced with your own identifying information. (Don't include\n      the brackets!)  The text should be enclosed in the appropriate\n      comment syntax for the file format. We also recommend that a\n      file or class name and description of purpose be included on the\n      same \"printed page\" as the copyright notice for easier\n      identification within third-party archives.\n\n   Copyright {yyyy} {name of copyright owner}\n\n   Licensed under the Apache License, Version 2.0 (the \"License\");\n   you may not use this file except in compliance with the License.\n   You may obtain a copy of the License at\n\n       http://www.apache.org/licenses/LICENSE-2.0\n\n   Unless required by applicable law or agreed to in writing, software\n   distributed under the License is distributed on an \"AS IS\" BASIS,\n   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n   See the License for the specific language governing permissions and\n   limitations under the License.\n",
-    "ecosystem": "go",
-    "stale": true
+    "ecosystem": "go"
+  },
+  {
+    "name": "github.com/yaml/go-yaml",
+    "version": "v3.0.4",
+    "license": "MIT",
+    "repository": "https://github.com/yaml/go-yaml",
+    "license_text": "\nThis project is covered by two different licenses: MIT and Apache.\n\n#### MIT License ####\n\nThe following files were ported to Go from C files of libyaml, and thus\nare still covered by their original MIT license, with the additional\ncopyright staring in 2011 when the project was ported over:\n\n    apic.go emitterc.go parserc.go readerc.go scannerc.go\n    writerc.go yamlh.go yamlprivateh.go\n\nCopyright (c) 2006-2010 Kirill Simonov\nCopyright (c) 2006-2011 Kirill Simonov\n\nPermission is hereby granted, free of charge, to any person obtaining a copy of\nthis software and associated documentation files (the \"Software\"), to deal in\nthe Software without restriction, including without limitation the rights to\nuse, copy, modify, merge, publish, distribute, sublicense, and/or sell copies\nof the Software, and to permit persons to whom the Software is furnished to do\nso, subject to the following conditions:\n\nThe above copyright notice and this permission notice shall be included in all\ncopies or substantial portions of the Software.\n\nTHE SOFTWARE IS PROVIDED \"AS IS\", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR\nIMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,\nFITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE\nAUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER\nLIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,\nOUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE\nSOFTWARE.\n\n### Apache License ###\n\nAll the remaining project files are covered by the Apache license:\n\nCopyright (c) 2011-2019 Canonical Ltd\n\nLicensed under the Apache License, Version 2.0 (the \"License\");\nyou may not use this file except in compliance with the License.\nYou may obtain a copy of the License at\n\n    http://www.apache.org/licenses/LICENSE-2.0\n\nUnless required by applicable law or agreed to in writing, software\ndistributed under the License is distributed on an \"AS IS\" BASIS,\nWITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\nSee the License for the specific language governing permissions and\nlimitations under the License.\n",
+    "ecosystem": "go"
   },
   {
     "name": "github.com/yosida95/uritemplate",
@@ -696,62 +939,79 @@
     "license": "BSD-3-Clause",
     "repository": "https://github.com/yosida95/uritemplate",
     "license_text": "Copyright (C) 2016, Kohei YOSHIDA <https://yosida95.com/>. All rights reserved.\n\nRedistribution and use in source and binary forms, with or without\nmodification, are permitted provided that the following conditions are met:\n\n    * Redistributions of source code must retain the above copyright\n      notice, this list of conditions and the following disclaimer.\n    * Redistributions in binary form must reproduce the above copyright\n      notice, this list of conditions and the following disclaimer in the\n      documentation and/or other materials provided with the distribution.\n    * Neither the name of the copyright holder nor the names of its\n      contributors may be used to endorse or promote products derived from\n      this software without specific prior written permission.\n\nTHIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS\n\"AS IS\" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT\nLIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR\nA PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT\nHOLDER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,\nSPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT\nLIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,\nDATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY\nTHEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT\n(INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE\nOF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.\n",
-    "ecosystem": "go",
-    "stale": true
+    "ecosystem": "go"
+  },
+  {
+    "name": "github.com/yuin/goldmark",
+    "version": "v1.7.13",
+    "license": "MIT",
+    "repository": "https://github.com/yuin/goldmark",
+    "license_text": "MIT License\n\nCopyright (c) 2019 Yusuke Inuzuka\n\nPermission is hereby granted, free of charge, to any person obtaining a copy\nof this software and associated documentation files (the \"Software\"), to deal\nin the Software without restriction, including without limitation the rights\nto use, copy, modify, merge, publish, distribute, sublicense, and/or sell\ncopies of the Software, and to permit persons to whom the Software is\nfurnished to do so, subject to the following conditions:\n\nThe above copyright notice and this permission notice shall be included in all\ncopies or substantial portions of the Software.\n\nTHE SOFTWARE IS PROVIDED \"AS IS\", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR\nIMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,\nFITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE\nAUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER\nLIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,\nOUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE\nSOFTWARE.\n",
+    "ecosystem": "go"
   },
   {
     "name": "golang.org/go/x/crypto",
-    "version": "v0.49.0",
+    "version": "v0.57.0",
     "license": "BSD-3-Clause",
     "repository": "https://cs.opensource.google/go/x",
     "license_text": "Copyright 2009 The Go Authors.\n\nRedistribution and use in source and binary forms, with or without\nmodification, are permitted provided that the following conditions are\nmet:\n\n   * Redistributions of source code must retain the above copyright\nnotice, this list of conditions and the following disclaimer.\n   * Redistributions in binary form must reproduce the above\ncopyright notice, this list of conditions and the following disclaimer\nin the documentation and/or other materials provided with the\ndistribution.\n   * Neither the name of Google LLC nor the names of its\ncontributors may be used to endorse or promote products derived from\nthis software without specific prior written permission.\n\nTHIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS\n\"AS IS\" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT\nLIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR\nA PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT\nOWNER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,\nSPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT\nLIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,\nDATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY\nTHEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT\n(INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE\nOF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.\n",
-    "ecosystem": "go",
-    "stale": true
+    "ecosystem": "go"
   },
   {
     "name": "golang.org/go/x/net",
-    "version": "v0.52.0",
+    "version": "v0.58.0",
     "license": "BSD-3-Clause",
     "repository": "https://cs.opensource.google/go/x",
     "license_text": "Copyright 2009 The Go Authors.\n\nRedistribution and use in source and binary forms, with or without\nmodification, are permitted provided that the following conditions are\nmet:\n\n   * Redistributions of source code must retain the above copyright\nnotice, this list of conditions and the following disclaimer.\n   * Redistributions in binary form must reproduce the above\ncopyright notice, this list of conditions and the following disclaimer\nin the documentation and/or other materials provided with the\ndistribution.\n   * Neither the name of Google LLC nor the names of its\ncontributors may be used to endorse or promote products derived from\nthis software without specific prior written permission.\n\nTHIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS\n\"AS IS\" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT\nLIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR\nA PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT\nOWNER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,\nSPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT\nLIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,\nDATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY\nTHEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT\n(INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE\nOF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.\n",
-    "ecosystem": "go",
-    "stale": true
+    "ecosystem": "go"
+  },
+  {
+    "name": "golang.org/go/x/oauth2",
+    "version": "v0.36.0",
+    "license": "BSD-3-Clause",
+    "repository": "https://cs.opensource.google/go/x",
+    "license_text": "Copyright 2009 The Go Authors.\n\nRedistribution and use in source and binary forms, with or without\nmodification, are permitted provided that the following conditions are\nmet:\n\n   * Redistributions of source code must retain the above copyright\nnotice, this list of conditions and the following disclaimer.\n   * Redistributions in binary form must reproduce the above\ncopyright notice, this list of conditions and the following disclaimer\nin the documentation and/or other materials provided with the\ndistribution.\n   * Neither the name of Google LLC nor the names of its\ncontributors may be used to endorse or promote products derived from\nthis software without specific prior written permission.\n\nTHIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS\n\"AS IS\" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT\nLIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR\nA PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT\nOWNER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,\nSPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT\nLIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,\nDATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY\nTHEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT\n(INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE\nOF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.\n",
+    "ecosystem": "go"
   },
   {
     "name": "golang.org/go/x/sync",
-    "version": "v0.20.0",
+    "version": "v0.23.0",
     "license": "BSD-3-Clause",
     "repository": "https://cs.opensource.google/go/x",
     "license_text": "Copyright 2009 The Go Authors.\n\nRedistribution and use in source and binary forms, with or without\nmodification, are permitted provided that the following conditions are\nmet:\n\n   * Redistributions of source code must retain the above copyright\nnotice, this list of conditions and the following disclaimer.\n   * Redistributions in binary form must reproduce the above\ncopyright notice, this list of conditions and the following disclaimer\nin the documentation and/or other materials provided with the\ndistribution.\n   * Neither the name of Google LLC nor the names of its\ncontributors may be used to endorse or promote products derived from\nthis software without specific prior written permission.\n\nTHIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS\n\"AS IS\" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT\nLIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR\nA PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT\nOWNER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,\nSPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT\nLIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,\nDATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY\nTHEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT\n(INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE\nOF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.\n",
-    "ecosystem": "go",
-    "stale": true
+    "ecosystem": "go"
   },
   {
     "name": "golang.org/go/x/sys",
+    "version": "v0.48.0",
+    "license": "BSD-3-Clause",
+    "repository": "https://cs.opensource.google/go/x",
+    "license_text": "Copyright 2009 The Go Authors.\n\nRedistribution and use in source and binary forms, with or without\nmodification, are permitted provided that the following conditions are\nmet:\n\n   * Redistributions of source code must retain the above copyright\nnotice, this list of conditions and the following disclaimer.\n   * Redistributions in binary form must reproduce the above\ncopyright notice, this list of conditions and the following disclaimer\nin the documentation and/or other materials provided with the\ndistribution.\n   * Neither the name of Google LLC nor the names of its\ncontributors may be used to endorse or promote products derived from\nthis software without specific prior written permission.\n\nTHIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS\n\"AS IS\" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT\nLIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR\nA PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT\nOWNER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,\nSPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT\nLIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,\nDATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY\nTHEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT\n(INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE\nOF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.\n",
+    "ecosystem": "go"
+  },
+  {
+    "name": "golang.org/go/x/term",
+    "version": "v0.46.0",
+    "license": "BSD-3-Clause",
+    "repository": "https://cs.opensource.google/go/x",
+    "license_text": "Copyright 2009 The Go Authors.\n\nRedistribution and use in source and binary forms, with or without\nmodification, are permitted provided that the following conditions are\nmet:\n\n   * Redistributions of source code must retain the above copyright\nnotice, this list of conditions and the following disclaimer.\n   * Redistributions in binary form must reproduce the above\ncopyright notice, this list of conditions and the following disclaimer\nin the documentation and/or other materials provided with the\ndistribution.\n   * Neither the name of Google LLC nor the names of its\ncontributors may be used to endorse or promote products derived from\nthis software without specific prior written permission.\n\nTHIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS\n\"AS IS\" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT\nLIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR\nA PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT\nOWNER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,\nSPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT\nLIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,\nDATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY\nTHEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT\n(INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE\nOF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.\n",
+    "ecosystem": "go"
+  },
+  {
+    "name": "golang.org/go/x/text",
     "version": "v0.42.0",
     "license": "BSD-3-Clause",
     "repository": "https://cs.opensource.google/go/x",
     "license_text": "Copyright 2009 The Go Authors.\n\nRedistribution and use in source and binary forms, with or without\nmodification, are permitted provided that the following conditions are\nmet:\n\n   * Redistributions of source code must retain the above copyright\nnotice, this list of conditions and the following disclaimer.\n   * Redistributions in binary form must reproduce the above\ncopyright notice, this list of conditions and the following disclaimer\nin the documentation and/or other materials provided with the\ndistribution.\n   * Neither the name of Google LLC nor the names of its\ncontributors may be used to endorse or promote products derived from\nthis software without specific prior written permission.\n\nTHIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS\n\"AS IS\" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT\nLIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR\nA PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT\nOWNER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,\nSPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT\nLIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,\nDATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY\nTHEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT\n(INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE\nOF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.\n",
-    "ecosystem": "go",
-    "stale": true
+    "ecosystem": "go"
   },
   {
-    "name": "golang.org/go/x/term",
-    "version": "v0.41.0",
+    "name": "golang.org/go/x/time",
+    "version": "v0.11.0",
     "license": "BSD-3-Clause",
     "repository": "https://cs.opensource.google/go/x",
     "license_text": "Copyright 2009 The Go Authors.\n\nRedistribution and use in source and binary forms, with or without\nmodification, are permitted provided that the following conditions are\nmet:\n\n   * Redistributions of source code must retain the above copyright\nnotice, this list of conditions and the following disclaimer.\n   * Redistributions in binary form must reproduce the above\ncopyright notice, this list of conditions and the following disclaimer\nin the documentation and/or other materials provided with the\ndistribution.\n   * Neither the name of Google LLC nor the names of its\ncontributors may be used to endorse or promote products derived from\nthis software without specific prior written permission.\n\nTHIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS\n\"AS IS\" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT\nLIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR\nA PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT\nOWNER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,\nSPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT\nLIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,\nDATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY\nTHEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT\n(INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE\nOF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.\n",
-    "ecosystem": "go",
-    "stale": true
-  },
-  {
-    "name": "golang.org/go/x/text",
-    "version": "v0.35.0",
-    "license": "BSD-3-Clause",
-    "repository": "https://cs.opensource.google/go/x",
-    "license_text": "Copyright 2009 The Go Authors.\n\nRedistribution and use in source and binary forms, with or without\nmodification, are permitted provided that the following conditions are\nmet:\n\n   * Redistributions of source code must retain the above copyright\nnotice, this list of conditions and the following disclaimer.\n   * Redistributions in binary form must reproduce the above\ncopyright notice, this list of conditions and the following disclaimer\nin the documentation and/or other materials provided with the\ndistribution.\n   * Neither the name of Google LLC nor the names of its\ncontributors may be used to endorse or promote products derived from\nthis software without specific prior written permission.\n\nTHIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS\n\"AS IS\" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT\nLIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR\nA PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT\nOWNER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,\nSPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT\nLIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,\nDATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY\nTHEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT\n(INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE\nOF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.\n",
-    "ecosystem": "go",
-    "stale": true
+    "ecosystem": "go"
   },
   {
     "name": "@antfu/install-pkg",
@@ -2757,6 +3017,14 @@
     "license_text": "(The MIT License)\n\nCopyright (c) 2015 Titus Wormer <tituswormer@gmail.com>\n\nPermission is hereby granted, free of charge, to any person obtaining\na copy of this software and associated documentation files (the\n'Software'), to deal in the Software without restriction, including\nwithout limitation the rights to use, copy, modify, merge, publish,\ndistribute, sublicense, and/or sell copies of the Software, and to\npermit persons to whom the Software is furnished to do so, subject to\nthe following conditions:\n\nThe above copyright notice and this permission notice shall be\nincluded in all copies or substantial portions of the Software.\n\nTHE SOFTWARE IS PROVIDED 'AS IS', WITHOUT WARRANTY OF ANY KIND,\nEXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF\nMERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT.\nIN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY\nCLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT,\nTORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE\nSOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.\n",
     "ecosystem": "npm"
   },
+  {
+    "name": "base64-arraybuffer",
+    "version": "1.0.2",
+    "license": "MIT",
+    "repository": "https://github.com/niklasvh/base64-arraybuffer",
+    "license_text": "Copyright (c) 2012 Niklas von Hertzen\n\nPermission is hereby granted, free of charge, to any person\nobtaining a copy of this software and associated documentation\nfiles (the \"Software\"), to deal in the Software without\nrestriction, including without limitation the rights to use,\ncopy, modify, merge, publish, distribute, sublicense, and/or sell\ncopies of the Software, and to permit persons to whom the\nSoftware is furnished to do so, subject to the following\nconditions:\n\nThe above copyright notice and this permission notice shall be\nincluded in all copies or substantial portions of the Software.\n\nTHE SOFTWARE IS PROVIDED \"AS IS\", WITHOUT WARRANTY OF ANY KIND,\nEXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES\nOF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND\nNONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT\nHOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY,\nWHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING\nFROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR\nOTHER DEALINGS IN THE SOFTWARE.\n",
+    "ecosystem": "npm"
+  },
   {
     "name": "ccount",
     "version": "2.0.1",
@@ -2885,6 +3153,14 @@
     "license_text": "Copyright (C) 2020 by Marijn Haverbeke <marijn@haverbeke.berlin>\n\nPermission is hereby granted, free of charge, to any person obtaining a copy\nof this software and associated documentation files (the \"Software\"), to deal\nin the Software without restriction, including without limitation the rights\nto use, copy, modify, merge, publish, distribute, sublicense, and/or sell\ncopies of the Software, and to permit persons to whom the Software is\nfurnished to do so, subject to the following conditions:\n\nThe above copyright notice and this permission notice shall be included in\nall copies or substantial portions of the Software.\n\nTHE SOFTWARE IS PROVIDED \"AS IS\", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR\nIMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,\nFITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE\nAUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER\nLIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,\nOUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN\nTHE SOFTWARE.\n",
     "ecosystem": "npm"
   },
+  {
+    "name": "css-line-break",
+    "version": "2.1.0",
+    "license": "MIT",
+    "repository": "ssh://git@github.com/niklasvh/css-line-break",
+    "license_text": "Copyright (c) 2017 Niklas von Hertzen\n\nPermission is hereby granted, free of charge, to any person\nobtaining a copy of this software and associated documentation\nfiles (the \"Software\"), to deal in the Software without\nrestriction, including without limitation the rights to use,\ncopy, modify, merge, publish, distribute, sublicense, and/or sell\ncopies of the Software, and to permit persons to whom the\nSoftware is furnished to do so, subject to the following\nconditions:\n\nThe above copyright notice and this permission notice shall be\nincluded in all copies or substantial portions of the Software.\n\nTHE SOFTWARE IS PROVIDED \"AS IS\", WITHOUT WARRANTY OF ANY KIND,\nEXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES\nOF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND\nNONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT\nHOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY,\nWHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING\nFROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR\nOTHER DEALINGS IN THE SOFTWARE.",
+    "ecosystem": "npm"
+  },
   {
     "name": "csstype",
     "version": "3.2.3",
@@ -3540,6 +3816,14 @@
     "license_text": "(The MIT License)\n\nCopyright (c) 2016 Titus Wormer <tituswormer@gmail.com>\n\nPermission is hereby granted, free of charge, to any person obtaining\na copy of this software and associated documentation files (the\n'Software'), to deal in the Software without restriction, including\nwithout limitation the rights to use, copy, modify, merge, publish,\ndistribute, sublicense, and/or sell copies of the Software, and to\npermit persons to whom the Software is furnished to do so, subject to\nthe following conditions:\n\nThe above copyright notice and this permission notice shall be\nincluded in all copies or substantial portions of the Software.\n\nTHE SOFTWARE IS PROVIDED 'AS IS', WITHOUT WARRANTY OF ANY KIND,\nEXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF\nMERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT.\nIN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY\nCLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT,\nTORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE\nSOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.\n",
     "ecosystem": "npm"
   },
+  {
+    "name": "html2canvas-pro",
+    "version": "2.4.3",
+    "license": "MIT",
+    "repository": "https://github.com/yorickshan/html2canvas-pro",
+    "license_text": "MIT License\n\nCopyright (c) 2024-present yorickshan and html2canvas-pro contributors\n\nPermission is hereby granted, free of charge, to any person obtaining a copy\nof this software and associated documentation files (the \"Software\"), to deal\nin the Software without restriction, including without limitation the rights\nto use, copy, modify, merge, publish, distribute, sublicense, and/or sell\ncopies of the Software, and to permit persons to whom the Software is\nfurnished to do so, subject to the following conditions:\n\nThe above copyright notice and this permission notice shall be included in all\ncopies or substantial portions of the Software.\n\nTHE SOFTWARE IS PROVIDED \"AS IS\", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR\nIMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,\nFITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE\nAUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER\nLIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,\nOUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE\nSOFTWARE.\n",
+    "ecosystem": "npm"
+  },
   {
     "name": "i18next",
     "version": "26.3.6",
@@ -4784,6 +5068,14 @@
     "license_text": "MIT License\n\nCopyright (c) 2021 Dany Castillo\n\nPermission is hereby granted, free of charge, to any person obtaining a copy\nof this software and associated documentation files (the \"Software\"), to deal\nin the Software without restriction, including without limitation the rights\nto use, copy, modify, merge, publish, distribute, sublicense, and/or sell\ncopies of the Software, and to permit persons to whom the Software is\nfurnished to do so, subject to the following conditions:\n\nThe above copyright notice and this permission notice shall be included in all\ncopies or substantial portions of the Software.\n\nTHE SOFTWARE IS PROVIDED \"AS IS\", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR\nIMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,\nFITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE\nAUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER\nLIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,\nOUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE\nSOFTWARE.\n",
     "ecosystem": "npm"
   },
+  {
+    "name": "text-segmentation",
+    "version": "1.0.3",
+    "license": "MIT",
+    "repository": "ssh://git@github.com/niklasvh/text-segmentation",
+    "license_text": "Copyright (c) 2021 Niklas von Hertzen\n\nPermission is hereby granted, free of charge, to any person\nobtaining a copy of this software and associated documentation\nfiles (the \"Software\"), to deal in the Software without\nrestriction, including without limitation the rights to use,\ncopy, modify, merge, publish, distribute, sublicense, and/or sell\ncopies of the Software, and to permit persons to whom the\nSoftware is furnished to do so, subject to the following\nconditions:\n\nThe above copyright notice and this permission notice shall be\nincluded in all copies or substantial portions of the Software.\n\nTHE SOFTWARE IS PROVIDED \"AS IS\", WITHOUT WARRANTY OF ANY KIND,\nEXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES\nOF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND\nNONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT\nHOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY,\nWHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING\nFROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR\nOTHER DEALINGS IN THE SOFTWARE.",
+    "ecosystem": "npm"
+  },
   {
     "name": "tiny-invariant",
     "version": "1.3.3",
@@ -4944,6 +5236,14 @@
     "license_text": "MIT License\n\nCopyright (c) Meta Platforms, Inc. and affiliates.\n\nPermission is hereby granted, free of charge, to any person obtaining a copy\nof this software and associated documentation files (the \"Software\"), to deal\nin the Software without restriction, including without limitation the rights\nto use, copy, modify, merge, publish, distribute, sublicense, and/or sell\ncopies of the Software, and to permit persons to whom the Software is\nfurnished to do so, subject to the following conditions:\n\nThe above copyright notice and this permission notice shall be included in all\ncopies or substantial portions of the Software.\n\nTHE SOFTWARE IS PROVIDED \"AS IS\", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR\nIMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,\nFITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE\nAUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER\nLIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,\nOUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE\nSOFTWARE.\n",
     "ecosystem": "npm"
   },
+  {
+    "name": "utrie",
+    "version": "1.0.2",
+    "license": "MIT",
+    "repository": "ssh://git@github.com/niklasvh/utrie",
+    "license_text": "Copyright (c) 2021 Niklas von Hertzen\n\nPermission is hereby granted, free of charge, to any person\nobtaining a copy of this software and associated documentation\nfiles (the \"Software\"), to deal in the Software without\nrestriction, including without limitation the rights to use,\ncopy, modify, merge, publish, distribute, sublicense, and/or sell\ncopies of the Software, and to permit persons to whom the\nSoftware is furnished to do so, subject to the following\nconditions:\n\nThe above copyright notice and this permission notice shall be\nincluded in all copies or substantial portions of the Software.\n\nTHE SOFTWARE IS PROVIDED \"AS IS\", WITHOUT WARRANTY OF ANY KIND,\nEXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES\nOF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND\nNONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT\nHOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY,\nWHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING\nFROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR\nOTHER DEALINGS IN THE SOFTWARE.",
+    "ecosystem": "npm"
+  },
   {
     "name": "uuid",
     "version": "11.1.1",
diff --git a/apps/web/hooks/domains/comments/use-preview-feedback.test.tsx b/apps/web/hooks/domains/comments/use-preview-feedback.test.tsx
new file mode 100644
index 0000000000..a09b945487
--- /dev/null
+++ b/apps/web/hooks/domains/comments/use-preview-feedback.test.tsx
@@ -0,0 +1,136 @@
+import { act, cleanup, renderHook, waitFor } from "@testing-library/react";
+import { afterEach, beforeEach, describe, expect, it, vi } from "vitest";
+import { StateProvider, useAppStoreApi } from "@/components/state-provider";
+import type { TaskPreviewFeedbackSnapshot } from "@/lib/types/http";
+
+const api = vi.hoisted(() => ({
+  getTaskPreviewFeedback: vi.fn(),
+  createTaskPreviewFeedback: vi.fn(),
+  updateTaskPreviewFeedback: vi.fn(),
+  deleteTaskPreviewFeedback: vi.fn(),
+  clearTaskPreviewFeedback: vi.fn(),
+}));
+vi.mock("@/lib/api/domains/preview-feedback-api", () => api);
+
+import { usePreviewFeedback } from "./use-preview-feedback";
+
+const snapshot = (revision: number): TaskPreviewFeedbackSnapshot => ({
+  task_id: "task-1",
+  revision,
+  items: [
+    {
+      id: `feedback-${revision}`,
+      task_id: "task-1",
+      kind: "text",
+      comment: `comment ${revision}`,
+      source_kind: "browser",
+      source_label: "Local app",
+      page_route: "/products",
+      page_title: "Products",
+      selected_text: "Choose a plan",
+      text_anchor: {
+        start: { node_path: [0], offset: 0 },
+        end: { node_path: [0], offset: 13 },
+      },
+      version: 1,
+      created_at: "2026-09-15T00:00:00Z",
+      updated_at: "2026-09-15T00:00:00Z",
+    },
+  ],
+});
+
+function wrapper({ children }: { children: React.ReactNode }) {
+  return <StateProvider>{children}</StateProvider>;
+}
+
+function useTwoConsumers() {
+  const store = useAppStoreApi();
+  return { store, first: usePreviewFeedback("task-1"), second: usePreviewFeedback("task-1") };
+}
+
+afterEach(cleanup);
+
+describe("usePreviewFeedback", () => {
+  beforeEach(() => {
+    vi.clearAllMocks();
+    api.getTaskPreviewFeedback.mockResolvedValue(snapshot(1));
+  });
+
+  it("deduplicates loading and shares one task snapshot", async () => {
+    const { result } = renderHook(useTwoConsumers, { wrapper });
+    act(() => result.current.store.getState().setConnectionStatus("connected"));
+
+    await waitFor(() => expect(result.current.first.items).toHaveLength(1));
+    expect(api.getTaskPreviewFeedback).toHaveBeenCalledTimes(1);
+    expect(result.current.second.items).toEqual(result.current.first.items);
+  });
+
+  it("refreshes the collection after reconnect", async () => {
+    api.getTaskPreviewFeedback.mockResolvedValue(snapshot(2));
+    const { result } = renderHook(
+      () => {
+        const store = useAppStoreApi();
+        return { store, feedback: usePreviewFeedback("task-1") };
+      },
+      { wrapper },
+    );
+    act(() => {
+      result.current.store.getState().setTaskPreviewFeedback("task-1", snapshot(1));
+      result.current.store.getState().setConnectionStatus("connected");
+    });
+
+    await waitFor(() => expect(result.current.feedback.snapshot?.revision).toBe(2));
+    expect(api.getTaskPreviewFeedback).toHaveBeenCalledWith("task-1");
+  });
+
+  it("keeps idempotency IDs independent for concurrent failed drafts", async () => {
+    const requests: Array<{
+      input: { id: string; comment: string };
+      resolve: (value: TaskPreviewFeedbackSnapshot) => void;
+      reject: (error: Error) => void;
+    }> = [];
+    api.createTaskPreviewFeedback.mockImplementation(
+      (input: { id: string; comment: string }) =>
+        new Promise<TaskPreviewFeedbackSnapshot>((resolve, reject) => {
+          requests.push({ input, resolve, reject });
+        }),
+    );
+    const { result } = renderHook(() => usePreviewFeedback("task-1"), { wrapper });
+    const firstDraft = {
+      kind: "text" as const,
+      comment: "first",
+      sourceKind: "browser" as const,
+      sourceLabel: "Local app",
+      pageRoute: "/checkout",
+      pageTitle: "Checkout",
+    };
+    const secondDraft = { ...firstDraft, comment: "second" };
+
+    let firstRequest: Promise<TaskPreviewFeedbackSnapshot | null> | undefined;
+    let secondRequest: Promise<TaskPreviewFeedbackSnapshot | null> | undefined;
+    act(() => {
+      firstRequest = result.current.create(firstDraft);
+      secondRequest = result.current.create(secondDraft);
+    });
+    await waitFor(() => expect(requests).toHaveLength(2));
+    expect(requests[0].input.id).not.toBe(requests[1].input.id);
+
+    await act(async () => {
+      requests[1].resolve(snapshot(2));
+      await secondRequest;
+      requests[0].reject(new Error("first request failed"));
+      await firstRequest;
+    });
+
+    let retry: Promise<TaskPreviewFeedbackSnapshot | null> | undefined;
+    act(() => {
+      retry = result.current.create(firstDraft);
+    });
+    await waitFor(() => expect(requests).toHaveLength(3));
+    expect(requests[2].input.id).toBe(requests[0].input.id);
+    await act(async () => {
+      requests[2].resolve(snapshot(3));
+      await retry;
+    });
+  });
+});
diff --git a/apps/web/hooks/domains/comments/use-preview-feedback.ts b/apps/web/hooks/domains/comments/use-preview-feedback.ts
new file mode 100644
index 0000000000..e6b4229784
--- /dev/null
+++ b/apps/web/hooks/domains/comments/use-preview-feedback.ts
@@ -0,0 +1,176 @@
+import { useCallback, useEffect, useRef, useState } from "react";
+import { useAppStore, useAppStoreApi } from "@/components/state-provider";
+import {
+  clearTaskPreviewFeedback,
+  createTaskPreviewFeedback,
+  deleteTaskPreviewFeedback,
+  getTaskPreviewFeedback,
+  updateTaskPreviewFeedback,
+  type CreateTaskPreviewFeedbackInput,
+} from "@/lib/api/domains/preview-feedback-api";
+import type { AppState } from "@/lib/state/store";
+import type { TaskPreviewFeedbackSnapshot } from "@/lib/types/http";
+import { generateUUID } from "@/lib/utils";
+
+type AppStore = ReturnType<typeof useAppStoreApi>;
+const loadsByStore = new WeakMap<AppStore, Map<string, Promise<void>>>();
+
+function storeLoads(store: AppStore) {
+  let loads = loadsByStore.get(store);
+  if (!loads) {
+    loads = new Map();
+    loadsByStore.set(store, loads);
+  }
+  return loads;
+}
+
+function errorMessage(error: unknown) {
+  return error instanceof Error ? error.message : String(error);
+}
+
+function loadPreviewFeedback(store: AppStore, taskId: string, force: boolean) {
+  const state = store.getState();
+  if (!force && state.previewFeedback.loadedByTaskId[taskId]) return Promise.resolve();
+  const loads = storeLoads(store);
+  const current = loads.get(taskId);
+  if (current) return current;
+
+  state.setTaskPreviewFeedbackLoading(taskId, true);
+  state.setTaskPreviewFeedbackError(taskId);
+  const request = getTaskPreviewFeedback(taskId)
+    .then((snapshot) => store.getState().setTaskPreviewFeedback(taskId, snapshot))
+    .catch((error: unknown) => {
+      store.getState().setTaskPreviewFeedbackError(taskId, errorMessage(error));
+    })
+    .finally(() => loads.delete(taskId));
+  loads.set(taskId, request);
+  return request;
+}
+
+function conflictSnapshot(error: unknown): TaskPreviewFeedbackSnapshot | undefined {
+  if (!error || typeof error !== "object") return undefined;
+  const details = (error as { details?: { snapshot?: TaskPreviewFeedbackSnapshot } }).details;
+  return details?.snapshot;
+}
+
+type CreateDraft = Omit<CreateTaskPreviewFeedbackInput, "taskId" | "id">;
+
+function usePreviewFeedbackMutations(taskId: string | null | undefined, store: AppStore) {
+  const [isMutating, setIsMutating] = useState(false);
+  const [mutationError, setMutationError] = useState<string | null>(null);
+  const pendingCreate = useRef<Map<string, string>>(new Map());
+
+  useEffect(() => {
+    pendingCreate.current.clear();
+  }, [taskId]);
+
+  const apply = useCallback(
+    async (operation: () => Promise<TaskPreviewFeedbackSnapshot>) => {
+      if (!taskId) return null;
+      setIsMutating(true);
+      setMutationError(null);
+      try {
+        const snapshot = await operation();
+        store.getState().setTaskPreviewFeedback(taskId, snapshot);
+        return snapshot;
+      } catch (error) {
+        const snapshot = conflictSnapshot(error);
+        if (snapshot) store.getState().setTaskPreviewFeedback(taskId, snapshot);
+        setMutationError(errorMessage(error));
+        return null;
+      } finally {
+        setIsMutating(false);
+      }
+    },
+    [store, taskId],
+  );
+
+  const create = useCallback(
+    async (draft: CreateDraft) => {
+      if (!taskId) return null;
+      const key = JSON.stringify([taskId, draft]);
+      const id = pendingCreate.current.get(key) ?? generateUUID();
+      pendingCreate.current.set(key, id);
+      const result = await apply(() =>
+        createTaskPreviewFeedback({
+          ...draft,
+          taskId,
+          id,
+        }),
+      );
+      if (result) pendingCreate.current.delete(key);
+      return result;
+    },
+    [apply, taskId],
+  );
+
+  const update = useCallback(
+    (id: string, comment: string, expectedVersion: number) =>
+      apply(() =>
+        updateTaskPreviewFeedback({ taskId: taskId ?? "", id, comment, expectedVersion }),
+      ),
+    [apply, taskId],
+  );
+  const remove = useCallback(
+    (id: string, expectedVersion: number) =>
+      apply(() => deleteTaskPreviewFeedback({ taskId: taskId ?? "", id, expectedVersion })),
+    [apply, taskId],
+  );
+  const clear = useCallback(
+    (expectedRevision: number) =>
+      apply(() => clearTaskPreviewFeedback(taskId ?? "", expectedRevision)),
+    [apply, taskId],
+  );
+
+  return { create, update, remove, clear, isMutating, mutationError };
+}
+
+/** Task-owned pending rendered-page feedback shared by every task surface. */
+export function usePreviewFeedback(taskId: string | null | undefined) {
+  const store = useAppStoreApi();
+  const snapshot = useAppStore((state) =>
+    taskId ? state.previewFeedback.byTaskId[taskId] : undefined,
+  );
+  const isLoading = useAppStore((state) =>
+    taskId ? (state.previewFeedback.loadingByTaskId[taskId] ?? false) : false,
+  );
+  const isLoaded = useAppStore((state) =>
+    taskId ? (state.previewFeedback.loadedByTaskId[taskId] ?? false) : false,
+  );
+  const loadError = useAppStore((state) =>
+    taskId ? (state.previewFeedback.errorByTaskId[taskId] ?? null) : null,
+  );
+  const connectionStatus = useAppStore((state) => state.connection.status);
+  const previousConnection = useRef(connectionStatus);
+
+  useEffect(() => {
+    const previous = previousConnection.current;
+    previousConnection.current = connectionStatus;
+    if (!taskId || connectionStatus !== "connected") return;
+    void loadPreviewFeedback(store, taskId, previous !== "connected");
+  }, [connectionStatus, store, taskId]);
+
+  const refetch = useCallback(
+    () => (taskId ? loadPreviewFeedback(store, taskId, true) : Promise.resolve()),
+    [store, taskId],
+  );
+  const mutations = usePreviewFeedbackMutations(taskId, store);
+
+  return {
+    snapshot,
+    items: snapshot?.items ?? [],
+    isLoading,
+    isLoaded,
+    loadError,
+    refetch,
+    ...mutations,
+  };
+}
+
+export function applyPreviewFeedbackSnapshot(
+  state: Pick<AppState, "setTaskPreviewFeedback">,
+  taskId: string,
+  snapshot: TaskPreviewFeedbackSnapshot,
+) {
+  state.setTaskPreviewFeedback(taskId, snapshot);
+}
diff --git a/apps/web/hooks/domains/session/use-queue-admission.ts b/apps/web/hooks/domains/session/use-queue-admission.ts
index e71873cd82..fe87b31d44 100644
--- a/apps/web/hooks/domains/session/use-queue-admission.ts
+++ b/apps/web/hooks/domains/session/use-queue-admission.ts
@@ -48,6 +48,7 @@ export function useQueueAdmissionAction(
       contextFilesMeta,
       clientQueueId,
       planCommentRefs,
+      previewFeedbackRefs,
       requirePrimarySession,
     }: QueueMessageInput) => {
       if (!identity || identity.task_id !== taskId) return false;
@@ -67,6 +68,7 @@ export function useQueueAdmissionAction(
             entity_references: entityReferences,
             ...(clientQueueId ? { client_queue_id: clientQueueId } : {}),
             ...(planCommentRefs?.length ? { plan_comment_refs: planCommentRefs } : {}),
+            ...(previewFeedbackRefs?.length ? { preview_feedback_refs: previewFeedbackRefs } : {}),
             ...(requirePrimarySession ? { require_primary_session: true } : {}),
             ...(contextFilesMeta ? { context_files: contextFilesMeta } : {}),
           },
diff --git a/apps/web/hooks/domains/session/use-queue-types.ts b/apps/web/hooks/domains/session/use-queue-types.ts
index 0b78790a71..2f3822a040 100644
--- a/apps/web/hooks/domains/session/use-queue-types.ts
+++ b/apps/web/hooks/domains/session/use-queue-types.ts
@@ -1,6 +1,6 @@
 import type { QueueMessageParams } from "@/lib/api/domains/queue-api";
 import type { EntityReference } from "@/lib/types/entity-reference";
-import type { TaskPlanCommentRef } from "@/lib/types/http";
+import type { TaskPlanCommentRef, TaskPreviewFeedbackRef } from "@/lib/types/http";
 
 export type MessageAttachment = {
   type: string;
@@ -22,5 +22,6 @@ export type QueueMessageInput = {
   contextFilesMeta?: QueueMessageParams["context_files"];
   clientQueueId?: string;
   planCommentRefs?: TaskPlanCommentRef[];
+  previewFeedbackRefs?: TaskPreviewFeedbackRef[];
   requirePrimarySession?: boolean;
 };
diff --git a/apps/web/hooks/domains/session/use-queue.plan-comments.test.ts b/apps/web/hooks/domains/session/use-queue.plan-comments.test.ts
index 213bf610f6..cd5c986726 100644
--- a/apps/web/hooks/domains/session/use-queue.plan-comments.test.ts
+++ b/apps/web/hooks/domains/session/use-queue.plan-comments.test.ts
@@ -127,6 +127,29 @@ describe("useQueue task plan comment admission", () => {
     );
   });
 
+  it("forwards task preview feedback admission fields", async () => {
+    queueApiMock.queueMessage.mockResolvedValue(entry());
+    const { result } = renderHook(() => useQueue(SESSION_ID));
+    await waitFor(() => expect(queueApiMock.getQueueStatus).toHaveBeenCalled());
+    queueApiMock.queueMessage.mockClear();
+
+    await act(async () => {
+      await result.current.queue({
+        taskId: TASK_ID,
+        content: "",
+        clientQueueId: "client-preview-1",
+        previewFeedbackRefs: [{ id: "preview-1", version: 4 }],
+      });
+    });
+
+    expect(queueApiMock.queueMessage).toHaveBeenCalledWith(
+      expect.objectContaining({
+        client_queue_id: "client-preview-1",
+        preview_feedback_refs: [{ id: "preview-1", version: 4 }],
+      }),
+    );
+  });
+
   it("keeps an accepted queue admission successful when reconciliation fails", async () => {
     queueApiMock.queueMessage.mockResolvedValue(entry({ id: "accepted" }));
     const { result } = renderHook(() => useQueue(SESSION_ID));
diff --git a/apps/web/hooks/message-request.ts b/apps/web/hooks/message-request.ts
new file mode 100644
index 0000000000..74920d61de
--- /dev/null
+++ b/apps/web/hooks/message-request.ts
@@ -0,0 +1,173 @@
+import type { MessageAttachment } from "@/components/task/chat/chat-input-container";
+import { MessageSendError } from "@/lib/chat/message-send-error";
+import { listTaskSessions } from "@/lib/api/domains/session-api";
+import type { EntityReference } from "@/lib/types/entity-reference";
+import type { Message, TaskPlanCommentRef, TaskPreviewFeedbackRef } from "@/lib/types/http";
+import { generateUUID } from "@/lib/utils";
+import { getWebSocketClient } from "@/lib/ws/connection";
+
+type SendMessagePayload = {
+  taskId: string;
+  resolvedSessionId: string;
+  clientMessageId?: string;
+  finalMessage: string;
+  modelToSend: string | undefined;
+  planMode: boolean;
+  hasReviewComments?: boolean;
+  attachments?: MessageAttachment[];
+  contextFilesMeta?: Array<{ path: string; name: string; is_directory?: boolean }>;
+  entityReferences?: EntityReference[];
+  planCommentRefs?: TaskPlanCommentRef[];
+  previewFeedbackRefs?: TaskPreviewFeedbackRef[];
+  requirePrimarySession?: boolean;
+};
+
+type MessageListResponse = { messages?: Message[] };
+
+function isUncertainMessageTransportError(error: unknown): boolean {
+  if (!(error instanceof Error)) return false;
+  const message = error.message.toLowerCase();
+  return (
+    message.includes("websocket request timed out") || message === "websocket connection closed"
+  );
+}
+
+export async function findMessageByID(
+  client: ReturnType<typeof getWebSocketClient>,
+  taskId: string,
+  sessionId: string,
+  messageId: string,
+): Promise<Message | undefined> {
+  if (!client) return undefined;
+  const sessionIds = [sessionId];
+  try {
+    const response = await listTaskSessions(taskId);
+    for (const session of response.sessions ?? []) {
+      if (session.id && !sessionIds.includes(session.id)) sessionIds.push(session.id);
+    }
+  } catch {
+    // The submitted session remains a useful reconciliation fallback.
+  }
+  try {
+    for (const candidateSessionId of sessionIds) {
+      const response = await client.request<MessageListResponse>(
+        "message.list",
+        { session_id: candidateSessionId, limit: 100, sort: "desc" },
+        5000,
+      );
+      const found = response.messages?.find((message) => message.id === messageId);
+      if (found) return found;
+    }
+    return undefined;
+  } catch {
+    return undefined;
+  }
+}
+
+async function waitForConnected(client: NonNullable<ReturnType<typeof getWebSocketClient>>) {
+  const getStatus = client.getStatus?.bind(client);
+  if (!getStatus || getStatus() === "connected") return true;
+  const deadline = Date.now() + 3000;
+  while (Date.now() < deadline) {
+    await new Promise((resolve) => setTimeout(resolve, 100));
+    if (getStatus() === "connected") return true;
+  }
+  return false;
+}
+
+type MessageReconciliation = {
+  client: NonNullable<ReturnType<typeof getWebSocketClient>>;
+  taskId: string;
+  sessionId: string;
+  messageId: string;
+  request: () => Promise<Message | undefined>;
+  originalError: unknown;
+};
+
+async function reconcileUncertainMessage({
+  client,
+  taskId,
+  sessionId,
+  messageId,
+  request,
+  originalError,
+}: MessageReconciliation) {
+  const committed = await findMessageByID(client, taskId, sessionId, messageId);
+  if (committed) return committed;
+  if (!(await waitForConnected(client))) throw originalError;
+
+  try {
+    return await request();
+  } catch (retryError) {
+    const retriedMessage = await findMessageByID(client, taskId, sessionId, messageId);
+    if (retriedMessage) return retriedMessage;
+    throw retryError;
+  }
+}
+
+function buildMessageRequestPayload(payload: SendMessagePayload, stableMessageId: string) {
+  const {
+    taskId,
+    resolvedSessionId,
+    finalMessage,
+    modelToSend,
+    planMode,
+    hasReviewComments,
+    attachments,
+    contextFilesMeta,
+    entityReferences,
+    planCommentRefs,
+    previewFeedbackRefs,
+    requirePrimarySession,
+  } = payload;
+  return {
+    task_id: taskId,
+    session_id: resolvedSessionId,
+    client_message_id: stableMessageId,
+    content: finalMessage,
+    ...(modelToSend && { model: modelToSend }),
+    ...(planMode && { plan_mode: true }),
+    ...(hasReviewComments && { has_review_comments: true }),
+    ...(attachments?.length && { attachments }),
+    ...(contextFilesMeta && { context_files: contextFilesMeta }),
+    ...(entityReferences && { entity_references: entityReferences }),
+    ...(planCommentRefs?.length && { plan_comment_refs: planCommentRefs }),
+    ...(previewFeedbackRefs?.length && { preview_feedback_refs: previewFeedbackRefs }),
+    ...(requirePrimarySession && { require_primary_session: true }),
+  };
+}
+
+export async function sendMessageRequest(
+  payload: SendMessagePayload,
+): Promise<Message | undefined> {
+  const client = getWebSocketClient();
+  if (!client) {
+    throw new MessageSendError(
+      "connection-unavailable",
+      "Connection unavailable. Reconnect and try again.",
+    );
+  }
+
+  const stableMessageId = payload.clientMessageId ?? generateUUID();
+  const requestPayload = buildMessageRequestPayload(payload, stableMessageId);
+  const request = () =>
+    client.request<Message | undefined>(
+      "message.add",
+      requestPayload,
+      payload.attachments?.length ? 30000 : 10000,
+    );
+
+  try {
+    return await request();
+  } catch (error) {
+    if (!isUncertainMessageTransportError(error)) throw error;
+    return reconcileUncertainMessage({
+      client,
+      taskId: payload.taskId,
+      sessionId: payload.resolvedSessionId,
+      messageId: stableMessageId,
+      request,
+      originalError: error,
+    });
+  }
+}
diff --git a/apps/web/hooks/use-inspect-mode.test.ts b/apps/web/hooks/use-inspect-mode.test.ts
deleted file mode 100644
index 2a138fdc56..0000000000
--- a/apps/web/hooks/use-inspect-mode.test.ts
+++ /dev/null
@@ -1,129 +0,0 @@
-import { describe, it, expect, vi, beforeEach } from "vitest";
-import { renderHook, act } from "@testing-library/react";
-import { useInspectMode } from "./use-inspect-mode";
-import type { AnnotationWirePayload } from "@/lib/preview-inspect-bridge";
-
-vi.mock("@/lib/preview-inspect-bridge", async () => {
-  const actual = await vi.importActual<typeof import("@/lib/preview-inspect-bridge")>(
-    "@/lib/preview-inspect-bridge",
-  );
-  return {
-    ...actual,
-    sendToggleInspect: vi.fn(),
-    sendClearAnnotations: vi.fn(),
-    sendRemoveMarker: vi.fn(),
-  };
-});
-
-import { sendRemoveMarker } from "@/lib/preview-inspect-bridge";
-
-function setupIframe() {
-  const iframe = document.createElement("iframe");
-  document.body.appendChild(iframe);
-  const ref = { current: iframe };
-  return { iframe, ref };
-}
-
-function makeAnnotation(id: string): AnnotationWirePayload {
-  return {
-    id,
-    kind: "pin",
-    pagePath: "/x",
-    comment: "",
-    element: null,
-  };
-}
-
-function dispatchMessage(source: Window | null, payload: unknown) {
-  window.dispatchEvent(new MessageEvent("message", { data: payload, source }));
-}
-
-function postAnnotation(iframe: HTMLIFrameElement, id: string) {
-  dispatchMessage(iframe.contentWindow, {
-    source: "kandev-inspector",
-    type: "annotation-added",
-    payload: makeAnnotation(id),
-  });
-}
-
-describe("useInspectMode", () => {
-  beforeEach(() => {
-    document.body.innerHTML = "";
-    vi.clearAllMocks();
-  });
-
-  it("assigns monotonically increasing numbers across add/remove cycles", () => {
-    const { iframe, ref } = setupIframe();
-    const { result } = renderHook(() => useInspectMode(ref));
-
-    act(() => postAnnotation(iframe, "a"));
-    act(() => postAnnotation(iframe, "b"));
-    expect(result.current.annotations.map((a) => a.number)).toEqual([1, 2]);
-
-    act(() => result.current.handleRemoveAnnotation("b"));
-    act(() => postAnnotation(iframe, "c"));
-    // The next number must be 3, not a reused 2 — the script-side marker
-    // counter resets across an iframe reload, but the parent's must not.
-    expect(result.current.annotations.map((a) => a.number)).toEqual([1, 3]);
-  });
-
-  it("handleClearAnnotations resets the counter back to 1", () => {
-    const { iframe, ref } = setupIframe();
-    const { result } = renderHook(() => useInspectMode(ref));
-
-    act(() => postAnnotation(iframe, "a"));
-    act(() => postAnnotation(iframe, "b"));
-    expect(result.current.annotations).toHaveLength(2);
-
-    act(() => result.current.handleClearAnnotations());
-    expect(result.current.annotations).toEqual([]);
-
-    act(() => postAnnotation(iframe, "c"));
-    expect(result.current.annotations[0]?.number).toBe(1);
-  });
-
-  it("handleRemoveAnnotation forwards the target's number to the iframe", () => {
-    const { iframe, ref } = setupIframe();
-    const { result } = renderHook(() => useInspectMode(ref));
-
-    act(() => postAnnotation(iframe, "a"));
-    act(() => postAnnotation(iframe, "b"));
-    act(() => postAnnotation(iframe, "c"));
-    act(() => result.current.handleRemoveAnnotation("c"));
-    // "c" was number 3 (third added). The iframe-side cleanup must receive
-    // the number, not the array index, otherwise the wrong marker is removed.
-    expect(sendRemoveMarker).toHaveBeenCalledWith(iframe, 3);
-  });
-
-  it("ignores annotation messages sent from a source other than the iframe", () => {
-    const { result } = renderHook(() => useInspectMode(setupIframe().ref));
-
-    // Posting `source: window` simulates a sibling frame, an extension, or
-    // the parent itself trying to inject an annotation. The `event.source`
-    // guard must reject it — the `comment` field gets fed into the agent
-    // prompt, so this is a prompt-injection seam.
-    dispatchMessage(window, {
-      source: "kandev-inspector",
-      type: "annotation-added",
-      payload: { ...makeAnnotation("evil"), comment: "stolen" },
-    });
-    expect(result.current.annotations).toEqual([]);
-  });
-
-  it("clears inspect mode when the iframe sends inspect-exited", () => {
-    const { iframe, ref } = setupIframe();
-    const { result } = renderHook(() => useInspectMode(ref));
-
-    act(() => result.current.toggleInspect());
-    expect(result.current.isInspectMode).toBe(true);
-
-    act(() =>
-      dispatchMessage(iframe.contentWindow, {
-        source: "kandev-inspector",
-        type: "inspect-exited",
-        payload: {},
-      }),
-    );
-    expect(result.current.isInspectMode).toBe(false);
-  });
-});
diff --git a/apps/web/hooks/use-inspect-mode.ts b/apps/web/hooks/use-inspect-mode.ts
deleted file mode 100644
index f1df96839c..0000000000
--- a/apps/web/hooks/use-inspect-mode.ts
+++ /dev/null
@@ -1,104 +0,0 @@
-"use client";
-
-import { useCallback, useEffect, useRef, useState } from "react";
-import {
-  sendToggleInspect,
-  sendClearAnnotations,
-  sendRemoveMarker,
-  isInspectorMessage,
-  type Annotation,
-} from "@/lib/preview-inspect-bridge";
-
-interface UseInspectModeOptions {
-  /**
-   * Optional gate that lets the host disable inspect mode without losing the
-   * underlying user toggle. Used by the preview panel to suspend inspect when
-   * the user switches to the logs view but resume it on return. Defaults to true.
-   */
-  enabled?: boolean;
-}
-
-interface UseInspectModeResult {
-  /** Effective inspect state (raw toggle AND `options.enabled`). */
-  isInspectMode: boolean;
-  annotations: Annotation[];
-  toggleInspect: () => void;
-  /** Attach to the iframe's `onLoad` to re-arm inspect after iframe refresh. */
-  handleIframeLoad: () => void;
-  handleRemoveAnnotation: (id: string) => void;
-  handleClearAnnotations: () => void;
-}
-
-/**
- * Owns the inspect-mode state and postMessage wiring shared by every panel
- * that hosts a previewed iframe (currently `BrowserPanel` and `PreviewPanel`).
- *
- * The hook keeps numbering monotonic via a `useRef` counter so panel labels
- * stay correct across remove + add and across iframe refresh. The script-side
- * marker counter resets on iframe reload; the parent counter does not.
- */
-export function useInspectMode(
-  iframeRef: React.RefObject<HTMLIFrameElement | null>,
-  options: UseInspectModeOptions = {},
-): UseInspectModeResult {
-  const [isInspectMode, setIsInspectMode] = useState(false);
-  const [annotations, setAnnotations] = useState<Annotation[]>([]);
-  const nextNumber = useRef(1);
-  const effectiveIsInspectMode = isInspectMode && (options.enabled ?? true);
-
-  useEffect(() => {
-    if (!iframeRef.current) return;
-    sendToggleInspect(iframeRef.current, effectiveIsInspectMode);
-  }, [iframeRef, effectiveIsInspectMode]);
-
-  useEffect(() => {
-    function handleMessage(event: MessageEvent) {
-      // Reject messages from anything other than the previewed iframe.
-      // Without this guard, any frame/extension that can post to the parent
-      // could craft a fake annotation whose `comment` text gets formatted into
-      // the prompt we send to the AI agent — a direct prompt-injection seam.
-      if (event.source !== iframeRef.current?.contentWindow) return;
-      if (!isInspectorMessage(event.data)) return;
-      if (event.data.type === "annotation-added") {
-        const number = nextNumber.current++;
-        setAnnotations((prev) => [...prev, { ...event.data.payload, number }]);
-      } else if (event.data.type === "inspect-exited") {
-        setIsInspectMode(false);
-      }
-    }
-    window.addEventListener("message", handleMessage);
-    return () => window.removeEventListener("message", handleMessage);
-  }, [iframeRef]);
-
-  const handleIframeLoad = useCallback(() => {
-    if (iframeRef.current && effectiveIsInspectMode) {
-      sendToggleInspect(iframeRef.current, true);
-    }
-  }, [iframeRef, effectiveIsInspectMode]);
-
-  const handleRemoveAnnotation = useCallback(
-    (id: string) => {
-      const target = annotations.find((a) => a.id === id);
-      if (target && iframeRef.current) sendRemoveMarker(iframeRef.current, target.number);
-      setAnnotations((prev) => prev.filter((a) => a.id !== id));
-    },
-    [annotations, iframeRef],
-  );
-
-  const handleClearAnnotations = useCallback(() => {
-    setAnnotations([]);
-    nextNumber.current = 1;
-    if (iframeRef.current) sendClearAnnotations(iframeRef.current);
-  }, [iframeRef]);
-
-  const toggleInspect = useCallback(() => setIsInspectMode((v) => !v), []);
-
-  return {
-    isInspectMode: effectiveIsInspectMode,
-    annotations,
-    toggleInspect,
-    handleIframeLoad,
-    handleRemoveAnnotation,
-    handleClearAnnotations,
-  };
-}
diff --git a/apps/web/hooks/use-message-handler.plan-comments.test.ts b/apps/web/hooks/use-message-handler.plan-comments.test.ts
index fce046d51a..a8c0ed24e6 100644
--- a/apps/web/hooks/use-message-handler.plan-comments.test.ts
+++ b/apps/web/hooks/use-message-handler.plan-comments.test.ts
@@ -8,13 +8,16 @@ const listTaskSessionsMock = vi.hoisted(() => vi.fn());
 const queueMock = vi.hoisted(() => vi.fn());
 const addMessageMock = vi.hoisted(() => vi.fn());
 const setTaskPlanCommentsMock = vi.hoisted(() => vi.fn());
+const setTaskPreviewFeedbackMock = vi.hoisted(() => vi.fn());
 const getTaskPlanCommentsMock = vi.hoisted(() => vi.fn());
+const getTaskPreviewFeedbackMock = vi.hoisted(() => vi.fn());
 const storeState = vi.hoisted(() => ({
   current: {
     taskSessions: { items: {} as Record<string, unknown> },
     queue: { metaBySessionId: {} as Record<string, { count: number }> },
     addMessage: addMessageMock,
     setTaskPlanComments: setTaskPlanCommentsMock,
+    setTaskPreviewFeedback: setTaskPreviewFeedbackMock,
   },
 }));
 
@@ -30,6 +33,9 @@ vi.mock("@/components/state-provider", () => ({
 vi.mock("@/lib/api/domains/plan-comment-api", () => ({
   getTaskPlanComments: getTaskPlanCommentsMock,
 }));
+vi.mock("@/lib/api/domains/preview-feedback-api", () => ({
+  getTaskPreviewFeedback: getTaskPreviewFeedbackMock,
+}));
 vi.mock("./domains/session/use-queue", () => ({
   useQueue: () => ({ queue: queueMock }),
 }));
@@ -37,6 +43,7 @@ vi.mock("./domains/session/use-queue", () => ({
 const TASK_ID = "task-1";
 const SESSION_ID = "session-1";
 const COMMENT_ID = "comment-1";
+const PREVIEW_ID = "preview-1";
 const MESSAGE_ADD_ACTION = "message.add";
 
 function selectedSession(state: string, foregroundActivity?: string) {
@@ -69,6 +76,11 @@ beforeEach(() => {
     revision: 3,
     comments: [],
   });
+  getTaskPreviewFeedbackMock.mockResolvedValue({
+    task_id: TASK_ID,
+    revision: 4,
+    items: [],
+  });
 });
 
 describe("sendMessageRequest task plan comments", () => {
@@ -97,6 +109,29 @@ describe("sendMessageRequest task plan comments", () => {
       10000,
     );
   });
+
+  it("forwards exact preview feedback references", async () => {
+    const request = vi.fn().mockResolvedValue(undefined);
+    getWebSocketClientMock.mockReturnValue({ request });
+
+    await sendMessageRequest({
+      taskId: TASK_ID,
+      resolvedSessionId: SESSION_ID,
+      finalMessage: "",
+      modelToSend: undefined,
+      planMode: false,
+      previewFeedbackRefs: [{ id: PREVIEW_ID, version: 3 }],
+    });
+
+    expect(request).toHaveBeenCalledWith(
+      MESSAGE_ADD_ACTION,
+      expect.objectContaining({
+        content: "",
+        preview_feedback_refs: [{ id: PREVIEW_ID, version: 3 }],
+      }),
+      10000,
+    );
+  });
 });
 
 describe("sendMessageRequest routed reconciliation", () => {
@@ -165,6 +200,27 @@ describe("useMessageHandler queued plan comments", () => {
     expect(request).not.toHaveBeenCalled();
   });
 
+  it("queues preview feedback with the same idempotent admission", async () => {
+    selectedSession("RUNNING", "generating");
+    const { result } = renderMessageHandler();
+
+    await act(async () => {
+      await result.current.handleSendMessage({
+        message: "Use this preview feedback",
+        previewFeedbackRefs: [{ id: PREVIEW_ID, version: 5 }],
+      } as never);
+    });
+
+    expect(queueMock).toHaveBeenCalledWith(
+      expect.objectContaining({
+        taskId: TASK_ID,
+        clientQueueId: expect.any(String),
+        previewFeedbackRefs: [{ id: PREVIEW_ID, version: 5 }],
+      }),
+    );
+    expect(getTaskPreviewFeedbackMock).toHaveBeenCalledWith(TASK_ID);
+  });
+
   it("queues displayed task plan references as one idempotent admission", async () => {
     selectedSession("RUNNING", "generating");
     const { result } = renderMessageHandler();
@@ -324,6 +380,48 @@ describe("useMessageHandler direct plan comments", () => {
     expect(sent.plan_comment_refs).toEqual([{ id: COMMENT_ID, version: 2 }]);
   });
 
+  it("reconciles a stale preview snapshot and returns a deterministic error", async () => {
+    selectedSession("WAITING_FOR_INPUT");
+    const snapshot = { task_id: TASK_ID, revision: 9, items: [] };
+    const request = vi.fn().mockRejectedValue(
+      new WebSocketRequestError("Task preview feedback changed", "preview_feedback_changed", {
+        snapshot,
+      }),
+    );
+    getWebSocketClientMock.mockReturnValue({ request });
+    const { result } = renderMessageHandler();
+
+    await expect(
+      result.current.handleSendMessage({
+        message: "Keep my draft",
+        previewFeedbackRefs: [{ id: PREVIEW_ID, version: 1 }],
+      } as never),
+    ).rejects.toMatchObject({ code: "preview-feedback-changed" });
+
+    expect(setTaskPreviewFeedbackMock).toHaveBeenCalledWith(TASK_ID, snapshot);
+  });
+
+  it("refreshes preview feedback after direct acceptance", async () => {
+    selectedSession("WAITING_FOR_INPUT");
+    const request = vi.fn().mockResolvedValue(undefined);
+    getWebSocketClientMock.mockReturnValue({ request });
+    const { result } = renderMessageHandler();
+
+    await result.current.handleSendMessage({
+      message: "Apply it",
+      previewFeedbackRefs: [{ id: PREVIEW_ID, version: 2 }],
+    } as never);
+
+    expect(getTaskPreviewFeedbackMock).toHaveBeenCalledWith(TASK_ID);
+    expect(setTaskPreviewFeedbackMock).toHaveBeenCalledWith(TASK_ID, {
+      task_id: TASK_ID,
+      revision: 4,
+      items: [],
+    });
+  });
+});
+
+describe("useMessageHandler direct admission identity", () => {
   it("reconciles a stale snapshot and returns a deterministic error", async () => {
     selectedSession("WAITING_FOR_INPUT");
     const snapshot = { task_id: TASK_ID, plan_id: "plan-1", revision: 7, comments: [] };
diff --git a/apps/web/hooks/use-message-handler.ts b/apps/web/hooks/use-message-handler.ts
index 5b3a2fd2af..7d6528e235 100644
--- a/apps/web/hooks/use-message-handler.ts
+++ b/apps/web/hooks/use-message-handler.ts
@@ -11,10 +11,14 @@ import type {
 import type { ActiveDocument } from "@/lib/state/slices/ui/types";
 import type { PlanComment } from "@/lib/state/slices/comments";
 import type { ContextFile } from "@/lib/state/context-files-store";
-import type { CustomPrompt, Message, TaskPlanCommentRef } from "@/lib/types/http";
+import type {
+  CustomPrompt,
+  TaskPlanCommentRef,
+  TaskPreviewFeedback,
+  TaskPreviewFeedbackRef,
+} from "@/lib/types/http";
 import type { TaskMentionData } from "@/hooks/use-inline-mention";
 import type { AppState } from "@/lib/state/store";
-import type { EntityReference } from "@/lib/types/entity-reference";
 import { planCommentAdmissionConflict, toTaskPlanCommentRefs } from "@/lib/plan-comment-refs";
 import {
   collectPromptReferenceExpansions,
@@ -27,7 +31,14 @@ import {
 } from "./domains/session/session-input-mode";
 import { t } from "@/lib/i18n";
 import { getTaskPlanComments } from "@/lib/api/domains/plan-comment-api";
-import { listTaskSessions } from "@/lib/api/domains/session-api";
+import { getTaskPreviewFeedback } from "@/lib/api/domains/preview-feedback-api";
+import {
+  previewFeedbackAdmissionConflict,
+  toTaskPreviewFeedbackRefs,
+} from "@/lib/preview-feedback-refs";
+import { findMessageByID, sendMessageRequest } from "./message-request";
+
+export { sendMessageRequest } from "./message-request";
 
 export function buildDocumentContext(
   activeDocument: ActiveDocument | null,
@@ -146,174 +157,13 @@ export interface UseMessageHandlerParams {
   getHasPendingClarification?: () => boolean;
   activeDocument?: ActiveDocument | null;
   planComments?: PlanComment[];
+  previewFeedback?: TaskPreviewFeedback[];
   contextFiles?: ContextFile[];
   prompts?: CustomPrompt[];
 }
 
 export type MessageAdmissionOutcome = "sent" | "queued";
 
-type SendMessagePayload = {
-  taskId: string;
-  resolvedSessionId: string;
-  clientMessageId?: string;
-  finalMessage: string;
-  modelToSend: string | undefined;
-  planMode: boolean;
-  hasReviewComments?: boolean;
-  attachments?: MessageAttachment[];
-  contextFilesMeta?: Array<{ path: string; name: string; is_directory?: boolean }>;
-  entityReferences?: EntityReference[];
-  planCommentRefs?: TaskPlanCommentRef[];
-  requirePrimarySession?: boolean;
-};
-
-type MessageListResponse = { messages?: Message[] };
-
-function isUncertainMessageTransportError(error: unknown): boolean {
-  if (!(error instanceof Error)) return false;
-  const message = error.message.toLowerCase();
-  return (
-    message.includes("websocket request timed out") || message === "websocket connection closed"
-  );
-}
-
-async function findMessageByID(
-  client: ReturnType<typeof getWebSocketClient>,
-  taskId: string,
-  sessionId: string,
-  messageId: string,
-): Promise<Message | undefined> {
-  if (!client) return undefined;
-  const sessionIds = [sessionId];
-  try {
-    const response = await listTaskSessions(taskId);
-    for (const session of response.sessions ?? []) {
-      if (session.id && !sessionIds.includes(session.id)) sessionIds.push(session.id);
-    }
-  } catch {
-    // The submitted session remains a useful reconciliation fallback.
-  }
-  try {
-    for (const candidateSessionId of sessionIds) {
-      const response = await client.request<MessageListResponse>(
-        "message.list",
-        { session_id: candidateSessionId, limit: 100, sort: "desc" },
-        5000,
-      );
-      const found = response.messages?.find((message) => message.id === messageId);
-      if (found) return found;
-    }
-    return undefined;
-  } catch {
-    return undefined;
-  }
-}
-
-async function waitForConnected(client: NonNullable<ReturnType<typeof getWebSocketClient>>) {
-  const getStatus = client.getStatus?.bind(client);
-  if (!getStatus || getStatus() === "connected") return true;
-  const deadline = Date.now() + 3000;
-  while (Date.now() < deadline) {
-    await new Promise((resolve) => setTimeout(resolve, 100));
-    if (getStatus() === "connected") return true;
-  }
-  return false;
-}
-
-type MessageReconciliation = {
-  client: NonNullable<ReturnType<typeof getWebSocketClient>>;
-  taskId: string;
-  sessionId: string;
-  messageId: string;
-  request: () => Promise<Message | undefined>;
-  originalError: unknown;
-};
-
-async function reconcileUncertainMessage({
-  client,
-  taskId,
-  sessionId,
-  messageId,
-  request,
-  originalError,
-}: MessageReconciliation) {
-  const committed = await findMessageByID(client, taskId, sessionId, messageId);
-  if (committed) return committed;
-  if (!(await waitForConnected(client))) throw originalError;
-
-  try {
-    return await request();
-  } catch (retryError) {
-    const retriedMessage = await findMessageByID(client, taskId, sessionId, messageId);
-    if (retriedMessage) return retriedMessage;
-    throw retryError;
-  }
-}
-
-export async function sendMessageRequest(
-  payload: SendMessagePayload,
-): Promise<Message | undefined> {
-  const client = getWebSocketClient();
-  if (!client) {
-    throw new MessageSendError(
-      "connection-unavailable",
-      "Connection unavailable. Reconnect and try again.",
-    );
-  }
-
-  const {
-    taskId,
-    resolvedSessionId,
-    clientMessageId,
-    finalMessage,
-    modelToSend,
-    planMode,
-    hasReviewComments,
-    attachments,
-    contextFilesMeta,
-    entityReferences,
-    planCommentRefs,
-    requirePrimarySession,
-  } = payload;
-  const hasAttachments = attachments && attachments.length > 0;
-  const stableMessageId = clientMessageId ?? generateUUID();
-  const requestPayload = {
-    task_id: taskId,
-    session_id: resolvedSessionId,
-    client_message_id: stableMessageId,
-    content: finalMessage,
-    ...(modelToSend && { model: modelToSend }),
-    ...(planMode && { plan_mode: true }),
-    ...(hasReviewComments && { has_review_comments: true }),
-    ...(hasAttachments && { attachments }),
-    ...(contextFilesMeta && { context_files: contextFilesMeta }),
-    ...(entityReferences && { entity_references: entityReferences }),
-    ...(planCommentRefs?.length && { plan_comment_refs: planCommentRefs }),
-    ...(requirePrimarySession && { require_primary_session: true }),
-  };
-
-  const request = () =>
-    client.request<Message | undefined>(
-      "message.add",
-      requestPayload,
-      hasAttachments ? 30000 : 10000,
-    );
-
-  try {
-    return await request();
-  } catch (error) {
-    if (!isUncertainMessageTransportError(error)) throw error;
-    return reconcileUncertainMessage({
-      client,
-      taskId,
-      sessionId: resolvedSessionId,
-      messageId: stableMessageId,
-      request,
-      originalError: error,
-    });
-  }
-}
-
 const TERMINAL_SESSION_STATES = new Set(["FAILED", "CANCELLED", "COMPLETED"]);
 
 function requireSessionInputMode(state: AppState, selectedSessionId: string): SessionInputMode {
@@ -357,6 +207,17 @@ function normalizePlanCommentSendError(
     : new MessageSendError("primary-session-changed", t("task:primarySessionChangedRetry"));
 }
 
+function normalizePreviewFeedbackSendError(
+  error: unknown,
+  taskId: string,
+  storeApi: ReturnType<typeof useAppStoreApi>,
+): unknown {
+  const snapshot = previewFeedbackAdmissionConflict(error);
+  if (!snapshot) return error;
+  storeApi.getState().setTaskPreviewFeedback(taskId, snapshot);
+  return new MessageSendError("preview-feedback-changed", t("task:previewFeedbackChangedRetry"));
+}
+
 function buildContextFilesMetadata(contextFiles: ContextFile[]) {
   const realFiles = contextFiles.filter(
     (file) => !file.path.startsWith("prompt:") && file.path !== "plan:context",
@@ -378,6 +239,7 @@ async function deliverComposedMessage({
   planModeEnabled,
   hasPendingClarification,
   planCommentRefs,
+  previewFeedbackRefs,
   contextFilesMeta,
   inputMode,
   queue,
@@ -392,6 +254,7 @@ async function deliverComposedMessage({
   planModeEnabled: boolean;
   hasPendingClarification: boolean;
   planCommentRefs: TaskPlanCommentRef[];
+  previewFeedbackRefs: TaskPreviewFeedbackRef[];
   contextFilesMeta: ReturnType<typeof buildContextFilesMetadata>;
   inputMode: SessionInputMode;
   queue: ReturnType<typeof useQueue>["queue"];
@@ -409,12 +272,14 @@ async function deliverComposedMessage({
         entityReferences: payload.entityReferences,
         clientQueueId: clientAdmissionId,
         ...(planCommentRefs.length > 0 ? { planCommentRefs } : {}),
+        ...(previewFeedbackRefs.length > 0 ? { previewFeedbackRefs } : {}),
         ...(contextFilesMeta ? { contextFilesMeta } : {}),
       });
       if (!accepted) {
         return false;
       }
       await refreshAcceptedPlanComments(taskId, planCommentRefs, storeApi);
+      await refreshAcceptedPreviewFeedback(taskId, previewFeedbackRefs, storeApi);
       return "queued";
     }
 
@@ -430,12 +295,33 @@ async function deliverComposedMessage({
       contextFilesMeta,
       entityReferences: payload.entityReferences,
       planCommentRefs,
+      previewFeedbackRefs,
     });
     if (created?.id && created.session_id) storeApi.getState().addMessage(created);
     await refreshAcceptedPlanComments(taskId, planCommentRefs, storeApi);
+    await refreshAcceptedPreviewFeedback(taskId, previewFeedbackRefs, storeApi);
     return "sent";
   } catch (error) {
-    throw normalizePlanCommentSendError(error, taskId, storeApi);
+    throw normalizePreviewFeedbackSendError(
+      normalizePlanCommentSendError(error, taskId, storeApi),
+      taskId,
+      storeApi,
+    );
+  }
+}
+
+async function refreshAcceptedPreviewFeedback(
+  taskId: string,
+  refs: TaskPreviewFeedbackRef[],
+  storeApi: ReturnType<typeof useAppStoreApi>,
+) {
+  if (refs.length === 0) return;
+  try {
+    const snapshot = await getTaskPreviewFeedback(taskId);
+    storeApi.getState().setTaskPreviewFeedback(taskId, snapshot);
+  } catch (error) {
+    // i18n-exempt: accepted delivery remains successful; foreground recovery retries this refresh.
+    console.error("Failed to refresh task preview feedback after delivery:", error);
   }
 }
 
@@ -464,6 +350,7 @@ function messageAdmissionKey(parts: {
   planModeEnabled: boolean;
   hasReviewComments: boolean;
   planCommentRefs: TaskPlanCommentRef[];
+  previewFeedbackRefs: TaskPreviewFeedbackRef[];
   contextFilesMeta: ReturnType<typeof buildContextFilesMetadata>;
   attachments: ChatSubmitPayload["attachments"];
   entityReferences: ChatSubmitPayload["entityReferences"];
@@ -471,13 +358,23 @@ function messageAdmissionKey(parts: {
   return JSON.stringify(parts);
 }
 
-async function recoverPendingMessageAdmission(
-  admission: PendingMessageAdmission | null,
-  taskId: string,
-  sessionId: string,
-  refs: TaskPlanCommentRef[],
-  storeApi: ReturnType<typeof useAppStoreApi>,
-) {
+type PendingMessageRecovery = {
+  admission: PendingMessageAdmission | null;
+  taskId: string;
+  sessionId: string;
+  refs: TaskPlanCommentRef[];
+  previewRefs: TaskPreviewFeedbackRef[];
+  storeApi: ReturnType<typeof useAppStoreApi>;
+};
+
+async function recoverPendingMessageAdmission({
+  admission,
+  taskId,
+  sessionId,
+  refs,
+  previewRefs,
+  storeApi,
+}: PendingMessageRecovery) {
   if (!admission) return false;
   const client = getWebSocketClient();
   const committed = client
@@ -486,6 +383,7 @@ async function recoverPendingMessageAdmission(
   if (!committed) return false;
   storeApi.getState().addMessage(committed);
   await refreshAcceptedPlanComments(taskId, refs, storeApi);
+  await refreshAcceptedPreviewFeedback(taskId, previewRefs, storeApi);
   return true;
 }
 
@@ -517,7 +415,106 @@ function buildFinalMessageForSubmit({
   };
 }
 
-// eslint-disable-next-line max-lines-per-function -- message admission keeps identity, recovery, and routing in one callback.
+type ComposedMessageContext = {
+  resolvedSessionId: string | null;
+  taskId: string | null;
+  sessionModel: string | null;
+  activeModel: string | null;
+  planModeEnabled: boolean;
+  hasPendingClarification: boolean;
+  getHasPendingClarification?: () => boolean;
+  activeDocument: ActiveDocument | null;
+  planComments: PlanComment[];
+  previewFeedback: TaskPreviewFeedback[];
+  contextFiles: ContextFile[];
+  prompts: CustomPrompt[];
+  queue: ReturnType<typeof useQueue>["queue"];
+  storeApi: ReturnType<typeof useAppStoreApi>;
+  pendingAdmissionRef: { current: PendingMessageAdmission | null };
+};
+
+// eslint-disable-next-line complexity -- admission evaluates one ordered input-mode and recovery path.
+async function sendComposedMessage(payload: ChatSubmitPayload, context: ComposedMessageContext) {
+  const { taskId, resolvedSessionId, storeApi, pendingAdmissionRef } = context;
+  if (!taskId || !resolvedSessionId) {
+    const error = new MessageSendError(
+      "no-active-session",
+      "No active task session. Start an agent before sending a message.",
+    );
+    console.error(error.message);
+    throw error;
+  }
+
+  const { finalMessage, allContextFiles } = buildFinalMessageForSubmit({
+    payload,
+    contextFiles: context.contextFiles,
+    activeDocument: context.activeDocument,
+    planModeEnabled: context.planModeEnabled,
+    prompts: context.prompts,
+    state: storeApi.getState(),
+  });
+  const modelToSend =
+    context.activeModel && context.activeModel !== context.sessionModel
+      ? context.activeModel
+      : undefined;
+  const planCommentRefs = payload.planCommentRefs ?? toTaskPlanCommentRefs(context.planComments);
+  const previewFeedbackRefs =
+    payload.previewFeedbackRefs ?? toTaskPreviewFeedbackRefs(context.previewFeedback);
+  const contextFilesMeta = buildContextFilesMetadata(allContextFiles);
+  const inputMode = requireSessionInputMode(storeApi.getState(), resolvedSessionId);
+  const admissionKey = messageAdmissionKey({
+    taskId,
+    resolvedSessionId,
+    finalMessage,
+    modelToSend,
+    planModeEnabled: context.planModeEnabled,
+    hasReviewComments: !!payload.reviewComments?.length,
+    planCommentRefs,
+    previewFeedbackRefs,
+    contextFilesMeta,
+    attachments: payload.attachments,
+    entityReferences: payload.entityReferences,
+  });
+  const previousAdmission =
+    pendingAdmissionRef.current?.key === admissionKey ? pendingAdmissionRef.current : null;
+  const admission =
+    previousAdmission ??
+    ({ key: admissionKey, id: payload.clientMessageId ?? generateUUID() } as const);
+  pendingAdmissionRef.current = admission;
+  const recovered = await recoverPendingMessageAdmission({
+    admission: previousAdmission,
+    taskId,
+    sessionId: resolvedSessionId,
+    refs: planCommentRefs,
+    previewRefs: previewFeedbackRefs,
+    storeApi,
+  });
+  if (recovered) {
+    if (pendingAdmissionRef.current === admission) pendingAdmissionRef.current = null;
+    return "sent" as const;
+  }
+  const delivered = await deliverComposedMessage({
+    payload,
+    taskId,
+    resolvedSessionId,
+    finalMessage,
+    modelToSend,
+    planModeEnabled: context.planModeEnabled,
+    hasPendingClarification:
+      context.getHasPendingClarification?.() ?? context.hasPendingClarification,
+    planCommentRefs,
+    previewFeedbackRefs,
+    contextFilesMeta,
+    inputMode,
+    queue: context.queue,
+    storeApi,
+    clientAdmissionId: admission.id,
+  });
+  if (delivered === false) return false;
+  if (pendingAdmissionRef.current === admission) pendingAdmissionRef.current = null;
+  return delivered;
+}
+
 export function useMessageHandler({
   resolvedSessionId,
   taskId,
@@ -528,6 +525,7 @@ export function useMessageHandler({
   getHasPendingClarification,
   activeDocument = null,
   planComments = [],
+  previewFeedback = [],
   contextFiles = [],
   prompts = [],
 }: UseMessageHandlerParams) {
@@ -536,78 +534,24 @@ export function useMessageHandler({
   const pendingAdmissionRef = useRef<PendingMessageAdmission | null>(null);
 
   const sendMessage = useCallback(
-    // eslint-disable-next-line complexity -- admission evaluates one ordered input-mode and recovery path.
-    async (payload: ChatSubmitPayload) => {
-      if (!taskId || !resolvedSessionId) {
-        const error = new MessageSendError(
-          "no-active-session",
-          "No active task session. Start an agent before sending a message.",
-        );
-        console.error(error.message);
-        throw error;
-      }
-
-      const { finalMessage, allContextFiles } = buildFinalMessageForSubmit({
-        payload,
-        contextFiles,
+    (payload: ChatSubmitPayload) =>
+      sendComposedMessage(payload, {
+        taskId,
+        resolvedSessionId,
+        sessionModel,
+        activeModel,
+        planModeEnabled,
+        hasPendingClarification,
+        getHasPendingClarification,
         activeDocument,
-        planModeEnabled,
+        planComments,
+        previewFeedback,
+        contextFiles,
         prompts,
-        state: storeApi.getState(),
-      });
-      const modelToSend = activeModel && activeModel !== sessionModel ? activeModel : undefined;
-      const planCommentRefs = payload.planCommentRefs ?? toTaskPlanCommentRefs(planComments);
-      const contextFilesMeta = buildContextFilesMetadata(allContextFiles);
-      const inputMode = requireSessionInputMode(storeApi.getState(), resolvedSessionId);
-      const admissionKey = messageAdmissionKey({
-        taskId,
-        resolvedSessionId,
-        finalMessage,
-        modelToSend,
-        planModeEnabled,
-        hasReviewComments: !!payload.reviewComments?.length,
-        planCommentRefs,
-        contextFilesMeta,
-        attachments: payload.attachments,
-        entityReferences: payload.entityReferences,
-      });
-      const previousAdmission =
-        pendingAdmissionRef.current?.key === admissionKey ? pendingAdmissionRef.current : null;
-      const admission =
-        previousAdmission ??
-        ({ key: admissionKey, id: payload.clientMessageId ?? generateUUID() } as const);
-      pendingAdmissionRef.current = admission;
-      if (
-        await recoverPendingMessageAdmission(
-          previousAdmission,
-          taskId,
-          resolvedSessionId,
-          planCommentRefs,
-          storeApi,
-        )
-      ) {
-        if (pendingAdmissionRef.current === admission) pendingAdmissionRef.current = null;
-        return "sent" as const;
-      }
-      const delivered = await deliverComposedMessage({
-        payload,
-        taskId,
-        resolvedSessionId,
-        finalMessage,
-        modelToSend,
-        planModeEnabled,
-        hasPendingClarification: getHasPendingClarification?.() ?? hasPendingClarification,
-        planCommentRefs,
-        contextFilesMeta,
-        inputMode,
-        queue,
+        queue: queue,
         storeApi,
-        clientAdmissionId: admission.id,
-      });
-      if (delivered === false) return false;
-      if (pendingAdmissionRef.current === admission) pendingAdmissionRef.current = null;
-      return delivered;
-    },
+        pendingAdmissionRef,
+      }),
     [
       resolvedSessionId,
       taskId,
@@ -619,6 +563,7 @@ export function useMessageHandler({
       queue,
       storeApi,
       planComments,
+      previewFeedback,
       contextFiles,
       activeDocument,
       prompts,
diff --git a/apps/web/hooks/use-preview-capture.test.ts b/apps/web/hooks/use-preview-capture.test.ts
new file mode 100644
index 0000000000..9fc2c0d14d
--- /dev/null
+++ b/apps/web/hooks/use-preview-capture.test.ts
@@ -0,0 +1,437 @@
+import { act, renderHook, waitFor } from "@testing-library/react";
+import { beforeEach, describe, expect, it, vi } from "vitest";
+import { INSPECTOR_PROTOCOL_VERSION } from "@/lib/preview-inspect-bridge";
+import type { TaskPreviewFeedback } from "@/lib/types/http";
+
+const INSPECTOR_SOURCE = "kandev-inspector";
+const TOTAL_SELECTOR = "#total";
+const SCREENSHOT_ATTACHMENT_ID = "screenshot-attachment-1";
+const PNG_MIME_TYPE = "image/png";
+const SCREENSHOT_EVENT_TYPE = "screenshot-region-selected";
+const PREVIEW_URL = "blob:preview-screenshot";
+
+const feedback = vi.hoisted(() => ({
+  items: [] as TaskPreviewFeedback[],
+  snapshot: { task_id: "task-1", revision: 0, items: [] as TaskPreviewFeedback[] },
+  create: vi.fn(),
+  update: vi.fn(),
+  remove: vi.fn(),
+  clear: vi.fn(),
+  isMutating: false,
+  mutationError: null as string | null,
+}));
+vi.mock("@/hooks/domains/comments/use-preview-feedback", () => ({
+  usePreviewFeedback: () => feedback,
+}));
+vi.mock("@/components/state-provider", () => ({
+  useAppStore: (selector: (state: unknown) => unknown) =>
+    selector({
+      kanban: { tasks: [{ id: "task-1", workspaceId: "workspace-1" }] },
+      kanbanMulti: { snapshots: {} },
+      workspaces: { activeId: "workspace-1" },
+    }),
+}));
+
+const attachments = vi.hoisted(() => ({
+  uploadAttachment: vi.fn(),
+  deleteAttachment: vi.fn(),
+}));
+vi.mock("@/lib/api/domains/attachment-api", () => attachments);
+
+const html2canvas = vi.hoisted(() => vi.fn());
+vi.mock("html2canvas-pro", () => ({ default: html2canvas }));
+
+const bridge = vi.hoisted(() => ({
+  sendSetPreviewCaptureMode: vi.fn(),
+  sendProjectPreviewMarkers: vi.fn(),
+}));
+vi.mock("@/lib/preview-inspect-bridge", async () => {
+  const actual = await vi.importActual<typeof import("@/lib/preview-inspect-bridge")>(
+    "@/lib/preview-inspect-bridge",
+  );
+  return { ...actual, ...bridge };
+});
+
+import { usePreviewCapture } from "./use-preview-capture";
+
+const source = {
+  kind: "browser" as const,
+  sessionId: "session-1",
+  label: "http://localhost:3000",
+};
+
+function setup() {
+  const iframe = document.createElement("iframe");
+  document.body.appendChild(iframe);
+  const iframeRef = { current: iframe };
+  const rendered = renderHook(() =>
+    usePreviewCapture({ taskId: "task-1", iframeRef, source, enabled: true }),
+  );
+  return { iframe, iframeRef, ...rendered };
+}
+
+function dispatch(sourceWindow: MessageEventSource | null, data: unknown) {
+  window.dispatchEvent(new MessageEvent("message", { source: sourceWindow, data }));
+}
+
+function textCapture() {
+  return {
+    source: INSPECTOR_SOURCE,
+    version: INSPECTOR_PROTOCOL_VERSION,
+    type: "capture-completed",
+    payload: {
+      kind: "text",
+      page_route: "/checkout",
+      page_title: "Checkout",
+      selected_text: "$42.00",
+      text_anchor: {
+        start: { selector: TOTAL_SELECTOR, node_path: [0], offset: 0 },
+        end: { selector: TOTAL_SELECTOR, node_path: [0], offset: 6 },
+        rects: [{ x: 10, y: 20, width: 50, height: 18 }],
+        union_rect: { x: 10, y: 20, width: 50, height: 18 },
+        scroll_x: 0,
+        scroll_y: 120,
+        viewport_width: 390,
+        viewport_height: 844,
+        device_pixel_ratio: 3,
+        containing_element: {
+          tag: "span",
+          classes: ["total"],
+          selector: TOTAL_SELECTOR,
+          outer_html: '<span id="total">$42.00</span>',
+        },
+      },
+    },
+  };
+}
+
+beforeEach(() => {
+  document.body.innerHTML = "";
+  vi.clearAllMocks();
+  feedback.items = [];
+  feedback.snapshot = { task_id: "task-1", revision: 0, items: [] };
+  feedback.create.mockResolvedValue({ task_id: "task-1", revision: 1, items: [] });
+  attachments.uploadAttachment.mockResolvedValue({
+    attachment_id: SCREENSHOT_ATTACHMENT_ID,
+    name: "preview.png",
+    mime_type: PNG_MIME_TYPE,
+    kind: "image",
+    delivery_mode: "prompt",
+    size_bytes: 128,
+    state: "staged",
+  });
+  attachments.deleteAttachment.mockResolvedValue(undefined);
+  Object.defineProperty(URL, "createObjectURL", {
+    configurable: true,
+    value: vi.fn(() => PREVIEW_URL),
+  });
+  Object.defineProperty(URL, "revokeObjectURL", {
+    configurable: true,
+    value: vi.fn(),
+  });
+});
+
+describe("usePreviewCapture text", () => {
+  it("keeps exact generated text evidence in a recoverable draft and persists it with a comment", async () => {
+    const { iframe, result } = setup();
+
+    act(() => dispatch(iframe.contentWindow, textCapture()));
+    if (result.current.draft?.kind !== "text") throw new Error("expected text draft");
+    expect(result.current.draft?.selected_text).toBe("$42.00");
+    expect(result.current.draft?.text_anchor?.start.node_path).toEqual([0]);
+    expect(result.current.draft?.text_anchor?.union_rect?.y).toBe(20);
+
+    await act(() => result.current.saveDraft("Keep this total visible"));
+    expect(feedback.create).toHaveBeenCalledWith(
+      expect.objectContaining({
+        kind: "text",
+        comment: "Keep this total visible",
+        sourceKind: "browser",
+        sourceSessionId: "session-1",
+        sourceLabel: "http://localhost:3000",
+        pageRoute: "/checkout",
+        selectedText: "$42.00",
+        textAnchor: expect.objectContaining({ scroll_y: 120 }),
+      }),
+    );
+    expect(result.current.draft).toBeNull();
+  });
+
+  it("ignores valid captures from any window except its iframe", () => {
+    const { result } = setup();
+    act(() => dispatch(window, textCapture()));
+    expect(result.current.draft).toBeNull();
+  });
+
+  it("preserves the draft when persistence fails", async () => {
+    feedback.create.mockResolvedValue(null);
+    const { iframe, result } = setup();
+    act(() => dispatch(iframe.contentWindow, textCapture()));
+    await act(() => result.current.saveDraft("Retry this"));
+    if (result.current.draft?.kind !== "text") throw new Error("expected text draft");
+    expect(result.current.draft?.selected_text).toBe("$42.00");
+  });
+
+  it("sanitizes page routes before retaining or saving captured evidence", async () => {
+    const { iframe, result } = setup();
+    const capture = textCapture();
+    capture.payload.page_route = "/checkout?step=shipping&access_token=secret#payment";
+
+    act(() => dispatch(iframe.contentWindow, capture));
+    expect(result.current.draft?.page_route).toBe("/checkout?step=shipping");
+
+    await act(() => result.current.saveDraft("Keep this route"));
+    expect(feedback.create).toHaveBeenCalledWith(
+      expect.objectContaining({ pageRoute: "/checkout?step=shipping" }),
+    );
+  });
+});
+
+describe("usePreviewCapture marker projection", () => {
+  it("projects task markers for the same source and follows route announcements", async () => {
+    feedback.items = [
+      {
+        id: "feedback-1",
+        task_id: "task-1",
+        kind: "element",
+        comment: "Move this",
+        source_kind: "browser",
+        source_session_id: "session-1",
+        source_label: "http://localhost:3000",
+        page_route: "/account",
+        page_title: "Account",
+        element_snapshot: {
+          tag: "button",
+          classes: [],
+          selector: "#save",
+          outer_html: '<button id="save">Save</button>',
+        },
+        capture_rect: { x: 1, y: 2, width: 80, height: 30 },
+        version: 1,
+        created_at: "2026-09-15T00:00:00Z",
+        updated_at: "2026-09-15T00:00:00Z",
+      },
+    ];
+    const { iframe, result } = setup();
+
+    act(() =>
+      dispatch(iframe.contentWindow, {
+        source: INSPECTOR_SOURCE,
+        version: INSPECTOR_PROTOCOL_VERSION,
+        type: "route-changed",
+        payload: { page_route: "/account", page_title: "Account" },
+      }),
+    );
+    expect(result.current.pageRoute).toBe("/account");
+    await waitFor(() =>
+      expect(bridge.sendProjectPreviewMarkers).toHaveBeenCalledWith(iframe, [
+        expect.objectContaining({ id: "feedback-1", page_route: "/account" }),
+      ]),
+    );
+  });
+});
+
+describe("usePreviewCapture screenshots", () => {
+  it("rasterizes a selected region for review, then uploads and claims it on save", async () => {
+    const png = new Blob([new Uint8Array([137, 80, 78, 71, 13, 10, 26, 10])], {
+      type: PNG_MIME_TYPE,
+    });
+    html2canvas.mockResolvedValue({
+      width: 600,
+      height: 360,
+      toBlob: (callback: BlobCallback) => callback(png),
+    });
+    const { iframe, result } = setup();
+
+    act(() =>
+      dispatch(iframe.contentWindow, {
+        source: INSPECTOR_SOURCE,
+        version: INSPECTOR_PROTOCOL_VERSION,
+        type: SCREENSHOT_EVENT_TYPE,
+        payload: {
+          page_route: "/checkout",
+          page_title: "Checkout",
+          capture_rect: {
+            x: 20,
+            y: 40,
+            width: 300,
+            height: 180,
+            document_x: 20,
+            document_y: 640,
+            device_pixel_ratio: 2,
+          },
+        },
+      }),
+    );
+
+    await waitFor(() => expect(result.current.draft?.kind).toBe("screenshot"));
+    expect(result.current.isRasterizing).toBe(false);
+    if (result.current.draft?.kind !== "screenshot") throw new Error("expected screenshot draft");
+    expect(result.current.draft?.screenshot?.previewUrl).toBe(PREVIEW_URL);
+    expect(html2canvas).toHaveBeenCalledWith(
+      iframe.contentDocument?.documentElement,
+      expect.objectContaining({ x: 20, y: 640, width: 300, height: 180 }),
+    );
+
+    await act(() => result.current.saveDraft("The form clips here"));
+    expect(attachments.uploadAttachment).toHaveBeenCalledWith(
+      expect.objectContaining({ type: PNG_MIME_TYPE }),
+      { workspaceId: "workspace-1", kind: "image", deliveryMode: "prompt" },
+    );
+    expect(feedback.create).toHaveBeenCalledWith(
+      expect.objectContaining({
+        kind: "screenshot",
+        comment: "The form clips here",
+        captureRect: expect.objectContaining({ document_y: 640 }),
+        screenshotAttachmentId: SCREENSHOT_ATTACHMENT_ID,
+      }),
+    );
+    expect(result.current.draft).toBeNull();
+  });
+});
+
+describe("usePreviewCapture failed screenshots", () => {
+  it("keeps the screenshot and staged attachment available when create fails", async () => {
+    const png = new Blob([new Uint8Array([137, 80, 78, 71, 13, 10, 26, 10])], {
+      type: PNG_MIME_TYPE,
+    });
+    html2canvas.mockResolvedValue({
+      width: 20,
+      height: 20,
+      toBlob: (callback: BlobCallback) => callback(png),
+    });
+    feedback.create.mockResolvedValue(null);
+    const { iframe, result } = setup();
+    act(() =>
+      dispatch(iframe.contentWindow, {
+        source: INSPECTOR_SOURCE,
+        version: INSPECTOR_PROTOCOL_VERSION,
+        type: SCREENSHOT_EVENT_TYPE,
+        payload: {
+          page_route: "/",
+          page_title: "Home",
+          capture_rect: { x: 0, y: 0, width: 20, height: 20 },
+        },
+      }),
+    );
+    await waitFor(() => expect(result.current.draft?.kind).toBe("screenshot"));
+    await act(() => result.current.saveDraft("Retry me"));
+    if (result.current.draft?.kind !== "screenshot") throw new Error("expected screenshot draft");
+    expect(result.current.draft?.screenshot?.attachmentId).toBe(SCREENSHOT_ATTACHMENT_ID);
+    expect(attachments.deleteAttachment).not.toHaveBeenCalled();
+  });
+
+  it("releases an unsaved screenshot before starting another capture", async () => {
+    const png = new Blob([new Uint8Array([137, 80, 78, 71, 13, 10, 26, 10])], {
+      type: PNG_MIME_TYPE,
+    });
+    html2canvas.mockResolvedValue({
+      width: 20,
+      height: 20,
+      toBlob: (callback: BlobCallback) => callback(png),
+    });
+    feedback.create.mockResolvedValue(null);
+    const { iframe, result } = setup();
+    act(() =>
+      dispatch(iframe.contentWindow, {
+        source: INSPECTOR_SOURCE,
+        version: INSPECTOR_PROTOCOL_VERSION,
+        type: SCREENSHOT_EVENT_TYPE,
+        payload: {
+          page_route: "/",
+          page_title: "Home",
+          capture_rect: { x: 0, y: 0, width: 20, height: 20 },
+        },
+      }),
+    );
+    await waitFor(() => expect(result.current.draft?.kind).toBe("screenshot"));
+    await act(() => result.current.saveDraft("Retry me"));
+
+    act(() => result.current.startCapture("element"));
+
+    expect(URL.revokeObjectURL).toHaveBeenCalledWith(PREVIEW_URL);
+    expect(attachments.deleteAttachment).toHaveBeenCalledWith(SCREENSHOT_ATTACHMENT_ID);
+    expect(result.current.draft).toBeNull();
+  });
+});
+
+describe("usePreviewCapture cancelled uploads", () => {
+  it("deletes an upload that finishes after the screenshot draft is cancelled", async () => {
+    const png = new Blob([new Uint8Array([137, 80, 78, 71, 13, 10, 26, 10])], {
+      type: PNG_MIME_TYPE,
+    });
+    html2canvas.mockResolvedValue({
+      width: 20,
+      height: 20,
+      toBlob: (callback: BlobCallback) => callback(png),
+    });
+    let finishUpload: ((value: { attachment_id: string }) => void) | undefined;
+    attachments.uploadAttachment.mockImplementation(
+      () => new Promise((resolve) => (finishUpload = resolve)),
+    );
+    const { iframe, result } = setup();
+    act(() =>
+      dispatch(iframe.contentWindow, {
+        source: INSPECTOR_SOURCE,
+        version: INSPECTOR_PROTOCOL_VERSION,
+        type: SCREENSHOT_EVENT_TYPE,
+        payload: {
+          page_route: "/",
+          page_title: "Home",
+          capture_rect: { x: 0, y: 0, width: 20, height: 20 },
+        },
+      }),
+    );
+    await waitFor(() => expect(result.current.draft?.kind).toBe("screenshot"));
+
+    let saveResult: Promise<boolean> | undefined;
+    act(() => {
+      saveResult = result.current.saveDraft("Cancel me");
+    });
+    await waitFor(() => expect(result.current.isUploading).toBe(true));
+    act(() => result.current.discardDraft());
+    await act(async () => finishUpload?.({ attachment_id: "late-screenshot" }));
+
+    await expect(saveResult).resolves.toBe(false);
+    expect(attachments.deleteAttachment).toHaveBeenCalledWith("late-screenshot");
+    expect(feedback.create).not.toHaveBeenCalled();
+  });
+
+  it("releases an unsaved screenshot when the preview is disabled", async () => {
+    const png = new Blob([new Uint8Array([137, 80, 78, 71, 13, 10, 26, 10])], {
+      type: PNG_MIME_TYPE,
+    });
+    html2canvas.mockResolvedValue({
+      width: 20,
+      height: 20,
+      toBlob: (callback: BlobCallback) => callback(png),
+    });
+    const iframe = document.createElement("iframe");
+    document.body.appendChild(iframe);
+    const iframeRef = { current: iframe };
+    const rendered = renderHook(
+      ({ enabled }: { enabled: boolean }) =>
+        usePreviewCapture({ taskId: "task-1", iframeRef, source, enabled }),
+      { initialProps: { enabled: true } },
+    );
+    act(() =>
+      dispatch(iframe.contentWindow, {
+        source: INSPECTOR_SOURCE,
+        version: INSPECTOR_PROTOCOL_VERSION,
+        type: SCREENSHOT_EVENT_TYPE,
+        payload: {
+          page_route: "/",
+          page_title: "Home",
+          capture_rect: { x: 0, y: 0, width: 20, height: 20 },
+        },
+      }),
+    );
+    await waitFor(() => expect(rendered.result.current.draft?.kind).toBe("screenshot"));
+
+    rendered.rerender({ enabled: false });
+
+    await waitFor(() => expect(rendered.result.current.draft).toBeNull());
+    expect(URL.revokeObjectURL).toHaveBeenCalledWith(PREVIEW_URL);
+    rendered.unmount();
+  });
+});
diff --git a/apps/web/hooks/use-preview-capture.ts b/apps/web/hooks/use-preview-capture.ts
new file mode 100644
index 0000000000..e16aac3fdf
--- /dev/null
+++ b/apps/web/hooks/use-preview-capture.ts
@@ -0,0 +1,470 @@
+"use client";
+
+import { useCallback, useEffect, useMemo, useRef, useState } from "react";
+import html2canvas from "html2canvas-pro";
+import { useAppStore } from "@/components/state-provider";
+import { usePreviewFeedback } from "@/hooks/domains/comments/use-preview-feedback";
+import { deleteAttachment, uploadAttachment } from "@/lib/api/domains/attachment-api";
+import {
+  isInspectorMessage,
+  sendProjectPreviewMarkers,
+  sendSetPreviewCaptureMode,
+  type PreviewCaptureDraft,
+  type PreviewCaptureMode,
+  type PreviewMarkerProjection,
+  type PreviewScreenshotRegion,
+} from "@/lib/preview-inspect-bridge";
+import { sanitizePreviewPageRoute } from "@/lib/preview-feedback-source";
+import { rasterizePreviewRegion } from "@/lib/preview-screenshot";
+import type { TaskPreviewFeedback } from "@/lib/types/http";
+
+export type PreviewCaptureSource = {
+  kind: "browser" | "html_file";
+  label: string;
+  sessionId?: string;
+  path?: string;
+};
+
+export type PreviewScreenshotDraft = PreviewScreenshotRegion & {
+  kind: "screenshot";
+  selected_text?: undefined;
+  text_anchor?: undefined;
+  element_snapshot?: undefined;
+  screenshot: {
+    blob: Blob;
+    width: number;
+    height: number;
+    previewUrl: string;
+    fileName: string;
+    attachmentId?: string;
+  };
+};
+
+export type PreviewFeedbackDraft = PreviewCaptureDraft | PreviewScreenshotDraft;
+export type PreviewCaptureError = "raster" | "upload" | "workspace";
+
+type UsePreviewCaptureOptions = {
+  taskId: string | null | undefined;
+  iframeRef: React.RefObject<HTMLIFrameElement | null>;
+  source: PreviewCaptureSource;
+  enabled: boolean;
+};
+
+type InspectorEventOptions = {
+  iframeRef: React.RefObject<HTMLIFrameElement | null>;
+  enabled: boolean;
+  projectMarkers: () => void;
+  setMode: React.Dispatch<React.SetStateAction<PreviewCaptureMode | null>>;
+  setDraft: (draft: PreviewFeedbackDraft) => void;
+  setCandidateLabel: React.Dispatch<React.SetStateAction<string | null>>;
+  setPageRoute: React.Dispatch<React.SetStateAction<string>>;
+  setPageTitle: React.Dispatch<React.SetStateAction<string>>;
+  captureScreenshot: (region: PreviewScreenshotRegion) => void;
+};
+
+function usePreviewInspectorEvents(options: InspectorEventOptions) {
+  useEffect(() => {
+    function handleMessage(event: MessageEvent) {
+      if (
+        event.source !== options.iframeRef.current?.contentWindow ||
+        !isInspectorMessage(event.data)
+      ) {
+        return;
+      }
+      const message = event.data;
+      switch (message.type) {
+        case "inspector-ready":
+        case "route-changed":
+          options.setPageRoute(sanitizePreviewPageRoute(message.payload.page_route));
+          options.setPageTitle(message.payload.page_title);
+          options.projectMarkers();
+          break;
+        case "candidate-changed":
+          options.setCandidateLabel(message.payload.label);
+          break;
+        case "capture-completed":
+          if (!options.enabled) return;
+          options.setDraft({
+            ...message.payload,
+            page_route: sanitizePreviewPageRoute(message.payload.page_route),
+          });
+          options.setMode(null);
+          options.setCandidateLabel(null);
+          break;
+        case "capture-cancelled":
+          options.setMode(null);
+          options.setCandidateLabel(null);
+          break;
+        case "screenshot-region-selected":
+          if (options.enabled) {
+            options.captureScreenshot({
+              ...message.payload,
+              page_route: sanitizePreviewPageRoute(message.payload.page_route),
+            });
+          }
+          break;
+        default:
+          break;
+      }
+    }
+    window.addEventListener("message", handleMessage);
+    return () => window.removeEventListener("message", handleMessage);
+  }, [options]);
+}
+
+function belongsToSource(item: TaskPreviewFeedback, source: PreviewCaptureSource) {
+  return (
+    item.source_kind === source.kind &&
+    (item.source_session_id ?? undefined) === source.sessionId &&
+    (item.source_path ?? undefined) === source.path &&
+    item.source_label === source.label
+  );
+}
+
+function markerProjection(item: TaskPreviewFeedback): PreviewMarkerProjection {
+  return {
+    id: item.id,
+    kind: item.kind,
+    page_route: sanitizePreviewPageRoute(item.page_route),
+    text_anchor: item.text_anchor,
+    element_snapshot: item.element_snapshot,
+    capture_rect: item.capture_rect,
+  };
+}
+
+function taskWorkspaceID(
+  taskID: string | null | undefined,
+  state: Parameters<Parameters<typeof useAppStore>[0]>[0],
+) {
+  if (!taskID) return state.workspaces.activeId ?? null;
+  const task =
+    state.kanban.tasks.find((item) => item.id === taskID) ??
+    Object.values(state.kanbanMulti.snapshots)
+      .flatMap((snapshot) => snapshot.tasks)
+      .find((item) => item.id === taskID);
+  return task?.workspaceId ?? state.workspaces.activeId ?? null;
+}
+
+function releaseScreenshotDraft(draft: PreviewFeedbackDraft | null) {
+  if (draft?.kind !== "screenshot") return;
+  URL.revokeObjectURL(draft.screenshot.previewUrl);
+  if (draft.screenshot.attachmentId) {
+    void deleteAttachment(draft.screenshot.attachmentId).catch(() => undefined);
+  }
+}
+
+function usePreviewDraftCleanup(
+  generationRef: { current: number },
+  draftRef: { current: PreviewFeedbackDraft | null },
+) {
+  useEffect(
+    () => () => {
+      generationRef.current += 1;
+      releaseScreenshotDraft(draftRef.current);
+      draftRef.current = null;
+    },
+    [draftRef, generationRef],
+  );
+}
+
+function usePreviewDraftState(iframeRef: React.RefObject<HTMLIFrameElement | null>) {
+  const [draft, setDraft] = useState<PreviewFeedbackDraft | null>(null);
+  const [draftComment, setDraftComment] = useState("");
+  const [captureError, setCaptureError] = useState<PreviewCaptureError | null>(null);
+  const [isRasterizing, setIsRasterizing] = useState(false);
+  const [isUploading, setIsUploading] = useState(false);
+  const generationRef = useRef(0);
+  const draftRef = useRef<PreviewFeedbackDraft | null>(null);
+  usePreviewDraftCleanup(generationRef, draftRef);
+
+  const setNewDraft = useCallback((next: PreviewFeedbackDraft) => {
+    releaseScreenshotDraft(draftRef.current);
+    draftRef.current = next;
+    setDraft(next);
+    setDraftComment("");
+    generationRef.current += 1;
+  }, []);
+
+  const updateDraft = useCallback((next: React.SetStateAction<PreviewFeedbackDraft | null>) => {
+    const current = draftRef.current;
+    const updated = typeof next === "function" ? next(current) : next;
+    draftRef.current = updated;
+    setDraft(updated);
+  }, []);
+
+  const captureScreenshot = useCallback(
+    (region: PreviewScreenshotRegion) => {
+      const documentElement = iframeRef.current?.contentDocument?.documentElement;
+      if (!documentElement) {
+        setCaptureError("raster");
+        return;
+      }
+      const generation = ++generationRef.current;
+      setCaptureError(null);
+      setIsRasterizing(true);
+      void rasterizePreviewRegion(documentElement, region.capture_rect, (element, options) =>
+        html2canvas(element, options),
+      )
+        .then((image) => {
+          if (generationRef.current !== generation) return;
+          const previewUrl = URL.createObjectURL(image.blob);
+          setIsRasterizing(false);
+          setNewDraft({
+            ...region,
+            kind: "screenshot",
+            screenshot: {
+              ...image,
+              previewUrl,
+              fileName: `preview-${Date.now()}.png`,
+            },
+          });
+        })
+        .catch(() => {
+          if (generationRef.current === generation) setCaptureError("raster");
+        })
+        .finally(() => {
+          if (generationRef.current === generation) setIsRasterizing(false);
+        });
+    },
+    [iframeRef, setNewDraft],
+  );
+
+  const clearForCapture = useCallback(() => {
+    generationRef.current += 1;
+    releaseScreenshotDraft(draftRef.current);
+    draftRef.current = null;
+    setDraft(null);
+    setDraftComment("");
+    setCaptureError(null);
+    setIsRasterizing(false);
+  }, []);
+
+  const discardDraft = clearForCapture;
+
+  const completeDraft = useCallback((savedGeneration: number) => {
+    if (generationRef.current !== savedGeneration || !draftRef.current) return false;
+    if (draftRef.current.kind === "screenshot") {
+      URL.revokeObjectURL(draftRef.current.screenshot.previewUrl);
+    }
+    draftRef.current = null;
+    setDraft(null);
+    setDraftComment("");
+    setCaptureError(null);
+    generationRef.current += 1;
+    return true;
+  }, []);
+
+  return {
+    draft,
+    draftComment,
+    setDraftComment,
+    setDraft: setNewDraft,
+    updateDraft,
+    captureError,
+    setCaptureError,
+    isRasterizing,
+    isUploading,
+    setIsUploading,
+    generationRef,
+    captureScreenshot,
+    clearForCapture,
+    discardDraft,
+    completeDraft,
+  };
+}
+
+type SaveDraftOptions = {
+  draftState: ReturnType<typeof usePreviewDraftState>;
+  workspaceId: string | null;
+  source: PreviewCaptureSource;
+  createFeedback: ReturnType<typeof usePreviewFeedback>["create"];
+  projectMarkers: () => void;
+};
+
+function useSavePreviewDraft({
+  draftState,
+  workspaceId,
+  source,
+  createFeedback,
+  projectMarkers,
+}: SaveDraftOptions) {
+  return useCallback(
+    async (comment: string) => {
+      const draft = draftState.draft;
+      if (!draft || !comment.trim()) return false;
+      const saveGeneration = draftState.generationRef.current;
+      let screenshotAttachmentId: string | undefined;
+      if (draft.kind === "screenshot") {
+        if (!workspaceId) {
+          draftState.setCaptureError("workspace");
+          return false;
+        }
+        screenshotAttachmentId = draft.screenshot.attachmentId;
+        if (!screenshotAttachmentId) {
+          draftState.setIsUploading(true);
+          draftState.setCaptureError(null);
+          try {
+            const file = new File([draft.screenshot.blob], draft.screenshot.fileName, {
+              type: "image/png",
+            });
+            const uploaded = await uploadAttachment(file, {
+              workspaceId,
+              kind: "image",
+              deliveryMode: "prompt",
+            });
+            screenshotAttachmentId = uploaded.attachment_id;
+            if (draftState.generationRef.current !== saveGeneration) {
+              void deleteAttachment(uploaded.attachment_id).catch(() => undefined);
+              return false;
+            }
+            draftState.updateDraft((current) =>
+              current?.kind === "screenshot"
+                ? {
+                    ...current,
+                    screenshot: { ...current.screenshot, attachmentId: uploaded.attachment_id },
+                  }
+                : current,
+            );
+          } catch {
+            draftState.setCaptureError("upload");
+            return false;
+          } finally {
+            draftState.setIsUploading(false);
+          }
+        }
+      }
+      const result = await createFeedback({
+        kind: draft.kind,
+        comment: comment.trim(),
+        sourceKind: source.kind,
+        sourceSessionId: source.sessionId,
+        sourceLabel: source.label,
+        sourcePath: source.path,
+        pageRoute: draft.page_route,
+        pageTitle: draft.page_title,
+        selectedText: draft.selected_text,
+        textAnchor: draft.text_anchor,
+        elementSnapshot: draft.element_snapshot,
+        captureRect: draft.capture_rect,
+        screenshotAttachmentId,
+      });
+      if (!result) return false;
+      if (draftState.completeDraft(saveGeneration)) projectMarkers();
+      return true;
+    },
+    [createFeedback, draftState, projectMarkers, source, workspaceId],
+  );
+}
+
+/** Connects one preview iframe to the task-owned pending feedback collection. */
+export function usePreviewCapture({
+  taskId,
+  iframeRef,
+  source,
+  enabled,
+}: UsePreviewCaptureOptions) {
+  const feedback = usePreviewFeedback(taskId);
+  const workspaceId = useAppStore((state) => taskWorkspaceID(taskId, state));
+  const [mode, setMode] = useState<PreviewCaptureMode | null>(null);
+  const [candidateLabel, setCandidateLabel] = useState<string | null>(null);
+  const [pageRoute, setPageRoute] = useState("");
+  const [pageTitle, setPageTitle] = useState("");
+  const draftState = usePreviewDraftState(iframeRef);
+
+  const markers = useMemo(
+    () => feedback.items.filter((item) => belongsToSource(item, source)).map(markerProjection),
+    [feedback.items, source.kind, source.label, source.path, source.sessionId],
+  );
+
+  const projectMarkers = useCallback(() => {
+    if (iframeRef.current) sendProjectPreviewMarkers(iframeRef.current, markers);
+  }, [iframeRef, markers]);
+
+  useEffect(() => {
+    projectMarkers();
+  }, [projectMarkers]);
+
+  useEffect(() => {
+    if (enabled) return;
+    draftState.clearForCapture();
+    setMode(null);
+    setCandidateLabel(null);
+    if (iframeRef.current) sendSetPreviewCaptureMode(iframeRef.current, null);
+  }, [draftState.clearForCapture, enabled, iframeRef]);
+
+  useEffect(() => {
+    draftState.clearForCapture();
+  }, [
+    draftState.clearForCapture,
+    taskId,
+    source.kind,
+    source.label,
+    source.path,
+    source.sessionId,
+  ]);
+
+  usePreviewInspectorEvents({
+    iframeRef,
+    enabled,
+    projectMarkers,
+    setMode,
+    setDraft: draftState.setDraft,
+    setCandidateLabel,
+    setPageRoute,
+    setPageTitle,
+    captureScreenshot: (region) => {
+      setMode(null);
+      draftState.captureScreenshot(region);
+    },
+  });
+
+  const startCapture = useCallback(
+    (nextMode: PreviewCaptureMode) => {
+      if (!enabled || !iframeRef.current) return;
+      draftState.clearForCapture();
+      setMode(nextMode);
+      sendSetPreviewCaptureMode(iframeRef.current, nextMode);
+    },
+    [draftState, enabled, iframeRef],
+  );
+
+  const cancelCapture = useCallback(() => {
+    setMode(null);
+    setCandidateLabel(null);
+    if (iframeRef.current) sendSetPreviewCaptureMode(iframeRef.current, null);
+  }, [iframeRef]);
+
+  const saveDraft = useSavePreviewDraft({
+    draftState,
+    workspaceId,
+    source,
+    createFeedback: feedback.create,
+    projectMarkers,
+  });
+
+  const handleIframeLoad = useCallback(() => {
+    if (!iframeRef.current) return;
+    sendSetPreviewCaptureMode(iframeRef.current, enabled ? mode : null);
+    sendProjectPreviewMarkers(iframeRef.current, markers);
+  }, [enabled, iframeRef, markers, mode]);
+
+  return {
+    ...feedback,
+    mode,
+    draft: draftState.draft,
+    draftComment: draftState.draftComment,
+    setDraftComment: draftState.setDraftComment,
+    candidateLabel,
+    captureError: draftState.captureError,
+    isRasterizing: draftState.isRasterizing,
+    isUploading: draftState.isUploading,
+    pageRoute,
+    pageTitle,
+    markers,
+    startCapture,
+    cancelCapture,
+    discardDraft: draftState.discardDraft,
+    saveDraft,
+    handleIframeLoad,
+  };
+}
diff --git a/apps/web/lib/api/domains/preview-feedback-api.test.ts b/apps/web/lib/api/domains/preview-feedback-api.test.ts
new file mode 100644
index 0000000000..c806163cec
--- /dev/null
+++ b/apps/web/lib/api/domains/preview-feedback-api.test.ts
@@ -0,0 +1,80 @@
+import { beforeEach, describe, expect, it, vi } from "vitest";
+
+const request = vi.hoisted(() => vi.fn());
+vi.mock("@/lib/ws/connection", () => ({
+  getWebSocketClient: () => ({ request }),
+}));
+
+import * as previewApi from "./preview-feedback-api";
+
+const TASK_ID = "task-1";
+const FEEDBACK_ID = "feedback-1";
+
+describe("preview feedback API", () => {
+  beforeEach(() => request.mockReset());
+
+  it("loads the task-owned collection", async () => {
+    request.mockResolvedValue({ task_id: TASK_ID, revision: 0, items: [] });
+
+    await previewApi.getTaskPreviewFeedback(TASK_ID);
+
+    expect(request).toHaveBeenCalledWith("task.preview_feedback.list", { task_id: TASK_ID });
+  });
+
+  it("provides create, update, delete, and clear mutations", () => {
+    const api = previewApi as unknown as Record<string, unknown>;
+
+    expect(api.createTaskPreviewFeedback).toBeTypeOf("function");
+    expect(api.updateTaskPreviewFeedback).toBeTypeOf("function");
+    expect(api.deleteTaskPreviewFeedback).toBeTypeOf("function");
+    expect(api.clearTaskPreviewFeedback).toBeTypeOf("function");
+  });
+
+  it("sends capture evidence and optimistic mutation guards", async () => {
+    request.mockResolvedValue({ task_id: TASK_ID, revision: 1, items: [] });
+    await previewApi.createTaskPreviewFeedback({
+      taskId: TASK_ID,
+      id: FEEDBACK_ID,
+      kind: "text",
+      comment: "Increase contrast",
+      sourceKind: "browser",
+      sourceLabel: "Local app",
+      pageRoute: "/products",
+      pageTitle: "Products",
+      selectedText: "Choose a plan",
+      textAnchor: { start: { node_path: [0], offset: 0 }, end: { node_path: [0], offset: 13 } },
+    });
+    expect(request).toHaveBeenLastCalledWith(
+      "task.preview_feedback.create",
+      expect.objectContaining({
+        task_id: TASK_ID,
+        selected_text: "Choose a plan",
+        text_anchor: expect.any(Object),
+      }),
+    );
+
+    await previewApi.updateTaskPreviewFeedback({
+      taskId: TASK_ID,
+      id: FEEDBACK_ID,
+      comment: "Use stronger contrast",
+      expectedVersion: 1,
+    });
+    expect(request).toHaveBeenLastCalledWith("task.preview_feedback.update", {
+      task_id: TASK_ID,
+      id: FEEDBACK_ID,
+      comment: "Use stronger contrast",
+      expected_version: 1,
+    });
+
+    await previewApi.deleteTaskPreviewFeedback({
+      taskId: TASK_ID,
+      id: FEEDBACK_ID,
+      expectedVersion: 2,
+    });
+    await previewApi.clearTaskPreviewFeedback(TASK_ID, 3);
+    expect(request).toHaveBeenLastCalledWith("task.preview_feedback.clear", {
+      task_id: TASK_ID,
+      expected_revision: 3,
+    });
+  });
+});
diff --git a/apps/web/lib/api/domains/preview-feedback-api.ts b/apps/web/lib/api/domains/preview-feedback-api.ts
new file mode 100644
index 0000000000..69a79c7644
--- /dev/null
+++ b/apps/web/lib/api/domains/preview-feedback-api.ts
@@ -0,0 +1,100 @@
+import { getWebSocketClient } from "@/lib/ws/connection";
+import type {
+  PreviewCaptureRect,
+  PreviewElementSnapshot,
+  PreviewTextAnchor,
+  TaskPreviewFeedback,
+  TaskPreviewFeedbackSnapshot,
+} from "@/lib/types/http";
+
+// i18n-exempt: programmer precondition; UI callers render localized errors.
+const WS_CLIENT_UNAVAILABLE = "WebSocket client not available";
+
+function requireClient() {
+  const client = getWebSocketClient();
+  if (!client) throw new Error(WS_CLIENT_UNAVAILABLE);
+  return client;
+}
+
+export async function getTaskPreviewFeedback(taskId: string): Promise<TaskPreviewFeedbackSnapshot> {
+  return (await requireClient().request("task.preview_feedback.list", {
+    task_id: taskId,
+  })) as TaskPreviewFeedbackSnapshot;
+}
+
+export type CreateTaskPreviewFeedbackInput = {
+  taskId: string;
+  id: string;
+  kind: TaskPreviewFeedback["kind"];
+  comment: string;
+  sourceKind: TaskPreviewFeedback["source_kind"];
+  sourceSessionId?: string;
+  sourceLabel: string;
+  sourcePath?: string;
+  pageRoute: string;
+  pageTitle: string;
+  selectedText?: string;
+  textAnchor?: PreviewTextAnchor;
+  elementSnapshot?: PreviewElementSnapshot;
+  captureRect?: PreviewCaptureRect;
+  screenshotAttachmentId?: string;
+};
+
+export async function createTaskPreviewFeedback(
+  input: CreateTaskPreviewFeedbackInput,
+): Promise<TaskPreviewFeedbackSnapshot> {
+  return (await requireClient().request("task.preview_feedback.create", {
+    task_id: input.taskId,
+    id: input.id,
+    kind: input.kind,
+    comment: input.comment,
+    source_kind: input.sourceKind,
+    source_session_id: input.sourceSessionId,
+    source_label: input.sourceLabel,
+    source_path: input.sourcePath,
+    page_route: input.pageRoute,
+    page_title: input.pageTitle,
+    selected_text: input.selectedText,
+    text_anchor: input.textAnchor,
+    element_snapshot: input.elementSnapshot,
+    capture_rect: input.captureRect,
+    screenshot_attachment_id: input.screenshotAttachmentId,
+  })) as TaskPreviewFeedbackSnapshot;
+}
+
+type ItemMutationInput = {
+  taskId: string;
+  id: string;
+  expectedVersion: number;
+};
+
+export async function updateTaskPreviewFeedback(
+  input: ItemMutationInput & { comment: string },
+): Promise<TaskPreviewFeedbackSnapshot> {
+  return (await requireClient().request("task.preview_feedback.update", {
+    task_id: input.taskId,
+    id: input.id,
+    comment: input.comment,
+    expected_version: input.expectedVersion,
+  })) as TaskPreviewFeedbackSnapshot;
+}
+
+export async function deleteTaskPreviewFeedback(
+  input: ItemMutationInput,
+): Promise<TaskPreviewFeedbackSnapshot> {
+  return (await requireClient().request("task.preview_feedback.delete", {
+    task_id: input.taskId,
+    id: input.id,
+    expected_version: input.expectedVersion,
+  })) as TaskPreviewFeedbackSnapshot;
+}
+
+export async function clearTaskPreviewFeedback(
+  taskId: string,
+  expectedRevision: number,
+): Promise<TaskPreviewFeedbackSnapshot> {
+  return (await requireClient().request("task.preview_feedback.clear", {
+    task_id: taskId,
+    expected_revision: expectedRevision,
+  })) as TaskPreviewFeedbackSnapshot;
+}
diff --git a/apps/web/lib/api/domains/queue-api.ts b/apps/web/lib/api/domains/queue-api.ts
index b7b2a6d1e4..5128d2429d 100644
--- a/apps/web/lib/api/domains/queue-api.ts
+++ b/apps/web/lib/api/domains/queue-api.ts
@@ -1,6 +1,6 @@
 import type { QueueStatus, QueuedMessage } from "@/lib/state/slices/session/types";
 import type { EntityReference } from "@/lib/types/entity-reference";
-import type { Message, TaskPlanCommentRef } from "@/lib/types/http";
+import type { Message, TaskPlanCommentRef, TaskPreviewFeedbackRef } from "@/lib/types/http";
 import { getWebSocketClient } from "@/lib/ws/connection";
 import { WebSocketRequestError } from "@/lib/ws/request-error";
 // i18n-exempt: precondition diagnostic for a programmer error; callers branch
@@ -214,6 +214,7 @@ export type QueueMessageParams = {
   user_id?: string;
   client_queue_id?: string;
   plan_comment_refs?: TaskPlanCommentRef[];
+  preview_feedback_refs?: TaskPreviewFeedbackRef[];
   require_primary_session?: boolean;
 };
 
@@ -321,7 +322,9 @@ async function reconcileUncertainQueueAdmission(
   originalError: unknown,
   request: () => Promise<QueuedMessage>,
 ) {
-  const scanOlderTranscriptPages = Boolean(params.plan_comment_refs?.length);
+  const scanOlderTranscriptPages = Boolean(
+    params.plan_comment_refs?.length || params.preview_feedback_refs?.length,
+  );
   const accepted = await findAcceptedQueueAdmission(client, params, scanOlderTranscriptPages);
   if (accepted) return accepted;
   if (!(await waitForQueueConnection(client))) throw originalError;
diff --git a/apps/web/lib/chat/message-send-error.ts b/apps/web/lib/chat/message-send-error.ts
index 56f5201407..48d43efd11 100644
--- a/apps/web/lib/chat/message-send-error.ts
+++ b/apps/web/lib/chat/message-send-error.ts
@@ -4,6 +4,7 @@ export type MessageSendErrorCode =
   | "session-unavailable"
   | "plan-comment-migration-pending"
   | "plan-comments-changed"
+  | "preview-feedback-changed"
   | "primary-session-changed"
   | "late-answer-admission-failed";
 
@@ -26,6 +27,7 @@ export function isMessageSendError(error: unknown): error is MessageSendError {
     code === "session-unavailable" ||
     code === "plan-comment-migration-pending" ||
     code === "plan-comments-changed" ||
+    code === "preview-feedback-changed" ||
     code === "primary-session-changed" ||
     code === "late-answer-admission-failed"
   );
diff --git a/apps/web/lib/preview-feedback-refs.ts b/apps/web/lib/preview-feedback-refs.ts
new file mode 100644
index 0000000000..8b37f37949
--- /dev/null
+++ b/apps/web/lib/preview-feedback-refs.ts
@@ -0,0 +1,34 @@
+import type {
+  TaskPreviewFeedback,
+  TaskPreviewFeedbackRef,
+  TaskPreviewFeedbackSnapshot,
+} from "@/lib/types/http";
+import { WebSocketRequestError } from "@/lib/ws/request-error";
+
+/** Freeze the persisted versions visible when a task composer submits. */
+export function toTaskPreviewFeedbackRefs(items: TaskPreviewFeedback[]): TaskPreviewFeedbackRef[] {
+  return items.map((item) => ({ id: item.id, version: item.version }));
+}
+
+function parseSnapshot(value: unknown): TaskPreviewFeedbackSnapshot | undefined {
+  if (
+    typeof value !== "object" ||
+    value === null ||
+    !("task_id" in value) ||
+    !("revision" in value) ||
+    !("items" in value)
+  ) {
+    return undefined;
+  }
+  return value as TaskPreviewFeedbackSnapshot;
+}
+
+/** Read the authoritative collection returned with a stale delivery request. */
+export function previewFeedbackAdmissionConflict(
+  error: unknown,
+): TaskPreviewFeedbackSnapshot | undefined {
+  if (!(error instanceof WebSocketRequestError) || error.code !== "preview_feedback_changed") {
+    return undefined;
+  }
+  return parseSnapshot(error.details?.snapshot);
+}
diff --git a/apps/web/lib/preview-feedback-source.test.ts b/apps/web/lib/preview-feedback-source.test.ts
new file mode 100644
index 0000000000..22f07b1570
--- /dev/null
+++ b/apps/web/lib/preview-feedback-source.test.ts
@@ -0,0 +1,20 @@
+import { describe, expect, it } from "vitest";
+import { previewSourceLabel, sanitizePreviewPageRoute } from "./preview-feedback-source";
+
+describe("preview feedback source identity", () => {
+  it("keeps browser source labels free of credentials and route data", () => {
+    expect(
+      previewSourceLabel(
+        "https://user:password@example.test:8443/account?access_token=secret#fragment",
+      ),
+    ).toBe("https://example.test:8443");
+  });
+
+  it("keeps safe route parameters while dropping secrets and fragments", () => {
+    expect(
+      sanitizePreviewPageRoute(
+        "/checkout?step=shipping&access_token=secret&redirect_uri=%2Faccount#payment",
+      ),
+    ).toBe("/checkout?step=shipping&redirect_uri=%2Faccount");
+  });
+});
diff --git a/apps/web/lib/preview-feedback-source.ts b/apps/web/lib/preview-feedback-source.ts
new file mode 100644
index 0000000000..2d80700053
--- /dev/null
+++ b/apps/web/lib/preview-feedback-source.ts
@@ -0,0 +1,34 @@
+const SENSITIVE_QUERY_PARAMETER =
+  /(?:^|[_-])(access[_-]?token|id[_-]?token|token|secret|password|passwd|auth(?:orization)?|credential|cookie|session|capability|signature|sig|nonce|code|state|key)(?:$|[_-])/i;
+
+function safeSearch(search: string): string {
+  const kept: string[] = [];
+  const params = new URLSearchParams(search);
+  params.forEach((value, name) => {
+    if (SENSITIVE_QUERY_PARAMETER.test(name)) return;
+    kept.push(`${encodeURIComponent(name)}=${encodeURIComponent(value)}`);
+  });
+  return kept.length ? `?${kept.join("&")}` : "";
+}
+
+/** Returns only the stable service identity for a browser preview source. */
+export function previewSourceLabel(value: string): string {
+  try {
+    const url = new URL(value);
+    if (url.origin !== "null") return url.origin;
+  } catch {
+    // The browser preview normally supplies an absolute URL. Keep the
+    // fallback below defensive for malformed or partially typed input.
+  }
+  return sanitizePreviewPageRoute(value).split("?")[0];
+}
+
+/** Keeps the path and non-sensitive query parameters of a rendered page route. */
+export function sanitizePreviewPageRoute(value: string): string {
+  try {
+    const url = new URL(value, "http://kandev.invalid");
+    return `${url.pathname || "/"}${safeSearch(url.search)}`;
+  } catch {
+    return value.split("#", 1)[0].split("?", 1)[0] || "/";
+  }
+}
diff --git a/apps/web/lib/preview-inspect-bridge.test.ts b/apps/web/lib/preview-inspect-bridge.test.ts
index d4a7ea8d7a..99ad012244 100644
--- a/apps/web/lib/preview-inspect-bridge.test.ts
+++ b/apps/web/lib/preview-inspect-bridge.test.ts
@@ -1,74 +1,173 @@
-import { describe, expect, it } from "vitest";
-import { formatAnnotations, type Annotation } from "./preview-inspect-bridge";
+import { describe, expect, it, vi } from "vitest";
+import {
+  INSPECTOR_PROTOCOL_VERSION,
+  INSPECTOR_SOURCE,
+  isInspectorMessage,
+  sendProjectPreviewMarkers,
+  sendSetPreviewCaptureMode,
+} from "./preview-inspect-bridge";
 
-const pin: Annotation = {
-  id: "a-1",
-  number: 1,
-  kind: "pin",
-  pagePath: "/products",
-  comment: "Make this primary color",
-  element: {
-    tag: "button",
-    id: "submit",
-    role: "button",
-    ariaLabel: "Submit form",
-    text: "Submit",
-    selector: "div#root > button#submit",
-  },
+const RUNTIME_SELECTOR = "#runtime-total";
+const RUNTIME_TOTAL = "$42.00";
+
+const renderedElement = {
+  tag: "span",
+  id: "runtime-total",
+  classes: ["price"],
+  role: "status",
+  accessible_label: "Cart total",
+  visible_text: RUNTIME_TOTAL,
+  selector: RUNTIME_SELECTOR,
+  outer_html: '<span id="runtime-total" class="price">$42.00</span>',
 };
 
-const area: Annotation = {
-  id: "a-2",
-  number: 2,
-  kind: "area",
-  pagePath: "/products",
-  comment: "Add a New badge to featured items",
-  rect: { x: 40, y: 200, w: 320, h: 180 },
-  elements: [
-    { tag: "div", classes: "product-card featured", selector: "div.product-card" },
-    { tag: "h2", classes: "title", text: "Item", selector: "h2.title" },
-  ],
-};
+function textCaptureMessage() {
+  return {
+    source: INSPECTOR_SOURCE,
+    version: INSPECTOR_PROTOCOL_VERSION,
+    type: "capture-completed",
+    payload: {
+      kind: "text",
+      page_route: "/checkout?step=review",
+      page_title: "Checkout",
+      selected_text: RUNTIME_TOTAL,
+      text_anchor: {
+        start: { selector: RUNTIME_SELECTOR, node_path: [0], offset: 0 },
+        end: { selector: RUNTIME_SELECTOR, node_path: [0], offset: 6 },
+        rects: [{ x: 120, y: 340, width: 58, height: 20 }],
+        union_rect: { x: 120, y: 340, width: 58, height: 20 },
+        scroll_x: 0,
+        scroll_y: 260,
+        viewport_width: 1280,
+        viewport_height: 720,
+        device_pixel_ratio: 2,
+        containing_element: renderedElement,
+      },
+    },
+  };
+}
 
-describe("formatAnnotations", () => {
-  it("returns empty string when no annotations", () => {
-    expect(formatAnnotations([])).toBe("");
+describe("preview inspector protocol validation", () => {
+  it("accepts script-generated text with its rendered DOM range and position", () => {
+    const message = textCaptureMessage();
+
+    expect(isInspectorMessage(message)).toBe(true);
+    if (!isInspectorMessage(message) || message.type !== "capture-completed") return;
+    expect(message.payload.text_anchor?.containing_element).toEqual(renderedElement);
+    expect(message.payload.text_anchor?.start).toEqual({
+      selector: RUNTIME_SELECTOR,
+      node_path: [0],
+      offset: 0,
+    });
+    expect(message.payload.text_anchor?.union_rect).toEqual({
+      x: 120,
+      y: 340,
+      width: 58,
+      height: 20,
+    });
+    expect(message.payload.text_anchor?.scroll_y).toBe(260);
   });
 
-  it("renders a single pin with element details and comment", () => {
-    const out = formatAnnotations([pin]);
-    expect(out).toContain("Preview annotations on `/products`");
-    expect(out).toContain("1. [Pin] `button#submit`");
-    expect(out).toContain('role="button"');
-    expect(out).toContain('"Submit form"');
-    expect(out).toContain("Comment: Make this primary color");
-    expect(out).toContain("Selector: `div#root > button#submit`");
+  it("rejects capture events with the wrong protocol version or incomplete anchors", () => {
+    expect(isInspectorMessage({ ...textCaptureMessage(), version: 1 })).toBe(false);
+    const missingEndpoint = textCaptureMessage();
+    delete (missingEndpoint.payload.text_anchor as { end?: unknown }).end;
+    expect(isInspectorMessage(missingEndpoint)).toBe(false);
   });
 
-  it("renders an area with bounding rect and contained elements", () => {
-    const out = formatAnnotations([area]);
-    expect(out).toContain("2. [Area 320x180 at (40,200)]");
-    expect(out).toContain("Contains: `div.product-card`, `h2.title`");
-    expect(out).toContain("Comment: Add a New badge to featured items");
+  it("rejects oversized rendered HTML and invalid rectangle numbers", () => {
+    const oversized = textCaptureMessage();
+    oversized.payload.text_anchor.containing_element.outer_html = "x".repeat(70_000);
+    expect(isInspectorMessage(oversized)).toBe(false);
+
+    const invalidRect = textCaptureMessage();
+    invalidRect.payload.text_anchor.rects[0]!.width = Number.POSITIVE_INFINITY;
+    expect(isInspectorMessage(invalidRect)).toBe(false);
   });
 
-  it("renders multiple annotations in order under a single header", () => {
-    const out = formatAnnotations([pin, area]);
-    const headerCount = (out.match(/Preview annotations on/g) || []).length;
-    expect(headerCount).toBe(1);
-    expect(out.indexOf("1. [Pin]")).toBeLessThan(out.indexOf("2. [Area"));
-  });
-
-  it("omits comment line when comment is empty", () => {
-    const noComment: Annotation = { ...pin, comment: "" };
-    const out = formatAnnotations([noComment]);
-    expect(out).not.toContain("Comment:");
-  });
-
-  it("groups annotations by pagePath when they differ", () => {
-    const other: Annotation = { ...pin, id: "a-3", number: 3, pagePath: "/about" };
-    const out = formatAnnotations([pin, other]);
-    expect(out).toContain("Preview annotations on `/products`");
-    expect(out).toContain("Preview annotations on `/about`");
+  it("accepts bounded candidate and route announcements", () => {
+    expect(
+      isInspectorMessage({
+        source: INSPECTOR_SOURCE,
+        version: INSPECTOR_PROTOCOL_VERSION,
+        type: "candidate-changed",
+        payload: { label: "button#save.primary" },
+      }),
+    ).toBe(true);
+    expect(
+      isInspectorMessage({
+        source: INSPECTOR_SOURCE,
+        version: INSPECTOR_PROTOCOL_VERSION,
+        type: "route-changed",
+        payload: { page_route: "/account", page_title: "Account" },
+      }),
+    ).toBe(true);
+    expect(
+      isInspectorMessage({
+        source: INSPECTOR_SOURCE,
+        version: INSPECTOR_PROTOCOL_VERSION,
+        type: "screenshot-region-selected",
+        payload: {
+          page_route: "/account",
+          page_title: "Account",
+          capture_rect: {
+            x: 20,
+            y: 40,
+            width: 300,
+            height: 180,
+            document_x: 20,
+            document_y: 640,
+            scroll_x: 0,
+            scroll_y: 600,
+            viewport_width: 390,
+            viewport_height: 844,
+            device_pixel_ratio: 3,
+          },
+        },
+      }),
+    ).toBe(true);
+  });
+});
+
+describe("preview inspector commands", () => {
+  function iframeWithPostMessage() {
+    const postMessage = vi.fn();
+    const iframe = { contentWindow: { postMessage } } as unknown as HTMLIFrameElement;
+    return { iframe, postMessage };
+  }
+
+  it("starts one explicit selection mode", () => {
+    const { iframe, postMessage } = iframeWithPostMessage();
+    sendSetPreviewCaptureMode(iframe, "element");
+    expect(postMessage).toHaveBeenCalledWith(
+      {
+        source: INSPECTOR_SOURCE,
+        version: INSPECTOR_PROTOCOL_VERSION,
+        type: "set-capture-mode",
+        payload: { mode: "element" },
+      },
+      "*",
+    );
+  });
+
+  it("projects only immutable marker evidence", () => {
+    const { iframe, postMessage } = iframeWithPostMessage();
+    sendProjectPreviewMarkers(iframe, [
+      {
+        id: "feedback-1",
+        kind: "element",
+        page_route: "/checkout",
+        element_snapshot: renderedElement,
+        capture_rect: { x: 10, y: 20, width: 100, height: 40 },
+      },
+    ]);
+    expect(postMessage).toHaveBeenCalledWith(
+      expect.objectContaining({
+        version: INSPECTOR_PROTOCOL_VERSION,
+        type: "project-markers",
+        payload: { markers: [expect.objectContaining({ id: "feedback-1" })] },
+      }),
+      "*",
+    );
   });
 });
diff --git a/apps/web/lib/preview-inspect-bridge.ts b/apps/web/lib/preview-inspect-bridge.ts
index 7c8b870dd2..bc87ff54ba 100644
--- a/apps/web/lib/preview-inspect-bridge.ts
+++ b/apps/web/lib/preview-inspect-bridge.ts
@@ -1,74 +1,91 @@
+import type {
+  PreviewCaptureRect,
+  PreviewElementSnapshot,
+  PreviewTextAnchor,
+} from "@/lib/types/http-agents";
+
 export const INSPECTOR_SOURCE = "kandev-inspector" as const;
+export const INSPECTOR_PROTOCOL_VERSION = 2 as const;
 
-export interface CapturedElement {
-  tag: string;
-  id?: string;
-  classes?: string;
-  role?: string;
-  ariaLabel?: string;
-  text?: string;
-  selector?: string;
-}
+const MAX_ROUTE_LENGTH = 4_096;
+const MAX_TITLE_LENGTH = 1_024;
+const MAX_LABEL_LENGTH = 1_024;
+const MAX_SELECTED_TEXT_LENGTH = 262_144;
+const MAX_OUTER_HTML_LENGTH = 65_536;
+const MAX_ELEMENT_TEXT_LENGTH = 16_384;
+const MAX_SELECTOR_LENGTH = 4_096;
+const MAX_RECTS = 512;
+const MAX_NODE_PATH_LENGTH = 128;
 
-export interface AnnotationRect {
-  x: number;
-  y: number;
-  w: number;
-  h: number;
-}
+export type PreviewCaptureMode = "text" | "element" | "screenshot";
 
-export type AnnotationKind = "pin" | "area";
+export type PreviewCaptureDraft = {
+  kind: "text" | "element";
+  page_route: string;
+  page_title: string;
+  selected_text?: string;
+  text_anchor?: PreviewTextAnchor;
+  element_snapshot?: PreviewElementSnapshot;
+  capture_rect?: PreviewCaptureRect;
+};
 
-export interface Annotation {
+export type PreviewMarkerProjection = {
   id: string;
-  number: number;
-  kind: AnnotationKind;
-  pagePath: string;
-  comment: string;
-  rect?: AnnotationRect;
-  element?: CapturedElement | null;
-  elements?: CapturedElement[] | null;
-}
-
-/** Wire payload — number is assigned by the parent on receipt. */
-export type AnnotationWirePayload = Omit<Annotation, "number">;
-
-interface InspectorToggleCommand {
-  source: typeof INSPECTOR_SOURCE;
-  type: "toggle-inspect";
-  payload: { active: boolean };
-}
-
-interface InspectorClearCommand {
-  source: typeof INSPECTOR_SOURCE;
-  type: "clear-annotations";
-  payload: Record<string, never>;
-}
-
-interface InspectorRemoveMarkerCommand {
-  source: typeof INSPECTOR_SOURCE;
-  type: "remove-marker";
-  payload: { number: number };
-}
-
-interface AnnotationAddedMessage {
-  source: typeof INSPECTOR_SOURCE;
-  type: "annotation-added";
-  payload: AnnotationWirePayload;
-}
-
-interface InspectExitedMessage {
-  source: typeof INSPECTOR_SOURCE;
-  type: "inspect-exited";
-  payload: Record<string, never>;
-}
+  kind: "text" | "element" | "screenshot";
+  page_route: string;
+  text_anchor?: PreviewTextAnchor;
+  element_snapshot?: PreviewElementSnapshot;
+  capture_rect?: PreviewCaptureRect;
+};
 
 interface InspectorReadyMessage {
   source: typeof INSPECTOR_SOURCE;
+  version: typeof INSPECTOR_PROTOCOL_VERSION;
   type: "inspector-ready";
+  payload: { page_route: string; page_title: string };
+}
+
+interface PreviewRouteChangedMessage {
+  source: typeof INSPECTOR_SOURCE;
+  version: typeof INSPECTOR_PROTOCOL_VERSION;
+  type: "route-changed";
+  payload: { page_route: string; page_title: string };
+}
+
+interface PreviewCandidateChangedMessage {
+  source: typeof INSPECTOR_SOURCE;
+  version: typeof INSPECTOR_PROTOCOL_VERSION;
+  type: "candidate-changed";
+  payload: { label: string | null };
+}
+
+interface PreviewCaptureCompletedMessage {
+  source: typeof INSPECTOR_SOURCE;
+  version: typeof INSPECTOR_PROTOCOL_VERSION;
+  type: "capture-completed";
+  payload: PreviewCaptureDraft;
+}
+
+interface PreviewCaptureCancelledMessage {
+  source: typeof INSPECTOR_SOURCE;
+  version: typeof INSPECTOR_PROTOCOL_VERSION;
+  type: "capture-cancelled";
   payload: Record<string, never>;
 }
 
+export type PreviewScreenshotRegion = {
+  page_route: string;
+  page_title: string;
+  capture_rect: PreviewCaptureRect;
+};
+
+interface PreviewScreenshotRegionSelectedMessage {
+  source: typeof INSPECTOR_SOURCE;
+  version: typeof INSPECTOR_PROTOCOL_VERSION;
+  type: "screenshot-region-selected";
+  payload: PreviewScreenshotRegion;
+}
+
 interface PreviewConsoleReadyMessage {
   source: typeof INSPECTOR_SOURCE;
   type: "console-ready";
@@ -83,6 +100,7 @@ const PREVIEW_CONSOLE_LEVELS: ReadonlySet<string> = new Set([
   "info",
   "debug",
 ]);
+const LEGACY_INSPECTOR_TYPES: ReadonlySet<unknown> = new Set(["console-ready", "console"]);
 
 interface PreviewConsoleMessage {
   source: typeof INSPECTOR_SOURCE;
@@ -91,9 +109,12 @@ interface PreviewConsoleMessage {
 }
 
 export type InspectorMessage =
-  | AnnotationAddedMessage
-  | InspectExitedMessage
   | InspectorReadyMessage
+  | PreviewRouteChangedMessage
+  | PreviewCandidateChangedMessage
+  | PreviewCaptureCompletedMessage
+  | PreviewCaptureCancelledMessage
+  | PreviewScreenshotRegionSelectedMessage
   | PreviewConsoleReadyMessage
   | PreviewConsoleMessage;
 
@@ -116,45 +137,191 @@ export function isPreviewConsoleReadyMessage(
 }
 
 export function isInspectorMessage(data: unknown): data is InspectorMessage {
-  if (typeof data !== "object" || data === null) return false;
-  const d = data as { source?: unknown; type?: unknown; payload?: unknown };
+  if (!isRecord(data) || data.source !== INSPECTOR_SOURCE || !isRecord(data.payload)) return false;
+
+  // The console shim predates the capture protocol and is injected separately.
+  // Keep accepting its narrow legacy messages until both scripts share a version.
+  if (LEGACY_INSPECTOR_TYPES.has(data.type)) return isLegacyInspectorMessage(data);
+
+  if (data.version !== INSPECTOR_PROTOCOL_VERSION) return false;
+  switch (data.type) {
+    case "inspector-ready":
+    case "route-changed":
+      return isPageIdentity(data.payload);
+    case "candidate-changed":
+      return data.payload.label === null || isBoundedString(data.payload.label, MAX_LABEL_LENGTH);
+    case "capture-completed":
+      return isCaptureDraft(data.payload);
+    case "capture-cancelled":
+      return true;
+    case "screenshot-region-selected":
+      return isPageIdentity(data.payload) && isCaptureRect(data.payload.capture_rect);
+    default:
+      return false;
+  }
+}
+
+function isLegacyInspectorMessage(data: Record<string, unknown>): boolean {
+  if (data.type === "console-ready") return true;
+  if (data.type !== "console" || !isRecord(data.payload)) return false;
   return (
-    d.source === INSPECTOR_SOURCE &&
-    typeof d.type === "string" &&
-    typeof d.payload === "object" &&
-    d.payload !== null
+    typeof data.payload.level === "string" &&
+    PREVIEW_CONSOLE_LEVELS.has(data.payload.level) &&
+    Array.isArray(data.payload.args)
   );
 }
 
-export function sendToggleInspect(iframe: HTMLIFrameElement, active: boolean): void {
+function isRecord(value: unknown): value is Record<string, unknown> {
+  return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+
+function isBoundedString(value: unknown, maximum: number): value is string {
+  return typeof value === "string" && value.length <= maximum;
+}
+
+function isPageIdentity(value: Record<string, unknown>): boolean {
+  return (
+    isBoundedString(value.page_route, MAX_ROUTE_LENGTH) &&
+    isBoundedString(value.page_title, MAX_TITLE_LENGTH)
+  );
+}
+
+function isOptionalFiniteNumber(value: unknown): boolean {
+  return value === undefined || (typeof value === "number" && Number.isFinite(value));
+}
+
+function hasFiniteNumberFields(value: Record<string, unknown>, fields: string[]) {
+  return fields.every((field) => typeof value[field] === "number" && Number.isFinite(value[field]));
+}
+
+function hasOptionalFiniteNumberFields(value: Record<string, unknown>, fields: string[]) {
+  return fields.every((field) => isOptionalFiniteNumber(value[field]));
+}
+
+function isCaptureRect(value: unknown): value is PreviewCaptureRect {
+  if (!isRecord(value)) return false;
+  if (!hasFiniteNumberFields(value, ["x", "y", "width", "height"])) return false;
+  if ((value.width as number) < 0 || (value.height as number) < 0) return false;
+  return hasOptionalFiniteNumberFields(value, [
+    "document_x",
+    "document_y",
+    "scroll_x",
+    "scroll_y",
+    "viewport_width",
+    "viewport_height",
+    "device_pixel_ratio",
+  ]);
+}
+
+function isOptionalBoundedString(value: unknown, maximum: number) {
+  return value === undefined || isBoundedString(value, maximum);
+}
+
+function isElementSnapshot(value: unknown): value is PreviewElementSnapshot {
+  if (!isRecord(value)) return false;
+  return (
+    isBoundedString(value.tag, 128) &&
+    value.tag.length > 0 &&
+    isOptionalBoundedString(value.id, MAX_LABEL_LENGTH) &&
+    Array.isArray(value.classes) &&
+    value.classes.length <= 128 &&
+    value.classes.every((item) => isBoundedString(item, MAX_LABEL_LENGTH)) &&
+    isOptionalBoundedString(value.role, MAX_LABEL_LENGTH) &&
+    isOptionalBoundedString(value.accessible_label, MAX_ELEMENT_TEXT_LENGTH) &&
+    isOptionalBoundedString(value.visible_text, MAX_ELEMENT_TEXT_LENGTH) &&
+    isOptionalBoundedString(value.selector, MAX_SELECTOR_LENGTH) &&
+    isBoundedString(value.outer_html, MAX_OUTER_HTML_LENGTH)
+  );
+}
+
+function isTextEndpoint(value: unknown): boolean {
+  if (!isRecord(value)) return false;
+  return (
+    (value.selector === undefined || isBoundedString(value.selector, MAX_SELECTOR_LENGTH)) &&
+    Array.isArray(value.node_path) &&
+    value.node_path.length <= MAX_NODE_PATH_LENGTH &&
+    value.node_path.every((part) => Number.isInteger(part) && part >= 0) &&
+    Number.isInteger(value.offset) &&
+    (value.offset as number) >= 0
+  );
+}
+
+function isTextAnchor(value: unknown): value is PreviewTextAnchor {
+  if (!isRecord(value) || !isTextEndpoint(value.start) || !isTextEndpoint(value.end)) return false;
+  if (
+    value.rects !== undefined &&
+    (!Array.isArray(value.rects) ||
+      value.rects.length > MAX_RECTS ||
+      !value.rects.every(isCaptureRect))
+  ) {
+    return false;
+  }
+  return (
+    (value.union_rect === undefined || isCaptureRect(value.union_rect)) &&
+    isOptionalFiniteNumber(value.scroll_x) &&
+    isOptionalFiniteNumber(value.scroll_y) &&
+    isOptionalFiniteNumber(value.viewport_width) &&
+    isOptionalFiniteNumber(value.viewport_height) &&
+    isOptionalFiniteNumber(value.device_pixel_ratio) &&
+    isElementSnapshot(value.containing_element)
+  );
+}
+
+function isCaptureDraft(value: Record<string, unknown>): value is PreviewCaptureDraft {
+  if (!isPageIdentity(value)) return false;
+  if (value.kind === "text") {
+    return (
+      isBoundedString(value.selected_text, MAX_SELECTED_TEXT_LENGTH) &&
+      value.selected_text.length > 0 &&
+      isTextAnchor(value.text_anchor)
+    );
+  }
+  if (value.kind === "element") {
+    return isElementSnapshot(value.element_snapshot) && isCaptureRect(value.capture_rect);
+  }
+  return false;
+}
+
+interface SetPreviewCaptureModeCommand {
+  source: typeof INSPECTOR_SOURCE;
+  version: typeof INSPECTOR_PROTOCOL_VERSION;
+  type: "set-capture-mode";
+  payload: { mode: PreviewCaptureMode | null };
+}
+
+interface ProjectPreviewMarkersCommand {
+  source: typeof INSPECTOR_SOURCE;
+  version: typeof INSPECTOR_PROTOCOL_VERSION;
+  type: "project-markers";
+  payload: { markers: PreviewMarkerProjection[] };
+}
+
+export function sendSetPreviewCaptureMode(
+  iframe: HTMLIFrameElement,
+  mode: PreviewCaptureMode | null,
+): void {
   iframe.contentWindow?.postMessage(
     {
       source: INSPECTOR_SOURCE,
-      type: "toggle-inspect",
-      payload: { active },
-    } satisfies InspectorToggleCommand,
+      version: INSPECTOR_PROTOCOL_VERSION,
+      type: "set-capture-mode",
+      payload: { mode },
+    } satisfies SetPreviewCaptureModeCommand,
     "*",
   );
 }
 
-export function sendClearAnnotations(iframe: HTMLIFrameElement): void {
+export function sendProjectPreviewMarkers(
+  iframe: HTMLIFrameElement,
+  markers: PreviewMarkerProjection[],
+): void {
   iframe.contentWindow?.postMessage(
     {
       source: INSPECTOR_SOURCE,
-      type: "clear-annotations",
-      payload: {},
-    } satisfies InspectorClearCommand,
-    "*",
-  );
-}
-
-export function sendRemoveMarker(iframe: HTMLIFrameElement, number: number): void {
-  iframe.contentWindow?.postMessage(
-    {
-      source: INSPECTOR_SOURCE,
-      type: "remove-marker",
-      payload: { number },
-    } satisfies InspectorRemoveMarkerCommand,
+      version: INSPECTOR_PROTOCOL_VERSION,
+      type: "project-markers",
+      payload: { markers },
+    } satisfies ProjectPreviewMarkersCommand,
     "*",
   );
 }
@@ -169,63 +336,3 @@ export function sendConsoleBind(iframe: HTMLIFrameElement, targetOrigin: string)
     targetOrigin,
   );
 }
-
-function formatElement(el: CapturedElement): string {
-  let idPart = "";
-  if (el.id) idPart = `#${el.id}`;
-  else if (el.classes) idPart = `.${el.classes.trim().split(/\s+/)[0]}`;
-  return `\`${el.tag}${idPart}\``;
-}
-
-function formatPin(a: Annotation): string[] {
-  const lines: string[] = [];
-  const el = a.element;
-  const role = el?.role ? ` [role="${el.role}"]` : "";
-  let label = "";
-  if (el?.ariaLabel) label = ` "${el.ariaLabel}"`;
-  else if (el?.text) label = ` "${el.text}"`;
-  const elPart = el ? ` ${formatElement(el)}` : "";
-  lines.push(`${a.number}. [Pin]${elPart}${role}${label}`);
-  if (el?.selector) lines.push(`   Selector: \`${el.selector}\``);
-  if (a.comment) lines.push(`   Comment: ${a.comment}`);
-  return lines;
-}
-
-function formatArea(a: Annotation): string[] {
-  const lines: string[] = [];
-  const r = a.rect;
-  const header = r
-    ? `${a.number}. [Area ${Math.round(r.w)}x${Math.round(r.h)} at (${Math.round(r.x)},${Math.round(r.y)})]`
-    : `${a.number}. [Area]`;
-  lines.push(header);
-  if (a.elements && a.elements.length > 0) {
-    const names = a.elements.map(formatElement).join(", ");
-    lines.push(`   Contains: ${names}`);
-  }
-  if (a.comment) lines.push(`   Comment: ${a.comment}`);
-  return lines;
-}
-
-export function formatAnnotations(annotations: Annotation[]): string {
-  if (annotations.length === 0) return "";
-
-  const byPath = new Map<string, Annotation[]>();
-  for (const a of annotations) {
-    const list = byPath.get(a.pagePath) ?? [];
-    list.push(a);
-    byPath.set(a.pagePath, list);
-  }
-
-  const sections: string[] = [];
-  for (const [pagePath, list] of byPath) {
-    const lines: string[] = [`> Preview annotations on \`${pagePath}\``, ">"];
-    for (const a of list) {
-      const body = a.kind === "pin" ? formatPin(a) : formatArea(a);
-      for (const line of body) lines.push("> " + line);
-      lines.push(">");
-    }
-    while (lines[lines.length - 1] === ">") lines.pop();
-    sections.push(lines.join("\n"));
-  }
-  return sections.join("\n\n");
-}
diff --git a/apps/web/lib/preview-screenshot.test.ts b/apps/web/lib/preview-screenshot.test.ts
new file mode 100644
index 0000000000..b6e15c56df
--- /dev/null
+++ b/apps/web/lib/preview-screenshot.test.ts
@@ -0,0 +1,120 @@
+import { describe, expect, it, vi } from "vitest";
+import {
+  MAX_PREVIEW_SCREENSHOT_BYTES,
+  MAX_PREVIEW_SCREENSHOT_PIXELS,
+  normalizeScreenshotRect,
+  previewScreenshotScale,
+  rasterizePreviewRegion,
+} from "./preview-screenshot";
+
+describe("preview screenshot geometry", () => {
+  it("normalizes reverse viewport drag into document and device coordinates", () => {
+    expect(
+      normalizeScreenshotRect(
+        { x: 300, y: 240 },
+        { x: 100, y: 80 },
+        {
+          scrollX: 20,
+          scrollY: 600,
+          viewportWidth: 390,
+          viewportHeight: 844,
+          devicePixelRatio: 3,
+        },
+      ),
+    ).toEqual({
+      x: 100,
+      y: 80,
+      width: 200,
+      height: 160,
+      document_x: 120,
+      document_y: 680,
+      scroll_x: 20,
+      scroll_y: 600,
+      viewport_width: 390,
+      viewport_height: 844,
+      device_pixel_ratio: 3,
+    });
+  });
+
+  it("rejects empty drags and clamps an oversized region before allocating a canvas", () => {
+    expect(
+      normalizeScreenshotRect(
+        { x: 10, y: 10 },
+        { x: 12, y: 12 },
+        { scrollX: 0, scrollY: 0, viewportWidth: 100, viewportHeight: 100, devicePixelRatio: 1 },
+      ),
+    ).toBeNull();
+    expect(previewScreenshotScale(4_000, 4_000, 2)).toBe(1);
+    expect(4_000 * 4_000 * previewScreenshotScale(4_000, 4_000, 2) ** 2).toBeLessThanOrEqual(
+      MAX_PREVIEW_SCREENSHOT_PIXELS,
+    );
+  });
+});
+
+function pngBlob(size = 8) {
+  const signature = new Uint8Array([137, 80, 78, 71, 13, 10, 26, 10]);
+  return new Blob([signature, new Uint8Array(Math.max(0, size - signature.length))], {
+    type: "image/png",
+  });
+}
+
+describe("preview screenshot rasterization", () => {
+  const rect = {
+    x: 10,
+    y: 20,
+    width: 200,
+    height: 100,
+    document_x: 10,
+    document_y: 420,
+    device_pixel_ratio: 2,
+  };
+
+  it("renders only the selected document region and returns reviewable PNG dimensions", async () => {
+    const blob = pngBlob(128);
+    const canvas = {
+      width: 400,
+      height: 200,
+      toBlob: (callback: BlobCallback) => callback(blob),
+    } as HTMLCanvasElement;
+    const render = vi.fn().mockResolvedValue(canvas);
+    const documentElement = {} as HTMLElement;
+
+    const result = await rasterizePreviewRegion(documentElement, rect, render);
+
+    expect(render).toHaveBeenCalledWith(
+      documentElement,
+      expect.objectContaining({ x: 10, y: 420, width: 200, height: 100, scale: 2 }),
+    );
+    expect(result).toEqual({ blob, width: 400, height: 200 });
+  });
+
+  it("rejects empty canvases, non-PNG bytes, and encoded output above 10 MiB", async () => {
+    const emptyCanvas = {
+      width: 0,
+      height: 0,
+      toBlob: vi.fn(),
+    } as unknown as HTMLCanvasElement;
+    await expect(
+      rasterizePreviewRegion({} as HTMLElement, rect, vi.fn().mockResolvedValue(emptyCanvas)),
+    ).rejects.toThrow(/empty/i);
+
+    const invalidCanvas = {
+      width: 20,
+      height: 20,
+      toBlob: (callback: BlobCallback) =>
+        callback(new Blob([new Uint8Array(20)], { type: "image/png" })),
+    } as HTMLCanvasElement;
+    await expect(
+      rasterizePreviewRegion({} as HTMLElement, rect, vi.fn().mockResolvedValue(invalidCanvas)),
+    ).rejects.toThrow(/PNG/i);
+
+    const oversizedCanvas = {
+      width: 20,
+      height: 20,
+      toBlob: (callback: BlobCallback) => callback(pngBlob(MAX_PREVIEW_SCREENSHOT_BYTES + 1)),
+    } as HTMLCanvasElement;
+    await expect(
+      rasterizePreviewRegion({} as HTMLElement, rect, vi.fn().mockResolvedValue(oversizedCanvas)),
+    ).rejects.toThrow(/large/i);
+  });
+});
diff --git a/apps/web/lib/preview-screenshot.ts b/apps/web/lib/preview-screenshot.ts
new file mode 100644
index 0000000000..abd97f4b02
--- /dev/null
+++ b/apps/web/lib/preview-screenshot.ts
@@ -0,0 +1,136 @@
+import type { PreviewCaptureRect } from "@/lib/types/http";
+
+export const MAX_PREVIEW_SCREENSHOT_PIXELS = 16_000_000;
+export const MAX_PREVIEW_SCREENSHOT_BYTES = 10 * 1024 * 1024;
+const MIN_SCREENSHOT_EDGE = 5;
+const PNG_SIGNATURE = [137, 80, 78, 71, 13, 10, 26, 10] as const;
+
+type Point = { x: number; y: number };
+type ViewportMetrics = {
+  scrollX: number;
+  scrollY: number;
+  viewportWidth: number;
+  viewportHeight: number;
+  devicePixelRatio: number;
+};
+
+export type PreviewRasterRenderer = (
+  element: HTMLElement,
+  options: {
+    x: number;
+    y: number;
+    width: number;
+    height: number;
+    scale: number;
+    useCORS: boolean;
+    logging: boolean;
+    backgroundColor: null;
+  },
+) => Promise<HTMLCanvasElement>;
+
+export type RasterizedPreviewRegion = {
+  blob: Blob;
+  width: number;
+  height: number;
+};
+
+function clamp(value: number, minimum: number, maximum: number) {
+  return Math.min(maximum, Math.max(minimum, value));
+}
+
+export function normalizeScreenshotRect(
+  start: Point,
+  end: Point,
+  metrics: ViewportMetrics,
+): PreviewCaptureRect | null {
+  const startX = clamp(start.x, 0, metrics.viewportWidth);
+  const startY = clamp(start.y, 0, metrics.viewportHeight);
+  const endX = clamp(end.x, 0, metrics.viewportWidth);
+  const endY = clamp(end.y, 0, metrics.viewportHeight);
+  const x = Math.min(startX, endX);
+  const y = Math.min(startY, endY);
+  const width = Math.abs(endX - startX);
+  const height = Math.abs(endY - startY);
+  if (width < MIN_SCREENSHOT_EDGE || height < MIN_SCREENSHOT_EDGE) return null;
+  return {
+    x,
+    y,
+    width,
+    height,
+    document_x: x + metrics.scrollX,
+    document_y: y + metrics.scrollY,
+    scroll_x: metrics.scrollX,
+    scroll_y: metrics.scrollY,
+    viewport_width: metrics.viewportWidth,
+    viewport_height: metrics.viewportHeight,
+    device_pixel_ratio: metrics.devicePixelRatio,
+  };
+}
+
+export function previewScreenshotScale(width: number, height: number, requestedScale: number) {
+  if (width <= 0 || height <= 0 || requestedScale <= 0) return 0;
+  const pixelBoundScale = Math.sqrt(MAX_PREVIEW_SCREENSHOT_PIXELS / (width * height));
+  return Math.min(requestedScale, pixelBoundScale);
+}
+
+function canvasBlob(canvas: HTMLCanvasElement) {
+  return new Promise<Blob>((resolve, reject) => {
+    canvas.toBlob((blob) => {
+      if (blob) resolve(blob);
+      // i18n-exempt: internal raster failure; callers display localized recovery copy.
+      else reject(new Error("PNG encoding returned an empty result"));
+    }, "image/png");
+  });
+}
+
+async function validatePNG(blob: Blob) {
+  if (blob.type !== "image/png") {
+    // i18n-exempt: internal raster failure; callers display localized recovery copy.
+    throw new Error("Screenshot encoding did not produce PNG data");
+  }
+  if (blob.size > MAX_PREVIEW_SCREENSHOT_BYTES) {
+    // i18n-exempt: internal raster failure; callers display localized recovery copy.
+    throw new Error("Screenshot PNG is too large");
+  }
+  const signature = new Uint8Array(await blob.slice(0, PNG_SIGNATURE.length).arrayBuffer());
+  if (
+    signature.length !== PNG_SIGNATURE.length ||
+    !PNG_SIGNATURE.every((value, index) => signature[index] === value)
+  ) {
+    // i18n-exempt: internal raster failure; callers display localized recovery copy.
+    throw new Error("Screenshot encoding returned invalid PNG bytes");
+  }
+}
+
+export async function rasterizePreviewRegion(
+  documentElement: HTMLElement,
+  rect: PreviewCaptureRect,
+  render: PreviewRasterRenderer,
+): Promise<RasterizedPreviewRegion> {
+  const scale = previewScreenshotScale(
+    rect.width,
+    rect.height,
+    rect.device_pixel_ratio ?? window.devicePixelRatio ?? 1,
+  );
+  if (!scale) {
+    // i18n-exempt: internal raster failure; callers display localized recovery copy.
+    throw new Error("Screenshot region is empty");
+  }
+  const canvas = await render(documentElement, {
+    x: rect.document_x ?? rect.x + (rect.scroll_x ?? 0),
+    y: rect.document_y ?? rect.y + (rect.scroll_y ?? 0),
+    width: rect.width,
+    height: rect.height,
+    scale,
+    useCORS: true,
+    logging: false,
+    backgroundColor: null,
+  });
+  if (canvas.width <= 0 || canvas.height <= 0) {
+    // i18n-exempt: internal raster failure; callers display localized recovery copy.
+    throw new Error("Screenshot canvas is empty");
+  }
+  const blob = await canvasBlob(canvas);
+  await validatePNG(blob);
+  return { blob, width: canvas.width, height: canvas.height };
+}
diff --git a/apps/web/lib/preview-url-detector.test.ts b/apps/web/lib/preview-url-detector.test.ts
index 4b67371e2b..e460c243a4 100644
--- a/apps/web/lib/preview-url-detector.test.ts
+++ b/apps/web/lib/preview-url-detector.test.ts
@@ -237,6 +237,11 @@ describe("rewritePreviewUrlForProxy", () => {
     expect(rewritePreviewUrlForProxy(LOCALHOST_3000_URL, SESSION_ID)).toBe(proxyPath(3000, "/"));
   });
 
+  it("keeps an existing backend proxy URL unchanged", () => {
+    const proxiedUrl = proxyPath(3000, "/app?debug=true");
+    expect(rewritePreviewUrlForProxy(proxiedUrl, SESSION_ID)).toBe(proxiedUrl);
+  });
+
   it("preserves path and query string", () => {
     expect(rewritePreviewUrlForProxy("http://localhost:8080/api/test?debug=true", SESSION_ID)).toBe(
       proxyPath(8080, "/api/test?debug=true"),
diff --git a/apps/web/lib/preview-url-detector.ts b/apps/web/lib/preview-url-detector.ts
index f1bea6576f..667b9c0179 100644
--- a/apps/web/lib/preview-url-detector.ts
+++ b/apps/web/lib/preview-url-detector.ts
@@ -83,8 +83,13 @@ export function rewritePreviewUrlForProxy(detectedUrl: string, sessionId: string
     const parsed = new URL(detectedUrl);
     if (!LOCALHOST_HOSTS.has(parsed.hostname)) return null;
     if (!parsed.port) return null;
-    const path = parsed.pathname + parsed.search + parsed.hash;
     const backendUrl = getBackendConfig().apiBaseUrl;
+    const backend = new URL(backendUrl);
+    const proxyPathPrefix = `${backend.pathname.replace(/\/$/, "")}/port-proxy/${sessionId}/`;
+    if (parsed.origin === backend.origin && parsed.pathname.startsWith(proxyPathPrefix)) {
+      return detectedUrl;
+    }
+    const path = parsed.pathname + parsed.search + parsed.hash;
     return `${backendUrl}/port-proxy/${sessionId}/${parsed.port}${path}`;
   } catch {
     return null;
diff --git a/apps/web/lib/state/app-state-extra-actions.ts b/apps/web/lib/state/app-state-extra-actions.ts
index 1ac336d632..14547da00f 100644
--- a/apps/web/lib/state/app-state-extra-actions.ts
+++ b/apps/web/lib/state/app-state-extra-actions.ts
@@ -14,6 +14,7 @@ import type {
   ReviewSliceActions,
   NeedsYouInboxSliceActions,
   FailedInboxSliceActions,
+  PreviewFeedbackSliceActions,
   InboxHistorySliceActions,
 } from "./slices";
 
@@ -35,4 +36,5 @@ export type AppStateExtraActions = Pick<UIA, "setThreadActiveView" | "createThre
   ReviewSliceActions &
   NeedsYouInboxSliceActions &
   FailedInboxSliceActions &
-  InboxHistorySliceActions;
+  InboxHistorySliceActions &
+  PreviewFeedbackSliceActions;
diff --git a/apps/web/lib/state/app-state-types.ts b/apps/web/lib/state/app-state-types.ts
index 567bfc54d8..e0678187ba 100644
--- a/apps/web/lib/state/app-state-types.ts
+++ b/apps/web/lib/state/app-state-types.ts
@@ -47,6 +47,7 @@ import {
   defaultReviewState,
   defaultNeedsYouInboxState,
   defaultFailedInboxState,
+  defaultPreviewFeedbackState,
   defaultInboxHistoryState,
 } from "./slices";
 import type {
@@ -229,6 +230,9 @@ export type AppState = KanbanSlice & {
   // intersection on AppState)
   failedInbox: (typeof defaultFailedInboxState)["failedInbox"];
 
+  // Task-owned pending feedback captured from rendered previews.
+  previewFeedback: (typeof defaultPreviewFeedbackState)["previewFeedback"];
+
   // Inbox History slice (actions merged via InboxHistorySliceActions
   // intersection on AppState)
   inboxHistory: (typeof defaultInboxHistoryState)["inboxHistory"];
diff --git a/apps/web/lib/state/default-state.ts b/apps/web/lib/state/default-state.ts
index f2ae95ef99..195f3a6ef6 100644
--- a/apps/web/lib/state/default-state.ts
+++ b/apps/web/lib/state/default-state.ts
@@ -19,6 +19,7 @@ import {
   defaultReviewState,
   defaultNeedsYouInboxState,
   defaultFailedInboxState,
+  defaultPreviewFeedbackState,
   defaultInboxHistoryState,
 } from "./slices";
 import { mergeHydratedQuickChatSessions } from "@/lib/state/slices/ui/quick-chat-sync";
@@ -86,6 +87,7 @@ export const defaultState = {
   taskReview: defaultReviewState.taskReview,
   needsYouInbox: defaultNeedsYouInboxState.needsYouInbox,
   failedInbox: defaultFailedInboxState.failedInbox,
+  previewFeedback: defaultPreviewFeedbackState.previewFeedback,
   inboxHistory: defaultInboxHistoryState.inboxHistory,
   queue: defaultSessionState.queue,
   terminal: defaultSessionRuntimeState.terminal,
diff --git a/apps/web/lib/state/slices/index.ts b/apps/web/lib/state/slices/index.ts
index e0eca79b1c..c46945bfbf 100644
--- a/apps/web/lib/state/slices/index.ts
+++ b/apps/web/lib/state/slices/index.ts
@@ -116,6 +116,12 @@ export type {
   FailedInboxWorkspaceState,
   FailedInboxReadStatus,
 } from "./failed-inbox/types";
+export { createPreviewFeedbackSlice, defaultPreviewFeedbackState } from "./preview-feedback";
+export type {
+  PreviewFeedbackSlice,
+  PreviewFeedbackSliceActions,
+  PreviewFeedbackSliceState,
+} from "./preview-feedback";
 export type {
   InboxHistorySlice,
   InboxHistorySliceActions,
diff --git a/apps/web/lib/state/slices/preview-feedback/index.ts b/apps/web/lib/state/slices/preview-feedback/index.ts
new file mode 100644
index 0000000000..ea1cdb33f0
--- /dev/null
+++ b/apps/web/lib/state/slices/preview-feedback/index.ts
@@ -0,0 +1,6 @@
+export { createPreviewFeedbackSlice, defaultPreviewFeedbackState } from "./preview-feedback-slice";
+export type {
+  PreviewFeedbackSlice,
+  PreviewFeedbackSliceActions,
+  PreviewFeedbackSliceState,
+} from "./types";
diff --git a/apps/web/lib/state/slices/preview-feedback/preview-feedback-slice.test.ts b/apps/web/lib/state/slices/preview-feedback/preview-feedback-slice.test.ts
new file mode 100644
index 0000000000..ba9af63dc3
--- /dev/null
+++ b/apps/web/lib/state/slices/preview-feedback/preview-feedback-slice.test.ts
@@ -0,0 +1,52 @@
+import { describe, expect, it } from "vitest";
+import { createAppStore } from "@/lib/state/store";
+
+const snapshot = (revision: number) => ({
+  task_id: "task-1",
+  revision,
+  items: [
+    {
+      id: `feedback-${revision}`,
+      task_id: "task-1",
+      kind: "text" as const,
+      comment: `comment ${revision}`,
+      source_kind: "browser" as const,
+      source_label: "Local app",
+      page_route: "/products",
+      page_title: "Products",
+      selected_text: "Choose a plan",
+      text_anchor: { start: { path: [0], offset: 0 } },
+      version: 1,
+      created_at: "2026-09-15T00:00:00Z",
+      updated_at: "2026-09-15T00:00:00Z",
+    },
+  ],
+});
+
+describe("task preview feedback state", () => {
+  it("provides a task-keyed complete-snapshot action", () => {
+    const state = createAppStore().getState() as unknown as Record<string, unknown>;
+
+    expect(state.setTaskPreviewFeedback).toBeTypeOf("function");
+  });
+
+  it("keeps the equal or newest snapshot and records load state", () => {
+    const store = createAppStore();
+    const state = store.getState() as unknown as {
+      previewFeedback: {
+        byTaskId: Record<string, ReturnType<typeof snapshot> | undefined>;
+        loadedByTaskId: Record<string, boolean | undefined>;
+        loadingByTaskId: Record<string, boolean | undefined>;
+      };
+      setTaskPreviewFeedback: (taskId: string, value: ReturnType<typeof snapshot>) => void;
+    };
+
+    state.setTaskPreviewFeedback("task-1", snapshot(2));
+    state.setTaskPreviewFeedback("task-1", snapshot(1));
+
+    const current = store.getState() as unknown as typeof state;
+    expect(current.previewFeedback.byTaskId["task-1"]).toEqual(snapshot(2));
+    expect(current.previewFeedback.loadedByTaskId["task-1"]).toBe(true);
+    expect(current.previewFeedback.loadingByTaskId["task-1"]).toBe(false);
+  });
+});
diff --git a/apps/web/lib/state/slices/preview-feedback/preview-feedback-slice.ts b/apps/web/lib/state/slices/preview-feedback/preview-feedback-slice.ts
new file mode 100644
index 0000000000..60da240f65
--- /dev/null
+++ b/apps/web/lib/state/slices/preview-feedback/preview-feedback-slice.ts
@@ -0,0 +1,50 @@
+import type { StateCreator } from "zustand";
+import type { AppState } from "../../app-state-types";
+import type { PreviewFeedbackSlice, PreviewFeedbackSliceState } from "./types";
+
+export const defaultPreviewFeedbackState: PreviewFeedbackSliceState = {
+  previewFeedback: {
+    byTaskId: {},
+    loadedByTaskId: {},
+    loadingByTaskId: {},
+    errorByTaskId: {},
+  },
+};
+
+type ImmerSet = Parameters<
+  StateCreator<AppState, [["zustand/immer", never]], [], PreviewFeedbackSlice>
+>[0];
+
+export const createPreviewFeedbackSlice = (set: ImmerSet): PreviewFeedbackSlice => ({
+  ...defaultPreviewFeedbackState,
+
+  setTaskPreviewFeedback: (taskId, snapshot) =>
+    set((draft) => {
+      const current = draft.previewFeedback.byTaskId[taskId];
+      if (snapshot.task_id !== taskId || (current && snapshot.revision < current.revision)) return;
+      draft.previewFeedback.byTaskId[taskId] = snapshot;
+      draft.previewFeedback.loadedByTaskId[taskId] = true;
+      draft.previewFeedback.loadingByTaskId[taskId] = false;
+      delete draft.previewFeedback.errorByTaskId[taskId];
+    }),
+
+  setTaskPreviewFeedbackLoading: (taskId, loading) =>
+    set((draft) => {
+      draft.previewFeedback.loadingByTaskId[taskId] = loading;
+    }),
+
+  setTaskPreviewFeedbackError: (taskId, error) =>
+    set((draft) => {
+      draft.previewFeedback.loadingByTaskId[taskId] = false;
+      if (error) draft.previewFeedback.errorByTaskId[taskId] = error;
+      else delete draft.previewFeedback.errorByTaskId[taskId];
+    }),
+
+  clearTaskPreviewFeedbackState: (taskId) =>
+    set((draft) => {
+      delete draft.previewFeedback.byTaskId[taskId];
+      delete draft.previewFeedback.loadedByTaskId[taskId];
+      delete draft.previewFeedback.loadingByTaskId[taskId];
+      delete draft.previewFeedback.errorByTaskId[taskId];
+    }),
+});
diff --git a/apps/web/lib/state/slices/preview-feedback/types.ts b/apps/web/lib/state/slices/preview-feedback/types.ts
new file mode 100644
index 0000000000..99ee469565
--- /dev/null
+++ b/apps/web/lib/state/slices/preview-feedback/types.ts
@@ -0,0 +1,19 @@
+import type { TaskPreviewFeedbackSnapshot } from "@/lib/types/http";
+
+export type PreviewFeedbackSliceState = {
+  previewFeedback: {
+    byTaskId: Record<string, TaskPreviewFeedbackSnapshot | undefined>;
+    loadedByTaskId: Record<string, boolean | undefined>;
+    loadingByTaskId: Record<string, boolean | undefined>;
+    errorByTaskId: Record<string, string | undefined>;
+  };
+};
+
+export type PreviewFeedbackSliceActions = {
+  setTaskPreviewFeedback: (taskId: string, snapshot: TaskPreviewFeedbackSnapshot) => void;
+  setTaskPreviewFeedbackLoading: (taskId: string, loading: boolean) => void;
+  setTaskPreviewFeedbackError: (taskId: string, error?: string) => void;
+  clearTaskPreviewFeedbackState: (taskId: string) => void;
+};
+
+export type PreviewFeedbackSlice = PreviewFeedbackSliceState & PreviewFeedbackSliceActions;
diff --git a/apps/web/lib/state/store.ts b/apps/web/lib/state/store.ts
index c7e425c485..edac71cd89 100644
--- a/apps/web/lib/state/store.ts
+++ b/apps/web/lib/state/store.ts
@@ -27,6 +27,7 @@ import {
   createReviewSlice,
   createNeedsYouInboxSlice,
   createFailedInboxSlice,
+  createPreviewFeedbackSlice,
   createInboxHistorySlice,
 } from "./slices";
 
@@ -86,6 +87,7 @@ export function createAppStore(initialState?: HydrationState) {
       ...createReviewSlice(set as any),
       ...createNeedsYouInboxSlice(set),
       ...createFailedInboxSlice(set, get),
+      ...createPreviewFeedbackSlice(set),
       ...createInboxHistorySlice(set),
       // Re-assert merged initial state so caller-supplied values win over slice defaults.
       ...buildStateOverrides(merged),
diff --git a/apps/web/lib/types/backend.ts b/apps/web/lib/types/backend.ts
index 11b67aea2e..36b563d8de 100644
--- a/apps/web/lib/types/backend.ts
+++ b/apps/web/lib/types/backend.ts
@@ -464,6 +464,10 @@ export type BackendMessageMap = SessionBackendMessageMap &
       "task.plan.comments.changed",
       TaskPlanCommentEventPayload
     >;
+    "task.preview_feedback.changed": BackendMessage<
+      "task.preview_feedback.changed",
+      import("@/lib/types/http").TaskPreviewFeedbackSnapshot
+    >;
     "task.plan.revision.created": BackendMessage<
       "task.plan.revision.created",
       TaskPlanRevisionEventPayload
diff --git a/apps/web/lib/types/context.ts b/apps/web/lib/types/context.ts
index 1994a4d36b..18b67e2bb3 100644
--- a/apps/web/lib/types/context.ts
+++ b/apps/web/lib/types/context.ts
@@ -6,6 +6,7 @@ import type {
   AgentMessageComment,
 } from "@/lib/state/slices/comments";
 import type { FileAttachment } from "@/components/task/chat/file-attachment";
+import type { TaskPreviewFeedback } from "@/lib/types/http";
 
 type ContextItemBase = {
   id: string;
@@ -50,6 +51,12 @@ export type PlanCommentContextItem = ContextItemBase & {
   onOpen: () => void;
 };
 
+export type PreviewFeedbackContextItem = ContextItemBase & {
+  kind: "preview-feedback";
+  items: TaskPreviewFeedback[];
+  onOpen?: () => void;
+};
+
 export type ImageContextItem = ContextItemBase & {
   kind: "image";
   attachment: FileAttachment;
@@ -84,6 +91,7 @@ export type ContextItem =
   | PromptContextItem
   | CommentContextItem
   | PlanCommentContextItem
+  | PreviewFeedbackContextItem
   | ImageContextItem
   | FileAttachmentContextItem
   | PRFeedbackContextItem
diff --git a/apps/web/lib/types/http-agents.ts b/apps/web/lib/types/http-agents.ts
index de01ec89c0..7205854a29 100644
--- a/apps/web/lib/types/http-agents.ts
+++ b/apps/web/lib/types/http-agents.ts
@@ -359,6 +359,90 @@ export type TaskPlanCommentSnapshot = {
 
 export type TaskPlanCommentRef = Pick<TaskPlanComment, "id" | "version">;
 
+export type PreviewCaptureRect = {
+  x: number;
+  y: number;
+  width: number;
+  height: number;
+  document_x?: number;
+  document_y?: number;
+  scroll_x?: number;
+  scroll_y?: number;
+  viewport_width?: number;
+  viewport_height?: number;
+  device_pixel_ratio?: number;
+};
+
+export type PreviewElementSnapshot = {
+  tag: string;
+  id?: string;
+  classes: string[];
+  role?: string;
+  accessible_label?: string;
+  visible_text?: string;
+  selector?: string;
+  outer_html: string;
+};
+
+export type PreviewTextEndpoint = {
+  selector?: string;
+  node_path: number[];
+  offset: number;
+};
+
+export type PreviewTextAnchor = {
+  start: PreviewTextEndpoint;
+  end: PreviewTextEndpoint;
+  rects?: PreviewCaptureRect[];
+  union_rect?: PreviewCaptureRect;
+  scroll_x?: number;
+  scroll_y?: number;
+  viewport_width?: number;
+  viewport_height?: number;
+  device_pixel_ratio?: number;
+  containing_element?: PreviewElementSnapshot;
+};
+
+export type TaskPreviewScreenshot = {
+  attachment_id: string;
+  name: string;
+  mime_type: string;
+  kind: string;
+  delivery_mode: string;
+  size_bytes: number;
+  state: string;
+};
+
+export type TaskPreviewFeedback = {
+  id: string;
+  task_id: string;
+  kind: "text" | "element" | "screenshot";
+  comment: string;
+  source_kind: "browser" | "html_file";
+  source_session_id?: string;
+  source_label: string;
+  source_path?: string;
+  page_route: string;
+  page_title: string;
+  selected_text?: string;
+  text_anchor?: PreviewTextAnchor;
+  element_snapshot?: PreviewElementSnapshot;
+  capture_rect?: PreviewCaptureRect;
+  screenshot_attachment_id?: string;
+  screenshot_attachment?: TaskPreviewScreenshot;
+  version: number;
+  created_at: string;
+  updated_at: string;
+};
+
+export type TaskPreviewFeedbackSnapshot = {
+  task_id: string;
+  revision: number;
+  items: TaskPreviewFeedback[];
+};
+
+export type TaskPreviewFeedbackRef = Pick<TaskPreviewFeedback, "id" | "version">;
+
 /** A single anchored stop in a code walkthrough. */
 export type WalkthroughStep = {
   title?: string;
diff --git a/apps/web/lib/ws/handlers/preview-feedback.test.ts b/apps/web/lib/ws/handlers/preview-feedback.test.ts
new file mode 100644
index 0000000000..0ff3ddda4b
--- /dev/null
+++ b/apps/web/lib/ws/handlers/preview-feedback.test.ts
@@ -0,0 +1,25 @@
+import { describe, expect, it, vi } from "vitest";
+import type { StoreApi } from "zustand";
+import type { AppState } from "@/lib/state/store";
+import type { BackendMessageMap } from "@/lib/types/backend";
+import { registerPreviewFeedbackHandlers } from "./preview-feedback";
+
+const message: BackendMessageMap["task.preview_feedback.changed"] = {
+  id: "event-1",
+  type: "notification",
+  action: "task.preview_feedback.changed",
+  payload: { task_id: "task-1", revision: 3, items: [] },
+};
+
+describe("preview feedback WebSocket handler", () => {
+  it("applies the complete task snapshot", () => {
+    const setTaskPreviewFeedback = vi.fn();
+    const state = { setTaskPreviewFeedback } as unknown as AppState;
+    const store = { getState: () => state } as StoreApi<AppState>;
+    const handler = registerPreviewFeedbackHandlers(store)["task.preview_feedback.changed"];
+
+    expect(handler).toBeTypeOf("function");
+    handler?.(message);
+    expect(setTaskPreviewFeedback).toHaveBeenCalledWith("task-1", message.payload);
+  });
+});
diff --git a/apps/web/lib/ws/handlers/preview-feedback.ts b/apps/web/lib/ws/handlers/preview-feedback.ts
new file mode 100644
index 0000000000..03c4193fb8
--- /dev/null
+++ b/apps/web/lib/ws/handlers/preview-feedback.ts
@@ -0,0 +1,11 @@
+import type { StoreApi } from "zustand";
+import type { AppState } from "@/lib/state/store";
+import type { WsHandlers } from "@/lib/ws/handlers/types";
+
+export function registerPreviewFeedbackHandlers(store: StoreApi<AppState>): WsHandlers {
+  return {
+    "task.preview_feedback.changed": (message) => {
+      store.getState().setTaskPreviewFeedback(message.payload.task_id, message.payload);
+    },
+  };
+}
diff --git a/apps/web/lib/ws/router.ts b/apps/web/lib/ws/router.ts
index 66d7177315..d131b6fffb 100644
--- a/apps/web/lib/ws/router.ts
+++ b/apps/web/lib/ws/router.ts
@@ -27,6 +27,7 @@ import { registerSystemEventsHandlers } from "@/lib/ws/handlers/system-events";
 import { registerTasksHandlers } from "@/lib/ws/handlers/tasks";
 import { registerTaskPlansHandlers } from "@/lib/ws/handlers/task-plans";
 import { registerTaskPlanCommentsHandlers } from "@/lib/ws/handlers/task-plan-comments";
+import { registerPreviewFeedbackHandlers } from "@/lib/ws/handlers/preview-feedback";
 import { registerWalkthroughsHandlers } from "@/lib/ws/handlers/walkthroughs";
 import { registerReviewHandlers } from "@/lib/ws/handlers/review";
 import { registerTerminalsHandlers } from "@/lib/ws/handlers/terminals";
@@ -50,6 +51,7 @@ export function registerWsHandlers(store: StoreApi<AppState>) {
     ...registerTasksHandlers(store),
     ...registerTaskPlansHandlers(store),
     ...registerTaskPlanCommentsHandlers(store),
+    ...registerPreviewFeedbackHandlers(store),
     ...registerWalkthroughsHandlers(store),
     ...registerReviewHandlers(store),
     ...registerWorkflowsHandlers(store),
diff --git a/apps/web/package.json b/apps/web/package.json
index 148c99f33d..8ac7f62420 100644
--- a/apps/web/package.json
+++ b/apps/web/package.json
@@ -114,6 +114,7 @@
     "diff": "^8.0.3",
     "dockview-react": "^4.13.1",
     "embla-carousel-react": "^8.6.0",
+    "html2canvas-pro": "2.4.3",
     "i18next": "^26.3.6",
     "immer": "^10.1.1",
     "input-otp": "^1.4.2",
diff --git a/apps/web/src/locales/_verbatim.json b/apps/web/src/locales/_verbatim.json
index ba681787fc..351cdf8d1b 100644
--- a/apps/web/src/locales/_verbatim.json
+++ b/apps/web/src/locales/_verbatim.json
@@ -137,6 +137,7 @@
   "task:modelSelectionExecutor": "Technical term kept in English across localized developer tooling.",
   "task:panelTerminal": "Technical term kept in English across localized developer tooling.",
   "task:prompt": "Technical term kept in English across localized developer tooling.",
+  "task:previewScreenshotDimensions": "Nothing but interpolated values, punctuation, and the PNG format name; there is no prose to translate.",
   "task:proxy": "Technical term kept in English across localized developer tooling.",
   "task:pull": "Git command name; the user types it and reads it in git's own output.",
   "task:pullRequest": "Code-host term kept in English across localized developer tooling.",
diff --git a/apps/web/src/locales/en/task.json b/apps/web/src/locales/en/task.json
index 538b8df438..b8d80b104d 100644
--- a/apps/web/src/locales/en/task.json
+++ b/apps/web/src/locales/en/task.json
@@ -1205,6 +1205,41 @@
   "plan": "Plan",
   "planCommentCount_one": "{{count}} plan comment",
   "planCommentCount_other": "{{count}} plan comments",
+  "previewFeedbackCount_one": "{{count}} preview feedback item",
+  "previewFeedbackCount_other": "{{count}} preview feedback items",
+  "previewAnnotate": "Annotate",
+  "previewAnnotateWithCount_one": "Annotate ({{count}})",
+  "previewAnnotateWithCount_other": "Annotate ({{count}})",
+  "previewCancel": "Cancel",
+  "previewCancelSelection": "Cancel selection",
+  "previewCandidate": "Selection candidate: {{candidate}}",
+  "previewCaptureElement": "Element",
+  "previewCaptureScreenshot": "Screenshot",
+  "previewCaptureText": "Text",
+  "previewClearAll": "Clear all",
+  "previewCommentPlaceholder": "Describe what should change",
+  "previewCommentSelection": "Comment on selection",
+  "previewConfirmClearDescription": "Remove all pending preview feedback from this task?",
+  "previewDeleteFeedback": "Delete feedback",
+  "previewDiscardSelection": "Discard",
+  "previewEditComment": "Edit comment",
+  "previewEditFeedback": "Edit feedback",
+  "previewFeedbackTitle": "Preview feedback",
+  "previewLoadFailed": "The pending preview feedback could not be loaded. Try again.",
+  "previewMutationFailed": "The feedback could not be saved. Try again.",
+  "previewPendingEmpty": "No pending preview feedback.",
+  "previewPendingFeedback": "Pending feedback",
+  "previewLoadingFeedback": "Loading preview feedback...",
+  "previewSaveChanges": "Save changes",
+  "previewSaveFeedback": "Save feedback",
+  "previewSelectElement": "Select element",
+  "previewSelectScreenshot": "Select screenshot region",
+  "previewSelectText": "Select text",
+  "previewScreenshotAlt": "Screenshot preview",
+  "previewScreenshotDimensions": "{{width}} × {{height}} · PNG",
+  "previewScreenshotFailed": "The screenshot could not be captured or uploaded. Try again.",
+  "previewRasterizing": "Capturing screenshot...",
+  "previewUploadingScreenshot": "Uploading screenshot...",
   "planContentTooLarge": "Your plan is {{submitted}}, over the {{limit}} limit. Shorten the document and save again.",
   "planHistory": "Plan history",
   "planIsEmpty": "Plan is empty",
@@ -2305,6 +2340,7 @@
   "primarySessionUnavailableForPlanComment": "The primary session cannot accept input. Start or choose an available primary session.",
   "planCommentNotReadyToRun": "This plan comment is still being saved. Try Run again.",
   "planCommentsChangedRetry": "The plan comments changed. Review them and send again.",
+  "previewFeedbackChangedRetry": "The preview feedback changed. Review it and send again.",
   "primarySessionChangedRetry": "The primary session changed. Try Run again.",
   "planCommentMigrationFailed": "Some saved plan comments could not be restored.",
   "planCommentMigrationNeedsPlan": "Create or restore a plan to recover saved comments.",
diff --git a/apps/web/src/locales/ja/task.json b/apps/web/src/locales/ja/task.json
index 9a2721cf66..18f30b05e2 100644
--- a/apps/web/src/locales/ja/task.json
+++ b/apps/web/src/locales/ja/task.json
@@ -1205,6 +1205,41 @@
   "plan": "計画",
   "planCommentCount_one": "{{count}} 件の計画コメント",
   "planCommentCount_other": "{{count}} 件の計画コメント",
+  "previewFeedbackCount_one": "{{count}} 件のプレビューフィードバック",
+  "previewFeedbackCount_other": "{{count}} 件のプレビューフィードバック",
+  "previewAnnotate": "注釈を付ける",
+  "previewAnnotateWithCount_one": "注釈を付ける ({{count}})",
+  "previewAnnotateWithCount_other": "注釈を付ける ({{count}})",
+  "previewCancel": "キャンセル",
+  "previewCancelSelection": "選択をキャンセル",
+  "previewCandidate": "選択候補: {{candidate}}",
+  "previewCaptureElement": "要素",
+  "previewCaptureScreenshot": "スクリーンショット",
+  "previewCaptureText": "テキスト",
+  "previewClearAll": "すべてクリア",
+  "previewCommentPlaceholder": "変更内容を説明",
+  "previewCommentSelection": "選択範囲にコメント",
+  "previewConfirmClearDescription": "このタスクの保留中のプレビューフィードバックをすべて削除しますか？",
+  "previewDeleteFeedback": "フィードバックを削除",
+  "previewDiscardSelection": "破棄",
+  "previewEditComment": "コメントを編集",
+  "previewEditFeedback": "フィードバックを編集",
+  "previewFeedbackTitle": "プレビューフィードバック",
+  "previewLoadFailed": "保留中のプレビューフィードバックを読み込めませんでした。もう一度お試しください。",
+  "previewMutationFailed": "フィードバックを保存できませんでした。もう一度お試しください。",
+  "previewPendingEmpty": "保留中のプレビューフィードバックはありません。",
+  "previewPendingFeedback": "保留中のフィードバック",
+  "previewLoadingFeedback": "プレビューフィードバックを読み込み中...",
+  "previewSaveChanges": "変更を保存",
+  "previewSaveFeedback": "フィードバックを保存",
+  "previewSelectElement": "要素を選択",
+  "previewSelectScreenshot": "スクリーンショット領域を選択",
+  "previewSelectText": "テキストを選択",
+  "previewScreenshotAlt": "スクリーンショットのプレビュー",
+  "previewScreenshotDimensions": "{{width}} × {{height}} · PNG",
+  "previewScreenshotFailed": "スクリーンショットをキャプチャまたはアップロードできませんでした。もう一度お試しください。",
+  "previewRasterizing": "スクリーンショットをキャプチャ中...",
+  "previewUploadingScreenshot": "スクリーンショットをアップロード中...",
   "planContentTooLarge": "計画は {{submitted}} で、上限 {{limit}} を超えている。文書を短くして、もう一度保存して。",
   "planHistory": "計画履歴",
   "planIsEmpty": "計画が空",
@@ -2295,6 +2330,7 @@
   "primarySessionUnavailableForPlanComment": "プライマリセッションは入力を受け付けられません。利用可能なプライマリセッションを開始するか選択してください。",
   "planCommentNotReadyToRun": "このプランコメントはまだ保存中です。もう一度 Run を試してください。",
   "planCommentsChangedRetry": "プランコメントが変更されました。確認して、もう一度送信してください。",
+  "previewFeedbackChangedRetry": "プレビューフィードバックが変更されました。確認してもう一度送信してください。",
   "primarySessionChangedRetry": "プライマリセッションが変更されました。もう一度 Run を試してください。",
   "planCommentMigrationFailed": "保存済みのプランコメントの一部を復元できませんでした。",
   "planCommentMigrationNeedsPlan": "保存済みコメントを復元するには、プランを作成または復元してください。",
diff --git a/apps/web/src/locales/pseudo/task.json b/apps/web/src/locales/pseudo/task.json
index 8c2609657b..36a260cc1e 100644
--- a/apps/web/src/locales/pseudo/task.json
+++ b/apps/web/src/locales/pseudo/task.json
@@ -1205,6 +1205,41 @@
   "plan": "Ƥĺàń",
   "planCommentCount_one": "{{count}} ƥĺàń ćōḿḿēńţ",
   "planCommentCount_other": "{{count}} ƥĺàń ćōḿḿēńţś",
+  "previewFeedbackCount_one": "{{count}} ƥŕēvĩēŵ ƒēēďƀàćķ ĩţēḿ",
+  "previewFeedbackCount_other": "{{count}} ƥŕēvĩēŵ ƒēēďƀàćķ ĩţēḿś",
+  "previewAnnotate": "Àńńōţàţē",
+  "previewAnnotateWithCount_one": "Àńńōţàţē ({{count}})",
+  "previewAnnotateWithCount_other": "Àńńōţàţē ({{count}})",
+  "previewCancel": "Ćàńćēĺ",
+  "previewCancelSelection": "Ćàńćēĺ śēĺēćţĩōń",
+  "previewCandidate": "Śēĺēćţĩōń ćàńďĩďàţē: {{candidate}}",
+  "previewCaptureElement": "Ēĺēmēńţ",
+  "previewCaptureScreenshot": "Śćŕēēńśĥōţ",
+  "previewCaptureText": "Ţēxţ",
+  "previewClearAll": "Ćĺēàŕ àĺĺ",
+  "previewCommentPlaceholder": "Đēśćŕĩƀē ŵĥàţ śĥōũĺď ćĥàńĝē",
+  "previewCommentSelection": "Ćōḿḿēńţ ōń śēĺēćţĩōń",
+  "previewConfirmClearDescription": "Ŕēḿōvē àĺĺ ƥēńďĩńĝ ƥŕēvĩēŵ ƒēēďƀàćķ ƒŕōḿ ţĥĩś ţàśķ?",
+  "previewDeleteFeedback": "Đēĺēţē ƒēēďƀàćķ",
+  "previewDiscardSelection": "Đĩśćàŕď",
+  "previewEditComment": "Ēďĩţ ćōḿḿēńţ",
+  "previewEditFeedback": "Ēďĩţ ƒēēďƀàćķ",
+  "previewFeedbackTitle": "Ƥŕēvĩēŵ ƒēēďƀàćķ",
+  "previewLoadFailed": "Ţĥē ƥēńďĩńĝ ƥŕēvĩēŵ ƒēēďƀàćķ ćōũĺď ńōţ ƀē ĺōàďēď. Ţŕŷ àĝàĩń.",
+  "previewMutationFailed": "Ţĥē ƒēēďƀàćķ ćōũĺď ńōţ ƀē śàvēď. Ţŕŷ àĝàĩń.",
+  "previewPendingEmpty": "Ńō ƥēńďĩńĝ ƥŕēvĩēŵ ƒēēďƀàćķ.",
+  "previewPendingFeedback": "Ƥēńďĩńĝ ƒēēďƀàćķ",
+  "previewLoadingFeedback": "Ŀōàďĩńĝ ƥŕēvĩēŵ ƒēēďƀàćķ...",
+  "previewSaveChanges": "Śàvē ćĥàńĝēś",
+  "previewSaveFeedback": "Śàvē ƒēēďƀàćķ",
+  "previewSelectElement": "Śēĺēćţ ēĺēḿēńţ",
+  "previewSelectScreenshot": "Śēĺēćţ śćŕēēńśĥōţ ŕēĝĩōń",
+  "previewSelectText": "Śēĺēćţ ţēxţ",
+  "previewScreenshotAlt": "Śćŕēēńśĥōţ ƥŕēvĩēŵ",
+  "previewScreenshotDimensions": "{{width}} × {{height}} · ƤŃĜ",
+  "previewScreenshotFailed": "Ţĥē śćŕēēńśĥōţ ćōũĺď ńōţ ƀē ćàƥţũŕēď ōŕ ũƥĺōàďēď. Ţŕŷ àĝàĩń.",
+  "previewRasterizing": "Ćàƥţũŕĩńĝ śćŕēēńśĥōţ...",
+  "previewUploadingScreenshot": "Ũƥĺōàďĩńĝ śćŕēēńśĥōţ...",
   "planContentTooLarge": "Ŷōũŕ ƥĺàń ĩś {{submitted}}, ōvēŕ ţĥē {{limit}} ĺĩḿĩţ. Śĥōŕţēń ţĥē ďōćũḿēńţ àńď śàvē àĝàĩń.",
   "planHistory": "Ƥĺàń ĥĩśţōŕŷ",
   "planIsEmpty": "Ƥĺàń ĩś ēḿƥţŷ",
@@ -2305,6 +2340,7 @@
   "primarySessionUnavailableForPlanComment": "Ţĥē ƥŕĩḿàŕŷ śēśśĩōń ćàńńōţ àććēƥţ ĩńƥũţ. Śţàŕţ ōŕ ćĥōōśē àń àvàĩĺàƀĺē ƥŕĩḿàŕŷ śēśśĩōń.",
   "planCommentNotReadyToRun": "Ţĥĩś ƥĺàń ćōḿḿēńţ ĩś śţĩĺĺ ƀēĩńĝ śàvēď. Ţŕŷ Ŕũń àĝàĩń.",
   "planCommentsChangedRetry": "Ţĥē ƥĺàń ćōḿḿēńţś ćĥàńĝēď. Ŕēvĩēŵ ţĥēḿ àńď śēńď àĝàĩń.",
+  "previewFeedbackChangedRetry": "Ţĥē ƥŕēvĩēŵ ƒēēďƀàćķ ćĥàńĝēď. Ŕēvĩēŵ ĩţ àńď śēńď àĝàĩń.",
   "primarySessionChangedRetry": "Ţĥē ƥŕĩḿàŕŷ śēśśĩōń ćĥàńĝēď. Ţŕŷ Ŕũń àĝàĩń.",
   "planCommentMigrationFailed": "Śōḿē śàvēď ƥĺàń ćōḿḿēńţś ćōũĺď ńōţ ƀē ŕēśţōŕēď.",
   "planCommentMigrationNeedsPlan": "Ćŕēàţē ōŕ ŕēśţōŕē à ƥĺàń ţō ŕēćōvēŕ śàvēď ćōḿḿēńţś.",
diff --git a/apps/web/src/locales/pt-pt/task.json b/apps/web/src/locales/pt-pt/task.json
index 1dc9be4a5f..a27de82401 100644
--- a/apps/web/src/locales/pt-pt/task.json
+++ b/apps/web/src/locales/pt-pt/task.json
@@ -1148,6 +1148,41 @@
   "plan": "Plano",
   "planCommentCount_one": "{{count}} comentário ao plano",
   "planCommentCount_other": "{{count}} comentários ao plano",
+  "previewFeedbackCount_one": "{{count}} item de feedback da pré-visualização",
+  "previewFeedbackCount_other": "{{count}} itens de feedback da pré-visualização",
+  "previewAnnotate": "Anotar",
+  "previewAnnotateWithCount_one": "Anotar ({{count}})",
+  "previewAnnotateWithCount_other": "Anotar ({{count}})",
+  "previewCancel": "Cancelar",
+  "previewCancelSelection": "Cancelar seleção",
+  "previewCandidate": "Candidato da seleção: {{candidate}}",
+  "previewCaptureElement": "Elemento",
+  "previewCaptureScreenshot": "Captura",
+  "previewCaptureText": "Texto",
+  "previewClearAll": "Limpar tudo",
+  "previewCommentPlaceholder": "Descreva o que deve mudar",
+  "previewCommentSelection": "Comentário sobre a seleção",
+  "previewConfirmClearDescription": "Remover todo o feedback de pré-visualização pendente desta tarefa?",
+  "previewDeleteFeedback": "Eliminar feedback",
+  "previewDiscardSelection": "Descartar",
+  "previewEditComment": "Editar comentário",
+  "previewEditFeedback": "Editar feedback",
+  "previewFeedbackTitle": "Feedback da pré-visualização",
+  "previewLoadFailed": "Não foi possível carregar o feedback de pré-visualização pendente. Tente novamente.",
+  "previewMutationFailed": "Não foi possível guardar o feedback. Tente novamente.",
+  "previewPendingEmpty": "Não há feedback de pré-visualização pendente.",
+  "previewPendingFeedback": "Feedback pendente",
+  "previewLoadingFeedback": "A carregar feedback de pré-visualização...",
+  "previewSaveChanges": "Guardar alterações",
+  "previewSaveFeedback": "Guardar feedback",
+  "previewSelectElement": "Selecionar elemento",
+  "previewSelectScreenshot": "Selecionar região da captura de ecrã",
+  "previewSelectText": "Selecionar texto",
+  "previewScreenshotAlt": "Pré-visualização da captura de ecrã",
+  "previewScreenshotDimensions": "{{width}} × {{height}} · PNG",
+  "previewScreenshotFailed": "Não foi possível capturar ou carregar a captura de ecrã. Tente novamente.",
+  "previewRasterizing": "A capturar o ecrã...",
+  "previewUploadingScreenshot": "A carregar a captura de ecrã...",
   "planContentTooLarge": "O seu plano tem {{submitted}}, acima do limite de {{limit}}. Reduza o documento e guarde novamente.",
   "planHistory": "Histórico do plano",
   "planIsEmpty": "O plano está vazio",
@@ -2305,6 +2340,7 @@
   "primarySessionUnavailableForPlanComment": "A sessão principal não pode receber mensagens. Inicie ou escolha uma sessão principal disponível.",
   "planCommentNotReadyToRun": "Este comentário do plano ainda está a ser guardado. Tente executar novamente.",
   "planCommentsChangedRetry": "Os comentários do plano foram alterados. Reveja-os e envie novamente.",
+  "previewFeedbackChangedRetry": "O feedback da pré-visualização foi alterado. Reveja-o e envie novamente.",
   "primarySessionChangedRetry": "A sessão principal foi alterada. Tente executar novamente.",
   "planCommentMigrationFailed": "Não foi possível restaurar alguns comentários do plano guardados.",
   "planCommentMigrationNeedsPlan": "Crie ou restaure um plano para recuperar os comentários guardados.",
diff --git a/apps/web/src/locales/zh-cn/task.json b/apps/web/src/locales/zh-cn/task.json
index a099a11788..1acf8254e6 100644
--- a/apps/web/src/locales/zh-cn/task.json
+++ b/apps/web/src/locales/zh-cn/task.json
@@ -1147,6 +1147,41 @@
   "plan": "计划",
   "planCommentCount_one": "{{count}} 条计划评论",
   "planCommentCount_other": "{{count}} 条计划评论",
+  "previewFeedbackCount_one": "{{count}} 条预览反馈",
+  "previewFeedbackCount_other": "{{count}} 条预览反馈",
+  "previewAnnotate": "标注",
+  "previewAnnotateWithCount_one": "标注（{{count}}）",
+  "previewAnnotateWithCount_other": "标注（{{count}}）",
+  "previewCancel": "取消",
+  "previewCancelSelection": "取消选择",
+  "previewCandidate": "待选对象：{{candidate}}",
+  "previewCaptureElement": "元素",
+  "previewCaptureScreenshot": "截图",
+  "previewCaptureText": "文本",
+  "previewClearAll": "全部清除",
+  "previewCommentPlaceholder": "描述需要更改的内容",
+  "previewCommentSelection": "为所选内容添加评论",
+  "previewConfirmClearDescription": "要移除此任务中所有待处理的预览反馈吗？",
+  "previewDeleteFeedback": "删除反馈",
+  "previewDiscardSelection": "放弃",
+  "previewEditComment": "编辑评论",
+  "previewEditFeedback": "编辑反馈",
+  "previewFeedbackTitle": "预览反馈",
+  "previewLoadFailed": "无法加载待处理的预览反馈。请重试。",
+  "previewMutationFailed": "无法保存反馈。请重试。",
+  "previewPendingEmpty": "没有待处理的预览反馈。",
+  "previewPendingFeedback": "待处理反馈",
+  "previewLoadingFeedback": "正在加载预览反馈...",
+  "previewSaveChanges": "保存更改",
+  "previewSaveFeedback": "保存反馈",
+  "previewSelectElement": "选择元素",
+  "previewSelectScreenshot": "选择截图区域",
+  "previewSelectText": "选择文本",
+  "previewScreenshotAlt": "截图预览",
+  "previewScreenshotDimensions": "{{width}} × {{height}} · PNG",
+  "previewScreenshotFailed": "无法截取或上传截图。请重试。",
+  "previewRasterizing": "正在截取截图...",
+  "previewUploadingScreenshot": "正在上传截图...",
   "planContentTooLarge": "您的计划为 {{submitted}}，超过了 {{limit}} 的限制。请缩短文档后重新保存。",
   "planHistory": "计划历史",
   "planIsEmpty": "计划为空",
@@ -2305,6 +2340,7 @@
   "primarySessionUnavailableForPlanComment": "主会话无法接收输入。请启动或选择一个可用的主会话。",
   "planCommentNotReadyToRun": "此计划评论仍在保存。请再次运行。",
   "planCommentsChangedRetry": "计划评论已更改。请检查后重新发送。",
+  "previewFeedbackChangedRetry": "预览反馈已更改。请检查后重新发送。",
   "primarySessionChangedRetry": "主会话已更改。请再次运行。",
   "planCommentMigrationFailed": "无法恢复部分已保存的计划评论。",
   "planCommentMigrationNeedsPlan": "请创建或恢复计划，以恢复已保存的评论。",
diff --git a/apps/web/src/locales/zh-hk/task.json b/apps/web/src/locales/zh-hk/task.json
index 3ad8917c52..0e3ac75779 100644
--- a/apps/web/src/locales/zh-hk/task.json
+++ b/apps/web/src/locales/zh-hk/task.json
@@ -1148,6 +1148,41 @@
   "planCommentCount_one": "{{count}} 條計劃評論",
   "planCommentCount_other": "{{count}} 條計劃評論",
   "planContentTooLarge": "您的計劃為 {{submitted}}，超過了 {{limit}} 的限制。請縮短文檔後重新儲存。",
+  "previewFeedbackCount_one": "{{count}} 條預覽反饋",
+  "previewFeedbackCount_other": "{{count}} 條預覽反饋",
+  "previewAnnotate": "標註",
+  "previewAnnotateWithCount_one": "標註（{{count}}）",
+  "previewAnnotateWithCount_other": "標註（{{count}}）",
+  "previewCancel": "取消",
+  "previewCancelSelection": "取消選取",
+  "previewCandidate": "待選物件：{{candidate}}",
+  "previewCaptureElement": "元素",
+  "previewCaptureScreenshot": "螢幕截圖",
+  "previewCaptureText": "文字",
+  "previewClearAll": "全部清除",
+  "previewCommentPlaceholder": "描述需要更改的內容",
+  "previewCommentSelection": "為所選內容加入評論",
+  "previewConfirmClearDescription": "要移除此任務中所有待處理的預覽反饋嗎？",
+  "previewDeleteFeedback": "刪除反饋",
+  "previewDiscardSelection": "捨棄",
+  "previewEditComment": "編輯評論",
+  "previewEditFeedback": "編輯反饋",
+  "previewFeedbackTitle": "預覽反饋",
+  "previewLoadFailed": "無法載入待處理的預覽反饋。請重試。",
+  "previewMutationFailed": "無法儲存反饋。請再試一次。",
+  "previewPendingEmpty": "沒有待處理的預覽反饋。",
+  "previewPendingFeedback": "待處理反饋",
+  "previewLoadingFeedback": "正在載入預覽反饋...",
+  "previewSaveChanges": "儲存更改",
+  "previewSaveFeedback": "儲存反饋",
+  "previewSelectElement": "選取元素",
+  "previewSelectScreenshot": "選取螢幕截圖區域",
+  "previewSelectText": "選取文字",
+  "previewScreenshotAlt": "螢幕截圖預覽",
+  "previewScreenshotDimensions": "{{width}} × {{height}} · PNG",
+  "previewScreenshotFailed": "無法擷取或上載螢幕截圖。請再試一次。",
+  "previewRasterizing": "正在擷取螢幕截圖...",
+  "previewUploadingScreenshot": "正在上載螢幕截圖...",
   "planHistory": "計劃歷史",
   "planIsEmpty": "計劃為空",
   "planLoadError": "無法載入計劃。",
@@ -2305,6 +2340,7 @@
   "primarySessionUnavailableForPlanComment": "主工作階段無法接收輸入。請啓動或選擇一個可用的主工作階段。",
   "planCommentNotReadyToRun": "此計劃評論仍在儲存。請再次執行。",
   "planCommentsChangedRetry": "計劃評論已更改。請檢查後重新傳送。",
+  "previewFeedbackChangedRetry": "預覽反饋已更改。請檢查後重新傳送。",
   "primarySessionChangedRetry": "主工作階段已更改。請再次執行。",
   "planCommentMigrationFailed": "無法恢復部分已儲存的計劃評論。",
   "planCommentMigrationNeedsPlan": "請建立或恢復計劃，以恢復已儲存的評論。",
diff --git a/apps/web/src/locales/zh-tw/task.json b/apps/web/src/locales/zh-tw/task.json
index 1c4c4ca996..092d37429e 100644
--- a/apps/web/src/locales/zh-tw/task.json
+++ b/apps/web/src/locales/zh-tw/task.json
@@ -1148,6 +1148,41 @@
   "planCommentCount_one": "{{count}} 條計劃評論",
   "planCommentCount_other": "{{count}} 條計劃評論",
   "planContentTooLarge": "您的計劃為 {{submitted}}，超過了 {{limit}} 的限制。請縮短檔案後重新儲存。",
+  "previewFeedbackCount_one": "{{count}} 條預覽意見回饋",
+  "previewFeedbackCount_other": "{{count}} 條預覽意見回饋",
+  "previewAnnotate": "標註",
+  "previewAnnotateWithCount_one": "標註（{{count}}）",
+  "previewAnnotateWithCount_other": "標註（{{count}}）",
+  "previewCancel": "取消",
+  "previewCancelSelection": "取消選取",
+  "previewCandidate": "待選物件：{{candidate}}",
+  "previewCaptureElement": "元素",
+  "previewCaptureScreenshot": "螢幕截圖",
+  "previewCaptureText": "文字",
+  "previewClearAll": "全部清除",
+  "previewCommentPlaceholder": "描述需要變更的內容",
+  "previewCommentSelection": "為所選內容新增評論",
+  "previewConfirmClearDescription": "要移除此任務中所有待處理的預覽意見回饋嗎？",
+  "previewDeleteFeedback": "刪除意見回饋",
+  "previewDiscardSelection": "捨棄",
+  "previewEditComment": "編輯評論",
+  "previewEditFeedback": "編輯意見回饋",
+  "previewFeedbackTitle": "預覽意見回饋",
+  "previewLoadFailed": "無法載入待處理的預覽意見回饋。請重試。",
+  "previewMutationFailed": "無法儲存意見回饋。請再試一次。",
+  "previewPendingEmpty": "沒有待處理的預覽意見回饋。",
+  "previewPendingFeedback": "待處理意見回饋",
+  "previewLoadingFeedback": "正在載入預覽意見回饋...",
+  "previewSaveChanges": "儲存變更",
+  "previewSaveFeedback": "儲存意見回饋",
+  "previewSelectElement": "選取元素",
+  "previewSelectScreenshot": "選取螢幕截圖區域",
+  "previewSelectText": "選取文字",
+  "previewScreenshotAlt": "螢幕截圖預覽",
+  "previewScreenshotDimensions": "{{width}} × {{height}} · PNG",
+  "previewScreenshotFailed": "無法擷取或上傳螢幕截圖。請再試一次。",
+  "previewRasterizing": "正在擷取螢幕截圖...",
+  "previewUploadingScreenshot": "正在上傳螢幕截圖...",
   "planHistory": "計劃歷史",
   "planIsEmpty": "計劃為空",
   "planLoadError": "無法載入計劃。",
@@ -2305,6 +2340,7 @@
   "primarySessionUnavailableForPlanComment": "主工作階段無法接收輸入。請啟動或選擇一個可用的主工作階段。",
   "planCommentNotReadyToRun": "此計劃評論仍在儲存。請再次執行。",
   "planCommentsChangedRetry": "計劃評論已更改。請檢查後重新傳送。",
+  "previewFeedbackChangedRetry": "預覽意見回饋已更改。請檢查後重新傳送。",
   "primarySessionChangedRetry": "主工作階段已更改。請再次執行。",
   "planCommentMigrationFailed": "無法恢復部分已儲存的計劃評論。",
   "planCommentMigrationNeedsPlan": "請建立或恢復計劃，以恢復已儲存的評論。",
diff --git a/docs/decisions/2026-09-02-task-owned-plan-comments.md b/docs/decisions/2026-09-02-task-owned-plan-comments.md
index 24679927fd..f788a88fca 100644
--- a/docs/decisions/2026-09-02-task-owned-plan-comments.md
+++ b/docs/decisions/2026-09-02-task-owned-plan-comments.md
@@ -4,6 +4,11 @@
 **Date:** 2026-09-02
 **Area:** backend, frontend, protocol, persistence
 
+> Amended by
+> [ADR-2026-09-15-task-owned-web-preview-feedback](2026-09-15-task-owned-web-preview-feedback.md):
+> web-preview feedback now has a separate task-owned collection that shares the
+> exact-reference message-admission boundary.
+
 ## Context
 
 A task plan is shared by every Agent session in a task, but pending comments on
@@ -37,9 +42,10 @@ message or queued prompt. An acceptance failure preserves them. Successful
 delivery removes them task-wide; the transcript or queue entry is the durable
 record, not a second sent-comment archive.
 
-Only plan comments adopt task ownership. Diff, file, pull-request,
-walkthrough, and agent-message comments retain their current session-scoped
-lifecycles.
+Plan comments and, under the later web-preview-feedback decision, preview
+feedback adopt task ownership in separate collections. Diff, file,
+pull-request, walkthrough, and agent-message comments retain their current
+session-scoped lifecycles.
 
 ### Amendment: admission and replay hardening (2026-09-09)
 
diff --git a/docs/decisions/2026-09-15-task-owned-web-preview-feedback.md b/docs/decisions/2026-09-15-task-owned-web-preview-feedback.md
new file mode 100644
index 0000000000..d41b2b3a34
--- /dev/null
+++ b/docs/decisions/2026-09-15-task-owned-web-preview-feedback.md
@@ -0,0 +1,112 @@
+# ADR-2026-09-15-task-owned-web-preview-feedback: Persist Web Preview Feedback with the Task
+
+**Status:** accepted
+**Date:** 2026-09-15
+**Area:** backend, frontend, protocol, persistence
+**Amends:** `2026-09-02-task-owned-plan-comments`
+
+## Context
+
+The Browser panel already injects an inspector into executor-local pages. Its
+annotations live in the mounted React panel, contain only DOM metadata, and can
+be copied or cleared. Closing the panel loses them, and the ordinary chat
+composer cannot deliver them. Native HTML-file previews use the same port-proxy
+runtime but do not expose the inspector controls.
+
+A useful interface review spans pages and often outlives one preview panel or
+Agent session. The user needs to collect comments on selected text, rendered
+elements, and screenshot regions, inspect the complete set, and expose it to
+exactly one Agent only after pressing the normal chat Send action.
+
+Task plan comments already established that pending feedback shared across
+sessions cannot be owned by one browser tab or session. Preview feedback has the
+same delivery boundary and additionally owns staged image bytes. The previous
+plan-comment decision explicitly left every other comment source session-local,
+so extending task ownership requires a separate decision.
+
+## Decision
+
+Kandev persists one pending web-preview-feedback collection per task. It is
+backend-authoritative and projected into every Browser panel, native HTML-file
+preview, and composer for that task. Preview navigation, panel closure, session
+selection or deletion, primary changes, browser reload, and backend restart do
+not change the collection.
+
+Pending feedback is withheld from agents. The normal composer Send action
+snapshots the visible item IDs and versions and targets the selected composer
+session. A promptable session uses direct-message admission; a busy session uses
+the existing durable queue. This feature adds no per-item Run, broadcast, or
+automatic delivery path.
+
+The backend expands the persisted rows into visible user Markdown and attaches
+each screenshot as an actual PNG prompt attachment. It consumes exactly the
+submitted versions and transfers screenshot ownership in the same final
+transaction that accepts the direct message or queue entry. Failure preserves
+the feedback and its images. The existing caller admission identity reconciles
+lost responses and prevents duplicate delivery.
+
+Screenshot bytes use the existing file-backed attachment service. A saved
+screenshot is claimed to its pending task feedback until accepted delivery
+transfers it to a message or queue entry. Deleting pending screenshot feedback
+deletes its unsent image. Browser storage never owns durable image bytes.
+
+The session port proxy and trusted-preview origin remain the capture boundary.
+The inspected page emits bounded selection metadata to its parent, but it never
+chooses task ownership or performs backend mutations. The Kandev parent owns
+comment editing, image creation and review, authorization, and persistence.
+
+This amends the plan-comment ADR only where it said plan comments were the sole
+task-owned feedback. Plan comments and web-preview feedback now have distinct
+task-owned collections and a shared atomic admission envelope. Diff, file,
+pull-request, walkthrough, and agent-message comments retain their existing
+session-scoped lifecycles.
+
+## Consequences
+
+- A multi-page review survives preview, session, browser, device, and backend
+  lifecycle changes until the user sends or deletes it.
+- Every session composer shows the same pending count, while Send still has the
+  familiar meaning of addressing that selected session.
+- The task repository gains a revisioned feedback collection, screenshot claim
+  lifecycle, WebSocket CRUD, and exact-reference direct and queue admission.
+- Direct and queued submission can atomically consume plan comments and preview
+  feedback and claim ordinary and screenshot attachments in one operation.
+- Screenshot feedback consumes attachment count and byte budget when sent. A
+  mixed submission that exceeds existing message limits is rejected without
+  consuming feedback.
+- Captured page strings remain visible user data. They do not become hidden or
+  higher-priority instructions.
+- A stopped runtime can make the original page unavailable without making its
+  stored feedback unavailable.
+- Pending collection conflicts fail closed and refresh the shared snapshot.
+  Kandev never silently drops a stale item from the user's typed message.
+- The attachment cleanup path must recognize task-feedback claims so deletion,
+  task purge, failed creation, and backend restart cannot leak screenshot files.
+
+## Alternatives considered
+
+1. **Keep annotations inside each mounted preview panel.** Rejected because
+   navigation or closure loses work and native HTML preview remains a separate
+   experience.
+2. **Persist one browser-local collection per task.** Rejected because another
+   device or browser cannot recover it, image bytes become browser-owned, and
+   message acceptance cannot consume it atomically.
+3. **Persist feedback per Agent session.** Rejected because users review the
+   task before choosing a destination, session switching hides prior pages, and
+   deleting a session can destroy unrelated pending intent.
+4. **Copy feedback to every session.** Rejected because copies drift, new
+   sessions require backfill, and one review can be delivered repeatedly.
+5. **Send from the preview panel with a dedicated Run action.** Rejected because
+   it creates another destination rule and makes it easier to expose a partial
+   review. The established composer Send action already handles selected-session
+   routing, queueing, typed text, attachments, and retry identity.
+6. **Format and clear feedback in the browser after Send.** Rejected because a
+   crash, stale client, queue-capacity failure, or competing send can separate
+   what the agent receives from what the UI deletes.
+7. **Store screenshots inline in WebSocket or browser state.** Rejected because
+   large base64 snapshots inflate shared-state frames, duplicate attachment
+   lifecycle work, and cannot use existing authorized content delivery.
+8. **Use the Screen Capture API as the only screenshot path.** Rejected because
+   it adds a browser-mediated surface picker and permission prompt to every
+   region capture. Kandev already owns the proxied iframe document and can show
+   a region image for confirmation before it is saved.
diff --git a/docs/plans/web-preview-feedback-review-fixes/plan.md b/docs/plans/web-preview-feedback-review-fixes/plan.md
new file mode 100644
index 0000000000..06060f7301
--- /dev/null
+++ b/docs/plans/web-preview-feedback-review-fixes/plan.md
@@ -0,0 +1,281 @@
+---
+created: 2026-09-16
+status: complete
+requirements:
+  - REQ-TASKS-WEB-PREVIEW-FEEDBACK-001
+  - REQ-TASKS-WEB-PREVIEW-FEEDBACK-002
+  - REQ-TASKS-WEB-PREVIEW-FEEDBACK-003
+  - REQ-TASKS-WEB-PREVIEW-FEEDBACK-004
+system_design:
+  - ../../specs/tasks/system-design/web-preview-feedback.md
+legacy_specs: []
+---
+
+# Implementation plan: Web preview feedback review fixes
+
+## Overview
+
+Repair three confirmed defects from PR #3708 without changing its feature
+direction. Keep task-owned feedback, ordinary Send, attachment storage, and
+atomic admission. This package is now being implemented in the primary
+session. The original planning handoff did not authorize production changes or
+a commit; the current user request supersedes that handoff constraint.
+
+The source baseline is `d8816fcf0bb5d6da954d35b95d14b08410f8d7c0` on
+`feat/web-preview-feedback`. Its base is
+`60aef37cbd8a043786393a56b603111eb3bd1f63`. Before implementation, compare the
+current branch with this baseline. Preserve contributor and user changes.
+
+The [existing requirements](../../specs/tasks/requirements/web-preview-feedback.md)
+already define the intended behavior. This package reuses them without new IDs.
+The [current design](../../specs/tasks/system-design/web-preview-feedback.md)
+contains the implementation clarifications. The task system remains the owner
+because the collection and accepted delivery belong to the task.
+
+## Scope
+
+### In scope
+
+- Exact queue replay after feedback consumption, including screenshot metadata.
+- Retention of the screenshot comment across upload and failed creation.
+- A shared collection editor that does not require the source preview.
+- Access to that editor when no agent session can accept a prompt.
+- Focused regression tests, desktop and touch behavior, and artifact results.
+
+### Out of scope
+
+- A new execution path, per-item Send, or automatic delivery.
+- New database tables, preview origins, screenshot libraries, or dependencies.
+- General extraction of `PlanService` or broad DTO cleanup.
+- Other PR comments, failing CI, and unrelated fixture changes.
+- Completing the unfinished whole-PR audit or declaring the PR ready to merge.
+- Commits, pushes, GitHub comments, thread resolution, and agent delegation.
+
+The user selected the three new findings as the planning context. Existing
+review comments remain separate work. Do not infer that this package resolves
+the URL-secret, PostgreSQL, PNG, capture accessibility, or screenshot-preview
+findings. A regression that hits one of those defects needs a recorded blocker,
+not a weaker assertion or a silent expansion of scope.
+
+## Evidence and root causes
+
+| Defect | Source evidence | Regression owner |
+| --- | --- | --- |
+| Queue retry fails after commit | `wsQueueMessage` calls `PreviewFeedbackAttachments` before repository replay. Consumed rows fail its exact-reference check. | Task 01 |
+| Screenshot comment disappears | `DraftEditor` resets on draft object identity. Upload replaces that object before create settles. | Task 02 |
+| Collection controls require preview chrome | `buildContextItems` omits `onOpen`. `PreviewFeedbackItem` provides only a read-only preview. | Task 03 |
+
+These are static source traces, not executed reproductions. Each work order
+requires a failing behavioral test before production changes.
+
+## Technical approach
+
+### Queue replay
+
+Separate the original request identity from server-expanded content and image
+descriptors. Keep authorization before replay. Move mutable pending-item
+resolution behind the replay decision. Repeat the replay decision inside the
+final transaction to handle competing identical requests.
+
+Reuse `queue_admission_receipts` for an accepted response that outlives the
+visible queue row. Write its receipt in the same transaction as feedback
+consumption and queue insertion. Do not call ordinary queue admission as a
+second transaction. Preserve task-before-session lock order, capacity checks,
+attachment claims, mixed plan comments, and the external-I/O marker.
+
+### Capture draft
+
+Give each logical capture stable local identity and controller-owned comment
+state. Upload enrichment must not replace the identity or reset the comment.
+The editor reads and updates that state instead of resetting on object changes.
+Only successful creation or explicit discard settles that draft. A late result
+must not clear a newer draft. UI closure alone does not discard a mounted draft.
+
+### Collection access
+
+Extract the saved collection view from the capture controller. Give it a task
+ID and the existing `usePreviewFeedback` operations. Keep capture mode, iframe,
+and upload state outside this view. Reuse it from preview controls and the
+composer context item.
+
+Mount collection access outside `ChatInputContainer` branches that replace or
+hide the input for stopped sessions and launch errors. `ChatInputArea` already
+receives a task ID independently of `resolvedSessionId`. Keep a task-level
+fallback entry visible when the ordinary context chip is unavailable. Preserve
+archived-task restrictions. Opening feedback must not start or recover an agent.
+
+Use a controlled Popover on desktop and a Drawer for touch. Do not place
+interactive edit forms inside the read-only HoverCard. Reuse the Drawer
+composition in `mobile/mobile-picker-sheet.tsx`: fixed header, one scroll body,
+and safe-area padding. Keep domain state and mutation logic shared.
+
+## ASCII UI preview
+
+Structure and action availability are required. Labels and spacing are
+illustrative. All shipped copy uses localization keys.
+
+### UI-R1: Capture draft after create failure
+
+Entry: saved PNG upload followed by a rejected create. The same form appears
+in a desktop Popover or touch Drawer. Covers `AC-TASKS-WEB-PREVIEW-FEEDBACK-002.4`
+and `AC-TASKS-WEB-PREVIEW-FEEDBACK-004.4`.
+
+```text
+Before: [PNG preview] [empty comment]        [Save disabled]
+After:  [PNG preview]
+        Comment: [Keep this typed feedback              ]
+        [Localized create error. Comment remains.       ]
+                                    [Discard] [Retry]
+```
+
+The controller retains the draft while its form closes and reopens. Upload
+and create disable duplicate saves. Error status does not replace input.
+
+### UI-R2: Task collection from the composer
+
+Entry: the context chip, or the task-level fallback when the input is hidden.
+Covers `AC-TASKS-WEB-PREVIEW-FEEDBACK-001.4`, `003.1`, `004.1`, and `004.2`
+under the common `AC-TASKS-WEB-PREVIEW-FEEDBACK-` prefix.
+
+```text
+Desktop
+[Preview feedback (2)] -> +----------------------------------+
+                         | Pending feedback (2)      [Close] |
+                         | /checkout - captured evidence     |
+                         | Saved comment       [Edit][Delete]|
+                         | [Comment editor]    [Cancel][Save]|
+                         | /account - captured evidence      |
+                         | Saved comment       [Edit][Delete]|
+                         |                      [Clear all]  |
+                         +----------------------------------+
+
+Phone / coarse pointer
+[Preview feedback (2)] -> bottom Drawer
+                         +----------------------------------+
+                         | Pending feedback (2)      [Close] | fixed
+                         | /checkout                         |
+                         | Captured evidence                 |
+                         | Saved comment                     | scroll
+                         | [Edit]                  [Delete]  |
+                         | /account ...                      |
+                         | [Clear all]                       |
+                         +----------------------------------+
+                           safe-area clearance
+
+No available session: [Preview feedback (2)] [existing recovery UI]
+Empty after delete:   [No pending feedback]              [Close]
+Load failure:         [Localized load error]             [Retry]
+Edit conflict:        [Typed edit retained] [Current item available]
+```
+
+This is a temporary review surface, not a new page or stacked preview pane.
+The header stays fixed. One body owns vertical scrolling within dynamic
+viewport bounds. Touch actions measure at least 44px. Ordinary desktop actions
+retain 28px sizing. Escape and dismissal return focus to the actual opener.
+Clear uses the existing confirmation pattern without nested mobile drawers.
+
+## Tests
+
+The named regressions are proposed tests, not existing results.
+
+| Criteria | Proposed evidence |
+| --- | --- |
+| `AC-TASKS-WEB-PREVIEW-FEEDBACK-003.5`, `.6` | `TestWsQueuePreviewFeedbackLostResponseReplay` in `queue_handlers_preview_feedback_test.go`; real service and repository |
+| `AC-TASKS-WEB-PREVIEW-FEEDBACK-003.6` | `TestPreviewFeedbackQueueReplayAfterDrain` and `TestPreviewFeedbackQueueReplayConflict` in `repository_preview_feedback_test.go` |
+| `AC-TASKS-WEB-PREVIEW-FEEDBACK-002.4`, `004.4` | Real-controller component regression in `preview-feedback-controls.test.tsx`; hook regression in `use-preview-capture.test.ts` |
+| `AC-TASKS-WEB-PREVIEW-FEEDBACK-001.4`, `.5`, `003.1` | New `preview-feedback-collection.test.tsx`; existing context-item and input-area suites |
+| `AC-TASKS-WEB-PREVIEW-FEEDBACK-004.1`, `.2` | Component focus tests plus desktop and mobile collection E2E |
+
+Mappings identify repaired scenarios, not proof of every clause in an entire
+requirement. Task 03 also preserves failed edit input while it extracts that
+editor. This is necessary to avoid carrying the known edit-loss defect into
+the new shared surface.
+
+## E2E tests
+
+- Extend `apps/web/e2e/tests/preview/preview-feedback.spec.ts` in `chromium`.
+  Restore saved feedback with the preview closed. Open the chip, edit, delete,
+  reload, and prove that no prompt was sent. Retain the existing capture and
+  direct/queued Send scenarios.
+- Extend `apps/web/e2e/tests/task/mobile-html-preview.spec.ts` in `mobile-chrome`.
+  Leave the focused preview, tap the collection entry, and manage the same
+  pending items. Cover a stopped source session, Drawer geometry, focus return,
+  safe-area clearance, and no document overflow.
+- Add the upload-success/create-failure regression to both existing flows.
+  Use deterministic test-controlled failure, not network timing or sleeps.
+  The component regression remains the primary RED proof for this defect.
+
+## Work orders
+
+- [x] [Task 01: Reconcile accepted queue retries](task-01-queue-replay.md)
+- [x] [Task 02: Preserve screenshot draft comments](task-02-draft-preservation.md)
+- [x] [Task 03: Expose the independent collection editor](task-03-collection-access.md)
+
+Task 01 has no dependency on Task 02. Execute sequentially in the listed order.
+Task 03 depends on Task 02 because both change the capture controls and editor
+ownership. This package does not authorize spawning agents.
+
+## Companion package
+
+The [original package](../web-preview-feedback/plan.md) records the contributor's
+implementation and reported results. Those counts remain historical.
+This package owns new regression evidence and the three open corrections.
+Original Tasks 02, 03, 04, and 05 intersect this work. Their recorded completion
+does not establish that these new scenarios pass.
+
+## Verification results
+
+Implementation verification completed on 2026-09-16. The initial regressions
+were reproduced before the fixes: queue replay returned `preview_feedback_changed`
+after consumption, and screenshot create failure cleared the typed comment.
+
+- Backend focused tests passed with race detection across handlers, messagequeue,
+  task service, task handlers, and SQLite repository packages.
+- Frontend focused tests passed: 10 files and 62 tests.
+- Full web ESLint passed with `--max-warnings 0`; backend `golangci-lint` passed
+  with 0 issues.
+- Web typecheck, localization check, localization ratchet, and whitespace checks
+  passed. Documentation catalog validation passed with 279 decisions and 954
+  specifications, and specification lint passed.
+- Desktop Chromium preview feedback E2E passed: 1 test.
+- Mobile Chrome HTML preview E2E passed: 3 tests, including failed-create retry,
+  completed-session collection access, edit/delete, reload restoration, Drawer
+  bounds, safe-area padding, focus return, and overflow checks.
+- `KANDEV_TEST_POSTGRES_DSN` was not set, so the optional PostgreSQL fixture was
+  not run. PostgreSQL parity is not claimed. Existing PostgreSQL screenshot-read
+  review coverage remains outside this package.
+
+The final source commit and PR head are recorded by the delivery workflow. Do
+not treat this package's completion as whole-PR audit completion or merge approval.
+
+The documentation handoff uses these checks from the repository root:
+
+```bash
+python3 scripts/list-docs.py validate
+python3 scripts/lint-spec-files.py --all
+git diff --check -- docs/plans/web-preview-feedback-review-fixes docs/plans/web-preview-feedback/plan.md docs/specs/tasks/system-design/web-preview-feedback.md
+git status --short -- docs/plans/web-preview-feedback-review-fixes docs/plans/web-preview-feedback/plan.md docs/specs/tasks/system-design/web-preview-feedback.md
+```
+
+Planning results (2026-09-16) were superseded by the implementation results
+above. The package is ready for the authorized commit, push, wait, and PR-fixup
+workflow. Existing review findings and the unfinished whole-PR audit remain
+separate.
+
+## Risks
+
+- Queue fingerprints currently include server-added screenshot descriptors.
+  Moving lookup alone does not correct replay identity.
+- A receipt lookup outside the transaction does not close a concurrent-send race.
+- PostgreSQL screenshot reads have a separately reported defect. Do not hide it
+  by omitting the PostgreSQL regression result.
+- A stopped-session banner can hide a correctly implemented collection chip.
+- Draft cleanup must not remove an image after the server accepted its claim.
+- The remaining review and existing security comments still block merge clearance.
+
+## Handoff constraints
+
+Implement only after the user assigns this package to the next agent.
+Use TDD for each work order. Keep results pending until its commands pass.
+Do not commit or push under this package. Do not treat a finished package as
+permission to close GitHub review threads or advance an incomplete PR review.
diff --git a/docs/plans/web-preview-feedback-review-fixes/task-01-queue-replay.md b/docs/plans/web-preview-feedback-review-fixes/task-01-queue-replay.md
new file mode 100644
index 0000000000..4639e0fd65
--- /dev/null
+++ b/docs/plans/web-preview-feedback-review-fixes/task-01-queue-replay.md
@@ -0,0 +1,169 @@
+---
+id: "01-queue-replay"
+title: "Reconcile accepted queue retries"
+status: complete
+wave: 1
+depends_on: []
+plan: "plan.md"
+requirements:
+  - REQ-TASKS-WEB-PREVIEW-FEEDBACK-003
+acceptance_criteria:
+  - AC-TASKS-WEB-PREVIEW-FEEDBACK-003.5
+  - AC-TASKS-WEB-PREVIEW-FEEDBACK-003.6
+system_design:
+  - ../../specs/tasks/system-design/web-preview-feedback.md
+---
+
+# Task 01: Reconcile accepted queue retries
+
+## Summary
+
+Make an identical queue request return its accepted result after feedback
+consumption. Keep one durable admission and one delivery across lost responses,
+concurrent requests, and removal of the visible queue row.
+
+## In scope
+
+- Original-request fingerprints before server expansion.
+- Authorized replay lookup before mutable feedback resolution.
+- Transactional replay, feedback consumption, attachment claims, and receipts.
+- Text, element, screenshot, and mixed plan/preview requests.
+- Preservation of direct-message and ordinary queue behavior.
+
+## Out of scope
+
+- New tables, changed queue capacity, auto-merge policy, or delivery semantics.
+- General plan-comment refactoring or a second admission transaction.
+- Automatic resend after the external-I/O marker.
+
+## Root cause and reproduction
+
+`wsQueueMessage` resolves `PreviewFeedbackAttachments` before replay.
+After first admission, those pending rows no longer exist.
+The resolver returns `preview_feedback_changed` before repository replay.
+The service also fingerprints the attachment list after screenshot enrichment.
+
+Reproduce through the actual handler, service, and database. Accept one request
+and discard its response. Repeat the unchanged request with the same
+`client_queue_id`. The current handler rejects the retry.
+
+## Implementation approach
+
+1. Add the behavioral regression before production changes.
+2. Keep authenticated task/session scope checks before any receipt disclosure.
+3. Compute a stable identity from the original caller fields and exact references.
+4. Exclude server-expanded prompt content and screenshot descriptors from that identity.
+5. Look up an accepted result before pending-item reads, capacity checks, or new claims.
+6. Repeat the lookup inside the final task/session admission transaction.
+7. On a miss, resolve exact feedback and perform the existing atomic acceptance.
+8. Persist the original identity and accepted response in `queue_admission_receipts` within that transaction.
+9. Keep the queue receipt and external-I/O marker behavior unchanged.
+
+Reuse the ordinary receipt helpers in `repository_admission.go`. Extend their
+internal use for feedback rather than nesting `AdmitQueueMessage` around
+`InsertWithTaskFeedback`. The accepted response contains expanded content and
+attachments, but its fingerprint represents the original request.
+
+The identity includes task, session incarnation, caller queue ID, content,
+model, plan mode, caller attachments, metadata, feedback references, and
+primary-session intent. Preserve authorization and existing user provenance.
+Changed content or versions under the same ID remain a conflict.
+
+Do not invalidate ordinary or plan-only receipt formats. For legacy preview
+entries without the new original-request identity, preserve fail-closed
+behavior. Never invent a receipt or re-enqueue consumed feedback from a legacy
+fingerprint that cannot establish an exact match. Record that compatibility
+limit in the result. This feature is still an unmerged contribution.
+
+## Acceptance
+
+1. Identical authorized retries return one accepted result before and after
+   queue drain, including real screenshot descriptors and mixed feedback.
+2. Altered payloads, foreign task/session identities, and competing new sends
+   fail without another admission or attachment transfer.
+3. New feedback added after acceptance remains pending. Existing direct-message,
+   plan-only, capacity, and ordinary queue tests retain their behavior.
+
+## Tests
+
+- Add `TestWsQueuePreviewFeedbackLostResponseReplay` in the proposed
+  `queue_handlers_preview_feedback_test.go`. Use real services and stores,
+  not the current no-op attachment-preparer stub.
+- Add `TestPreviewFeedbackQueueReplayAfterDrain` and
+  `TestPreviewFeedbackQueueReplayConflict` in `repository_preview_feedback_test.go`.
+- Cover text, element, screenshot, ordinary attachments plus screenshot, and
+  mixed plan comments. Assert response content and attachment IDs, not only success.
+- Add a deterministic two-request race. Delay the first admission at a barrier,
+  then release it before the second resolves consumed rows.
+- Cover a new pending item between commit and retry. Assert its version remains.
+- Use the existing PostgreSQL fixture when `KANDEV_TEST_POSTGRES_DSN` is set.
+  A skipped database case is not a passing cross-database result.
+
+## Verification
+
+Run from the repository root. Use an isolated test database for the optional
+PostgreSQL fixture. The caller supplies its DSN through the existing environment
+variable. Do not use a production database.
+
+```bash
+(cd apps/backend && go test -tags fts5 -race ./internal/orchestrator/handlers ./internal/orchestrator/messagequeue ./internal/task/service ./internal/task/handlers ./internal/task/repository/sqlite -run 'PreviewFeedback|TaskFeedback|PlanComment|QueueAdmission')
+git diff --check
+```
+
+Record the failing regression first. Repeat this exact block after the fix.
+Repeat it with the isolated PostgreSQL fixture enabled before claiming database
+parity. If the known screenshot-query defect blocks it, record the failure
+without expanding this work order silently.
+
+## Files likely touched
+
+- `apps/backend/internal/orchestrator/handlers/queue_handlers.go`
+- `apps/backend/internal/orchestrator/handlers/queue_handlers_plan_comments_test.go`
+- `apps/backend/internal/orchestrator/handlers/queue_handlers_preview_feedback_test.go` (new)
+- `apps/backend/internal/orchestrator/messagequeue/service_plan_comment.go`
+- `apps/backend/internal/orchestrator/messagequeue/repository_preview_feedback.go`
+- `apps/backend/internal/orchestrator/messagequeue/repository_preview_feedback_test.go`
+- `apps/backend/internal/orchestrator/messagequeue/repository_admission.go`
+- `apps/backend/internal/task/service/service_attachments.go`
+
+## Dependencies
+
+None. Run first for a clear delivery baseline.
+
+## Risks
+
+- Comparing a fingerprint after screenshot enrichment repeats the defect.
+- A receipt written after commit permits duplicate admission during a crash.
+- A lookup without task/session authorization exposes another user's accepted prompt.
+- Receipt retention and visible queue retention are different lifecycles.
+
+## Parallelism
+
+`sequential`
+
+## Inputs
+
+- [Plan](plan.md), including scope exclusions and baseline.
+- [Design: Replay before pending resolution](../../specs/tasks/system-design/web-preview-feedback.md#replay-before-pending-resolution).
+- `apps/backend/internal/task/handlers/message_handlers.go`: `addMessageReplayResponse`.
+- `apps/backend/internal/orchestrator/handlers/queue_handlers.go`: `admitIdentifiedOrdinaryQueuedMessage`.
+- `apps/backend/internal/orchestrator/messagequeue/repository_admission_test.go`.
+- `apps/backend/internal/orchestrator/messagequeue/repository_plan_comment_test.go`.
+
+## Results
+
+Implemented. The handler now performs authenticated replay lookup before
+mutable preview-feedback and attachment resolution. The service retains the
+original request fingerprint, and the repository records the accepted response
+in `queue_admission_receipts` in the same transaction as queue insertion,
+attachment transfer, and feedback consumption.
+
+The RED handler regression reproduced `preview_feedback_changed` after queue
+drain. GREEN coverage now passes through the real handler and service path for
+text and screenshot feedback, including response-content and attachment-ID
+checks. Repository coverage proves replay after visible queue drain, conflict
+on a changed request, and preservation of feedback added after the original
+Send snapshot.
+
+The focused backend command passed with race detection. No PostgreSQL run was
+available because `KANDEV_TEST_POSTGRES_DSN` was not set.
diff --git a/docs/plans/web-preview-feedback-review-fixes/task-02-draft-preservation.md b/docs/plans/web-preview-feedback-review-fixes/task-02-draft-preservation.md
new file mode 100644
index 0000000000..1cbc0520c5
--- /dev/null
+++ b/docs/plans/web-preview-feedback-review-fixes/task-02-draft-preservation.md
@@ -0,0 +1,159 @@
+---
+id: "02-draft-preservation"
+title: "Preserve screenshot draft comments"
+status: complete
+wave: 1
+depends_on: []
+plan: "plan.md"
+requirements:
+  - REQ-TASKS-WEB-PREVIEW-FEEDBACK-002
+  - REQ-TASKS-WEB-PREVIEW-FEEDBACK-004
+acceptance_criteria:
+  - AC-TASKS-WEB-PREVIEW-FEEDBACK-002.4
+  - AC-TASKS-WEB-PREVIEW-FEEDBACK-004.4
+system_design:
+  - ../../specs/tasks/system-design/web-preview-feedback.md
+---
+
+# Task 02: Preserve screenshot draft comments
+
+## Summary
+
+Keep the typed comment and PNG through successful upload and rejected creation.
+Retry the same logical capture without another upload or accidental draft reset.
+
+## In scope
+
+- Stable logical draft identity and controller-owned comment state.
+- Upload enrichment, save settlement, duplicate-save prevention, and retry.
+- Closure and reopening of the form while the capture controller remains mounted.
+- Protection against a late response clearing a replacement draft.
+- Shared behavior for desktop Popover and touch Drawer.
+
+## Out of scope
+
+- Persistent browser drafts, reload recovery for unsaved captures, or a new API.
+- General screenshot rasterization, route capture, and resource-cleanup repairs.
+- Multi-draft create-idempotency changes covered by another existing PR comment.
+
+## Root cause and reproduction
+
+`DraftEditor` resets its local comment on every `capture.draft` change.
+`useSavePreviewDraft` replaces that object after upload to attach the server ID.
+The effect clears the comment before feedback creation succeeds.
+
+Mount the real capture controller with the editor. Enter a comment, resolve the
+upload, and reject create. The current editor shows an empty field even though
+the hook retains the PNG. A hook-only test cannot prove comment preservation.
+
+## Implementation approach
+
+1. Add the real-controller component regression before production changes.
+2. Keep comment state with the capture draft owner in `use-preview-capture.ts`.
+3. Assign a stable local identity when a new capture becomes a draft.
+4. Retain that identity and comment when upload adds `attachmentId`.
+5. Replace the object-identity reset effect with controlled editor state.
+6. Clear only the matching draft after successful create or explicit discard.
+7. Guard terminal callbacks with the saved draft identity or generation.
+8. Disable repeated save and conflicting replacement actions while save is pending.
+
+Keep the existing API payload and task-scoped saved collection unchanged.
+Do not delete a claimed image while settling a successful create.
+Do not make panel dismissal equivalent to discard. A new capture or explicit
+discard resets the comment. A mere Popover or Drawer remount does not.
+
+## Acceptance
+
+1. After upload succeeds and create fails, the editor retains the comment,
+   PNG preview, attachment ID, and visible error on desktop and touch.
+2. Retry uploads no second image and sends the retained comment. Successful
+   creation clears only that draft, while explicit discard starts cleanly.
+3. Repeated save cannot create parallel requests. A late response cannot clear
+   a newer draft or a draft for another task/source.
+
+## ASCII UI preview
+
+Use [UI-R1 in the plan](plan.md#ui-r1-capture-draft-after-create-failure).
+The same form uses a desktop Popover and a touch Drawer.
+
+```text
+Before: [PNG] [empty comment]                         [Save disabled]
+After:  [PNG]
+        [Keep this typed feedback                                 ]
+        [Localized create error                                   ]
+                                                 [Discard] [Retry]
+```
+
+The thumbnail, comment, error, and action order remain stable during retry.
+Use a localized live status for upload and error state. Keep the action name
+stable while busy. The touch Drawer retains one scroll owner and safe-area space.
+
+## Tests
+
+- Extend `use-preview-capture.test.ts` with deferred upload/create responses.
+- Extend `preview-feedback-controls.test.tsx` with the real hook and mocked API
+  boundary. Do not replace the controller with a fixed draft for this regression.
+- Cover upload failure, create failure, retry success, explicit discard,
+  close/reopen, repeated save, and delayed completion after replacement.
+- Assert one upload, stable create payload, retained comment, and one saved row.
+- Task 03 adds the shared desktop/mobile E2E scenario after this fix.
+
+## Verification
+
+Run from the repository root. For a fresh worktree, first install dependencies
+with `(cd apps && pnpm install --frozen-lockfile)`.
+
+```bash
+(cd apps/web && pnpm exec vitest run hooks/use-preview-capture.test.ts components/task/inspector/preview-feedback-controls.test.tsx hooks/domains/comments/use-preview-feedback.test.tsx)
+(cd apps/web && pnpm run typecheck)
+(cd apps/web && pnpm exec eslint hooks/use-preview-capture.ts components/task/inspector/preview-feedback-controls.tsx)
+(cd apps/web && pnpm run i18n:check)
+git diff --check
+```
+
+The real-controller test supplies behavioral RED. Record both pointer-mode
+cases. Keep public copy in existing localization keys where possible.
+
+## Files likely touched
+
+- `apps/web/hooks/use-preview-capture.ts`
+- `apps/web/hooks/use-preview-capture.test.ts`
+- `apps/web/components/task/inspector/preview-feedback-controls.tsx`
+- `apps/web/components/task/inspector/preview-feedback-controls.test.tsx`
+- `apps/web/src/locales/{en,pt-pt,zh-cn,zh-hk,zh-tw,pseudo}/task.json` if copy changes
+
+## Dependencies
+
+None technically. Execute after Task 01 in the planned sequence.
+Task 03 depends on this editor ownership before extraction.
+
+## Risks
+
+- Object identity is not logical draft identity.
+- Clearing after an awaited call without a generation check can erase a successor.
+- Resource release during a state updater can run more than once in StrictMode.
+  Do not add cleanup side effects to state updaters.
+
+## Parallelism
+
+`sequential`
+
+## Inputs
+
+- [Plan](plan.md).
+- [Design: Logical capture draft](../../specs/tasks/system-design/web-preview-feedback.md#logical-capture-draft).
+- Existing `use-preview-capture.test.ts` deferred-operation fixtures.
+- `apps/web/components/task/inspector/preview-feedback-controls.tsx`: `DraftEditor`.
+
+## Results
+
+Implemented. `use-preview-capture.ts` now owns a logical draft identity and
+controlled comment state. Upload metadata enriches the existing screenshot
+draft, while create failure retains the PNG, comment, and attachment ID. Only
+successful create or explicit discard settles the matching draft, with
+generation guards preventing late work from clearing a replacement.
+
+The real controller regression covers upload success, create failure, retained
+comment and image, retry without a second upload, and successful cleanup. The
+focused frontend suites passed with 62 tests, and web typecheck, scoped lint,
+localization checks, and both desktop and mobile preview E2E paths passed.
diff --git a/docs/plans/web-preview-feedback-review-fixes/task-03-collection-access.md b/docs/plans/web-preview-feedback-review-fixes/task-03-collection-access.md
new file mode 100644
index 0000000000..88ae886597
--- /dev/null
+++ b/docs/plans/web-preview-feedback-review-fixes/task-03-collection-access.md
@@ -0,0 +1,229 @@
+---
+id: "03-collection-access"
+title: "Expose the independent collection editor"
+status: complete
+wave: 2
+depends_on:
+  - "02-draft-preservation"
+plan: "plan.md"
+requirements:
+  - REQ-TASKS-WEB-PREVIEW-FEEDBACK-001
+  - REQ-TASKS-WEB-PREVIEW-FEEDBACK-003
+  - REQ-TASKS-WEB-PREVIEW-FEEDBACK-004
+acceptance_criteria:
+  - AC-TASKS-WEB-PREVIEW-FEEDBACK-001.4
+  - AC-TASKS-WEB-PREVIEW-FEEDBACK-001.5
+  - AC-TASKS-WEB-PREVIEW-FEEDBACK-003.1
+  - AC-TASKS-WEB-PREVIEW-FEEDBACK-004.1
+  - AC-TASKS-WEB-PREVIEW-FEEDBACK-004.2
+  - AC-TASKS-WEB-PREVIEW-FEEDBACK-004.4
+system_design:
+  - ../../specs/tasks/system-design/web-preview-feedback.md
+---
+
+# Task 03: Expose the independent collection editor
+
+## Summary
+
+Open a task-owned collection editor from the composer and a session-independent
+fallback. Reuse the same editor in preview chrome without requiring an iframe
+for saved-item operations.
+
+## In scope
+
+- Shared saved-item list, evidence, edit, delete, and revision-guarded clear.
+- Task-scoped entry from the composer context chip.
+- A visible fallback for stopped-session, launch-error, and no-session states.
+- Desktop Popover and touch Drawer with shared mutation behavior.
+- Error retention, confirmation, focus return, localization, and focused E2E.
+
+## Out of scope
+
+- A new route, store, backend action, per-session feedback copy, or Send button.
+- Starting an agent or requiring preview recovery to edit feedback.
+- Capture completion, screenshot rendering, URL sanitization, or other open PR findings.
+- Changes to archived-task permissions.
+
+## Root cause and reproduction
+
+`buildContextItems` creates a preview-feedback item without `onOpen`.
+`PreviewFeedbackItem` renders a read-only list inside `ContextChip`.
+Saved-item mutations live inside a capture surface tied to preview chrome.
+
+Seed pending feedback, close the preview, and open the chip. The current
+surface has no edit or delete action. Stop the source session and repeat.
+The stored task data remains, but its management UI is unavailable.
+
+`ChatInputContainer` also hides the ordinary input after some launch errors
+and replaces it with `SessionStoppedBanner` in stopped-session states.
+A fix only inside the chip therefore does not satisfy session independence.
+
+## Implementation approach
+
+1. Add failing component tests for chip activation and a missing source session.
+2. Extract saved-item rendering and mutations into `preview-feedback-collection.tsx`.
+3. Pass task identity and the existing domain-hook operations into that surface.
+4. Keep capture and upload controls outside the saved collection component.
+5. Supply a real open callback through `buildContextItems` and the composer state.
+6. Mount its controlled surface at `ChatInputArea`, outside hidden or replaced input branches.
+7. Expose the same task-scoped trigger when the ordinary context chip is unavailable.
+8. Use `taskId` from panel state even when `resolvedSessionId` is null.
+9. Reuse the extracted list in `PreviewFeedbackControls`.
+
+Use the existing shared Popover primitive for desktop. Use `useTouchDrawer`
+and the task `MobilePickerSheet` composition for coarse pointers. A click or
+keyboard activation opens the editor directly. Do not add an intermediate
+read-only Drawer that requires a second Open action.
+
+Preserve exact item versions and collection revisions. Await edit success
+before closing the editor. On conflict, retain the typed edit and expose the
+current snapshot. Disable duplicate mutations until settlement. Clear requires
+confirmation and the displayed revision. Reuse the existing confirmation host
+on touch rather than stacking another Drawer.
+
+Retain captured text and element evidence as escaped content. This extraction
+does not claim to resolve the separately reported persisted-image preview bug.
+Do not reduce the current evidence display or overwrite immutable captures.
+
+## Acceptance
+
+1. An active task exposes the same collection with the preview closed, source
+   session stopped, or no selected session. Opening it sends no prompt and
+   performs no agent start or recovery.
+2. Edit, delete, and confirmed clear update the task collection. Failed edits
+   retain input, stale mutations preserve newer rows, and reload shows saved state.
+3. Desktop and touch provide equivalent operations. Focus returns correctly,
+   touch targets meet 44px, and the Drawer has one contained scroll region.
+
+## ASCII UI preview
+
+Use [UI-R2 in the plan](plan.md#ui-r2-task-collection-from-the-composer).
+The shared view supports normal, empty, load-error, and edit-conflict states.
+
+```text
+Desktop chip -> +------------------------------------+
+                | Pending feedback (2)       [Close] |
+                | /checkout - captured evidence      |
+                | Comment             [Edit][Delete] |
+                | [Edit field]        [Cancel][Save] |
+                |                        [Clear all] |
+                +------------------------------------+
+
+Phone entry ->  +------------------------------------+
+bottom Drawer   | Pending feedback (2)       [Close] | fixed
+                | /checkout                          |
+                | Evidence and comment               | scroll
+                | [Edit]                    [Delete] |
+                | /account ...                       |
+                | [Clear all]                        |
+                +------------------------------------+
+                  safe-area clearance
+
+No session: [Preview feedback (2)] [existing recovery UI]
+Conflict:   [Typed edit stays] [Current version available]
+Empty:      [No pending feedback]                 [Close]
+```
+
+The collection is a temporary review task, so a Drawer fits the phone flow.
+Do not create a new navigation destination. Use `mobile-picker-sheet.tsx` as
+the fixed-header and scroll-body reference. Keep actions visible without hover.
+Use dynamic viewport bounds and the existing coarse-pointer input font size.
+All new copy needs five locale translations and the generated pseudo locale.
+
+## Tests
+
+- New `preview-feedback-collection.test.tsx`: operations, exact versions,
+  conflict preservation, empty/error states, desktop focus, and touch Drawer.
+- `chat-context-items.test.ts`: open callback and unchanged task-wide count.
+- `chat-input-area.test.tsx`: no session, stopped session, launch error, and
+  ordinary composer. Assert the collection remains reachable in each case.
+- `preview-feedback-controls.test.tsx`: both preview adapters reuse the list
+  without requiring capture mode for management.
+- Retain existing Browser and HTML-preview host tests.
+- Extend the desktop and mobile E2E files named in the plan. Add reload after
+  edit, delete from a stopped-session state, and a no-session component case.
+- Include Task 02's create-failure draft scenario in both browser projects.
+  Use the existing test fixture and public UI entry points. Do not require
+  live selection merely to seed a collection-management test.
+
+## Verification
+
+Run from the repository root. For a fresh worktree, first install dependencies
+with `(cd apps && pnpm install --frozen-lockfile)`. The collection test file is
+new and must exist before these commands run.
+
+```bash
+(cd apps/web && pnpm exec vitest run components/task/inspector/preview-feedback-collection.test.tsx components/task/inspector/preview-feedback-controls.test.tsx components/task/chat-context-items.test.ts components/task/chat/chat-input-area.test.tsx components/task/chat/context-items/context-chip.test.tsx components/task/browser-panel.test.tsx components/task/html-preview-content.test.tsx hooks/use-preview-capture.test.ts)
+(cd apps/web && pnpm run typecheck)
+(cd apps/web && pnpm exec eslint components/task/inspector components/task/chat-context-items.ts components/task/chat/chat-input-area.tsx components/task/chat/use-chat-panel-state.ts components/task/chat/context-items/preview-feedback-item.tsx)
+(cd apps/web && pnpm run i18n:check)
+(cd apps/web && pnpm run i18n:ratchet)
+(cd apps/web && pnpm e2e:run --project chromium tests/preview/preview-feedback.spec.ts)
+(cd apps/web && pnpm e2e:run --project mobile-chrome tests/task/mobile-html-preview.spec.ts)
+git diff --check
+```
+
+Run the managed E2E commands sequentially. They build the required artifacts.
+Do not use worker overrides, headed mode, or stale builds. Record actual
+scenario counts and the rendered phone comparison with UI-R2. Add any new
+production files to the scoped ESLint command before completion.
+
+## Files likely touched
+
+- `apps/web/components/task/inspector/preview-feedback-collection.tsx` (new)
+- `apps/web/components/task/inspector/preview-feedback-collection.test.tsx` (new)
+- `apps/web/components/task/inspector/preview-feedback-controls.tsx`
+- `apps/web/components/task/inspector/preview-feedback-controls.test.tsx`
+- `apps/web/components/task/chat-context-items.ts`
+- `apps/web/components/task/chat-context-items.test.ts`
+- `apps/web/components/task/chat/chat-input-area.tsx`
+- `apps/web/components/task/chat/chat-input-area.test.tsx`
+- `apps/web/components/task/chat/use-chat-panel-state.ts`
+- `apps/web/components/task/chat/context-items/preview-feedback-item.tsx`
+- `apps/web/lib/types/context.ts`
+- `apps/web/e2e/tests/preview/preview-feedback.spec.ts`
+- `apps/web/e2e/tests/task/mobile-html-preview.spec.ts`
+- `apps/web/src/locales/{en,pt-pt,zh-cn,zh-hk,zh-tw,pseudo}/task.json`
+
+## Dependencies
+
+Task 02 establishes editor state ownership before extraction.
+Run after Task 01 in the package sequence. Queue changes are not a dependency
+of the collection UI, but existing Send scenarios remain regression coverage.
+
+## Risks
+
+- A trigger nested inside a hidden composer does not provide independent access.
+- Multiple mounted composers need shared data, not shared global open state.
+- Interactive forms in a HoverCard lose reliable keyboard and touch behavior.
+- An old item version must not silently replace a newer comment.
+
+## Parallelism
+
+`sequential`
+
+## Inputs
+
+- [Plan](plan.md) and its mobile design contract.
+- [Design: Collection access without capture](../../specs/tasks/system-design/web-preview-feedback.md#collection-access-without-capture).
+- `apps/web/components/task/mobile/mobile-picker-sheet.tsx`.
+- `apps/web/components/confirmation/AGENTS.md` before confirmation changes.
+- Existing `usePreviewFeedback`, preview-control, context-chip, and HTML E2E tests.
+
+## Results
+
+Implemented. Saved feedback management is now a shared task-scoped collection
+surface. The composer chip opens it when a session is available, and a
+session-independent trigger remains visible for completed, stopped, launch-error,
+and no-session states. Preview capture controls reuse the same editor without
+requiring an iframe for edit, delete, or clear operations.
+
+Desktop uses a controlled Popover. Touch uses the existing Drawer picker
+composition with a fixed header, one scroll body, safe-area padding, 44-pixel
+targets, focus return, localized errors, and revision-guarded mutations.
+
+Component coverage passed for collection operations, conflict retention, task
+chip wiring, fallback predicates, and preview integration. Desktop Chromium
+preview feedback E2E passed, and mobile Chrome HTML preview E2E passed all 3
+tests, including collection management after terminal session hydration and
+reload restoration. Full web lint and localization gates passed.
diff --git a/docs/plans/web-preview-feedback/plan.md b/docs/plans/web-preview-feedback/plan.md
new file mode 100644
index 0000000000..a49af6871a
--- /dev/null
+++ b/docs/plans/web-preview-feedback/plan.md
@@ -0,0 +1,332 @@
+---
+status: done
+created: 2026-09-15
+requirements:
+  - REQ-TASKS-WEB-PREVIEW-FEEDBACK-001
+  - REQ-TASKS-WEB-PREVIEW-FEEDBACK-002
+  - REQ-TASKS-WEB-PREVIEW-FEEDBACK-003
+  - REQ-TASKS-WEB-PREVIEW-FEEDBACK-004
+system_design:
+  - ../../specs/tasks/system-design/web-preview-feedback.md
+legacy_specs:
+  - ../../specs/ui/requirements/browser-inspect-annotations-save.md
+---
+
+# Implementation Plan: Interactive Web Preview Feedback
+
+## Overview
+
+Replace Browser-panel-local annotations with a task-owned review workflow that
+works in both the Browser panel and native HTML-file preview. Users capture text,
+DOM elements, or screenshot regions across navigable pages, add required
+comments, and review one durable pending collection. The ordinary composer Send
+action delivers the current versioned snapshot to the selected Agent session,
+using direct delivery or the existing queue, and consumes it only after durable
+acceptance.
+
+Implementation follows Red-Green-Refactor inside every work order. The package
+first establishes persistence and synchronization, then atomic chat delivery,
+shared text and element capture, screenshot capture and attachment ownership,
+and final public guidance plus browser proof.
+
+## Scope
+
+### In scope
+
+- A revisioned task-owned preview-feedback collection on SQLite and PostgreSQL.
+- Authorized WebSocket CRUD and full-snapshot synchronization.
+- Durable screenshot storage through the existing attachment service.
+- Exact-reference direct and queued delivery with server-owned formatting and
+  atomic feedback consumption.
+- One composer context item shared by every session in the task.
+- Text, element, and screenshot-region capture in Browser and native HTML-file
+  preview surfaces.
+- Cross-page pending review and best-effort marker restoration.
+- Desktop Popover/panel controls and a phone Drawer with touch capture.
+- Localization in all shipped catalogs, public documentation, and focused unit,
+  integration, desktop, mobile, and Docker-backed E2E tests.
+- Final repository formatting, typecheck, test, and lint requested for the
+  implementation phase.
+
+### Out of scope
+
+- Source-line mapping, full browser developer tools, video, full-page stitched
+  screenshots, console or network capture, and arbitrary `file://` pages.
+- A separate untrusted-content origin or a change to the trusted HTML-preview
+  execution model.
+- Per-item Run, multi-session broadcast, automatic sending, or task-wide
+  conversion of other comment sources.
+- Pixel-identical capture of unreadable cross-origin media.
+
+## Technical approach
+
+### Task collection
+
+Add `task_preview_feedback_collections` and `task_preview_feedback` with
+task-cascade ownership, monotonic collection revisions, optimistic row versions,
+stable order, kind-specific payload validation, and bounded snapshots. Screenshot
+rows reference uniquely claimed PNG attachments; staged upload, task feedback,
+message, and queue claims use one attachment lifecycle.
+
+Authorized WebSocket actions return complete replacement snapshots and publish
+`task.preview_feedback.changed`. A dedicated frontend slice keeps one snapshot
+per task and does not use the session comment store or browser storage.
+
+### Message admission
+
+Extend the plan-comment admission envelope with `preview_feedback_refs`. The
+backend resolves exact task-owned versions and creates a visible
+`### Web Preview Feedback` prompt block. Screenshot comments include their page
+context and PNG attachment. The final direct or queued repository transaction
+claims all attachments, persists delivery, conditionally removes referenced
+feedback, and increments collection revisions. Rejection and conflicts leave
+the pending set and composer untouched.
+
+### Shared preview capture
+
+Refactor the injected inspector into a versioned selection bridge. It reports
+bounded text, element, page, and region metadata to the parent window and accepts
+marker projections for the current route. `BrowserPanel` uses the existing
+localhost proxy rewrite. `HtmlPreviewContent` recognizes its already-proxied URL
+as inspector-capable without routing it a second time.
+
+Kandev-owned chrome provides capture modes, localized comment editing, upload
+state, pending review, and errors. The parent validates iframe events by source
+and schema. Element HTML renders only as escaped code.
+
+### Screenshot regions
+
+Add `html2canvas` to the web application and rasterize the selected rectangle
+from the same-origin proxied iframe document. Downscale output above the pixel
+bound, encode PNG, and require confirmation through a thumbnail before upload.
+Save uploads the image, then atomically creates the feedback claim. Capture or
+save failure keeps the local draft and creates no incomplete row.
+
+### Responsive composition
+
+Desktop uses one **Annotate** control in preview chrome, an anchored capture
+draft Popover, and a pending panel grouped by page. Phone uses one touch-sized
+header action and a bottom Drawer for modes, draft editing, and the list.
+Screenshot drag mode temporarily owns iframe gestures; every other state keeps
+ordinary page navigation and scrolling.
+
+## ASCII UI preview
+
+The control hierarchy, one task-wide pending count, required comment, ordinary
+composer Send, and phone Drawer are requirements. Exact spacing, icons, colors,
+and row truncation are illustrative and must use existing Kandev tokens and
+localized copy.
+
+### UI-01: Desktop preview annotation
+
+Entry point: Browser panel or rendered HTML-file preview. The toolbar is fixed;
+the page owns iframe scrolling. Covers `AC-TASKS-WEB-PREVIEW-FEEDBACK-002.1`
+through `.5`, `.7`, and `AC-TASKS-WEB-PREVIEW-FEEDBACK-004.1`.
+
+```text
+┌ Browser / index.html ───────────────────────────────────────────────────────┐
+│ [ local page or file ]                      [Refresh] [Annotate (3) ▾]      │
+├─────────────────────────────────────────────────────────────────────────────┤
+│                         interactive page (scrolls)                          │
+│                                                                             │
+│        ┌──── button#save.primary ──────────┐       ②                      │
+│        │             Save                  │                               │
+│        └───────────────────────────────────┘                               │
+├─────────────────────────────────────────────────────────────────────────────┤
+│ Pending feedback (3)                                           [Clear all] │
+│ /products  ① Text: “Choose a plan”       “Increase contrast”       [Edit] │
+│ /products  ② <button.checkout>           “Align with price”        [Edit] │
+│ /account   ③ Screenshot  820 × 360       “Form clips here”         [Edit] │
+└─────────────────────────────────────────────────────────────────────────────┘
+
+Annotate menu                         Capture draft Popover
+┌─────────────────────┐              ┌────────────────────────────────────┐
+│ Select text         │              │ Element: <button.checkout>         │
+│ Select element      │              │ Comment *                          │
+│ Screenshot region   │              │ [ Align with price...            ] │
+│ Review 3 pending    │              │                 [Cancel] [Add]      │
+└─────────────────────┘              └────────────────────────────────────┘
+```
+
+### UI-02: Phone preview annotation
+
+Entry point: focused Browser or HTML-file preview. The preview is full height;
+the Drawer has one internal scroll owner and safe-area clearance. Covers
+`AC-TASKS-WEB-PREVIEW-FEEDBACK-004.2` through `.5`.
+
+```text
+┌ index.html ──────────────────────────┐
+│ [Show code]              [Annotate 3]│  fixed, 44 px actions
+├──────────────────────────────────────┤
+│                                      │
+│       interactive page (scrolls)     │
+│                                      │
+│  Screenshot region: drag to capture  │  capture mode only
+│                              [Cancel]│
+└──────────────────────────────────────┘
+
+┌ Annotation Drawer ───────────────────┐
+│ ━                                    │
+│ Add feedback                         │
+│ [Text] [Element] [Screenshot region] │
+│                                      │
+│ Pending feedback (3)                 │
+│ /products · Text             [Edit]  │
+│ /products · Element          [Edit]  │
+│ /account · Screenshot        [Edit]  │
+│                                      │
+│             one scroll area          │
+└──────────────────────────────────────┘
+```
+
+### UI-03: Ordinary composer delivery
+
+Entry point: any task session composer. Covers
+`AC-TASKS-WEB-PREVIEW-FEEDBACK-003.1` through `.6`.
+
+```text
+┌ Context ────────────────────────────────────────────────────────────────────┐
+│ [Preview feedback · 3]  [Plan comments · 1]                               │
+├─────────────────────────────────────────────────────────────────────────────┤
+│ Add an optional message...                                      [Send]     │
+└─────────────────────────────────────────────────────────────────────────────┘
+```
+
+### UI-04: Screenshot draft and recoverable failure
+
+Entry point: after selecting a region. Covers
+`AC-TASKS-WEB-PREVIEW-FEEDBACK-002.3`, `.4`, and
+`AC-TASKS-WEB-PREVIEW-FEEDBACK-004.4`.
+
+```text
+┌ Screenshot feedback ───────────────────────────┐
+│ ┌────────────────────────────────────────────┐ │
+│ │        captured region thumbnail           │ │
+│ └────────────────────────────────────────────┘ │
+│ 820 × 360 · PNG                                │
+│ Comment *                                      │
+│ [ Form clips below the submit button...      ] │
+│ Could not upload the image. Try again.         │  visible when failed
+│                         [Cancel] [Retry / Add]  │
+└────────────────────────────────────────────────┘
+```
+
+## Acceptance evidence
+
+| Acceptance criteria | Evidence owner |
+| --- | --- |
+| `AC-TASKS-WEB-PREVIEW-FEEDBACK-001.1` through `.5` | Task 01 repository, service, WebSocket, frontend snapshot, reconnect, and conflict tests |
+| `AC-TASKS-WEB-PREVIEW-FEEDBACK-003.1` through `.6` | Task 02 direct-message, queue, formatting, attachment, replay, and composer tests |
+| `AC-TASKS-WEB-PREVIEW-FEEDBACK-002.1`, `.2`, `.4` through `.7` | Task 03 bridge, Browser/HTML preview, candidate hint, marker, panel, desktop, and phone component tests |
+| `AC-TASKS-WEB-PREVIEW-FEEDBACK-002.3` | Task 04 rasterization, preview, upload, PNG validation, and attachment-lifecycle tests |
+| `AC-TASKS-WEB-PREVIEW-FEEDBACK-004.1` through `.5` | Tasks 03 and 05 accessibility, mobile, desktop, and Docker-backed E2E |
+| All criteria | Task 05 public guidance, focused E2E, and requested repository checks |
+
+## Work orders
+
+- [x] [Task 01: Persist and synchronize preview feedback](task-01-persist-and-sync-feedback.md)
+- [x] [Task 02: Deliver preview feedback through chat](task-02-deliver-feedback-through-chat.md)
+- [x] [Task 03: Capture text and elements across previews](task-03-capture-text-and-elements.md)
+- [x] [Task 04: Capture screenshot regions as attachments](task-04-capture-screenshot-regions.md)
+- [x] [Task 05: Document and prove the complete workflow](task-05-docs-e2e-and-verification.md)
+
+## Dependency order
+
+```text
+Task 01 durable collection and synchronization
+        |
+        v
+Task 02 exact direct and queued delivery
+        |
+        v
+Task 03 Browser and HTML text/element capture
+        |
+        v
+Task 04 screenshot capture and attachment ownership
+        |
+        v
+Task 05 public docs, desktop/mobile/container E2E, final checks
+```
+
+The collection exists before message admission references it. Message admission
+is complete before UI capture can create user-visible pending data. Screenshot
+work follows the shared capture workflow and reuses the already-tested delivery
+and task-attachment boundaries. Final E2E and documentation describe only the
+settled end-to-end behavior.
+
+## Verification strategy
+
+- Every work order starts with focused failing tests, records the expected RED
+  result, implements the minimum behavior, reruns GREEN, then refactors with the
+  same focused tests green.
+- Backend repository and service tests run with `-race` and cover both SQLite
+  and the environment-gated PostgreSQL paths already used by adjacent plan
+  comment and attachment tests.
+- Frontend Vitest covers pure bridge/raster helpers, task state, message
+  submission, and responsive components. Typecheck, ESLint, and i18n checks run
+  after the affected vertical slice.
+- Managed Playwright runs rebuild backend and web artifacts, then cover desktop,
+  mobile, and the Docker-backed executor path with one worker per project.
+- The final work order runs `make fmt` first, followed by
+  `make typecheck test lint`, exactly as requested. A conventional commit is
+  created only after all checks pass and work-order results are recorded.
+
+## Risks
+
+- `html2canvas` cannot reproduce every CSS feature or unreadable cross-origin
+  resource. Mandatory thumbnail review makes the resulting PNG explicit before
+  persistence; failed rendering never produces a partial pending row.
+- Preview content runs under the existing trusted same-origin model. Bridge
+  source/schema validation and server authorization must prevent that content
+  from choosing task or attachment ownership.
+- Combining ordinary files and screenshots can cross the existing ten-file or
+  100 MiB message limits. Admission must reject atomically and the composer must
+  explain which limit was crossed.
+- Exact feedback consumption touches both direct and queued repositories.
+  Reusing the established plan-comment lease and replay boundary is required to
+  avoid a second, weaker delivery implementation.
+- Touch region capture competes with page scroll. Only the explicit screenshot
+  mode may suppress iframe drag gestures, and cleanup must run on completion,
+  cancel, navigation, or unmount.
+- Full-snapshot events can grow with HTML excerpts. Shared count and aggregate
+  byte limits must be enforced before persistence in every database dialect.
+
+## Completion gate
+
+The implementation is complete when all five work orders are `done`, their
+focused checks and the final requested repository checks pass, public docs
+describe the shipped workflow and limits, generated dependency licenses are
+current, and the verified changes have a Conventional Commit. The user can then
+move the task to Test.
+
+## Verification results
+
+### Review follow-up (2026-09-16)
+
+The [review-fix package](../web-preview-feedback-review-fixes/plan.md) owns
+three open corrections: queue replay, screenshot draft comments, and independent
+collection access. It reuses this package's requirements and system design.
+Tasks 02, 03, 04, and 05 intersect those corrections. Their results here remain
+historical contributor evidence, not evidence that the new regressions pass.
+The follow-up package owns its pending statuses and new command results.
+Its scope does not include a commit, push, or whole-PR merge clearance.
+
+### Original implementation results
+
+- Desktop Chromium, mobile Chrome, and Docker-backed Playwright scenarios each
+  pass against rebuilt production artifacts. They cover multi-route durable
+  review, exact generated-text position evidence, candidate highlighting,
+  touch region capture, panel reopening, direct delivery, queued delivery, and
+  real screenshot attachments.
+- The full web suite passes 2,095 files and 18,041 tests, with 4 intentional
+  skips. Focused frontend suites pass 88 preview, composer, API, store, bridge,
+  screenshot, and WebSocket tests.
+- Preview-feedback repository, service, handler, queue, and attachment tests
+  pass. The full backend run passes every package except the unchanged
+  real-process probe integration in the elevated test namespace, where host
+  PIDs are combined with container `/proc/uptime`; that package passes 20
+  consecutive runs in the normal namespace.
+- Host and Linux backend artifacts, the E2E web bundle, public-doc validators,
+  spec validators, CLI tests, formatting, typecheck, and lint pass. Script
+  Git fixtures use repository-local empty hook paths so machine-wide hooks do
+  not affect their synthetic commits.
diff --git a/docs/plans/web-preview-feedback/task-01-persist-and-sync-feedback.md b/docs/plans/web-preview-feedback/task-01-persist-and-sync-feedback.md
new file mode 100644
index 0000000000..ad4cb0fc8c
--- /dev/null
+++ b/docs/plans/web-preview-feedback/task-01-persist-and-sync-feedback.md
@@ -0,0 +1,129 @@
+---
+id: "01-persist-and-sync-feedback"
+title: "Persist and synchronize preview feedback"
+status: completed
+wave: 1
+depends_on: []
+plan: "plan.md"
+requirements:
+  - REQ-TASKS-WEB-PREVIEW-FEEDBACK-001
+acceptance_criteria:
+  - AC-TASKS-WEB-PREVIEW-FEEDBACK-001.1
+  - AC-TASKS-WEB-PREVIEW-FEEDBACK-001.2
+  - AC-TASKS-WEB-PREVIEW-FEEDBACK-001.3
+  - AC-TASKS-WEB-PREVIEW-FEEDBACK-001.4
+  - AC-TASKS-WEB-PREVIEW-FEEDBACK-001.5
+system_design:
+  - ../../specs/tasks/system-design/web-preview-feedback.md
+---
+
+# Task 01: Persist and Synchronize Preview Feedback
+
+## Summary
+
+Create the task-owned revisioned collection, screenshot claim state, authorized
+WebSocket CRUD, and frontend snapshot projection. This work makes pending data
+durable and recoverable before any production capture or delivery UI depends on
+it.
+
+## In scope
+
+- SQLite and PostgreSQL schema, replay-safe migrations, constraints, indexes,
+  task cascades, and stable ordering.
+- Shared models and `previewfeedback` validators for kinds, fields, collection
+  limits, PNG limits, and optimistic versions.
+- Service and repository CRUD, idempotent caller-generated create IDs, clear by
+  collection revision, and screenshot task claims and deletion cleanup.
+- Authorized `task.preview_feedback.*` WebSocket actions, stable conflict/error
+  codes, full snapshots, and changed events.
+- A task-keyed frontend API, state slice, reconnect reconciliation, and hooks.
+- Tests for session deletion and primary changes remaining irrelevant to task
+  ownership.
+
+## Out of scope
+
+- Composer context and message delivery.
+- Browser or HTML-preview capture controls.
+- Client-side screenshot rasterization.
+
+## Acceptance
+
+- Backend restart, reconnect, session changes, and a second authorized client
+  recover the same task snapshot and screenshot descriptors.
+- Exact-version update/delete and revision-guarded clear reject stale clients
+  without changing the collection.
+- Task deletion, feedback deletion, and failed creates leave no unowned durable
+  screenshot claims; transient object-delete failure remains recoverable.
+
+## TDD sequence
+
+1. Add failing repository and service contract tests for schema replay,
+   constraints, limits, optimistic versions, task cascades, and attachment
+   ownership; run them and record the expected failure.
+2. Implement the minimum models, migrations, repositories, and service until
+   those tests pass under the race detector.
+3. Add failing handler and frontend snapshot tests for authorization,
+   idempotency, events, reconnect, and stale revisions; run them RED.
+4. Implement the WebSocket and frontend state boundary, rerun GREEN, then
+   refactor duplicate plan-comment-shaped synchronization helpers only where
+   both call sites remain clearer.
+
+## Verification
+
+```bash
+cd apps/backend
+go test -race ./internal/task/previewfeedback ./internal/task/repository/sqlite ./internal/task/service ./internal/task/handlers
+cd ../../apps
+pnpm --filter @kandev/web test -- --run lib/api/domains/preview-feedback-api.test.ts lib/state/slices/preview-feedback lib/ws/handlers/preview-feedback.test.ts hooks/domains/comments/use-preview-feedback.test.ts
+cd web
+pnpm run typecheck
+pnpm exec eslint lib/api/domains/preview-feedback-api.ts lib/state/slices/preview-feedback lib/ws/handlers/preview-feedback.ts hooks/domains/comments/use-preview-feedback.ts
+```
+
+## Files likely touched
+
+- `apps/backend/internal/task/models/`
+- `apps/backend/internal/task/previewfeedback/`
+- `apps/backend/internal/task/repository/interfaces.go`
+- `apps/backend/internal/task/repository/sqlite/base_schema.go`
+- `apps/backend/internal/task/repository/sqlite/base_migrations.go`
+- `apps/backend/internal/task/repository/sqlite/preview_feedback*.go`
+- `apps/backend/internal/task/service/preview_feedback_service*.go`
+- `apps/backend/internal/task/handlers/task_preview_feedback_handlers*.go`
+- `apps/backend/pkg/websocket/actions.go`
+- `apps/web/lib/api/domains/preview-feedback-api*.ts`
+- `apps/web/lib/state/slices/preview-feedback/`
+- `apps/web/lib/ws/handlers/preview-feedback*.ts`
+- `apps/web/hooks/domains/comments/use-preview-feedback*.ts`
+
+## Dependencies
+
+None.
+
+## Risks
+
+- A claimed image can leak if row deletion and storage cleanup do not share the
+  existing attachment lifecycle.
+- Database checks and byte accounting can diverge between SQLite and PostgreSQL
+  unless the shared validator remains authoritative.
+- Snapshot replacement must reject stale revisions without hiding a legitimate
+  empty collection.
+
+## Parallelism
+
+`sequential`
+
+## Inputs
+
+- Persistence, limits, synchronization, lifecycle, and security sections in the
+  system design.
+- Existing task plan comment and prompt attachment implementations as adjacent
+  reference patterns.
+
+## Results
+
+Implemented task-owned SQLite/PostgreSQL-compatible storage, optimistic CRUD,
+idempotent creates, screenshot claim validation and cleanup, authorized
+WebSocket actions, authoritative change events, and a reconnecting task-keyed
+frontend snapshot projection. Focused backend tests pass under the race detector;
+the frontend API, state, WebSocket, and hook tests plus the web typecheck pass.
diff --git a/docs/plans/web-preview-feedback/task-02-deliver-feedback-through-chat.md b/docs/plans/web-preview-feedback/task-02-deliver-feedback-through-chat.md
new file mode 100644
index 0000000000..49ea49f6e3
--- /dev/null
+++ b/docs/plans/web-preview-feedback/task-02-deliver-feedback-through-chat.md
@@ -0,0 +1,157 @@
+---
+id: "02-deliver-feedback-through-chat"
+title: "Deliver preview feedback through chat"
+status: completed
+wave: 2
+depends_on:
+  - "01-persist-and-sync-feedback"
+plan: "plan.md"
+requirements:
+  - REQ-TASKS-WEB-PREVIEW-FEEDBACK-003
+acceptance_criteria:
+  - AC-TASKS-WEB-PREVIEW-FEEDBACK-003.1
+  - AC-TASKS-WEB-PREVIEW-FEEDBACK-003.2
+  - AC-TASKS-WEB-PREVIEW-FEEDBACK-003.3
+  - AC-TASKS-WEB-PREVIEW-FEEDBACK-003.4
+  - AC-TASKS-WEB-PREVIEW-FEEDBACK-003.5
+  - AC-TASKS-WEB-PREVIEW-FEEDBACK-003.6
+system_design:
+  - ../../specs/tasks/system-design/web-preview-feedback.md
+---
+
+# Task 02: Deliver Preview Feedback Through Chat
+
+## Summary
+
+Add preview feedback to every task composer and extend direct and queued message
+admission so Send formats, attaches, and consumes the selected task snapshot as
+one durable operation.
+
+## In scope
+
+- `preview_feedback_refs` on direct-message and queue contracts, caller replay
+  fingerprints, validation errors, and persisted metadata.
+- Canonical server formatting for text, rendered DOM anchors and coordinates,
+  escaped element HTML, screenshot names, page context, and mixed plan-comment
+  submissions.
+- One shared atomic envelope for exact plan-comment and preview-feedback
+  consumption plus ordinary and screenshot attachment claims.
+- Direct, busy-session queue, Send Now, replay, capacity, rollback, and
+  concurrent-send coverage.
+- One composer context item per task, empty-text submission, selected-session
+  routing, submit settlement, and shared pending-panel entry.
+- Localized count, conflict, attachment-limit, and send-failure copy.
+
+## Out of scope
+
+- A preview-panel Send or per-item Run control.
+- Selection capture and marker rendering.
+- Screenshot rasterization and upload UI.
+
+## Acceptance
+
+- Send to an idle or busy selected session persists the same visible prompt and
+  attachments and consumes only the frozen exact feedback versions.
+- Any stale reference, route, capacity, prompt, or attachment error rolls back
+  message or queue admission and preserves both feedback and composer content.
+- A lost response or retry with the same unchanged identity resolves to one
+  accepted delivery, while feedback added after the snapshot remains pending.
+
+## ASCII UI preview
+
+Use [UI-03 in the plan](plan.md#ui-03-ordinary-composer-delivery). The count chip
+is task-owned and opens the shared collection; the existing composer Send button
+is the only delivery action.
+
+```text
+┌ Context ────────────────────────────────────────────────────────────┐
+│ [Preview feedback · 3]  [Plan comments · 1]                       │
+├─────────────────────────────────────────────────────────────────────┤
+│ Add an optional message...                              [Send]     │
+└─────────────────────────────────────────────────────────────────────┘
+```
+
+## TDD sequence
+
+1. Add failing canonical-format and direct/queue transaction tests for exact
+   refs, runtime text anchors, coordinates, mixed context, attachment transfer,
+   rollback, races, and replay; run the focused backend packages RED.
+2. Implement the shared admission resolver and repository transactions until
+   all focused backend tests pass under `-race`.
+3. Add failing composer/context/submission tests for selected-session routing,
+   empty text, busy queueing, preserved failures, and post-snapshot additions;
+   run them RED.
+4. Implement frontend reference submission and settlement, rerun GREEN, then
+   simplify only after direct and queue behavior remain identical.
+
+## Verification
+
+```bash
+cd apps/backend
+go test -race ./internal/task/previewfeedback ./internal/task/repository/sqlite ./internal/task/service ./internal/task/handlers ./internal/orchestrator/messagequeue ./internal/orchestrator/handlers
+cd ../../apps
+pnpm --filter @kandev/web test -- --run components/task/chat/chat-context-items.test.ts components/task/chat/use-chat-panel-state.test.tsx hooks/use-message-handler.test.ts lib/comments/format-preview-feedback.test.ts
+cd web
+pnpm run typecheck
+pnpm run i18n:check
+pnpm run i18n:ratchet
+pnpm exec eslint components/task/chat hooks/use-message-handler.ts lib/comments/format-preview-feedback.ts
+```
+
+## Files likely touched
+
+- `apps/backend/internal/task/previewfeedback/format*.go`
+- `apps/backend/internal/task/repository/sqlite/message_preview_feedback*.go`
+- `apps/backend/internal/task/repository/sqlite/attachment*.go`
+- `apps/backend/internal/task/service/service_messages*.go`
+- `apps/backend/internal/task/handlers/message_handlers*.go`
+- `apps/backend/internal/orchestrator/messagequeue/`
+- `apps/backend/internal/orchestrator/handlers/queue_handlers*.go`
+- `apps/web/components/task/chat-context-items*.ts`
+- `apps/web/components/task/chat/use-chat-panel-state*.ts`
+- `apps/web/hooks/use-message-handler*.ts`
+- `apps/web/lib/comments/format-preview-feedback*.ts`
+- `apps/web/lib/api/types/message*.ts`
+- `apps/web/src/locales/*/task.json`
+
+## Dependencies
+
+- Task 01 supplies durable rows, exact versions, screenshots claims, snapshots,
+  and authorization.
+
+## Risks
+
+- Adding a second transaction around the existing plan-comment resolver would
+  create partial consumption; one shared leaf transaction must own both.
+- Queue auto-merge must not erase the caller identity or attachment/ref
+  fingerprint needed for replay.
+- User-controlled page strings must remain quoted user content and cannot break
+  Markdown fences or enter system markup.
+
+## Parallelism
+
+`sequential`
+
+## Inputs
+
+- Composer projection, canonical prompt, and atomic acceptance sections in the
+  system design.
+- Existing task-owned plan-comment admission, queue receipt, and attachment
+  claim tests.
+
+## Results
+
+- Added exact `preview_feedback_refs` to direct and queued message contracts,
+  replay fingerprints, task/session admission leases, and changed-snapshot
+  errors.
+- Added one shared transaction for plan comments, preview feedback, ordinary
+  staged attachments, screenshot transfers, queue capacity, and durable
+  message or queue acceptance.
+- Added the canonical server formatter with complete runtime text anchors,
+  escaped rendered element HTML, screenshot context, page grouping, and prompt
+  bounds.
+- Projected the task-owned pending count into every composer and froze visible
+  versions on Send without client-formatted duplication or local clearing.
+- Verified focused backend packages under the race detector and 51 frontend
+  submission, queue, context, and settlement tests; web typecheck and i18n
+  validation pass.
diff --git a/docs/plans/web-preview-feedback/task-03-capture-text-and-elements.md b/docs/plans/web-preview-feedback/task-03-capture-text-and-elements.md
new file mode 100644
index 0000000000..dd587ea793
--- /dev/null
+++ b/docs/plans/web-preview-feedback/task-03-capture-text-and-elements.md
@@ -0,0 +1,176 @@
+---
+id: "03-capture-text-and-elements"
+title: "Capture text and elements across previews"
+status: done
+wave: 3
+depends_on:
+  - "02-deliver-feedback-through-chat"
+plan: "plan.md"
+requirements:
+  - REQ-TASKS-WEB-PREVIEW-FEEDBACK-002
+  - REQ-TASKS-WEB-PREVIEW-FEEDBACK-004
+acceptance_criteria:
+  - AC-TASKS-WEB-PREVIEW-FEEDBACK-002.1
+  - AC-TASKS-WEB-PREVIEW-FEEDBACK-002.2
+  - AC-TASKS-WEB-PREVIEW-FEEDBACK-002.4
+  - AC-TASKS-WEB-PREVIEW-FEEDBACK-002.5
+  - AC-TASKS-WEB-PREVIEW-FEEDBACK-002.6
+  - AC-TASKS-WEB-PREVIEW-FEEDBACK-002.7
+  - AC-TASKS-WEB-PREVIEW-FEEDBACK-004.1
+  - AC-TASKS-WEB-PREVIEW-FEEDBACK-004.2
+  - AC-TASKS-WEB-PREVIEW-FEEDBACK-004.3
+  - AC-TASKS-WEB-PREVIEW-FEEDBACK-004.4
+  - AC-TASKS-WEB-PREVIEW-FEEDBACK-004.5
+system_design:
+  - ../../specs/tasks/system-design/web-preview-feedback.md
+---
+
+# Task 03: Capture Text and Elements Across Previews
+
+## Summary
+
+Turn the injected inspector into a validated selection bridge and add one shared
+desktop and phone review UI to the Browser panel and native HTML-file preview.
+Users can save commented text and element captures, navigate across pages, and
+restore markers without tying feedback to a mounted iframe.
+
+## In scope
+
+- Versioned parent/iframe commands and events with source, type, byte, route,
+  and selector validation.
+- Text selection and DOM element capture by mouse, touch, and keyboard,
+  including frozen DOM range endpoints, containing-element HTML, selection
+  rectangles, scroll position, and viewport metrics.
+- A preselection outline, translucent fill, and concise tag/ID/class label that
+  follows pointer hover, keyboard focus, or an active touch press.
+- Bounded accessible metadata and escaped `outerHTML` snapshots.
+- Browser localhost proxy eligibility plus already-proxied HTML-preview
+  eligibility.
+- Task-backed marker projection for a matching source and route, including
+  unavailable-anchor state without mutation.
+- Shared pending list, desktop menu/Popover/panel, phone Drawer, edit/delete,
+  clear confirmation, mutation progress, and failure recovery.
+- Localized copy in all five locales and minimum touch/overflow behavior.
+- Removal of Browser-panel-local annotation ownership, Copy/Clear-only state,
+  and obsolete local hook assumptions.
+
+## Out of scope
+
+- Screenshot rasterization and image upload.
+- Source-line mapping or execution-state persistence.
+- Sending directly from preview chrome.
+
+## Acceptance
+
+- Browser and native HTML preview create the same task-owned text and element
+  payloads and retain prior-route items while navigation continues normally.
+- A script-generated text selection remains fully represented by its saved
+  rendered element, DOM range, and visual position after the live page changes.
+- Element mode identifies the candidate before activation and removes every
+  hint overlay when capture ends or the document changes.
+- Parent code ignores events from any other window or invalid schema, and page
+  HTML is always rendered as text in Kandev chrome.
+- Desktop and phone offer equivalent capture, edit, delete, and review outcomes
+  with viewport-native controls and recoverable drafts.
+
+## ASCII UI preview
+
+Implement [UI-01](plan.md#ui-01-desktop-preview-annotation) and
+[UI-02](plan.md#ui-02-phone-preview-annotation). The phone action opens a Drawer
+instead of shrinking the desktop pending panel.
+
+```text
+Desktop: [Refresh] [Annotate (3) ▾]  -> Text | Element | Screenshot | Review
+Phone:   [Show code] [Annotate 3]     -> full-width bottom Drawer
+
+Pending feedback
+/products · Text “Choose a plan” · “Increase contrast”              [Edit]
+/products · <button.checkout> · “Align with price”                  [Edit]
+
+Element mode:  ┌──── button#save.primary ────┐
+               │            Save             │  updates before selection
+               └─────────────────────────────┘
+```
+
+## TDD sequence
+
+1. Add failing Go injection and TypeScript bridge tests for the protocol,
+   source validation, generated-text DOM ranges and coordinates, element
+   metadata, candidate hint lifecycle, route changes, and marker projection;
+   run both suites RED.
+2. Implement the minimum bridge and shared hook until protocol tests pass.
+3. Add failing rendered tests for Browser and HTML-preview entry, desktop
+   Popover/panel, phone Drawer, draft preservation, keyboard focus, 44-pixel
+   controls, and no overflow; run RED.
+4. Implement the responsive components and localized copy, rerun GREEN, then
+   remove obsolete local annotation state and refactor shared surface adapters.
+
+## Verification
+
+```bash
+cd apps/backend
+go test -race ./internal/agentctl/server/api
+cd ../../apps
+pnpm --filter @kandev/web test -- --run lib/preview-inspect-bridge.test.ts hooks/use-preview-capture.test.ts components/task/browser-panel.test.tsx components/task/html-preview-content.test.tsx components/task/inspector components/task/mobile/mobile-preview-feedback.test.tsx
+cd web
+pnpm run typecheck
+pnpm run i18n:check
+pnpm run i18n:ratchet
+pnpm exec eslint lib/preview-inspect-bridge.ts hooks/use-preview-capture.ts components/task/browser-panel.tsx components/task/html-preview-content.tsx components/task/inspector components/task/mobile/mobile-preview-feedback.tsx
+```
+
+## Files likely touched
+
+- `apps/backend/internal/agentctl/server/api/scripts/inspector.js`
+- `apps/backend/internal/agentctl/server/api/html_injector_test.go`
+- `apps/web/lib/preview-inspect-bridge*.ts`
+- `apps/web/lib/preview-url-detector*.ts`
+- `apps/web/hooks/use-preview-capture*.ts`
+- `apps/web/components/task/browser-panel*.tsx`
+- `apps/web/components/task/html-preview-content*.tsx`
+- `apps/web/components/task/inspector/`
+- `apps/web/components/task/mobile/mobile-preview-feedback*.tsx`
+- `apps/web/components/task/mobile/mobile-file-viewer-panel*.tsx`
+- `apps/web/src/locales/*/task.json`
+
+## Dependencies
+
+- Task 01 supplies synchronized CRUD and screenshot-neutral pending rows.
+- Task 02 ensures data created by this UI can be delivered through normal Send.
+
+## Risks
+
+- SPA navigation and iframe reloads can leave bridge listeners or markers bound
+  to the previous document unless teardown is identity-scoped.
+- Element events inside interactive controls must capture only in explicit mode
+  and restore normal click and touch behavior immediately afterward.
+- Native HTML preview must not pass an already-proxied URL through proxy
+  rewriting again.
+
+## Parallelism
+
+`sequential`
+
+## Inputs
+
+- Capture bridge, capture payloads, marker projection, responsive interaction,
+  accessibility, and security sections in the system design.
+- Existing Browser inspector submission and native HTML preview tests.
+
+## Results
+
+Implemented the versioned iframe bridge with strict source and payload
+validation, full rendered text range evidence, bounded element snapshots,
+route announcements, task-backed marker projection, and pointer, focus, and
+touch candidate highlighting. Browser and HTML-file previews now share one
+task-owned capture controller and one localized review surface: desktop uses a
+Popover and coarse pointers use a touch-sized Drawer with an internal scroll
+owner and safe-area clearance. The old Browser-local annotations, Copy/Clear
+panel, and inspect hook were removed.
+
+Focused evidence passed: bridge and capture-hook Vitest, Browser/HTML host and
+responsive review component tests (19 tests), frontend typecheck, i18n checks,
+scoped ESLint with zero warnings, JavaScript syntax validation, and the
+inspector injection tests under Go's race detector. The package-wide
+agentctl/API race suite still requires a network-enabled environment because
+an unrelated `httptest` listener is denied by this sandbox.
diff --git a/docs/plans/web-preview-feedback/task-04-capture-screenshot-regions.md b/docs/plans/web-preview-feedback/task-04-capture-screenshot-regions.md
new file mode 100644
index 0000000000..bce78cf83e
--- /dev/null
+++ b/docs/plans/web-preview-feedback/task-04-capture-screenshot-regions.md
@@ -0,0 +1,158 @@
+---
+id: "04-capture-screenshot-regions"
+title: "Capture screenshot regions as attachments"
+status: done
+wave: 4
+depends_on:
+  - "03-capture-text-and-elements"
+plan: "plan.md"
+requirements:
+  - REQ-TASKS-WEB-PREVIEW-FEEDBACK-002
+  - REQ-TASKS-WEB-PREVIEW-FEEDBACK-003
+  - REQ-TASKS-WEB-PREVIEW-FEEDBACK-004
+acceptance_criteria:
+  - AC-TASKS-WEB-PREVIEW-FEEDBACK-002.3
+  - AC-TASKS-WEB-PREVIEW-FEEDBACK-002.4
+  - AC-TASKS-WEB-PREVIEW-FEEDBACK-003.4
+  - AC-TASKS-WEB-PREVIEW-FEEDBACK-003.5
+  - AC-TASKS-WEB-PREVIEW-FEEDBACK-004.3
+  - AC-TASKS-WEB-PREVIEW-FEEDBACK-004.4
+system_design:
+  - ../../specs/tasks/system-design/web-preview-feedback.md
+---
+
+# Task 04: Capture Screenshot Regions as Attachments
+
+## Summary
+
+Add bounded screenshot-region rasterization, confirmation, upload, task claim,
+preview, and message transfer to the shared capture workflow.
+
+## In scope
+
+- The maintained `html2canvas` dependency, lockfile, and generated license data.
+- CSS-pixel rectangle normalization, iframe scroll coordinates, scale/downsize,
+  16-megapixel and 10-MiB limits, PNG encoding, and capture cleanup.
+- Desktop pointer and phone touch-region overlays that own gestures only while
+  screenshot mode is active.
+- Thumbnail, dimensions, accessible description, required comment, retry,
+  cancel, upload progress, and delete behavior.
+- Staged upload followed by task-feedback claim, PNG signature and metadata
+  validation, orphan cleanup, and atomic message/queue claim transfer.
+- Unit and integration tests for renderer, attachment lifecycle, all failure
+  boundaries, and mixed ordinary/screenshot attachment limits.
+
+## Out of scope
+
+- Full-page stitching, video, system-window capture, or editing image pixels.
+- Hiding known raster limitations from the user.
+- A second screenshot storage path.
+
+## Acceptance
+
+- A completed region produces a reviewable PNG with the selected bounds before
+  any durable feedback is created.
+- Raster, encode, upload, create, delete, or Send failure never leaves an
+  incomplete feedback row or inaccessible attachment and preserves retryable
+  user input where applicable.
+- Accepted direct and queued messages expose the screenshot as a normal image
+  attachment and consume the exact pending row once.
+
+## ASCII UI preview
+
+Implement [UI-04 in the plan](plan.md#ui-04-screenshot-draft-and-recoverable-failure).
+The thumbnail confirmation and visible failure state are required.
+
+```text
+┌ Screenshot feedback ────────────────────────┐
+│ [ captured region thumbnail              ] │
+│ 820 × 360 · PNG                             │
+│ Comment *  [ Form clips here...           ] │
+│ Could not upload the image. Try again.      │
+│                       [Cancel] [Retry/Add]   │
+└─────────────────────────────────────────────┘
+```
+
+## TDD sequence
+
+1. Add failing pure raster-helper tests for rectangle normalization, scroll
+   coordinates, scaling, pixel/byte bounds, and empty or failed canvases; run
+   them RED.
+2. Add failing attachment-service/repository tests for PNG validation, task
+   claims, deletion, retry, transfer, limits, and cleanup; run them RED.
+3. Implement the smallest renderer and attachment lifecycle that make those
+   tests GREEN.
+4. Add failing desktop and phone draft-component tests for gesture ownership,
+   thumbnail confirmation, progress, retry, cancel, and focus; implement and
+   rerun GREEN, then refactor with the complete focused set still passing.
+
+## Verification
+
+```bash
+cd apps/backend
+go test -race ./internal/task/repository/sqlite ./internal/task/service ./internal/task/handlers ./internal/orchestrator/messagequeue
+cd ../../apps
+pnpm --filter @kandev/web test -- --run lib/preview-screenshot.test.ts hooks/use-preview-capture.test.ts components/task/inspector/preview-feedback-draft.test.tsx components/task/mobile/mobile-preview-feedback.test.tsx hooks/use-message-handler.test.ts
+cd web
+pnpm run typecheck
+pnpm run i18n:check
+pnpm run i18n:ratchet
+pnpm run licenses:gen
+pnpm exec eslint lib/preview-screenshot.ts hooks/use-preview-capture.ts components/task/inspector components/task/mobile/mobile-preview-feedback.tsx
+```
+
+## Files likely touched
+
+- `apps/package.json`
+- `apps/pnpm-lock.yaml`
+- `apps/web/package.json`
+- `apps/web/generated/licenses.json`
+- `apps/web/lib/preview-screenshot*.ts`
+- `apps/web/hooks/use-preview-capture*.ts`
+- `apps/web/components/task/inspector/preview-feedback-draft*.tsx`
+- `apps/web/components/task/mobile/mobile-preview-feedback*.tsx`
+- `apps/backend/internal/task/service/attachment_service*.go`
+- `apps/backend/internal/task/repository/sqlite/attachment*.go`
+- Preview-feedback repository and admission tests from Tasks 01 and 02.
+
+## Dependencies
+
+- Task 03 supplies region selection, shared capture UI, and Browser/HTML iframe
+  adapters.
+- Tasks 01 and 02 supply task claims and atomic direct/queue transfer.
+
+## Risks
+
+- Cross-origin and unsupported rendered content can produce an incomplete DOM
+  raster. The user must review the actual thumbnail before Add.
+- High-DPI pages can allocate oversized canvases before encoding. Pixel bounds
+  and scaling must be computed before rendering.
+- Cancelling an upload or closing a draft must distinguish staged bytes from an
+  already committed task claim.
+
+## Parallelism
+
+`sequential`
+
+## Inputs
+
+- Screenshot regions, limits, atomic acceptance, lifecycle, failure, and
+  security sections in the system design.
+- Existing file-backed attachment service and composer preview components.
+
+## Results
+
+- Added bounded `html2canvas` region rasterization with CSS/document coordinate
+  normalization, pre-allocation downscaling, PNG signature and byte checks, and
+  a reviewable thumbnail with dimensions before upload.
+- Added explicit pointer and touch screenshot-region mode to the injected
+  inspector. It owns gestures only while active and restores cursor, touch,
+  navigation, and scrolling behavior on completion or cancellation.
+- Added retryable upload and create behavior, progress and localized failures,
+  cancellation cleanup for in-flight uploads, staged-orphan cleanup, and
+  task-feedback claim transfer through the existing attachment lifecycle.
+- Added backend validation for owner, workspace, task, MIME, image kind, prompt
+  delivery, exact bytes, PNG signature, 10-MiB size, and 16-megapixel metadata.
+- Verified the four affected backend packages under the race detector, 49
+  focused frontend tests, web typecheck, i18n checks and ratchet, scoped ESLint
+  with zero warnings, and regenerated dependency notices for `html2canvas`.
diff --git a/docs/plans/web-preview-feedback/task-05-docs-e2e-and-verification.md b/docs/plans/web-preview-feedback/task-05-docs-e2e-and-verification.md
new file mode 100644
index 0000000000..9af6929dc4
--- /dev/null
+++ b/docs/plans/web-preview-feedback/task-05-docs-e2e-and-verification.md
@@ -0,0 +1,174 @@
+---
+id: "05-docs-e2e-and-verification"
+title: "Document and prove the complete workflow"
+status: done
+wave: 5
+depends_on:
+  - "04-capture-screenshot-regions"
+plan: "plan.md"
+requirements:
+  - REQ-TASKS-WEB-PREVIEW-FEEDBACK-001
+  - REQ-TASKS-WEB-PREVIEW-FEEDBACK-002
+  - REQ-TASKS-WEB-PREVIEW-FEEDBACK-003
+  - REQ-TASKS-WEB-PREVIEW-FEEDBACK-004
+acceptance_criteria:
+  - AC-TASKS-WEB-PREVIEW-FEEDBACK-001.1
+  - AC-TASKS-WEB-PREVIEW-FEEDBACK-001.2
+  - AC-TASKS-WEB-PREVIEW-FEEDBACK-001.3
+  - AC-TASKS-WEB-PREVIEW-FEEDBACK-002.1
+  - AC-TASKS-WEB-PREVIEW-FEEDBACK-002.3
+  - AC-TASKS-WEB-PREVIEW-FEEDBACK-002.5
+  - AC-TASKS-WEB-PREVIEW-FEEDBACK-002.7
+  - AC-TASKS-WEB-PREVIEW-FEEDBACK-003.1
+  - AC-TASKS-WEB-PREVIEW-FEEDBACK-003.2
+  - AC-TASKS-WEB-PREVIEW-FEEDBACK-003.3
+  - AC-TASKS-WEB-PREVIEW-FEEDBACK-003.4
+  - AC-TASKS-WEB-PREVIEW-FEEDBACK-003.5
+  - AC-TASKS-WEB-PREVIEW-FEEDBACK-003.6
+  - AC-TASKS-WEB-PREVIEW-FEEDBACK-004.1
+  - AC-TASKS-WEB-PREVIEW-FEEDBACK-004.2
+  - AC-TASKS-WEB-PREVIEW-FEEDBACK-004.3
+  - AC-TASKS-WEB-PREVIEW-FEEDBACK-004.4
+  - AC-TASKS-WEB-PREVIEW-FEEDBACK-004.5
+system_design:
+  - ../../specs/tasks/system-design/web-preview-feedback.md
+---
+
+# Task 05: Document and Prove the Complete Workflow
+
+## Summary
+
+Exercise the completed workflow through real browser and container-backed paths,
+publish concise user guidance, update artifact statuses and results, and run the
+requested repository checks before commit.
+
+## In scope
+
+- A desktop Chromium E2E that reviews multiple routes on a local development
+  page, selects script-generated text and verifies its rendered DOM position,
+  verifies the element candidate hint before selection, saves all three capture
+  kinds, closes/reopens the preview, sends direct and queued feedback, and
+  verifies the transcript and real image attachment.
+- A mobile Chrome E2E for inline HTML preview, Drawer interaction, text or
+  element capture, touch screenshot region, source return, 44-pixel controls,
+  safe containment, and no horizontal overflow.
+- A `containers` project E2E that launches a Docker task session, opens its
+  published HTTP port in Browser, saves feedback, and delivers it.
+- Replacement or removal of the skipped Browser-local annotation suite so no
+  obsolete local-only contract remains as dormant coverage.
+- `docs/public/developer-tools.md` guidance for capture, pending ownership,
+  navigation, Send, screenshot limits, recovery, and raster limitations.
+- Public-doc validation, specification lifecycle/status updates, work-order
+  results, final repository checks, and a Conventional Commit.
+
+## Out of scope
+
+- Exhaustive executor duplication after one real Docker proof and existing
+  shared port-proxy contract coverage.
+- New screenshots or diagrams for public docs unless rendered review shows that
+  prose and the existing UI are insufficient.
+- Unrelated broad refactoring discovered during final checks.
+
+## Acceptance
+
+- Desktop, phone, and Docker-backed flows demonstrate the same durable pending
+  set and ordinary Send outcome through their native compositions.
+- Public guidance accurately distinguishes durable feedback from ephemeral
+  preview execution and explains confirmed screenshot limitations and recovery.
+- Focused checks, `make fmt`, and `make typecheck test lint` pass before the
+  implementation is committed.
+
+## TDD sequence
+
+1. Write the desktop, mobile, and container E2E assertions against the completed
+   product flow; confirm each new scenario fails for the expected missing or
+   incorrect behavior before making its final fixture/wiring adjustment.
+2. Make the minimum product or fixture fixes needed for first-attempt GREEN;
+   avoid retry-based assertions and fixed sleeps.
+3. Update public guidance and durable artifact statuses/results, run their
+   validators, then run the E2E files again after the production rebuild.
+4. Run the requested repository-wide checks once after focused checks settle.
+   Fix only causal failures, rerun affected focused checks, then rerun the failed
+   broad command before committing.
+
+## Verification
+
+```bash
+make -C apps/backend build
+cd apps/web
+pnpm run build:e2e
+pnpm e2e:run --project chromium tests/preview/preview-feedback.spec.ts
+pnpm e2e:run --project mobile-chrome tests/preview/mobile-preview-feedback.spec.ts
+KANDEV_E2E_CONTAINERS=1 pnpm e2e:run --host --project containers tests/docker/preview-feedback.spec.ts
+cd ../../
+node --test scripts/validate-public-docs.test.mjs
+node scripts/validate-public-docs.mjs
+python3 scripts/list-docs.py validate
+python3 scripts/lint-spec-files.test.py
+python3 scripts/lint-spec-files.py --all
+make fmt
+make typecheck test lint
+```
+
+## Files likely touched
+
+- `apps/web/e2e/tests/preview/preview-feedback.spec.ts`
+- `apps/web/e2e/tests/preview/mobile-preview-feedback.spec.ts`
+- `apps/web/e2e/tests/docker/preview-feedback.spec.ts`
+- `apps/web/e2e/tests/preview/preview-annotations.spec.ts`
+- `apps/web/e2e/pages/` and focused preview helpers/fixtures.
+- `docs/public/developer-tools.md`
+- `docs/specs/tasks/requirements/web-preview-feedback.md`
+- `docs/specs/tasks/system-design/web-preview-feedback.md`
+- `docs/specs/ui/requirements/native-html-preview.md`
+- `docs/specs/ui/system-design/native-html-preview.md`
+- `docs/decisions/2026-09-15-task-owned-web-preview-feedback.md`
+- `docs/plans/web-preview-feedback/`
+
+## Dependencies
+
+- Tasks 01 through 04 supply the complete persistence, delivery, responsive
+  capture, and screenshot behavior.
+
+## Risks
+
+- Container setup can dominate test time; the test must reuse the standard
+  Docker fixture and avoid adding a new image.
+- An E2E can accidentally inspect a fixture-local panel state instead of
+  proving backend durability; reload and a second view must read the server
+  snapshot.
+- The managed E2E runner requires fresh backend, mock-agent, agentctl, and web
+  artifacts before it starts.
+- Broad checks can expose unrelated pre-existing failures. Record the command,
+  causal evidence, and narrow follow-up instead of weakening the test.
+
+## Parallelism
+
+`sequential`
+
+## Inputs
+
+- All acceptance criteria and the complete ASCII preview in `plan.md`.
+- Current public HTML-preview guidance and E2E runner requirements.
+
+## Results
+
+- Added a desktop Chromium scenario for multi-route text, element, and region
+  capture; generated-text position evidence; candidate hinting; durable reopen;
+  direct and queued Send; transcript rendering; and screenshot attachment
+  delivery.
+- Added mobile Chrome coverage for the inline HTML preview Drawer, touch
+  capture, source return, touch target sizing, containment, and overflow, plus
+  a Docker-backed Browser scenario for a published local HTTP page.
+- Removed the obsolete Browser-local annotation E2E and documented task-owned
+  pending feedback, navigation, delivery, limits, raster behavior, and recovery
+  in `docs/public/developer-tools.md`.
+- Verified rebuilt host and Linux backend artifacts, the E2E web bundle, all
+  three focused Playwright scenarios, public docs, specs, CLI, 88 focused web
+  tests, the affected backend packages, and the full 2,095-file web suite with
+  18,041 passing tests and 4 intentional skips.
+- The full backend suite passes every package except the unchanged real-process
+  probe integration in the elevated runner, whose host PID namespace conflicts
+  with container `/proc/uptime`; that package passes 20 consecutive runs in the
+  normal namespace. Synthetic Git fixtures now set repository-local empty hook
+  paths and remain independent of machine-wide Git policy.
diff --git a/docs/public/developer-tools.md b/docs/public/developer-tools.md
index 33fc33a358..ba76d7c0bd 100644
--- a/docs/public/developer-tools.md
+++ b/docs/public/developer-tools.md
@@ -232,6 +232,16 @@ Relative and root-relative URLs resolve from the selected task repository or wor
 
 Closing the preview, file tab, focused viewer, or optional Browser panel removes that view but does not stop the shared static server. One bounded server is reused for the agentctl session and stops when that task runtime is torn down. If the page needs a build pipeline, HMR, backend routes, or project services, start a development server and open it in the **Browser** panel instead. If the task session stops, publish the file again or select **Retry** after the session becomes available. Preview URLs and in-editor preview state are not restored as durable file state.
 
+### Comment on a rendered preview
+
+Select **Annotate** in a Browser panel or rendered HTML-file preview. Choose **Select text**, **Select element**, or **Select screenshot region**, make the selection in the page, enter a comment, and select **Save feedback**. Element mode outlines and labels the candidate under the pointer, keyboard focus, or active touch before selection. Text feedback keeps the exact selected text together with its containing element, DOM range endpoints, rendered rectangles, scroll position, viewport size, and device pixel ratio. This position data lets the agent identify text that JavaScript generated or that the live page no longer contains.
+
+Screenshot mode rasterizes the selected part of the rendered document and shows the PNG before saving. A screenshot is limited to 16 megapixels and 10 MiB, and one pending collection can contain up to 10 screenshots. Browser rendering features that cannot be read or reproduced by the rasterizer, including some canvas, video, font, and cross-origin resources, can look different or cause capture to fail. A failed capture or upload keeps a retryable draft; discarding it removes its staged image.
+
+Saved feedback belongs to the task. It remains pending while you navigate between routes, close or reopen previews, switch task sessions, reload the browser, or restart Kandev. The active task composer shows the shared pending count. Review, edit, or delete items from **Annotate**. None of the captured content reaches an agent until you use the ordinary chat **Send** action.
+
+Send addresses the selected task session. An idle session receives the feedback directly; a busy session receives the same text, element metadata, and PNG attachments through its durable queue. Kandev removes only the exact saved versions accepted with that message. A validation, capacity, attachment, or version conflict leaves the feedback and composer draft available for correction and retry. The preview server and navigated page state remain ephemeral even though the saved feedback is durable.
+
 Open the context menu on any file or folder in the Files tree: right-click on desktop or long-press on touch to see **Open in \<editor\>**, which launches your default editor at that path instead of at the worktree root. When more than one editor is configured, **Open in other editor** lists the rest. When the tree is rooted above the worktrees (a multi-worktree task or any task that has had sources attached), Kandev resolves the clicked path back to its own worktree, so no picker is needed. The action is hidden for entries that belong to no worktree, such as an attached plain folder, because the editor launch is resolved against a worktree. It is also hidden while several files are selected, because it applies to a single path.
 
 **VS Code (Embedded)** runs code-server inside the active task environment and displays it in a workbench panel. Opening it starts code-server independently of the agent process. It launches with `--auth none` and binds `0.0.0.0` on a random port inside that runtime; network/firewall isolation is therefore important, especially for Local, Kubernetes, and SSH environments. If the binary is absent, agentctl attempts to download it into `~/.kandev/tools/code-server`; first use needs a supported execution platform and access to the [code-server release](https://github.com/coder/code-server/releases/tag/v4.130.0). Native Windows Local and Worktree sessions do not support this integration. Linux-backed Local Docker, Kubernetes, Sprites, and supported SSH sessions can offer it even when the Kandev app runs on Windows. The task-detail topbar follows the active session's executor capability, never the visitor's browser platform; other configured editors remain available. Use the panel error and task-environment logs when installation, startup, or proxying fails.
diff --git a/docs/specs/tasks/requirements/web-preview-feedback.md b/docs/specs/tasks/requirements/web-preview-feedback.md
new file mode 100644
index 0000000000..51b0eb1bad
--- /dev/null
+++ b/docs/specs/tasks/requirements/web-preview-feedback.md
@@ -0,0 +1,196 @@
+---
+status: active
+system: tasks
+created: 2026-09-15
+owners:
+  - kandev
+---
+
+# Web Preview Feedback Requirements
+
+## Overview
+
+Kandev shall let a user review an interactive page in either the Browser panel
+or an inline HTML-file preview, capture the relevant rendered content, attach a
+comment, and deliberately send the accumulated feedback to an Agent session.
+The pending feedback belongs to the task so navigation, panel closure, session
+selection, browser reloads, and backend restarts cannot silently discard it.
+
+The task system owns persistence and delivery because feedback is withheld
+until a task message is accepted. The UI system owns capture and responsive
+presentation. Existing session preview routing, trusted HTML execution, chat
+attachments, and direct or queued message admission remain adjacent contracts.
+
+## Terminology
+
+- **Preview feedback:** A saved, unsent user comment plus a text, element, or
+  screenshot capture from a rendered page.
+- **Preview source:** The Browser-panel page or published HTML-file preview
+  where a capture was made.
+- **Page identity:** Stable source metadata plus the navigated route at capture
+  time. It identifies context without making the ephemeral proxy URL durable.
+- **Capture draft:** A selection and comment that have not yet been accepted
+  into the pending task collection.
+- **Pending collection:** The authoritative set of preview feedback that has
+  been saved but not accepted as a direct or queued message.
+- **Accepted delivery:** A direct user message durably persisted for dispatch,
+  or a queued prompt durably admitted for the selected session.
+
+## Requirements
+
+### REQ-TASKS-WEB-PREVIEW-FEEDBACK-001: Preserve one task-owned pending collection
+
+**Intent:** Keep unsent page-review feedback available until the user either
+deletes it or deliberately sends it.
+
+**User story:** As a user reviewing a multi-page interface, I want my saved
+feedback to survive navigation and workspace changes, so that I can finish the
+review before contacting the agent.
+
+#### Acceptance criteria
+
+- **AC-TASKS-WEB-PREVIEW-FEEDBACK-001.1:** After an authorized user saves
+  preview feedback, Kandev shall show the same pending item in every Browser,
+  HTML-preview, and task-composer view for that task.
+- **AC-TASKS-WEB-PREVIEW-FEEDBACK-001.2:** Navigating within or between preview
+  pages, closing or reopening a preview, switching or deleting sessions, and
+  changing the task's primary session shall not hide, move, duplicate, or
+  delete pending feedback.
+- **AC-TASKS-WEB-PREVIEW-FEEDBACK-001.3:** After reconnect, browser reload,
+  backend restart, or opening the task from another authorized browser, Kandev
+  shall restore the pending collection and its screenshot images from backend
+  state.
+- **AC-TASKS-WEB-PREVIEW-FEEDBACK-001.4:** A user shall be able to inspect,
+  edit the comment on, and delete any pending item without an available Agent
+  session. Deleting screenshot feedback shall also delete its unsent stored
+  image.
+- **AC-TASKS-WEB-PREVIEW-FEEDBACK-001.5:** Concurrent clients shall converge on
+  an authoritative ordered snapshot. A stale edit, delete, or send shall fail
+  without overwriting newer feedback and shall make the current collection
+  available for recovery.
+
+### REQ-TASKS-WEB-PREVIEW-FEEDBACK-002: Capture rendered page context
+
+**Intent:** Give the agent the exact visible context behind a review comment
+without forcing the user to translate the page into prose.
+
+**User story:** As a user reviewing an interface, I want to point at text,
+elements, or a page region, so that my feedback identifies what should change.
+
+#### Acceptance criteria
+
+- **AC-TASKS-WEB-PREVIEW-FEEDBACK-002.1:** The Browser panel and an inline
+  `.html` or `.htm` preview shall expose the same three capture modes whenever
+  their content is available through Kandev's session preview proxy: selected
+  text, DOM element, and screenshot region.
+- **AC-TASKS-WEB-PREVIEW-FEEDBACK-002.2:** A text capture shall retain and
+  deliver the exact selected text, its rendered containing-element snapshot,
+  DOM range endpoints, stable selectors when derivable, selection rectangles,
+  document scroll and viewport dimensions, and page identity. This captured
+  runtime context shall remain available when the text was generated by script
+  or can no longer be found on the live page. An element capture shall retain a
+  bounded HTML snippet, semantic element metadata, a stable selector when one
+  can be derived, its rendered rectangle and viewport context, and page
+  identity.
+- **AC-TASKS-WEB-PREVIEW-FEEDBACK-002.3:** A screenshot-region capture shall
+  create a real PNG image of the user-selected rendered region, show that image
+  for review before saving, and retain its page identity and capture bounds.
+  Kandev shall report capture failure instead of saving a feedback item without
+  its image.
+- **AC-TASKS-WEB-PREVIEW-FEEDBACK-002.4:** Every saved capture shall require a
+  non-blank user comment. Cancelling a capture or a failed save shall not add a
+  pending item; a failed save shall preserve the capture draft for retry.
+- **AC-TASKS-WEB-PREVIEW-FEEDBACK-002.5:** After navigation, feedback from prior
+  pages shall remain in the pending collection. Returning to a matching page
+  shall restore resolvable text or element markers without changing or
+  deleting captures whose DOM anchors no longer resolve.
+- **AC-TASKS-WEB-PREVIEW-FEEDBACK-002.6:** Captured page content shall be shown
+  and delivered as quoted user context. Kandev shall not execute captured HTML
+  in its own chrome or treat page text as system instructions.
+- **AC-TASKS-WEB-PREVIEW-FEEDBACK-002.7:** While element capture is active,
+  Kandev shall visually outline the current candidate before selection and show
+  a concise element label such as tag, ID, or class. Pointer hover, keyboard
+  focus, and an active touch press shall update the same candidate hint. The
+  hint shall disappear on cancel, completion, navigation, or mode exit.
+
+### REQ-TASKS-WEB-PREVIEW-FEEDBACK-003: Deliver feedback through ordinary chat Send
+
+**Intent:** Keep review comments private until one familiar, explicit action
+chooses the receiving Agent session.
+
+**User story:** As a user, I want pending preview feedback to join my next chat
+message only when I press Send, so that I can review several pages before the
+agent sees anything.
+
+#### Acceptance criteria
+
+- **AC-TASKS-WEB-PREVIEW-FEEDBACK-003.1:** Every composer for the task shall
+  show one pending-context item with the current preview-feedback count. The
+  item shall open the shared collection and shall not expose feedback to the
+  Agent merely because it is visible in the composer.
+- **AC-TASKS-WEB-PREVIEW-FEEDBACK-003.2:** Ordinary chat Send shall snapshot the
+  visible pending item identifiers and versions and address them to the session
+  whose composer the user submitted. Typed text and other supported context or
+  attachments may accompany the feedback; typed text may be empty when at
+  least one preview-feedback item is selected.
+- **AC-TASKS-WEB-PREVIEW-FEEDBACK-003.3:** A promptable session shall receive a
+  direct message. A busy session shall receive the same content through its
+  existing durable queue path. Preview feedback shall not introduce an
+  independent Run, broadcast, or auto-send action.
+- **AC-TASKS-WEB-PREVIEW-FEEDBACK-003.4:** Text and element feedback shall be
+  expanded into visible, bounded Markdown. Screenshot feedback shall include
+  its comment and page context in that Markdown and its PNG as an actual image
+  attachment available to the receiving agent and transcript.
+- **AC-TASKS-WEB-PREVIEW-FEEDBACK-003.5:** Accepted direct or queued delivery
+  shall consume exactly the submitted feedback versions task-wide in the same
+  durable operation that accepts the prompt and claims screenshot attachments.
+  A validation, capacity, authorization, routing, attachment, or version
+  failure shall preserve every submitted item and the composer draft for retry.
+- **AC-TASKS-WEB-PREVIEW-FEEDBACK-003.6:** A lost response or repeated submit
+  with the same caller identity shall reconcile to the original accepted
+  message or queue entry without delivering the feedback twice. Feedback added
+  or edited after the user's Send snapshot shall remain pending.
+
+### REQ-TASKS-WEB-PREVIEW-FEEDBACK-004: Provide responsive and accessible review controls
+
+**Intent:** Make page review usable with keyboard, mouse, and touch without
+turning the phone preview into a compressed desktop toolbar.
+
+**User story:** As a desktop or phone user, I want capture and review controls
+that fit my input method and viewport, so that I can complete the same feedback
+workflow on either device.
+
+#### Acceptance criteria
+
+- **AC-TASKS-WEB-PREVIEW-FEEDBACK-004.1:** Desktop shall expose capture modes
+  and the pending count in Kandev-owned preview chrome. Keyboard users shall be
+  able to enter and exit each mode, save or cancel a draft, inspect the pending
+  list, and return focus to the invoking control.
+- **AC-TASKS-WEB-PREVIEW-FEEDBACK-004.2:** Phone and coarse-pointer surfaces
+  shall use a bottom Drawer for mode selection, draft editing, and the pending
+  list. Actions shall have a minimum 44-pixel touch dimension, respect safe
+  areas, keep one scroll owner, and avoid document-level horizontal overflow.
+- **AC-TASKS-WEB-PREVIEW-FEEDBACK-004.3:** Active touch-region capture may
+  temporarily own drag gestures inside the preview, but cancelling or
+  completing capture shall restore ordinary page scrolling and navigation.
+- **AC-TASKS-WEB-PREVIEW-FEEDBACK-004.4:** Selection, saving, upload, conflict,
+  and delivery failures shall have localized visible status text. Capture
+  markers, modes, and counts shall not rely on color or hover alone.
+- **AC-TASKS-WEB-PREVIEW-FEEDBACK-004.5:** Browser-panel pages served by local
+  development servers, including ports published from Docker-backed task
+  sessions, and native HTML-file previews shall retain their current navigation,
+  script execution, and source-return behavior while feedback controls are
+  inactive.
+
+## Out of scope
+
+- Mapping rendered DOM nodes or screenshot pixels to source-file line numbers.
+- Annotating arbitrary internet pages or `file://` URLs outside Kandev's
+  session-authorized preview proxy.
+- Recording video, full-page stitched captures, console logs, network traces,
+  accessibility-tree snapshots, or browser developer-tools editing.
+- Sending feedback to multiple sessions, adding a per-item Run action, or
+  exposing unsent feedback as ambient Agent context.
+- Pixel-identical capture of cross-origin media that the browser cannot read.
+- Preserving ephemeral preview URLs or HTML preview execution state after the
+  owning task runtime stops.
diff --git a/docs/specs/tasks/system-design/web-preview-feedback.md b/docs/specs/tasks/system-design/web-preview-feedback.md
new file mode 100644
index 0000000000..a809baea34
--- /dev/null
+++ b/docs/specs/tasks/system-design/web-preview-feedback.md
@@ -0,0 +1,593 @@
+---
+status: current
+system: tasks
+requirements:
+  - REQ-TASKS-WEB-PREVIEW-FEEDBACK-001
+  - REQ-TASKS-WEB-PREVIEW-FEEDBACK-002
+  - REQ-TASKS-WEB-PREVIEW-FEEDBACK-003
+  - REQ-TASKS-WEB-PREVIEW-FEEDBACK-004
+---
+
+# Web Preview Feedback System Design
+
+## Purpose and boundaries
+
+The task system owns unsent web-preview feedback because its lifecycle ends at
+task-message admission, not when a preview panel unmounts or a session changes.
+The backend is authoritative for the pending collection, screenshot ownership,
+and exact consumption. Session state selects a destination only when the user
+submits a composer.
+
+The UI system owns pointer, touch, and keyboard capture inside existing preview
+iframes and projects the task collection into responsive controls. The session
+port proxy remains responsible for preview reachability and inspector-script
+injection. Native HTML preview keeps its trusted-workspace execution contract.
+The attachment service remains responsible for image bytes, and the existing
+direct-message and durable-queue paths remain responsible for delivery.
+
+This design extends the task-owned, exact-reference delivery model used by
+[task plan comments](plan-comments.md). It creates a separate collection because
+preview feedback is independent of a current plan and can own image attachments.
+It does not generalize the session-local diff, file, pull-request, walkthrough,
+or agent-message comment stores.
+
+## Requirement mapping
+
+| Requirement | Design sections |
+| --- | --- |
+| `REQ-TASKS-WEB-PREVIEW-FEEDBACK-001` | [Ownership decision](#ownership-decision), [Persistence model](#persistence-model), [Synchronization](#synchronization), [Lifecycle](#lifecycle) |
+| `REQ-TASKS-WEB-PREVIEW-FEEDBACK-002` | [Capture bridge](#capture-bridge), [Capture payloads](#capture-payloads), [Screenshot regions](#screenshot-regions), [Marker projection](#marker-projection) |
+| `REQ-TASKS-WEB-PREVIEW-FEEDBACK-003` | [Composer projection](#composer-projection), [Canonical prompt](#canonical-prompt), [Atomic acceptance](#atomic-acceptance) |
+| `REQ-TASKS-WEB-PREVIEW-FEEDBACK-004` | [Responsive interaction](#responsive-interaction), [Accessibility](#accessibility), [Failure and recovery](#failure-and-recovery) |
+
+## Ownership decision
+
+One pending preview-feedback collection belongs to a task. Pending rows do not
+carry a delivery destination. They may record the session that supplied the
+preview solely as source provenance; changing or deleting that session does not
+change row ownership or remove the capture.
+
+Pending feedback is not model context. Browser navigation, opening a composer,
+loading an iframe, and restoring markers are read-only projections. The
+ordinary composer **Send** action is the only delivery entry point added by
+this feature and addresses the selected composer session. A promptable session
+uses direct-message admission; a busy session uses the existing queue action.
+
+The ownership and atomic-delivery choice is recorded in
+[Persist Web Preview Feedback with the Task](../../../decisions/2026-09-15-task-owned-web-preview-feedback.md).
+
+## Components and responsibilities
+
+- `PreviewFeedbackService` and the task repository own authorization, CRUD,
+  collection revisions, limits, screenshot claims, lifecycle cleanup, and
+  ordered snapshots.
+- Task WebSocket handlers expose list/create/update/delete/clear mutations and
+  publish complete replacement snapshots after committed changes.
+- Direct-message and message-queue admission resolve exact feedback references,
+  build the canonical visible prompt, transfer screenshot claims, persist the
+  target message or queue entry, and consume the referenced rows atomically.
+- A task-level frontend slice owns one authoritative feedback snapshot per
+  task. It is independent of `CommentsState.bySession` and browser storage.
+- `usePreviewCapture` owns capture-mode state for one iframe. It accepts events
+  only from that iframe, converts a completed selection into a local draft, and
+  projects saved markers for the current page.
+- `PreviewFeedbackControls` and `PreviewFeedbackPanel` provide shared desktop
+  and phone behavior for `BrowserPanel` and `HtmlPreviewContent`.
+- The chat composer reads the task snapshot and submits exact references with
+  the same direct-or-queue routing, retry identity, and settlement rules as its
+  existing content.
+- The existing attachment service owns staged PNG bytes and their transition
+  from unsent task feedback to a message or queue entry.
+
+## Persistence model
+
+### `task_preview_feedback_collections`
+
+```text
+task_id       text       primary key; owning task
+revision      integer    monotonic collection revision, starts at zero
+created_at    timestamp  UTC
+updated_at    timestamp  UTC
+```
+
+The row is created lazily with the first list or mutation. Task deletion
+cascades it. Every committed create, update, delete, clear, or delivery
+consumption increments `revision` in the same transaction.
+
+### `task_preview_feedback`
+
+```text
+id                        text       primary key; caller-generated UUID
+task_id                   text       owning task
+kind                      text       text | element | screenshot
+comment                   text       required user feedback
+source_kind               text       browser | html_file
+source_session_id         text       nullable capture provenance
+source_label              text       bounded display name
+source_path               text       nullable workspace-relative HTML path
+page_route                text       path and query at capture time
+page_title                text       bounded document title
+selected_text             text       nullable text selection
+text_anchor_json          text       nullable DOM range and visual position snapshot
+element_snapshot_json     text       nullable bounded semantic/HTML snapshot
+capture_rect_json         text       nullable CSS-pixel rect and viewport data
+screenshot_attachment_id  text       nullable unique attachment reference
+version                   integer    optimistic version, starts at one
+created_at                timestamp  UTC
+updated_at                timestamp  UTC
+```
+
+`task_id` has `ON DELETE CASCADE`. `screenshot_attachment_id` is present only
+for screenshot rows and references a task-owned claimed attachment. It is
+unique, so one stored image cannot back two feedback items. Text and element
+rows must not reference an attachment. Database checks enforce the closed kind
+set and kind-specific nullable fields.
+
+`source_session_id` is descriptive and has no cascading foreign key. Source
+provenance therefore remains readable after a task session is deleted. A
+Browser source label identifies the captured local service without persisting
+credentials or a port-proxy capability URL. An HTML-file source also records
+its repository-relative path. `page_route` contains the decoded pathname and
+query, never the URL fragment, user information, cookies, or capability token.
+
+Rows sort by `created_at`, then `id`. A complete snapshot has this form:
+
+```json
+{
+  "task_id": "task-id",
+  "revision": 8,
+  "items": []
+}
+```
+
+### Limits
+
+A shared backend `previewfeedback` package defines and validates limits for
+both database implementations and both delivery paths:
+
+- 100 pending items per task;
+- 64 KiB per comment;
+- 256 KiB per selected-text or HTML-snippet field;
+- 1 MiB of aggregate non-image payload in the pending collection;
+- at most 10 pending screenshot images;
+- PNG only, at most 10 MiB and 16 megapixels per screenshot;
+- 1 MiB for the final formatted text prompt;
+- the existing message-wide maximum of 10 attachments and 100 MiB after
+  screenshots and ordinary composer attachments are combined.
+
+The client prevents obviously invalid drafts, but the backend repeats every
+bound. A collection mutation or delivery that crosses a bound rolls back
+without changing its revision or attachment ownership.
+
+## Capture bridge
+
+The existing injected inspector becomes a selection bridge rather than the
+owner of comments. `BrowserPanel` continues to proxy eligible executor-local
+URLs before enabling capture. `HtmlPreviewContent` recognizes its already
+proxied, inspector-capable URL directly, so it does not rewrite or remount that
+URL merely to enable the controls.
+
+The parent sends one versioned command envelope to its iframe:
+
+```ts
+type PreviewCaptureCommand =
+  | { type: "kandev-preview-capture"; version: 1; command: "start"; mode: CaptureKind }
+  | { type: "kandev-preview-capture"; version: 1; command: "cancel" }
+  | { type: "kandev-preview-capture"; version: 1; command: "project"; anchors: MarkerAnchor[] };
+```
+
+The bridge emits only bounded, structured capture metadata:
+
+```ts
+type PreviewCaptureEvent = {
+  type: "kandev-preview-capture-result";
+  version: 1;
+  kind: "text" | "element" | "screenshot";
+  page: { route: string; title: string };
+  rect?: CaptureRect;
+  selectedText?: string;
+  textAnchor?: TextAnchorSnapshot;
+  element?: ElementSnapshot;
+};
+```
+
+The parent validates `event.source === iframe.contentWindow`, the protocol
+version, closed discriminators, field types, and limits before creating a
+draft. It ignores unknown or oversized events. The inspected page never sends
+feedback directly to the backend and never supplies trusted task, workspace,
+attachment, or session ownership identifiers.
+
+The bridge owns hover outlines, region drag overlays, touch gesture capture,
+keyboard cancellation, selection extraction, route discovery through
+`window.__kandevProxyPrefix`, and best-effort marker positioning. The Kandev
+parent owns all localized controls, comment editing, upload state, mutation
+errors, and draft settlement.
+
+## Capture payloads
+
+### Text
+
+Text mode reads the browser `Selection` after a completed pointer, touch, or
+keyboard selection. It normalizes whitespace for display while retaining the
+bounded exact string and a frozen `TextAnchorSnapshot`. The anchor contains the
+nearest rendered containing-element snapshot, start and end element selectors,
+DOM child-node index paths and text offsets, every bounded selection client
+rectangle, the union rectangle in document coordinates, scroll position,
+viewport dimensions, device-pixel ratio, and page identity. Node paths and
+offsets describe the rendered DOM at capture time; they are evidence, not a
+promise that a later page can resolve the same nodes. A collapsed selection does
+not create a draft.
+
+The persisted anchor and containing-element HTML are independent of the live
+page. Script-generated or transient text therefore remains understandable to
+the agent even if source search fails or later navigation produces different
+DOM. Marker restoration uses selectors and node paths as best-effort hints, but
+failure to restore never removes the captured runtime snapshot.
+
+### Element
+
+Element mode resolves the deepest eligible element beneath the pointer or
+keyboard focus. Its snapshot contains tag, ID, classes, role, accessible label,
+visible text, stable selector when derivable, and a bounded `outerHTML` string.
+Kandev displays `outerHTML` only as escaped code. It never inserts the string
+with `innerHTML`.
+
+Before selection, the bridge positions a non-interactive outline and translucent
+fill over the current candidate. A small overlay label shows the shortest useful
+identity in tag, `#id`, and `.class` order, while the full selector remains in
+the eventual capture details. Mouse or pen hover, keyboard focus movement, and
+touch press update the same candidate state. On touch, the hint appears on
+press before release commits the capture. Candidate chrome is marked as
+inspector-owned, excluded from hit testing, and removed on completion, cancel,
+mode change, navigation, or iframe teardown.
+
+### Screenshot regions
+
+Region mode records a CSS-pixel rectangle inside the current iframe document.
+The parent uses the proxied iframe document and the maintained `html2canvas`
+library to rasterize that rectangle to PNG. The parent downsizes output that
+would exceed 16 megapixels, validates the encoded result, and shows a thumbnail
+and dimensions before the user can save it.
+
+This is a DOM rendering of the selected region. Unsupported CSS and cross-origin
+images or canvases may not be reproducible; the library documents those
+limits in its [official documentation](https://html2canvas.hertzen.com/documentation/)
+and [FAQ](https://html2canvas.hertzen.com/faq/). The confirmation thumbnail is
+therefore part of the capture contract. A renderer exception, empty canvas,
+tainted canvas, encoding failure, or limit violation produces a visible error
+and no persisted feedback.
+
+On save, the parent uploads the PNG as a staged prompt attachment, then creates
+the feedback row with the returned attachment ID. The create transaction
+validates owner, workspace, task, MIME signature, size, kind, and uniqueness,
+and changes the attachment to a task-owned feedback claim. If the create fails,
+the staged upload remains available for the unchanged draft retry and expires
+through the existing staged-attachment lifecycle.
+
+The Screen Capture API is not the primary path because it requires a separate
+user permission prompt and lets the browser mediate the captured surface rather
+than guaranteeing the active preview region. Its constraints remain documented
+by [MDN](https://developer.mozilla.org/en-US/docs/Web/API/MediaDevices/getDisplayMedia)
+and the [W3C specification](https://www.w3.org/TR/screen-capture/).
+
+## Marker projection
+
+Saved text and element items are immutable captures even when the live page
+changes. On iframe readiness and route changes, the parent sends only current
+source-and-route anchors to the bridge. The bridge first resolves a saved
+selector and then uses the saved rectangle as a visual fallback for the same
+viewport geometry. A marker that cannot be placed remains available in the
+pending list and composer.
+
+Markers are presentation state. Projecting, failing to project, navigating, or
+unmounting an iframe never mutates the backend collection. Selecting a marker
+opens the corresponding task-owned item in Kandev chrome.
+
+## Synchronization
+
+The task WebSocket family adds authorized actions:
+
+- `task.preview_feedback.list`
+- `task.preview_feedback.create`
+- `task.preview_feedback.update`
+- `task.preview_feedback.delete`
+- `task.preview_feedback.clear`
+
+Every request carries `task_id`. Create carries a caller-generated item ID,
+capture payload, source provenance, and optional staged screenshot attachment
+ID. Update carries `id`, `expected_version`, and the new comment; anchors and
+capture content are immutable. Delete carries `id` and `expected_version`.
+Clear carries the collection revision it was rendered from so it cannot erase
+concurrently added items.
+
+Repeating a create with the same ID and identical fingerprint returns success;
+reusing the ID with different data returns a conflict. Successful mutations
+return the complete snapshot. The task event broadcaster publishes
+`task.preview_feedback.changed` with the same snapshot. Clients replace local
+state only with an equal or newer revision and refetch after reconnect or a
+detected gap.
+
+The gateway authorizes every action through task access. An accessible session
+or preview URL does not grant access to another task's feedback.
+
+## Responsive interaction
+
+### Desktop
+
+Browser and HTML-preview toolbars expose one **Annotate** control with the
+pending count. Its menu offers Text, Element, and Screenshot region modes and
+opens the pending panel. Choosing a mode closes the menu and puts the iframe in
+that single active mode. A completed capture opens an anchored Kandev Popover
+with capture summary, screenshot thumbnail when applicable, required comment,
+Cancel, and Add.
+
+The pending panel lists every page group in stable order and supports inspect,
+comment edit, and delete. **Clear all** uses a destructive confirmation and the
+rendered collection revision. There is no Send or Run control in the preview;
+the normal task composer owns delivery.
+
+### Phone and coarse pointers
+
+The focused preview header exposes one 44-pixel **Annotate** action with a count
+badge. It opens a bottom Drawer with mode choices and the pending list. Choosing
+a mode closes the Drawer so the preview retains the available viewport. A
+completed capture reopens the Drawer directly on the comment form. The Drawer
+has one internal vertical scroll owner, safe-area padding, focus return, and no
+horizontal page overflow.
+
+While text or element capture is active, ordinary page interaction remains
+available until a selection completes. Screenshot-region mode alone owns drag
+and touch-move gestures inside the iframe; its visible mode bar offers Cancel.
+Completing or cancelling the mode removes the gesture listeners and restores
+ordinary page scrolling.
+
+The shipped mobile HTML focused viewer supplies the page composition and the
+existing task Drawer patterns supply containment and focus behavior. Shared
+capture and mutation hooks own behavior; responsive wrappers own arrangement.
+
+## Accessibility
+
+- Capture-mode controls expose pressed or selected state and announce mode
+  changes through visible status plus a polite live region.
+- The element candidate label mirrors the visual outline in accessible status
+  text, so keyboard and assistive-technology users receive the same preview of
+  what activation will capture.
+- Escape cancels an active mode or draft. Keyboard element mode can capture the
+  focused element, and text mode accepts normal keyboard selection.
+- Focus returns to the invoking control after cancel, save, or responsive
+  surface closure. A pending item links its marker and list row with stable IDs.
+- Screenshot thumbnails include localized alternative text based on source and
+  comment. HTML snippets use code semantics and remain selectable as text.
+- Counts, active modes, upload progress, and failures use text or accessible
+  names in addition to icon, color, or outline changes.
+
+## Composer projection
+
+Every composer for a task derives one context item from the task snapshot. It
+shows the current count and opens the preview-feedback panel. It has no local
+remove control because removing a task-owned item from one composer would
+misrepresent the shared pending collection.
+
+At submit time, the composer freezes the visible IDs and versions:
+
+```json
+{
+  "preview_feedback_refs": [
+    { "id": "feedback-id", "version": 2 }
+  ]
+}
+```
+
+It passes the references alongside unexpanded typed content, plan-comment
+references, entity references, and ordinary staged attachment IDs. It does not
+prepend client-formatted feedback. An empty typed body is valid when either
+preview-feedback or plan-comment references are present.
+
+The submission identity includes destination, message content, feedback
+versions, plan-comment versions, and attachment identities. An unchanged retry
+reuses that identity; modifying any of those inputs creates a new identity.
+
+## Canonical prompt
+
+The backend loads referenced rows for the submitted task, preserves snapshot
+order, and appends one visible `### Web Preview Feedback` section. Every item
+contains its kind, source label, page route, user comment, and captured context.
+Text is quoted and followed by its containing element, DOM range endpoints,
+document-coordinate rectangles, scroll position, and viewport size. Element
+HTML is in a bounded code fence and includes its rendered position. A screenshot
+names its attached PNG and includes dimensions. A safe serializer chooses fence
+lengths and escapes labels so captured page content cannot break the enclosing
+shape.
+
+Captured strings remain user-authored prompt content. They are never placed in
+`<kandev-system>` markup or assigned higher instruction priority. The persisted
+expanded prompt is the value shown in queue editing, the transcript, ACP, and
+passthrough delivery.
+
+## Atomic acceptance
+
+Preview-bearing admission joins the task-scoped lease and final repository
+transaction already used for plan comments and staged attachments. The shared
+admission envelope supports plan-comment refs, preview-feedback refs, and
+ordinary attachment IDs together rather than nesting independent transactions.
+
+The final transaction performs these steps:
+
+1. Lock or guard the active task, then the selected session, using the existing
+   task-before-session order.
+2. Load every preview-feedback row by task and require unique IDs with exact
+   submitted versions. Load any plan comments through their existing resolver.
+3. Revalidate the session route, queue capacity, feedback limits, final prompt
+   limit, and the combined attachment count and byte limit.
+4. Format the canonical visible prompt from persisted rows.
+5. Transfer each screenshot from its task-feedback claim to the accepted
+   message or queue entry, claim ordinary staged attachments, persist the
+   message or queue receipt, conditionally delete the exact feedback and plan
+   comment rows, and increment their collection revisions.
+6. Commit, then publish the ordinary delivery event and authoritative changed
+   snapshots.
+
+If any conditional delete or attachment transfer loses a race, the entire
+operation rolls back and returns a stable `preview_feedback_changed` or
+attachment conflict. New or edited rows outside the submitted versions remain
+pending. No compensating delete or restore is used as an atomicity mechanism.
+
+The queue row and direct-message receipt retain reference fingerprints for
+idempotent replay and use the existing pre-dispatch reservation and at-most-once
+external-I/O boundary. Accepted queue cancellation or editing never resurrects
+the consumed feedback because the queued prompt and attachments are then the
+durable user message.
+
+## Recovery implementation
+
+### Replay before pending resolution
+
+The queue boundary separates original request identity from server-expanded
+prompt content and screenshot descriptors. `wsQueueMessage` authorizes task and
+session access before replay lookup. An exact accepted request does not depend
+on rows that acceptance already consumed.
+
+The lookup precedes pending-feedback resolution and repeats inside final
+admission. The transaction records the accepted response and original identity
+in the existing `queue_admission_receipts` store. That record outlives the
+visible queue entry. Queue insertion, attachment transfer, feedback consumption,
+and receipt persistence remain one transaction.
+
+`service_plan_comment.go` and `repository_preview_feedback.go` retain the
+existing task-before-session lock order and at-most-once delivery boundary.
+They reuse receipt primitives from `repository_admission.go`, not a nested
+ordinary-admission transaction. Altered requests under the same caller ID fail
+closed. A replay never resolves replacement feedback or claims another image.
+
+Legacy preview entries without an original-request identity retain fail-closed
+matching. They must not produce a new delivery from ambiguous metadata.
+Ordinary and plan-only receipt formats remain compatible.
+
+### Logical capture draft
+
+`use-preview-capture.ts` owns a logical draft identity and its comment.
+Screenshot upload enriches that draft with an attachment ID without changing
+its identity. `DraftEditor` uses controlled comment state rather than an effect
+that resets input on object replacement.
+
+Successful create or explicit discard settles the matching draft. Failed
+creation retains the PNG, comment, and upload ID. Terminal callbacks compare
+draft identity or generation before cleanup. A late callback cannot settle a
+replacement draft. Closing a form preserves its mounted controller state.
+
+### Collection access without capture
+
+The saved collection surface accepts task identity and the existing
+`usePreviewFeedback` operations. It does not require an iframe, capture mode,
+source session, or upload controller. Preview chrome and composer entry points
+reuse that surface without duplicating its mutation logic.
+
+`ChatInputArea` owns the composer-side surface outside `ChatInputContainer`
+branches that hide or replace input after a launch error or session stop.
+An independent task-scoped trigger remains available when the normal context
+chip is absent. A null selected session does not block collection access.
+Existing archived-task restrictions still apply.
+
+Desktop uses a controlled Popover. Coarse pointers use the existing task
+Drawer pattern with a fixed header, one scroll body, and safe-area clearance.
+Opening the surface never starts an agent or sends feedback. Edit success
+closes the editor. Edit failure retains its input and shows the current
+snapshot. Clear retains its revision check and confirmation.
+
+## Lifecycle
+
+- Task deletion cascades pending rows and collection state and schedules all
+  still-owned screenshot objects for deletion through attachment cleanup.
+- Deleting one screenshot row or clearing the collection deletes its task-owned
+  image after the database transaction commits. A failed object deletion stays
+  discoverable by the existing attachment cleanup path.
+- Session deletion, task reassignment, primary changes, panel closure, and
+  executor restart do not mutate pending feedback.
+- A stopped runtime can make source pages unavailable, but the stored comment,
+  text, element snapshot, and screenshot remain reviewable and sendable.
+- Accepted delivery removes the pending rows. The expanded prompt, message or
+  queue metadata, and claimed message attachments become the durable record.
+- Staged screenshots that never reach feedback creation expire through the
+  existing 24-hour staged-attachment sweep.
+
+## Failure and recovery
+
+- An iframe that is not on an inspector-capable session proxy shows no capture
+  control and does not accept bridge events. Existing browsing remains usable.
+- A failed selection keeps the current mode active with localized guidance. A
+  screenshot rasterization or upload failure keeps the local draft and permits
+  retry or cancel.
+- A failed create or comment update keeps the form, capture, and typed comment
+  open. A failed delete keeps the row visible. Controls that would duplicate a
+  pending mutation are disabled until settlement.
+- Reconnect obtains a complete collection snapshot. Stale events cannot replace
+  a newer revision.
+- Direct or queue rejection preserves feedback and composer state. A changed
+  snapshot refreshes the shared collection and requires the user to submit the
+  reviewed current version rather than silently omitting stale items.
+- If source navigation or DOM changes invalidate an anchor, the immutable
+  capture stays in the pending list with an unavailable-marker state.
+
+## Security
+
+Previewed HTML already executes as trusted workspace code under
+[ADR-2026-09-05](../../../decisions/2026-09-05-trusted-browser-html-preview.md).
+This feature does not widen that execution claim. It adds these boundaries:
+
+- Parent windows accept bridge events only from the mounted iframe window and
+  validate a versioned closed schema and byte limits.
+- The page cannot provide task ownership or attachment claims. The backend
+  derives authorization from the authenticated request and verifies every
+  referenced row and attachment.
+- Page routes omit credentials, fragments, cookies, and capability tokens.
+  Logs omit comments, selected text, HTML snippets, and screenshot bytes.
+- Captured HTML renders only as escaped code. Captured page content and comments
+  are user prompt data and cannot create system messages.
+- Screenshot upload verifies the PNG signature, MIME, size, pixel bounds, owner,
+  workspace, and task before claim. Content is served through the existing
+  authorized attachment endpoint.
+- Cross-task IDs, duplicated references, stale versions, and attachment reuse
+  fail the entire mutation or delivery.
+
+## Observability
+
+Structured logs identify task ID, feedback ID, kind, source kind, mutation,
+delivery mode, outcome, and stable error code. They never include captured or
+comment content. Existing attachment-cleanup and message/queue diagnostics cover
+image lifecycle and delivery receipts.
+
+Initial correctness is exposed through snapshots, conflicts, and deterministic
+repository/E2E coverage. No production metric is added until operating data
+shows a need for rates such as capture failure or stale-send conflict.
+
+## Verification
+
+- Repository tests cover SQLite and PostgreSQL schema replay, task cascades,
+  stable order, revision allocation, optimistic versions, idempotent create,
+  screenshot claim transfer and cleanup, limits, and task authorization.
+- Direct-message and queue tests cover canonical server formatting, mixed plan
+  and preview feedback, empty typed content, exact-version consumption,
+  attachment rollback, queue capacity, idempotent replay, and concurrent sends.
+- Frontend tests cover bridge origin/schema validation, all capture payloads,
+  screenshot crop and bounds, task snapshot reconciliation, Browser and native
+  HTML eligibility, draft preservation, composer references, and localized
+  responsive controls.
+- Desktop Chromium E2E covers a multi-route local development page, all three
+  captures, preserved prior-page feedback, explicit direct and queued Send, and
+  real screenshot attachment delivery.
+- Mobile Chrome E2E covers the HTML-file preview Drawer, touch region capture,
+  44-pixel controls, one scroll owner, source return, and no horizontal overflow.
+- Container E2E covers a port published by a Docker task session through the
+  same Browser-panel annotation flow.
+
+## Related decisions
+
+- [Persist Web Preview Feedback with the Task](../../../decisions/2026-09-15-task-owned-web-preview-feedback.md)
+- [Persist Pending Plan Comments with the Task Plan](../../../decisions/2026-09-02-task-owned-plan-comments.md)
+- [Treat HTML Preview as Trusted Workspace Code](../../../decisions/2026-09-05-trusted-browser-html-preview.md)
+- [Separate Message Queue Provenance, Cancellation, and Capacity](../../../decisions/2026-08-03-separate-message-queue-provenance-cancellation-and-capacity.md)
+
+## Implementation plans
+
+- [Interactive web preview feedback](../../../plans/web-preview-feedback/plan.md)
+- [PR review fixes](../../../plans/web-preview-feedback-review-fixes/plan.md)
diff --git a/docs/specs/ui/requirements/native-html-preview.md b/docs/specs/ui/requirements/native-html-preview.md
index ef60851808..dea6493c8c 100644
--- a/docs/specs/ui/requirements/native-html-preview.md
+++ b/docs/specs/ui/requirements/native-html-preview.md
@@ -98,6 +98,7 @@ development-server command is not necessary.
 - Framework build pipelines, hot-module replacement, package installation, or
   replacing an application's configured development-server command.
 - Rendering HTML reconstructed from a Review diff.
-- Mapping rendered elements to source lines, inspector annotations, or console
-  forwarding beyond existing Browser-panel behavior.
+- Mapping rendered elements to source lines or forwarding console output.
+  Task-owned text, element, and screenshot review feedback is specified by
+  [Web Preview Feedback Requirements](../../tasks/requirements/web-preview-feedback.md).
 - Publishing the preview server as a production website or a durable URL.
diff --git a/docs/specs/ui/system-design/native-html-preview.md b/docs/specs/ui/system-design/native-html-preview.md
index 8863e6e8d4..9734027e4c 100644
--- a/docs/specs/ui/system-design/native-html-preview.md
+++ b/docs/specs/ui/system-design/native-html-preview.md
@@ -20,6 +20,9 @@ The feature does not create a virtual browser, transform user scripts, or
 introduce a second executor-routing protocol. It also does not make a security
 claim for arbitrary workspace HTML. The user-selected trust model is recorded
 in [ADR-2026-09-05-trusted-browser-html-preview](../../../decisions/2026-09-05-trusted-browser-html-preview.md).
+Task-owned text, element, and screenshot review is an adjacent delivery
+contract specified by the
+[Web Preview Feedback design](../../tasks/system-design/web-preview-feedback.md).
 
 ## Requirement mapping
 
@@ -235,6 +238,8 @@ must not enable or use this action until a dedicated-origin mode exists.
   instance and obtains a valid URL.
 - Preview state is scoped to the active session plus repository-and-path
   identity and resets when that identity changes.
+- Task-owned feedback captured from a preview has an independent lifecycle and
+  remains durable when this ephemeral execution state resets.
 
 ## Responsive contract
 
@@ -326,3 +331,4 @@ continue to cover browser routing.
 
 - [ADR-2026-07-24-operator-owned-agent-launcher-settings](../../../decisions/2026-07-24-operator-owned-agent-launcher-settings.md)
 - [ADR-2026-09-05-trusted-browser-html-preview](../../../decisions/2026-09-05-trusted-browser-html-preview.md)
+- [ADR-2026-09-15-task-owned-web-preview-feedback](../../../decisions/2026-09-15-task-owned-web-preview-feedback.md)
diff --git a/scripts/architecture_lint_tests/support.py b/scripts/architecture_lint_tests/support.py
index 0f0bebecf0..f3758039d1 100644
--- a/scripts/architecture_lint_tests/support.py
+++ b/scripts/architecture_lint_tests/support.py
@@ -28,6 +28,8 @@ class ArchitectureFixture(unittest.TestCase):
     def setUp(self) -> None:
         self.tempdir = tempfile.TemporaryDirectory()
         self.repo = Path(self.tempdir.name)
+        self.test_hooks = self.repo / ".empty-git-hooks"
+        self.test_hooks.mkdir()
         self.git("init", "-q")
         self.git("config", "user.email", "test@example.com")
         self.git("config", "user.name", "Architecture Test")
@@ -38,8 +40,9 @@ class ArchitectureFixture(unittest.TestCase):
         self.tempdir.cleanup()
 
     def git(self, *args: str) -> subprocess.CompletedProcess[str]:
+        # Synthetic history must not depend on machine-wide Git hooks.
         return subprocess.run(
-            ["git", *args],
+            ["git", "-c", f"core.hooksPath={self.test_hooks}", *args],
             cwd=self.repo,
             text=True,
             capture_output=True,
diff --git a/scripts/lint-spec-files.test.py b/scripts/lint-spec-files.test.py
index bbfae3b32f..ca0e464a8c 100644
--- a/scripts/lint-spec-files.test.py
+++ b/scripts/lint-spec-files.test.py
@@ -26,6 +26,8 @@ class SpecLinterTest(unittest.TestCase):
         self.tmp = tempfile.TemporaryDirectory()
         self.addCleanup(self.tmp.cleanup)
         self.root = Path(self.tmp.name)
+        self.test_hooks = self.root / ".empty-git-hooks"
+        self.test_hooks.mkdir()
         self.config = {
             "version": 1,
             "limits": {
@@ -46,8 +48,9 @@ class SpecLinterTest(unittest.TestCase):
         return path
 
     def git(self, *args: str) -> None:
+        # Synthetic history must not depend on machine-wide Git hooks.
         subprocess.run(
-            ["git", *args],
+            ["git", "-c", f"core.hooksPath={self.test_hooks}", *args],
             cwd=self.root,
             check=True,
             capture_output=True,